ec4a958ab73fa233b4bb5cbaf68ea3486384997d53740bfa9c3307ce150a59dd[.]exe

resource
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack003/$PLUGINSDIR/InstallOptions.dll
unpack003/$SYSDIR/pthreadVC.dll

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/$TEMP/npcap_inst.exe	nsis_installer_1
static1/unpack001/$TEMP/npcap_inst.exe	nsis_installer_2
static1/unpack001/$TEMP/winpcap_inst.exe	nsis_installer_1
static1/unpack001/$TEMP/winpcap_inst.exe	nsis_installer_2
static1/unpack001/npcap_inst.exe	nsis_installer_1
static1/unpack001/npcap_inst.exe	nsis_installer_2
static1/unpack001/winpcap_inst.exe	nsis_installer_1
static1/unpack001/winpcap_inst.exe	nsis_installer_2

ec4a958ab73fa233b4bb5cbaf68ea3486384997d53740bfa9c3307ce150a59dd.exe

IMPHASH 57e98d9a5a72c8d7ad8fb7a6a58b3daf
SHA256 ec4a958ab73fa233b4bb5cbaf68ea3486384997d53740bfa9c3307ce150a59dd
MD5 655c33920fd920dc86fe9c572f1bbaba
SHA1 766af67dd9d609c1cbf56578f25b0a3bacc580e2
SHA512 e8e29eb2e9d26122d59b806a3bb7047b61f36942f34c0c883394337dc86896f71bf0cea4951525387c1eb9511624453022a0aa7e852882bbba7271c1dc2448fe
SSDEEP 393216:fuIjTX0c+rk9t2+arEhxiLFbHO1mmailtTZ0h6xZ:fuIjYcgPdHcmmaGtTZ0hC
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

53:a2:2b:d4:dc:ba:aa:e8:39:de:d2:0e:46:ca:cb:08:59:c0:ce:a5:6a:45:fe:9b:8e:ad:95:3f:c4:b5:77:aa

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,L=济南市,ST=山东省,C=CN

Chains

Mar 30, 2024

CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,L=济南市,ST=山东省,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

7c:f6:b6:88:5e:bb:f3:90:05:21:60:d2:48:8d:72:c5:d1:d2:d4:fb

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,L=济南市,ST=山东省,C=CN

Serial Number

0a:5b:05:21:b0:1f:8f:a1:fd:1e:2a:e0:34:06:d6:ef

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 19, 2022 - Aug 20, 2025

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

13096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableA CreateFileA GetFileSize GetModuleFileNameA ReadFile GetCurrentProcess CopyFileA Sleep GetTickCount GetWindowsDirectoryA GetTempPathA GetCommandLineA lstrlenA GetVersion SetErrorMode lstrcpynA ExitProcess SetCurrentDirectoryA GlobalLock CreateThread GetLastError CreateDirectoryA CreateProcessA RemoveDirectoryA GetTempFileNameA WriteFile lstrcpyA MoveFileExA lstrcatA GetSystemDirectoryA GetProcAddress GetExitCodeProcess WaitForSingleObject CompareFileTime SetFileAttributesA GetFileAttributesA GetShortPathNameA MoveFileA GetFullPathNameA SetFileTime SearchPathA CloseHandle lstrcmpiA GlobalUnlock GetDiskFreeSpaceA lstrcmpA FindFirstFileA FindNextFileA DeleteFileA SetFilePointer GetPrivateProfileStringA FindClose MultiByteToWideChar FreeLibrary MulDiv WritePrivateProfileStringA LoadLibraryExA GetModuleHandleA GlobalAlloc GlobalFree ExpandEnvironmentStringsA

user32

ScreenToClient GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard PostQuitMessage GetWindowRect EnableMenuItem CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndDialog RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx GetDC CreateDialogParamA SetTimer GetDlgItem SetWindowLongA SetForegroundWindow LoadImageA IsWindow SendMessageTimeoutA FindWindowExA OpenClipboard TrackPopupMenu AppendMenuA EndPaint DestroyWindow wsprintfA ShowWindow SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExA SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA SHFileOperationA

advapi32

AdjustTokenPrivileges RegCreateKeyExA RegOpenKeyExA SetFileSecurityA OpenProcessToken LookupPrivilegeValueA RegEnumValueA RegDeleteKeyA RegDeleteValueA RegCloseKey RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH 8c8a576201f68de1a3f26fc723b9f30f
SHA256 a1390a78533c47e55cc364e97af431117126d04a7faed49390210ea3e89dd0e1
MD5 fbe295e5a1acfbd0a6271898f885fe6a
SHA1 d6d205922e61635472efb13c2bb92c9ac6cb96da
SHA512 2cb596971e504eaf1ce8e3f09719ebfb3f6234cea5ca7b0d33ec7500832ff4b97ec2bbe15a1fbf7e6a5b02c59db824092b9562cd8991f4d027feab6fd3177b06
SSDEEP 192:yPtkiQJr7V9r3Ftr87NfwXQ6whlgi62V7i77blbTc4DI:N7Vxr8IgLgi3sVc4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10465

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/nsDialogs.dll

IMPHASH ebc2d915841be8afc8fa1ee9f6850960
SHA256 3cdf3e24c87666ed5c582b8b028c01ee6ac16d5a9b8d8d684ae67605376786ea
MD5 ab101f38562c8545a641e95172c354b4
SHA1 ec47ac5449f6ee4b14f6dd7ddde841a3e723e567
SHA512 72d4b6dc439f40b7d68b03353a748fc3ad7ed10b0401741c5030705d9b1adef856406075e9ce4f1a08e4345a16e1c759f636c38ad92a57ef369867a9533b7037
SSDEEP 96:o3W4JlD3c151V1gQoE8cxM2DjDf3GEst+Nt+jvcx4K8qndYv0PLE:o3p3ggQF8REskpxZdO0PLE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

7513

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$TEMP/npcap_inst.exe

IMPHASH 16cdca0a54bf8076dc7e57fab55dbc5b
SHA256 488ab12e28e81d0dcf3d5d996f9cb676293f6f73b39e9c99476b5a44cec2250a
MD5 fc8cb1b4677c90859af51c8c664e755d
SHA1 62f3d68f01f93c1b5b3f915a2781cd523394b944
SHA512 bbdc020bf97f75c8f63f09495e5580fcc77af342fe4866fcc12023d75d8ff73b0826c66a655b70f79588ab7a1b8eea0baf228305214a9b3ea60667799246dcaf
SSDEEP 24576:KhIZQgFuCUj2CEtEDJcw7pWA1rHDuB54I:XZ5l82CEt+JjrHCn4I
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

80:33:52:e4:67:8a:3f:cd:44:36:99:0d:5f:46:e6:18:26:d1:1b:68:37:71:35:be:c6:85:e9:f2:6a:58:12:39

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Sep 25, 2020

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

09:25:63:14:06:9e:7e:6a:88:cb:82:30:75:c0:d9:c9

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 1, 2020 - May 7, 2021

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

4

Entry point

14055

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetShortPathNameA GetFullPathNameA MoveFileA GetLastError SetCurrentDirectoryA GetFileAttributesA SearchPathA SetFileAttributesA Sleep GetTickCount CreateFileA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess SetFileTime CompareFileTime GetCommandLineA lstrlenA GetVersion SetErrorMode lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateDirectoryA CreateProcessA RemoveDirectoryA GetTempFileNameA lstrcatA GetSystemDirectoryA CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetTempPathA GetWindowsDirectoryA GetProcAddress DeleteFileA FindFirstFileA FindNextFileA FindClose SetFilePointer ReadFile WriteFile GetPrivateProfileStringA WritePrivateProfileStringA MultiByteToWideChar FreeLibrary MulDiv LoadLibraryExA GetModuleHandleA

user32

GetWindowRect EnableMenuItem GetSystemMenu ScreenToClient SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetAsyncKeyState IsDlgButtonChecked GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SystemParametersInfoA RegisterClassA EndDialog TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA wvsprintfA DispatchMessageA PeekMessageA EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA SetTimer OpenClipboard SetWindowTextA GetDC LoadImageA ShowWindow wsprintfA SendMessageTimeoutA FindWindowExA IsWindow GetDlgItem SetWindowLongA SetClipboardData EmptyClipboard DestroyWindow ExitWindowsEx SetForegroundWindow PostQuitMessage CreateDialogParamA

gdi32

SelectObject SetTextColor SetBkMode CreateFontIndirectA CreateBrushIndirect DeleteObject GetDeviceCaps SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegDeleteValueA SetFileSecurityA RegOpenKeyExA RegDeleteKeyA RegEnumValueA RegCloseKey RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_Destroy ord17 ImageList_AddMasked

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/InstallOptions.dll

IMPHASH 738dc9bb91549f627cf1953c2000e1d6
SHA256 75fca8af133756a0d36ad9b6177ef8ee01b6dd18ede216d82b2eb5f8092a84cd
MD5 d8bfba73978801ed5c291b847ae6ed0f
SHA1 afd973df6c0fd92372b787f2a06a02fa4c03b877
SHA512 62b921725c727247b96622765caa4ddec1126980e677764f9bdb5e68eae50044747f0ee99744c44b7a7253a57e3c28a2fc19a99d479787aa4944499871db92f2
SSDEEP 384:5GvdH4qMebzPY2Vijn+BEnboiLI84pj8vlHith5kCCfpGGNGb5hiX8ZpHmDS4:C6qnYYiL0EnboqsEticpkriXiR8S4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Digest

79:76:e2:23:e1:ed:ec:62:c9:50:78:71:8d:ac:be:b6:44:0c:6f:27:cb:1c:b7:74:f8:f8:fd:7f:d6:c9:8e:e9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Nov 25, 2019

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

ee:6d:f2:fc:b5:4a:8b:58:0c:72:af:81:b4:64:47:1a

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 6, 2019 - Nov 5, 2022

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 3, 2014 - Dec 2, 2029

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Aug 1, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentDirectoryA MultiByteToWideChar SetCurrentDirectoryA GetPrivateProfileStringA GetPrivateProfileIntA GetModuleHandleA lstrcmpiA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalAlloc GlobalUnlock GlobalLock

user32

GetDlgCtrlID CloseClipboard GetClipboardData MapWindowPoints LoadCursorA GetClientRect SetWindowRgn LoadIconA GetWindowLongA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow SetCursor PtInRect EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA EnableMenuItem DrawTextA GetSystemMenu OpenClipboard LoadImageA

gdi32

SetTextColor DeleteObject CombineRgn CreateRectRgn GetDIBits SelectObject CreateCompatibleDC GetObjectA

shell32

SHGetPathFromIDListA ShellExecuteA SHBrowseForFolderA SHGetDesktopFolder

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/SimpleSC.dll

SHA256 18b17999996d73fe911a8eb676c231cb0bf002174954b552f880bdabf4c78124
MD5 4a2b58bd7cab29463d9e53fcb9a252b6
SHA1 4679ba66db7989a64c41892bbb3f7cec38fb5597
SHA512 e6a69b5bb52467e7b8168a3e0ad45252b196b8eaea87b91f8d3b150545ce6bc7ee586ebe1d83da6c04203a9a9bab5f4af66759ba35b73306f7962ca5b6ff2fff
SSDEEP 1536:p/qXv1si+Xsp9MNptZ8KMT6+nMA4fx+kmA/11HWXiZ:Qv1EXZnLMT5M3x+kmu3Hgy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

2a:d4:87:31:b0:61:ac:c3:c0:e4:d7:82:5a:1d:cf:7b:ff:ef:be:b6:0d:27:13:35:99:e8:08:73:09:d8:93:72

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Nov 25, 2019

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

ee:6d:f2:fc:b5:4a:8b:58:0c:72:af:81:b4:64:47:1a

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 6, 2019 - Nov 5, 2022

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 3, 2014 - Dec 2, 2029

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Aug 1, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

0

Major OS version

4

Entry point

52320

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

47KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1024B

Virtual Size

950B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$PLUGINSDIR/SysRestore.dll

IMPHASH 85e5ccd224baa6cdcd31e3be33a1d2bc
SHA256 c470b78687c1134007977b9025ef8481ad6ffe163c8afcc5c1810df03e93c306
MD5 54630ddb77ed9a17110d955458b6b0f0
SHA1 7c80960cdeba57d3325e7894f2126b12f2ad38c8
SHA512 475fef9ccc483eaa1ec0913a8235aff12bc3a3ac9eb93c595a9046ce6409824c9f990e30582d54ba0f423355db4535816ee046f5f50ed2e8f069aa5b9b78ee9f
SSDEEP 384:0k1IeZDcLI84pj8vlHith5kC+2GNGb5hiX8ZpH6Ay:0k1VksEtifriXiR+
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

38:6c:36:9c:20:00:fb:a6:94:a3:d8:76:38:34:5d:e6:bc:5a:a3:f2:1e:c4:f8:19:a2:dd:ee:fd:ce:28:1c:c3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Nov 25, 2019

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

ee:6d:f2:fc:b5:4a:8b:58:0c:72:af:81:b4:64:47:1a

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 6, 2019 - Nov 5, 2022

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 3, 2014 - Dec 2, 2029

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Aug 1, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

0

Major OS version

6

Entry point

5040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH f2ac1ab587d5531d5f1bf76c094aef4c
SHA256 1e981423fda8f74e9a7079675c1a6fe55c716d4c0d50fb03ea482ff7500db14b
MD5 6a2f80ed640b6c2458329c2d3f8d9e3f
SHA1 c6dba02a05dbf15aa5de3ac1464bc9dce995eb80
SHA512 00d49b1874d76b150a646ac40032b34608e548cfd806642982e446619c9852a0ab5389791468651c4d51d118aad502174e7b887c2b5b6a7a3e35ddd9bd50d722
SSDEEP 384:sf6rtFRduQ1W+fG8fLI84pj8vlHith5kC+6UGNGb5hiX8ZpHhqsMu:syfuQ19+8TsEti2riXiRX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Digest

8d:21:79:58:2a:d2:fd:70:ec:a8:a7:c7:8f:49:cc:9b:25:7e:62:da:77:d9:ad:e7:bd:7a:a0:3b:cb:7f:80:9f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Nov 25, 2019

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

ee:6d:f2:fc:b5:4a:8b:58:0c:72:af:81:b4:64:47:1a

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 6, 2019 - Nov 5, 2022

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 3, 2014 - Dec 2, 2029

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Aug 1, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

0

Major OS version

4

Entry point

10512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/final.ini

SHA256 4af865b65fdba7bb5c874f3d67bfdce7eead2459a572e0681a6c067568af4902
MD5 5faa58b0398f6c4442d5cfbc616b4531
SHA1 3a60c28df9b3a846feab4d90ed34b430e1d76f61
SHA512 04fb34f2a941b488d0974fb000b36abdee7d198017c3469495a46b808c99ec89eff77871227797bc974e1c235cab8e40b8b71114609847c0c02b7477f2588704
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-header.bmp

SHA256 f22d49eec7926cde60dad056a3a9fa844327f759f38e76bad4c3119a57e37888
MD5 b514f98a3df2f23fb0fdf170fa772f5c
SHA1 24cedd88d5571b376ec26b5a652b010e117b8a10
SHA512 cbc84fb3d0af69462130584180996704fefb4c8d0468c9492ebe9b2e8f02c4ae8f0f7f7bbf9e9148e9f013e9b3209a6e93a0e1b308bc5d1b3b25260c6068e641
SSDEEP 768:raVhI0gORS1EpyfG2tn1vXLawAnOEaooxdtXK:rYK+7p5S+woojt6
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/nsExec.dll

IMPHASH 8abe046ef411de4d3e6e831b6b1ee264
SHA256 6bd24522cd139c978cc259d5612188053577ba9de46e2d77642bd4d19fc959d4
MD5 78bda400d7b80858c014fc79bd8fc49b
SHA1 f5bb0e85ba892611cf79b3c2756e87a59e1e213c
SHA512 95a1aced8deaad51ad7990b83f0e5768fab9e1c7aa64d9fd656baa850d81c0955b7989ce08a02fedbb8c9d77ec135b2a9d132effbfc0f8478a052095140c74cc
SSDEEP 384:ogrwgTzylQKaOqJVgNyYLI84pj8vlHith5kCCY4gcGNGb5hiX8ZpHC9:ogrVi9aOYgoQsEtiQgiriXiR+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

dd:bf:5f:d2:36:3b:47:5b:3a:ce:58:90:e6:4e:cd:27:2b:ad:86:df:1a:59:1e:2c:37:11:61:51:6c:28:64:04

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Nov 25, 2019

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

ee:6d:f2:fc:b5:4a:8b:58:0c:72:af:81:b4:64:47:1a

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 6, 2019 - Nov 5, 2022

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 3, 2014 - Dec 2, 2029

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Aug 1, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/options.ini

SHA256 df25cef49b32ee80f5320c44f3021e7fef78349b4c450c3e50be9bf68a1184a8
MD5 14a7380dcf0cc55cc3907c0c2a11223a
SHA1 4327dd899aeb0c9872d647756d8eeadaa7d06696
SHA512 a8c5c56363b401ca0ab329e97130cb50958c2e08b47e7cc07209587766eef32868f994a94971f433256c1912d6aabe751c14fdc01409d21dd64f2f011d3305e6
MD5 SHA1 SHA512

NSIS installer

installer

DiagReport.bat

SHA256 0843361f05255e3970ed955171c20003238756c57137fef9ac19d29fbd49f9f6
MD5 b82606a6afb3777d62e35e8d9850faed
SHA1 13b5cd6ce43346eacc6d8334a251b429ca8d30f7
SHA512 e2852b1862d9a3aaa52367ca885951e63bf519159cb5358131792c7dcfe5b3acd8f9282279af0323804f246f853ed7627c370d2ec541452995c9177bd115e9c6
MD5 SHA1 SHA512

NSIS installer

installer

DiagReport.ps1

SHA256 5ad0d8757aa797d81f8c10e2ec3838c110bccefbc6d820e0992545a8ad9e87c3
MD5 afd631b0c63f04c75b86655dd296f6b9
SHA1 d35c7409849c16580160d37304837151bc9e8296
SHA512 1aa3c7e48761d3ab6101a9a11dcff4ae7f04292171761f4e1b870ef15f49736dd2967079508cd5291c9d4219f5016288db892fc25e2a40367cb9a0325d28e3cd
SSDEEP 96:4g+14dBdsaHQCoz1OtBG7IYMGOUd8Sz13P7RZE8Ln:4x4dBdsaHQNl6WuE1r
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

FixInstall.bat

SHA256 0eef66a27fec8d6f74f1037dabdca0094c5c877606d33185fb560f26ecb08af1
MD5 6995c16f3fc3f788fd9e3e9c801f9758
SHA1 2eec9a249b77abee855de6e771ce69fa64b053ce
SHA512 2e0f6730e5a28839fc664f397e6d56db48ba1fe8ce59dca8ccc506f2c2b0ce83e548097c84d3dc2a569ee36c32ff8eceb4668394d39d07a387fdbb998d3062cc
MD5 SHA1 SHA512

NSIS installer

installer

LICENSE

SHA256 394856b08b9431dce157ad66b99da338a7fb2be993a842e3c955f4016e7ee0eb
MD5 07c3fa2b84d9b09d425f71e390733fc9
SHA1 b22ff7ca232a2d98613cdedf2047a99a7325ef06
SHA512 27d6be265c9ed148c64a0cfd0302aa43b3b9b7fb4c8c8ba23505f20b8686c6a960248397777a07a8d232c7dab1443211e20442b1879188984d399711cbf52772
SSDEEP 192:qEiJiDm7yNpQVeSp96B8EFRVUwiQQfm3+233O63p5o5Kjncadr5C:xY7uQVh96BPQwkfYB7pry
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

NpcapHelper.exe

IMPHASH 56a29ee32c45f19895b1e6f87646a0ba
SHA256 435dd3de1a0093d0e9d12c09f08a991e5511e703d5423e6931f0082a89248799
MD5 97ebc97781f7e118a8315372ee0d91d9
SHA1 09666467638d52afa3c8866d7e2cdffc53cc0af8
SHA512 419f1f76586066f68179cc0b62ee0301781b4dde46e8559d39102710ed09bf0bd19bd404c085f2543b17d0b57aa0a6113f723cff319298da89012a7e04378c9b
SSDEEP 3072:XswMo2A8lJwCLfjZ+G1ESolh+vqjLunjke6sTfiK8xHHaD:cntr3TN+hlhzunj4bt6D
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

79:64:ca:9d:a5:ab:ef:f1:c6:1f:23:ce:ce:b6:18:b0:1a:31:2a:53:77:49:3e:ec:e2:c3:de:5c:4a:03:49:26

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Sep 25, 2020

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

09:25:63:14:06:9e:7e:6a:88:cb:82:30:75:c0:d9:c9

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 1, 2020 - May 7, 2021

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

6

Entry point

6238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\nmap\Source\Repos\npcap\packetWin7\vs14\Release\NpcapHelper.pdb

kernel32

GetLastError CreateFileA CloseHandle CreateThread OpenProcess GetProcessHeap ConnectNamedPipe FlushFileBuffers CreateFileW DisconnectNamedPipe DuplicateHandle TerminateProcess WriteFile GetCurrentProcess HeapFree CreateNamedPipeA HeapAlloc ReadFile UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException GetStdHandle GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW CompareStringW LCMapStringW SetFilePointerEx GetConsoleMode ReadConsoleW HeapSize HeapReAlloc GetConsoleOutputCP DecodePointer WriteConsoleW

advapi32

IsValidSid OpenProcessToken InitializeSecurityDescriptor InitializeAcl GetLengthSid AddAccessAllowedAce GetTokenInformation SetSecurityDescriptorDacl

Packet.dll

IMPHASH c32f23f62c3e927bb603b2fec6e876ed
SHA256 f73e0d409d3df6f2d9cad9703495581d011857c301a87e01ac64147fdbe6cc81
MD5 057342374fde7c1330253b552a3fa0cc
SHA1 d3b11fbfc5b984c6daf9465fe4c31080fd14c4d5
SHA512 9e83b00caa13b7bc8b4240fb677ee78341075ff7e92812861cf57a2f2cfac4d096d222d00354028a89f71595ccf546149e537d649d7f01604b86ea8e56620cbd
SSDEEP 3072:TqZ7wW93xXY7EMRFwvokgB5btWJGgVPpV+wdG4r0Hw7clPXJT9qvduYy9RQKdnUG:O6WHXY7EM3mFXcSG25AlP5T9guYyU14b
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

bd:11:9e:5a:4c:81:db:77:d5:ca:e0:28:bf:5a:01:a7:7a:12:85:75:5a:89:90:ae:b7:25:e7:91:06:ac:90:6f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Sep 25, 2020

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

09:25:63:14:06:9e:7e:6a:88:cb:82:30:75:c0:d9:c9

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 1, 2020 - May 7, 2021

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

6

Entry point

28083

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Users\nmap\Source\Repos\npcap\packetWin7\vs14\Release\Packet.pdb

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

ws2_32

inet_pton InetPtonW

iphlpapi

GetAdaptersAddresses GetAdaptersInfo

kernel32

GlobalReAlloc InitializeCriticalSectionEx GetLastError RaiseException DecodePointer DeleteCriticalSection ReadFile GetModuleFileNameA SetNamedPipeHandleState SetLastError GetFullPathNameW WriteFile DeviceIoControl GetModuleFileNameW CreateMutexW GlobalAlloc CreateEventW MultiByteToWideChar GlobalLock CreateFileA SetEvent QueryPerformanceFrequency CloseHandle LoadLibraryW GetProcAddress GetCurrentProcessId FreeLibrary WideCharToMultiByte QueryPerformanceCounter ReleaseMutex WaitForSingleObject GlobalHandle GlobalUnlock Sleep GlobalFree GetConsoleOutputCP GetConsoleMode GetProcessHeap CreateFileW HeapSize WriteConsoleW GetSystemDirectoryW LCMapStringW FlushFileBuffers SetStdHandle GetStringTypeW SetFilePointerEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead OutputDebugStringW EnterCriticalSection LeaveCriticalSection RtlUnwind InterlockedFlushSList EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc

advapi32

QueryServiceStatus CloseServiceHandle OpenSCManagerW AllocateAndInitializeSid ControlService FreeSid StartServiceW CheckTokenMembership RegOpenKeyExA OpenServiceA RegCloseKey RegEnumKeyW RegQueryValueExA RegOpenKeyExW RegQueryValueExW

shell32

ShellExecuteExA

shlwapi

PathFileExistsA

WlanHelper.exe

IMPHASH f80d7719c04f12a0b7416e5c7e5c32e0
SHA256 ce078676bb205bac1807f5825ad065df10d636ff6fb6c1c47f851ec412ead5f4
MD5 a1f254b7c1b181df8668e52aaf531dbe
SHA1 c22f61c0fb83fb6b61dd4a73838e8be758790d2d
SHA512 33baeab4b5a173974bb228cccd5d2de23bbe63f8f7a1fe41a2f2c6b30f76330eea2c5412d328936d6ea280447b6a572b9ebc9169fc08e27b2d1f6a4f08c161c2
SSDEEP 768:J9eMY9B67z0i+vH2fvIZnJjDZXaSNgiXVqnUxYwVjMNlQnbXUf2ho:eMp7z0iCHWIZJjlXaSNjVqyYKjeOUfJ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

25:76:0c:c0:ac:80:0f:9e:5a:d3:1e:59:bc:bd:b0:8d:46:f8:a6:3e:2c:72:85:37:19:68:73:c6:32:33:03:02

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Sep 25, 2020

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

09:25:63:14:06:9e:7e:6a:88:cb:82:30:75:c0:d9:c9

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 1, 2020 - May 7, 2021

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

6

Entry point

27252

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\nmap\Source\Repos\npcap\packetWin7\vs14\Release\WlanHelper.pdb

rpcrt4

RpcStringFreeW UuidToStringW

wlanapi

WlanFreeMemory WlanEnumInterfaces WlanQueryInterface WlanOpenHandle WlanSetInterface WlanCloseHandle

kernel32

GetStdHandle SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetModuleHandleW GlobalHandle FormatMessageW GetLastError GlobalAlloc GlobalFree LoadLibraryW GetProcAddress GlobalLock LocalFree FreeLibrary WideCharToMultiByte GlobalUnlock UnhandledExceptionFilter ReadConsoleW SetConsoleTitleW IsProcessorFeaturePresent IsDebuggerPresent

msvcp140

?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z

vcruntime140

__current_exception __current_exception_context _except_handler4_common __std_exception_copy __std_exception_destroy memcpy _CxxThrowException __CxxFrameHandler3 memset memmove

api-ms-win-crt-stdio-l1-1-0

_set_fmode __stdio_common_vsprintf_s __acrt_iob_func _pclose __stdio_common_vswprintf_s feof fgetws _wpopen __p__commode __stdio_common_vfwprintf __stdio_common_vswscanf _putws

api-ms-win-crt-convert-l1-1-0

_wtoi _itow_s

api-ms-win-crt-string-l1-1-0

tolower

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _register_onexit_function _crt_atexit _invalid_parameter_noinfo_noreturn _seh_filter_exe _configure_wide_argv _initialize_wide_environment _get_initial_wide_environment _initterm _initterm_e exit _exit _set_app_type __p___argc _controlfp_s _c_exit _register_thread_local_exe_atexit_callback _wsystem _cexit terminate __p___wargv

api-ms-win-crt-heap-l1-1-0

malloc _callnewh free _set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

npcap.cat

SHA256 ba63fe527a8b0b1e9b6ddbb227ee81d446259e55cba227e7d74e7bd396a1b4a2
MD5 f12ab0ae56dd97d7d5bdc58699fc095a
SHA1 0494e1bcaf6507843a6cc3758e022613ef7e5508
SHA512 f9c51becd78fadf00aa90b81c4dc3a9c21d63f0fb4fbca62fb2e39421272e0960d05f3c72b3c5ed240a5adcab97570cefff2636c235b88108ff141f1f8a391be
SSDEEP 192:YhgvOfkbJC4bp5UEwQl/WGhYCUfeP+CjAWqnajKsTNRbx:j7bpzlnh3TP+CcWlGsJRd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

npcap.inf

SHA256 7cd24030b0373d45988e8fa07933d31967c68e645ab28ef7f93fed6de5aa380e
MD5 95f3e308d4d4439b533c0db3f69d4ce9
SHA1 a51d13dbc101ef93affb91beb2e7b4a4477f60a2
SHA512 9094c2202ec2a912d4494b5f36ec390fd42874084ae1a01cf78362b4bd855ca40377e62e73c2a29b5fbdc69e51a6c9b93e97d9fd7f67a244bc524dacaa7d2447
SSDEEP 192:M3ZVK71HTe4BMNwiyOpW0O3lv5YMNwiyOpW0O3lU7Ke1V//q/4EOOgS:eKJTe4BMNhyOXO3lv5YMNhyOXO3lU7KZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

npcap.sys

IMPHASH ad78d21533b3b7883dfc743e073ef782
SHA256 036e22eccd489713ae7f87ca8b1cf40e82968d1cfba52d2b6570944173c5c72a
MD5 1e894da10e3730d27bedaba562f0d02d
SHA1 dfc1fadf5f085a10ef5bd0e71ae93e0952668ecc
SHA512 adad97078ccf352b506881b75172c77be1a30e11ce5647f08ffc5a597b94723df7e4b7dcf221cf4f7a5a6543e4416d963b4f29f8a84004f34e07b2899148e675
SSDEEP 1536:/N1svdthKsvaYJvTBKR68TAdORovLw0WR2W9UA11OGUfUvtymw4K:/N1svdDVvaYJv9rdORR0g2WmopnK
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

f6:dd:7b:72:24:ec:c0:8d:43:fd:b3:1d:9c:4d:f9:e0:88:d8:92:83:01:dc:8b:89:29:81:77:4a:94:81:8a:ea

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 26, 2024

Digest

f6:dd:7b:72:24:ec:c0:8d:43:fd:b3:1d:9c:4d:f9:e0:88:d8:92:83:01:dc:8b:89:29:81:77:4a:94:81:8a:ea

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Sep 25, 2020

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

09:25:63:14:06:9e:7e:6a:88:cb:82:30:75:c0:d9:c9

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 1, 2020 - May 7, 2021

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:3a:6a:e3:33:70:8f:da:7a:7b:00:00:00:00:00:3a

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 11, 2020 - Mar 5, 2021

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Oct 15, 2014 - Oct 15, 2029

Minor OS version

0

Major OS version

10

Entry point

51040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\nmap\Source\Repos\npcap\packetWin7\vs14\Win10 Release\npcap.pdb

ntoskrnl.exe

RtlSetDaclSecurityDescriptor memcpy IoDeviceObjectType ZwSetValueKey ZwCreateKey RtlFreeUnicodeString ZwSetSecurityObject RtlUnwind _allmul MmBuildMdlForNonPagedPool ExfInterlockedInsertTailList KeClearEvent ExfInterlockedRemoveHeadList ExfInterlockedInsertHeadList ZwOpenKey InterlockedPopEntrySList KeResetEvent ZwClose IoCreateSymbolicLink ExEventObjectType ExInitializeLookasideListEx KeQuerySystemTime IoIsWdmVersionAvailable MmGetSystemRoutineAddress RtlGetVersion ObReferenceObjectByHandle IoDeleteSymbolicLink RtlCopyUnicodeString IoDeleteDevice RtlInitUnicodeString RtlCheckRegistryKey RtlAppendUnicodeStringToString ExDeleteLookasideListEx KeDelayExecutionThread RtlCompareMemory InterlockedPushEntrySList IofCompleteRequest ExFreePoolWithTag KefAcquireSpinLockAtDpcLevel ExAllocatePoolWithTag KefReleaseSpinLockFromDpcLevel KeInitializeSpinLock ObfDereferenceObject RtlAppendUnicodeToString IoGetRequestorProcessId RtlLengthSid RtlAddAccessAllowedAce RtlAbsoluteToSelfRelativeSD wcschr _wcsnicmp RtlCreateSecurityDescriptor SeExports RtlLengthSecurityDescriptor _snwprintf SeCaptureSecurityDescriptor RtlGetSaclSecurityDescriptor RtlGetOwnerSecurityDescriptor RtlGetGroupSecurityDescriptor RtlGetDaclSecurityDescriptor ObOpenObjectByPointer ZwQueryValueKey IoCreateDevice KeWaitForSingleObject KeInitializeEvent IoAllocateIrp IoFreeIrp KeSetEvent MmProbeAndLockPages MmUnlockPages memset MmMapLockedPagesSpecifyCache _alldiv _allrem

ndis.sys

NdisInitializeEvent NdisFreeNetBufferList NdisRetreatNetBufferListDataStart NdisFreeMdl NdisAllocateMdl NdisFSendNetBufferListsComplete NdisFIndicateReceiveNetBufferLists NdisFSendNetBufferLists NdisFDeregisterFilterDriver NdisFRegisterFilterDriver NdisFIndicateStatus NdisReleaseRWLock NdisFreeNetBufferListPool NdisAcquireRWLockRead NdisAcquireRWLockWrite NdisSetEvent NdisWaitEvent NdisFCancelOidRequest NdisFOidRequest NdisFreeRWLock NdisFOidRequestComplete NdisAdvanceNetBufferListDataStart NdisFCancelSendNetBufferLists NdisFDevicePnPEventNotify NdisResetEvent NdisAllocateNetBufferListPool NdisAllocateCloneOidRequest NdisFNetPnPEvent NdisAllocateRWLock NdisFReturnNetBufferLists NdisFSetAttributes NdisFreeCloneOidRequest NdisFreeNetBuffer NdisAllocateMemoryWithTagPriority NdisFreeMemory NdisAllocateNetBuffer NdisGetDataBuffer NdisAllocateNetBufferAndNetBufferList

fwpkclnt.sys

FwpsAllocateCloneNetBufferList0 FwpmEngineClose0 FwpmFilterAdd0 FwpmCalloutAdd0 FwpsFreeCloneNetBufferList0 FwpsCalloutRegister2 FwpmTransactionAbort0 FwpmTransactionBegin0 FwpsInjectionHandleCreate0 FwpmEngineOpen0 FwpsInjectNetworkSendAsync0 FwpsInjectionHandleDestroy0 FwpmSubLayerAdd0 FwpmTransactionCommit0 FwpsQueryPacketInjectionState0 FwpsCalloutUnregisterById0

netio.sys

WskCaptureProviderNPI WskReleaseProviderNPI WskDeregister WskRegister

hal

KeQueryPerformanceCounter KfReleaseSpinLock KfAcquireSpinLock

Name

.text

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

824B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

PAGE

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

992B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

wpcap.dll

IMPHASH 0eea9165117f4b0b41ada88aaa4d34ad
SHA256 f2a3ed0cbbfd9982695cd5b668953c8b761eb251fbed4489265474425d7bdaa8
MD5 87c03d52f9f4b2d4b7769200221fd818
SHA1 ce40ca56d43be6f04adfefc8d50fdf8a85fcff99
SHA512 f0db4860a3ddaf7fe1be05e686b8b0e46af8ee93d9fa6bb2df00fd835280e7e5475ea7aeda10cb0efebfea51cbbd84acd208aea3cdf09d722e54e9a2d1c16fad
SSDEEP 6144:GKQSMOKsxygWkzfVnU03pX5TctZSVzXmScBs4wFxqXnTgqHvXubafTRcbG86me49:BQSMOKsxZhdUkXJctZSVzXmScXSxq/uV
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

5a:31:ad:38:ad:de:88:9e:db:45:85:ac:df:86:32:40:f0:69:a2:da:c5:1f:3f:9d:83:77:80:6d:7f:3f:11:ad

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Sep 25, 2020

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

09:25:63:14:06:9e:7e:6a:88:cb:82:30:75:c0:d9:c9

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 1, 2020 - May 7, 2021

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

6

Entry point

142808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Users\nmap\Source\Repos\npcap\wpcap\build-win32\run\Release\wpcap.pdb

packet

PacketSetMinToCopy PacketCloseAdapter PacketIsDumpEnded PacketSetDumpLimits PacketSetDumpName PacketGetReadEvent PacketRequest PacketGetNetInfoEx PacketGetAdapterNames PacketSetHwFilter PacketReceivePacket PacketInitPacket PacketSendPackets PacketSendPacket PacketOpenAdapter PacketGetMonitorMode PacketSetMonitorMode PacketIsMonitorModeSupported PacketIsLoopbackAdapter PacketGetNetType PacketSetBuff PacketGetStatsEx PacketGetStats PacketSetLoopbackBehavior PacketSetBpf PacketSetReadTimeout PacketSetMode PacketGetVersion

ws2_32

ntohl socket shutdown send recv listen connect bind getnameinfo getaddrinfo setsockopt select getsockopt getsockname getpeername closesocket accept WSACleanup WSAStartup WSAGetLastError WSASetLastError getprotobyname getservbyname getservbyport gethostbyname gethostbyaddr inet_ntoa inet_addr htons freeaddrinfo htonl ntohs

kernel32

GetCurrentProcess WriteConsoleW SetEndOfFile HeapSize CreateFileW GetStringTypeW GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW GetFileSizeEx GetConsoleOutputCP FlushFileBuffers HeapReAlloc ReadConsoleW GetConsoleMode WriteFile SetFilePointerEx GetStdHandle LCMapStringW HeapFree HeapAlloc GetModuleFileNameW GetModuleHandleExW ExitProcess ReadFile GetFileType SetStdHandle CloseHandle RaiseException LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetLastError RtlUnwind FormatMessageA GetSystemDirectoryA FreeLibrary GetProcAddress LoadLibraryA GetLastError GetVersion FindClose FindFirstFileA FindNextFileA InterlockedFlushSList UnhandledExceptionFilter SetUnhandledExceptionFilter DecodePointer TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead

bpf_dump bpf_filter bpf_image bpf_validate eproto_db pcap_activate pcap_breakloop pcap_bufsize pcap_can_set_rfmon pcap_close pcap_compile pcap_compile_nopcap pcap_create pcap_createsrcstr pcap_datalink pcap_datalink_ext pcap_datalink_name_to_val pcap_datalink_val_to_description pcap_datalink_val_to_description_or_dlt pcap_datalink_val_to_name pcap_dispatch pcap_dump pcap_dump_close pcap_dump_file pcap_dump_flush pcap_dump_ftell pcap_dump_ftell64 pcap_dump_hopen pcap_dump_open pcap_dump_open_append pcap_ether_aton pcap_ether_hostton pcap_file pcap_fileno pcap_findalldevs pcap_findalldevs_ex pcap_free_datalinks pcap_free_tstamp_types pcap_freealldevs pcap_freecode pcap_get_airpcap_handle pcap_get_tstamp_precision pcap_geterr pcap_getevent pcap_getnonblock pcap_hopen_offline pcap_hopen_offline_with_tstamp_precision pcap_inject pcap_is_swapped pcap_lib_version pcap_list_datalinks pcap_list_tstamp_types pcap_live_dump pcap_live_dump_ended pcap_lookupdev pcap_lookupnet pcap_loop pcap_major_version pcap_minor_version pcap_nametoaddr pcap_nametoaddrinfo pcap_nametoeproto pcap_nametollc pcap_nametonetaddr pcap_nametoport pcap_nametoportrange pcap_nametoproto pcap_next pcap_next_etherent pcap_next_ex pcap_offline_filter pcap_oid_get_request pcap_oid_set_request pcap_open pcap_open_dead pcap_open_dead_with_tstamp_precision pcap_open_live pcap_open_offline pcap_open_offline_with_tstamp_precision pcap_parsesrcstr pcap_perror pcap_remoteact_accept pcap_remoteact_cleanup pcap_remoteact_close pcap_remoteact_list pcap_sendpacket pcap_sendqueue_alloc pcap_sendqueue_destroy pcap_sendqueue_queue pcap_sendqueue_transmit pcap_set_buffer_size pcap_set_datalink pcap_set_immediate_mode pcap_set_promisc pcap_set_rfmon pcap_set_snaplen pcap_set_timeout pcap_set_tstamp_precision pcap_set_tstamp_type pcap_setbuff pcap_setdirection pcap_setfilter pcap_setmintocopy pcap_setmode pcap_setnonblock pcap_setsampling pcap_setuserbuffer pcap_snapshot pcap_stats pcap_stats_ex pcap_statustostr pcap_strerror pcap_tstamp_type_name_to_val pcap_tstamp_type_val_to_description pcap_tstamp_type_val_to_name pcap_version pcap_wsockinit

$TEMP/pomqc3.dll

IMPHASH 227910cfacfe1c59467a7fc01c7bdff8
SHA256 4fce6d4b12971e3109092915f12a254ee1666b378de0636b799cc77443734430
MD5 f55b80b90410cd41451bd7ffa8f588cc
SHA1 c58b5ed579ce8fc7c24239fe0ecb8f74d57c4d97
SHA512 376f80915cf9eaec0e342467717441a280a6fae26dad211c722979b669ebc44f1fea0d54a12c451ab2bc74ab875e1f272846ff34508ab4ced8cd87f84b68dd03
SSDEEP 12288:GnsDMOeJQKX0p4iyOIlni66c75+M1283Pnhb1EHULGZhHU6s:GIM9Xs4iyOIw66d8fnp5qZFU6s
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

11:e1:2d:af:eb:bc:98:9e:4c:f1:72:a6:43:f4:09:13:e0:67:54:e5:50:5f:41:f9:d1:c4:39:c5:3b:16:f6:5c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 4, 2023

PE Signature issue

Digest

23:eb:9d:6a:56:38:0f:ad:b9:48:0d:b1:71:8c:5e:bc:9b:2f:08:1a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 4, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

1

Major OS version

5

Entry point

210887

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\po\trunk\modules\pomqc3\Release\pomqc3.pdb

shlwapi

wnsprintfW wvnsprintfW wvnsprintfA SHGetValueA PathFindFileNameW StrChrA SHGetValueW SHSetValueW StrCmpNIA SHSetValueA wnsprintfA SHDeleteValueA PathAppendW StrStrIA

ws2_32

WSAGetOverlappedResult setsockopt WSAGetLastError htons WSAWaitForMultipleEvents send recv connect WSASocketW WSACreateEvent WSACloseEvent closesocket WSAIoctl bind inet_ntoa inet_addr WSAStartup socket

iphlpapi

GetAdaptersInfo

dnsapi

DnsQuery_A DnsFree

kernel32

VirtualFree VirtualAlloc LoadLibraryExW FreeLibraryAndExitThread FreeLibrary GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask VirtualProtect GetNumaHighestNodeNumber DeleteTimerQueueTimer ReleaseSemaphore CreateTimerQueueTimer GetSystemDirectoryW GetThreadPriority SetThreadPriority SwitchToThread SignalObjectAndWait GetProcessAffinityMask CreateTimerQueue InitializeSListHead GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter InterlockedPopEntrySList ChangeTimerQueueTimer InterlockedPushEntrySList lstrlenW CreateEventW GetWindowsDirectoryW GetCurrentProcessId lstrcpyA lstrcpyW SetLastError GetModuleFileNameW GetCurrentThreadId lstrcmpA GetModuleHandleA CreateThread GetProcAddress ReadFile WriteFile CreateFileW Sleep CloseHandle GetLastError LoadLibraryW GetModuleHandleW CancelIo HeapFree EnterCriticalSection InterlockedFlushSList GetCurrentProcess TerminateProcess LeaveCriticalSection InitializeCriticalSection lstrlenA FindClose WaitForSingleObject GetVersionExW GetACP CreateToolhelp32Snapshot MultiByteToWideChar GetFileAttributesExW SetEvent HeapAlloc Module32FirstW GetLocalTime SetFilePointerEx GetProcessHeap WideCharToMultiByte lstrcmpiA Module32NextW GetTickCount DisableThreadLibraryCalls TerminateThread DeleteCriticalSection UnhandledExceptionFilter GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DecodePointer EncodePointer GetExitCodeThread GetCurrentThread WaitForSingleObjectEx DuplicateHandle QueryPerformanceCounter TryEnterCriticalSection QueryDepthSList UnregisterWaitEx RaiseException RtlUnwind ExitThread GetModuleHandleExW HeapReAlloc ExitProcess GetModuleFileNameA GetStdHandle GetFileType GetConsoleMode ReadConsoleW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleCP FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle WriteConsoleW HeapSize VirtualQuery

user32

MessageBoxA

advapi32

CryptReleaseContext CryptGenRandom CryptAcquireContextW

$TEMP/preinst.exe

SHA256 14fab0a64716584e787b293af4d00a11cee14f302cdf8e4a6f5c0d02691e324f
MD5 d816786cdc29119d43d2b5ac16675921
SHA1 58edbcf8ed98d6a03a1f764e1efb2f780dc6d0ec
SHA512 ebf2bf27522da5929fdaa7a5d05abe3b11030cb6d96e0dcfdb1be128b98d822e451ff1f8cdc2ee535c226b65bf45be4c7cf1eb121009bc20f88b4fae867b9862
MD5 SHA1 SHA512

NSIS installer

installer

$TEMP/setuphlpr.dll

IMPHASH 1e9f056e1466e07b04362d71a93cdc8d
SHA256 c9bfcea372292fbd29f5a5f6cb51f97143d80e036133830fcb74f0994de51050
MD5 5b8659339fb6f998f25f3d7055b90a8c
SHA1 f28ec774744fbd6e2fc9f594bd4d31ef2adb8276
SHA512 37515fee58d2b2df3f3e9d270ec9d4f83f49333411a41c5a7d0514a5745c747ea5d79de2bffc543a2d54124ac49476805d99c18dc9ec0550be538eb9ecac3d99
SSDEEP 6144:yHLpnU4NBjqLzHNDJzB+cjoLq+OAMGsGSU:yHLpU4q9+cjo2+FL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

ee:fe:44:da:d0:26:42:89:92:2c:d4:5a:63:c7:91:7a:d8:8d:53:68:d2:6a:2a:de:e9:82:6e:18:25:f4:dc:a4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Dec 28, 2023

PE Signature issue

Digest

a0:e2:f8:86:0d:55:53:7b:8e:25:b7:00:d9:02:58:0e:50:e3:6a:7d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Dec 28, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

95271

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\deploy\client\setuphlpr\Release\setuphlpr.pdb

kernel32

LocalAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CreateEventW DeleteFileW DisableThreadLibraryCalls MoveFileW GetModuleFileNameW lstrcpynW CloseHandle lstrcmpiW Sleep LoadLibraryW SetFilePointer GetCommandLineW GetWindowsDirectoryW CreateThread OutputDebugStringW GetFileSize lstrcpyW LocalFree Module32NextW GetModuleHandleW FreeLibrary ExitProcess GetLastError HeapFree HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind HeapCreate HeapDestroy VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetProcAddress WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount InterlockedExchange LoadLibraryA GetLocaleInfoW GetLocaleInfoA HeapSize GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale CreateFileA FindFirstFileW lstrlenA VirtualQuery CreateProcessW GlobalLock WaitForSingleObject GetLogicalDrives InitializeCriticalSection OpenProcess GetVersionExW GetExitCodeProcess GetFileAttributesW ReadFile CreateFileW lstrcmpW lstrlenW GlobalUnlock GetCurrentDirectoryW FindClose GetLocalTime Process32FirstW QueryDosDeviceW Module32FirstW Process32NextW GetModuleHandleA lstrcatW FindNextFileW CreateToolhelp32Snapshot GetFileAttributesExW OpenEventW WriteConsoleW

user32

SendDlgItemMessageW GetDlgItem SetFocus DialogBoxIndirectParamW MessageBoxW IsWindow EnumChildWindows SetDlgItemTextW GetWindowLongW GetWindowRect SetWindowLongW EndDialog GetDesktopWindow SendMessageTimeoutW SendMessageW MoveWindow GetForegroundWindow FindWindowW LoadIconW IsWindowEnabled PostMessageW

iphlpapi

GetAdaptersInfo

shlwapi

wnsprintfW PathFileExistsW PathFindFileNameW StrStrIW PathAppendW PathRemoveExtensionW wvnsprintfW PathIsDirectoryW PathRemoveFileSpecW SHSetValueA StrChrW SHGetValueW StrCmpNIW SHSetValueW StrRChrW wnsprintfA wvnsprintfA SHDeleteValueA

ws2_32

ntohl WSAStartup

psapi

GetProcessImageFileNameW

dnsapi

DnsFree DnsQuery_A

advapi32

SetSecurityDescriptorDacl AllocateAndInitializeSid SetEntriesInAclW CloseServiceHandle OpenProcessToken DeleteService OpenSCManagerW OpenServiceW RegCreateKeyExW InitializeSecurityDescriptor LookupPrivilegeValueW RegCloseKey AdjustTokenPrivileges RegOpenKeyExW RegSetKeySecurity FreeSid

shell32

CommandLineToArgvW ord165

ole32

CreateStreamOnHGlobal CoInitializeEx CoCreateGuid CoCreateInstance GetHGlobalFromStream

oleaut32

SysFreeString VariantChangeType VariantInit VariantClear SysAllocString

$TEMP/winpcap_inst.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 fc4623b113a1f603c0d9ad5f83130bd6de1c62b973be9892305132389c8588de
MD5 a11a2f0cfe6d0b4c50945989db6360cd
SHA1 e2516fcd1573e70334c8f50bee5241cdfdf48a00
SHA512 2652d84eb91ca7957b4fb3ff77313e5dae978960492669242df4f246296f1bedaa48c0d33ffb286b2859a1b86ef5460060b551edca597b4ec60ee08676877c70
SSDEEP 24576:UBOldyR6ORWsaM2QROxa6jsqUENfJjNK/CG6niqiL:2KzqWsayROxa6QDENuaG+ifL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

be:72:38:f0:32:8c:16:3b:2e:d9:97:ba:f7:42:66:0c:3b:6b:63:df

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Riverbed Technology\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Marketing,O=Riverbed Technology\, Inc.,L=San Francisco,ST=California,C=US

Chains

Mar 1, 2013

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

Serial Number

61:19:93:e4:00:00:00:00:00:1c

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 22, 2011 - Feb 22, 2021

Subject

CN=Riverbed Technology\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Marketing,O=Riverbed Technology\, Inc.,L=San Francisco,ST=California,C=US

Serial Number

14:02:ae:ef:0d:31:be:74:3e:73:f6:a7:a9:60:c4:f4

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 26, 2012 - Oct 27, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

4

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
MD5 325b008aec81e5aaa57096f05d4212b5
SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/bootOptions.ini

SHA256 f6f2e247226ab06e9b56ae2d10ccd02d9298abccac85c56abfa19e5587446d54
MD5 9f64b7e590b32b5ba414f4301fb8b3d5
SHA1 8d44c84b3a78b4fd8b2dcf8d3d49400e47b41840
SHA512 513251b52da94d56e505ed8b8bac07b6f5e325561c6c6865c424bd2aecb437e69d9a8c91a1595deb2293f1df166b9712e8807a57506f80889bc5c2e1afb6d5f7
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-header.bmp

SHA256 c0e284fde834fe8a6f90504dba7abff25b1e7dd4611483341203fd3efc5de8a6
MD5 d8f59a707b2a5000c7903595eddc3d48
SHA1 e86239fe1dc3cfdbec6006817160eb5f1fc92bca
SHA512 91e28a685733620832d3851d7f3eee36495f2728610bd6c66f305cdda039f75ab8499d0e51e64afa018c221a728889503db2fc7c84cf9599a61b68951686b048
SSDEEP 192:UdCd/28k2hZrlQ+jP3/PGs/ZkTnSQpuWE:UD8jLlQ+jP3///ZUSJ5
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$SYSDIR/Packet.dll

IMPHASH 19fa7010cacd16ef346ea8bbc2e8b999
SHA256 cd9f4fb077c25013226e0883f9ae02e9ced9b71f07637081e55ae70fd0788f29
MD5 2ce150705bbeb30e6c8059cc530043aa
SHA1 3d8615f9d8f8f7a5d78b3c06bf746948b9ef6ba5
SHA512 9f7573ca679ef0cc0e1d815f605a399e87f7a046e3e51970d2c7597329b19e118cc2da7240ee854e13e31582f12bab8be506d1612ac81d5b453ef366d4674dcf
SSDEEP 1536:zbDKMXRC2wKDDuDirGfqs97WcETlsxtl2o+V:PDKMtfuysAcETlsxtco8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

86:ca:55:b7:f9:4a:c7:29:69:93:49:93:a7:2a:43:b4:e9:30:f5:a5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Riverbed Technology\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Marketing,O=Riverbed Technology\, Inc.,L=San Francisco,ST=California,C=US

Chains

Mar 1, 2013

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

Serial Number

61:19:93:e4:00:00:00:00:00:1c

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 22, 2011 - Feb 22, 2021

Subject

CN=Riverbed Technology\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Marketing,O=Riverbed Technology\, Inc.,L=San Francisco,ST=California,C=US

Serial Number

14:02:ae:ef:0d:31:be:74:3e:73:f6:a7:a9:60:c4:f4

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 26, 2012 - Oct 27, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

4

Entry point

26704

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\releases\winpcap_4_1_3\winpcap\packetNtx\Dll\Project\Release\x86\Packet.pdb

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

npptools

SetBoolInBlob DestroyBlob CreateBlob CreateNPPInterface GetNPPBlobTable

ws2_32

inet_addr

iphlpapi

GetAdaptersInfo

kernel32

GlobalFree GlobalAlloc GlobalHandle ReleaseMutex GlobalLock WaitForSingleObject GlobalUnlock QueryPerformanceCounter CreateEventW SetEvent DeviceIoControl GetModuleHandleW WriteFile QueryPerformanceFrequency GetSystemDirectoryW WideCharToMultiByte CloseHandle GetVersion GetStringTypeW ReadFile GetFullPathNameW GetModuleFileNameW MultiByteToWideChar CreateFileA GetLastError SetLastError CreateMutexW GetProcAddress InitializeCriticalSection Sleep GetVersionExW LeaveCriticalSection EnterCriticalSection ResetEvent DeleteCriticalSection OutputDebugStringA GetSystemTimeAsFileTime GetLocaleInfoA HeapSize FlushFileBuffers LoadLibraryW GetCurrentThreadId GetStringTypeA LCMapStringW LCMapStringA WriteConsoleW GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleA ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree GetTickCount GetCurrentProcessId SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA VirtualAlloc HeapReAlloc RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP

advapi32

QueryServiceStatus StartServiceW OpenServiceA RegOpenKeyExA CreateServiceA ControlService OpenSCManagerW RegEnumKeyW RegCloseKey RegOpenKeyExW RegQueryValueExW RegQueryValueExA CloseServiceHandle

ole32

CoUninitialize CoInitializeEx CoInitialize

$SYSDIR/pthreadVC.dll

IMPHASH 90ee61357770484e2d085958b94141a3
SHA256 99c61abf41c3aec38cab3ed6270adbca9a247bbf5f9aa9d29ecb0659a5527f48
MD5 f04a90f917ba10ae2dcbe859870f4dea
SHA1 6668ebe373ce58c33017697c477557653427e626
SHA512 aec29301b9ce311b27f1590b0e0c4121acdc183a30b570e087d77b7035684f02a6dfbdee950c37f3023b32e2ea5a075a5fbe6d18a2804da9490d4959733bb516
SSDEEP 384:hSvfC8Vv0Vy7ojuq7GQcdWTc4zU+GFronD/yD5rBEe0kiH32Jp9AhOW:wt+TGQcdWYdMG59EeJiH3YzW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

25783

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

pthreadCancelableTimedWait pthreadCancelableWait pthread_attr_destroy pthread_attr_getdetachstate pthread_attr_getinheritsched pthread_attr_getschedparam pthread_attr_getschedpolicy pthread_attr_getscope pthread_attr_getstackaddr pthread_attr_getstacksize pthread_attr_init pthread_attr_setdetachstate pthread_attr_setinheritsched pthread_attr_setschedparam pthread_attr_setschedpolicy pthread_attr_setscope pthread_attr_setstackaddr pthread_attr_setstacksize pthread_barrier_destroy pthread_barrier_init pthread_barrier_wait pthread_barrierattr_destroy pthread_barrierattr_getpshared pthread_barrierattr_init pthread_barrierattr_setpshared pthread_cancel pthread_cond_broadcast pthread_cond_destroy pthread_cond_init pthread_cond_signal pthread_cond_timedwait pthread_cond_wait pthread_condattr_destroy pthread_condattr_getpshared pthread_condattr_init pthread_condattr_setpshared pthread_create pthread_delay_np pthread_detach pthread_equal pthread_exit pthread_getconcurrency pthread_getschedparam pthread_getspecific pthread_getw32threadhandle_np pthread_join pthread_key_create pthread_key_delete pthread_kill pthread_mutex_destroy pthread_mutex_init pthread_mutex_lock pthread_mutex_timedlock pthread_mutex_trylock pthread_mutex_unlock pthread_mutexattr_destroy pthread_mutexattr_getkind_np pthread_mutexattr_getpshared pthread_mutexattr_gettype pthread_mutexattr_init pthread_mutexattr_setkind_np pthread_mutexattr_setpshared pthread_mutexattr_settype pthread_num_processors_np pthread_once pthread_rwlock_destroy pthread_rwlock_init pthread_rwlock_rdlock pthread_rwlock_timedrdlock pthread_rwlock_timedwrlock pthread_rwlock_tryrdlock pthread_rwlock_trywrlock pthread_rwlock_unlock pthread_rwlock_wrlock pthread_rwlockattr_destroy pthread_rwlockattr_getpshared pthread_rwlockattr_init pthread_rwlockattr_setpshared pthread_self pthread_setcancelstate pthread_setcanceltype pthread_setconcurrency pthread_setschedparam pthread_setspecific pthread_spin_destroy pthread_spin_init pthread_spin_lock pthread_spin_trylock pthread_spin_unlock pthread_testcancel pthread_timechange_handler_np pthread_win32_process_attach_np pthread_win32_process_detach_np pthread_win32_thread_attach_np pthread_win32_thread_detach_np ptw32_get_exception_services_code ptw32_pop_cleanup ptw32_push_cleanup sched_get_priority_max sched_get_priority_min sched_getscheduler sched_setscheduler sched_yield sem_close sem_destroy sem_getvalue sem_init sem_open sem_post sem_post_multiple sem_timedwait sem_trywait sem_unlink sem_wait

$SYSDIR/wpcap.dll

IMPHASH 10dce091d63eed72dc0010ebc8838f6a
SHA256 b967e4dce952f9232592e4c1753516081438702a53424005642700522055dbc9
MD5 4633b298d57014627831ccac89a2c50b
SHA1 e5f449766722c5c25fa02b065d22a854b6a32a5b
SHA512 29590fa5f72e6a36f2b72fc2a2cca35ee41554e13c9995198e740608975621142395d4b2e057db4314edf95520fd32aae8db066444d8d8db0fd06c391111c6d3
SSDEEP 6144:E4yIm5rC9WNWwKcNBSCiLvK8+jKgZBwIbg2:jyIm59WwpqCuEKIwv2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

cf:62:51:f0:27:45:ec:8f:43:5a:c8:f8:39:3a:ab:b8:9f:42:52:b7

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Riverbed Technology\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Marketing,O=Riverbed Technology\, Inc.,L=San Francisco,ST=California,C=US

Chains

Mar 1, 2013

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

Serial Number

61:19:93:e4:00:00:00:00:00:1c

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 22, 2011 - Feb 22, 2021

Subject

CN=Riverbed Technology\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Marketing,O=Riverbed Technology\, Inc.,L=San Francisco,ST=California,C=US

Serial Number

14:02:ae:ef:0d:31:be:74:3e:73:f6:a7:a9:60:c4:f4

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 26, 2012 - Oct 27, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

4

Entry point

124026

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\releases\winpcap_4_1_3\winpcap\wpcap\PRJ\Release\x86\wpcap.pdb

ws2_32

WSACleanup ntohl gethostbyname htons gethostbyaddr WSAGetLastError htonl getservbyname inet_addr getservbyport inet_ntoa WSASetLastError getprotobyname accept closesocket getpeername getsockopt setsockopt getsockname select WSAStartup shutdown connect listen send socket bind ntohs recv

packet

PacketGetNetInfoEx PacketGetAdapterNames PacketSetMinToCopy PacketSetLoopbackBehavior PacketSetHwFilter PacketGetStats PacketSendPacket PacketSetReadTimeout PacketReceivePacket PacketSetMode PacketOpenAdapter PacketSetBpf PacketAllocatePacket PacketInitPacket PacketCloseAdapter PacketFreePacket PacketGetNetType PacketSetBuff PacketGetVersion PacketSetDumpName PacketSendPackets PacketIsDumpEnded PacketGetReadEvent PacketSetDumpLimits PacketGetAirPcapHandle PacketGetStatsEx

kernel32

SetUnhandledExceptionFilter SetEndOfFile WriteConsoleW GetConsoleOutputCP WriteConsoleA CreateFileA GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA ReadFile MultiByteToWideChar FlushFileBuffers GetConsoleMode GetConsoleCP WideCharToMultiByte HeapSize SetFilePointer CloseHandle VirtualAlloc VirtualFree HeapCreate HeapDestroy TlsFree TlsSetValue TlsAlloc TlsGetValue IsValidCodePage GetOEMCP GetACP InterlockedDecrement InterlockedIncrement GetCPInfo GetModuleFileNameA WriteFile DeleteCriticalSection GetLastError GetSystemDirectoryA FreeLibrary GetProcAddress EnterCriticalSection LoadLibraryA LeaveCriticalSection GetVersion FindNextFileA FormatMessageA FindFirstFileA FindClose InterlockedExchange SetLastError InterlockedCompareExchange Sleep InitializeCriticalSection UnhandledExceptionFilter HeapFree HeapAlloc RtlUnwind SetStdHandle GetFileType HeapReAlloc GetModuleHandleA ExitProcess GetCurrentThreadId GetCommandLineA GetVersionExA GetProcessHeap TerminateProcess GetCurrentProcess IsDebuggerPresent SetHandleCount GetStdHandle GetStartupInfoA

bpf_dump bpf_filter bpf_image bpf_validate endservent eproto_db getservent install_bpf_program pcap_activate pcap_breakloop pcap_close pcap_compile pcap_compile_nopcap pcap_create pcap_createsrcstr pcap_datalink pcap_datalink_name_to_val pcap_datalink_val_to_description pcap_datalink_val_to_name pcap_dispatch pcap_dump pcap_dump_close pcap_dump_file pcap_dump_flush pcap_dump_ftell pcap_dump_open pcap_file pcap_fileno pcap_findalldevs pcap_findalldevs_ex pcap_free_datalinks pcap_freealldevs pcap_freecode pcap_get_airpcap_handle pcap_geterr pcap_getevent pcap_getnonblock pcap_hopen_offline pcap_is_swapped pcap_lib_version pcap_list_datalinks pcap_live_dump pcap_live_dump_ended pcap_lookupdev pcap_lookupnet pcap_loop pcap_major_version pcap_minor_version pcap_next pcap_next_etherent pcap_next_ex pcap_offline_filter pcap_offline_read pcap_open pcap_open_dead pcap_open_live pcap_open_offline pcap_parsesrcstr pcap_perror pcap_read pcap_remoteact_accept pcap_remoteact_cleanup pcap_remoteact_close pcap_remoteact_list pcap_sendpacket pcap_sendqueue_alloc pcap_sendqueue_destroy pcap_sendqueue_queue pcap_sendqueue_transmit pcap_set_buffer_size pcap_set_datalink pcap_set_promisc pcap_set_snaplen pcap_set_timeout pcap_setbuff pcap_setdirection pcap_setfilter pcap_setmintocopy pcap_setmode pcap_setnonblock pcap_setsampling pcap_setuserbuffer pcap_snapshot pcap_stats pcap_stats_ex pcap_strerror wsockinit

WinPcapInstall.dll

IMPHASH ad1fff2efc5a1aa2884d5c780a51aa99
SHA256 d9f4cd9f0e1bc9a138fb4da6f83c92c3e86eb3de4f988d5943d75c9b1dc6bb9d
MD5 e78291558cb803dfd091ad8fb56feecc
SHA1 4bde2f87e903fe8d3bd80179c5584cec7a8cbdc4
SHA512 042b96bc2c0e6d8b6e2730426938eb7400fd833be8a108a4942f559fedefabc35fd5dcb7ea1898d377b4382c0a9af8eeeebd663a4c852c706e3bd168c1f1f62f
SSDEEP 1536:s7xjrG5m+619YG7L2xo8JfmL4iMtgLZtAeYjFH:s7s27yaL4kVtAeE9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

26:4b:32:ba:02:ff:cd:d6:6e:bf:35:a6:b9:a2:17:e5:f8:50:5e:5e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Riverbed Technology\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Marketing,O=Riverbed Technology\, Inc.,L=San Francisco,ST=California,C=US

Chains

Mar 1, 2013

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

Serial Number

61:19:93:e4:00:00:00:00:00:1c

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 22, 2011 - Feb 22, 2021

Subject

CN=Riverbed Technology\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Marketing,O=Riverbed Technology\, Inc.,L=San Francisco,ST=California,C=US

Serial Number

14:02:ae:ef:0d:31:be:74:3e:73:f6:a7:a9:60:c4:f4

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 26, 2012 - Oct 27, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

4

Entry point

10944

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\releases\winpcap_4_1_3\winpcap\install\WinPcap Installer Helper\Release\x86\WinPcapInstall.pdb

kernel32

LoadLibraryA GetProcAddress GetCurrentProcess LoadLibraryExA GetLastError Sleep FormatMessageA FreeLibrary GetModuleHandleA LocalFree GetCurrentThreadId GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent CloseHandle EnterCriticalSection LeaveCriticalSection RtlUnwind SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc SetStdHandle WriteFile GetConsoleCP GetConsoleMode FlushFileBuffers CreateFileA InitializeCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetFilePointer SetEndOfFile ReadFile LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

advapi32

OpenSCManagerA ChangeServiceConfigA StartServiceA CreateServiceA DeleteService CloseServiceHandle OpenServiceA ControlService

ole32

CoUninitialize CoInitializeEx CoCreateInstance

rpcapd.exe

IMPHASH 2b9e73ff502840fe6b381682c42d43cf
SHA256 52360f17c9c70c9cea3316560b40c4d89fd705ed7e6b6088c99fc54d4cc35eb5
MD5 83a6c2cafe236652d1559640594a0ea8
SHA1 c99aa678f387c00c4470fa3cd7b037d26720960d
SHA512 4f6981c4e8d64311087795e9639516409bf80ebca5c7f25af1fb436aaccf90f24617ecd3f95b63558981b12bc0e5eeacf120fea7be5e5fa05ecf3afa4f9f799b
SSDEEP 3072:mL7m5RTfrUna0m2BeIIgJ3155FulLfbt/6:C7m5RTEaseIH515qfA
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

61:6f:43:de:5d:fa:a5:33:da:d2:7b:2b:a1:91:56:48:59:00:98:7b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Riverbed Technology\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Marketing,O=Riverbed Technology\, Inc.,L=San Francisco,ST=California,C=US

Chains

Mar 1, 2013

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

Serial Number

61:19:93:e4:00:00:00:00:00:1c

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 22, 2011 - Feb 22, 2021

Subject

CN=Riverbed Technology\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Marketing,O=Riverbed Technology\, Inc.,L=San Francisco,ST=California,C=US

Serial Number

14:02:ae:ef:0d:31:be:74:3e:73:f6:a7:a9:60:c4:f4

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 26, 2012 - Oct 27, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

4

Entry point

36901

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\releases\winpcap_4_1_3\winpcap\wpcap\libpcap\rpcapd\Release\x86\rpcapd.pdb

wpcap

install_bpf_program pcap_compile pcap_open_offline pcap_create pcap_open_live bpf_validate pcap_findalldevs pcap_strerror pcap_freealldevs pcap_geterr pcap_close pcap_setfilter pcap_stats pcap_next_ex

ws2_32

gethostbyaddr closesocket WSASetLastError getsockname htonl inet_addr getservbyname ntohl inet_ntoa ntohs accept htons connect WSAStartup shutdown WSACleanup recv bind socket send listen getservbyport select gethostbyname getpeername WSAGetLastError

pthreadvc

pthread_attr_init pthread_attr_setdetachstate pthread_exit pthread_cancel pthread_attr_destroy pthread_setcancelstate pthread_setcanceltype pthread_create

packet

PacketSetMinToCopy PacketSetLoopbackBehavior

kernel32

GetConsoleOutputCP WriteConsoleA HeapSize FlushFileBuffers SetStdHandle CreateFileA ReadFile GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA GetConsoleMode GetConsoleCP SetFilePointer GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA InitializeCriticalSection WriteConsoleW RtlUnwind GetStartupInfoA GetFileType SetHandleCount GetModuleFileNameA GetStdHandle WriteFile HeapReAlloc VirtualAlloc DeleteCriticalSection VirtualFree HeapCreate HeapDestroy GetCurrentThreadId SetLastError TlsFree GetSystemDirectoryA FormatMessageA GetLastError FreeLibrary GetProcAddress CloseHandle Sleep LoadLibraryA TlsSetValue TlsAlloc SetEndOfFile SetConsoleCtrlHandler HeapFree HeapAlloc GetModuleHandleA ExitProcess EnterCriticalSection LeaveCriticalSection GetCommandLineA GetVersionExA GetProcessHeap TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue

user32

MessageBoxA

advapi32

StartServiceCtrlDispatcherA SetServiceStatus LogonUserA ImpersonateLoggedOnUser RegisterServiceCtrlHandlerA

actmon32.dll

IMPHASH 6f223d9fc396f52c1763f94ce11e4d68
SHA256 cca05d04e591d355c6e5a2df2049fb18cf4143bf07bd4b025f3ee129c652c664
MD5 94491a05fed751707ce2caf3c0be6c51
SHA1 a502f0b7e7647122f18caee35fd06c0fa66cc5ee
SHA512 ba6531bd4b4801757b53b12dbeb164862e333aeed75891bc6c0334656ffcb4894fe0d511dec2fe02a94299d9de9b774ef4183934e59db231f2313278e440d128
SSDEEP 12288:k9fv1N4WrKMpNfYbS8gkebZ/m9856LuiWw0EL/GdbnENtM:k9fv1NEM8S8gBN/m9ZvWw0EL+d7E3M
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

25:34:f5:1d:ae:6b:32:c1:55:47:59:e5:77:d8:c1:3a:1e:42:58:e5:dd:2b:f8:9c:ab:e2:f9:a4:0a:c1:c2:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 27, 2024

PE Signature issue

Digest

67:1a:48:3b:be:34:0a:97:81:eb:95:66:25:b4:66:96:9c:aa:a1:a4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 27, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

1

Major OS version

5

Entry point

194216

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\po\trunk\modules\actmon\Release\actmon32.pdb

kernel32

GetSystemInfo LoadLibraryExA lstrcmpW CopyFileW lstrcpynA GetFileAttributesExW InitializeCriticalSection LeaveCriticalSection lstrcpynW EnterCriticalSection DisableThreadLibraryCalls OutputDebugStringW lstrcmpA GetModuleFileNameW CreateThread GetTickCount lstrcmpiW CreateEventA lstrcmpiA GetProcAddress GetLocalTime CloseHandle DeleteFileW Sleep WriteConsoleW HeapSize SetStdHandle GetConsoleCP FlushFileBuffers DecodePointer GetConsoleMode HeapReAlloc FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExA EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW GetFileType GetStdHandle GetStringTypeW GetModuleFileNameA ExitProcess GetModuleHandleExW ExitThread RtlUnwind RaiseException UnregisterWaitEx QueryDepthSList InterlockedFlushSList InterlockedPushEntrySList InterlockedPopEntrySList ReleaseSemaphore VirtualProtect VirtualFree VirtualAlloc LoadLibraryExW FreeLibraryAndExitThread FreeLibrary GetThreadTimes EncodePointer UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation GetModuleHandleA GetVersionExW lstrlenA TryEnterCriticalSection DeleteCriticalSection GetCurrentThreadId DuplicateHandle WaitForSingleObjectEx GetCurrentProcess GetCurrentThread QueryPerformanceCounter SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead ReadFile QueryDosDeviceW GetLogicalDrives FindFirstFileW HeapFree FindNextFileW lstrlenW WriteFile FindClose CreateFileW GetFileAttributesW OpenEventW GetACP OpenProcess CreateToolhelp32Snapshot MultiByteToWideChar GetLastError Process32NextW SetEvent FileTimeToSystemTime lstrcatW lstrcpyA Process32FirstW LoadLibraryW HeapAlloc Module32FirstW GetCurrentDirectoryW SetFilePointerEx GetProcessHeap SystemTimeToFileTime lstrcpyW Module32NextW VirtualQuery GetWindowsDirectoryW CreateTimerQueue SignalObjectAndWait SwitchToThread SetThreadPriority GetThreadPriority

user32

GetLastInputInfo IsWindow CloseDesktop GetForegroundWindow OpenInputDesktop GetUserObjectInformationA GetWindowThreadProcessId GetWindowTextW GetCursorPos ReleaseDC InvalidateRect ReleaseCapture GetDesktopWindow MoveWindow DialogBoxParamW SendMessageTimeoutW GetParent GetDlgItem GetMessageW DefWindowProcW DispatchMessageA CreateWindowExW CallNextHookEx RegisterClassExW TranslateMessage LoadIconW SetWindowsHookExW UpdateWindow GetWindowTextLengthW GetWindowRect GetDC SetWindowPos SendMessageW EndDialog SetWindowTextW WindowFromPoint RedrawWindow CreateIconIndirect LoadBitmapA LoadCursorW GetClassNameW SetCapture GetWindowDC SetCursor

gdi32

GetPixel GetStockObject SetPixel DeleteDC SelectObject CreateCompatibleBitmap LineTo GetObjectW MoveToEx SetROP2 CreateCompatibleDC

ole32

CoCreateGuid CoCreateInstance CoInitialize

oleaut32

SafeArrayGetVartype VariantClear SysAllocString VariantInit

shlwapi

PathFileExistsW PathFindFileNameW wnsprintfW PathAppendW StrStrIW PathIsDirectoryW StrNCatW wvnsprintfA wnsprintfA StrCmpNIA SHSetValueW wvnsprintfW StrChrW SHGetValueW StrChrA PathRemoveFileSpecW StrCmpNW StrCmpNIW SHDeleteKeyW

version

VerQueryValueW GetFileVersionInfoW

psapi

GetProcessImageFileNameW

advapi32

RegCreateKeyExW RegCloseKey RegOpenKeyW RegOpenKeyExW GetUserNameW

shell32

ord165

actmon64.dll

IMPHASH c11383c4b26e4c4d70e443431c76888c
SHA256 633cbb883bc40647fad5b0d6fb5f1dfbc624ec7779a6684a02e465e16fc2d552
MD5 f233b81a84b8915c62a495dfb7125000
SHA1 1bda81e391fb3b23edc29664ec7fb346a98e8854
SHA512 368488df1d1932bb765862add1febc2c0878bca0feb5d77a42c7a7043880a307b0e8bd1cc16ab2671725f1e886cc0c9cad1833ab3945d480e97c05fb4728caa9
SSDEEP 24576:eWpnBCjM81bHgmm1Q0iltnX9+OGCuB3D2A:ZpncaNilJ9+Oq9D2A
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

05:4a:13:5b:ae:c2:54:be:9a:02:3d:56:d0:98:79:00:f0:30:9c:96:a2:41:9b:63:40:e7:fe:f6:f2:5c:2d:c5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 27, 2024

PE Signature issue

Digest

66:28:92:62:43:8b:a3:3d:d4:73:39:1e:90:55:6d:91:cc:17:a2:2e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 27, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

285080

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\po\trunk\modules\actmon\Release\actmon64.pdb

kernel32

GetSystemInfo LoadLibraryExA DecodePointer lstrcmpW CopyFileW lstrcpynA GetFileAttributesExW InitializeCriticalSection LeaveCriticalSection lstrcpynW EnterCriticalSection DisableThreadLibraryCalls OutputDebugStringW lstrcmpA GetModuleFileNameW CreateThread GetTickCount lstrcmpiW CreateEventA lstrcmpiA GetProcAddress GetLocalTime CloseHandle DeleteFileW Sleep WriteConsoleW HeapSize SetStdHandle GetConsoleCP FlushFileBuffers GetConsoleMode HeapReAlloc FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExA EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW GetFileType GetStdHandle GetStringTypeW GetModuleFileNameA ExitProcess GetModuleHandleExW ExitThread RtlUnwindEx RaiseException RtlPcToFileHeader UnregisterWaitEx QueryDepthSList InterlockedFlushSList InterlockedPushEntrySList InterlockedPopEntrySList ReleaseSemaphore VirtualProtect VirtualFree VirtualAlloc LoadLibraryExW FreeLibraryAndExitThread FreeLibrary GetThreadTimes EncodePointer UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer GetModuleHandleA GetVersionExW lstrlenA TryEnterCriticalSection DeleteCriticalSection GetCurrentThreadId DuplicateHandle WaitForSingleObjectEx GetCurrentProcess GetCurrentThread QueryPerformanceCounter SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW WideCharToMultiByte SetEvent ResetEvent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetCurrentProcessId InitializeSListHead ReadFile QueryDosDeviceW GetLogicalDrives FindFirstFileW HeapFree FindNextFileW lstrlenW WriteFile FindClose CreateFileW GetFileAttributesW OpenEventW K32GetProcessImageFileNameW GetACP OpenProcess CreateToolhelp32Snapshot MultiByteToWideChar GetLastError Process32NextW FileTimeToSystemTime lstrcatW lstrcpyA Process32FirstW LoadLibraryW HeapAlloc Module32FirstW GetCurrentDirectoryW SetFilePointerEx GetProcessHeap SystemTimeToFileTime lstrcpyW Module32NextW VirtualQuery GetWindowsDirectoryW CreateTimerQueue SignalObjectAndWait SwitchToThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer

user32

InvalidateRect ReleaseDC GetCursorPos GetWindowTextW GetWindowThreadProcessId GetUserObjectInformationA GetLastInputInfo IsWindow CloseDesktop GetForegroundWindow OpenInputDesktop ReleaseCapture GetDesktopWindow MoveWindow SendMessageTimeoutW DialogBoxParamW GetParent GetDlgItem GetMessageW DefWindowProcW DispatchMessageA CreateWindowExW CallNextHookEx RegisterClassExW TranslateMessage LoadIconW SetWindowsHookExW UpdateWindow GetWindowTextLengthW GetWindowRect GetDC SetWindowPos SendMessageW EndDialog SetWindowTextW WindowFromPoint RedrawWindow CreateIconIndirect LoadBitmapA LoadCursorW GetClassNameW SetCapture GetWindowDC SetCursor

gdi32

GetStockObject SetPixel GetPixel SelectObject CreateCompatibleBitmap DeleteDC LineTo GetObjectW MoveToEx CreateCompatibleDC SetROP2

ole32

CoCreateGuid CoCreateInstance CoInitialize

oleaut32

SysAllocString VariantInit SafeArrayGetVartype VariantClear

shlwapi

PathFindFileNameW PathFileExistsW wnsprintfW wnsprintfA StrStrIW PathIsDirectoryW StrNCatW wvnsprintfA PathAppendW StrCmpNIA SHSetValueW wvnsprintfW StrChrW SHGetValueW StrChrA PathRemoveFileSpecW StrCmpNW StrCmpNIW SHDeleteKeyW

version

VerQueryValueW GetFileVersionInfoW

advapi32

RegCreateKeyExW RegCloseKey RegOpenKeyW RegOpenKeyExW GetUserNameW

shell32

ord165

Name

.text

Size

572KB

Virtual Size

572KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

202KB

Virtual Size

202KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

anyconn32.dll

IMPHASH 6f8dd307be6757235bd2bd8c9b0cf822
SHA256 258d3a79a4e41e0253b94c838591b907ef3243aba5cba78ec505d037d67c7f88
MD5 e12e5e9939167bc7820e74f946b4d1dc
SHA1 5a100e1d1dd2473f3a07dde61751039c9c153674
SHA512 8c54a5ea59683b9cf9a4fb563ca2a92031676a1d1e6b2355d5a3cec1011e959043cdb3ec6af20d213bbe5e4d1aaaeffe6bad4a3293b9c667cf074060334452f8
SSDEEP 3072:omIgaePl2JdZwTAIfS/qq47mgPe+jtsn4luuenJyoIyxdyKk2qBD5bICD252wVhi:Whg2PZwT6qB7jPfRlNJynNk2qCf89nb/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

8e:a4:ed:ab:38:8e:52:d6:22:dc:45:41:17:56:20:4c:f5:13:b0:b3:3b:80:78:25:78:8a:26:09:e2:9b:1f:22

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

May 8, 2021

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

a1:66:86:99:08:92:52:2f:c3:ec:4d:34:77:83:26:79:3d:4f:fc:98

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 23, 2020 - Jan 22, 2032

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

5

Entry point

84631

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\Release\anyconn32.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CreateThread WaitForMultipleObjects DisableThreadLibraryCalls Sleep lstrcmpA lstrcpyA CloseHandle CancelIo EnterCriticalSection lstrcmpiA CreateFileW LeaveCriticalSection CreateEventA InitializeCriticalSection SetFilePointer CreateFileA OutputDebugStringA WriteFile WaitForSingleObject lstrlenA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind HeapAlloc GetLastError HeapFree GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapSize ExitProcess GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale VirtualQuery ReadFile GetModuleFileNameW Module32FirstW GetModuleHandleA CreateToolhelp32Snapshot Module32NextW lstrcpyW WriteConsoleW

wininet

InternetCrackUrlA

shlwapi

wvnsprintfW SHGetValueW wnsprintfA StrCmpNIA wvnsprintfA PathFindFileNameW

ws2_32

recv WSARecv WSAGetOverlappedResult WSAWaitForMultipleEvents WSACreateEvent bind setsockopt htons WSASocketW send inet_addr connect WSAIoctl WSACloseEvent WSAGetLastError closesocket

dnsapi

DnsFree DnsQuery_A

ole32

CoCreateGuid

anyconn64.dll

IMPHASH 8c8fd4fa57d8a1a6576d3713ea350f73
SHA256 dc9349a92a4c624c93a14bdbdbe229e1fb055fbafe45c9cc36981bbba779d063
MD5 6d0205592b52e5365b293885b6568775
SHA1 4dca9945313999e9f29c5d9fc831737111474454
SHA512 b6a6c23bd497ab82258ce95e1e8ef2a6d886524b5bd116a2effb864ae0ecfb9fd034c50f45b772cf61d8fc8d394988600363a761176caea54d523b0ee2088e49
SSDEEP 6144:3XANZ634lSoAFu+p8m77EWnVWSPyLWTXa4silxicv:3XAnIupWnH7XGOxi6
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

Digest

de:3b:1f:ea:90:56:4e:4b:55:a8:31:ae:74:81:1e:c1:ff:b0:4e:79:9e:47:3e:4c:6a:67:bf:7a:48:97:90:f0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

May 8, 2021

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

18:15:6d:5d:d7:a9:43:17:52:46:a4:46:19:f4:17:47:2b:ce:f7:85

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 23, 2020 - Jan 22, 2032

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

2

Major OS version

5

Entry point

131288

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\po\trunk\modules\Release\anyconn64.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CreateThread WaitForMultipleObjects DisableThreadLibraryCalls Sleep lstrcmpA lstrcpyA CloseHandle CancelIo EnterCriticalSection lstrcmpiA CreateFileW LeaveCriticalSection CreateEventA InitializeCriticalSection SetFilePointer CreateFileA OutputDebugStringA WriteFile WaitForSingleObject lstrlenA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapAlloc GetLastError HeapFree EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc HeapSize GetModuleHandleW GetProcAddress ExitProcess GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale VirtualQuery ReadFile GetModuleFileNameW Module32FirstW GetModuleHandleA CreateToolhelp32Snapshot Module32NextW lstrcpyW WriteConsoleW

wininet

InternetCrackUrlA

shlwapi

wvnsprintfW SHGetValueW wnsprintfA StrCmpNIA wvnsprintfA PathFindFileNameW

ws2_32

recv WSARecv inet_addr WSAGetOverlappedResult WSACreateEvent bind setsockopt htons WSASocketW connect send WSAWaitForMultipleEvents WSAIoctl WSACloseEvent WSAGetLastError closesocket

dnsapi

DnsFree DnsQuery_A

ole32

CoCreateGuid

assistda.exe

IMPHASH 80a214750bca861cbedf81a48cd98aff
SHA256 84c3c8b3567ddaad29a86236b1c6a0356158c5d5ee06642c0481979365fd660d
MD5 26c6ec5df1d937b5458f6a92af30eb15
SHA1 5c911bc13178b32b934aae3a3ef83323dc8b3a0d
SHA512 e5ff627429a349d6fd20ad4bee9e5ef3f11e62f9a785d2d8196cd1b1a958483824fa09e939074d0b99c183dd8f4a25fba6fc37f6cbc69fc689d0b31d1adda967
SSDEEP 1536:HxIEsJ/3oibvFISIyqDgq8ySb3+JWfBWtutYjuWsXDSsWLqcdlnkVLcsG9hRUJix:6EE3oibtPHq8ySb3GWeutYlsz0lnkVLS
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

c0:74:6d:5e:74:5f:d8:c6:bc:2a:46:66:3e:7c:ec:1d:4e:78:7b:28:df:f8:ab:2a:8e:c8:a3:7e:83:b3:d1:07

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Jun 20, 2022

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

3c:df:81:db:7a:5c:0c:ec:85:c0:13:36:8b:c3:7d:5b:b9:57:23:9f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 11, 2022 - Aug 10, 2033

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

6

Entry point

4690

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

assisthost.exe

IMPHASH d275c28a6f1dca03cc55a1c10ecee91e
SHA256 99c34aa763d2ed66ab656f19efd2fe7a270147941dbd4b6bda4671e97bb6fac1
MD5 457ef186601383071ee89104e5c71efe
SHA1 04a98fc602a7e4856044f53826f5c3f33ecd34fd
SHA512 a158d41b185343ceedf91341bab072a271c6b1295fbe91e5b6b0c430aa258d722e197bcc3a39bf4170ae01c030e69701d9d3d104fda76d0522442c8c9367f5ad
SSDEEP 3072:YPEl4GQhYdHv0i6LUqEfud43sX+eLQitOJl2mg:0Y6Eud4EpOJl1g
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

0d:0f:d8:02:21:e9:43:60:40:f6:02:33:e8:9b:4e:da:07:83:90:db:85:36:04:1e:e0:10:66:9c:f5:10:50:65

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Jun 20, 2022

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

e6:68:3b:11:12:27:1b:af:61:9f:55:67:25:2e:5b:9a:c0:52:d8:09

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 11, 2022 - Aug 10, 2033

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

6

Entry point

4688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

assisths.exe

IMPHASH c5b4374aaf97564a9993bc03e58d40e3
SHA256 8f0d303d6f76a1bc1e47e0e985f6ac80f9e53e30d0d4b635b43a2a303b004cb7
MD5 a33c00a0816f9d944ee017cf3f0b46cc
SHA1 28fea1cef375574f6f7d8c7ccdff25cd734f5f1c
SHA512 bd27b77421ab2cb15226d0ae9dbd8977ef9a924af3f81393327d42cafe22732101b9b8703e076b5a0df5339e11b9bb91252c065f08e908a3c8c4dabbf24e629b
SSDEEP 1536:IU+ejQ2fsLWL5ADjYyCqvSDtc2WxP8HjI+GvgudItqasgGXsWkcd+SZg7L4fuZwO:VtLsLWL5AvYmgc2WxP8HjxudItns3L+t
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

68:60:b4:00:21:2c:97:d8:e5:63:a6:62:55:6f:7a:7b:9a:3a:db:44:77:bd:cb:e1:7a:b7:f5:b6:c5:f5:df:2b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Jun 20, 2022

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

68:c8:18:8e:4d:ac:80:5a:bb:98:f8:2d:f4:d9:81:27:43:9a:95:cb

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 11, 2022 - Aug 10, 2033

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

6

Entry point

4688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

athens32.dll

SHA256 4097889236a2af26c293033feb964c4cf118c0224e0d063fec0a89e9d0569ef2
MD5 6a99c575ab87f8c7d1ed1e52e7e349ce
SHA1 ff55435345834a3fe224936776c2aa15f6ed5358
SHA512 7b486b49113b3585e6ca81bb6809516eefd5825cbb6a4ff8764a829c1d38e3e547fb1b8990cc22206b760b8c4143cdae9bb030b0e5ffaefcad9f81e56fa8b3b3
MD5 SHA1 SHA512

NSIS installer

installer

athens64.dll

SHA256 4097889236a2af26c293033feb964c4cf118c0224e0d063fec0a89e9d0569ef2
MD5 6a99c575ab87f8c7d1ed1e52e7e349ce
SHA1 ff55435345834a3fe224936776c2aa15f6ed5358
SHA512 7b486b49113b3585e6ca81bb6809516eefd5825cbb6a4ff8764a829c1d38e3e547fb1b8990cc22206b760b8c4143cdae9bb030b0e5ffaefcad9f81e56fa8b3b3
MD5 SHA1 SHA512

NSIS installer

installer

athenw32.dll

IMPHASH 3fad34c87e0e7e0dbeff93929ed265d6
SHA256 b793f6fa49f43f38b7b273bc75bf3b4bd29747e06cf34c611353316d219ef839
MD5 6ff490b7f5ffed18743cc1a5b106f5ee
SHA1 a43b85c975538b2e5a7ec894a9170f7706c4c94d
SHA512 8f9a893ffd46d46f6614e41e3fd3304a00722e3dc14cbf149984398bbbf3f71124cb97025a41885fa33cf400ec10870a7e50211a8f660201fbb4538558b30e1f
SSDEEP 12288:N0uWbypVw00H2MIYZEnTI/0czqufhwX908ckakJP/WwRsVTO8wmhCl:CbyKFsngLTkakQwChO8wmhCl
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

b0:8b:84:02:09:eb:cf:73:4c:15:91:4d:69:ae:ec:3a:aa:8d:6b:36:07:7c:70:a1:c0:b5:ea:bf:a1:c5:49:a5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 28, 2024

PE Signature issue

Digest

64:90:7b:fa:07:0e:d7:e9:5c:79:07:4e:d4:97:b2:18:64:80:99:bf

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 28, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

371328

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\athens\Release\athenw32.pdb

kernel32

QueryDosDeviceW GetModuleHandleA lstrcmpW lstrcpyW InterlockedIncrement InterlockedDecrement CopyFileW GetDiskFreeSpaceExW GetQueuedCompletionStatus SetEvent ReadDirectoryChangesW CreateIoCompletionPort CancelIo GetModuleHandleW FileTimeToSystemTime GetFileAttributesExW FileTimeToLocalFileTime GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP LoadLibraryA GetProcAddress GetLogicalDrives GetDriveTypeW VirtualProtectEx GetCurrentProcess GetLocalTime SetFileAttributesW GetCurrentProcessId DeleteFileW GetCurrentThread MoveFileExW GetCurrentThreadId MoveFileW GetModuleFileNameW lstrcpynW Sleep lstrcmpA lstrcatW GlobalUnlock lstrlenW lstrcatA GlobalAlloc GlobalLock lstrlenA LocalFree GetModuleFileNameA CreateThread CloseHandle lstrcmpiW CreateEventW EnterCriticalSection SetLastError GetLastError GetTempPathW CreateFileW ReadFile GetFileAttributesW LeaveCriticalSection InitializeCriticalSection OutputDebugStringW LoadLibraryExA LoadLibraryExW SuspendThread GetThreadContext SetThreadContext FlushInstructionCache ResumeThread VirtualProtect InterlockedCompareExchange GetSystemDirectoryW GetWindowsDirectoryW lstrcpyA Module32NextW OpenEventW CreateToolhelp32Snapshot FindNextFileW Process32NextW Module32FirstW DeviceIoControl RemoveDirectoryW CreateFileMappingW ProcessIdToSessionId OpenThread Process32FirstW FindClose GetCurrentDirectoryW GetFileSizeEx GetVersionExW LoadLibraryW OpenProcess GetDriveTypeA IsBadReadPtr SystemTimeToFileTime CreateProcessW SetEndOfFile lstrcpynA VirtualQuery UnmapViewOfFile MapViewOfFile FindFirstFileW CreateFileA WaitForSingleObject SetFilePointer GetFileSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree HeapAlloc GetCommandLineA RaiseException RtlUnwind TlsGetValue TlsAlloc TlsSetValue TlsFree HeapSize ExitProcess GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW WriteFile GetStdHandle HeapCreate HeapDestroy VirtualFree DeleteCriticalSection VirtualAlloc HeapReAlloc SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime FreeLibrary InterlockedExchange InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetLocaleInfoW WriteConsoleW

user32

LoadCursorW CallNextHookEx TranslateMessage RegisterClassExW LoadIconW IsWindow CreateWindowExW DispatchMessageA PostQuitMessage GetMessageW GetWindowThreadProcessId GetCursorPos SendMessageTimeoutW WindowFromPoint PostThreadMessageW MessageBoxW GetForegroundWindow GetClipboardOwner SetWindowsHookExW UpdateWindow DefWindowProcW RegisterClipboardFormatW wsprintfA CloseClipboard SetTimer PostMessageW IsClipboardFormatAvailable GetClientRect GetWindowLongW EmptyClipboard ChangeClipboardChain OpenClipboard GetSystemMetrics SendMessageW SetClipboardViewer

advapi32

InitializeSecurityDescriptor GetUserNameW RegSetValueExW RegEnumKeyExW CreateServiceW CloseServiceHandle OpenProcessToken DeleteService OpenSCManagerW ImpersonateLoggedOnUser RegCloseKey RegNotifyChangeKeyValue RegCreateKeyExW OpenServiceW CreateProcessAsUserW SetSecurityDescriptorDacl StartServiceW QueryServiceStatus SetFileSecurityW AllocateAndInitializeSid SetEntriesInAclW RegEnumValueW FreeSid RegSetKeySecurity RegOpenKeyExW

shell32

CommandLineToArgvW SHGetPathFromIDListW SHGetSpecialFolderPathW ord190 ord155 ord165 SHGetSpecialFolderLocation

ole32

CoCreateGuid CoInitialize CoCreateInstance CoTaskMemFree ReleaseStgMedium

wtsapi32

WTSQueryUserToken

shlwapi

PathIsDirectoryW PathFindFileNameW StrStrIW SHDeleteValueW PathFileExistsW PathAppendW PathMatchSpecW wnsprintfW StrCatBuffW StrCatW wvnsprintfA wnsprintfA StrChrA StrCmpNIW SHGetValueW StrChrW PathRemoveFileSpecW StrNCatW SHGetValueA wvnsprintfW SHSetValueW PathRemoveBackslashW StrCmpNW PathAddBackslashW ord219 StrStrW SHDeleteKeyW PathFindExtensionW

ws2_32

sendto WSAStartup socket

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

psapi

GetProcessImageFileNameW

Name

.text

Size

488KB

Virtual Size

487KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

88KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

19KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourd

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

37KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

athenw64.dll

IMPHASH 1a1b386f9dafee27c75e97b24ce0458a
SHA256 932f94b1755a5f2f13bd3b2ac832d3b88d3f7b7ca507675ca06e6cd775161d92
MD5 9e9eb61877f77f6d5c36948d8de9f27d
SHA1 b3fbac9ff631127081cfa7138ca6afcf66db118a
SHA512 b735c3e6ff3ae9d4232dac335d1aef12f63e16690883682fad08552b20cac8718782ad506051b68e462800d94dfb809d57d7747c4caca0d59e14e4e8c2ffd8a6
SSDEEP 12288:qQFGtwsyOnzNcj6rPP57GiS8xlCosFxF3O2owh7x/FcDWz+uw:qQFG2OKj2PP57TkoYF35L/2pj
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

a1:84:6e:6f:70:a8:f2:b9:25:ee:82:44:e2:8b:7c:a6:4a:7f:fb:d1:78:c3:91:36:c3:98:78:5e:ba:6c:ce:cd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 28, 2024

PE Signature issue

Digest

61:e6:60:fb:7c:c4:38:c1:3d:2f:f2:a5:81:b0:03:d7:98:cd:36:4f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 28, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

499688

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\athens\Release\athenw64.pdb

kernel32

QueryDosDeviceW GetModuleHandleA lstrcmpW lstrcpyW CopyFileW GetDiskFreeSpaceExW SetEvent GetModuleHandleW FileTimeToSystemTime GetFileAttributesExW FileTimeToLocalFileTime GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP LoadLibraryA GetProcAddress GetLogicalDrives GetDriveTypeW VirtualProtectEx GetCurrentProcess GetLocalTime SetFileAttributesW GetCurrentProcessId DeleteFileW GetCurrentThread MoveFileExW GetCurrentThreadId MoveFileW GetModuleFileNameW lstrcpynW Sleep lstrcmpA lstrcatW GlobalUnlock lstrlenW lstrcatA GlobalAlloc GlobalLock lstrlenA LocalFree GetModuleFileNameA CreateThread CloseHandle lstrcmpiW CreateEventW EnterCriticalSection SetLastError GetLastError GetTempPathW CreateFileW ReadFile GetFileAttributesW LeaveCriticalSection InitializeCriticalSection OutputDebugStringW LoadLibraryExA LoadLibraryExW VirtualAlloc SuspendThread VirtualFree GetThreadContext SetThreadContext FlushInstructionCache ResumeThread VirtualProtect GetSystemDirectoryW GetWindowsDirectoryW lstrcpyA Module32NextW OpenEventW CreateToolhelp32Snapshot FindNextFileW Process32NextW Module32FirstW DeviceIoControl RemoveDirectoryW CreateFileMappingW ProcessIdToSessionId OpenThread Process32FirstW FindClose GetCurrentDirectoryW GetFileSizeEx GetVersionExW LoadLibraryW OpenProcess GetDriveTypeA IsBadReadPtr SystemTimeToFileTime CreateProcessW SetEndOfFile lstrcpynA VirtualQuery UnmapViewOfFile MapViewOfFile FindFirstFileW CreateFileA WaitForSingleObject SetFilePointer GetFileSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapFree HeapAlloc FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc HeapSize ExitProcess GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW WriteFile GetStdHandle HeapSetInformation HeapCreate HeapDestroy SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime HeapReAlloc FreeLibrary InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetLocaleInfoW WriteConsoleW

user32

LoadCursorW CallNextHookEx TranslateMessage RegisterClassExW LoadIconW IsWindow CreateWindowExW DispatchMessageA PostQuitMessage GetMessageW GetWindowThreadProcessId GetCursorPos WindowFromPoint PostThreadMessageW MessageBoxW GetForegroundWindow SetWindowsHookExW UpdateWindow DefWindowProcW RegisterClipboardFormatW wsprintfA

advapi32

GetUserNameW RegSetValueExW RegEnumKeyExW CreateServiceW CloseServiceHandle OpenProcessToken DeleteService OpenSCManagerW ImpersonateLoggedOnUser RegCloseKey RegNotifyChangeKeyValue RegCreateKeyExW OpenServiceW CreateProcessAsUserW InitializeSecurityDescriptor SetSecurityDescriptorDacl StartServiceW QueryServiceStatus SetFileSecurityW AllocateAndInitializeSid SetEntriesInAclW RegEnumValueW FreeSid RegSetKeySecurity RegOpenKeyExW

shell32

CommandLineToArgvW SHGetPathFromIDListW ord190 ord155 ord165 SHGetSpecialFolderLocation

ole32

CoCreateGuid CoInitialize CoCreateInstance CoTaskMemFree ReleaseStgMedium

wtsapi32

WTSQueryUserToken

shlwapi

PathIsDirectoryW PathFindFileNameW StrStrIW SHDeleteValueW PathFileExistsW PathAppendW PathMatchSpecW wnsprintfW StrCatBuffW StrCatW wvnsprintfA wnsprintfA StrChrA StrCmpNIW SHGetValueW StrChrW PathRemoveFileSpecW StrNCatW SHGetValueA wvnsprintfW SHSetValueW StrCmpNW PathAddBackslashW ord219 StrStrW SHDeleteKeyW PathFindExtensionW

ws2_32

sendto WSAStartup socket

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

psapi

GetProcessImageFileNameW

Name

.text

Size

642KB

Virtual Size

641KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

174KB

Virtual Size

173KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

41KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourd

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

athenx32.dll

SHA256 3e12179790d01c772a631ea24de933f00b24bff433828d17881f1cfefc0dc87e
MD5 23c38b13fa624d71c9d73ad6216b70d2
SHA1 83e7b148253a4b2b933fe6152d7f531a4c31061c
SHA512 78e82b85fe1b8050c5042bbfecc58ee7537683c7511731627933a591bdb861e84ff0e2efc8ac2d266c0ca8d15d4126336e103351b03bbe4dfd1a2f2d12d15e0f
MD5 SHA1 SHA512

NSIS installer

installer

athenx64.dll

SHA256 550d70359b7d02c8c03352892dea80a1332426d948d0c74437caba69c8b95199
MD5 13e8a3c20341ad0586f92fa42eb7b23e
SHA1 e5c98e25503724809dcb92482a622d24722310eb
SHA512 d761763c4cf32cec2cbc20b1237d99ea26f910551819115391a84d3fb36b5b6fe76b8e20990c562bb95d73e8d0ed366420c97cab884a3648069a9b5efd18afc6
MD5 SHA1 SHA512

NSIS installer

installer

backup32.dll

IMPHASH 764e911557ba0cab90f0e29d3acc3a65
SHA256 56f48d9b5775f54f6d966c29efff04164e3e6500afe7a83d2d62c3ca871d9ac5
MD5 bc1de5751834f1718c9e1f570fcb364e
SHA1 f394aef06af39e0da8fe2909d2b33211dd7a7739
SHA512 ec6fedce0ff095c103cb688380d466e85d02a96cd9b559ac822b8d2a8e78d59b8eab8f910329977d6d9e0df3e79851a9320f05c187587d37b824d8b652c3aab9
SSDEEP 12288:VaqvWKQmamZQ+HulpnjQ7dcLAQTX8ylvjnA:Vcmm+HddcLAQD8ylzA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

a3:5d:7b:31:b2:e2:7f:80:96:a0:38:d9:cd:c5:05:94:57:8d:9a:97:e4:b0:4e:49:ca:91:41:57:2c:3e:67:dc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 26, 2024

PE Signature issue

Digest

8b:df:01:cd:7a:54:7b:99:44:f1:f1:eb:bc:91:d8:b6:be:e2:92:46

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 26, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

186504

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\backup\Release\backup32.pdb

kernel32

FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle WriteConsoleA GetConsoleOutputCP DeleteFileA GetTempPathA GetModuleFileNameA GetVolumeInformationW DebugBreak TlsAlloc TlsSetValue GetTickCount TlsGetValue DisableThreadLibraryCalls lstrcmpA ReadFile GetDriveTypeA SetFilePointer GetFileSize CreateThread lstrcpyW DeleteFileW CloseHandle GetDiskFreeSpaceExW DeleteCriticalSection CreateIoCompletionPort lstrcmpiW GetLocalTime EnterCriticalSection lstrlenW CreateFileW lstrcpynW LeaveCriticalSection CreateEventA CopyFileW Sleep InitializeCriticalSection GetWindowsDirectoryA ReadDirectoryChangesW GetLogicalDrives SetEvent OutputDebugStringW GetWindowsDirectoryW lstrcpyA Module32NextW OpenEventW GetFileAttributesExW CreateToolhelp32Snapshot FindNextFileW WaitForSingleObject GetQueuedCompletionStatus GetDriveTypeW GetModuleHandleA Module32FirstW DeviceIoControl FindClose TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree HeapAlloc GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind GetModuleHandleW GetProcAddress TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapSize ExitProcess GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW WriteFile GetStdHandle HeapCreate HeapDestroy VirtualFree VirtualAlloc HeapReAlloc SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetLocaleInfoW CreateFileA FindFirstFileW lstrlenA VirtualQuery lstrcpynA SetEndOfFile SystemTimeToFileTime GetFileAttributesW GetModuleFileNameW lstrcmpW GetCurrentDirectoryW WriteConsoleW

shell32

SHGetSpecialFolderPathW ord165 SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoInitialize CoTaskMemFree CoCreateGuid

shlwapi

wnsprintfW PathIsDirectoryW PathFindExtensionW PathFindFileNameW PathAddBackslashW StrStrIW SHDeleteValueW PathFileExistsW PathAppendW StrCmpNW PathMatchSpecW PathRemoveBackslashW PathFileExistsA PathAppendA wvnsprintfW SHGetValueA StrCmpNIW SHSetValueW StrChrA wnsprintfA wvnsprintfA SHCreateStreamOnFileW StrChrW SHGetValueW PathRemoveFileSpecW

libcurl32

curl_slist_append curl_free curl_easy_setopt curl_easy_perform curl_easy_strerror curl_easy_cleanup curl_global_init curl_easy_escape curl_easy_getinfo curl_easy_reset curl_easy_init curl_slist_free_all curl_formfree curl_formadd

advapi32

GetUserNameW RegEnumValueW RegOpenKeyExW RegCloseKey

backup64.dll

IMPHASH 051c1eae66593fdcbbbc6988512a3ca0
SHA256 f17f38deca1fdf5bbedda681c768d8123eb1aa77d8be886ead9493ba45b68f9a
MD5 53aa3954f0d7de73b5558ce721041f81
SHA1 6978656a4247698815b45904db9fdcbdebb56508
SHA512 b9829f7f63e67892e61a8cb69a7350b342781ad6b286006c43ffd3cc858755eaf612cbf1b76b588452afaed6d72f841cb707761f498e1ed04c2a0d43e535596b
SSDEEP 6144:vfzJ1qTduUToxLjZQ5SpXJV415SBuRcMuNuMTvUkw8+fO0A92C8WwbFD1ZpP1nrD:XzJ1C23XRBuWMpZ8f93ybFPp9r0Ffc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

41:e6:36:77:bc:fd:1c:3e:d3:c9:5c:ca:24:cc:99:07:5c:67:be:2c:ae:61:f4:cb:e3:5c:fb:f1:21:7d:de:5d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 26, 2024

PE Signature issue

Digest

39:bc:01:f0:82:1c:59:ad:80:ce:08:98:77:d4:2c:e2:f0:ab:73:a9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 26, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

294588

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\backup\Release\backup64.pdb

kernel32

FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle WriteConsoleA GetConsoleOutputCP DeleteFileA GetTempPathA GetModuleFileNameA GetVolumeInformationW DebugBreak TlsAlloc TlsSetValue GetTickCount TlsGetValue DisableThreadLibraryCalls lstrcmpA ReadFile GetDriveTypeA SetFilePointer GetFileSize CreateThread lstrcpyW DeleteFileW CloseHandle GetDiskFreeSpaceExW DeleteCriticalSection CreateIoCompletionPort lstrcmpiW GetLocalTime EnterCriticalSection lstrlenW CreateFileW lstrcpynW LeaveCriticalSection CreateEventA CopyFileW Sleep InitializeCriticalSection GetWindowsDirectoryA ReadDirectoryChangesW GetLogicalDrives SetEvent OutputDebugStringW GetWindowsDirectoryW lstrcpyA Module32NextW OpenEventW GetFileAttributesExW CreateToolhelp32Snapshot FindNextFileW GetModuleHandleA WaitForSingleObject GetQueuedCompletionStatus GetDriveTypeW Module32FirstW DeviceIoControl FindClose TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetLastError HeapFree HeapAlloc GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc HeapSize GetModuleHandleW GetProcAddress ExitProcess GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW WriteFile GetStdHandle HeapSetInformation HeapCreate HeapDestroy SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetLocaleInfoW CreateFileA FindFirstFileW lstrlenA VirtualQuery lstrcpynA SetEndOfFile SystemTimeToFileTime GetFileAttributesW GetModuleFileNameW lstrcmpW GetCurrentDirectoryW WriteConsoleW

shell32

SHGetSpecialFolderPathW ord165 SHGetPathFromIDListW SHGetSpecialFolderLocation

ole32

CoInitialize CoTaskMemFree CoCreateGuid

shlwapi

wnsprintfW PathIsDirectoryW PathFindExtensionW PathFindFileNameW PathAddBackslashW StrStrIW SHDeleteValueW PathFileExistsW PathAppendW StrCmpNW PathMatchSpecW PathRemoveBackslashW PathFileExistsA PathAppendA wvnsprintfW SHGetValueA StrCmpNIW SHSetValueW StrChrA wnsprintfA wvnsprintfA SHCreateStreamOnFileW StrChrW SHGetValueW PathRemoveFileSpecW

libcurl64

curl_slist_append curl_free curl_easy_setopt curl_easy_perform curl_easy_strerror curl_easy_cleanup curl_global_init curl_easy_escape curl_easy_getinfo curl_formadd curl_easy_reset curl_easy_init curl_slist_free_all curl_formfree

advapi32

GetUserNameW RegEnumValueW RegOpenKeyExW RegCloseKey

clientbase32.dll

IMPHASH be9568743ee78892d5ec9cdb447061b2
SHA256 61334cea2fbb76dae46ceeec13ccae466d64c45951e3330487db446c5d4a766c
MD5 3c841006e9e36961671623e8cf7157e6
SHA1 ff5d3fb23fd5be87bb602c88ab67eaaa453d6446
SHA512 0cd8c3adc3d06edb64693058a0f442831bb5ece5c61ac399ab496cc0beb34ab7b438c1c57d48f10ce3e9a737df09ce64fbb6c0f6925dc429d626b942773e3fec
SSDEEP 12288:EQg/2SfK+0iL/IyldDhzhSapO2zF8emEB3ALHHs6MSeWENfgV:kZwGNvjpO2zF8emuMs6MSeWENfgV
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

e6:0c:51:f5:68:3f:82:3f:f6:7b:48:66:8d:6e:6c:85:f1:ce:ac:cf:52:d2:8c:64:68:ae:42:a7:dc:22:61:68

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

PE Signature issue

Digest

84:03:e4:64:5a:29:a2:7e:f7:05:81:05:4b:cc:48:c1:44:f9:97:11

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

225774

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\clientbase\Release\clientbase32.pdb

kernel32

GetModuleHandleA TerminateProcess OpenProcess lstrcpyW CreateEventW GetModuleFileNameW MoveFileExW FileTimeToLocalFileTime GetFileTime lstrlenW FileTimeToSystemTime GetSystemDirectoryW lstrcmpiW GetLocalTime GetFileAttributesW CopyFileW GetDiskFreeSpaceExW GetProcAddress SetLastError GetTempPathW GetExitCodeProcess LoadLibraryW GetModuleHandleW OutputDebugStringW GetDriveTypeW DeleteFileW MoveFileW LocalFree DisableThreadLibraryCalls CreateFileW ReadFile SetFilePointer lstrcmpA lstrcpynW GetVersionExW CreateThread ResetEvent GetComputerNameExW GetLastError SetEvent GetComputerNameW SetFileAttributesW GetLogicalDrives WaitForSingleObject CloseHandle Module32NextW OpenEventW GetFileAttributesExW CreateToolhelp32Snapshot FindNextFileW lstrcatW CancelIo Process32NextW Module32FirstW DeviceIoControl QueryDosDeviceW RemoveDirectoryW CreateFileMappingW ProcessIdToSessionId Process32FirstW FindClose GetCurrentDirectoryW GetFileSizeEx lstrcmpW InitializeCriticalSection GetDriveTypeA IsBadReadPtr SystemTimeToFileTime CreateProcessW lstrcpynA VirtualQuery UnmapViewOfFile MapViewOfFile FindFirstFileW GetWindowsDirectoryW lstrcpyA CreateFileA SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers GetConsoleMode GetConsoleCP IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA GetLocaleInfoA GetLocaleInfoW InitializeCriticalSectionAndSpinCount LoadLibraryA InterlockedExchange GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings lstrcmpiA Sleep lstrlenA GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree HeapAlloc GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection HeapCreate HeapDestroy VirtualFree DeleteCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA

user32

IsWindow LoadIconW GetCursorPos ShowWindow IsDialogMessageW GetForegroundWindow TranslateMessage SetPropW FindWindowW SetForegroundWindow RegisterWindowMessageW PostQuitMessage GetMessageW RemovePropW SetTimer DestroyWindow DestroyIcon GetIconInfo LoadImageW MessageBoxW GetWindowThreadProcessId DefWindowProcW DispatchMessageA CreateWindowExW RegisterClassExW GetSystemMetrics IsWindowVisible UpdateWindow GetPropW DispatchMessageW CreateDialogParamW LoadCursorW SetWindowPos GetWindowRect

gdi32

DeleteObject GetObjectW

advapi32

EnumServicesStatusExW RegEnumKeyExW ControlService LookupAccountSidW GetTokenInformation OpenProcessToken RevertToSelf ImpersonateLoggedOnUser RegCloseKey RegOpenKeyExW RegOpenKeyW RegCreateKeyExW FreeSid RegEnumValueW CreateServiceW CloseServiceHandle CreateProcessWithLogonW DeleteService OpenSCManagerW OpenServiceW CreateProcessAsUserW InitializeSecurityDescriptor SetSecurityDescriptorDacl StartServiceW QueryServiceStatus SetFileSecurityW AllocateAndInitializeSid SetEntriesInAclW GetUserNameW

shell32

SHGetFileInfoW ord165 SHGetPathFromIDListW SHGetSpecialFolderLocation SHAppBarMessage ord727 ExtractIconExW ShellExecuteExW SHGetSpecialFolderPathW Shell_NotifyIconW

iphlpapi

GetAdaptersInfo

comctl32

ord17

gdiplus

GdiplusStartup GdipGetImageWidth GdipCloneImage GdipBitmapLockBits GdipSaveImageToFile GdipGetImageEncoders GdipCreateBitmapFromHBITMAP GdipDisposeImage GdipAlloc GdipCreateBitmapFromScan0 GdipGetImagePixelFormat GdipGetImageEncodersSize GdipFree GdipGetImageHeight GdipCreateBitmapFromHICON

wtsapi32

WTSQuerySessionInformationW WTSRegisterSessionNotification WTSUnRegisterSessionNotification WTSEnumerateSessionsW WTSFreeMemory WTSQueryUserToken

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

shlwapi

SHDeleteValueW wnsprintfW StrStrIA PathRemoveBackslashW StrCatW StrCmpNIA StrChrA SHSetValueW StrCmpNIW SHGetValueW StrChrW SHSetValueA PathRemoveFileSpecW SHGetValueA SHDeleteValueA PathFindExtensionW PathIsDirectoryW wvnsprintfA wnsprintfA wvnsprintfW StrStrA StrStrW SHDeleteKeyW PathFindFileNameW StrStrIW PathAppendW PathFileExistsW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

ws2_32

bind WSAGetOverlappedResult WSACreateEvent WSAWaitForMultipleEvents htons setsockopt inet_ntoa ntohl getsockname closesocket WSAGetLastError WSAIoctl WSASocketW WSACloseEvent connect

psapi

GetProcessImageFileNameW

ole32

CoSetProxyBlanket CoInitializeEx CoTaskMemFree CoCreateGuid CoInitialize CoCreateInstance

oleaut32

VariantInit VariantClear

clientbase64.dll

IMPHASH 379383acd6f7ce5520272f79df1aeb85
SHA256 16eae537802a82fc8961f5ab5c5250a3dfdc7c91d2fe58c9e1a878b2f3bdd333
MD5 a796a385470158ba892ee5ced5d805e4
SHA1 d348dc568ec646aecaddd5aa4a438422e1f000f0
SHA512 87ce99b825cbfa411a4d16521c75cd490273e6f45920deac973782915058e0e9caa116aaeccc6a76caaa62a3ad8a000586f2f35f3d9558a6521fed8571bcee2a
SSDEEP 6144:i9ZLIXDlH5+e6R5D8UAzMaSTRQ01D3R4HQnbK0XAhwJIbZlWqWup6hnWzSBzyIY+:cZUXJH5+RukD3SH4/YsqajzyH3FsPf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

9f:4e:b9:79:36:79:91:91:d9:7b:f1:bc:8a:69:10:60:f9:43:2f:1f:16:80:3a:06:59:3a:d7:15:a6:15:0c:63

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

PE Signature issue

Digest

6c:04:97:87:8d:f5:42:8e:8d:0d:81:d0:5b:67:5b:ac:cb:8a:68:90

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

328268

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\clientbase\Release\clientbase64.pdb

kernel32

GetModuleHandleA TerminateProcess OpenProcess lstrcpyW CreateEventW GetModuleFileNameW MoveFileExW FileTimeToLocalFileTime GetFileTime lstrlenW FileTimeToSystemTime GetSystemDirectoryW lstrcpynW lstrcmpiW GetLocalTime GetFileAttributesW GetVersionExW CopyFileW GetDiskFreeSpaceExW GetProcAddress SetLastError GetTempPathW GetExitCodeProcess LoadLibraryW GetModuleHandleW OutputDebugStringW GetLogicalDrives GetDriveTypeW DeleteFileW DisableThreadLibraryCalls CreateFileW ReadFile SetFilePointer lstrcmpA CreateThread ResetEvent LocalFree GetComputerNameExW GetLastError SetEvent GetComputerNameW WaitForSingleObject CloseHandle SetFileAttributesW Module32NextW OpenEventW GetFileAttributesExW CreateToolhelp32Snapshot FindNextFileW lstrcatW CancelIo Process32NextW Module32FirstW DeviceIoControl QueryDosDeviceW RemoveDirectoryW CreateFileMappingW ProcessIdToSessionId Process32FirstW FindClose GetCurrentDirectoryW GetFileSizeEx lstrcmpW InitializeCriticalSection GetDriveTypeA IsBadReadPtr SystemTimeToFileTime CreateProcessW lstrcpynA VirtualQuery UnmapViewOfFile MapViewOfFile FindFirstFileW GetWindowsDirectoryW lstrcpyA CreateFileA SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers GetConsoleMode GetConsoleCP IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW lstrcmpiA Sleep lstrlenA GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapFree HeapAlloc GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection HeapSetInformation HeapCreate HeapDestroy GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetStringTypeA

user32

CreateWindowExW DispatchMessageA UpdateWindow DefWindowProcW GetWindowThreadProcessId GetForegroundWindow IsWindow LoadIconW RegisterClassExW TranslateMessage FindWindowW LoadCursorW PostQuitMessage GetMessageW MessageBoxW LoadImageW GetIconInfo DestroyIcon

gdi32

GetObjectW DeleteObject

advapi32

OpenSCManagerW EnumServicesStatusExW RegEnumKeyExW ControlService CloseServiceHandle CreateProcessWithLogonW DeleteService OpenServiceW CreateProcessAsUserW LookupAccountSidW GetTokenInformation OpenProcessToken RevertToSelf ImpersonateLoggedOnUser RegCloseKey RegOpenKeyExW RegOpenKeyW RegCreateKeyExW InitializeSecurityDescriptor SetSecurityDescriptorDacl QueryServiceStatus SetFileSecurityW AllocateAndInitializeSid SetEntriesInAclW RegEnumValueW FreeSid GetUserNameW

shell32

ord165 SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetSpecialFolderPathW ShellExecuteExW ExtractIconExW SHGetFileInfoW ord727

iphlpapi

GetAdaptersInfo

gdiplus

GdiplusStartup GdipGetImageWidth GdipCloneImage GdipBitmapLockBits GdipFree GdipGetImageHeight GdipCreateBitmapFromHICON GdipGetImagePixelFormat GdipAlloc GdipSaveImageToFile GdipGetImageEncoders GdipCreateBitmapFromHBITMAP GdipGetImageEncodersSize GdipDisposeImage GdipCreateBitmapFromScan0

wtsapi32

WTSQuerySessionInformationW WTSRegisterSessionNotification WTSUnRegisterSessionNotification WTSEnumerateSessionsW WTSFreeMemory WTSQueryUserToken

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

shlwapi

wnsprintfW StrStrIA SHDeleteValueW StrStrA StrStrIW PathFileExistsW StrCatW StrCmpNIA StrChrA SHSetValueW StrCmpNIW SHGetValueW StrChrW SHSetValueA PathRemoveFileSpecW SHGetValueA SHDeleteValueA PathFindExtensionW PathIsDirectoryW wvnsprintfA wnsprintfA wvnsprintfW PathRemoveBackslashW StrStrW SHDeleteKeyW PathFindFileNameW PathAppendW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

ws2_32

bind WSAGetOverlappedResult WSACreateEvent WSAWaitForMultipleEvents htons setsockopt inet_ntoa ntohl getsockname closesocket WSAGetLastError WSACloseEvent WSASocketW connect WSAIoctl

psapi

GetProcessImageFileNameW

ole32

CoTaskMemFree CoSetProxyBlanket CoInitializeEx CoInitialize CoCreateInstance CoCreateGuid

oleaut32

VariantClear VariantInit

clientstat.exe

IMPHASH ecc683091febfb6c61ee32ed09b113ef
SHA256 4230032e0f031a80ffadb5ffd49ae41510266c9ca7d2ce997487ab5403a466b4
MD5 cd85a8d69f91dca18a704f9a3ea58e8a
SHA1 b250b52c20f36f13564905a520085991b5bcd8b3
SHA512 2d52bc357ebe06e700451e3d275bd3ae6f1a5e1a15c81d291ed2dc527fd14142b1ef7529791569cc9d34e341a541dfffbf5e3a0dbf1ecdaa0d790682be709589
SSDEEP 12288:TIMkf64JppEnb5axAK+M/lXrYq4WaTajdovvJgG5JKfAUU0vpQ6P3TlG:TC6w8cAKv4mjdonJlrKfc6P3BG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

3b:d7:53:8e:84:54:72:da:d4:00:3e:95:74:24:a8:de:37:62:e6:94:e0:1c:c5:fc:a3:0e:34:e2:cc:f1:8b:20

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 12, 2024

PE Signature issue

Digest

d1:91:98:3c:b5:37:b5:53:0c:b2:03:3e:fc:7a:36:07:82:4e:2d:90

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 12, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

420649

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\po\trunk\modules\clientinfo\Release\clientstat.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CreateThread GetModuleHandleW OpenEventW SetEvent CloseHandle CancelIo CreateEventA MulDiv DosDateTimeToFileTime FreeResource GetFileSize WaitForSingleObject lstrlenA LocalFree SetFilePointer GetWindowsDirectoryW lstrcpyA lstrcpyW DeleteFileW lstrcmpiW GetCommandLineW lstrcatW GetModuleFileNameW lstrcpynW Sleep GetTickCount TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree HeapAlloc GetProcAddress ExitProcess GetStartupInfoW RaiseException RtlUnwind TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA HeapSize HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoW GetLocaleInfoA WideCharToMultiByte GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW CreateFileA lstrcmpA FindFirstFileW VirtualQuery lstrcpynA FindResourceW LoadResource SystemTimeToFileTime GlobalSize GlobalLock InitializeCriticalSection GlobalAlloc LoadLibraryW CopyFileW SizeofResource GetFileAttributesW ReadFile CreateFileW lstrcmpW lstrlenW GlobalUnlock GetCurrentDirectoryW GlobalFree FindClose GetLocalTime LockResource CreateEventW Module32FirstW GetModuleHandleA FindNextFileW CreateToolhelp32Snapshot GetFileAttributesExW Module32NextW WriteConsoleW

user32

SetDlgItemTextW ShowWindow SendDlgItemMessageW SetFocus DialogBoxIndirectParamW CharNextW GetMonitorInfoW RegisterClassW MonitorFromWindow wsprintfW GetClassInfoExW PostMessageW LoadImageW IsRectEmpty GetCaretBlinkTime GetCaretPos InvalidateRect IntersectRect PtInRect GetWindowTextLengthW SetCursor UnionRect OffsetRect wvsprintfW MapWindowPoints ReleaseCapture GetActiveWindow GetCursorPos ReleaseDC GetDC GetUpdateRect BeginPaint TrackMouseEvent GetFocus GetKeyState SetCapture EndPaint SetRect CharPrevW DrawTextW FillRect SetCaretPos CreateCaret GetSysColor ShowCaret HideCaret ClientToScreen GetGUIThreadInfo CreateAcceleratorTableW InvalidateRgn GetClientRect LoadIconW SetWindowPos IsWindow PostQuitMessage GetWindowRect ScreenToClient SetTimer GetPropW EnableWindow GetParent DispatchMessageW DefWindowProcW UpdateWindow CreateWindowExW SetWindowLongW SetClassLongW GetWindow CallNextHookEx PeekMessageW GetDlgItem SetWindowsHookExW UnhookWindowsHookEx CloseClipboard IsIconic SetPropW GetWindowTextW GetClassNameW EmptyClipboard EndDialog GetDesktopWindow EnumChildWindows OpenClipboard GetSystemMetrics IsWindowVisible SendMessageW SetClipboardData CallWindowProcW MoveWindow GetWindowLongW CreateDialogIndirectParamW RegisterClassExW IsDialogMessageW TranslateMessage FindWindowW LoadCursorW SetForegroundWindow GetMessageW SetWindowTextW MessageBoxW DestroyWindow KillTimer

shell32

SHGetSpecialFolderLocation ord165 SHGetPathFromIDListW ShellExecuteW CommandLineToArgvW

ole32

CLSIDFromProgID CoUninitialize OleLockRunning GetHGlobalFromStream CreateStreamOnHGlobal CoTaskMemFree CoCreateGuid CoCreateInstance CoInitialize CLSIDFromString

wininet

InternetCrackUrlA

shlwapi

PathIsDirectoryW SHDeleteValueW PathFileExistsW PathAppendW StrStrW StrStrIW wnsprintfW wvnsprintfW SHGetValueA PathFindFileNameW PathRemoveFileSpecW SHSetValueA StrChrW SHGetValueW SHDeleteKeyW StrCmpNIW SHSetValueW StrChrA wnsprintfA wvnsprintfA SHDeleteValueA PathFileExistsA SHCreateStreamOnFileW StrCatBuffW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

ws2_32

connect WSASocketW WSAIoctl WSACloseEvent closesocket WSAGetOverlappedResult recv WSAGetLastError WSARecv inet_addr WSAStartup WSAWaitForMultipleEvents WSACreateEvent bind setsockopt htons send

dnsapi

DnsQuery_A DnsFree

libcurl32

curl_easy_reset curl_easy_init curl_slist_free_all curl_formfree curl_formadd curl_easy_strerror curl_easy_perform curl_easy_setopt curl_free curl_slist_append curl_easy_getinfo curl_easy_escape curl_global_init curl_easy_cleanup

comctl32

ord17

imm32

ImmReleaseContext ImmSetCompositionFontW ImmSetCompositionWindow ImmGetContext

gdi32

GetStockObject GdiFlush RestoreDC SetTextColor CreatePen Rectangle CreatePatternBrush CreateSolidBrush SaveDC GetObjectW SetBkMode CreateCompatibleBitmap CreateCompatibleDC GetObjectA SetWindowOrgEx BitBlt GetTextMetricsW SelectObject DeleteObject CreateFontIndirectW GetDeviceCaps MoveToEx GetTextExtentPoint32W LineTo StretchBlt SetBkColor SelectClipRgn CreatePenIndirect CreateRectRgnIndirect CombineRgn ExtTextOutW GetCharABCWidthsW SetStretchBltMode CreateRoundRectRgn GetClipBox RoundRect ExtSelectClipRgn TextOutW CreateDIBSection DeleteDC

comdlg32

GetOpenFileNameW

advapi32

RegCreateKeyExW RegEnumValueW GetUserNameW RegSetValueExW RegCloseKey RegOpenKeyExW

oleaut32

SysFreeString VariantInit VariantClear SysAllocString

gdiplus

GdipGetFamily GdipGetPropertyItem GdipImageSelectActiveFrame GdipImageGetFrameDimensionsList GdipGetImageHeight GdipLoadImageFromStream GdiplusStartup GdipCreateFontFromDC GdipImageGetFrameCount GdipGetImageWidth GdipImageGetFrameDimensionsCount GdipDeleteStringFormat GdipSetPixelOffsetMode GdipCreateStringFormat GdipCloneImage GdipSetInterpolationMode GdiplusShutdown GdipDeleteBrush GdipFree GdipCloneBrush GdipCreateFontFromLogfontA GdipSetStringFormatLineAlign GdipSetTextRenderingHint GdipDeleteFont GdipCreateBitmapFromScan0 GdipDeleteGraphics GdipGetImageGraphicsContext GdipDrawImageRectI GdipSetStringFormatAlign GdipGraphicsClear GdipDrawImage GdipSetSmoothingMode GdipCreateLineBrushI GdipDeleteFontFamily GdipAlloc GdipDisposeImage GdipDrawString GdipCreateFromHDC GdipSetCompositingQuality GdipGetPropertyItemSize

compress32.dll

IMPHASH 090c20eca173b09606930e908ad6147d
SHA256 e4bc29d5ab712e271e03815753f9425248af4f55516b31814cbe378537ddf001
MD5 ae88317cd9d27c31d786a9ec3c5606b5
SHA1 a08375645ebbdadcaa147612bad341a5a5c9cc34
SHA512 d1388932d083d406b4559734a136f4a9c17e4983b6ff8cc87e99116d75b32c47d0ced2ad2bfd5ffb9eba0706cb67c0f2923c9830060183d0d9be4a5321287a86
SSDEEP 24576:IVLQbqK0EQEyQwv9Tr1BbxxZOKt6niAhI7NHU2o/hXRu7xXPch:OQefTQw1Tr1HXOpnTIa2oZXY7xX4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

c4:8b:79:ae:27:4e:5d:52:f6:f3:e6:24:96:0e:3a:21:3a:e8:f0:53:cf:0a:44:94:65:cf:16:91:7b:7a:99:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Aug 12, 2021

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

5b:66:d0:3a:79:13:7b:eb:0d:40:b9:10:49:79:ff:1f:30:6e:7f:f0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 23, 2020 - Jan 22, 2032

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

5

Entry point

635286

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

R:\po\trunk\libs\7z\project\CPP\7zip\Bundles\Alone7zDll\Release\compress32.pdb

kernel32

GetProcAddress GetModuleHandleW GetProcessTimes GetCurrentProcess GetCommandLineW SetFileApisToOEM GetVersionExW GetTickCount GetConsoleMode SetConsoleMode GetStdHandle MultiByteToWideChar WideCharToMultiByte FreeLibrary LoadLibraryExW GetModuleFileNameW LocalFree FormatMessageW GetWindowsDirectoryW GetSystemDirectoryW CloseHandle SetFileTime CreateFileW SetFileAttributesW RemoveDirectoryW MoveFileW CreateDirectoryW SetCurrentDirectoryW GetCurrentDirectoryW GetTempPathW SetLastError GetCurrentProcessId GetCurrentThreadId FindClose FindFirstFileW FindNextFileW GetModuleHandleA GetFileAttributesW FindCloseChangeNotification FindFirstChangeNotificationW GetLogicalDriveStringsW DeviceIoControl GetFileSize SetFilePointer ReadFile LoadLibraryW SetEndOfFile GetFileInformationByHandle GetVolumeInformationW GetDriveTypeW GetDiskFreeSpaceW FileTimeToSystemTime FileTimeToLocalFileTime GetProcessAffinityMask GetSystemInfo GlobalMemoryStatus DosDateTimeToFileTime FileTimeToDosDateTime GetSystemTimeAsFileTime WaitForMultipleObjects LocalFileTimeToFileTime OpenFileMappingW MapViewOfFile UnmapViewOfFile OpenEventW SetProcessAffinityMask IsProcessorFeaturePresent QueryPerformanceCounter VirtualAlloc VirtualFree lstrcatW lstrlenW InterlockedIncrement WaitForSingleObject CreateEventW SetEvent ResetEvent CreateSemaphoreW ReleaseSemaphore InitializeCriticalSection DeleteFileW Sleep TerminateThread VirtualProtect DisableThreadLibraryCalls CreateThread CreatePipe CompareStringW CompareStringA GetTimeZoneInformation GetLastError CompareFileTime LeaveCriticalSection EnterCriticalSection DeleteCriticalSection WriteFile SetConsoleCtrlHandler GetProcessHeap LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetDateFormatA RaiseException RtlUnwind HeapAlloc HeapFree HeapReAlloc ExitThread TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetStdHandle GetFileType GetCommandLineA SetHandleCount GetStartupInfoA GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedDecrement GetCurrentThread HeapSize ExitProcess FatalAppExitA HeapCreate HeapDestroy GetConsoleCP FlushFileBuffers InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW LoadLibraryA GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoW GetLocaleInfoA InterlockedExchange WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA GetTimeFormatA SetEnvironmentVariableA

user32

CharUpperW CharPrevExA

advapi32

GetFileSecurityW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges SystemFunction036

oleaut32

SysFreeString VariantCopy VariantClear SysAllocStringLen SysStringLen SysAllocString

shlwapi

wnsprintfW

compress64.dll

IMPHASH dd424e15339e28d81f474b2a153530a6
SHA256 94663d7c84d2afd3b4378a49aad7a8891649bfc61bb2ae8240a65fcfd0ecac4d
MD5 b73bca6ec271f912e1dcef900d8c0a0a
SHA1 d9fb64ce0a6cb02f765847dd61488a44d4da06ee
SHA512 3970bd07678c624b46c48f5bcdb247d5b3fa5a2c7e758d1fb3a85822dcc2bd6f4a8b2691f2573eb89f3abec96ee3183a11c942d27f35d14d0a1ecd796cc50b12
SSDEEP 24576:J+mnAmkc5t+W2pFu2zygGRCX1KMdk+tjwVTF2KNis66EQULFUK2e:J+Oh+vF/ut2KMd1wVTF2d6ZULOW
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

Digest

e4:76:1f:5a:c0:0d:cb:3f:9f:f6:0c:90:56:e7:6e:23:b9:07:80:2e:7f:53:1e:3d:ee:86:f0:a3:28:d9:26:f7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Aug 12, 2021

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

82:fc:3e:6a:77:01:46:4b:f0:9d:58:73:76:f5:61:6c:16:9d:ab:83

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 23, 2020 - Jan 22, 2032

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

2

Major OS version

5

Entry point

884196

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

R:\po\trunk\libs\7z\project\CPP\7zip\Bundles\Alone7zDll\Release\compress64.pdb

kernel32

GetProcAddress GetModuleHandleW GetProcessTimes GetCurrentProcess GetCommandLineW SetFileApisToOEM GetTickCount SetConsoleMode GetConsoleMode GetStdHandle MultiByteToWideChar WideCharToMultiByte FreeLibrary LoadLibraryExW GetModuleFileNameW LocalFree FormatMessageW GetWindowsDirectoryW GetSystemDirectoryW CloseHandle SetFileTime CreateFileW SetFileAttributesW RemoveDirectoryW MoveFileW CreateDirectoryW SetCurrentDirectoryW GetCurrentDirectoryW GetTempPathW SetLastError GetCurrentProcessId GetCurrentThreadId FindClose FindFirstFileW FindNextFileW GetModuleHandleA GetFileAttributesW FindCloseChangeNotification FindFirstChangeNotificationW GetLogicalDriveStringsW DeviceIoControl GetFileSize SetFilePointer ReadFile LoadLibraryW SetEndOfFile GetFileInformationByHandle GetVolumeInformationW GetDriveTypeW GetDiskFreeSpaceW FileTimeToSystemTime FileTimeToLocalFileTime GetProcessAffinityMask GetSystemInfo GlobalMemoryStatusEx DosDateTimeToFileTime FileTimeToDosDateTime GetSystemTimeAsFileTime WaitForMultipleObjects LocalFileTimeToFileTime OpenFileMappingW MapViewOfFile UnmapViewOfFile OpenEventW SetProcessAffinityMask IsProcessorFeaturePresent QueryPerformanceCounter VirtualAlloc VirtualFree GetVersionExW lstrcatW lstrlenW WaitForSingleObject CreateEventW SetEvent ResetEvent CreateSemaphoreW ReleaseSemaphore InitializeCriticalSection DeleteFileW Sleep TerminateThread VirtualProtect DisableThreadLibraryCalls CreateThread CreatePipe CompareStringW CompareStringA GetTimeZoneInformation GetLastError CompareFileTime LeaveCriticalSection EnterCriticalSection DeleteCriticalSection WriteFile SetConsoleCtrlHandler GetProcessHeap LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetTimeFormatA RaiseException RtlPcToFileHeader RtlLookupFunctionEntry RtlUnwindEx HeapAlloc HeapFree HeapReAlloc ExitThread TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext SetStdHandle GetFileType FlsSetValue GetCommandLineA SetHandleCount GetStartupInfoA GetModuleFileNameA EncodePointer DecodePointer TlsAlloc FlsGetValue FlsFree GetCurrentThread FlsAlloc HeapSize ExitProcess HeapSetInformation HeapCreate HeapDestroy FatalAppExitA GetConsoleCP FlushFileBuffers InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW LoadLibraryA GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA GetDateFormatA SetEnvironmentVariableA

user32

CharUpperW CharPrevExA

advapi32

GetFileSecurityW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges SystemFunction036

oleaut32

SysFreeString VariantCopy VariantClear SysAllocStringLen SysStringLen SysAllocString

shlwapi

wnsprintfW

cryptdt.dll

IMPHASH 9e1eee7b1fed8e2191ff082de776d2fa
SHA256 e65ebc3c507d64cc8eadde673a3af56b3b83462c784d269e0485ddae03910a99
MD5 2d434517d33b1af2380b735986860c21
SHA1 e8810f7263561348af8bfe8203182a73e790d071
SHA512 e52089bc9e5efec4508afea69f70a6f553a8737fc474dc128c5d038e407d1a3e80ea80df94239f5b8aefdbfb7b35c6bd84ba26492efd00f6f032d978f25eaf95
SSDEEP 1536:R+QMZHfhrlv0R7WEd59hRUJioQ+lt9VC3hSK:REV8R7WEH2f1/K
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

3c:68:9e:36:20:a7:75:91:66:05:c9:00:e7:a9:c9:a7:e3:e4:ef:c1:2f:e8:f2:a2:af:8d:b4:51:80:2b:60:13

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Jan 21, 2021

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

b2:a4:ae:41:fc:25:3f:fa:84:79:5a:aa:b4:4a:e5:e8:38:b0:e7:19

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 23, 2020 - Jan 22, 2032

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

5

Entry point

4955

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\nfentry\Release\cryptdt.pdb

ctask32.dll

IMPHASH f874ff58e45b6fd99e694b422c3632be
SHA256 384a11b6707efb86048c82e3e821935a3304f591ff4b2e72e5cc8f11feeb5ff2
MD5 e724f9a2a5b0b790f3c5fb6f7df58e34
SHA1 735a0137244fb3ef53a263f2714f55f0cf57119a
SHA512 713d5a488c2b51f049eb0897cc662cc1b90eecc41f9de35020ee66f58fb2daa7daecc4594b3684d3c8cdaa2578c6121a2423e2304d7c0717a54fa8efaf65a2a5
SSDEEP 3072:6okd8iAUHLTJ/haB2fhIgCkMYZ04yvmxj477NLT7A2ywXoVGRYvmKD+oe1JsDJsf:xm9v+IZIH5osHNLTE2yKotLSoQGDGvH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

9c:2b:12:2c:c8:4a:60:8c:4b:59:2d:9a:ae:13:19:d3:0c:f4:1d:d9:e8:60:84:c6:c3:7d:77:19:31:ca:76:ed

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Dec 4, 2023

PE Signature issue

Digest

15:f2:83:34:67:77:f6:03:52:8e:f7:2c:cf:99:4f:32:ef:2d:0a:56

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Dec 4, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

107395

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\ctask\Release\ctask32.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP DisableThreadLibraryCalls lstrcmpA CloseHandle GetLocalTime EnterCriticalSection ReadFile LeaveCriticalSection Sleep InitializeCriticalSection lstrcpynA lstrlenA SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind HeapAlloc GetLastError HeapFree GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetModuleFileNameW lstrlenW GetModuleHandleA lstrcpyW CreateThread lstrcpyA CreateFileA VirtualQuery SystemTimeToFileTime Module32FirstW CreateToolhelp32Snapshot Module32NextW WriteConsoleW

shlwapi

SHGetValueA SHGetValueW wnsprintfA SHSetValueW wvnsprintfA PathFindFileNameW wvnsprintfW SHDeleteValueW wnsprintfW

advapi32

RegCloseKey RegOpenKeyExW RegEnumValueW

ctask64.dll

IMPHASH 127407e9351441ce742fa17e3dee0b28
SHA256 a32ad31460f6714651fb9a222a88a8fb6c0a0611852c241d119ce41800f0777c
MD5 20a70989b00ba5f674ecfc5927f0ef5a
SHA1 eb75d2a41ac2833381c50404a861ed6c1d370ea1
SHA512 1480b3a392a1aa775280a5bb5cb78ba9156be95ca1166b14a91a01803d7877f04621222d8f9bc89f3b7e7fadb047dffcfd082466abeb91c4ead8f5c8487b3d74
SSDEEP 6144:xZt95cc53o75ESWo+iYFHiyGRqqqVxj+WWLnvsYQGIlGRd:xzvTggPioHXVELvlEc
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

88:99:18:56:38:f8:40:61:4b:62:73:9f:dc:07:f8:e1:46:ed:f0:3a:84:bd:5b:68:92:34:ff:2d:13:35:ec:93

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Dec 4, 2023

PE Signature issue

Digest

3e:86:0e:d1:ca:57:82:70:b5:f1:29:78:b5:c9:4a:0b:8b:a0:7d:ae

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Dec 4, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

155776

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\ctask\Release\ctask64.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP DisableThreadLibraryCalls lstrcmpA CloseHandle GetLocalTime EnterCriticalSection ReadFile LeaveCriticalSection Sleep InitializeCriticalSection lstrcpynA Module32NextW lstrlenA SetFilePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapAlloc GetLastError HeapFree EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc HeapSize GetModuleHandleW GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetModuleFileNameW lstrlenW GetModuleHandleA lstrcpyW CreateThread lstrcpyA CreateFileA VirtualQuery SystemTimeToFileTime Module32FirstW CreateToolhelp32Snapshot WriteConsoleW

shlwapi

PathFindFileNameW SHGetValueA SHGetValueW wvnsprintfW SHSetValueW wvnsprintfA wnsprintfA SHDeleteValueW wnsprintfW

advapi32

RegCloseKey RegOpenKeyExW RegEnumValueW

deskmgr32.dll

IMPHASH 2e7900a226b2cc0bb86664058277a261
SHA256 0aa558b7df045b740e0e10c702e33da67cd0f3d3e3adc240a493d9c95da4c317
MD5 5030ef25589eee5c1eec4555cb09f21d
SHA1 b2a2a292f48ac576920973fa3affee427b6c0f33
SHA512 87995ac36cf9b015c498f1ece074db349a411aea436612612ce403fe1b1ea7020ef7fd1b522edb97e1c48724ed7dc2bfd63e45ffa70203201d602bfc492c02dc
SSDEEP 12288:qhxqCgkoyYWDSCEtMg780Fj+DwxEdj7C94Gt+oHgr0OxJ1jaMMQMhHPh9pHyPct:24y3DOj+Mf9/t+sOxJ1jaMMhHZ9pSPct
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

88:d9:45:bb:a4:77:7b:b4:68:18:a2:41:31:d8:df:70:8c:77:d0:71:a1:63:c5:8d:3d:4a:0b:cf:a6:7d:27:f6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 22, 2023

PE Signature issue

Digest

29:a3:6b:41:4f:cb:84:af:2e:c4:05:e9:4e:cd:a3:e8:34:fd:92:a5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 22, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

204663

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\deskmgr\Release\deskmgr32.pdb

gdiplus

GdipCloneBrush GdipFree GdipDeleteBrush GdipCreateFontFromDC GdipDeleteStringFormat GdipCreateStringFormat GdipCreateLineBrushI GdipCreateFontFamilyFromName GdipTranslateWorldTransform GdipDrawString GdipDrawImagePointRect GdipGetGenericFontFamilySansSerif GdipRotateWorldTransform GdipCreateFont GdipDeleteFontFamily GdipSetStringFormatAlign GdipDeleteFont GdipSetTextRenderingHint GdipSetStringFormatLineAlign GdipMeasureString GdipCreateFontFromLogfontA GdipFillEllipseI GdipCloneImage GdipDisposeImage GdipDrawImageI GdipCreateSolidFill GdipGetImageGraphicsContext GdipCreateBitmapFromScan0 GdipGetImageWidth GdipFillRectangleI GdipCreateFromHDC GdipAlloc GdipDrawImageRectI GdipLoadImageFromFile GdipSetPageUnit GdipDrawImageRectRectI GdipGetImageHeight GdipDeleteGraphics GdipGraphicsClear GdipCreateTexture GdiplusStartup

kernel32

InitializeCriticalSection GetVersionExW LeaveCriticalSection TerminateProcess GetProcAddress EnterCriticalSection ProcessIdToSessionId CreateEventW GetModuleHandleA GetCurrentProcessId CreateMutexW TerminateThread ReleaseMutex GetComputerNameW lstrlenA DeleteFileW GetTempPathW GetExitCodeProcess Sleep GetTickCount OutputDebugStringW WaitForSingleObject GetConsoleCP SetEvent DisableThreadLibraryCalls SetFilePointer lstrcmpA lstrcpyA lstrcpyW LocalFree Module32NextW GetConsoleMode CreateToolhelp32Snapshot FindNextFileW lstrcatW Process32NextW Module32FirstW QueryDosDeviceW Process32FirstW FindClose GetCurrentDirectoryW lstrlenW lstrcmpW CreateFileW CreateThread lstrcmpiW lstrcmpiA CloseHandle GetLocalTime SetLastError GetWindowsDirectoryW GetLastError FlushFileBuffers SetStdHandle WriteConsoleA GetModuleFileNameW ReadFile FileTimeToSystemTime GetFileAttributesW lstrcpynW LoadLibraryW OpenProcess GetProcessHeap GetLogicalDrives SystemTimeToFileTime CreateProcessW SetEndOfFile VirtualQuery FindFirstFileW CreateFileA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount InterlockedExchange GetLocaleInfoA GetLocaleInfoW LoadLibraryA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount HeapReAlloc VirtualAlloc DeleteCriticalSection GetConsoleOutputCP GetFileAttributesExW GetCurrentThreadId VirtualFree HeapDestroy HeapCreate LCMapStringW MultiByteToWideChar WideCharToMultiByte LCMapStringA IsValidCodePage GetOEMCP GetACP GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime HeapFree HeapAlloc WriteConsoleW GetCommandLineA RaiseException RtlUnwind GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA HeapSize ExitProcess GetCPInfo

user32

WindowFromPoint GetUserObjectInformationA LockWorkStation OpenInputDesktop CloseDesktop GetForegroundWindow GetClassNameW IsWindow GetWindowThreadProcessId ExitWindowsEx GetLastInputInfo ClientToScreen DestroyWindow UpdateLayeredWindow SetTimer GetTopWindow PostMessageW KillTimer SetParent GetClientRect SetPropW GetDC GetWindowLongW PeekMessageW ReleaseDC SetWindowLongW SetWindowPos ShowWindow PostThreadMessageW GetLayeredWindowAttributes SetWindowTextW GetPropW GetWindow DispatchMessageW GetWindowRect FindWindowW FindWindowExW MessageBoxW GetMessageW PostQuitMessage IsIconic LoadCursorW EnumWindows TranslateMessage RegisterClassExW LoadIconW SystemParametersInfoW CreateWindowExW DispatchMessageA IsWindowVisible UpdateWindow DefWindowProcW GetSystemMetrics

gdi32

DeleteDC DeleteObject SelectObject CreateCompatibleDC CreateCompatibleBitmap GetStockObject GetObjectA

advapi32

ImpersonateLoggedOnUser GetUserNameW OpenProcessToken RegSetValueExW RegCloseKey AdjustTokenPrivileges RegOpenKeyExW FreeSid RegEnumValueW SetEntriesInAclW AllocateAndInitializeSid SetFileSecurityW LookupPrivilegeValueW SetSecurityDescriptorDacl InitializeSecurityDescriptor CreateProcessAsUserW RegCreateKeyExW

ole32

CoTaskMemFree CoCreateGuid CoCreateInstance CoInitialize

shlwapi

PathFileExistsW PathAppendW PathFindFileNameW StrStrW StrStrIW PathIsDirectoryW wvnsprintfW SHGetValueA PathRemoveFileSpecW StrChrW SHGetValueW StrCmpNIW SHSetValueW wnsprintfW StrChrA StrCatW wvnsprintfA wnsprintfA

wtsapi32

WTSRegisterSessionNotification WTSQueryUserToken WTSUnRegisterSessionNotification

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

psapi

GetProcessImageFileNameW

shell32

SHGetPathFromIDListW SHGetSpecialFolderLocation ord165

doced32.dll

IMPHASH 8d910a81f6a89331aedb80425a2e4b6b
SHA256 bb87bd887fb41d8714b5eaccabddfd5bafa63a52013546d36ec8e5528848e8da
MD5 46e823ede8c584f21f86ca101755b559
SHA1 9e2dd5fdef02f242c60b4f65c6b6ccde94e8894f
SHA512 b715709107e20348a568994a5a9a23de0b22db5ebf0b4c297daf6541ab5cc3985067e0e1671f10ba3bb377ac134587e8bed34182cfbf321465b4cbcc49aecab6
SSDEEP 6144:sQLjr23Fv1TbT180dDshCrMhm24/SvFrc1+ed2DBVT0waC+imeXdQd+2Zu8/N2lc:5S3Fv1TbTe0dDshCrMhmU9rc1+eYmwar
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

79:72:c0:62:be:e7:dc:87:ba:a4:cc:13:6e:7e:c6:06:dc:26:ee:e9:44:28:75:d0:25:82:d4:4f:f4:69:21:7e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 28, 2024

PE Signature issue

Digest

25:1c:66:29:30:fe:44:6e:32:0a:9b:ee:fe:67:eb:0d:22:e6:98:25

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 28, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

166264

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\doced\Release\doced32.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP DisableThreadLibraryCalls lstrcmpA CreateThread CloseHandle GetDiskFreeSpaceExW lstrcmpiW GetExitCodeThread GetLocalTime SetLastError GetLastError CreateFileW GetModuleFileNameW ReadFile GetFileAttributesW lstrcpynW Sleep GetSystemDirectoryW GetLogicalDrives WaitForSingleObject GetWindowsDirectoryW OutputDebugStringW MoveFileExW lstrcpyA SetFileAttributesW lstrcpyW DeleteFileW GetDriveTypeW SetFilePointer GetFileSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapSize ExitProcess GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetLocaleInfoW CreateFileA FindFirstFileW VirtualQuery lstrcpynA SetEndOfFile SetEvent GetDriveTypeA InitializeCriticalSection OpenProcess LoadLibraryW lstrcmpW lstrlenW GetTempPathW GetCurrentDirectoryW FindClose Process32FirstW ProcessIdToSessionId RemoveDirectoryW DeviceIoControl Module32FirstW Process32NextW GetModuleHandleA FindNextFileW CreateToolhelp32Snapshot GetFileAttributesExW OpenEventW Module32NextW WriteConsoleW

user32

MessageBoxW

shell32

SHCreateDirectoryExW SHGetSpecialFolderPathW ord165

shlwapi

PathFindExtensionW wnsprintfW PathIsDirectoryW SHGetValueA PathFindFileNameW PathRemoveFileSpecW StrChrW wvnsprintfW SHGetValueW SHSetValueW StrChrA wnsprintfA wvnsprintfA StrCatW PathMatchSpecW PathAppendW SHDeleteKeyW PathFileExistsW StrStrIW PathAddBackslashW

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

advapi32

RegOpenKeyExW OpenProcessToken RegCreateKeyExW CreateProcessAsUserW RegOpenKeyW GetUserNameW RegSetValueExW RegCloseKey RegEnumValueW

ole32

CoCreateGuid

doced64.dll

IMPHASH 77fa382513d2ee82a102f642b2ba9d2b
SHA256 3c1ba823941ec333e311ef34a63f83d3a2fd2ce046ed3581237d631b867d57c6
MD5 e81610d99ac14b86be8796a6b85c5d8e
SHA1 6b4c6a7cdd7f8e1a38b8bbf3cf7bd387859d5905
SHA512 84ebb871c0e1be9aad47137ea2c01915fe46ff3ab84ab49754d187c0d2b43d737d580024e920978fac2f501a7f16619fa46b02fe6061a30b7325b9b59be6f43e
SSDEEP 6144:h94J+PAkGNSgCk4knE9RR0mgWL/wPBD9pvyOeQnyWGEUoZK1J0eZGtR8HglNWlmK:7PoCf9r039pniOZK1J8tc7
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

1a:be:cf:c9:a8:6d:12:07:f5:58:87:b2:93:26:bb:53:de:3b:75:94:6a:37:f0:7f:3b:7e:cf:0b:ac:52:e0:29

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 28, 2024

PE Signature issue

Digest

cf:71:71:76:fa:8d:0b:b0:d8:78:e0:ae:d6:ca:8e:6f:bb:2c:4a:e0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 28, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

262160

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\doced\Release\doced64.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP DisableThreadLibraryCalls lstrcmpA CreateThread CloseHandle GetDiskFreeSpaceExW lstrcmpiW GetExitCodeThread GetLocalTime SetLastError GetLastError CreateFileW GetModuleFileNameW ReadFile GetFileAttributesW lstrcpynW Sleep GetSystemDirectoryW GetLogicalDrives WaitForSingleObject GetWindowsDirectoryW OutputDebugStringW MoveFileExW lstrcpyA SetFileAttributesW lstrcpyW DeleteFileW GetDriveTypeW SetFilePointer GetFileSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapAlloc HeapFree EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc HeapSize GetModuleHandleW GetProcAddress ExitProcess GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetLocaleInfoW CreateFileA FindFirstFileW VirtualQuery lstrcpynA SetEndOfFile SetEvent GetDriveTypeA InitializeCriticalSection OpenProcess LoadLibraryW lstrcmpW lstrlenW GetTempPathW GetCurrentDirectoryW FindClose Process32FirstW ProcessIdToSessionId RemoveDirectoryW DeviceIoControl Module32FirstW Process32NextW GetModuleHandleA FindNextFileW CreateToolhelp32Snapshot GetFileAttributesExW OpenEventW Module32NextW WriteConsoleW

user32

MessageBoxW

shell32

SHGetSpecialFolderPathW SHCreateDirectoryExW ord165

shlwapi

wnsprintfW wvnsprintfW PathIsDirectoryW SHGetValueA PathFindFileNameW PathRemoveFileSpecW StrChrW SHGetValueW SHSetValueW StrChrA wnsprintfA wvnsprintfA StrCatW PathMatchSpecW PathAppendW SHDeleteKeyW PathFileExistsW StrStrIW PathAddBackslashW PathFindExtensionW

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

advapi32

RegEnumValueW RegOpenKeyExW OpenProcessToken RegCreateKeyExW CreateProcessAsUserW RegOpenKeyW GetUserNameW RegSetValueExW RegCloseKey

ole32

CoCreateGuid

docext.dll

IMPHASH 4e533604d563420622f1a0d6da11d6da
SHA256 4549df5a6de2bfc3fcebc7c465d605c6f071c6352348431052c39ad10e6d5262
MD5 7faf30db3961c9e28f5737efca00924f
SHA1 bf59f3339ac3314e8e6490a8ad35fcdd0afe7f5f
SHA512 c6814c9a6da1e8e1dee63b0f695074cb10a57902d4ea2ddbd2a17063ddbb4c180c4e654daccb5fd1148a993391156d0a237dc4a998ed787298ff5d316743bcb2
SSDEEP 3072:ViDQugAL8tTUyfU1rs2iHmvvtKcwH2iH5s5DT4LYx5QI22fM4:CQZAL8tUAEApZcGQM+V28M4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

4d:e5:a0:33:55:bf:16:a6:03:86:0d:2b:12:07:4c:ec:87:8b:86:17:cd:2e:c6:bd:b3:23:21:db:76:b9:56:f6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

May 8, 2021

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

72:56:b7:e9:71:a2:7d:1f:df:bb:9b:e4:83:b0:51:05:28:81:c9:3e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 23, 2020 - Jan 22, 2032

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

5

Entry point

47603

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\docscanner\Release\docext.pdb

kernel32

LocalFree GetModuleFileNameA GetFileAttributesW GetCurrentThread GetCommandLineW LoadLibraryExA LoadLibraryExW SuspendThread GetThreadContext SetThreadContext FlushInstructionCache ResumeThread VirtualProtect InterlockedCompareExchange WriteConsoleW GetConsoleOutputCP WriteConsoleA DisableThreadLibraryCalls GetModuleFileNameW ExitProcess GetCurrentProcessId OutputDebugStringW lstrcpyW VirtualQuery HeapAlloc GetCurrentProcess HeapFree GetModuleHandleW GetTickCount WriteFile InitializeCriticalSection WideCharToMultiByte LeaveCriticalSection TerminateProcess GetACP MultiByteToWideChar GetLastError SetLastError GetProcAddress EnterCriticalSection LoadLibraryA Module32FirstW GetModuleHandleA CreateToolhelp32Snapshot OpenEventW Module32NextW CloseHandle CreateFileA SetFilePointer GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement Sleep HeapSize GetStdHandle SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime GetCPInfo GetOEMCP IsValidCodePage LCMapStringA LCMapStringW VirtualAlloc FreeLibrary InterlockedExchange InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle

shell32

CommandLineToArgvW

shlwapi

PathFindFileNameW wnsprintfA SHGetValueW StrCatW wvnsprintfW wnsprintfW

Name

.text

Size

135KB

Virtual Size

134KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourd

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

436B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

docguard32.dll

IMPHASH 06761a50da774bb099353d354bbe643c
SHA256 3189381444cc75a278f1855261f925edabf30020f934d94b97869615208fb321
MD5 acb4bb7cfee69e90aaeaf4fdbdd53a26
SHA1 18264c4b39c4ced3bfed2b93f51bf16a9078adeb
SHA512 a6366da73dcff05098d556f415ee58411655169903aa7e5f1fc6bdbad97c50c815ed34b4c4e262040e89ef0dc29eb78a398e730b884a459cdf9585baf66dd90b
SSDEEP 6144:aOenR3CxgTks5n+pPibdq+cR3+zYTvGZ0SkP9oC12x9TQRY4GdG2H:l8R3Ciks5dbOR3+zYTvGZHk1zoRn
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

6b:61:ab:34:c2:4a:86:0a:3f:cb:74:d2:00:c7:d0:11:bc:4b:f4:4f:46:98:a1:6d:57:e7:65:2d:16:b0:4b:a2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

PE Signature issue

Digest

55:5f:77:4a:6a:a1:b7:99:94:46:59:7b:07:67:07:b6:c6:fa:ad:a4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

178528

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\poflt\Release\docguard32.pdb

kernel32

GetModuleFileNameA GetLastError CreateThread lstrcpynW Sleep WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount InterlockedExchange GetLocaleInfoA GetLocaleInfoW VirtualAlloc GetSystemTimeAsFileTime QueryPerformanceCounter lstrcpynA DisableThreadLibraryCalls lstrcmpiA CreateFileA lstrcmpA FindFirstFileW VirtualQuery HeapAlloc GetCurrentProcess HeapFree SetEvent GetLogicalDrives GetModuleHandleW GetTickCount WriteFile InitializeCriticalSection OpenProcess WideCharToMultiByte LoadLibraryW CopyFileW GetVersionExW LeaveCriticalSection TerminateProcess ReadFile GetModuleFileNameW CreateFileW GetACP lstrcmpW MultiByteToWideChar lstrlenW GetFileSizeEx SetLastError GetProcAddress EnterCriticalSection FindClose GetLocalTime LoadLibraryA Process32FirstW QueryDosDeviceW DeviceIoControl Module32FirstW Process32NextW lstrcmpiW GetModuleHandleA lstrcatW FindNextFileW CreateToolhelp32Snapshot GetFileAttributesExW OpenEventW Module32NextW CloseHandle DeleteFileW GetCurrentProcessId lstrcpyW lstrcpyA GetCurrentThreadId GetSystemDirectoryW MoveFileW ExpandEnvironmentStringsW GetWindowsDirectoryW OutputDebugStringW SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetStdHandle HeapSize ExitProcess GetCPInfo GetOEMCP IsValidCodePage LCMapStringA LCMapStringW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree

user32

GetWindowRect GetDesktopWindow IsWindow MoveWindow SetTimer DialogBoxParamW GetWindowTextA MessageBoxA GetDlgItem EndDialog SetWindowTextA

shlwapi

StrStrW wnsprintfW wvnsprintfW PathFindExtensionW PathFindFileNameW PathFileExistsW PathAppendW StrNCatW StrChrW SHGetValueW StrCmpNIW SHSetValueW StrChrA wnsprintfA wvnsprintfA PathMatchSpecW StrCatW StrStrIA StrStrIW

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

psapi

GetProcessImageFileNameW

advapi32

OpenServiceW DeleteService OpenSCManagerW CreateServiceW CloseServiceHandle GetUserNameW RegCloseKey RegOpenKeyExW RegEnumValueW QueryServiceStatus StartServiceW

ole32

CoCreateGuid

docguard64.dll

IMPHASH 4ebca059eb95e72cba9922ae5c3712b4
SHA256 8d4cd61e2bf00ba7198769a7b255f3d44535191a3cf79352d6bc84e78771a1ad
MD5 d0b3790119729f76d9421d70caf5732c
SHA1 9d1810a098f016f24c46d2728796cf6bc2d7cc2f
SHA512 43fb33fc98c0698ee0fc0485829986149481a92f50195ca54e8174bdc901f26233ce04a78d94e4fd35eb3cf641e120fcc81de85dc8395577e76467c96c1ddcb0
SSDEEP 6144:WM12MU9TywUN31YA9hoaSY0RLte8pmeoAF6G8WTNEFlOMJKCW8gYmKmdGvXGbxN:V4rmwU5AL08ploAQ9FlvKo1e
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

dc:2b:f5:8f:a7:0a:37:b6:6c:41:b5:5e:58:a1:2c:a7:07:ee:d4:44:24:6e:77:54:59:98:c7:9b:9e:50:b0:12

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

PE Signature issue

Digest

06:da:8a:79:a5:13:d6:64:c8:f8:0f:6a:5d:59:3b:04:8d:11:00:da

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

264680

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\poflt\Release\docguard64.pdb

kernel32

GetModuleFileNameA GetLastError CreateThread lstrcpynW Sleep WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetLocaleInfoW GetSystemTimeAsFileTime QueryPerformanceCounter HeapDestroy HeapCreate lstrcpynA DisableThreadLibraryCalls lstrcmpiA CreateFileA lstrcmpA FindFirstFileW VirtualQuery HeapAlloc GetCurrentProcess HeapFree SetEvent GetLogicalDrives GetModuleHandleW GetTickCount WriteFile InitializeCriticalSection OpenProcess WideCharToMultiByte CopyFileW GetVersionExW LeaveCriticalSection TerminateProcess ReadFile GetModuleFileNameW CreateFileW GetACP lstrcmpW MultiByteToWideChar lstrlenW GetFileSizeEx SetLastError GetProcAddress EnterCriticalSection FindClose GetLocalTime LoadLibraryA Process32FirstW QueryDosDeviceW DeviceIoControl Module32FirstW Process32NextW lstrcmpiW GetModuleHandleA lstrcatW FindNextFileW CreateToolhelp32Snapshot GetFileAttributesExW OpenEventW Module32NextW CloseHandle DeleteFileW GetCurrentProcessId lstrcpyW lstrcpyA GetCurrentThreadId GetSystemDirectoryW MoveFileW ExpandEnvironmentStringsW GetWindowsDirectoryW OutputDebugStringW SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapReAlloc EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc GetStdHandle HeapSize ExitProcess GetCPInfo GetOEMCP IsValidCodePage LCMapStringA LCMapStringW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation

user32

GetWindowRect GetDesktopWindow IsWindow MoveWindow SetTimer DialogBoxParamW GetWindowTextA MessageBoxA GetDlgItem EndDialog SetWindowTextA

shlwapi

wnsprintfW wvnsprintfW PathFindExtensionW PathFindFileNameW PathFileExistsW PathAppendW StrStrIA StrStrW StrNCatW StrChrW SHGetValueW StrCmpNIW SHSetValueW StrChrA wnsprintfA wvnsprintfA PathMatchSpecW StrStrIW StrCatW

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

psapi

GetProcessImageFileNameW

advapi32

OpenServiceW DeleteService OpenSCManagerW CreateServiceW CloseServiceHandle GetUserNameW RegCloseKey RegOpenKeyExW RegEnumValueW QueryServiceStatus StartServiceW

ole32

CoCreateGuid

docscanner32.dll

IMPHASH 039a729aca4c1c4cd05dc7ee0869e7fe
SHA256 2f6b01dd3f0e39f95d49726320bce8dfb7f71e307f9cbe8f356eb4306a031ddd
MD5 1940f91542494d7bafacac5954875eb4
SHA1 edd65f3d6320d889aea834c7a47056b890377dde
SHA512 62c8943160b4d68356d4d1b1b124c0e8349a76afeaa7cecd87d1639fc320da91b8a9bc7f421144afa4408b1a3ae68abe4ae55e3938849aa31bd43832bb992b42
SSDEEP 12288:xQspcwpH+pm4RoIPLq67ryPa9LtSbrtFEFWeRSFEHK8taKit:xQIcwpxtFEIeSaHKKa5t
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

b6:19:fa:fe:c3:cb:f7:c1:c8:01:b8:6a:58:3a:96:42:72:d2:8c:08:ed:12:5c:58:7e:1b:c2:8c:16:7e:db:c8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

PE Signature issue

Digest

7f:59:17:79:0f:6c:e8:2e:8c:da:93:bf:09:ac:a9:e2:a8:c3:5c:4a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

352717

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\docscanner\Release\docscanner32.pdb

kernel32

lstrcpyW lstrlenA GetVolumeInformationW DebugBreak TlsAlloc lstrcpynW TlsSetValue TlsGetValue DisableThreadLibraryCalls lstrcmpA DeleteCriticalSection OpenEventW SetEvent DeleteFileW FileTimeToLocalFileTime GetFileTime GetLocalTime EnterCriticalSection lstrlenW ReadFile FileTimeToSystemTime TerminateProcess LeaveCriticalSection WriteFile SystemTimeToFileTime SetFilePointer GetFileSize Sleep WaitForSingleObject CreateThread CreateIoCompletionPort lstrcmpiW CreateEventW GetLastError InitializeCriticalSection ReadDirectoryChangesW GetQueuedCompletionStatus GetTickCount CloseHandle CreateFileMappingW GetFileSizeEx CreateFileW MoveFileExW GetWindowsDirectoryW SetFileAttributesW Module32NextW GetFileAttributesExW CreateToolhelp32Snapshot GetModuleHandleA Process32NextW Module32FirstW DeviceIoControl QueryDosDeviceW ProcessIdToSessionId Process32FirstW GetFileAttributesW GetLogicalDrives GetDriveTypeW UnmapViewOfFile MapViewOfFile WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar HeapFree HeapAlloc GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc GetModuleHandleW GetProcAddress ExitProcess GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind GetCPInfo LCMapStringW CompareStringW LCMapStringA GetStringTypeW HeapCreate HeapDestroy VirtualFree VirtualAlloc GetStdHandle GetModuleFileNameA TlsFree SetLastError HeapSize GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType GetStartupInfoA GetConsoleCP GetConsoleMode FlushFileBuffers FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA SetEndOfFile GetProcessHeap OpenProcess OutputDebugStringW lstrcatW lstrcpyA VirtualQuery lstrcpynA CreateProcessW GetDriveTypeA GetModuleFileNameW

user32

MessageBoxW

advapi32

RegSetValueExW RegCreateKeyExW RegCloseKey OpenProcessToken CreateProcessAsUserW RegEnumValueW RegOpenKeyExW GetUserNameW

shell32

ord165 SHGetPathFromIDListW SHGetSpecialFolderLocation SHCreateDirectoryExW

sqlcipher32

sqlite3_close_v2 sqlite3_errcode sqlite3_open sqlite3_exec

shlwapi

PathAppendW PathIsDirectoryW StrCmpIW SHDeleteValueW PathFindFileNameW wnsprintfW PathFileExistsW PathFindExtensionW StrStrIW StrStrIA StrChrA SHSetValueW StrCmpNIW PathAddBackslashW wvnsprintfW StrNCatW StrCatW wnsprintfA wvnsprintfA SHGetValueA PathRemoveFileSpecW StrChrW SHDeleteKeyW SHGetValueW

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

psapi

GetProcessImageFileNameW

iphlpapi

GetExtendedTcpTable

ole32

CoTaskMemFree CoCreateGuid

docscanner64.dll

IMPHASH 91826387a2793b2329e63497fa589967
SHA256 e307bd84faeda474e59036290831dbf5dd4e4319bb1430db08e4da88e7258b3e
MD5 074d5c0c7780d00b19590fc6a6b29a0d
SHA1 945001819b386c899416039205c7ce2163cf7666
SHA512 3ce5b2f018226d03fc9a93af2598014c49ba5021cb46e12589c2586dd271c6a48c81109fd572973e234e104379a2f3e3e38eec7d4745eb5d79fbefbc05ad502f
SSDEEP 12288:miNV4zgTd+N2zxHTJQ60dQVIH7oOZvMvgtsLD5zre3mS+T+JkUr:miNV4sTd82JlQ60zfZv8TDdKm3m
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

ca:45:cb:a2:da:95:38:03:e1:10:bf:88:e0:26:60:c3:9d:90:df:50:05:e4:32:31:1d:93:3e:8b:23:42:f1:33

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

PE Signature issue

Digest

66:fd:fe:28:db:7b:e2:fe:92:97:55:9e:77:7c:e6:e7:05:8d:47:e1

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

484992

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\docscanner\Release\docscanner64.pdb

kernel32

lstrcpyW lstrlenA GetVolumeInformationW DebugBreak TlsAlloc lstrcpynW TlsSetValue TlsGetValue DisableThreadLibraryCalls lstrcmpA DeleteCriticalSection OpenEventW SetEvent DeleteFileW FileTimeToLocalFileTime GetFileTime GetLocalTime EnterCriticalSection lstrlenW ReadFile FileTimeToSystemTime TerminateProcess LeaveCriticalSection WriteFile SystemTimeToFileTime SetFilePointer GetFileSize Sleep WaitForSingleObject CreateThread CreateIoCompletionPort lstrcmpiW CreateEventW GetLastError InitializeCriticalSection ReadDirectoryChangesW GetQueuedCompletionStatus GetTickCount CloseHandle CreateFileMappingW GetFileSizeEx CreateFileW MoveFileExW GetWindowsDirectoryW SetFileAttributesW Module32NextW GetFileAttributesExW CreateToolhelp32Snapshot GetModuleHandleA Process32NextW Module32FirstW DeviceIoControl QueryDosDeviceW ProcessIdToSessionId Process32FirstW GetFileAttributesW GetLogicalDrives GetDriveTypeW UnmapViewOfFile MapViewOfFile WideCharToMultiByte MultiByteToWideChar HeapFree HeapAlloc GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapReAlloc GetModuleHandleW GetProcAddress ExitProcess GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx GetCPInfo LCMapStringW CompareStringW LCMapStringA GetStringTypeW HeapSetInformation HeapCreate HeapDestroy GetStdHandle GetModuleFileNameA EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc HeapSize GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount SetHandleCount GetFileType GetStartupInfoA GetConsoleCP GetConsoleMode FlushFileBuffers FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetStringTypeA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA SetEndOfFile GetProcessHeap OpenProcess OutputDebugStringW lstrcatW lstrcpyA VirtualQuery lstrcpynA CreateProcessW GetDriveTypeA GetModuleFileNameW

user32

MessageBoxW

advapi32

RegSetValueExW RegCreateKeyExW RegCloseKey OpenProcessToken CreateProcessAsUserW RegEnumValueW RegOpenKeyExW GetUserNameW

shell32

ord165 SHGetPathFromIDListW SHGetSpecialFolderLocation SHCreateDirectoryExW

sqlcipher64

sqlite3_close_v2 sqlite3_errcode sqlite3_open sqlite3_exec

shlwapi

PathAppendW PathIsDirectoryW StrCmpIW SHDeleteValueW PathFindFileNameW wnsprintfW PathFileExistsW PathFindExtensionW StrStrIW StrStrIA StrChrA SHSetValueW StrCmpNIW PathAddBackslashW wvnsprintfW StrNCatW StrCatW wnsprintfA wvnsprintfA SHGetValueA PathRemoveFileSpecW StrChrW SHGetValueW SHDeleteKeyW

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

psapi

GetProcessImageFileNameW

iphlpapi

GetExtendedTcpTable

ole32

CoTaskMemFree CoCreateGuid

docwm32.dll

IMPHASH d8acac33ec0766f7651e94bf011b10ed
SHA256 78e5a72ddc3a83ce462b393a9bfb34082cc02d087bd977ed338aa25053daa6dd
MD5 25c6c51cc1240c0b9b2c023cb453344f
SHA1 01d7e78643d011485b91a3e58ab7e736024b4973
SHA512 3e2cc4db569197c692fa14ab66028e3dc9bd336cad0a2b022ec6dcc6bc640084b5d165df7fba72a4852d12ec9eb6846d922a949eecae745a4db3e4c5faaa752f
SSDEEP 6144:KX+cL1z+JMDe9Ttu6uGA5XkP3eoubk2jsLHzz3CaGwCYGZr:KX+cL1z+JRgFGA5XM3eoubq3Fa
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

7c:cb:7a:69:39:83:c5:ae:0f:de:c0:a5:9b:bf:77:6c:3f:e9:a4:a5:65:35:21:d4:0f:9d:13:1e:0f:a9:73:0f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 21, 2024

PE Signature issue

Digest

e3:d8:75:9c:2b:37:46:ea:4a:34:ed:9b:e2:21:77:a4:31:15:16:8f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 21, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

95650

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\docwm\Release\docwm32.pdb

kernel32

CreateEventW EnterCriticalSection GetLastError LeaveCriticalSection InitializeCriticalSection SetEvent WaitForSingleObject CreateThread CloseHandle RemoveDirectoryW GetLocalTime WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA DisableThreadLibraryCalls Sleep lstrcmpA CreateFileA FindFirstFileW VirtualQuery CreateProcessW HeapAlloc SystemTimeToFileTime GetCurrentProcess HeapFree GetLogicalDrives GetModuleHandleW GetTickCount WriteFile OpenProcess WideCharToMultiByte GetVersionExW lstrcpynW GetFileAttributesW TerminateProcess FileTimeToSystemTime ReadFile GetModuleFileNameW CreateFileW GetACP lstrcmpW MultiByteToWideChar lstrlenW GetCurrentDirectoryW SetLastError GetProcAddress FindClose LoadLibraryA Process32FirstW OpenThread QueryDosDeviceW Module32FirstW Process32NextW lstrcmpiW GetModuleHandleA lstrcatW FindNextFileW CreateToolhelp32Snapshot GetFileAttributesExW Module32NextW FileTimeToLocalFileTime DeleteFileW GetCurrentProcessId LocalFree lstrcpyW SetFileAttributesW lstrcpyA GetCurrentThreadId GetWindowsDirectoryW SetFilePointer InterlockedIncrement InterlockedExchange UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapReAlloc GetSystemTimeAsFileTime GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedDecrement HeapSize ExitProcess SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter VirtualAlloc GetCPInfo GetOEMCP IsValidCodePage LCMapStringA LCMapStringW GetLocaleInfoW GetLocaleInfoA InitializeCriticalSectionAndSpinCount

shlwapi

wnsprintfW PathFileExistsW StrStrIW SHDeleteValueW SHGetValueW PathAppendW StrCmpNIW SHSetValueW StrChrA wnsprintfA wvnsprintfA PathFindFileNameW StrStrW PathIsDirectoryW wvnsprintfW

psapi

GetProcessImageFileNameW

user32

PostThreadMessageW

advapi32

InitializeSecurityDescriptor SetSecurityDescriptorDacl RegSetValueExW RegCloseKey FreeSid SetEntriesInAclW AllocateAndInitializeSid RegCreateKeyExW

shell32

SHGetSpecialFolderLocation ord165 SHGetPathFromIDListW

ole32

CoCreateGuid CoTaskMemFree

filedp32.dll

IMPHASH 7b66958a450bc1db41096aa5d3672d3b
SHA256 b62f99b638892c5ccbe64c164a4e00313934f99a51a8ef7d97825f08cb242962
MD5 4ae36fabff340c0a72447cbbb169fd02
SHA1 03ffcd9a9ebc778620ce369282232ada148bede1
SHA512 09e6d622d28fb50c0c102c6199f695a9be2ddd588f9e4382717449c44e2d83b9c94e4ef788e2157900aa397a9104f224c2607ed8d5c84c604bed3a3fd941c5b2
SSDEEP 6144:auYq7f8LZpYIsPho5zDCn1ahpeMp2qieLrGJG/z:auYqoWugaVJL1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

1a:10:eb:2e:33:c6:44:87:a1:fd:75:2d:6a:c7:4f:bd:d8:2d:97:3a:58:ea:c3:03:39:d1:c5:6c:a9:f2:e1:23

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Sep 18, 2023

PE Signature issue

Digest

d9:0e:9f:b8:04:f0:53:44:86:91:9f:46:7e:6b:d2:90:7a:37:2c:41

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Sep 18, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

106898

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\filedp\Release\filedp32.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP DisableThreadLibraryCalls lstrcmpA CreateThread lstrcpyW GetCurrentProcessId DeleteFileW CloseHandle lstrcatW lstrcmpiW GetLocalTime MoveFileW lstrlenW CreateFileW GetModuleFileNameW ReadFile GetFileAttributesW lstrcpynW CopyFileW Sleep GetSystemDirectoryW GetTickCount OutputDebugStringW lstrcpyA MoveFileExW SetFilePointer GetFileSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind HeapAlloc GetLastError HeapFree GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW CreateFileA VirtualQuery CreateProcessW InitializeCriticalSection OpenProcess LoadLibraryW Process32FirstW ProcessIdToSessionId Module32FirstW Process32NextW GetModuleHandleA CreateToolhelp32Snapshot GetFileAttributesExW Module32NextW WriteConsoleW

user32

wsprintfA

shell32

SHCreateDirectoryExW ShellExecuteW SHGetSpecialFolderLocation ord165 SHGetPathFromIDListW

shlwapi

PathIsDirectoryW PathRemoveFileSpecW SHGetValueW wnsprintfW SHSetValueW StrChrA wnsprintfA wvnsprintfA StrCatW PathAppendW PathFileExistsW PathFindFileNameW PathRemoveExtensionW wvnsprintfW PathFindExtensionW

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

advapi32

OpenProcessToken CreateProcessAsUserW

ole32

CoCreateGuid CoTaskMemFree

filedp64.dll

IMPHASH 95434acc44b7a1660cf8164d24086c3c
SHA256 d3987c73c7e81b393ad9035c2d8edf0e53a4d31f65ace1af8f0a062f411b6d10
MD5 fd500b28d2d77fcf5463094b3b0ba097
SHA1 cedf81e5a8615ee3892da978049335c5cd626659
SHA512 a59ed9a9bcb5195a4711c863378d788b24d453414fcceccbc09128f581c9d977865030c95f5e1c0a2e84f34900db49ceb36c8b5ec43d7eb236781d31d3343ee1
SSDEEP 6144:smzzC2yoYHSvRs4+pyzGgb8CZQp7cV5W5/0cWxcXZ9GZGhp:s32Jy/pEPZQ4SqxcXZr
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

70:ce:c4:05:64:b5:bf:75:d4:2d:d8:9b:85:54:b7:23:1f:60:b8:30:4d:4a:9b:36:f2:18:b8:c5:e5:1f:f4:46

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Sep 18, 2023

PE Signature issue

Digest

ee:73:c0:49:f3:ec:ae:01:8f:55:74:1e:79:e0:52:a5:99:7d:f5:b8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Sep 18, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

164468

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\filedp\Release\filedp64.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP DisableThreadLibraryCalls lstrcmpA CreateThread lstrcpyW GetCurrentProcessId DeleteFileW CloseHandle lstrcatW lstrcmpiW GetLocalTime MoveFileW lstrlenW CreateFileW GetModuleFileNameW ReadFile GetFileAttributesW lstrcpynW CopyFileW Sleep GetSystemDirectoryW GetTickCount OutputDebugStringW lstrcpyA Module32NextW MoveFileExW SetFilePointer GetFileSize TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapAlloc GetLastError HeapFree EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc HeapSize GetModuleHandleW GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW CreateFileA VirtualQuery CreateProcessW InitializeCriticalSection OpenProcess LoadLibraryW Process32FirstW ProcessIdToSessionId Module32FirstW Process32NextW GetModuleHandleA CreateToolhelp32Snapshot GetFileAttributesExW WriteConsoleW

user32

wsprintfA

shell32

SHCreateDirectoryExW ShellExecuteW ord165 SHGetPathFromIDListW SHGetSpecialFolderLocation

shlwapi

wnsprintfW PathRemoveFileSpecW wvnsprintfW SHGetValueW SHSetValueW StrChrA wnsprintfA wvnsprintfA StrCatW PathAppendW PathFileExistsW PathFindFileNameW PathRemoveExtensionW PathFindExtensionW PathIsDirectoryW

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

advapi32

OpenProcessToken CreateProcessAsUserW

ole32

CoTaskMemFree CoCreateGuid

frcinst32.dll

IMPHASH 559954bbc7aed057a830edd3ce3962db
SHA256 82bcfe06edcd52f35db1b1709254cf42669d18fa6bd5abd8f3832b8bb8561c94
MD5 a446fd351c77f2f560fd9cb1d13d8756
SHA1 ce9e58cdc859f998f4a4a067e4e6e3ba0d138a74
SHA512 d3ea42fd81b498e022079132a813cf5da1e223ec770d8ddfe0c5bda6745c85f40a411c85f982344f592560ba67f97b1e138665a8c2352c589a2a20397b3f4fb8
SSDEEP 3072:HvL69GtxUECwGhVWfz3ZQeUp+2MIHARuitNt5TML522XBQ0Y5YVRvRaMwjCA:PLtUE2VWfdaTKvvC22xxVT2CA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

ef:b0:39:e1:0b:aa:75:26:37:e5:c5:1e:0b:30:8b:91:52:61:1a:ab:f9:e5:61:14:8c:28:39:eb:76:e9:39:d2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,L=济南市,ST=山东省,C=CN

Chains

May 9, 2023

CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,L=济南市,ST=山东省,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

89:1d:fe:52:29:74:4b:4a:5e:d9:2f:58:bc:f9:3d:a1:3c:72:be:35

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,L=济南市,ST=山东省,C=CN

Serial Number

0a:5b:05:21:b0:1f:8f:a1:fd:1e:2a:e0:34:06:d6:ef

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 19, 2022 - Aug 20, 2025

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

5

Entry point

74345

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\ferryclient\Release\frcinst32.pdb

kernel32

CloseHandle DisableThreadLibraryCalls SetLastError GetLastError GetTempPathW CreateFileW GetExitCodeProcess Sleep WriteFile WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP IsValidLocale EnumSystemLocalesA GetUserDefaultLCID OutputDebugStringW WaitForSingleObject lstrcmpA GetStringTypeW CreateFileA VirtualQuery CreateProcessW HeapAlloc GetCurrentProcess HeapFree GetModuleHandleW GetTickCount InitializeCriticalSection OpenProcess WideCharToMultiByte LeaveCriticalSection lstrcpynW TerminateProcess ReadFile GetModuleFileNameW GetACP MultiByteToWideChar lstrlenW GetProcAddress EnterCriticalSection LoadLibraryA Process32FirstW ProcessIdToSessionId Module32FirstW Process32NextW lstrcmpiW GetModuleHandleA CreateToolhelp32Snapshot GetFileAttributesExW Module32NextW GetCurrentProcessId LocalFree lstrcpyW lstrcpyA CreateThread GetWindowsDirectoryW SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetStdHandle GetModuleFileNameA ExitProcess SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime VirtualAlloc HeapSize GetCPInfo GetOEMCP IsValidCodePage LCMapStringA LCMapStringW GetLocaleInfoW GetLocaleInfoA InterlockedExchange InitializeCriticalSectionAndSpinCount GetStringTypeA

shell32

SHGetSpecialFolderPathW

shlwapi

wnsprintfW wvnsprintfW PathIsDirectoryW PathFindFileNameW SHGetValueW SHSetValueW StrChrA wnsprintfA wvnsprintfA PathAppendW PathFileExistsW SHDeleteValueW

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

advapi32

CreateProcessAsUserW RegOpenKeyW OpenProcessToken RegCloseKey FreeSid SetEntriesInAclW AllocateAndInitializeSid SetFileSecurityW SetSecurityDescriptorDacl InitializeSecurityDescriptor

ole32

CoCreateGuid

gxdte32.dll

IMPHASH 14978b71648608469f24942068686502
SHA256 85c047dd857c3f8efc953431113f4ebfb7e28714cc605cfad9a8a65287d537d2
MD5 6e5f0870edbc27d74991e2b5e0cb8abf
SHA1 7f408a32e9e9fb08c915d3caa7cde0b13fe00d5a
SHA512 cb9a7d1094b1ab61c269bf36079082a23b539931f498fa75dbc88b2e6c84b8109686e7914b859cdaa70f6a9a1e3843f623c246935fde1d0c6ea73b5c3b6bad41
SSDEEP 12288:nk2DJI0oFPkJyMcBCVLxqH0Nja2iEEbSlurixZEWakRyfKjZ58ODByjsj:nk2DJXNbkbSlYMEWliK958ODBy4j
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

f5:30:84:fd:d8:2f:10:a3:e3:51:85:e9:94:d6:55:d2:8a:a1:16:19:e2:fb:b6:b0:9b:5f:aa:ac:12:b1:00:14

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 26, 2024

PE Signature issue

Digest

b2:b8:1c:53:1d:aa:c4:7a:4f:98:8e:f8:43:85:b2:24:0a:35:8f:fb

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 26, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

262178

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\gxdte\Release\gxdte32.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP RemoveDirectoryW DisableThreadLibraryCalls lstrcmpiA CreateThread CloseHandle lstrcmpiW GetLocalTime EnterCriticalSection GetLastError lstrcpynW LeaveCriticalSection SetFilePointer GetFileSize GetSystemDirectoryW MoveFileW GetWindowsDirectoryW Sleep InitializeCriticalSection lstrcmpA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapSize ExitProcess GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetLocaleInfoW GetModuleFileNameW lstrlenW GetModuleHandleA lstrcpyW lstrcpyA CreateFileA FindFirstFileW lstrlenA MapViewOfFile UnmapViewOfFile VirtualQuery lstrcpynA SetEndOfFile SystemTimeToFileTime SetEvent GetLogicalDrives IsBadReadPtr OpenProcess LoadLibraryW CopyFileW GetVersionExW GetFileAttributesW FileTimeToSystemTime ReadFile CreateFileW lstrcmpW GetTempPathW GetFileSizeEx GetCurrentDirectoryW FindClose Process32FirstW CreateFileMappingW QueryDosDeviceW DeviceIoControl Module32FirstW Process32NextW lstrcatW FindNextFileW CreateToolhelp32Snapshot GetFileAttributesExW OpenEventW Module32NextW FileTimeToLocalFileTime DeleteFileW LocalFree SetFileAttributesW MoveFileExW WriteConsoleW

shlwapi

PathFindFileNameW wvnsprintfA SHGetValueA StrStrW PathRemoveFileSpecW SHSetValueA StrChrW wvnsprintfW SHGetValueW StrCmpNIW SHSetValueW StrChrA PathMatchSpecW wnsprintfW PathFindExtensionW SHDeleteKeyA SHDeleteValueW PathFileExistsW PathAppendW PathIsDirectoryW wnsprintfA StrStrIW

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

ws2_32

socket sendto WSAStartup

psapi

GetProcessImageFileNameW

user32

MessageBoxW

advapi32

QueryServiceStatus StartServiceW SetFileSecurityW AllocateAndInitializeSid CreateServiceW CloseServiceHandle DeleteService OpenSCManagerW OpenServiceW RegCreateKeyExW InitializeSecurityDescriptor SetSecurityDescriptorDacl GetUserNameW RegSetValueExW RegCloseKey RegOpenKeyExW FreeSid RegEnumValueW SetEntriesInAclW

shell32

ord165 SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetSpecialFolderPathW

ole32

CoTaskMemFree CoCreateGuid

gxdte32.sys

IMPHASH f08ae953c4c956514ea84204199c500d
SHA256 cf3bc9d4d148a1febd1710e13280bdc8a3b9713be707b85ed6207967a49825ab
MD5 4d8959048f8f108381e78824fcc65063
SHA1 1063d288183a81df1bdda3a6df646767613c990a
SHA512 1996d838b3e0c73a141f60b50fadf04704743f7ff7f618d7ec3735c6b066a85905af1b98d5f015dcd97d920da1570a1c5d971f6cc9c1c1f54ef3aafb4febf32c
SSDEEP 3072:Y6/vje1oTtsPw8Cb3ZJk+h5Vda4fz1Jsf:Y6/rv8CVJhqAGf
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

ee:3e:74:f9:90:5b:1c:56:ff:a0:53:e4:e4:97:cf:91:ae:02:e5:1b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 14, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Minor OS version

1

Major OS version

6

Entry point

20430910

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\po\privates\gxdte\Release\i386\gxdte32.pdb

ntoskrnl.exe

_allrem MmForceSectionClosed CcPurgeCacheSection MmFlushImageSection PsTerminateSystemThread KeSetEvent KeWaitForSingleObject ExfInterlockedRemoveHeadList KeSetPriorityThread PsCreateSystemThread KeInitializeEvent ExfInterlockedInsertTailList IofCompleteRequest FsRtlTeardownPerStreamContexts FsRtlInitializeOplock _alldiv PsRevertToSelf SeImpersonateClient IoFreeIrp IofCallDriver IoAllocateIrp IoFreeWorkItem _allmul PsDereferencePrimaryToken SeTokenType IoQueueWorkItem SeCreateClientSecurity IoAllocateWorkItem ExAcquireResourceSharedLite sprintf RtlCopyUnicodeString MmGetSystemRoutineAddress ObOpenObjectByPointer PsLookupProcessByProcessId IoCreateSymbolicLink IoCreateDevice PsSetCreateProcessNotifyRoutine ExInitializeNPagedLookasideList ExReinitializeResourceLite RtlCompareUnicodeString ZwQuerySymbolicLinkObject ZwOpenSymbolicLinkObject IoGetLowerDeviceObject KeTickCount KeBugCheckEx RtlUnwind KeDelayExecutionThread ExSystemTimeToLocalTime wcsncmp RtlTimeToTimeFields RtlUpcaseUnicodeChar KeQuerySystemTime MmMapLockedPagesSpecifyCache IoDriverObjectType PsGetVersion ObReferenceObjectByName InterlockedPushEntrySList InterlockedPopEntrySList _wcsicmp wcsstr ExAcquireResourceExclusiveLite ExReleaseResourceLite ExDeleteResourceLite ExInitializeResourceLite CcCanIWrite CcCopyWrite ExRaiseStatus CcInitializeCacheMap CcSetReadAheadGranularity CcCopyRead CcFlushCache MmCanFileBeTruncated ExAllocatePoolWithTag ExFreePoolWithTag memset memcpy PsGetCurrentProcessId memmove RtlInitUnicodeString ZwClose ObfDereferenceObject IoSetShareAccess IoCheckShareAccess IoUpdateShareAccess ExIsResourceAcquiredExclusiveLite KeGetCurrentThread KeEnterCriticalRegion KeLeaveCriticalRegion DbgPrint CcZeroData CcSetFileSizes CcUninitializeCacheMap PsDereferenceImpersonationToken IoRemoveShareAccess

hal

KeGetCurrentIrql KeStallExecutionProcessor

fltmgr.sys

FltGetVolumeName FltGetDeviceObject FltSetInstanceContext FltRegisterFilter FltStartFiltering FltUnregisterFilter FltGetFileNameInformation FltClearCallbackDataDirty FltGetFileNameInformationUnsafe FltCheckAndGrowNameControl FltReleaseFileNameInformation FltAllocateCallbackData FltPerformSynchronousIo FltFreeCallbackData FltInitializeFileLock FltAcquireResourceShared FltUninitializeOplock FltUninitializeFileLock FltDecodeParameters FltAcquireResourceExclusive FltReleaseResource FltIsOperationSynchronous FltCheckLockForWriteAccess FltSetSecurityObject FltQuerySecurityObject FltCheckLockForReadAccess FltCheckOplock FltProcessFileLock FltOplockFsctrl FltSetInformationFile FltQueryEaFile FltQueryVolumeInformation FltQueryVolumeInformationFile FltDeviceIoControlFile FltGetVolumeProperties FltGetRequestorProcessId FltSetCallbackDataDirty FltCreateFileEx FltQueryInformationFile FltReadFile FltClose FltWriteFile FltGetInstanceContext FltReleaseContext FltAllocateContext

Name

.text

Size

71KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

19.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

872B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

gxdte64.dll

IMPHASH a15157348ee272ff6eb752022ee7b207
SHA256 d19753aeff1b9a9c0503887c3273306539eb05f7c4c3df15690287f4a50b02ec
MD5 c4a061ef553c330f052674b60504ebd2
SHA1 c366cbbe215847fb83f80400c7708a39e1917455
SHA512 02c0b22acc8cd5e3196f33d3adfc897b8327e50bb4da1ca71733f845126657c8b91d10aec7da8cfac170b8a35da225b561af892543359d15a75cb04977d72094
SSDEEP 12288:7nSleI/STKjxZVNw76rqSZwjIWrlx2qWk:TINrjA76r7ZwjH4q3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

84:87:f1:c1:fc:75:60:8d:6b:f4:3d:e2:a0:99:74:87:57:62:cc:0b:a5:c2:83:48:70:f5:cc:52:5c:b0:a9:79

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 26, 2024

PE Signature issue

Digest

61:e7:72:cd:37:43:e6:65:a0:be:9e:17:c4:d8:1d:57:ce:ae:77:b8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 26, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

389508

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\gxdte\Release\gxdte64.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP RemoveDirectoryW DisableThreadLibraryCalls lstrcmpiA CreateThread CloseHandle lstrcmpiW GetLocalTime EnterCriticalSection GetLastError lstrcpynW LeaveCriticalSection SetFilePointer GetFileSize GetSystemDirectoryW MoveFileW GetWindowsDirectoryW Sleep InitializeCriticalSection lstrcmpA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapAlloc HeapFree EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc HeapSize GetModuleHandleW GetProcAddress ExitProcess GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetLocaleInfoW GetModuleFileNameW lstrlenW GetModuleHandleA lstrcpyW lstrcpyA CreateFileA FindFirstFileW lstrlenA MapViewOfFile UnmapViewOfFile VirtualQuery lstrcpynA SetEndOfFile SystemTimeToFileTime SetEvent GetLogicalDrives IsBadReadPtr OpenProcess LoadLibraryW CopyFileW GetVersionExW GetFileAttributesW FileTimeToSystemTime ReadFile CreateFileW lstrcmpW GetTempPathW GetFileSizeEx GetCurrentDirectoryW FindClose Process32FirstW CreateFileMappingW QueryDosDeviceW DeviceIoControl Module32FirstW Process32NextW lstrcatW FindNextFileW CreateToolhelp32Snapshot GetFileAttributesExW OpenEventW Module32NextW FileTimeToLocalFileTime DeleteFileW LocalFree SetFileAttributesW MoveFileExW WriteConsoleW

shlwapi

wvnsprintfW PathFindFileNameW wvnsprintfA SHGetValueA StrStrW PathRemoveFileSpecW SHSetValueA wnsprintfW SHGetValueW StrCmpNIW SHSetValueW StrChrA PathMatchSpecW wnsprintfA PathFindExtensionW SHDeleteKeyA SHDeleteValueW PathFileExistsW PathIsDirectoryW StrChrW PathAppendW StrStrIW

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

ws2_32

socket sendto WSAStartup

psapi

GetProcessImageFileNameW

user32

MessageBoxW

advapi32

StartServiceW QueryServiceStatus SetFileSecurityW CreateServiceW CloseServiceHandle DeleteService OpenSCManagerW OpenServiceW RegCreateKeyExW InitializeSecurityDescriptor GetUserNameW RegSetValueExW RegCloseKey RegOpenKeyExW FreeSid RegEnumValueW SetEntriesInAclW AllocateAndInitializeSid SetSecurityDescriptorDacl

shell32

SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetSpecialFolderPathW ord165

ole32

CoTaskMemFree CoCreateGuid

gxdte64.sys

IMPHASH 6ba169fe88893945d829554b46f2b32e
SHA256 aaca4734e421c1fb1560703c55c9ea1420bac08ce3f67d37a6d2ceb68385f6aa
MD5 ab5c67a251b12ebd05b45c9fa0078828
SHA1 18a75af5c1062c04417b013f4fa4b1a5dd812b93
SHA512 6f80c6349df88fb8353607b3071aa0d2ba330988eddfd5ee1aca1bd427a2f5802945f70400b482e89f9989bfe2fc2bde86c5d14c6f1990c92373ada443f845eb
SSDEEP 3072:PDXyG4pKDyK2zu80CYxzk5WWfFXVwfzQURVuJ2:PD94piy1zb+z+w7Qq
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

Digest

d1:47:a7:21:dd:e6:f9:31:17:ef:a5:5d:f1:08:52:56:f7:39:b4:6d:1c:d9:0f:63:13:48:b7:15:ae:f1:79:05

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 26, 2024

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

1

Major OS version

6

Entry point

20471908

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

e:\po\privates\gxdte\Release\amd64\gxdte64.pdb

ntoskrnl.exe

CcPurgeCacheSection PsCreateSystemThread ExInterlockedInsertTailList PsTerminateSystemThread KeWaitForSingleObject ExInterlockedRemoveHeadList MmForceSectionClosed IofCompleteRequest FsRtlTeardownPerStreamContexts FsRtlInitializeOplock IoFreeWorkItem SeCreateClientSecurity SeImpersonateClient IoAllocateWorkItem PsRevertToSelf PsDereferenceImpersonationToken IoQueueWorkItem KeInitializeEvent SeTokenType ExAcquireResourceSharedLite sprintf RtlCopyUnicodeString PsLookupProcessByProcessId MmGetSystemRoutineAddress ObOpenObjectByPointer ExInitializeNPagedLookasideList PsSetCreateProcessNotifyRoutine IoCreateSymbolicLink IoCreateDevice ExReinitializeResourceLite IoGetLowerDeviceObject ZwQuerySymbolicLinkObject ZwOpenSymbolicLinkObject RtlCompareUnicodeString KeBugCheckEx KeSetEvent MmFlushImageSection KeSetPriorityThread RtlUpcaseUnicodeChar wcsncmp PsGetVersion RtlTimeToTimeFields ExSystemTimeToLocalTime MmMapLockedPagesSpecifyCache KeDelayExecutionThread ExQueryDepthSList ExpInterlockedPopEntrySList ExpInterlockedPushEntrySList ExInitializeResourceLite ExDeleteResourceLite ExReleaseResourceLite wcsstr ExAcquireResourceExclusiveLite _wcsicmp CcCanIWrite CcCopyWrite CcInitializeCacheMap CcSetReadAheadGranularity CcCopyRead ExRaiseStatus CcFlushCache MmCanFileBeTruncated ExFreePoolWithTag ExAllocatePoolWithTag IoSetShareAccess ObfDereferenceObject PsGetCurrentProcessId IoCheckShareAccess ZwClose RtlInitUnicodeString IoUpdateShareAccess ExIsResourceAcquiredExclusiveLite CcZeroData DbgPrint KeEnterCriticalRegion IoRemoveShareAccess CcUninitializeCacheMap KeLeaveCriticalRegion PsDereferencePrimaryToken CcSetFileSizes __C_specific_handler

hal

KeStallExecutionProcessor

fltmgr.sys

FltAllocateContext FltSetInstanceContext FltGetDeviceObject FltStartFiltering FltReleaseFileNameInformation FltRegisterFilter FltUnregisterFilter FltGetFileNameInformation FltGetFileNameInformationUnsafe FltCheckAndGrowNameControl FltClearCallbackDataDirty FltAllocateCallbackData FltPerformSynchronousIo FltFreeCallbackData FltUninitializeFileLock FltUninitializeOplock FltInitializeFileLock FltAcquireResourceShared FltDecodeParameters FltAcquireResourceExclusive FltReleaseResource FltIsOperationSynchronous FltCheckLockForWriteAccess FltQuerySecurityObject FltSetSecurityObject FltCheckLockForReadAccess FltCheckOplock FltProcessFileLock FltOplockFsctrl FltSetInformationFile FltQueryEaFile FltQueryVolumeInformation FltQueryVolumeInformationFile FltDeviceIoControlFile FltClose FltQueryInformationFile FltCreateFileEx FltGetVolumeProperties FltReadFile FltSetCallbackDataDirty FltGetRequestorProcessId FltWriteFile FltReleaseContext FltGetInstanceContext FltGetVolumeName

Name

.text

Size

96KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

19.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

872B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

gxdte64_win7.sys

IMPHASH 6ba169fe88893945d829554b46f2b32e
SHA256 f9dc9624ad8d27b65b0b06c71a93c9779f655695d432221d072b65710b4ec17d
MD5 be06f21b7470f85312b16f5267434052
SHA1 e878a82e45578ac2f1dae115ed62baf5adc95bdd
SHA512 c93cbda482a4e1876a95a14950dd21d3934327ecabf7b3eacf7166e9431b5eb5f20b87876ba7b9d0479948abc20633193bf2bee32edc876934fbe380af87dd2b
SSDEEP 3072:6DXyG4pKDyK2zu80CYxzk5WWfFXVwfzQURVuVeUe2B:6D94piy1zb+z+w7QveUe2B
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

e2:aa:cd:58:1e:e1:ec:67:3b:8a:88:7a:d1:3a:4d:2c:0f:25:29:7a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Microsoft Authenticode(tm) Root Authority,O=MSFT,C=US

Serial Number

01

Issuer

CN=Microsoft Authenticode(tm) Root Authority,O=MSFT,C=US

Timespan

Jan 1, 1995 - Dec 31, 1999

Subject

Serial Number

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

Issuer

Timespan

Jan 10, 1997 - Dec 31, 2020

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:1c:b2:8a:00:00:00:00:00:26

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Serial Number

79:ad:16:a1:4a:a0:a5:ad:4c:73:58:f4:07:13:2e:65

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 9, 2001 - May 9, 2021

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

72:94:04:10:1f:3e:0c:a3:47:83:7f:ca:17:5a:84:38

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 1, 2005 - Nov 1, 2025

Minor OS version

1

Major OS version

6

Entry point

20471908

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

e:\po\privates\gxdte\Release\amd64\gxdte64.pdb

ntoskrnl.exe

CcPurgeCacheSection PsCreateSystemThread ExInterlockedInsertTailList PsTerminateSystemThread KeWaitForSingleObject ExInterlockedRemoveHeadList MmForceSectionClosed IofCompleteRequest FsRtlTeardownPerStreamContexts FsRtlInitializeOplock IoFreeWorkItem SeCreateClientSecurity SeImpersonateClient IoAllocateWorkItem PsRevertToSelf PsDereferenceImpersonationToken IoQueueWorkItem KeInitializeEvent SeTokenType ExAcquireResourceSharedLite sprintf RtlCopyUnicodeString PsLookupProcessByProcessId MmGetSystemRoutineAddress ObOpenObjectByPointer ExInitializeNPagedLookasideList PsSetCreateProcessNotifyRoutine IoCreateSymbolicLink IoCreateDevice ExReinitializeResourceLite IoGetLowerDeviceObject ZwQuerySymbolicLinkObject ZwOpenSymbolicLinkObject RtlCompareUnicodeString KeBugCheckEx KeSetEvent MmFlushImageSection KeSetPriorityThread RtlUpcaseUnicodeChar wcsncmp PsGetVersion RtlTimeToTimeFields ExSystemTimeToLocalTime MmMapLockedPagesSpecifyCache KeDelayExecutionThread ExQueryDepthSList ExpInterlockedPopEntrySList ExpInterlockedPushEntrySList ExInitializeResourceLite ExDeleteResourceLite ExReleaseResourceLite wcsstr ExAcquireResourceExclusiveLite _wcsicmp CcCanIWrite CcCopyWrite CcInitializeCacheMap CcSetReadAheadGranularity CcCopyRead ExRaiseStatus CcFlushCache MmCanFileBeTruncated ExFreePoolWithTag ExAllocatePoolWithTag IoSetShareAccess ObfDereferenceObject PsGetCurrentProcessId IoCheckShareAccess ZwClose RtlInitUnicodeString IoUpdateShareAccess ExIsResourceAcquiredExclusiveLite CcZeroData DbgPrint KeEnterCriticalRegion IoRemoveShareAccess CcUninitializeCacheMap KeLeaveCriticalRegion PsDereferencePrimaryToken CcSetFileSizes __C_specific_handler

hal

KeStallExecutionProcessor

fltmgr.sys

FltAllocateContext FltSetInstanceContext FltGetDeviceObject FltStartFiltering FltReleaseFileNameInformation FltRegisterFilter FltUnregisterFilter FltGetFileNameInformation FltGetFileNameInformationUnsafe FltCheckAndGrowNameControl FltClearCallbackDataDirty FltAllocateCallbackData FltPerformSynchronousIo FltFreeCallbackData FltUninitializeFileLock FltUninitializeOplock FltInitializeFileLock FltAcquireResourceShared FltDecodeParameters FltAcquireResourceExclusive FltReleaseResource FltIsOperationSynchronous FltCheckLockForWriteAccess FltQuerySecurityObject FltSetSecurityObject FltCheckLockForReadAccess FltCheckOplock FltProcessFileLock FltOplockFsctrl FltSetInformationFile FltQueryEaFile FltQueryVolumeInformation FltQueryVolumeInformationFile FltDeviceIoControlFile FltClose FltQueryInformationFile FltCreateFileEx FltGetVolumeProperties FltReadFile FltSetCallbackDataDirty FltGetRequestorProcessId FltWriteFile FltReleaseContext FltGetInstanceContext FltGetVolumeName

Name

.text

Size

96KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

19.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

872B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

gxonecli.exe

IMPHASH 228990b9c16217b725adb634e1f0bb38
SHA256 181b0eb83e3538b29638e7056b804a9c703e28ae88fd4c4c4233ad7579cfcf2e
MD5 5af0d9604a4eb2c013684a5476e4d20f
SHA1 ba273ca4accddc389cd66d23ee44e3a715d866b8
SHA512 38c9f9b8b897ecdeb6f7a08e2700dcd917bb6f97dc4197fd2640e1bddb2458d375c78a89d15fb7cdad2b3eccfd9555a431ead6c72ded65570e17cbf1dfba18f1
SSDEEP 24576:aekqLeqsIZJ9M3MmixZkeaLzbHVVewPQiZY3Pgd1s9H:cqjZJ9M3piADzVVe0AH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

4e:dd:1f:0f:aa:ac:34:a3:47:15:ad:ca:2b:ea:8a:e1:1f:85:28:25:65:46:d0:a1:ef:9a:83:c4:27:1a:e2:c7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

PE Signature issue

Digest

3e:ca:40:74:c9:71:d8:df:59:da:1d:00:b7:f1:b3:2e:d4:29:f5:33

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

493467

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\po\trunk\modules\gxonecli\Release\gxonecli.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CreateThread CreateEventW WaitForSingleObject GetDiskFreeSpaceExW lstrlenW lstrcpynW GetLogicalDrives GetDriveTypeW CloseHandle lstrcmpiA GetModuleFileNameW GetModuleHandleW OutputDebugStringW ExitProcess lstrcpyW DeleteFileW GetVersionExW GetWindowsDirectoryW lstrcpyA SetFileAttributesW Module32NextW OpenEventW GetFileAttributesExW CreateToolhelp32Snapshot FindNextFileW lstrcatW GetModuleHandleA Module32FirstW DeviceIoControl LocalFree GetCommandLineW lstrcmpiW FindClose GlobalFree lstrcmpW GetFileAttributesW CopyFileW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree HeapAlloc Sleep GetProcAddress GetCommandLineA GetStartupInfoA RaiseException RtlUnwind WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapSize HeapCreate VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetFileSize ReadFile CreateFileW LoadLibraryW GetCurrentDirectoryW FreeResource FindResourceW LoadResource SizeofResource LockResource DosDateTimeToFileTime SetFilePointer SystemTimeToFileTime MulDiv GetLocalTime GlobalLock GlobalAlloc GlobalUnlock CreateFileA lstrcmpA FindFirstFileW lstrlenA VirtualQuery lstrcpynA CreateProcessW GlobalSize SetEvent GetDriveTypeA InitializeCriticalSection WriteConsoleW

user32

SetFocus LoadImageW IsIconic GetWindowRect UnionRect OffsetRect wvsprintfW SetCursor IsRectEmpty MapWindowPoints ReleaseCapture GetActiveWindow ReleaseDC InvalidateRect IntersectRect GetDC GetUpdateRect PtInRect BeginPaint TrackMouseEvent GetFocus GetKeyState KillTimer SetCapture EndPaint MoveWindow SetWindowTextW GetCaretBlinkTime GetCaretPos GetWindowTextW GetWindowTextLengthW SetRect CharPrevW DrawTextW FillRect SetCaretPos CreateCaret GetSysColor ShowCaret HideCaret ClientToScreen GetGUIThreadInfo CreateAcceleratorTableW InvalidateRgn SetClipboardData OpenClipboard GetDesktopWindow EndDialog EmptyClipboard CloseClipboard GetDlgItem SetDlgItemTextW GetDlgItemTextW SendDlgItemMessageW DialogBoxIndirectParamW GetClassInfoExW wsprintfW SetPropW MonitorFromWindow RegisterClassW GetSystemMetrics GetMonitorInfoW CallWindowProcW GetWindow CharNextW SetTimer GetPropW ScreenToClient GetParent GetIconInfo SendMessageW IsWindowVisible MessageBoxW IsWindow ShowWindow GetCursorPos SetWindowPos PostMessageW GetForegroundWindow FindWindowW SetForegroundWindow DispatchMessageW DefWindowProcW UpdateWindow CreateWindowExW SetWindowLongW SetClassLongW GetWindowLongW CreateDialogIndirectParamW LoadIconW RegisterClassExW IsDialogMessageW TranslateMessage LoadCursorW PostQuitMessage GetMessageW DestroyWindow EnableWindow GetClientRect DestroyIcon

gdi32

SetBkMode CreatePatternBrush CreateSolidBrush CreateDIBSection SetWindowOrgEx BitBlt GetTextMetricsW DeleteDC CreateFontIndirectW GetObjectW DeleteObject SelectObject CreateCompatibleDC SetTextColor Rectangle SaveDC CreatePen GetStockObject RestoreDC GetObjectA TextOutW ExtSelectClipRgn RoundRect GetDeviceCaps MoveToEx GetTextExtentPoint32W LineTo StretchBlt SetBkColor GdiFlush SelectClipRgn CreatePenIndirect CreateRectRgnIndirect CombineRgn CreateCompatibleBitmap GetClipBox CreateRoundRectRgn SetStretchBltMode GetCharABCWidthsW ExtTextOutW

shell32

ord165 SHGetPathFromIDListW SHGetSpecialFolderLocation SHOpenFolderAndSelectItems SHAppBarMessage ShellExecuteA SHGetDesktopFolder CommandLineToArgvW ord727 SHGetFileInfoW ShellExecuteW

ole32

CoCreateInstance CoUninitialize CLSIDFromProgID CLSIDFromString CreateStreamOnHGlobal CoCreateGuid CoTaskMemFree GetHGlobalFromStream CoInitialize OleLockRunning

gdiplus

GdiplusStartup GdipGetImageWidth GdipCloneImage GdipBitmapLockBits GdipSaveImageToFile GdipGetImageEncoders GdipCreateBitmapFromHBITMAP GdipDisposeImage GdipGetImageEncodersSize GdipAlloc GdipCreateBitmapFromScan0 GdipGetImagePixelFormat GdipCreateBitmapFromHICON GdipGetImageHeight GdipFree GdipSetPageUnit GdipLoadImageFromFile GdipImageGetFrameCount GdipImageGetFrameDimensionsCount GdipGetPropertyItemSize GdipGetPropertyItem GdipImageSelectActiveFrame GdipImageGetFrameDimensionsList GdipLoadImageFromStream GdipCreateFontFromDC GdipDeleteStringFormat GdipSetPixelOffsetMode GdipCreateStringFormat GdipSetInterpolationMode GdiplusShutdown GdipDeleteBrush GdipCloneBrush GdipCreateFontFromLogfontA GdipSetStringFormatLineAlign GdipSetTextRenderingHint GdipDeleteFont GdipDeleteGraphics GdipGetImageGraphicsContext GdipDrawImageRectI GdipSetStringFormatAlign GdipGraphicsClear GdipDrawImage GdipSetSmoothingMode GdipGetFamily GdipDeleteFontFamily GdipDrawString GdipCreateFromHDC GdipSetCompositingQuality GdipCreateLineBrushI

comctl32

ord17

imm32

ImmSetCompositionWindow ImmSetCompositionFontW ImmReleaseContext ImmGetContext

shlwapi

PathFindFileNameW PathFileExistsW SHDeleteValueW PathIsDirectoryW PathAppendW wnsprintfW wvnsprintfW PathFindExtensionW SHGetValueA PathRemoveFileSpecW SHCreateStreamOnFileW PathFileExistsA StrCatBuffW StrStrIW StrChrW SHGetValueW SHDeleteKeyW StrCmpNIW SHSetValueW StrChrA wnsprintfA StrCmpNIA wvnsprintfA

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

ws2_32

WSAStartup

libcurl32

curl_easy_reset curl_easy_init curl_slist_free_all curl_formfree curl_formadd curl_slist_append curl_free curl_easy_setopt curl_easy_perform curl_easy_strerror curl_easy_cleanup curl_global_init curl_easy_escape curl_easy_getinfo

comdlg32

GetOpenFileNameW

advapi32

SetEntriesInAclW RegOpenKeyExW RegCreateKeyExW InitializeSecurityDescriptor SetSecurityDescriptorDacl SetFileSecurityW AllocateAndInitializeSid RegEnumValueW FreeSid GetUserNameW RegSetValueExW RegCloseKey

oleaut32

SysFreeString VariantInit VariantClear SysAllocString

hecate32.dll

IMPHASH d4811082a1a344f30b3f6df3d11a0c2a
SHA256 a403734c3d2d623157f198eac02ab6daca5f76f30276a71dae5ccf6178301435
MD5 7dc8792af32bce713853357a8694c3ce
SHA1 b90ca24a5e6e9c9f0b63f1f58b2efab67aee4085
SHA512 31a5170edc387ac1058382a56e1a396788c50c74827d70dccbcdb3311f27fb95bd73b2ffecd16082e00627fb375199fd136b111b13cd748e56633585b896c77d
SSDEEP 6144:NOYEkB7oWiwEvybKSXQKq4bPD+r3w5CjXenD2pgUGMGHUd:NOYEw71iDKbvlX+r3wMjunBA
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

78:0d:03:4e:07:f2:fa:74:46:72:4f:24:ae:fb:a9:35:ff:96:18:59:41:7f:12:c3:55:7c:d5:80:9f:8b:74:c8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

PE Signature issue

Digest

96:1b:ba:23:77:81:fd:6c:43:81:d6:86:d2:bd:22:a0:7a:a0:87:99

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

135634

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\hecate\Release\hecate32.pdb

kernel32

CreateThread OutputDebugStringA GetModuleHandleA GetLocalTime GetProcAddress FileTimeToSystemTime lstrcpynW LoadLibraryW IsBadReadPtr OutputDebugStringW SystemTimeToFileTime IsBadStringPtrW CloseHandle lstrcmpiW DisableThreadLibraryCalls MoveFileW SetLastError GetLastError WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP GetLocaleInfoW IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID IsValidCodePage GetOEMCP GetStringTypeA GetSystemTimeAsFileTime QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount GetModuleFileNameW Sleep lstrcmpA WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection CreateFileA lstrlenA VirtualQuery lstrcpynA HeapAlloc GetCurrentProcess HeapFree SetEvent GetModuleHandleW GetTickCount WriteFile TerminateProcess ReadFile GetACP lstrlenW LoadLibraryA Process32FirstW Module32FirstW Process32NextW CreateToolhelp32Snapshot OpenEventW Module32NextW GetCurrentProcessId lstrcpyW lstrcpyA GetCurrentThreadId SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapReAlloc ExitProcess GetCommandLineA RaiseException RtlUnwind GetCPInfo LCMapStringW CompareStringW LCMapStringA GetStringTypeW TlsGetValue TlsAlloc TlsSetValue TlsFree HeapSize GetStdHandle GetModuleFileNameA HeapCreate HeapDestroy VirtualFree VirtualAlloc FreeLibrary InitializeCriticalSectionAndSpinCount LocalAlloc

user32

SetTimer KillTimer CallNextHookEx FindWindowW IsWindow SetWindowsHookExW UnhookWindowsHookEx SendMessageW GetWindowThreadProcessId

shlwapi

PathFileExistsW wvnsprintfW wnsprintfW SHGetValueW PathAppendW StrCmpNIW SHSetValueW StrChrA wnsprintfA wvnsprintfA StrCatW PathFindFileNameW

advapi32

RegOpenKeyW GetUserNameW RegCloseKey

ole32

CoCreateGuid

hermes32.dll

IMPHASH 0d3dcbc64078c20d0b2b707e6f87fc47
SHA256 8915dd1384dffbe9ba9f62786ab5fc798e5ecafd7a63843c42679264f88f56ea
MD5 00a61dd4fc4ffe67d6de6fed58559791
SHA1 a67cf66b6db4a8f7660dcc31502be220cae553c8
SHA512 348c0c8710c836db53775d65ff8ebccbe6bf0186af25c3284ad203c479a69cdf682e035cb9955e20a9765a96885f41e7720e1961b2754b56c3e6337757c5a874
SSDEEP 3072:swelgBuiAadHM6Ecxvf3vTywq8gz4iM71B9aXISLZD21reC2l9MCrs51g9MvB0sV:vu4dHM0uM7Tw4H1qC2DMCw6Mvl4G2GGU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

5c:7c:6d:d2:d5:f1:49:0c:70:b1:f8:bf:66:ba:e0:d5:b1:99:11:78:f9:74:18:e3:24:dd:7f:57:e6:41:92:28

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

PE Signature issue

Digest

b8:dc:5f:61:91:b3:9a:1b:de:5f:ad:1f:93:15:32:90:08:29:d9:61

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

79415

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\hermes\Release\hermes32.pdb

kernel32

LocalAlloc CreateThread OutputDebugStringA GetProcAddress lstrlenW lstrcpynW LoadLibraryW InitializeCriticalSection IsBadReadPtr GetModuleHandleW OutputDebugStringW CloseHandle lstrcmpiW DisableThreadLibraryCalls MoveFileW SetLastError GetLastError SetEnvironmentVariableA CompareStringW CompareStringA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA GetLocaleInfoA GetLocaleInfoW InitializeCriticalSectionAndSpinCount InterlockedExchange FreeLibrary LCMapStringW LCMapStringA IsValidCodePage GetOEMCP GetCPInfo GetModuleFileNameW Sleep lstrcmpA CreateFileA VirtualQuery lstrcpynA HeapAlloc GetCurrentProcess HeapFree SetEvent GetTickCount WriteFile WideCharToMultiByte LeaveCriticalSection TerminateProcess ReadFile GetACP MultiByteToWideChar EnterCriticalSection GetLocalTime LoadLibraryA Process32FirstW Module32FirstW Process32NextW GetModuleHandleA CreateToolhelp32Snapshot OpenEventW Module32NextW GetCurrentProcessId lstrcpyW lstrcpyA GetCurrentThreadId SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime GetCommandLineA RaiseException RtlUnwind HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapSize ExitProcess GetStdHandle GetModuleFileNameA GetTimeZoneInformation SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter VirtualAlloc

user32

GetWindowRect CallNextHookEx EnumWindows GetWindowTextW GetClassNameW IsWindow SetWindowsHookExW UnhookWindowsHookEx SendMessageW GetWindowThreadProcessId

shlwapi

PathFileExistsW StrStrIW wvnsprintfW SHGetValueW PathAppendW SHSetValueW StrChrA wnsprintfA wvnsprintfA wnsprintfW PathFindFileNameW

advapi32

GetUserNameW

ole32

CoCreateGuid

imagent32.dll

IMPHASH a3959ab95f75534d5898095abca19045
SHA256 baf501eac2cbd11fafc81b41e38349e8156feab906a1ec5e364a1fa8d0b3d9a9
MD5 1fd92aecab7f6647b69125c7bd37f237
SHA1 532ab4dd5eaa49edb80b430ae2be5d54fc604917
SHA512 3c5f43a9c13b313988c3b212117a156a6593a270f22517ff197e33e22fd46f9d40918d7be0fba04e707beba88eb8ba68a0b5b6ef87ff72362aca9691b78ce889
SSDEEP 3072:H0P2EdAsowJNQVEM1D9hnu1YDqdJ54SqKFyCZXhSz20BI5D0FcxaCOZdy2oH/:UOCNowTY/D9hFScwXg20By50cDH/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

ad:36:ad:b2:0f:05:69:80:1b:8f:41:db:d5:1f:fd:5c:ae:c4:37:81:40:ba:0c:fc:aa:40:62:f4:3f:31:3c:ad

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

May 8, 2021

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

48:ee:d2:8e:cb:2b:82:f4:e1:67:c2:d4:ad:87:60:ca:4b:56:a3:05

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 23, 2020 - Jan 22, 2032

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

5

Entry point

51841

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\Release\imagent32.pdb

kernel32

WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP IsValidLocale EnumSystemLocalesA GetUserDefaultLCID CloseHandle DisableThreadLibraryCalls lstrcmpA GetModuleFileNameW GetProcAddress lstrcmpiW GetModuleHandleA lstrcpyW lstrcpyA VirtualQuery HeapAlloc GetCurrentProcess HeapFree GetLogicalDrives GetModuleHandleW GetTickCount WriteFile InitializeCriticalSection OpenProcess WideCharToMultiByte LeaveCriticalSection lstrcpynW TerminateProcess ReadFile GetACP MultiByteToWideChar lstrlenW GetLastError SetLastError EnterCriticalSection LoadLibraryA Process32FirstW ProcessIdToSessionId QueryDosDeviceW Module32FirstW Process32NextW lstrcatW CreateToolhelp32Snapshot Module32NextW GetCurrentProcessId CreateFileA SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement Sleep HeapSize ExitProcess GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime VirtualAlloc GetCPInfo GetOEMCP IsValidCodePage LCMapStringA LCMapStringW InterlockedExchange InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW

shlwapi

wnsprintfA wvnsprintfA wnsprintfW StrStrIW SHGetValueW PathAppendW StrCmpNIW SHSetValueW StrChrA StrStrW PathFindFileNameW wvnsprintfW PathFileExistsW

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

psapi

GetProcessImageFileNameW

advapi32

OpenProcessToken CreateProcessAsUserW

ole32

CoCreateGuid

imagent64.dll

IMPHASH 2d51c5725da49b503f06a15ab7aefb16
SHA256 d05580c4c6392c5f07a20ce6357587f1237f0eeada36e2b2ae8e233f6c7f1766
MD5 7c91fe2f22329e6bcfa4cb1e44cb61d4
SHA1 9dbcf1f871cc8b9c491e359dcb16d83bf4d62489
SHA512 14cd685c4cc2f128caeba9d2560b82e00265005f261128f7c6d17a3b2d87e08b05d845e1b543991c50fcca73786721d514c7cc472132cec71217f7aa6f572a56
SSDEEP 6144:Sd3C3diPx7beLXQWUW3r3nF6dW0xMvgtmRTb:SZP1kXh3nwRkRf
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

Digest

bb:2e:d5:0a:c5:15:9a:50:a0:53:a4:37:b1:23:89:ed:78:23:a8:76:b0:b9:e1:72:7b:ee:ea:cc:12:22:48:21

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

May 8, 2021

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

0a:13:09:2a:0c:ce:fb:54:26:49:19:d9:4d:05:a2:2d:95:a3:57:2e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 23, 2020 - Jan 22, 2032

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

2

Major OS version

5

Entry point

75888

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\po\trunk\modules\Release\imagent64.pdb

kernel32

WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP IsValidLocale EnumSystemLocalesA GetUserDefaultLCID CloseHandle DisableThreadLibraryCalls lstrcmpA GetModuleFileNameW GetProcAddress lstrcmpiW GetModuleHandleA lstrcpyW lstrcpyA VirtualQuery HeapAlloc GetCurrentProcess HeapFree GetLogicalDrives GetModuleHandleW GetTickCount WriteFile InitializeCriticalSection OpenProcess WideCharToMultiByte LeaveCriticalSection lstrcpynW TerminateProcess ReadFile GetACP MultiByteToWideChar lstrlenW GetLastError SetLastError EnterCriticalSection LoadLibraryA Process32FirstW ProcessIdToSessionId QueryDosDeviceW Module32FirstW Process32NextW lstrcatW CreateToolhelp32Snapshot Module32NextW GetCurrentProcessId CreateFileA SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapReAlloc EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc Sleep HeapSize ExitProcess GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetSystemTimeAsFileTime GetCPInfo GetOEMCP IsValidCodePage LCMapStringA LCMapStringW InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW

shlwapi

StrStrW wnsprintfW StrStrIW SHGetValueW PathAppendW StrCmpNIW SHSetValueW StrChrA wvnsprintfA wnsprintfA PathFindFileNameW wvnsprintfW PathFileExistsW

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

psapi

GetProcessImageFileNameW

advapi32

OpenProcessToken CreateProcessAsUserW

ole32

CoCreateGuid

intcap32.dll

IMPHASH 2acf34fc0e09231ba79fcdeb3b23ec10
SHA256 b164b9e888250200be991ad2d3fef11d2d15fc9591dec8b121d7bd895bd2c25f
MD5 4b8968dffc2c9cd0ba2aeb8da264f4ad
SHA1 b2f06aa085cd0afde410509669e34ac8df3cdfe7
SHA512 604df895e7d8d0a5abf95aca52defa07dee7dffa326adeef5307b7788dd5f9ee314242f96981973e252a5438f4609dfb419059a03c59a1bf3b6eb62085c47677
SSDEEP 6144:w6ofcjYVwWCmps4qZeNq91kSScA92+cd+vuFGVGrJ:xYVwWCfHZeqAcecsuB
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

35:b3:d9:9b:9d:1d:fa:7c:3f:dd:15:02:b0:6e:ea:85:ef:68:fa:8a:64:51:1b:ad:50:a9:ee:46:9d:dd:e9:22

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

PE Signature issue

Digest

f0:95:33:86:f6:95:ba:02:b5:57:3b:03:53:d6:dc:d5:42:01:0a:fa

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

127079

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\intcap\Release\intcap32.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP lstrcmpA SetLastError GetLastError GetTempPathW OutputDebugStringW CreateThread GetCurrentThreadId InterlockedExchange InterlockedCompareExchange InterlockedDecrement InterlockedIncrement lstrlenA CloseHandle CreateEventW lstrcpynW SetFilePointer GetWindowsDirectoryW LocalFree DeleteFileW Sleep SetEvent WaitForSingleObject TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetModuleFileNameW lstrlenW lstrcmpiW GetModuleHandleA lstrcpyW lstrcpyA CreateFileA VirtualQuery lstrcpynA CreateProcessW GetLogicalDrives InitializeCriticalSection OpenProcess GetFileAttributesW ReadFile CreateFileW GetLocalTime Process32FirstW ProcessIdToSessionId QueryDosDeviceW Module32FirstW Process32NextW lstrcatW CreateToolhelp32Snapshot GetFileAttributesExW OpenEventW Module32NextW WriteConsoleW

advapi32

AllocateAndInitializeSid SetEntriesInAclW RegEnumValueW FreeSid OpenProcessToken CreateProcessAsUserW InitializeSecurityDescriptor GetUserNameW SetSecurityDescriptorDacl RegCloseKey RegOpenKeyExW SetFileSecurityW

shlwapi

wnsprintfW SHDeleteValueW PathFileExistsW PathAppendW PathRemoveFileSpecW StrStrIW wnsprintfA StrCmpNIW SHSetValueW StrChrA PathIsDirectoryW wvnsprintfA PathFindFileNameW StrStrW SHGetValueW wvnsprintfW

ws2_32

WSAWaitForMultipleEvents closesocket WSACreateEvent WSAGetOverlappedResult bind WSARecvFrom htons recvfrom inet_ntoa WSACloseEvent sendto socket

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

psapi

GetProcessImageFileNameW

shell32

ord165

ole32

CoCreateGuid

intcap64.dll

IMPHASH f7bbfc1645638171ca4334d9e2e58190
SHA256 8aff486e55a7856b00312629ae8f668f7beaacb2ed98885dfbb59f8b0d239e46
MD5 0d56fcc807ed9c7e5dadf8ec4b7660b2
SHA1 6b021dee9b8878584f452ea514d93b87d2849290
SHA512 39d6c49bbe250c77efcf6a0751095ceeccfd049968462d5b57a0130cd6642ad83dc5be25541ee4f9cf0abca8538d40aa4ab92f859b6c2ad436eb07d93a4e7344
SSDEEP 6144:RJAEZ8AS3DgiZSMtd4+Ae/kOdzF6/10P/u+8WeUEG3m5cFS2f1EnGXG4w:7AToAtd/AE6d72WmFREN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

42:b5:4e:5c:1c:cb:7c:72:2b:97:9a:2e:38:b4:b7:bf:3f:8c:07:93:95:8d:65:59:5f:36:f0:a2:0b:9a:51:21

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

PE Signature issue

Digest

80:d9:5a:eb:18:33:9b:0a:06:5b:17:4b:03:92:9d:ab:18:86:ac:52

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

192148

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\intcap\Release\intcap64.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP lstrcmpA SetLastError GetLastError GetTempPathW OutputDebugStringW CreateThread GetCurrentThreadId lstrlenA CloseHandle CreateEventW lstrcpynW SetFilePointer GetWindowsDirectoryW LocalFree DeleteFileW Sleep SetEvent WaitForSingleObject TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapAlloc HeapFree EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc HeapSize GetModuleHandleW GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetModuleFileNameW lstrlenW lstrcmpiW GetModuleHandleA lstrcpyW lstrcpyA CreateFileA VirtualQuery lstrcpynA CreateProcessW GetLogicalDrives InitializeCriticalSection OpenProcess GetFileAttributesW ReadFile CreateFileW GetLocalTime Process32FirstW ProcessIdToSessionId QueryDosDeviceW Module32FirstW Process32NextW lstrcatW CreateToolhelp32Snapshot GetFileAttributesExW OpenEventW Module32NextW WriteConsoleW

advapi32

SetFileSecurityW AllocateAndInitializeSid OpenProcessToken GetUserNameW CreateProcessAsUserW InitializeSecurityDescriptor SetSecurityDescriptorDacl RegCloseKey RegOpenKeyExW FreeSid RegEnumValueW SetEntriesInAclW

shlwapi

wnsprintfW SHDeleteValueW PathFileExistsW PathAppendW PathRemoveFileSpecW StrStrIW wnsprintfA StrCmpNIW SHSetValueW StrChrA PathIsDirectoryW wvnsprintfA PathFindFileNameW StrStrW SHGetValueW wvnsprintfW

ws2_32

WSAWaitForMultipleEvents closesocket WSACreateEvent WSAGetOverlappedResult bind WSARecvFrom htons recvfrom inet_ntoa WSACloseEvent sendto socket

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

psapi

GetProcessImageFileNameW

shell32

ord165

ole32

CoCreateGuid

lang/lang-2052.dll

SHA256 bcc0171a06d856569f43007d23c27fc4f54f098ad231d3e4ee4fdbe3cd4bf85f
MD5 04760a888a3fa6a55a48093c7d7b2795
SHA1 6d2f4c0dc582885d3fea21700ad8013a1d0eb52d
SHA512 161d9de5188dce98bdd8196d596f8dc600656e851b6156db2caafe1563ae290ab3f729828d259f2e0df35827d187c5d04382bc5cacb357d3b7ab041fe9aa1d74
SSDEEP 768:9EI8azrSYBEQc9OfTTZ6+EDw4ffg3uXJ9hRfMJiRP4oDGm933hgO:9L8azrSNO7TZyw4ffgeXJ9hRUJix993P
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

b5:90:49:79:f9:14:e7:77:ec:41:e1:69:4a:df:e1:94:81:ac:1d:79:7f:a0:5c:c3:34:0d:0d:6f:e7:65:bf:4a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Aug 8, 2022

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

8e:f7:16:93:5d:43:8d:a5:93:76:8e:ba:36:6d:47:c0:20:c5:3e:a1

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 11, 2022 - Aug 10, 2033

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

lang/zh_CN.json

SHA256 e2e8803a14d6cc7b5bcc6dfd6bdda16088e0da82c9d5253bffeebd0663a0a43d
MD5 424b78ab2ea6e9c550dc3c74f9508732
SHA1 bb114b4b81c33cca13f7ff324590265196d70b30
SHA512 0ebc94a429a83451dd89f62cc9edfb5bc4977792ae2679221416d0b310db4d0654cc0939e8ab9d6c0a303e4d2286410e7c00a84f962a9fa20396b1daccc4f1d6
SSDEEP 96:QEL4s7yzpmBJx01YteYRInE22VpQx1XDI2KIAl9oIv2aswRInQ5dpSw7:QEL4s7ybNxnErpQDcpIAkIv2rSpn
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

langrp32.dll

IMPHASH f9223ff8064b955363a1a03459ee76e4
SHA256 10880781d5feec646d08f8d5052beb1ce5d23f5f5d5c8179d8cf4512ab126875
MD5 7735c0f129769b4737fc19f890bbd196
SHA1 f63c8701ed50fcb4946df4a7f4a1df154db73493
SHA512 d43f7456b1da4691be117c6934259bfed9f58e104e6938b92a684ca32e5a32f5b20bbe0cbc15c88f7a658233e0f3ac055668f1efdbf7b5f885730d9824224111
SSDEEP 6144:Q6kLGqtyzXyQHOoaqveyq4hVj6E2y6aPJGxG9y:QtLGWBOOobGshVj60Zk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

32:ec:1a:5d:21:77:9a:5b:f6:15:e0:45:cf:e4:cc:cb:c8:bb:6b:f1:de:8e:7e:c2:7e:d5:dd:e8:b9:72:f5:f0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 11, 2024

PE Signature issue

Digest

32:a1:9e:99:1d:5b:ec:26:51:94:fd:7a:9c:76:9f:1f:ac:e9:e1:27

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 11, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

117509

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\langrp\Release\langrp32.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP DeleteFileW FileTimeToLocalFileTime GetFileAttributesExW GetLocalTime FileTimeToSystemTime CopyFileW Sleep DisableThreadLibraryCalls lstrcmpA CreateThread CloseHandle EnterCriticalSection SetFilePointer GetLastError LeaveCriticalSection InitializeCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetModuleFileNameW lstrlenW lstrcmpiW GetModuleHandleA lstrcpyW lstrcpyA GetDriveTypeW GetLogicalDrives lstrcpynW CreateEventW GetDiskFreeSpaceExW CreateFileA lstrlenA VirtualQuery SystemTimeToFileTime WaitForSingleObject SetEvent GetDriveTypeA OpenProcess GetFileAttributesW ReadFile CreateFileW Process32FirstW QueryDosDeviceW DeviceIoControl Module32FirstW Process32NextW lstrcatW CreateToolhelp32Snapshot Module32NextW WriteConsoleW

shlwapi

PathRemoveFileSpecW SHGetValueW wnsprintfW StrCmpNIW SHSetValueW PathIsDirectoryW SHDeleteValueW PathFileExistsW wvnsprintfW PathFindFileNameW wnsprintfA StrStrIW wvnsprintfA StrStrW

ws2_32

socket sendto htons closesocket bind setsockopt htonl recvfrom

psapi

GetProcessImageFileNameW

advapi32

RegCloseKey RegOpenKeyExW RegEnumValueW

shell32

ord165

ole32

CoCreateGuid

langrp64.dll

IMPHASH f2a282d7955b42d23c143e62792b9bc4
SHA256 c8c53e559fb292bb25722389a581de4cb24a66444ebd008eddb2a5733c22173c
MD5 b01d4730a4764cebfec82080fe03a01f
SHA1 ebc036966cf0847854ebd1fadfa8736f3684dcad
SHA512 6ba971262e2e952d8f7572a70a0a6b3fa515cd22414a448391b41697032bd97ff528528a519429fba19f5171687520c90fb39db9e5169794bbdc9260621f3ab5
SSDEEP 6144:lzYuCrTpjzYPNpSoi/w+H69Mw1VGwLJICHLW3MnX3lGwlFyBsGMGhc:lzYuCrRiJi/3aWwlfHX3ljD
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

88:87:ea:c3:98:be:84:1a:1e:48:d7:93:d7:75:d6:1e:79:c2:a4:0e:36:8c:25:4f:19:a6:5c:e2:99:25:98:8a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 11, 2024

PE Signature issue

Digest

49:3e:f5:ac:bc:55:4a:21:20:50:a7:15:67:b1:8f:97:64:81:8b:34

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 11, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

177024

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\langrp\Release\langrp64.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP DeleteFileW FileTimeToLocalFileTime GetFileAttributesExW GetLocalTime FileTimeToSystemTime CopyFileW Sleep DisableThreadLibraryCalls lstrcmpA CreateThread CloseHandle EnterCriticalSection SetFilePointer Module32NextW GetLastError LeaveCriticalSection InitializeCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapAlloc HeapFree EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc HeapSize GetModuleHandleW GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetModuleFileNameW lstrlenW lstrcmpiW GetModuleHandleA lstrcpyW lstrcpyA GetDriveTypeW GetLogicalDrives lstrcpynW CreateEventW GetDiskFreeSpaceExW CreateFileA lstrlenA VirtualQuery SystemTimeToFileTime WaitForSingleObject SetEvent GetDriveTypeA OpenProcess GetFileAttributesW ReadFile CreateFileW Process32FirstW QueryDosDeviceW DeviceIoControl Module32FirstW Process32NextW lstrcatW CreateToolhelp32Snapshot WriteConsoleW

shlwapi

wnsprintfW PathRemoveFileSpecW SHDeleteValueW StrCmpNIW SHSetValueW PathIsDirectoryW wvnsprintfA PathFileExistsW wvnsprintfW PathFindFileNameW StrStrIW SHGetValueW wnsprintfA StrStrW

ws2_32

socket sendto htons closesocket bind setsockopt htonl recvfrom

psapi

GetProcessImageFileNameW

advapi32

RegCloseKey RegOpenKeyExW RegEnumValueW

shell32

ord165

ole32

CoCreateGuid

leakways32.dll

IMPHASH 6f19fabc6e12425b0751ec55b0369192
SHA256 0b549f47d27e23d4944fe39984e3fdbc17f866513236960d6acbfd47accaa63d
MD5 5587c1c8dbf17e12a1f976780fef399e
SHA1 348daa301ce2a5da71f905b462d7ec249603b7d7
SHA512 b16f54ed8605b5dffeabf150ad5510176582d9dbeec5d070f8d3d5639cdfe47788cfb2c90d51efa88d9e15a1382182bbc3be8eb4cfa5014df9417f5c7e1bc97c
SSDEEP 6144:HjBw2HuK9WN4wMJ+Ua3uLYQ+6cVgLAy2ezfZmIeGqGzf:HjBw2HuK9WCwM67XiLAixmG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

ec:67:65:8c:ee:fc:c3:19:18:db:27:8b:d9:84:57:06:35:89:fd:48:1f:db:69:2a:9b:d1:70:18:8a:4c:1e:c8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

PE Signature issue

Digest

eb:f0:a2:0b:c3:91:50:14:c9:28:8d:f1:ab:08:09:20:0d:1f:a2:f4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

134132

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\leakways\Release\leakways32.pdb

kernel32

CreateEventW DisableThreadLibraryCalls lstrcmpA GetModuleHandleA LoadLibraryA GetProcAddress SetLastError GetLastError GetTempPathW OutputDebugStringW CloseHandle lstrcmpiW GetWindowsDirectoryW LocalFree Module32NextW OpenEventW GetFileAttributesExW CreateToolhelp32Snapshot FindNextFileW Process32NextW Module32FirstW QueryDosDeviceW ProcessIdToSessionId Process32FirstW GetLocalTime FindClose GetCurrentDirectoryW GetFileSizeEx lstrcmpW ReadFile GetFileAttributesW GetVersionExW LoadLibraryW Sleep GetDriveTypeA GetLogicalDrives TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc InterlockedExchange InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA GetModuleFileNameW lstrlenW lstrcpyW CreateThread lstrcpyA lstrcpynA GetSystemDirectoryW CopyFileW lstrcpynW CreateFileW MoveFileW DeviceIoControl DeleteFileW FindFirstFileW VirtualQuery CreateProcessW SetEvent InitializeCriticalSection OpenProcess

shell32

SHGetSpecialFolderPathW SHGetPathFromIDListW SHGetSpecialFolderLocation ord165

ole32

StringFromGUID2 CoCreateInstance CoCreateGuid CoTaskMemFree CoInitialize

setupapi

SetupDiGetDeviceInfoListDetailW SetupDiClassNameFromGuidExW SetupDiBuildClassInfoListExW SetupDiGetClassDevsExW CM_Get_Device_ID_ExW SetupDiGetClassDescriptionExW CM_Get_DevNode_Status_Ex SetupDiGetClassDevsW CM_Disable_DevNode SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList CM_Get_DevNode_Status SetupDiGetDeviceRegistryPropertyW

netapi32

NetShareEnum NetShareDel NetApiBufferFree

wlanapi

WlanDisconnect WlanEnumInterfaces WlanOpenHandle WlanCloseHandle WlanQueryInterface WlanFreeMemory

shlwapi

SHSetValueW StrCmpNIW SHGetValueW StrChrW PathRemoveFileSpecW StrNCatW PathFindExtensionW PathAddBackslashW wnsprintfW PathIsDirectoryW PathFindFileNameW PathAppendW StrChrA StrStrIW PathFileExistsW wvnsprintfW wnsprintfA wvnsprintfA

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

advapi32

InitializeSecurityDescriptor SetSecurityDescriptorDacl CreateServiceW CloseServiceHandle OpenProcessToken DeleteService OpenSCManagerW OpenServiceW CreateProcessAsUserW GetUserNameW FreeSid SetEntriesInAclW AllocateAndInitializeSid SetFileSecurityW QueryServiceStatus StartServiceW

leakways64.dll

IMPHASH 305b5e8bdf5b26e854b46175f893cf42
SHA256 daba19791f20fb880fa4b284d169ee77b0a8408f0257c6b2cdaed68a30a23ef1
MD5 0cfae5f4b3d07aec703d464fb7f9c930
SHA1 4c123725fad25ca9a6f0949ca9b670bc4e16e11c
SHA512 409da8622c78bc626e52a61a52bd3897fe1babf737dfd7e78189141688e65d2d061cffd6774f5ad90ff35202be6a04480561c7727267ddde0bd28e59c1b2b76e
SSDEEP 6144:C9v9Ogd3lCfTj4y0PU3aFSHUVM24U9PxAALk4AAzcmAlWNHDaDEvoBlJuGAnGz7:C9v9OgPCfTUyUVttZzJAIbwBlkm
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

fd:9c:1b:ab:77:3f:15:58:8c:48:63:a3:68:87:5f:1c:e0:2e:9e:c7:96:7a:ab:c3:63:1e:92:83:90:d4:ee:e0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

PE Signature issue

Digest

bd:0d:15:81:64:9c:ae:a5:13:44:ea:b8:a4:e9:1f:8f:1c:7d:db:63

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

249352

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\leakways\Release\leakways64.pdb

kernel32

CreateEventW DisableThreadLibraryCalls lstrcmpA GetModuleHandleA LoadLibraryA GetProcAddress SetLastError GetLastError GetTempPathW OutputDebugStringW CloseHandle lstrcmpiW GetWindowsDirectoryW LocalFree Module32NextW OpenEventW GetFileAttributesExW CreateToolhelp32Snapshot FindNextFileW Process32NextW Module32FirstW QueryDosDeviceW ProcessIdToSessionId Process32FirstW GetLocalTime FindClose GetCurrentDirectoryW GetFileSizeEx lstrcmpW ReadFile GetFileAttributesW GetVersionExW Sleep GetDriveTypeA GetLogicalDrives TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapAlloc HeapFree EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc HeapSize GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA GetModuleFileNameW lstrlenW lstrcpyW CreateThread lstrcpyA lstrcpynA GetSystemDirectoryW CopyFileW lstrcpynW CreateFileW MoveFileW DeviceIoControl DeleteFileW FindFirstFileW VirtualQuery CreateProcessW SetEvent InitializeCriticalSection OpenProcess

shell32

SHGetSpecialFolderPathW SHGetPathFromIDListW ord165 SHGetSpecialFolderLocation

ole32

CoInitialize StringFromGUID2 CoCreateInstance CoCreateGuid CoTaskMemFree

setupapi

CM_Disable_DevNode SetupDiGetDeviceInfoListDetailW SetupDiClassNameFromGuidExW SetupDiBuildClassInfoListExW SetupDiGetClassDevsExW CM_Get_Device_ID_ExW CM_Get_DevNode_Status SetupDiGetDeviceRegistryPropertyW SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo CM_Get_DevNode_Status_Ex SetupDiGetClassDevsW SetupDiGetClassDescriptionExW

netapi32

NetShareEnum NetApiBufferFree NetShareDel

wlanapi

WlanCloseHandle WlanEnumInterfaces WlanDisconnect WlanOpenHandle WlanFreeMemory WlanQueryInterface

shlwapi

StrChrA SHSetValueW StrCmpNIW SHGetValueW StrChrW PathRemoveFileSpecW StrNCatW PathFindExtensionW PathAddBackslashW wnsprintfW PathIsDirectoryW PathFindFileNameW PathAppendW StrStrIW PathFileExistsW wvnsprintfW wnsprintfA wvnsprintfA

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

advapi32

InitializeSecurityDescriptor SetSecurityDescriptorDacl CreateServiceW CloseServiceHandle OpenProcessToken DeleteService OpenSCManagerW OpenServiceW CreateProcessAsUserW GetUserNameW FreeSid SetEntriesInAclW AllocateAndInitializeSid SetFileSecurityW QueryServiceStatus StartServiceW

libcrypto-3.dll

IMPHASH 5f9211e3d08e35021939396d29c31164
SHA256 3bc7c13f0afb804e81f7ae6fcd09314e42c01028564b80d2b38d112df1539df5
MD5 a33a1d5b8886f5ada2e60af72e6a334b
SHA1 956c1ba19c48bfa20cb18e2d731a0771ada5cb22
SHA512 d99146db782645c32c44ff6c547945c1e72e412c650932c9b4d56ef1c2dce3a5d24461190e343be90a61829fb906250ca9fa63b90eec9467f2d370fe8baccc66
SSDEEP 49152:ngQJk4nKsH/VLI1bThCAcenNYXvJIzcb88Xb61CPwDvt3uFTDCJo+mjL2UZ8Kxfr:3O4nK69M1LfShLb8v1CPwDvt3uFTDCJe
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

9b:13:11:47:26:30:da:8c:3a:11:31:f0:c2:c0:27:28:2d:6b:dc:fc:86:ec:a1:1c:a2:35:51:38:4d:9e:41:e2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Feb 21, 2024

PE Signature issue

Digest

a8:29:c9:e9:08:5a:0b:85:91:8a:08:54:3a:aa:05:e9:15:a3:32:0d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Feb 21, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

6

Entry point

2532327

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\projects\projectsJ\nfsdk2_1.6\protocolfilters\openssl\out32dll\libcrypto-3.pdb

ws2_32

htons accept sendto recvfrom send recv shutdown socket setsockopt listen connect closesocket bind htonl WSACleanup WSAStartup select getsockopt getsockname ioctlsocket WSAGetLastError WSASetLastError getservbyname getservbyport gethostbyname gethostbyaddr ntohs inet_ntoa inet_addr

advapi32

CryptCreateHash RegisterEventSourceW ReportEventW CryptAcquireContextW CryptReleaseContext CryptDestroyKey CryptSetHashParam CryptEnumProvidersW CryptSignHashW CryptDestroyHash DeregisterEventSource CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam

crypt32

CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertOpenStore CertGetCertificateContextProperty

user32

GetUserObjectInformationW MessageBoxW GetProcessWindowStation

bcrypt

BCryptGenRandom

kernel32

SetFileAttributesW GetFileAttributesExW GetModuleFileNameA HeapSize LoadLibraryExW GetModuleFileNameW QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW WriteConsoleW GetStringTypeW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetFullPathNameW SetCurrentDirectoryW GetCurrentDirectoryW CreateFileW OutputDebugStringW SetEnvironmentVariableA GetTimeZoneInformation SetEndOfFile GetFullPathNameA RtlUnwind FindFirstFileW GetDriveTypeW FindFirstFileExW SetFilePointerEx SetFilePointer FlushFileBuffers SetStdHandle ConvertThreadToFiberEx ConvertFiberToThread CreateFiberEx DeleteFiber SwitchToFiber GetSystemDirectoryA FreeLibrary GetProcAddress FormatMessageA LoadLibraryA Sleep GetSystemTime SystemTimeToFileTime GetLastError SetLastError CloseHandle LoadLibraryW GetEnvironmentVariableW GetStdHandle GetFileType WriteFile GetVersion GetModuleHandleW MultiByteToWideChar WideCharToMultiByte GetACP GetModuleHandleExW GetSystemInfo VirtualAlloc VirtualFree VirtualProtect VirtualLock FindClose FindNextFileW InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared InterlockedExchangeAdd InterlockedCompareExchange InterlockedCompareExchange64 GetCurrentThreadId TlsAlloc TlsGetValue TlsSetValue TlsFree GetConsoleMode ReadConsoleA ReadConsoleW SetConsoleMode GetCurrentProcess TerminateProcess GetCurrentProcessId GetSystemTimeAsFileTime HeapFree EnterCriticalSection LeaveCriticalSection IsDebuggerPresent IsProcessorFeaturePresent ReadFile InterlockedExchange HeapAlloc EncodePointer DecodePointer InterlockedDecrement ExitProcess AreFileApisANSI SetConsoleCtrlHandler HeapReAlloc FileTimeToLocalFileTime GetFileInformationByHandle PeekNamedPipe FileTimeToSystemTime GetCommandLineA GetConsoleCP InterlockedIncrement IsValidCodePage GetOEMCP GetCPInfo GetCurrentThread GetProcessHeap DeleteCriticalSection InitializeCriticalSectionAndSpinCount FatalAppExitA GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter CreateSemaphoreW

ACCESS_DESCRIPTION_free ACCESS_DESCRIPTION_it ACCESS_DESCRIPTION_new ADMISSIONS_free ADMISSIONS_get0_admissionAuthority ADMISSIONS_get0_namingAuthority ADMISSIONS_get0_professionInfos ADMISSIONS_it ADMISSIONS_new ADMISSIONS_set0_admissionAuthority ADMISSIONS_set0_namingAuthority ADMISSIONS_set0_professionInfos ADMISSION_SYNTAX_free ADMISSION_SYNTAX_get0_admissionAuthority ADMISSION_SYNTAX_get0_contentsOfAdmissions ADMISSION_SYNTAX_it ADMISSION_SYNTAX_new ADMISSION_SYNTAX_set0_admissionAuthority ADMISSION_SYNTAX_set0_contentsOfAdmissions AES_bi_ige_encrypt AES_cbc_encrypt AES_cfb128_encrypt AES_cfb1_encrypt AES_cfb8_encrypt AES_decrypt AES_ecb_encrypt AES_encrypt AES_ige_encrypt AES_ofb128_encrypt AES_options AES_set_decrypt_key AES_set_encrypt_key AES_unwrap_key AES_wrap_key ASIdOrRange_free ASIdOrRange_it ASIdOrRange_new ASIdentifierChoice_free ASIdentifierChoice_it ASIdentifierChoice_new ASIdentifiers_free ASIdentifiers_it ASIdentifiers_new ASN1_ANY_it ASN1_BIT_STRING_check ASN1_BIT_STRING_free ASN1_BIT_STRING_get_bit ASN1_BIT_STRING_it ASN1_BIT_STRING_name_print ASN1_BIT_STRING_new ASN1_BIT_STRING_num_asc ASN1_BIT_STRING_set ASN1_BIT_STRING_set_asc ASN1_BIT_STRING_set_bit ASN1_BMPSTRING_free ASN1_BMPSTRING_it ASN1_BMPSTRING_new ASN1_BOOLEAN_it ASN1_ENUMERATED_free ASN1_ENUMERATED_get ASN1_ENUMERATED_get_int64 ASN1_ENUMERATED_it ASN1_ENUMERATED_new ASN1_ENUMERATED_set ASN1_ENUMERATED_set_int64 ASN1_ENUMERATED_to_BN ASN1_FBOOLEAN_it ASN1_GENERALIZEDTIME_adj ASN1_GENERALIZEDTIME_check ASN1_GENERALIZEDTIME_dup ASN1_GENERALIZEDTIME_free ASN1_GENERALIZEDTIME_it ASN1_GENERALIZEDTIME_new ASN1_GENERALIZEDTIME_print ASN1_GENERALIZEDTIME_set ASN1_GENERALIZEDTIME_set_string ASN1_GENERALSTRING_free ASN1_GENERALSTRING_it ASN1_GENERALSTRING_new ASN1_IA5STRING_free ASN1_IA5STRING_it ASN1_IA5STRING_new ASN1_INTEGER_cmp ASN1_INTEGER_dup ASN1_INTEGER_free ASN1_INTEGER_get ASN1_INTEGER_get_int64 ASN1_INTEGER_get_uint64 ASN1_INTEGER_it ASN1_INTEGER_new ASN1_INTEGER_set ASN1_INTEGER_set_int64 ASN1_INTEGER_set_uint64 ASN1_INTEGER_to_BN ASN1_ITEM_get ASN1_ITEM_lookup ASN1_NULL_free ASN1_NULL_it ASN1_NULL_new ASN1_OBJECT_create ASN1_OBJECT_free ASN1_OBJECT_it ASN1_OBJECT_new ASN1_OCTET_STRING_NDEF_it ASN1_OCTET_STRING_cmp ASN1_OCTET_STRING_dup ASN1_OCTET_STRING_free ASN1_OCTET_STRING_it ASN1_OCTET_STRING_new ASN1_OCTET_STRING_set ASN1_PCTX_free ASN1_PCTX_get_cert_flags ASN1_PCTX_get_flags ASN1_PCTX_get_nm_flags ASN1_PCTX_get_oid_flags ASN1_PCTX_get_str_flags ASN1_PCTX_new ASN1_PCTX_set_cert_flags ASN1_PCTX_set_flags ASN1_PCTX_set_nm_flags ASN1_PCTX_set_oid_flags ASN1_PCTX_set_str_flags ASN1_PRINTABLESTRING_free ASN1_PRINTABLESTRING_it ASN1_PRINTABLESTRING_new ASN1_PRINTABLE_free ASN1_PRINTABLE_it ASN1_PRINTABLE_new ASN1_PRINTABLE_type ASN1_SCTX_free ASN1_SCTX_get_app_data ASN1_SCTX_get_flags ASN1_SCTX_get_item ASN1_SCTX_get_template ASN1_SCTX_new ASN1_SCTX_set_app_data ASN1_SEQUENCE_ANY_it ASN1_SEQUENCE_it ASN1_SET_ANY_it ASN1_STRING_TABLE_add ASN1_STRING_TABLE_cleanup ASN1_STRING_TABLE_get ASN1_STRING_clear_free ASN1_STRING_cmp ASN1_STRING_copy ASN1_STRING_data ASN1_STRING_dup ASN1_STRING_free ASN1_STRING_get0_data ASN1_STRING_get_default_mask ASN1_STRING_length ASN1_STRING_length_set ASN1_STRING_new ASN1_STRING_print ASN1_STRING_print_ex ASN1_STRING_print_ex_fp ASN1_STRING_set ASN1_STRING_set0 ASN1_STRING_set_by_NID ASN1_STRING_set_default_mask ASN1_STRING_set_default_mask_asc ASN1_STRING_to_UTF8 ASN1_STRING_type ASN1_STRING_type_new ASN1_T61STRING_free ASN1_T61STRING_it ASN1_T61STRING_new ASN1_TBOOLEAN_it ASN1_TIME_adj ASN1_TIME_check ASN1_TIME_cmp_time_t ASN1_TIME_compare ASN1_TIME_diff ASN1_TIME_dup ASN1_TIME_free ASN1_TIME_it ASN1_TIME_new ASN1_TIME_normalize ASN1_TIME_print ASN1_TIME_print_ex ASN1_TIME_set ASN1_TIME_set_string ASN1_TIME_set_string_X509 ASN1_TIME_to_generalizedtime ASN1_TIME_to_tm ASN1_TYPE_cmp ASN1_TYPE_free ASN1_TYPE_get ASN1_TYPE_get_int_octetstring ASN1_TYPE_get_octetstring ASN1_TYPE_new ASN1_TYPE_pack_sequence ASN1_TYPE_set ASN1_TYPE_set1 ASN1_TYPE_set_int_octetstring ASN1_TYPE_set_octetstring ASN1_TYPE_unpack_sequence ASN1_UNIVERSALSTRING_free ASN1_UNIVERSALSTRING_it ASN1_UNIVERSALSTRING_new ASN1_UNIVERSALSTRING_to_string ASN1_UTCTIME_adj ASN1_UTCTIME_check ASN1_UTCTIME_cmp_time_t ASN1_UTCTIME_dup ASN1_UTCTIME_free ASN1_UTCTIME_it ASN1_UTCTIME_new ASN1_UTCTIME_print ASN1_UTCTIME_set ASN1_UTCTIME_set_string ASN1_UTF8STRING_free ASN1_UTF8STRING_it ASN1_UTF8STRING_new ASN1_VISIBLESTRING_free ASN1_VISIBLESTRING_it ASN1_VISIBLESTRING_new ASN1_add_oid_module ASN1_add_stable_module ASN1_bn_print ASN1_buf_print ASN1_check_infinite_end ASN1_const_check_infinite_end ASN1_d2i_bio ASN1_d2i_fp ASN1_digest ASN1_dup ASN1_generate_nconf ASN1_generate_v3 ASN1_get_object ASN1_i2d_bio ASN1_i2d_fp ASN1_item_d2i ASN1_item_d2i_bio ASN1_item_d2i_bio_ex ASN1_item_d2i_ex ASN1_item_d2i_fp ASN1_item_d2i_fp_ex ASN1_item_digest ASN1_item_dup ASN1_item_ex_d2i ASN1_item_ex_free ASN1_item_ex_i2d ASN1_item_ex_new ASN1_item_free ASN1_item_i2d ASN1_item_i2d_bio ASN1_item_i2d_fp ASN1_item_i2d_mem_bio ASN1_item_ndef_i2d ASN1_item_new ASN1_item_new_ex ASN1_item_pack ASN1_item_print ASN1_item_sign ASN1_item_sign_ctx ASN1_item_sign_ex ASN1_item_unpack ASN1_item_verify ASN1_item_verify_ctx ASN1_item_verify_ex ASN1_mbstring_copy ASN1_mbstring_ncopy ASN1_object_size ASN1_parse ASN1_parse_dump ASN1_put_eoc ASN1_put_object ASN1_sign ASN1_str2mask ASN1_tag2bit ASN1_tag2str ASN1_verify ASRange_free ASRange_it ASRange_new ASYNC_WAIT_CTX_clear_fd ASYNC_WAIT_CTX_free ASYNC_WAIT_CTX_get_all_fds ASYNC_WAIT_CTX_get_callback ASYNC_WAIT_CTX_get_changed_fds ASYNC_WAIT_CTX_get_fd ASYNC_WAIT_CTX_get_status ASYNC_WAIT_CTX_new ASYNC_WAIT_CTX_set_callback ASYNC_WAIT_CTX_set_status ASYNC_WAIT_CTX_set_wait_fd ASYNC_block_pause ASYNC_cleanup_thread ASYNC_get_current_job ASYNC_get_wait_ctx ASYNC_init_thread ASYNC_is_capable ASYNC_pause_job ASYNC_start_job ASYNC_unblock_pause AUTHORITY_INFO_ACCESS_free AUTHORITY_INFO_ACCESS_it AUTHORITY_INFO_ACCESS_new AUTHORITY_KEYID_free AUTHORITY_KEYID_it AUTHORITY_KEYID_new BASIC_CONSTRAINTS_free BASIC_CONSTRAINTS_it BASIC_CONSTRAINTS_new BF_cbc_encrypt BF_cfb64_encrypt BF_decrypt BF_ecb_encrypt BF_encrypt BF_ofb64_encrypt BF_options BF_set_key BIGNUM_it BIO_ADDRINFO_address BIO_ADDRINFO_family BIO_ADDRINFO_free BIO_ADDRINFO_next BIO_ADDRINFO_protocol BIO_ADDRINFO_socktype BIO_ADDR_clear BIO_ADDR_family BIO_ADDR_free BIO_ADDR_hostname_string BIO_ADDR_new BIO_ADDR_path_string BIO_ADDR_rawaddress BIO_ADDR_rawmake BIO_ADDR_rawport BIO_ADDR_service_string BIO_accept BIO_accept_ex BIO_asn1_get_prefix BIO_asn1_get_suffix BIO_asn1_set_prefix BIO_asn1_set_suffix BIO_bind BIO_callback_ctrl BIO_clear_flags BIO_closesocket BIO_connect BIO_copy_next_retry BIO_ctrl BIO_ctrl_get_read_request BIO_ctrl_get_write_guarantee BIO_ctrl_pending BIO_ctrl_reset_read_request BIO_ctrl_wpending BIO_debug_callback BIO_debug_callback_ex BIO_dgram_non_fatal_error BIO_do_connect_retry BIO_dump BIO_dump_cb BIO_dump_fp BIO_dump_indent BIO_dump_indent_cb BIO_dump_indent_fp BIO_dup_chain BIO_f_asn1 BIO_f_base64 BIO_f_buffer BIO_f_cipher BIO_f_linebuffer BIO_f_md BIO_f_nbio_test BIO_f_null BIO_f_prefix BIO_f_readbuffer BIO_f_reliable BIO_fd_non_fatal_error BIO_fd_should_retry BIO_find_type BIO_free BIO_free_all BIO_get_accept_socket BIO_get_callback BIO_get_callback_arg BIO_get_callback_ex BIO_get_data BIO_get_ex_data BIO_get_host_ip BIO_get_init BIO_get_line BIO_get_new_index BIO_get_port BIO_get_retry_BIO BIO_get_retry_reason BIO_get_shutdown BIO_gethostbyname BIO_gets BIO_hex_string BIO_indent BIO_int_ctrl BIO_listen BIO_lookup BIO_lookup_ex BIO_meth_free BIO_meth_get_callback_ctrl BIO_meth_get_create BIO_meth_get_ctrl BIO_meth_get_destroy BIO_meth_get_gets BIO_meth_get_puts BIO_meth_get_read BIO_meth_get_read_ex BIO_meth_get_write BIO_meth_get_write_ex BIO_meth_new BIO_meth_set_callback_ctrl BIO_meth_set_create BIO_meth_set_ctrl BIO_meth_set_destroy BIO_meth_set_gets BIO_meth_set_puts BIO_meth_set_read BIO_meth_set_read_ex BIO_meth_set_write BIO_meth_set_write_ex BIO_method_name BIO_method_type BIO_new BIO_new_CMS BIO_new_NDEF BIO_new_PKCS7 BIO_new_accept BIO_new_bio_pair BIO_new_connect BIO_new_dgram BIO_new_ex BIO_new_fd BIO_new_file BIO_new_fp BIO_new_from_core_bio BIO_new_mem_buf BIO_new_socket BIO_next BIO_nread BIO_nread0 BIO_number_read BIO_number_written BIO_nwrite BIO_nwrite0 BIO_parse_hostserv BIO_pop BIO_printf BIO_ptr_ctrl BIO_push BIO_puts BIO_read BIO_read_ex BIO_s_accept BIO_s_bio BIO_s_connect BIO_s_core BIO_s_datagram BIO_s_fd BIO_s_file BIO_s_log BIO_s_mem BIO_s_null BIO_s_secmem BIO_s_socket BIO_set_callback BIO_set_callback_arg BIO_set_callback_ex BIO_set_cipher BIO_set_data BIO_set_ex_data BIO_set_flags BIO_set_init BIO_set_next BIO_set_retry_reason BIO_set_shutdown BIO_set_tcp_ndelay BIO_snprintf BIO_sock_error BIO_sock_info BIO_sock_init BIO_sock_non_fatal_error BIO_sock_should_retry BIO_socket BIO_socket_ioctl BIO_socket_nbio BIO_socket_wait BIO_test_flags BIO_up_ref BIO_vfree BIO_vprintf BIO_vsnprintf BIO_wait BIO_write BIO_write_ex BN_BLINDING_convert BN_BLINDING_convert_ex BN_BLINDING_create_param BN_BLINDING_free BN_BLINDING_get_flags BN_BLINDING_invert BN_BLINDING_invert_ex BN_BLINDING_is_current_thread BN_BLINDING_lock BN_BLINDING_new BN_BLINDING_set_current_thread BN_BLINDING_set_flags BN_BLINDING_unlock BN_BLINDING_update BN_CTX_end BN_CTX_free BN_CTX_get BN_CTX_new BN_CTX_new_ex BN_CTX_secure_new BN_CTX_secure_new_ex BN_CTX_start BN_GENCB_call BN_GENCB_free BN_GENCB_get_arg BN_GENCB_new BN_GENCB_set BN_GENCB_set_old BN_GF2m_add BN_GF2m_arr2poly BN_GF2m_mod BN_GF2m_mod_arr BN_GF2m_mod_div BN_GF2m_mod_div_arr BN_GF2m_mod_exp BN_GF2m_mod_exp_arr BN_GF2m_mod_inv BN_GF2m_mod_inv_arr BN_GF2m_mod_mul BN_GF2m_mod_mul_arr BN_GF2m_mod_solve_quad BN_GF2m_mod_solve_quad_arr BN_GF2m_mod_sqr BN_GF2m_mod_sqr_arr BN_GF2m_mod_sqrt BN_GF2m_mod_sqrt_arr BN_GF2m_poly2arr BN_MONT_CTX_copy BN_MONT_CTX_free BN_MONT_CTX_new BN_MONT_CTX_set BN_MONT_CTX_set_locked BN_RECP_CTX_free BN_RECP_CTX_new BN_RECP_CTX_set BN_X931_derive_prime_ex BN_X931_generate_Xpq BN_X931_generate_prime_ex BN_abs_is_word BN_add BN_add_word BN_are_coprime BN_asc2bn BN_bin2bn BN_bn2bin BN_bn2binpad BN_bn2dec BN_bn2hex BN_bn2lebinpad BN_bn2mpi BN_bn2nativepad BN_bntest_rand BN_check_prime BN_clear BN_clear_bit BN_clear_free BN_cmp BN_consttime_swap BN_copy BN_dec2bn BN_div BN_div_recp BN_div_word BN_dup BN_exp BN_free BN_from_montgomery BN_gcd BN_generate_dsa_nonce BN_generate_prime BN_generate_prime_ex BN_generate_prime_ex2 BN_get0_nist_prime_192 BN_get0_nist_prime_224 BN_get0_nist_prime_256 BN_get0_nist_prime_384 BN_get0_nist_prime_521 BN_get_flags BN_get_params BN_get_rfc2409_prime_1024 BN_get_rfc2409_prime_768 BN_get_rfc3526_prime_1536 BN_get_rfc3526_prime_2048 BN_get_rfc3526_prime_3072 BN_get_rfc3526_prime_4096 BN_get_rfc3526_prime_6144 BN_get_rfc3526_prime_8192 BN_get_word BN_hex2bn BN_is_bit_set BN_is_negative BN_is_odd BN_is_one BN_is_prime BN_is_prime_ex BN_is_prime_fasttest BN_is_prime_fasttest_ex BN_is_word BN_is_zero BN_kronecker BN_lebin2bn BN_lshift BN_lshift1 BN_mask_bits BN_mod_add BN_mod_add_quick BN_mod_exp BN_mod_exp2_mont BN_mod_exp_mont BN_mod_exp_mont_consttime BN_mod_exp_mont_consttime_x2 BN_mod_exp_mont_word BN_mod_exp_recp BN_mod_exp_simple BN_mod_inverse BN_mod_lshift BN_mod_lshift1 BN_mod_lshift1_quick BN_mod_lshift_quick BN_mod_mul BN_mod_mul_montgomery BN_mod_mul_reciprocal BN_mod_sqr BN_mod_sqrt BN_mod_sub BN_mod_sub_quick BN_mod_word BN_mpi2bn BN_mul BN_mul_word BN_native2bn BN_new BN_nist_mod_192 BN_nist_mod_224 BN_nist_mod_256 BN_nist_mod_384 BN_nist_mod_521 BN_nist_mod_func BN_nnmod BN_num_bits BN_num_bits_word BN_options BN_print BN_print_fp BN_priv_rand BN_priv_rand_ex BN_priv_rand_range BN_priv_rand_range_ex BN_pseudo_rand BN_pseudo_rand_range BN_rand BN_rand_ex BN_rand_range BN_rand_range_ex BN_reciprocal BN_rshift BN_rshift1 BN_secure_new BN_security_bits BN_set_bit BN_set_flags BN_set_negative BN_set_params BN_set_word BN_sqr BN_sub BN_sub_word BN_swap BN_to_ASN1_ENUMERATED BN_to_ASN1_INTEGER BN_to_montgomery BN_uadd BN_ucmp BN_usub BN_value_one BN_with_flags BN_zero_ex BUF_MEM_free BUF_MEM_grow BUF_MEM_grow_clean BUF_MEM_new BUF_MEM_new_ex BUF_reverse CAST_cbc_encrypt CAST_cfb64_encrypt CAST_decrypt CAST_ecb_encrypt CAST_encrypt CAST_ofb64_encrypt CAST_set_key CBIGNUM_it CERTIFICATEPOLICIES_free CERTIFICATEPOLICIES_it CERTIFICATEPOLICIES_new CMAC_CTX_cleanup CMAC_CTX_copy CMAC_CTX_free CMAC_CTX_get0_cipher_ctx CMAC_CTX_new CMAC_Final CMAC_Init CMAC_Update CMAC_resume CMS_AuthEnvelopedData_create CMS_AuthEnvelopedData_create_ex CMS_ContentInfo_free CMS_ContentInfo_it CMS_ContentInfo_new CMS_ContentInfo_new_ex CMS_ContentInfo_print_ctx CMS_EncryptedData_decrypt CMS_EncryptedData_encrypt CMS_EncryptedData_encrypt_ex CMS_EncryptedData_set1_key CMS_EnvelopedData_create CMS_EnvelopedData_create_ex CMS_ReceiptRequest_create0 CMS_ReceiptRequest_create0_ex CMS_ReceiptRequest_free CMS_ReceiptRequest_get0_values CMS_ReceiptRequest_it CMS_ReceiptRequest_new CMS_RecipientEncryptedKey_cert_cmp CMS_RecipientEncryptedKey_get0_id CMS_RecipientInfo_decrypt CMS_RecipientInfo_encrypt CMS_RecipientInfo_get0_pkey_ctx CMS_RecipientInfo_kari_decrypt CMS_RecipientInfo_kari_get0_alg CMS_RecipientInfo_kari_get0_ctx CMS_RecipientInfo_kari_get0_orig_id CMS_RecipientInfo_kari_get0_reks CMS_RecipientInfo_kari_orig_id_cmp CMS_RecipientInfo_kari_set0_pkey CMS_RecipientInfo_kari_set0_pkey_and_peer CMS_RecipientInfo_kekri_get0_id CMS_RecipientInfo_kekri_id_cmp CMS_RecipientInfo_ktri_cert_cmp CMS_RecipientInfo_ktri_get0_algs CMS_RecipientInfo_ktri_get0_signer_id CMS_RecipientInfo_set0_key CMS_RecipientInfo_set0_password CMS_RecipientInfo_set0_pkey CMS_RecipientInfo_type CMS_SharedInfo_encode CMS_SignedData_init CMS_SignerInfo_cert_cmp CMS_SignerInfo_get0_algs CMS_SignerInfo_get0_md_ctx CMS_SignerInfo_get0_pkey_ctx CMS_SignerInfo_get0_signature CMS_SignerInfo_get0_signer_id CMS_SignerInfo_set1_signer_cert CMS_SignerInfo_sign CMS_SignerInfo_verify CMS_SignerInfo_verify_content CMS_add0_CertificateChoices CMS_add0_RevocationInfoChoice CMS_add0_cert CMS_add0_crl CMS_add0_recipient_key CMS_add0_recipient_password CMS_add1_ReceiptRequest CMS_add1_cert CMS_add1_crl CMS_add1_recipient CMS_add1_recipient_cert CMS_add1_signer CMS_add_simple_smimecap CMS_add_smimecap CMS_add_standard_smimecap CMS_compress CMS_data CMS_dataFinal CMS_dataInit CMS_data_create CMS_data_create_ex CMS_decrypt CMS_decrypt_set1_key CMS_decrypt_set1_password CMS_decrypt_set1_pkey CMS_decrypt_set1_pkey_and_peer CMS_digest_create CMS_digest_create_ex CMS_digest_verify CMS_encrypt CMS_encrypt_ex CMS_final CMS_get0_RecipientInfos CMS_get0_SignerInfos CMS_get0_content CMS_get0_eContentType CMS_get0_signers CMS_get0_type CMS_get1_ReceiptRequest CMS_get1_certs CMS_get1_crls CMS_is_detached CMS_set1_eContentType CMS_set1_signers_certs CMS_set_detached CMS_sign CMS_sign_ex CMS_sign_receipt CMS_signed_add1_attr CMS_signed_add1_attr_by_NID CMS_signed_add1_attr_by_OBJ CMS_signed_add1_attr_by_txt CMS_signed_delete_attr CMS_signed_get0_data_by_OBJ CMS_signed_get_attr CMS_signed_get_attr_by_NID CMS_signed_get_attr_by_OBJ CMS_signed_get_attr_count CMS_stream CMS_uncompress CMS_unsigned_add1_attr CMS_unsigned_add1_attr_by_NID CMS_unsigned_add1_attr_by_OBJ CMS_unsigned_add1_attr_by_txt CMS_unsigned_delete_attr CMS_unsigned_get0_data_by_OBJ CMS_unsigned_get_attr CMS_unsigned_get_attr_by_NID CMS_unsigned_get_attr_by_OBJ CMS_unsigned_get_attr_count CMS_verify CMS_verify_receipt COMP_CTX_free COMP_CTX_get_method COMP_CTX_get_type COMP_CTX_new COMP_compress_block COMP_expand_block COMP_get_name COMP_get_type COMP_zlib CONF_dump_bio CONF_dump_fp CONF_free CONF_get1_default_config_file CONF_get_number CONF_get_section CONF_get_string CONF_imodule_get_flags CONF_imodule_get_module CONF_imodule_get_name CONF_imodule_get_usr_data CONF_imodule_get_value CONF_imodule_set_flags CONF_imodule_set_usr_data CONF_load CONF_load_bio CONF_load_fp CONF_module_add CONF_module_get_usr_data CONF_module_set_usr_data CONF_modules_finish CONF_modules_load CONF_modules_load_file CONF_modules_load_file_ex CONF_modules_unload CONF_parse_list CONF_set_default_method CONF_set_nconf CRL_DIST_POINTS_free CRL_DIST_POINTS_it CRL_DIST_POINTS_new CRYPTO_128_unwrap CRYPTO_128_unwrap_pad CRYPTO_128_wrap CRYPTO_128_wrap_pad CRYPTO_THREAD_cleanup_local CRYPTO_THREAD_compare_id CRYPTO_THREAD_get_current_id CRYPTO_THREAD_get_local CRYPTO_THREAD_init_local CRYPTO_THREAD_lock_free CRYPTO_THREAD_lock_new CRYPTO_THREAD_read_lock CRYPTO_THREAD_run_once CRYPTO_THREAD_set_local CRYPTO_THREAD_unlock CRYPTO_THREAD_write_lock CRYPTO_alloc_ex_data CRYPTO_atomic_add CRYPTO_atomic_load CRYPTO_atomic_or CRYPTO_cbc128_decrypt CRYPTO_cbc128_encrypt CRYPTO_ccm128_aad CRYPTO_ccm128_decrypt CRYPTO_ccm128_decrypt_ccm64 CRYPTO_ccm128_encrypt CRYPTO_ccm128_encrypt_ccm64 CRYPTO_ccm128_init CRYPTO_ccm128_setiv CRYPTO_ccm128_tag CRYPTO_cfb128_1_encrypt CRYPTO_cfb128_8_encrypt CRYPTO_cfb128_encrypt CRYPTO_clear_free CRYPTO_clear_realloc CRYPTO_ctr128_encrypt CRYPTO_ctr128_encrypt_ctr32 CRYPTO_cts128_decrypt CRYPTO_cts128_decrypt_block CRYPTO_cts128_encrypt CRYPTO_cts128_encrypt_block CRYPTO_dup_ex_data CRYPTO_free CRYPTO_free_ex_data CRYPTO_free_ex_index CRYPTO_gcm128_aad CRYPTO_gcm128_decrypt CRYPTO_gcm128_decrypt_ctr32 CRYPTO_gcm128_encrypt CRYPTO_gcm128_encrypt_ctr32 CRYPTO_gcm128_finish CRYPTO_gcm128_init CRYPTO_gcm128_new CRYPTO_gcm128_release CRYPTO_gcm128_setiv CRYPTO_gcm128_tag CRYPTO_get_ex_data CRYPTO_get_ex_new_index CRYPTO_get_mem_functions CRYPTO_malloc CRYPTO_memcmp CRYPTO_memdup CRYPTO_new_ex_data CRYPTO_nistcts128_decrypt CRYPTO_nistcts128_decrypt_block CRYPTO_nistcts128_encrypt CRYPTO_nistcts128_encrypt_block CRYPTO_ocb128_aad CRYPTO_ocb128_cleanup CRYPTO_ocb128_copy_ctx CRYPTO_ocb128_decrypt CRYPTO_ocb128_encrypt CRYPTO_ocb128_finish CRYPTO_ocb128_init CRYPTO_ocb128_new CRYPTO_ocb128_setiv CRYPTO_ocb128_tag CRYPTO_ofb128_encrypt CRYPTO_realloc CRYPTO_secure_actual_size CRYPTO_secure_allocated CRYPTO_secure_clear_free CRYPTO_secure_free CRYPTO_secure_malloc CRYPTO_secure_malloc_done CRYPTO_secure_malloc_init CRYPTO_secure_malloc_initialized CRYPTO_secure_used CRYPTO_secure_zalloc CRYPTO_set_ex_data CRYPTO_set_mem_functions CRYPTO_strdup CRYPTO_strndup CRYPTO_xts128_encrypt CRYPTO_zalloc CTLOG_STORE_free CTLOG_STORE_get0_log_by_id CTLOG_STORE_load_default_file CTLOG_STORE_load_file CTLOG_STORE_new CTLOG_STORE_new_ex CTLOG_free CTLOG_get0_log_id CTLOG_get0_name CTLOG_get0_public_key CTLOG_new CTLOG_new_ex CTLOG_new_from_base64 CTLOG_new_from_base64_ex CT_POLICY_EVAL_CTX_free CT_POLICY_EVAL_CTX_get0_cert CT_POLICY_EVAL_CTX_get0_issuer CT_POLICY_EVAL_CTX_get0_log_store CT_POLICY_EVAL_CTX_get_time CT_POLICY_EVAL_CTX_new CT_POLICY_EVAL_CTX_new_ex CT_POLICY_EVAL_CTX_set1_cert CT_POLICY_EVAL_CTX_set1_issuer CT_POLICY_EVAL_CTX_set_shared_CTLOG_STORE CT_POLICY_EVAL_CTX_set_time Camellia_cbc_encrypt Camellia_cfb128_encrypt Camellia_cfb1_encrypt Camellia_cfb8_encrypt Camellia_ctr128_encrypt Camellia_decrypt Camellia_ecb_encrypt Camellia_encrypt Camellia_ofb128_encrypt Camellia_set_key DES_cbc_cksum DES_cbc_encrypt DES_cfb64_encrypt DES_cfb_encrypt DES_check_key_parity DES_crypt DES_decrypt3 DES_ecb3_encrypt DES_ecb_encrypt DES_ede3_cbc_encrypt DES_ede3_cfb64_encrypt DES_ede3_cfb_encrypt DES_ede3_ofb64_encrypt DES_encrypt1 DES_encrypt2 DES_encrypt3 DES_fcrypt DES_is_weak_key DES_key_sched DES_ncbc_encrypt DES_ofb64_encrypt DES_ofb_encrypt DES_options DES_pcbc_encrypt DES_quad_cksum DES_random_key DES_set_key DES_set_key_checked DES_set_key_unchecked DES_set_odd_parity DES_string_to_2keys DES_string_to_key DES_xcbc_encrypt DH_KDF_X9_42 DH_OpenSSL DH_bits DH_check DH_check_ex DH_check_params DH_check_params_ex DH_check_pub_key DH_check_pub_key_ex DH_clear_flags DH_compute_key DH_compute_key_padded DH_free DH_generate_key DH_generate_parameters DH_generate_parameters_ex DH_get0_engine DH_get0_g DH_get0_key DH_get0_p DH_get0_pqg DH_get0_priv_key DH_get0_pub_key DH_get0_q DH_get_1024_160 DH_get_2048_224 DH_get_2048_256 DH_get_default_method DH_get_ex_data DH_get_length DH_get_nid DH_meth_dup DH_meth_free DH_meth_get0_app_data DH_meth_get0_name DH_meth_get_bn_mod_exp DH_meth_get_compute_key DH_meth_get_finish DH_meth_get_flags DH_meth_get_generate_key DH_meth_get_generate_params DH_meth_get_init DH_meth_new DH_meth_set0_app_data DH_meth_set1_name DH_meth_set_bn_mod_exp DH_meth_set_compute_key DH_meth_set_finish DH_meth_set_flags DH_meth_set_generate_key DH_meth_set_generate_params DH_meth_set_init DH_new DH_new_by_nid DH_new_method DH_security_bits DH_set0_key DH_set0_pqg DH_set_default_method DH_set_ex_data DH_set_flags DH_set_length DH_set_method DH_size DH_test_flags DH_up_ref DHparams_dup DHparams_it DHparams_print DHparams_print_fp DIRECTORYSTRING_free DIRECTORYSTRING_it DIRECTORYSTRING_new DISPLAYTEXT_free DISPLAYTEXT_it DISPLAYTEXT_new DIST_POINT_NAME_free DIST_POINT_NAME_it DIST_POINT_NAME_new DIST_POINT_free DIST_POINT_it DIST_POINT_new DIST_POINT_set_dpname DSA_OpenSSL DSA_SIG_free DSA_SIG_get0 DSA_SIG_new DSA_SIG_set0 DSA_bits DSA_clear_flags DSA_do_sign DSA_do_verify DSA_dup_DH DSA_free DSA_generate_key DSA_generate_parameters DSA_generate_parameters_ex DSA_get0_engine DSA_get0_g DSA_get0_key DSA_get0_p DSA_get0_pqg DSA_get0_priv_key DSA_get0_pub_key DSA_get0_q DSA_get_default_method DSA_get_ex_data DSA_get_method DSA_meth_dup DSA_meth_free DSA_meth_get0_app_data DSA_meth_get0_name DSA_meth_get_bn_mod_exp DSA_meth_get_finish DSA_meth_get_flags DSA_meth_get_init DSA_meth_get_keygen DSA_meth_get_mod_exp DSA_meth_get_paramgen DSA_meth_get_sign DSA_meth_get_sign_setup DSA_meth_get_verify DSA_meth_new DSA_meth_set0_app_data DSA_meth_set1_name DSA_meth_set_bn_mod_exp DSA_meth_set_finish DSA_meth_set_flags DSA_meth_set_init DSA_meth_set_keygen DSA_meth_set_mod_exp DSA_meth_set_paramgen DSA_meth_set_sign DSA_meth_set_sign_setup DSA_meth_set_verify DSA_new DSA_new_method DSA_print DSA_print_fp DSA_security_bits DSA_set0_key DSA_set0_pqg DSA_set_default_method DSA_set_ex_data DSA_set_flags DSA_set_method DSA_sign DSA_sign_setup DSA_size DSA_test_flags DSA_up_ref DSA_verify DSAparams_dup DSAparams_print DSAparams_print_fp DSO_METHOD_openssl DSO_bind_func DSO_convert_filename DSO_ctrl DSO_dsobyaddr DSO_flags DSO_free DSO_get_filename DSO_global_lookup DSO_load DSO_merge DSO_new DSO_pathbyaddr DSO_set_filename DSO_up_ref ECDH_KDF_X9_62 ECDH_compute_key ECDSA_SIG_free ECDSA_SIG_get0 ECDSA_SIG_get0_r ECDSA_SIG_get0_s ECDSA_SIG_new ECDSA_SIG_set0 ECDSA_do_sign ECDSA_do_sign_ex ECDSA_do_verify ECDSA_sign ECDSA_sign_ex ECDSA_sign_setup ECDSA_size ECDSA_verify ECPARAMETERS_free ECPARAMETERS_it ECPARAMETERS_new ECPKPARAMETERS_free ECPKPARAMETERS_it ECPKPARAMETERS_new ECPKParameters_print ECPKParameters_print_fp ECParameters_print ECParameters_print_fp EC_GF2m_simple_method EC_GFp_mont_method EC_GFp_nist_method EC_GFp_simple_method EC_GROUP_check EC_GROUP_check_discriminant EC_GROUP_check_named_curve EC_GROUP_clear_free EC_GROUP_cmp EC_GROUP_copy EC_GROUP_dup EC_GROUP_free EC_GROUP_get0_cofactor EC_GROUP_get0_field EC_GROUP_get0_generator EC_GROUP_get0_order EC_GROUP_get0_seed EC_GROUP_get_asn1_flag EC_GROUP_get_basis_type EC_GROUP_get_cofactor EC_GROUP_get_curve EC_GROUP_get_curve_GF2m EC_GROUP_get_curve_GFp EC_GROUP_get_curve_name EC_GROUP_get_degree EC_GROUP_get_ecparameters EC_GROUP_get_ecpkparameters EC_GROUP_get_field_type EC_GROUP_get_mont_data EC_GROUP_get_order EC_GROUP_get_pentanomial_basis EC_GROUP_get_point_conversion_form EC_GROUP_get_seed_len EC_GROUP_get_trinomial_basis EC_GROUP_have_precompute_mult EC_GROUP_method_of EC_GROUP_new EC_GROUP_new_by_curve_name EC_GROUP_new_by_curve_name_ex EC_GROUP_new_curve_GF2m EC_GROUP_new_curve_GFp EC_GROUP_new_from_ecparameters EC_GROUP_new_from_ecpkparameters EC_GROUP_new_from_params EC_GROUP_order_bits EC_GROUP_precompute_mult EC_GROUP_set_asn1_flag EC_GROUP_set_curve EC_GROUP_set_curve_GF2m EC_GROUP_set_curve_GFp EC_GROUP_set_curve_name EC_GROUP_set_generator EC_GROUP_set_point_conversion_form EC_GROUP_set_seed EC_KEY_METHOD_free EC_KEY_METHOD_get_compute_key EC_KEY_METHOD_get_init EC_KEY_METHOD_get_keygen EC_KEY_METHOD_get_sign EC_KEY_METHOD_get_verify EC_KEY_METHOD_new EC_KEY_METHOD_set_compute_key EC_KEY_METHOD_set_init EC_KEY_METHOD_set_keygen EC_KEY_METHOD_set_sign EC_KEY_METHOD_set_verify EC_KEY_OpenSSL EC_KEY_can_sign EC_KEY_check_key EC_KEY_clear_flags EC_KEY_copy EC_KEY_decoded_from_explicit_params EC_KEY_dup EC_KEY_free EC_KEY_generate_key EC_KEY_get0_engine EC_KEY_get0_group EC_KEY_get0_private_key EC_KEY_get0_public_key EC_KEY_get_conv_form EC_KEY_get_default_method EC_KEY_get_enc_flags EC_KEY_get_ex_data EC_KEY_get_flags EC_KEY_get_method EC_KEY_key2buf EC_KEY_new EC_KEY_new_by_curve_name EC_KEY_new_by_curve_name_ex EC_KEY_new_ex EC_KEY_new_method EC_KEY_oct2key EC_KEY_oct2priv EC_KEY_precompute_mult EC_KEY_print EC_KEY_print_fp EC_KEY_priv2buf EC_KEY_priv2oct EC_KEY_set_asn1_flag EC_KEY_set_conv_form EC_KEY_set_default_method EC_KEY_set_enc_flags EC_KEY_set_ex_data EC_KEY_set_flags EC_KEY_set_group EC_KEY_set_method EC_KEY_set_private_key EC_KEY_set_public_key EC_KEY_set_public_key_affine_coordinates EC_KEY_up_ref EC_METHOD_get_field_type EC_POINT_add EC_POINT_bn2point EC_POINT_clear_free EC_POINT_cmp EC_POINT_copy EC_POINT_dbl EC_POINT_dup EC_POINT_free EC_POINT_get_Jprojective_coordinates_GFp EC_POINT_get_affine_coordinates EC_POINT_get_affine_coordinates_GF2m EC_POINT_get_affine_coordinates_GFp EC_POINT_hex2point EC_POINT_invert EC_POINT_is_at_infinity EC_POINT_is_on_curve EC_POINT_make_affine EC_POINT_method_of EC_POINT_mul EC_POINT_new EC_POINT_oct2point EC_POINT_point2bn EC_POINT_point2buf EC_POINT_point2hex EC_POINT_point2oct EC_POINT_set_Jprojective_coordinates_GFp EC_POINT_set_affine_coordinates EC_POINT_set_affine_coordinates_GF2m EC_POINT_set_affine_coordinates_GFp EC_POINT_set_compressed_coordinates EC_POINT_set_compressed_coordinates_GF2m EC_POINT_set_compressed_coordinates_GFp EC_POINT_set_to_infinity EC_POINTs_make_affine EC_POINTs_mul EC_curve_nid2nist EC_curve_nist2nid EC_get_builtin_curves EDIPARTYNAME_free EDIPARTYNAME_it EDIPARTYNAME_new ENGINE_add ENGINE_add_conf_module ENGINE_by_id ENGINE_cmd_is_executable ENGINE_ctrl ENGINE_ctrl_cmd ENGINE_ctrl_cmd_string ENGINE_finish ENGINE_free ENGINE_get_DH ENGINE_get_DSA ENGINE_get_EC ENGINE_get_RAND ENGINE_get_RSA ENGINE_get_cipher ENGINE_get_cipher_engine ENGINE_get_ciphers ENGINE_get_cmd_defns ENGINE_get_ctrl_function ENGINE_get_default_DH ENGINE_get_default_DSA ENGINE_get_default_EC ENGINE_get_default_RAND ENGINE_get_default_RSA ENGINE_get_destroy_function ENGINE_get_digest ENGINE_get_digest_engine ENGINE_get_digests ENGINE_get_ex_data ENGINE_get_finish_function ENGINE_get_first ENGINE_get_flags ENGINE_get_id ENGINE_get_init_function ENGINE_get_last ENGINE_get_load_privkey_function ENGINE_get_load_pubkey_function ENGINE_get_name ENGINE_get_next ENGINE_get_pkey_asn1_meth ENGINE_get_pkey_asn1_meth_engine ENGINE_get_pkey_asn1_meth_str ENGINE_get_pkey_asn1_meths ENGINE_get_pkey_meth ENGINE_get_pkey_meth_engine ENGINE_get_pkey_meths ENGINE_get_prev ENGINE_get_ssl_client_cert_function ENGINE_get_static_state ENGINE_get_table_flags ENGINE_init ENGINE_load_builtin_engines ENGINE_load_private_key ENGINE_load_public_key ENGINE_load_ssl_client_cert ENGINE_new ENGINE_pkey_asn1_find_str ENGINE_register_DH ENGINE_register_DSA ENGINE_register_EC ENGINE_register_RAND ENGINE_register_RSA ENGINE_register_all_DH ENGINE_register_all_DSA ENGINE_register_all_EC ENGINE_register_all_RAND ENGINE_register_all_RSA ENGINE_register_all_ciphers ENGINE_register_all_complete ENGINE_register_all_digests ENGINE_register_all_pkey_asn1_meths ENGINE_register_all_pkey_meths ENGINE_register_ciphers ENGINE_register_complete ENGINE_register_digests ENGINE_register_pkey_asn1_meths ENGINE_register_pkey_meths ENGINE_remove ENGINE_set_DH ENGINE_set_DSA ENGINE_set_EC ENGINE_set_RAND ENGINE_set_RSA ENGINE_set_ciphers ENGINE_set_cmd_defns ENGINE_set_ctrl_function ENGINE_set_default ENGINE_set_default_DH ENGINE_set_default_DSA ENGINE_set_default_EC ENGINE_set_default_RAND ENGINE_set_default_RSA ENGINE_set_default_ciphers ENGINE_set_default_digests ENGINE_set_default_pkey_asn1_meths ENGINE_set_default_pkey_meths ENGINE_set_default_string ENGINE_set_destroy_function ENGINE_set_digests ENGINE_set_ex_data ENGINE_set_finish_function ENGINE_set_flags ENGINE_set_id ENGINE_set_init_function ENGINE_set_load_privkey_function ENGINE_set_load_pubkey_function ENGINE_set_load_ssl_client_cert_function ENGINE_set_name ENGINE_set_pkey_asn1_meths ENGINE_set_pkey_meths ENGINE_set_table_flags ENGINE_unregister_DH ENGINE_unregister_DSA ENGINE_unregister_EC ENGINE_unregister_RAND ENGINE_unregister_RSA ENGINE_unregister_ciphers ENGINE_unregister_digests ENGINE_unregister_pkey_asn1_meths ENGINE_unregister_pkey_meths ENGINE_up_ref ERR_add_error_data ERR_add_error_mem_bio ERR_add_error_txt ERR_add_error_vdata ERR_clear_error ERR_clear_last_mark ERR_error_string ERR_error_string_n ERR_func_error_string ERR_get_error ERR_get_error_all ERR_get_error_line ERR_get_error_line_data ERR_get_next_error_library ERR_get_state ERR_lib_error_string ERR_load_ASN1_strings ERR_load_ASYNC_strings ERR_load_BIO_strings ERR_load_BN_strings ERR_load_BUF_strings ERR_load_CMS_strings ERR_load_COMP_strings ERR_load_CONF_strings ERR_load_CRYPTO_strings ERR_load_CT_strings ERR_load_DH_strings ERR_load_DSA_strings ERR_load_EC_strings ERR_load_ENGINE_strings ERR_load_ERR_strings ERR_load_EVP_strings ERR_load_KDF_strings ERR_load_OBJ_strings ERR_load_OCSP_strings ERR_load_OSSL_STORE_strings ERR_load_PEM_strings ERR_load_PKCS12_strings ERR_load_PKCS7_strings ERR_load_RAND_strings ERR_load_RSA_strings ERR_load_TS_strings ERR_load_UI_strings ERR_load_X509V3_strings ERR_load_X509_strings ERR_load_strings ERR_load_strings_const ERR_new ERR_peek_error ERR_peek_error_all ERR_peek_error_data ERR_peek_error_func ERR_peek_error_line ERR_peek_error_line_data ERR_peek_last_error ERR_peek_last_error_all ERR_peek_last_error_data ERR_peek_last_error_func ERR_peek_last_error_line ERR_peek_last_error_line_data ERR_pop_to_mark ERR_print_errors ERR_print_errors_cb ERR_print_errors_fp ERR_reason_error_string ERR_remove_state ERR_remove_thread_state ERR_set_debug ERR_set_error ERR_set_error_data ERR_set_mark ERR_unload_strings ERR_vset_error ESS_CERT_ID_V2_dup ESS_CERT_ID_V2_free ESS_CERT_ID_V2_new ESS_CERT_ID_dup ESS_CERT_ID_free ESS_CERT_ID_new ESS_ISSUER_SERIAL_dup ESS_ISSUER_SERIAL_free ESS_ISSUER_SERIAL_new ESS_SIGNING_CERT_V2_dup ESS_SIGNING_CERT_V2_free ESS_SIGNING_CERT_V2_it ESS_SIGNING_CERT_V2_new ESS_SIGNING_CERT_dup ESS_SIGNING_CERT_free ESS_SIGNING_CERT_it ESS_SIGNING_CERT_new EVP_ASYM_CIPHER_do_all_provided EVP_ASYM_CIPHER_fetch EVP_ASYM_CIPHER_free EVP_ASYM_CIPHER_get0_description EVP_ASYM_CIPHER_get0_name EVP_ASYM_CIPHER_get0_provider EVP_ASYM_CIPHER_gettable_ctx_params EVP_ASYM_CIPHER_is_a EVP_ASYM_CIPHER_names_do_all EVP_ASYM_CIPHER_settable_ctx_params EVP_ASYM_CIPHER_up_ref EVP_BytesToKey EVP_CIPHER_CTX_buf_noconst EVP_CIPHER_CTX_cipher EVP_CIPHER_CTX_clear_flags EVP_CIPHER_CTX_copy EVP_CIPHER_CTX_ctrl EVP_CIPHER_CTX_dup EVP_CIPHER_CTX_free EVP_CIPHER_CTX_get0_cipher EVP_CIPHER_CTX_get1_cipher EVP_CIPHER_CTX_get_app_data EVP_CIPHER_CTX_get_block_size EVP_CIPHER_CTX_get_cipher_data EVP_CIPHER_CTX_get_iv_length EVP_CIPHER_CTX_get_key_length EVP_CIPHER_CTX_get_nid EVP_CIPHER_CTX_get_num EVP_CIPHER_CTX_get_original_iv EVP_CIPHER_CTX_get_params EVP_CIPHER_CTX_get_tag_length EVP_CIPHER_CTX_get_updated_iv EVP_CIPHER_CTX_gettable_params EVP_CIPHER_CTX_is_encrypting EVP_CIPHER_CTX_iv EVP_CIPHER_CTX_iv_noconst EVP_CIPHER_CTX_new EVP_CIPHER_CTX_original_iv EVP_CIPHER_CTX_rand_key EVP_CIPHER_CTX_reset EVP_CIPHER_CTX_set_app_data EVP_CIPHER_CTX_set_cipher_data EVP_CIPHER_CTX_set_flags EVP_CIPHER_CTX_set_key_length EVP_CIPHER_CTX_set_num EVP_CIPHER_CTX_set_padding EVP_CIPHER_CTX_set_params EVP_CIPHER_CTX_settable_params EVP_CIPHER_CTX_test_flags EVP_CIPHER_asn1_to_param EVP_CIPHER_do_all EVP_CIPHER_do_all_provided EVP_CIPHER_do_all_sorted EVP_CIPHER_fetch EVP_CIPHER_free EVP_CIPHER_get0_description EVP_CIPHER_get0_name EVP_CIPHER_get0_provider EVP_CIPHER_get_asn1_iv EVP_CIPHER_get_block_size EVP_CIPHER_get_flags EVP_CIPHER_get_iv_length EVP_CIPHER_get_key_length EVP_CIPHER_get_mode EVP_CIPHER_get_nid EVP_CIPHER_get_params EVP_CIPHER_get_type EVP_CIPHER_gettable_ctx_params EVP_CIPHER_gettable_params EVP_CIPHER_impl_ctx_size EVP_CIPHER_is_a EVP_CIPHER_meth_dup EVP_CIPHER_meth_free EVP_CIPHER_meth_get_cleanup EVP_CIPHER_meth_get_ctrl EVP_CIPHER_meth_get_do_cipher EVP_CIPHER_meth_get_get_asn1_params EVP_CIPHER_meth_get_init EVP_CIPHER_meth_get_set_asn1_params EVP_CIPHER_meth_new EVP_CIPHER_meth_set_cleanup EVP_CIPHER_meth_set_ctrl EVP_CIPHER_meth_set_do_cipher EVP_CIPHER_meth_set_flags EVP_CIPHER_meth_set_get_asn1_params EVP_CIPHER_meth_set_impl_ctx_size EVP_CIPHER_meth_set_init EVP_CIPHER_meth_set_iv_length EVP_CIPHER_meth_set_set_asn1_params EVP_CIPHER_names_do_all EVP_CIPHER_param_to_asn1 EVP_CIPHER_set_asn1_iv EVP_CIPHER_settable_ctx_params EVP_CIPHER_up_ref EVP_Cipher EVP_CipherFinal EVP_CipherFinal_ex EVP_CipherInit EVP_CipherInit_ex EVP_CipherInit_ex2 EVP_CipherUpdate EVP_DecodeBlock EVP_DecodeFinal EVP_DecodeInit EVP_DecodeUpdate EVP_DecryptFinal EVP_DecryptFinal_ex EVP_DecryptInit EVP_DecryptInit_ex EVP_DecryptInit_ex2 EVP_DecryptUpdate EVP_Digest EVP_DigestFinal EVP_DigestFinalXOF EVP_DigestFinal_ex EVP_DigestInit EVP_DigestInit_ex EVP_DigestInit_ex2 EVP_DigestSign EVP_DigestSignFinal EVP_DigestSignInit EVP_DigestSignInit_ex EVP_DigestSignUpdate EVP_DigestUpdate EVP_DigestVerify EVP_DigestVerifyFinal EVP_DigestVerifyInit EVP_DigestVerifyInit_ex EVP_DigestVerifyUpdate EVP_ENCODE_CTX_copy EVP_ENCODE_CTX_free EVP_ENCODE_CTX_new EVP_ENCODE_CTX_num EVP_EncodeBlock EVP_EncodeFinal EVP_EncodeInit EVP_EncodeUpdate EVP_EncryptFinal EVP_EncryptFinal_ex EVP_EncryptInit EVP_EncryptInit_ex EVP_EncryptInit_ex2 EVP_EncryptUpdate EVP_KDF_CTX_dup EVP_KDF_CTX_free EVP_KDF_CTX_get_kdf_size EVP_KDF_CTX_get_params EVP_KDF_CTX_gettable_params EVP_KDF_CTX_kdf EVP_KDF_CTX_new EVP_KDF_CTX_reset EVP_KDF_CTX_set_params EVP_KDF_CTX_settable_params EVP_KDF_derive EVP_KDF_do_all_provided EVP_KDF_fetch EVP_KDF_free EVP_KDF_get0_description EVP_KDF_get0_name EVP_KDF_get0_provider EVP_KDF_get_params EVP_KDF_gettable_ctx_params EVP_KDF_gettable_params EVP_KDF_is_a EVP_KDF_names_do_all EVP_KDF_settable_ctx_params EVP_KDF_up_ref EVP_KEM_do_all_provided EVP_KEM_fetch EVP_KEM_free EVP_KEM_get0_description EVP_KEM_get0_name EVP_KEM_get0_provider EVP_KEM_gettable_ctx_params EVP_KEM_is_a EVP_KEM_names_do_all EVP_KEM_settable_ctx_params EVP_KEM_up_ref EVP_KEYEXCH_do_all_provided EVP_KEYEXCH_fetch EVP_KEYEXCH_free EVP_KEYEXCH_get0_description EVP_KEYEXCH_get0_name EVP_KEYEXCH_get0_provider EVP_KEYEXCH_gettable_ctx_params EVP_KEYEXCH_is_a EVP_KEYEXCH_names_do_all EVP_KEYEXCH_settable_ctx_params EVP_KEYEXCH_up_ref EVP_KEYMGMT_do_all_provided EVP_KEYMGMT_fetch EVP_KEYMGMT_free EVP_KEYMGMT_gen_settable_params EVP_KEYMGMT_get0_description EVP_KEYMGMT_get0_name EVP_KEYMGMT_get0_provider EVP_KEYMGMT_gettable_params EVP_KEYMGMT_is_a EVP_KEYMGMT_names_do_all EVP_KEYMGMT_settable_params EVP_KEYMGMT_up_ref EVP_MAC_CTX_dup EVP_MAC_CTX_free EVP_MAC_CTX_get0_mac EVP_MAC_CTX_get_block_size EVP_MAC_CTX_get_mac_size EVP_MAC_CTX_get_params EVP_MAC_CTX_gettable_params EVP_MAC_CTX_new EVP_MAC_CTX_set_params EVP_MAC_CTX_settable_params EVP_MAC_do_all_provided EVP_MAC_fetch EVP_MAC_final EVP_MAC_finalXOF EVP_MAC_free EVP_MAC_get0_description EVP_MAC_get0_name EVP_MAC_get0_provider EVP_MAC_get_params EVP_MAC_gettable_ctx_params EVP_MAC_gettable_params EVP_MAC_init EVP_MAC_is_a EVP_MAC_names_do_all EVP_MAC_settable_ctx_params EVP_MAC_up_ref EVP_MAC_update EVP_MD_CTX_clear_flags EVP_MD_CTX_copy EVP_MD_CTX_copy_ex EVP_MD_CTX_ctrl EVP_MD_CTX_dup EVP_MD_CTX_free EVP_MD_CTX_get0_md EVP_MD_CTX_get0_md_data EVP_MD_CTX_get1_md EVP_MD_CTX_get_params EVP_MD_CTX_get_pkey_ctx EVP_MD_CTX_gettable_params EVP_MD_CTX_md EVP_MD_CTX_new EVP_MD_CTX_reset EVP_MD_CTX_set_flags EVP_MD_CTX_set_params EVP_MD_CTX_set_pkey_ctx EVP_MD_CTX_set_update_fn EVP_MD_CTX_settable_params EVP_MD_CTX_test_flags EVP_MD_CTX_update_fn EVP_MD_do_all EVP_MD_do_all_provided EVP_MD_do_all_sorted EVP_MD_fetch EVP_MD_free EVP_MD_get0_description EVP_MD_get0_name EVP_MD_get0_provider EVP_MD_get_block_size EVP_MD_get_flags EVP_MD_get_params EVP_MD_get_pkey_type EVP_MD_get_size EVP_MD_get_type EVP_MD_gettable_ctx_params EVP_MD_gettable_params EVP_MD_is_a EVP_MD_meth_dup EVP_MD_meth_free EVP_MD_meth_get_app_datasize EVP_MD_meth_get_cleanup EVP_MD_meth_get_copy EVP_MD_meth_get_ctrl EVP_MD_meth_get_final EVP_MD_meth_get_flags EVP_MD_meth_get_init EVP_MD_meth_get_input_blocksize EVP_MD_meth_get_result_size EVP_MD_meth_get_update EVP_MD_meth_new EVP_MD_meth_set_app_datasize EVP_MD_meth_set_cleanup EVP_MD_meth_set_copy EVP_MD_meth_set_ctrl EVP_MD_meth_set_final EVP_MD_meth_set_flags EVP_MD_meth_set_init EVP_MD_meth_set_input_blocksize EVP_MD_meth_set_result_size EVP_MD_meth_set_update EVP_MD_names_do_all EVP_MD_settable_ctx_params EVP_MD_up_ref EVP_OpenFinal EVP_OpenInit EVP_PBE_CipherInit EVP_PBE_CipherInit_ex EVP_PBE_alg_add EVP_PBE_alg_add_type EVP_PBE_cleanup EVP_PBE_find EVP_PBE_find_ex EVP_PBE_get EVP_PBE_scrypt EVP_PBE_scrypt_ex EVP_PKCS82PKEY EVP_PKCS82PKEY_ex EVP_PKEY2PKCS8 EVP_PKEY_CTX_add1_hkdf_info EVP_PKEY_CTX_add1_tls1_prf_seed EVP_PKEY_CTX_ctrl EVP_PKEY_CTX_ctrl_str EVP_PKEY_CTX_ctrl_uint64 EVP_PKEY_CTX_dup EVP_PKEY_CTX_free EVP_PKEY_CTX_get0_dh_kdf_oid EVP_PKEY_CTX_get0_dh_kdf_ukm EVP_PKEY_CTX_get0_ecdh_kdf_ukm EVP_PKEY_CTX_get0_libctx EVP_PKEY_CTX_get0_peerkey EVP_PKEY_CTX_get0_pkey EVP_PKEY_CTX_get0_propq EVP_PKEY_CTX_get0_provider EVP_PKEY_CTX_get0_rsa_oaep_label EVP_PKEY_CTX_get1_id EVP_PKEY_CTX_get1_id_len EVP_PKEY_CTX_get_app_data EVP_PKEY_CTX_get_cb EVP_PKEY_CTX_get_data EVP_PKEY_CTX_get_dh_kdf_md EVP_PKEY_CTX_get_dh_kdf_outlen EVP_PKEY_CTX_get_dh_kdf_type EVP_PKEY_CTX_get_ecdh_cofactor_mode EVP_PKEY_CTX_get_ecdh_kdf_md EVP_PKEY_CTX_get_ecdh_kdf_outlen EVP_PKEY_CTX_get_ecdh_kdf_type EVP_PKEY_CTX_get_group_name EVP_PKEY_CTX_get_keygen_info EVP_PKEY_CTX_get_operation EVP_PKEY_CTX_get_params EVP_PKEY_CTX_get_rsa_mgf1_md EVP_PKEY_CTX_get_rsa_mgf1_md_name EVP_PKEY_CTX_get_rsa_oaep_md EVP_PKEY_CTX_get_rsa_oaep_md_name EVP_PKEY_CTX_get_rsa_padding EVP_PKEY_CTX_get_rsa_pss_saltlen EVP_PKEY_CTX_get_signature_md EVP_PKEY_CTX_gettable_params EVP_PKEY_CTX_hex2ctrl EVP_PKEY_CTX_is_a EVP_PKEY_CTX_md EVP_PKEY_CTX_new EVP_PKEY_CTX_new_from_name EVP_PKEY_CTX_new_from_pkey EVP_PKEY_CTX_new_id EVP_PKEY_CTX_set0_dh_kdf_oid EVP_PKEY_CTX_set0_dh_kdf_ukm EVP_PKEY_CTX_set0_ecdh_kdf_ukm EVP_PKEY_CTX_set0_keygen_info EVP_PKEY_CTX_set0_rsa_oaep_label EVP_PKEY_CTX_set1_hkdf_key EVP_PKEY_CTX_set1_hkdf_salt EVP_PKEY_CTX_set1_id EVP_PKEY_CTX_set1_pbe_pass EVP_PKEY_CTX_set1_rsa_keygen_pubexp EVP_PKEY_CTX_set1_scrypt_salt EVP_PKEY_CTX_set1_tls1_prf_secret EVP_PKEY_CTX_set_app_data EVP_PKEY_CTX_set_cb EVP_PKEY_CTX_set_data EVP_PKEY_CTX_set_dh_kdf_md EVP_PKEY_CTX_set_dh_kdf_outlen EVP_PKEY_CTX_set_dh_kdf_type EVP_PKEY_CTX_set_dh_nid EVP_PKEY_CTX_set_dh_pad EVP_PKEY_CTX_set_dh_paramgen_generator EVP_PKEY_CTX_set_dh_paramgen_gindex EVP_PKEY_CTX_set_dh_paramgen_prime_len EVP_PKEY_CTX_set_dh_paramgen_seed EVP_PKEY_CTX_set_dh_paramgen_subprime_len EVP_PKEY_CTX_set_dh_paramgen_type EVP_PKEY_CTX_set_dh_rfc5114 EVP_PKEY_CTX_set_dhx_rfc5114 EVP_PKEY_CTX_set_dsa_paramgen_bits EVP_PKEY_CTX_set_dsa_paramgen_gindex EVP_PKEY_CTX_set_dsa_paramgen_md EVP_PKEY_CTX_set_dsa_paramgen_md_props EVP_PKEY_CTX_set_dsa_paramgen_q_bits EVP_PKEY_CTX_set_dsa_paramgen_seed EVP_PKEY_CTX_set_dsa_paramgen_type EVP_PKEY_CTX_set_ec_param_enc EVP_PKEY_CTX_set_ec_paramgen_curve_nid EVP_PKEY_CTX_set_ecdh_cofactor_mode EVP_PKEY_CTX_set_ecdh_kdf_md EVP_PKEY_CTX_set_ecdh_kdf_outlen EVP_PKEY_CTX_set_ecdh_kdf_type EVP_PKEY_CTX_set_group_name EVP_PKEY_CTX_set_hkdf_md EVP_PKEY_CTX_set_hkdf_mode EVP_PKEY_CTX_set_kem_op EVP_PKEY_CTX_set_mac_key EVP_PKEY_CTX_set_params EVP_PKEY_CTX_set_rsa_keygen_bits EVP_PKEY_CTX_set_rsa_keygen_primes EVP_PKEY_CTX_set_rsa_keygen_pubexp EVP_PKEY_CTX_set_rsa_mgf1_md EVP_PKEY_CTX_set_rsa_mgf1_md_name EVP_PKEY_CTX_set_rsa_oaep_md EVP_PKEY_CTX_set_rsa_oaep_md_name EVP_PKEY_CTX_set_rsa_padding EVP_PKEY_CTX_set_rsa_pss_keygen_md EVP_PKEY_CTX_set_rsa_pss_keygen_md_name EVP_PKEY_CTX_set_rsa_pss_keygen_mgf1_md EVP_PKEY_CTX_set_rsa_pss_keygen_mgf1_md_name EVP_PKEY_CTX_set_rsa_pss_keygen_saltlen EVP_PKEY_CTX_set_rsa_pss_saltlen EVP_PKEY_CTX_set_scrypt_N EVP_PKEY_CTX_set_scrypt_maxmem_bytes EVP_PKEY_CTX_set_scrypt_p EVP_PKEY_CTX_set_scrypt_r EVP_PKEY_CTX_set_signature_md EVP_PKEY_CTX_set_tls1_prf_md EVP_PKEY_CTX_settable_params EVP_PKEY_CTX_str2ctrl EVP_PKEY_Q_keygen EVP_PKEY_add1_attr EVP_PKEY_add1_attr_by_NID EVP_PKEY_add1_attr_by_OBJ EVP_PKEY_add1_attr_by_txt EVP_PKEY_asn1_add0 EVP_PKEY_asn1_add_alias EVP_PKEY_asn1_copy EVP_PKEY_asn1_find EVP_PKEY_asn1_find_str EVP_PKEY_asn1_free EVP_PKEY_asn1_get0 EVP_PKEY_asn1_get0_info EVP_PKEY_asn1_get_count EVP_PKEY_asn1_new EVP_PKEY_asn1_set_check EVP_PKEY_asn1_set_ctrl EVP_PKEY_asn1_set_free EVP_PKEY_asn1_set_get_priv_key EVP_PKEY_asn1_set_get_pub_key EVP_PKEY_asn1_set_item EVP_PKEY_asn1_set_param EVP_PKEY_asn1_set_param_check EVP_PKEY_asn1_set_private EVP_PKEY_asn1_set_public EVP_PKEY_asn1_set_public_check EVP_PKEY_asn1_set_security_bits EVP_PKEY_asn1_set_set_priv_key EVP_PKEY_asn1_set_set_pub_key EVP_PKEY_asn1_set_siginf EVP_PKEY_assign EVP_PKEY_can_sign EVP_PKEY_check EVP_PKEY_cmp EVP_PKEY_cmp_parameters EVP_PKEY_copy_parameters EVP_PKEY_decapsulate EVP_PKEY_decapsulate_init EVP_PKEY_decrypt EVP_PKEY_decrypt_init EVP_PKEY_decrypt_init_ex EVP_PKEY_decrypt_old EVP_PKEY_delete_attr EVP_PKEY_derive EVP_PKEY_derive_init EVP_PKEY_derive_init_ex EVP_PKEY_derive_set_peer EVP_PKEY_derive_set_peer_ex EVP_PKEY_digestsign_supports_digest EVP_PKEY_dup EVP_PKEY_encapsulate EVP_PKEY_encapsulate_init EVP_PKEY_encrypt EVP_PKEY_encrypt_init EVP_PKEY_encrypt_init_ex EVP_PKEY_encrypt_old EVP_PKEY_eq EVP_PKEY_export EVP_PKEY_free EVP_PKEY_fromdata EVP_PKEY_fromdata_init EVP_PKEY_fromdata_settable EVP_PKEY_generate EVP_PKEY_get0 EVP_PKEY_get0_DH EVP_PKEY_get0_DSA EVP_PKEY_get0_EC_KEY EVP_PKEY_get0_RSA EVP_PKEY_get0_asn1 EVP_PKEY_get0_description EVP_PKEY_get0_engine EVP_PKEY_get0_hmac EVP_PKEY_get0_poly1305 EVP_PKEY_get0_provider EVP_PKEY_get0_siphash EVP_PKEY_get0_type_name EVP_PKEY_get1_DH EVP_PKEY_get1_DSA EVP_PKEY_get1_EC_KEY EVP_PKEY_get1_RSA EVP_PKEY_get1_encoded_public_key EVP_PKEY_get_attr EVP_PKEY_get_attr_by_NID EVP_PKEY_get_attr_by_OBJ EVP_PKEY_get_attr_count EVP_PKEY_get_base_id EVP_PKEY_get_bits EVP_PKEY_get_bn_param EVP_PKEY_get_default_digest_name EVP_PKEY_get_default_digest_nid EVP_PKEY_get_ec_point_conv_form EVP_PKEY_get_ex_data EVP_PKEY_get_field_type EVP_PKEY_get_group_name EVP_PKEY_get_id EVP_PKEY_get_int_param EVP_PKEY_get_octet_string_param EVP_PKEY_get_params EVP_PKEY_get_raw_private_key EVP_PKEY_get_raw_public_key EVP_PKEY_get_security_bits EVP_PKEY_get_size EVP_PKEY_get_size_t_param EVP_PKEY_get_utf8_string_param EVP_PKEY_gettable_params EVP_PKEY_is_a EVP_PKEY_keygen EVP_PKEY_keygen_init EVP_PKEY_meth_add0 EVP_PKEY_meth_copy EVP_PKEY_meth_find EVP_PKEY_meth_free EVP_PKEY_meth_get0 EVP_PKEY_meth_get0_info EVP_PKEY_meth_get_check EVP_PKEY_meth_get_cleanup EVP_PKEY_meth_get_copy EVP_PKEY_meth_get_count EVP_PKEY_meth_get_ctrl EVP_PKEY_meth_get_decrypt EVP_PKEY_meth_get_derive EVP_PKEY_meth_get_digest_custom EVP_PKEY_meth_get_digestsign EVP_PKEY_meth_get_digestverify EVP_PKEY_meth_get_encrypt EVP_PKEY_meth_get_init EVP_PKEY_meth_get_keygen EVP_PKEY_meth_get_param_check EVP_PKEY_meth_get_paramgen EVP_PKEY_meth_get_public_check EVP_PKEY_meth_get_sign EVP_PKEY_meth_get_signctx EVP_PKEY_meth_get_verify EVP_PKEY_meth_get_verify_recover EVP_PKEY_meth_get_verifyctx EVP_PKEY_meth_new EVP_PKEY_meth_remove EVP_PKEY_meth_set_check EVP_PKEY_meth_set_cleanup EVP_PKEY_meth_set_copy EVP_PKEY_meth_set_ctrl EVP_PKEY_meth_set_decrypt EVP_PKEY_meth_set_derive EVP_PKEY_meth_set_digest_custom EVP_PKEY_meth_set_digestsign EVP_PKEY_meth_set_digestverify EVP_PKEY_meth_set_encrypt EVP_PKEY_meth_set_init EVP_PKEY_meth_set_keygen EVP_PKEY_meth_set_param_check EVP_PKEY_meth_set_paramgen EVP_PKEY_meth_set_public_check EVP_PKEY_meth_set_sign EVP_PKEY_meth_set_signctx EVP_PKEY_meth_set_verify EVP_PKEY_meth_set_verify_recover EVP_PKEY_meth_set_verifyctx EVP_PKEY_missing_parameters EVP_PKEY_new EVP_PKEY_new_CMAC_key EVP_PKEY_new_mac_key EVP_PKEY_new_raw_private_key EVP_PKEY_new_raw_private_key_ex EVP_PKEY_new_raw_public_key EVP_PKEY_new_raw_public_key_ex EVP_PKEY_pairwise_check EVP_PKEY_param_check EVP_PKEY_param_check_quick EVP_PKEY_parameters_eq EVP_PKEY_paramgen EVP_PKEY_paramgen_init EVP_PKEY_print_params EVP_PKEY_print_params_fp EVP_PKEY_print_private EVP_PKEY_print_private_fp EVP_PKEY_print_public EVP_PKEY_print_public_fp EVP_PKEY_private_check EVP_PKEY_public_check EVP_PKEY_public_check_quick EVP_PKEY_save_parameters EVP_PKEY_set1_DH EVP_PKEY_set1_DSA EVP_PKEY_set1_EC_KEY EVP_PKEY_set1_RSA EVP_PKEY_set1_encoded_public_key EVP_PKEY_set1_engine EVP_PKEY_set_bn_param EVP_PKEY_set_ex_data EVP_PKEY_set_int_param EVP_PKEY_set_octet_string_param EVP_PKEY_set_params EVP_PKEY_set_size_t_param EVP_PKEY_set_type EVP_PKEY_set_type_by_keymgmt EVP_PKEY_set_type_str EVP_PKEY_set_utf8_string_param EVP_PKEY_settable_params EVP_PKEY_sign EVP_PKEY_sign_init EVP_PKEY_sign_init_ex EVP_PKEY_todata EVP_PKEY_type EVP_PKEY_type_names_do_all EVP_PKEY_up_ref EVP_PKEY_verify EVP_PKEY_verify_init EVP_PKEY_verify_init_ex EVP_PKEY_verify_recover EVP_PKEY_verify_recover_init EVP_PKEY_verify_recover_init_ex EVP_Q_digest EVP_Q_mac EVP_RAND_CTX_free EVP_RAND_CTX_get0_rand EVP_RAND_CTX_get_params EVP_RAND_CTX_gettable_params EVP_RAND_CTX_new EVP_RAND_CTX_set_params EVP_RAND_CTX_settable_params EVP_RAND_CTX_up_ref EVP_RAND_do_all_provided EVP_RAND_enable_locking EVP_RAND_fetch EVP_RAND_free EVP_RAND_generate EVP_RAND_get0_description EVP_RAND_get0_name EVP_RAND_get0_provider EVP_RAND_get_params EVP_RAND_get_state EVP_RAND_get_strength EVP_RAND_gettable_ctx_params EVP_RAND_gettable_params EVP_RAND_instantiate EVP_RAND_is_a EVP_RAND_names_do_all EVP_RAND_nonce EVP_RAND_reseed EVP_RAND_settable_ctx_params EVP_RAND_uninstantiate EVP_RAND_up_ref EVP_RAND_verify_zeroization EVP_SIGNATURE_do_all_provided EVP_SIGNATURE_fetch EVP_SIGNATURE_free EVP_SIGNATURE_get0_description EVP_SIGNATURE_get0_name EVP_SIGNATURE_get0_provider EVP_SIGNATURE_gettable_ctx_params EVP_SIGNATURE_is_a EVP_SIGNATURE_names_do_all EVP_SIGNATURE_settable_ctx_params EVP_SIGNATURE_up_ref EVP_SealFinal EVP_SealInit EVP_SignFinal EVP_SignFinal_ex EVP_VerifyFinal EVP_VerifyFinal_ex EVP_add_alg_module EVP_add_cipher EVP_add_digest EVP_aes_128_cbc EVP_aes_128_cbc_hmac_sha1 EVP_aes_128_cbc_hmac_sha256 EVP_aes_128_ccm EVP_aes_128_cfb1 EVP_aes_128_cfb128 EVP_aes_128_cfb8 EVP_aes_128_ctr EVP_aes_128_ecb EVP_aes_128_gcm EVP_aes_128_ocb EVP_aes_128_ofb EVP_aes_128_wrap EVP_aes_128_wrap_pad EVP_aes_128_xts EVP_aes_192_cbc EVP_aes_192_ccm EVP_aes_192_cfb1 EVP_aes_192_cfb128 EVP_aes_192_cfb8 EVP_aes_192_ctr EVP_aes_192_ecb EVP_aes_192_gcm EVP_aes_192_ocb EVP_aes_192_ofb EVP_aes_192_wrap EVP_aes_192_wrap_pad EVP_aes_256_cbc EVP_aes_256_cbc_hmac_sha1 EVP_aes_256_cbc_hmac_sha256 EVP_aes_256_ccm EVP_aes_256_cfb1 EVP_aes_256_cfb128 EVP_aes_256_cfb8 EVP_aes_256_ctr EVP_aes_256_ecb EVP_aes_256_gcm EVP_aes_256_ocb EVP_aes_256_ofb EVP_aes_256_wrap EVP_aes_256_wrap_pad EVP_aes_256_xts EVP_aria_128_cbc EVP_aria_128_ccm EVP_aria_128_cfb1 EVP_aria_128_cfb128 EVP_aria_128_cfb8 EVP_aria_128_ctr EVP_aria_128_ecb EVP_aria_128_gcm EVP_aria_128_ofb EVP_aria_192_cbc EVP_aria_192_ccm EVP_aria_192_cfb1 EVP_aria_192_cfb128 EVP_aria_192_cfb8 EVP_aria_192_ctr EVP_aria_192_ecb EVP_aria_192_gcm EVP_aria_192_ofb EVP_aria_256_cbc EVP_aria_256_ccm EVP_aria_256_cfb1 EVP_aria_256_cfb128 EVP_aria_256_cfb8 EVP_aria_256_ctr EVP_aria_256_ecb EVP_aria_256_gcm EVP_aria_256_ofb EVP_bf_cbc EVP_bf_cfb64 EVP_bf_ecb EVP_bf_ofb EVP_blake2b512 EVP_blake2s256 EVP_camellia_128_cbc EVP_camellia_128_cfb1 EVP_camellia_128_cfb128 EVP_camellia_128_cfb8 EVP_camellia_128_ctr EVP_camellia_128_ecb EVP_camellia_128_ofb EVP_camellia_192_cbc EVP_camellia_192_cfb1 EVP_camellia_192_cfb128 EVP_camellia_192_cfb8 EVP_camellia_192_ctr EVP_camellia_192_ecb EVP_camellia_192_ofb EVP_camellia_256_cbc EVP_camellia_256_cfb1 EVP_camellia_256_cfb128 EVP_camellia_256_cfb8 EVP_camellia_256_ctr EVP_camellia_256_ecb EVP_camellia_256_ofb EVP_cast5_cbc EVP_cast5_cfb64 EVP_cast5_ecb EVP_cast5_ofb EVP_chacha20 EVP_chacha20_poly1305 EVP_default_properties_enable_fips EVP_default_properties_is_fips_enabled EVP_des_cbc EVP_des_cfb1 EVP_des_cfb64 EVP_des_cfb8 EVP_des_ecb EVP_des_ede EVP_des_ede3 EVP_des_ede3_cbc EVP_des_ede3_cfb1 EVP_des_ede3_cfb64 EVP_des_ede3_cfb8 EVP_des_ede3_ecb EVP_des_ede3_ofb EVP_des_ede3_wrap EVP_des_ede_cbc EVP_des_ede_cfb64 EVP_des_ede_ecb EVP_des_ede_ofb EVP_des_ofb EVP_desx_cbc EVP_enc_null EVP_get_cipherbyname EVP_get_digestbyname EVP_get_pw_prompt EVP_idea_cbc EVP_idea_cfb64 EVP_idea_ecb EVP_idea_ofb EVP_md4 EVP_md5 EVP_md5_sha1 EVP_md_null EVP_mdc2 EVP_rc2_40_cbc EVP_rc2_64_cbc EVP_rc2_cbc EVP_rc2_cfb64 EVP_rc2_ecb EVP_rc2_ofb EVP_rc4 EVP_rc4_40 EVP_rc4_hmac_md5 EVP_read_pw_string EVP_read_pw_string_min EVP_ripemd160 EVP_seed_cbc EVP_seed_cfb128 EVP_seed_ecb EVP_seed_ofb EVP_set_default_properties EVP_set_pw_prompt EVP_sha1 EVP_sha224 EVP_sha256 EVP_sha384 EVP_sha3_224 EVP_sha3_256 EVP_sha3_384 EVP_sha3_512 EVP_sha512 EVP_sha512_224 EVP_sha512_256 EVP_shake128 EVP_shake256 EVP_sm3 EVP_sm4_cbc EVP_sm4_cfb128 EVP_sm4_ctr EVP_sm4_ecb EVP_sm4_ofb EVP_whirlpool EXTENDED_KEY_USAGE_free EXTENDED_KEY_USAGE_it EXTENDED_KEY_USAGE_new GENERAL_NAMES_free GENERAL_NAMES_it GENERAL_NAMES_new GENERAL_NAME_cmp GENERAL_NAME_dup GENERAL_NAME_free GENERAL_NAME_get0_otherName GENERAL_NAME_get0_value GENERAL_NAME_it GENERAL_NAME_new GENERAL_NAME_print GENERAL_NAME_set0_othername GENERAL_NAME_set0_value GENERAL_SUBTREE_free GENERAL_SUBTREE_it GENERAL_SUBTREE_new HMAC HMAC_CTX_copy HMAC_CTX_free HMAC_CTX_get_md HMAC_CTX_new HMAC_CTX_reset HMAC_CTX_set_flags HMAC_Final HMAC_Init HMAC_Init_ex HMAC_Update HMAC_size IDEA_cbc_encrypt IDEA_cfb64_encrypt IDEA_ecb_encrypt IDEA_encrypt IDEA_ofb64_encrypt IDEA_options IDEA_set_decrypt_key IDEA_set_encrypt_key INT32_it INT64_it IPAddressChoice_free IPAddressChoice_it IPAddressChoice_new IPAddressFamily_free IPAddressFamily_it IPAddressFamily_new IPAddressOrRange_free IPAddressOrRange_it IPAddressOrRange_new IPAddressRange_free IPAddressRange_it IPAddressRange_new ISSUER_SIGN_TOOL_free ISSUER_SIGN_TOOL_it ISSUER_SIGN_TOOL_new ISSUING_DIST_POINT_free ISSUING_DIST_POINT_it ISSUING_DIST_POINT_new LONG_it MD4 MD4_Final MD4_Init MD4_Transform MD4_Update MD5 MD5_Final MD5_Init MD5_Transform MD5_Update MDC2 MDC2_Final MDC2_Init MDC2_Update NAME_CONSTRAINTS_check NAME_CONSTRAINTS_check_CN NAME_CONSTRAINTS_free NAME_CONSTRAINTS_it NAME_CONSTRAINTS_new NAMING_AUTHORITY_free NAMING_AUTHORITY_get0_authorityId NAMING_AUTHORITY_get0_authorityText NAMING_AUTHORITY_get0_authorityURL NAMING_AUTHORITY_it NAMING_AUTHORITY_new NAMING_AUTHORITY_set0_authorityId NAMING_AUTHORITY_set0_authorityText NAMING_AUTHORITY_set0_authorityURL NCONF_WIN32 NCONF_default NCONF_dump_bio NCONF_dump_fp NCONF_free NCONF_free_data NCONF_get0_libctx NCONF_get_number_e NCONF_get_section NCONF_get_section_names NCONF_get_string NCONF_load NCONF_load_bio NCONF_load_fp NCONF_new NCONF_new_ex NETSCAPE_CERT_SEQUENCE_free NETSCAPE_CERT_SEQUENCE_it NETSCAPE_CERT_SEQUENCE_new NETSCAPE_SPKAC_free NETSCAPE_SPKAC_it NETSCAPE_SPKAC_new NETSCAPE_SPKI_b64_decode NETSCAPE_SPKI_b64_encode NETSCAPE_SPKI_free NETSCAPE_SPKI_get_pubkey NETSCAPE_SPKI_it NETSCAPE_SPKI_new NETSCAPE_SPKI_print NETSCAPE_SPKI_set_pubkey NETSCAPE_SPKI_sign NETSCAPE_SPKI_verify NOTICEREF_free NOTICEREF_it NOTICEREF_new OBJ_NAME_add OBJ_NAME_cleanup OBJ_NAME_do_all OBJ_NAME_do_all_sorted OBJ_NAME_get OBJ_NAME_init OBJ_NAME_new_index OBJ_NAME_remove OBJ_add_object OBJ_add_sigid OBJ_bsearch_ OBJ_bsearch_ex_ OBJ_cmp OBJ_create OBJ_create_objects OBJ_dup OBJ_find_sigid_algs OBJ_find_sigid_by_algs OBJ_get0_data OBJ_length OBJ_ln2nid OBJ_new_nid OBJ_nid2ln OBJ_nid2obj OBJ_nid2sn OBJ_obj2nid OBJ_obj2txt OBJ_sigid_free OBJ_sn2nid OBJ_txt2nid OBJ_txt2obj OCSP_BASICRESP_add1_ext_i2d OCSP_BASICRESP_add_ext OCSP_BASICRESP_delete_ext OCSP_BASICRESP_free OCSP_BASICRESP_get1_ext_d2i OCSP_BASICRESP_get_ext OCSP_BASICRESP_get_ext_by_NID OCSP_BASICRESP_get_ext_by_OBJ OCSP_BASICRESP_get_ext_by_critical OCSP_BASICRESP_get_ext_count OCSP_BASICRESP_it OCSP_BASICRESP_new OCSP_CERTID_dup OCSP_CERTID_free OCSP_CERTID_it OCSP_CERTID_new OCSP_CERTSTATUS_free OCSP_CERTSTATUS_it OCSP_CERTSTATUS_new OCSP_CRLID_free OCSP_CRLID_it OCSP_CRLID_new OCSP_ONEREQ_add1_ext_i2d OCSP_ONEREQ_add_ext OCSP_ONEREQ_delete_ext OCSP_ONEREQ_free OCSP_ONEREQ_get1_ext_d2i OCSP_ONEREQ_get_ext OCSP_ONEREQ_get_ext_by_NID OCSP_ONEREQ_get_ext_by_OBJ OCSP_ONEREQ_get_ext_by_critical OCSP_ONEREQ_get_ext_count OCSP_ONEREQ_it OCSP_ONEREQ_new OCSP_REQINFO_free OCSP_REQINFO_it OCSP_REQINFO_new OCSP_REQUEST_add1_ext_i2d OCSP_REQUEST_add_ext OCSP_REQUEST_delete_ext OCSP_REQUEST_free OCSP_REQUEST_get1_ext_d2i OCSP_REQUEST_get_ext OCSP_REQUEST_get_ext_by_NID OCSP_REQUEST_get_ext_by_OBJ OCSP_REQUEST_get_ext_by_critical OCSP_REQUEST_get_ext_count OCSP_REQUEST_it OCSP_REQUEST_new OCSP_REQUEST_print OCSP_RESPBYTES_free OCSP_RESPBYTES_it OCSP_RESPBYTES_new OCSP_RESPDATA_free OCSP_RESPDATA_it OCSP_RESPDATA_new OCSP_RESPID_free OCSP_RESPID_it OCSP_RESPID_match OCSP_RESPID_match_ex OCSP_RESPID_new OCSP_RESPID_set_by_key OCSP_RESPID_set_by_key_ex OCSP_RESPID_set_by_name OCSP_RESPONSE_free OCSP_RESPONSE_it OCSP_RESPONSE_new OCSP_RESPONSE_print OCSP_REVOKEDINFO_free OCSP_REVOKEDINFO_it OCSP_REVOKEDINFO_new OCSP_SERVICELOC_free OCSP_SERVICELOC_it OCSP_SERVICELOC_new OCSP_SIGNATURE_free OCSP_SIGNATURE_it OCSP_SIGNATURE_new OCSP_SINGLERESP_add1_ext_i2d OCSP_SINGLERESP_add_ext OCSP_SINGLERESP_delete_ext OCSP_SINGLERESP_free OCSP_SINGLERESP_get0_id OCSP_SINGLERESP_get1_ext_d2i OCSP_SINGLERESP_get_ext OCSP_SINGLERESP_get_ext_by_NID OCSP_SINGLERESP_get_ext_by_OBJ OCSP_SINGLERESP_get_ext_by_critical OCSP_SINGLERESP_get_ext_count OCSP_SINGLERESP_it OCSP_SINGLERESP_new OCSP_accept_responses_new OCSP_archive_cutoff_new OCSP_basic_add1_cert OCSP_basic_add1_nonce OCSP_basic_add1_status OCSP_basic_sign OCSP_basic_sign_ctx OCSP_basic_verify OCSP_cert_id_new OCSP_cert_status_str OCSP_cert_to_id OCSP_check_nonce OCSP_check_validity OCSP_copy_nonce OCSP_crlID_new OCSP_crl_reason_str OCSP_id_cmp OCSP_id_get0_info OCSP_id_issuer_cmp OCSP_onereq_get0_id OCSP_request_add0_id OCSP_request_add1_cert OCSP_request_add1_nonce OCSP_request_is_signed OCSP_request_onereq_count OCSP_request_onereq_get0 OCSP_request_set1_name OCSP_request_sign OCSP_request_verify OCSP_resp_count OCSP_resp_find OCSP_resp_find_status OCSP_resp_get0 OCSP_resp_get0_certs OCSP_resp_get0_id OCSP_resp_get0_produced_at OCSP_resp_get0_respdata OCSP_resp_get0_signature OCSP_resp_get0_signer OCSP_resp_get0_tbs_sigalg OCSP_resp_get1_id OCSP_response_create OCSP_response_get1_basic OCSP_response_status OCSP_response_status_str OCSP_sendreq_bio OCSP_sendreq_new OCSP_single_get0_status OCSP_url_svcloc_new OPENSSL_DIR_end OPENSSL_DIR_read OPENSSL_INIT_free OPENSSL_INIT_new OPENSSL_INIT_set_config_appname OPENSSL_INIT_set_config_file_flags OPENSSL_INIT_set_config_filename OPENSSL_LH_delete OPENSSL_LH_doall OPENSSL_LH_doall_arg OPENSSL_LH_error OPENSSL_LH_flush OPENSSL_LH_free OPENSSL_LH_get_down_load OPENSSL_LH_insert OPENSSL_LH_new OPENSSL_LH_node_stats OPENSSL_LH_node_stats_bio OPENSSL_LH_node_usage_stats OPENSSL_LH_node_usage_stats_bio OPENSSL_LH_num_items OPENSSL_LH_retrieve OPENSSL_LH_set_down_load OPENSSL_LH_stats OPENSSL_LH_stats_bio OPENSSL_LH_strhash OPENSSL_asc2uni OPENSSL_atexit OPENSSL_buf2hexstr OPENSSL_buf2hexstr_ex OPENSSL_cleanse OPENSSL_cleanup OPENSSL_config OPENSSL_die OPENSSL_gmtime OPENSSL_gmtime_adj OPENSSL_gmtime_diff OPENSSL_hexchar2int OPENSSL_hexstr2buf OPENSSL_hexstr2buf_ex OPENSSL_info OPENSSL_init OPENSSL_init_crypto OPENSSL_isservice OPENSSL_issetugid OPENSSL_load_builtin_modules OPENSSL_sk_deep_copy OPENSSL_sk_delete OPENSSL_sk_delete_ptr OPENSSL_sk_dup OPENSSL_sk_find OPENSSL_sk_find_all OPENSSL_sk_find_ex OPENSSL_sk_free OPENSSL_sk_insert OPENSSL_sk_is_sorted OPENSSL_sk_new OPENSSL_sk_new_null OPENSSL_sk_new_reserve OPENSSL_sk_num OPENSSL_sk_pop OPENSSL_sk_pop_free OPENSSL_sk_push OPENSSL_sk_reserve OPENSSL_sk_set OPENSSL_sk_set_cmp_func OPENSSL_sk_shift OPENSSL_sk_sort OPENSSL_sk_unshift OPENSSL_sk_value OPENSSL_sk_zero OPENSSL_strcasecmp OPENSSL_strlcat OPENSSL_strlcpy OPENSSL_strncasecmp OPENSSL_strnlen OPENSSL_thread_stop OPENSSL_thread_stop_ex OPENSSL_uni2asc OPENSSL_uni2utf8 OPENSSL_utf82uni OPENSSL_version_build_metadata OPENSSL_version_major OPENSSL_version_minor OPENSSL_version_patch OPENSSL_version_pre_release OSSL_CMP_CTX_build_cert_chain OSSL_CMP_CTX_free OSSL_CMP_CTX_get0_newCert OSSL_CMP_CTX_get0_newPkey OSSL_CMP_CTX_get0_statusString OSSL_CMP_CTX_get0_trustedStore OSSL_CMP_CTX_get0_untrusted OSSL_CMP_CTX_get1_caPubs OSSL_CMP_CTX_get1_extraCertsIn OSSL_CMP_CTX_get1_newChain OSSL_CMP_CTX_get_certConf_cb_arg OSSL_CMP_CTX_get_failInfoCode OSSL_CMP_CTX_get_http_cb_arg OSSL_CMP_CTX_get_option OSSL_CMP_CTX_get_status OSSL_CMP_CTX_get_transfer_cb_arg OSSL_CMP_CTX_new OSSL_CMP_CTX_print_errors OSSL_CMP_CTX_push0_geninfo_ITAV OSSL_CMP_CTX_push0_genm_ITAV OSSL_CMP_CTX_push0_policy OSSL_CMP_CTX_push1_subjectAltName OSSL_CMP_CTX_reinit OSSL_CMP_CTX_reqExtensions_have_SAN OSSL_CMP_CTX_reset_geninfo_ITAVs OSSL_CMP_CTX_server_perform OSSL_CMP_CTX_set0_newPkey OSSL_CMP_CTX_set0_reqExtensions OSSL_CMP_CTX_set0_trustedStore OSSL_CMP_CTX_set1_cert OSSL_CMP_CTX_set1_expected_sender OSSL_CMP_CTX_set1_extraCertsOut OSSL_CMP_CTX_set1_issuer OSSL_CMP_CTX_set1_no_proxy OSSL_CMP_CTX_set1_oldCert OSSL_CMP_CTX_set1_p10CSR OSSL_CMP_CTX_set1_pkey OSSL_CMP_CTX_set1_proxy OSSL_CMP_CTX_set1_recipient OSSL_CMP_CTX_set1_referenceValue OSSL_CMP_CTX_set1_secretValue OSSL_CMP_CTX_set1_senderNonce OSSL_CMP_CTX_set1_server OSSL_CMP_CTX_set1_serverPath OSSL_CMP_CTX_set1_srvCert OSSL_CMP_CTX_set1_subjectName OSSL_CMP_CTX_set1_transactionID OSSL_CMP_CTX_set1_untrusted OSSL_CMP_CTX_set_certConf_cb OSSL_CMP_CTX_set_certConf_cb_arg OSSL_CMP_CTX_set_http_cb OSSL_CMP_CTX_set_http_cb_arg OSSL_CMP_CTX_set_log_cb OSSL_CMP_CTX_set_option OSSL_CMP_CTX_set_serverPort OSSL_CMP_CTX_set_transfer_cb OSSL_CMP_CTX_set_transfer_cb_arg OSSL_CMP_CTX_setup_CRM OSSL_CMP_CTX_snprint_PKIStatus OSSL_CMP_HDR_get0_recipNonce OSSL_CMP_HDR_get0_transactionID OSSL_CMP_ITAV_create OSSL_CMP_ITAV_dup OSSL_CMP_ITAV_free OSSL_CMP_ITAV_get0_type OSSL_CMP_ITAV_get0_value OSSL_CMP_ITAV_push0_stack_item OSSL_CMP_ITAV_set0 OSSL_CMP_MSG_dup OSSL_CMP_MSG_free OSSL_CMP_MSG_get0_header OSSL_CMP_MSG_get_bodytype OSSL_CMP_MSG_http_perform OSSL_CMP_MSG_it OSSL_CMP_MSG_read OSSL_CMP_MSG_update_transactionID OSSL_CMP_MSG_write OSSL_CMP_PKIHEADER_free OSSL_CMP_PKIHEADER_it OSSL_CMP_PKIHEADER_new OSSL_CMP_PKISI_dup OSSL_CMP_PKISI_free OSSL_CMP_PKISI_it OSSL_CMP_PKISI_new OSSL_CMP_PKISTATUS_it OSSL_CMP_SRV_CTX_free OSSL_CMP_SRV_CTX_get0_cmp_ctx OSSL_CMP_SRV_CTX_get0_custom_ctx OSSL_CMP_SRV_CTX_init OSSL_CMP_SRV_CTX_new OSSL_CMP_SRV_CTX_set_accept_raverified OSSL_CMP_SRV_CTX_set_accept_unprotected OSSL_CMP_SRV_CTX_set_grant_implicit_confirm OSSL_CMP_SRV_CTX_set_send_unprotected_errors OSSL_CMP_SRV_process_request OSSL_CMP_STATUSINFO_new OSSL_CMP_certConf_cb OSSL_CMP_exec_GENM_ses OSSL_CMP_exec_RR_ses OSSL_CMP_exec_certreq OSSL_CMP_log_close OSSL_CMP_log_open OSSL_CMP_print_errors_cb OSSL_CMP_print_to_bio OSSL_CMP_snprint_PKIStatusInfo OSSL_CMP_try_certreq OSSL_CMP_validate_cert_path OSSL_CMP_validate_msg OSSL_CRMF_CERTID_dup OSSL_CRMF_CERTID_free OSSL_CRMF_CERTID_gen OSSL_CRMF_CERTID_get0_issuer OSSL_CRMF_CERTID_get0_serialNumber OSSL_CRMF_CERTID_it OSSL_CRMF_CERTID_new OSSL_CRMF_CERTTEMPLATE_fill OSSL_CRMF_CERTTEMPLATE_free OSSL_CRMF_CERTTEMPLATE_get0_extensions OSSL_CRMF_CERTTEMPLATE_get0_issuer OSSL_CRMF_CERTTEMPLATE_get0_serialNumber OSSL_CRMF_CERTTEMPLATE_get0_subject OSSL_CRMF_CERTTEMPLATE_it OSSL_CRMF_CERTTEMPLATE_new OSSL_CRMF_ENCRYPTEDVALUE_free OSSL_CRMF_ENCRYPTEDVALUE_get1_encCert OSSL_CRMF_ENCRYPTEDVALUE_it OSSL_CRMF_ENCRYPTEDVALUE_new OSSL_CRMF_MSGS_free OSSL_CRMF_MSGS_it OSSL_CRMF_MSGS_new OSSL_CRMF_MSGS_verify_popo OSSL_CRMF_MSG_PKIPublicationInfo_push0_SinglePubInfo OSSL_CRMF_MSG_create_popo OSSL_CRMF_MSG_dup OSSL_CRMF_MSG_free OSSL_CRMF_MSG_get0_regCtrl_authenticator OSSL_CRMF_MSG_get0_regCtrl_oldCertID OSSL_CRMF_MSG_get0_regCtrl_pkiPublicationInfo OSSL_CRMF_MSG_get0_regCtrl_protocolEncrKey OSSL_CRMF_MSG_get0_regCtrl_regToken OSSL_CRMF_MSG_get0_regInfo_certReq OSSL_CRMF_MSG_get0_regInfo_utf8Pairs OSSL_CRMF_MSG_get0_tmpl OSSL_CRMF_MSG_get_certReqId OSSL_CRMF_MSG_it OSSL_CRMF_MSG_new OSSL_CRMF_MSG_push0_extension OSSL_CRMF_MSG_set0_SinglePubInfo OSSL_CRMF_MSG_set0_extensions OSSL_CRMF_MSG_set0_validity OSSL_CRMF_MSG_set1_regCtrl_authenticator OSSL_CRMF_MSG_set1_regCtrl_oldCertID OSSL_CRMF_MSG_set1_regCtrl_pkiPublicationInfo OSSL_CRMF_MSG_set1_regCtrl_protocolEncrKey OSSL_CRMF_MSG_set1_regCtrl_regToken OSSL_CRMF_MSG_set1_regInfo_certReq OSSL_CRMF_MSG_set1_regInfo_utf8Pairs OSSL_CRMF_MSG_set_PKIPublicationInfo_action OSSL_CRMF_MSG_set_certReqId OSSL_CRMF_PBMPARAMETER_free OSSL_CRMF_PBMPARAMETER_it OSSL_CRMF_PBMPARAMETER_new OSSL_CRMF_PKIPUBLICATIONINFO_free OSSL_CRMF_PKIPUBLICATIONINFO_it OSSL_CRMF_PKIPUBLICATIONINFO_new OSSL_CRMF_SINGLEPUBINFO_free OSSL_CRMF_SINGLEPUBINFO_it OSSL_CRMF_SINGLEPUBINFO_new OSSL_CRMF_pbm_new OSSL_CRMF_pbmp_new OSSL_DECODER_CTX_add_decoder OSSL_DECODER_CTX_add_extra OSSL_DECODER_CTX_free OSSL_DECODER_CTX_get_cleanup OSSL_DECODER_CTX_get_construct OSSL_DECODER_CTX_get_construct_data OSSL_DECODER_CTX_get_num_decoders OSSL_DECODER_CTX_new OSSL_DECODER_CTX_new_for_pkey OSSL_DECODER_CTX_set_cleanup OSSL_DECODER_CTX_set_construct OSSL_DECODER_CTX_set_construct_data OSSL_DECODER_CTX_set_input_structure OSSL_DECODER_CTX_set_input_type OSSL_DECODER_CTX_set_params OSSL_DECODER_CTX_set_passphrase OSSL_DECODER_CTX_set_passphrase_cb OSSL_DECODER_CTX_set_passphrase_ui OSSL_DECODER_CTX_set_pem_password_cb OSSL_DECODER_CTX_set_selection OSSL_DECODER_INSTANCE_get_decoder OSSL_DECODER_INSTANCE_get_decoder_ctx OSSL_DECODER_INSTANCE_get_input_structure OSSL_DECODER_INSTANCE_get_input_type OSSL_DECODER_do_all_provided OSSL_DECODER_export OSSL_DECODER_fetch OSSL_DECODER_free OSSL_DECODER_from_bio OSSL_DECODER_from_data OSSL_DECODER_from_fp OSSL_DECODER_get0_description OSSL_DECODER_get0_name OSSL_DECODER_get0_properties OSSL_DECODER_get0_provider OSSL_DECODER_get_params OSSL_DECODER_gettable_params OSSL_DECODER_is_a OSSL_DECODER_names_do_all OSSL_DECODER_settable_ctx_params OSSL_DECODER_up_ref OSSL_EC_curve_nid2name OSSL_ENCODER_CTX_add_encoder OSSL_ENCODER_CTX_add_extra OSSL_ENCODER_CTX_free OSSL_ENCODER_CTX_get_num_encoders OSSL_ENCODER_CTX_new OSSL_ENCODER_CTX_new_for_pkey OSSL_ENCODER_CTX_set_cipher OSSL_ENCODER_CTX_set_cleanup OSSL_ENCODER_CTX_set_construct OSSL_ENCODER_CTX_set_construct_data OSSL_ENCODER_CTX_set_output_structure OSSL_ENCODER_CTX_set_output_type OSSL_ENCODER_CTX_set_params OSSL_ENCODER_CTX_set_passphrase OSSL_ENCODER_CTX_set_passphrase_cb OSSL_ENCODER_CTX_set_passphrase_ui OSSL_ENCODER_CTX_set_pem_password_cb OSSL_ENCODER_CTX_set_selection OSSL_ENCODER_INSTANCE_get_encoder OSSL_ENCODER_INSTANCE_get_encoder_ctx OSSL_ENCODER_INSTANCE_get_output_structure OSSL_ENCODER_INSTANCE_get_output_type OSSL_ENCODER_do_all_provided OSSL_ENCODER_fetch OSSL_ENCODER_free OSSL_ENCODER_get0_description OSSL_ENCODER_get0_name OSSL_ENCODER_get0_properties OSSL_ENCODER_get0_provider OSSL_ENCODER_get_params OSSL_ENCODER_gettable_params OSSL_ENCODER_is_a OSSL_ENCODER_names_do_all OSSL_ENCODER_settable_ctx_params OSSL_ENCODER_to_bio OSSL_ENCODER_to_data OSSL_ENCODER_to_fp OSSL_ENCODER_up_ref OSSL_ESS_check_signing_certs OSSL_ESS_signing_cert_new_init OSSL_ESS_signing_cert_v2_new_init OSSL_HTTP_REQ_CTX_add1_header OSSL_HTTP_REQ_CTX_exchange OSSL_HTTP_REQ_CTX_free OSSL_HTTP_REQ_CTX_get0_mem_bio OSSL_HTTP_REQ_CTX_get_resp_len OSSL_HTTP_REQ_CTX_nbio OSSL_HTTP_REQ_CTX_nbio_d2i OSSL_HTTP_REQ_CTX_new OSSL_HTTP_REQ_CTX_set1_req OSSL_HTTP_REQ_CTX_set_expected OSSL_HTTP_REQ_CTX_set_max_response_length OSSL_HTTP_REQ_CTX_set_request_line OSSL_HTTP_adapt_proxy OSSL_HTTP_close OSSL_HTTP_exchange OSSL_HTTP_get OSSL_HTTP_is_alive OSSL_HTTP_open OSSL_HTTP_parse_url OSSL_HTTP_proxy_connect OSSL_HTTP_set1_request OSSL_HTTP_transfer OSSL_LIB_CTX_free OSSL_LIB_CTX_get0_global_default OSSL_LIB_CTX_load_config OSSL_LIB_CTX_new OSSL_LIB_CTX_new_child OSSL_LIB_CTX_new_from_dispatch OSSL_LIB_CTX_set0_default OSSL_PARAM_BLD_free OSSL_PARAM_BLD_new OSSL_PARAM_BLD_push_BN OSSL_PARAM_BLD_push_BN_pad OSSL_PARAM_BLD_push_double OSSL_PARAM_BLD_push_int OSSL_PARAM_BLD_push_int32 OSSL_PARAM_BLD_push_int64 OSSL_PARAM_BLD_push_long OSSL_PARAM_BLD_push_octet_ptr OSSL_PARAM_BLD_push_octet_string OSSL_PARAM_BLD_push_size_t OSSL_PARAM_BLD_push_time_t OSSL_PARAM_BLD_push_uint OSSL_PARAM_BLD_push_uint32 OSSL_PARAM_BLD_push_uint64 OSSL_PARAM_BLD_push_ulong OSSL_PARAM_BLD_push_utf8_ptr OSSL_PARAM_BLD_push_utf8_string OSSL_PARAM_BLD_to_param OSSL_PARAM_allocate_from_text OSSL_PARAM_construct_BN OSSL_PARAM_construct_double OSSL_PARAM_construct_end OSSL_PARAM_construct_int OSSL_PARAM_construct_int32 OSSL_PARAM_construct_int64 OSSL_PARAM_construct_long OSSL_PARAM_construct_octet_ptr OSSL_PARAM_construct_octet_string OSSL_PARAM_construct_size_t OSSL_PARAM_construct_time_t OSSL_PARAM_construct_uint OSSL_PARAM_construct_uint32 OSSL_PARAM_construct_uint64 OSSL_PARAM_construct_ulong OSSL_PARAM_construct_utf8_ptr OSSL_PARAM_construct_utf8_string OSSL_PARAM_dup OSSL_PARAM_free OSSL_PARAM_get_BN OSSL_PARAM_get_double OSSL_PARAM_get_int OSSL_PARAM_get_int32 OSSL_PARAM_get_int64 OSSL_PARAM_get_long OSSL_PARAM_get_octet_ptr OSSL_PARAM_get_octet_string OSSL_PARAM_get_octet_string_ptr OSSL_PARAM_get_size_t OSSL_PARAM_get_time_t OSSL_PARAM_get_uint OSSL_PARAM_get_uint32 OSSL_PARAM_get_uint64 OSSL_PARAM_get_ulong OSSL_PARAM_get_utf8_ptr OSSL_PARAM_get_utf8_string OSSL_PARAM_get_utf8_string_ptr OSSL_PARAM_locate OSSL_PARAM_locate_const OSSL_PARAM_merge OSSL_PARAM_modified OSSL_PARAM_set_BN OSSL_PARAM_set_all_unmodified OSSL_PARAM_set_double OSSL_PARAM_set_int OSSL_PARAM_set_int32 OSSL_PARAM_set_int64 OSSL_PARAM_set_long OSSL_PARAM_set_octet_ptr OSSL_PARAM_set_octet_string OSSL_PARAM_set_size_t OSSL_PARAM_set_time_t OSSL_PARAM_set_uint OSSL_PARAM_set_uint32 OSSL_PARAM_set_uint64 OSSL_PARAM_set_ulong OSSL_PARAM_set_utf8_ptr OSSL_PARAM_set_utf8_string OSSL_PROVIDER_add_builtin OSSL_PROVIDER_available OSSL_PROVIDER_do_all OSSL_PROVIDER_get0_dispatch OSSL_PROVIDER_get0_name OSSL_PROVIDER_get0_provider_ctx OSSL_PROVIDER_get_capabilities OSSL_PROVIDER_get_params OSSL_PROVIDER_gettable_params OSSL_PROVIDER_load OSSL_PROVIDER_query_operation OSSL_PROVIDER_self_test OSSL_PROVIDER_set_default_search_path OSSL_PROVIDER_try_load OSSL_PROVIDER_unload OSSL_PROVIDER_unquery_operation OSSL_SELF_TEST_free OSSL_SELF_TEST_get_callback OSSL_SELF_TEST_new OSSL_SELF_TEST_onbegin OSSL_SELF_TEST_oncorrupt_byte OSSL_SELF_TEST_onend OSSL_SELF_TEST_set_callback OSSL_STORE_INFO_free OSSL_STORE_INFO_get0_CERT OSSL_STORE_INFO_get0_CRL OSSL_STORE_INFO_get0_NAME OSSL_STORE_INFO_get0_NAME_description OSSL_STORE_INFO_get0_PARAMS OSSL_STORE_INFO_get0_PKEY OSSL_STORE_INFO_get0_PUBKEY OSSL_STORE_INFO_get0_data OSSL_STORE_INFO_get1_CERT OSSL_STORE_INFO_get1_CRL OSSL_STORE_INFO_get1_NAME OSSL_STORE_INFO_get1_NAME_description OSSL_STORE_INFO_get1_PARAMS OSSL_STORE_INFO_get1_PKEY OSSL_STORE_INFO_get1_PUBKEY OSSL_STORE_INFO_get_type OSSL_STORE_INFO_new OSSL_STORE_INFO_new_CERT OSSL_STORE_INFO_new_CRL OSSL_STORE_INFO_new_NAME OSSL_STORE_INFO_new_PARAMS OSSL_STORE_INFO_new_PKEY OSSL_STORE_INFO_new_PUBKEY OSSL_STORE_INFO_set0_NAME_description OSSL_STORE_INFO_type_string OSSL_STORE_LOADER_do_all_provided OSSL_STORE_LOADER_fetch OSSL_STORE_LOADER_free OSSL_STORE_LOADER_get0_description OSSL_STORE_LOADER_get0_engine OSSL_STORE_LOADER_get0_properties OSSL_STORE_LOADER_get0_provider OSSL_STORE_LOADER_get0_scheme OSSL_STORE_LOADER_is_a OSSL_STORE_LOADER_names_do_all OSSL_STORE_LOADER_new OSSL_STORE_LOADER_set_attach OSSL_STORE_LOADER_set_close OSSL_STORE_LOADER_set_ctrl OSSL_STORE_LOADER_set_eof OSSL_STORE_LOADER_set_error OSSL_STORE_LOADER_set_expect OSSL_STORE_LOADER_set_find OSSL_STORE_LOADER_set_load OSSL_STORE_LOADER_set_open OSSL_STORE_LOADER_set_open_ex OSSL_STORE_LOADER_up_ref OSSL_STORE_SEARCH_by_alias OSSL_STORE_SEARCH_by_issuer_serial OSSL_STORE_SEARCH_by_key_fingerprint OSSL_STORE_SEARCH_by_name OSSL_STORE_SEARCH_free OSSL_STORE_SEARCH_get0_bytes OSSL_STORE_SEARCH_get0_digest OSSL_STORE_SEARCH_get0_name OSSL_STORE_SEARCH_get0_serial OSSL_STORE_SEARCH_get0_string OSSL_STORE_SEARCH_get_type OSSL_STORE_attach OSSL_STORE_close OSSL_STORE_ctrl OSSL_STORE_do_all_loaders OSSL_STORE_eof OSSL_STORE_error OSSL_STORE_expect OSSL_STORE_find OSSL_STORE_load OSSL_STORE_open OSSL_STORE_open_ex OSSL_STORE_register_loader OSSL_STORE_supports_search OSSL_STORE_unregister_loader OSSL_STORE_vctrl OSSL_parse_url OSSL_trace_begin OSSL_trace_enabled OSSL_trace_end OSSL_trace_get_category_name OSSL_trace_get_category_num OSSL_trace_set_callback OSSL_trace_set_channel OSSL_trace_set_prefix OSSL_trace_set_suffix OTHERNAME_cmp OTHERNAME_free OTHERNAME_it OTHERNAME_new OpenSSL_version OpenSSL_version_num PBE2PARAM_free PBE2PARAM_it PBE2PARAM_new PBEPARAM_free PBEPARAM_it PBEPARAM_new PBKDF2PARAM_free PBKDF2PARAM_it PBKDF2PARAM_new PEM_ASN1_read PEM_ASN1_read_bio PEM_ASN1_write PEM_ASN1_write_bio PEM_SignFinal PEM_SignInit PEM_SignUpdate PEM_X509_INFO_read PEM_X509_INFO_read_bio PEM_X509_INFO_read_bio_ex PEM_X509_INFO_read_ex PEM_X509_INFO_write_bio PEM_bytes_read_bio PEM_bytes_read_bio_secmem PEM_def_callback PEM_dek_info PEM_do_header PEM_get_EVP_CIPHER_INFO PEM_proc_type PEM_read PEM_read_CMS PEM_read_DHparams PEM_read_DSAPrivateKey PEM_read_DSA_PUBKEY PEM_read_DSAparams PEM_read_ECPKParameters PEM_read_ECPrivateKey PEM_read_EC_PUBKEY PEM_read_NETSCAPE_CERT_SEQUENCE PEM_read_PKCS7 PEM_read_PKCS8 PEM_read_PKCS8_PRIV_KEY_INFO PEM_read_PUBKEY PEM_read_PUBKEY_ex PEM_read_PrivateKey PEM_read_PrivateKey_ex PEM_read_RSAPrivateKey PEM_read_RSAPublicKey PEM_read_RSA_PUBKEY PEM_read_X509 PEM_read_X509_AUX PEM_read_X509_CRL PEM_read_X509_PUBKEY PEM_read_X509_REQ PEM_read_bio PEM_read_bio_CMS PEM_read_bio_DHparams PEM_read_bio_DSAPrivateKey PEM_read_bio_DSA_PUBKEY PEM_read_bio_DSAparams PEM_read_bio_ECPKParameters PEM_read_bio_ECPrivateKey PEM_read_bio_EC_PUBKEY PEM_read_bio_NETSCAPE_CERT_SEQUENCE PEM_read_bio_PKCS7 PEM_read_bio_PKCS8 PEM_read_bio_PKCS8_PRIV_KEY_INFO PEM_read_bio_PUBKEY PEM_read_bio_PUBKEY_ex PEM_read_bio_Parameters PEM_read_bio_Parameters_ex PEM_read_bio_PrivateKey PEM_read_bio_PrivateKey_ex PEM_read_bio_RSAPrivateKey PEM_read_bio_RSAPublicKey PEM_read_bio_RSA_PUBKEY PEM_read_bio_X509 PEM_read_bio_X509_AUX PEM_read_bio_X509_CRL PEM_read_bio_X509_PUBKEY PEM_read_bio_X509_REQ PEM_read_bio_ex PEM_write PEM_write_CMS PEM_write_DHparams PEM_write_DHxparams PEM_write_DSAPrivateKey PEM_write_DSA_PUBKEY PEM_write_DSAparams PEM_write_ECPKParameters PEM_write_ECPrivateKey PEM_write_EC_PUBKEY PEM_write_NETSCAPE_CERT_SEQUENCE PEM_write_PKCS7 PEM_write_PKCS8 PEM_write_PKCS8PrivateKey PEM_write_PKCS8PrivateKey_nid PEM_write_PKCS8_PRIV_KEY_INFO PEM_write_PUBKEY PEM_write_PUBKEY_ex PEM_write_PrivateKey PEM_write_PrivateKey_ex PEM_write_RSAPrivateKey PEM_write_RSAPublicKey PEM_write_RSA_PUBKEY PEM_write_X509 PEM_write_X509_AUX PEM_write_X509_CRL PEM_write_X509_PUBKEY PEM_write_X509_REQ PEM_write_X509_REQ_NEW PEM_write_bio PEM_write_bio_ASN1_stream PEM_write_bio_CMS PEM_write_bio_CMS_stream PEM_write_bio_DHparams PEM_write_bio_DHxparams PEM_write_bio_DSAPrivateKey PEM_write_bio_DSA_PUBKEY PEM_write_bio_DSAparams PEM_write_bio_ECPKParameters PEM_write_bio_ECPrivateKey PEM_write_bio_EC_PUBKEY PEM_write_bio_NETSCAPE_CERT_SEQUENCE PEM_write_bio_PKCS7 PEM_write_bio_PKCS7_stream PEM_write_bio_PKCS8 PEM_write_bio_PKCS8PrivateKey PEM_write_bio_PKCS8PrivateKey_nid PEM_write_bio_PKCS8_PRIV_KEY_INFO PEM_write_bio_PUBKEY PEM_write_bio_PUBKEY_ex PEM_write_bio_Parameters PEM_write_bio_PrivateKey PEM_write_bio_PrivateKey_ex PEM_write_bio_PrivateKey_traditional PEM_write_bio_RSAPrivateKey PEM_write_bio_RSAPublicKey PEM_write_bio_RSA_PUBKEY PEM_write_bio_X509 PEM_write_bio_X509_AUX PEM_write_bio_X509_CRL PEM_write_bio_X509_PUBKEY PEM_write_bio_X509_REQ PEM_write_bio_X509_REQ_NEW PKCS12_AUTHSAFES_it PKCS12_BAGS_free PKCS12_BAGS_it PKCS12_BAGS_new PKCS12_MAC_DATA_free PKCS12_MAC_DATA_it PKCS12_MAC_DATA_new PKCS12_PBE_add PKCS12_PBE_keyivgen PKCS12_PBE_keyivgen_ex PKCS12_SAFEBAGS_it PKCS12_SAFEBAG_create0_p8inf PKCS12_SAFEBAG_create0_pkcs8 PKCS12_SAFEBAG_create_cert PKCS12_SAFEBAG_create_crl PKCS12_SAFEBAG_create_pkcs8_encrypt PKCS12_SAFEBAG_create_pkcs8_encrypt_ex PKCS12_SAFEBAG_create_secret PKCS12_SAFEBAG_free PKCS12_SAFEBAG_get0_attr PKCS12_SAFEBAG_get0_attrs PKCS12_SAFEBAG_get0_bag_obj PKCS12_SAFEBAG_get0_bag_type PKCS12_SAFEBAG_get0_p8inf PKCS12_SAFEBAG_get0_pkcs8 PKCS12_SAFEBAG_get0_safes PKCS12_SAFEBAG_get0_type PKCS12_SAFEBAG_get1_cert PKCS12_SAFEBAG_get1_crl PKCS12_SAFEBAG_get_bag_nid PKCS12_SAFEBAG_get_nid PKCS12_SAFEBAG_it PKCS12_SAFEBAG_new PKCS12_add1_attr_by_NID PKCS12_add1_attr_by_txt PKCS12_add_CSPName_asc PKCS12_add_cert PKCS12_add_friendlyname_asc PKCS12_add_friendlyname_uni PKCS12_add_friendlyname_utf8 PKCS12_add_key PKCS12_add_key_ex PKCS12_add_localkeyid PKCS12_add_safe PKCS12_add_safe_ex PKCS12_add_safes PKCS12_add_safes_ex PKCS12_add_secret PKCS12_create PKCS12_create_ex PKCS12_decrypt_skey PKCS12_decrypt_skey_ex PKCS12_free PKCS12_gen_mac PKCS12_get0_mac PKCS12_get_attr PKCS12_get_attr_gen PKCS12_get_friendlyname PKCS12_init PKCS12_init_ex PKCS12_it PKCS12_item_decrypt_d2i PKCS12_item_decrypt_d2i_ex PKCS12_item_i2d_encrypt PKCS12_item_i2d_encrypt_ex PKCS12_item_pack_safebag PKCS12_key_gen_asc PKCS12_key_gen_asc_ex PKCS12_key_gen_uni PKCS12_key_gen_uni_ex PKCS12_key_gen_utf8 PKCS12_key_gen_utf8_ex PKCS12_mac_present PKCS12_new PKCS12_newpass PKCS12_pack_authsafes PKCS12_pack_p7data PKCS12_pack_p7encdata PKCS12_pack_p7encdata_ex PKCS12_parse PKCS12_pbe_crypt PKCS12_pbe_crypt_ex PKCS12_set_mac PKCS12_setup_mac PKCS12_unpack_authsafes PKCS12_unpack_p7data PKCS12_unpack_p7encdata PKCS12_verify_mac PKCS1_MGF1 PKCS5_PBE_add PKCS5_PBE_keyivgen PKCS5_PBE_keyivgen_ex PKCS5_PBKDF2_HMAC PKCS5_PBKDF2_HMAC_SHA1 PKCS5_pbe2_set PKCS5_pbe2_set_iv PKCS5_pbe2_set_iv_ex PKCS5_pbe2_set_scrypt PKCS5_pbe_set PKCS5_pbe_set0_algor PKCS5_pbe_set0_algor_ex PKCS5_pbe_set_ex PKCS5_pbkdf2_set PKCS5_pbkdf2_set_ex PKCS5_v2_PBE_keyivgen PKCS5_v2_PBE_keyivgen_ex PKCS5_v2_scrypt_keyivgen PKCS5_v2_scrypt_keyivgen_ex PKCS7_ATTR_SIGN_it PKCS7_ATTR_VERIFY_it PKCS7_DIGEST_free PKCS7_DIGEST_it PKCS7_DIGEST_new PKCS7_ENCRYPT_free PKCS7_ENCRYPT_it PKCS7_ENCRYPT_new PKCS7_ENC_CONTENT_free PKCS7_ENC_CONTENT_it PKCS7_ENC_CONTENT_new PKCS7_ENVELOPE_free PKCS7_ENVELOPE_it PKCS7_ENVELOPE_new PKCS7_ISSUER_AND_SERIAL_digest PKCS7_ISSUER_AND_SERIAL_free PKCS7_ISSUER_AND_SERIAL_it PKCS7_ISSUER_AND_SERIAL_new PKCS7_RECIP_INFO_free PKCS7_RECIP_INFO_get0_alg PKCS7_RECIP_INFO_it PKCS7_RECIP_INFO_new PKCS7_RECIP_INFO_set PKCS7_SIGNED_free PKCS7_SIGNED_it PKCS7_SIGNED_new PKCS7_SIGNER_INFO_free PKCS7_SIGNER_INFO_get0_algs PKCS7_SIGNER_INFO_it PKCS7_SIGNER_INFO_new PKCS7_SIGNER_INFO_set PKCS7_SIGNER_INFO_sign PKCS7_SIGN_ENVELOPE_free PKCS7_SIGN_ENVELOPE_it PKCS7_SIGN_ENVELOPE_new PKCS7_add0_attrib_signing_time PKCS7_add1_attrib_digest PKCS7_add_attrib_content_type PKCS7_add_attrib_smimecap PKCS7_add_attribute PKCS7_add_certificate PKCS7_add_crl PKCS7_add_recipient PKCS7_add_recipient_info PKCS7_add_signature PKCS7_add_signed_attribute PKCS7_add_signer PKCS7_cert_from_signer_info PKCS7_content_new PKCS7_ctrl PKCS7_dataDecode PKCS7_dataFinal PKCS7_dataInit PKCS7_dataVerify PKCS7_decrypt PKCS7_digest_from_attributes PKCS7_dup PKCS7_encrypt PKCS7_encrypt_ex PKCS7_final PKCS7_free PKCS7_get0_signers PKCS7_get_attribute PKCS7_get_issuer_and_serial PKCS7_get_octet_string PKCS7_get_signed_attribute PKCS7_get_signer_info PKCS7_get_smimecap PKCS7_it PKCS7_new PKCS7_new_ex PKCS7_print_ctx PKCS7_set0_type_other PKCS7_set_attributes PKCS7_set_cipher PKCS7_set_content PKCS7_set_digest PKCS7_set_signed_attributes PKCS7_set_type PKCS7_sign PKCS7_sign_add_signer PKCS7_sign_ex PKCS7_signatureVerify PKCS7_simple_smimecap PKCS7_stream PKCS7_to_TS_TST_INFO PKCS7_type_is_other PKCS7_verify PKCS8_PRIV_KEY_INFO_free PKCS8_PRIV_KEY_INFO_it PKCS8_PRIV_KEY_INFO_new PKCS8_add_keyusage PKCS8_decrypt PKCS8_decrypt_ex PKCS8_encrypt PKCS8_encrypt_ex PKCS8_get_attr PKCS8_pkey_add1_attr PKCS8_pkey_add1_attr_by_NID PKCS8_pkey_add1_attr_by_OBJ PKCS8_pkey_get0 PKCS8_pkey_get0_attrs PKCS8_pkey_set0 PKCS8_set0_pbe PKCS8_set0_pbe_ex PKEY_USAGE_PERIOD_free PKEY_USAGE_PERIOD_it PKEY_USAGE_PERIOD_new POLICYINFO_free POLICYINFO_it POLICYINFO_new POLICYQUALINFO_free POLICYQUALINFO_it POLICYQUALINFO_new POLICY_CONSTRAINTS_free POLICY_CONSTRAINTS_it POLICY_CONSTRAINTS_new POLICY_MAPPINGS_it POLICY_MAPPING_free POLICY_MAPPING_it POLICY_MAPPING_new PROFESSION_INFO_free PROFESSION_INFO_get0_addProfessionInfo PROFESSION_INFO_get0_namingAuthority PROFESSION_INFO_get0_professionItems PROFESSION_INFO_get0_professionOIDs PROFESSION_INFO_get0_registrationNumber PROFESSION_INFO_it PROFESSION_INFO_new PROFESSION_INFO_set0_addProfessionInfo PROFESSION_INFO_set0_namingAuthority PROFESSION_INFO_set0_professionItems PROFESSION_INFO_set0_professionOIDs PROFESSION_INFO_set0_registrationNumber PROXY_CERT_INFO_EXTENSION_free PROXY_CERT_INFO_EXTENSION_it PROXY_CERT_INFO_EXTENSION_new PROXY_POLICY_free PROXY_POLICY_it PROXY_POLICY_new RAND_OpenSSL RAND_add RAND_bytes RAND_bytes_ex RAND_event RAND_file_name RAND_get0_primary RAND_get0_private RAND_get0_public RAND_get_rand_method RAND_keep_random_devices_open RAND_load_file RAND_poll RAND_priv_bytes RAND_priv_bytes_ex RAND_pseudo_bytes RAND_screen RAND_seed RAND_set0_private RAND_set0_public RAND_set_DRBG_type RAND_set_rand_engine RAND_set_rand_method RAND_set_seed_source_type RAND_status RAND_write_file RC2_cbc_encrypt RC2_cfb64_encrypt RC2_decrypt RC2_ecb_encrypt RC2_encrypt RC2_ofb64_encrypt RC2_set_key RC4 RC4_options RC4_set_key RIPEMD160 RIPEMD160_Final RIPEMD160_Init RIPEMD160_Transform RIPEMD160_Update RSAPrivateKey_dup RSAPrivateKey_it RSAPublicKey_dup RSAPublicKey_it RSA_OAEP_PARAMS_free RSA_OAEP_PARAMS_it RSA_OAEP_PARAMS_new RSA_PKCS1_OpenSSL RSA_PSS_PARAMS_dup RSA_PSS_PARAMS_free RSA_PSS_PARAMS_it RSA_PSS_PARAMS_new RSA_X931_derive_ex RSA_X931_generate_key_ex RSA_X931_hash_id RSA_bits RSA_blinding_off RSA_blinding_on RSA_check_key RSA_check_key_ex RSA_clear_flags RSA_flags RSA_free RSA_generate_key RSA_generate_key_ex RSA_generate_multi_prime_key RSA_get0_crt_params RSA_get0_d RSA_get0_dmp1 RSA_get0_dmq1 RSA_get0_e RSA_get0_engine RSA_get0_factors RSA_get0_iqmp RSA_get0_key RSA_get0_multi_prime_crt_params RSA_get0_multi_prime_factors RSA_get0_n RSA_get0_p RSA_get0_pss_params RSA_get0_q RSA_get_default_method RSA_get_ex_data RSA_get_method RSA_get_multi_prime_extra_count RSA_get_version RSA_meth_dup RSA_meth_free RSA_meth_get0_app_data RSA_meth_get0_name RSA_meth_get_bn_mod_exp RSA_meth_get_finish RSA_meth_get_flags RSA_meth_get_init RSA_meth_get_keygen RSA_meth_get_mod_exp RSA_meth_get_multi_prime_keygen RSA_meth_get_priv_dec RSA_meth_get_priv_enc RSA_meth_get_pub_dec RSA_meth_get_pub_enc RSA_meth_get_sign RSA_meth_get_verify RSA_meth_new RSA_meth_set0_app_data RSA_meth_set1_name RSA_meth_set_bn_mod_exp RSA_meth_set_finish RSA_meth_set_flags RSA_meth_set_init RSA_meth_set_keygen RSA_meth_set_mod_exp RSA_meth_set_multi_prime_keygen RSA_meth_set_priv_dec RSA_meth_set_priv_enc RSA_meth_set_pub_dec RSA_meth_set_pub_enc RSA_meth_set_sign RSA_meth_set_verify RSA_new RSA_new_method RSA_null_method RSA_padding_add_PKCS1_OAEP RSA_padding_add_PKCS1_OAEP_mgf1 RSA_padding_add_PKCS1_PSS RSA_padding_add_PKCS1_PSS_mgf1 RSA_padding_add_PKCS1_type_1 RSA_padding_add_PKCS1_type_2 RSA_padding_add_X931 RSA_padding_add_none RSA_padding_check_PKCS1_OAEP RSA_padding_check_PKCS1_OAEP_mgf1 RSA_padding_check_PKCS1_type_1 RSA_padding_check_PKCS1_type_2 RSA_padding_check_X931 RSA_padding_check_none RSA_pkey_ctx_ctrl RSA_print RSA_print_fp RSA_private_decrypt RSA_private_encrypt RSA_public_decrypt RSA_public_encrypt RSA_security_bits RSA_set0_crt_params RSA_set0_factors RSA_set0_key RSA_set0_multi_prime_params RSA_set_default_method RSA_set_ex_data RSA_set_flags RSA_set_method RSA_setup_blinding RSA_sign RSA_sign_ASN1_OCTET_STRING RSA_size RSA_test_flags RSA_up_ref RSA_verify RSA_verify_ASN1_OCTET_STRING RSA_verify_PKCS1_PSS RSA_verify_PKCS1_PSS_mgf1 SCRYPT_PARAMS_free SCRYPT_PARAMS_it SCRYPT_PARAMS_new SCT_LIST_free SCT_LIST_print SCT_LIST_validate SCT_free SCT_get0_extensions SCT_get0_log_id SCT_get0_signature SCT_get_log_entry_type SCT_get_signature_nid SCT_get_source SCT_get_timestamp SCT_get_validation_status SCT_get_version SCT_new SCT_new_from_base64 SCT_print SCT_set0_extensions SCT_set0_log_id SCT_set0_signature SCT_set1_extensions SCT_set1_log_id SCT_set1_signature SCT_set_log_entry_type SCT_set_signature_nid SCT_set_source SCT_set_timestamp SCT_set_version SCT_validate SCT_validation_status_string SEED_cbc_encrypt SEED_cfb128_encrypt SEED_decrypt SEED_ecb_encrypt SEED_encrypt SEED_ofb128_encrypt SEED_set_key SHA1 SHA1_Final SHA1_Init SHA1_Transform SHA1_Update SHA224 SHA224_Final SHA224_Init SHA224_Update SHA256 SHA256_Final SHA256_Init SHA256_Transform SHA256_Update SHA384 SHA384_Final SHA384_Init SHA384_Update SHA512 SHA512_Final SHA512_Init SHA512_Transform SHA512_Update SMIME_crlf_copy SMIME_read_ASN1 SMIME_read_ASN1_ex SMIME_read_CMS SMIME_read_CMS_ex SMIME_read_PKCS7 SMIME_read_PKCS7_ex SMIME_text SMIME_write_ASN1 SMIME_write_ASN1_ex SMIME_write_CMS SMIME_write_PKCS7 SRP_Calc_A SRP_Calc_B SRP_Calc_B_ex SRP_Calc_client_key SRP_Calc_client_key_ex SRP_Calc_server_key SRP_Calc_u SRP_Calc_u_ex SRP_Calc_x SRP_Calc_x_ex SRP_VBASE_add0_user SRP_VBASE_free SRP_VBASE_get1_by_user SRP_VBASE_get_by_user SRP_VBASE_init SRP_VBASE_new SRP_Verify_A_mod_N SRP_Verify_B_mod_N SRP_check_known_gN_param SRP_create_verifier SRP_create_verifier_BN SRP_create_verifier_BN_ex SRP_create_verifier_ex SRP_get_default_gN SRP_user_pwd_free SRP_user_pwd_new SRP_user_pwd_set0_sv SRP_user_pwd_set1_ids SRP_user_pwd_set_gN SXNETID_free SXNETID_it SXNETID_new SXNET_add_id_INTEGER SXNET_add_id_asc SXNET_add_id_ulong SXNET_free SXNET_get_id_INTEGER SXNET_get_id_asc SXNET_get_id_ulong SXNET_it SXNET_new TLS_FEATURE_free TLS_FEATURE_new TS_ACCURACY_dup TS_ACCURACY_free TS_ACCURACY_get_micros TS_ACCURACY_get_millis TS_ACCURACY_get_seconds TS_ACCURACY_new TS_ACCURACY_set_micros TS_ACCURACY_set_millis TS_ACCURACY_set_seconds TS_ASN1_INTEGER_print_bio TS_CONF_get_tsa_section TS_CONF_load_cert TS_CONF_load_certs TS_CONF_load_key TS_CONF_set_accuracy TS_CONF_set_certs TS_CONF_set_clock_precision_digits TS_CONF_set_crypto_device TS_CONF_set_def_policy TS_CONF_set_default_engine TS_CONF_set_digests TS_CONF_set_ess_cert_id_chain TS_CONF_set_ess_cert_id_digest TS_CONF_set_ordering TS_CONF_set_policies TS_CONF_set_serial TS_CONF_set_signer_cert TS_CONF_set_signer_digest TS_CONF_set_signer_key TS_CONF_set_tsa_name TS_MSG_IMPRINT_dup TS_MSG_IMPRINT_free TS_MSG_IMPRINT_get_algo TS_MSG_IMPRINT_get_msg TS_MSG_IMPRINT_new TS_MSG_IMPRINT_print_bio TS_MSG_IMPRINT_set_algo TS_MSG_IMPRINT_set_msg TS_OBJ_print_bio TS_REQ_add_ext TS_REQ_delete_ext TS_REQ_dup TS_REQ_ext_free TS_REQ_free TS_REQ_get_cert_req TS_REQ_get_ext TS_REQ_get_ext_by_NID TS_REQ_get_ext_by_OBJ TS_REQ_get_ext_by_critical TS_REQ_get_ext_count TS_REQ_get_ext_d2i TS_REQ_get_exts TS_REQ_get_msg_imprint TS_REQ_get_nonce TS_REQ_get_policy_id TS_REQ_get_version TS_REQ_new TS_REQ_print_bio TS_REQ_set_cert_req TS_REQ_set_msg_imprint TS_REQ_set_nonce TS_REQ_set_policy_id TS_REQ_set_version TS_REQ_to_TS_VERIFY_CTX TS_RESP_CTX_add_failure_info TS_RESP_CTX_add_flags TS_RESP_CTX_add_md TS_RESP_CTX_add_policy TS_RESP_CTX_free TS_RESP_CTX_get_request TS_RESP_CTX_get_tst_info TS_RESP_CTX_new TS_RESP_CTX_new_ex TS_RESP_CTX_set_accuracy TS_RESP_CTX_set_certs TS_RESP_CTX_set_clock_precision_digits TS_RESP_CTX_set_def_policy TS_RESP_CTX_set_ess_cert_id_digest TS_RESP_CTX_set_extension_cb TS_RESP_CTX_set_serial_cb TS_RESP_CTX_set_signer_cert TS_RESP_CTX_set_signer_digest TS_RESP_CTX_set_signer_key TS_RESP_CTX_set_status_info TS_RESP_CTX_set_status_info_cond TS_RESP_CTX_set_time_cb TS_RESP_create_response TS_RESP_dup TS_RESP_free TS_RESP_get_status_info TS_RESP_get_token TS_RESP_get_tst_info TS_RESP_new TS_RESP_print_bio TS_RESP_set_status_info TS_RESP_set_tst_info TS_RESP_verify_response TS_RESP_verify_signature TS_RESP_verify_token TS_STATUS_INFO_dup TS_STATUS_INFO_free TS_STATUS_INFO_get0_failure_info TS_STATUS_INFO_get0_status TS_STATUS_INFO_get0_text TS_STATUS_INFO_new TS_STATUS_INFO_print_bio TS_STATUS_INFO_set_status TS_TST_INFO_add_ext TS_TST_INFO_delete_ext TS_TST_INFO_dup TS_TST_INFO_ext_free TS_TST_INFO_free TS_TST_INFO_get_accuracy TS_TST_INFO_get_ext TS_TST_INFO_get_ext_by_NID TS_TST_INFO_get_ext_by_OBJ TS_TST_INFO_get_ext_by_critical TS_TST_INFO_get_ext_count TS_TST_INFO_get_ext_d2i TS_TST_INFO_get_exts TS_TST_INFO_get_msg_imprint TS_TST_INFO_get_nonce TS_TST_INFO_get_ordering TS_TST_INFO_get_policy_id TS_TST_INFO_get_serial TS_TST_INFO_get_time TS_TST_INFO_get_tsa TS_TST_INFO_get_version TS_TST_INFO_new TS_TST_INFO_print_bio TS_TST_INFO_set_accuracy TS_TST_INFO_set_msg_imprint TS_TST_INFO_set_nonce TS_TST_INFO_set_ordering TS_TST_INFO_set_policy_id TS_TST_INFO_set_serial TS_TST_INFO_set_time TS_TST_INFO_set_tsa TS_TST_INFO_set_version TS_VERIFY_CTX_add_flags TS_VERIFY_CTX_cleanup TS_VERIFY_CTX_free TS_VERIFY_CTX_init TS_VERIFY_CTX_new TS_VERIFY_CTX_set_certs TS_VERIFY_CTX_set_data TS_VERIFY_CTX_set_flags TS_VERIFY_CTX_set_imprint TS_VERIFY_CTX_set_store TS_X509_ALGOR_print_bio TS_ext_print_bio TXT_DB_create_index TXT_DB_free TXT_DB_get_by_index TXT_DB_insert TXT_DB_read TXT_DB_write UINT32_it UINT64_it UI_OpenSSL UI_UTIL_read_pw UI_UTIL_read_pw_string UI_UTIL_wrap_read_pem_callback UI_add_error_string UI_add_info_string UI_add_input_boolean UI_add_input_string UI_add_user_data UI_add_verify_string UI_construct_prompt UI_create_method UI_ctrl UI_destroy_method UI_dup_error_string UI_dup_info_string UI_dup_input_boolean UI_dup_input_string UI_dup_user_data UI_dup_verify_string UI_free UI_get0_action_string UI_get0_output_string UI_get0_result UI_get0_result_string UI_get0_test_string UI_get0_user_data UI_get_default_method UI_get_ex_data UI_get_input_flags UI_get_method UI_get_result_length UI_get_result_maxsize UI_get_result_minsize UI_get_result_string_length UI_get_string_type UI_method_get_closer UI_method_get_data_destructor UI_method_get_data_duplicator UI_method_get_ex_data UI_method_get_flusher UI_method_get_opener UI_method_get_prompt_constructor UI_method_get_reader UI_method_get_writer UI_method_set_closer UI_method_set_data_duplicator UI_method_set_ex_data UI_method_set_flusher UI_method_set_opener UI_method_set_prompt_constructor UI_method_set_reader UI_method_set_writer UI_new UI_new_method UI_null UI_process UI_set_default_method UI_set_ex_data UI_set_method UI_set_result UI_set_result_ex USERNOTICE_free USERNOTICE_it USERNOTICE_new UTF8_getc UTF8_putc WHIRLPOOL WHIRLPOOL_BitUpdate WHIRLPOOL_Final WHIRLPOOL_Init WHIRLPOOL_Update X509V3_EXT_CRL_add_conf X509V3_EXT_CRL_add_nconf X509V3_EXT_REQ_add_conf X509V3_EXT_REQ_add_nconf X509V3_EXT_add X509V3_EXT_add_alias X509V3_EXT_add_conf X509V3_EXT_add_list X509V3_EXT_add_nconf X509V3_EXT_add_nconf_sk X509V3_EXT_cleanup X509V3_EXT_conf X509V3_EXT_conf_nid X509V3_EXT_d2i X509V3_EXT_get X509V3_EXT_get_nid X509V3_EXT_i2d X509V3_EXT_nconf X509V3_EXT_nconf_nid X509V3_EXT_print X509V3_EXT_print_fp X509V3_EXT_val_prn X509V3_NAME_from_section X509V3_add1_i2d X509V3_add_standard_extensions X509V3_add_value X509V3_add_value_bool X509V3_add_value_bool_nf X509V3_add_value_int X509V3_add_value_uchar X509V3_conf_free X509V3_extensions_print X509V3_get_d2i X509V3_get_section X509V3_get_string X509V3_get_value_bool X509V3_get_value_int X509V3_parse_list X509V3_section_free X509V3_set_conf_lhash X509V3_set_ctx X509V3_set_issuer_pkey X509V3_set_nconf X509V3_string_free X509_ALGORS_it X509_ALGOR_cmp X509_ALGOR_copy X509_ALGOR_dup X509_ALGOR_free X509_ALGOR_get0 X509_ALGOR_it X509_ALGOR_new X509_ALGOR_set0 X509_ALGOR_set_md X509_ATTRIBUTE_count X509_ATTRIBUTE_create X509_ATTRIBUTE_create_by_NID X509_ATTRIBUTE_create_by_OBJ X509_ATTRIBUTE_create_by_txt X509_ATTRIBUTE_dup X509_ATTRIBUTE_free X509_ATTRIBUTE_get0_data X509_ATTRIBUTE_get0_object X509_ATTRIBUTE_get0_type X509_ATTRIBUTE_it X509_ATTRIBUTE_new X509_ATTRIBUTE_set1_data X509_ATTRIBUTE_set1_object X509_CERT_AUX_free X509_CERT_AUX_it X509_CERT_AUX_new X509_CINF_free X509_CINF_it X509_CINF_new X509_CRL_INFO_free X509_CRL_INFO_it X509_CRL_INFO_new X509_CRL_METHOD_free X509_CRL_METHOD_new X509_CRL_add0_revoked X509_CRL_add1_ext_i2d X509_CRL_add_ext X509_CRL_check_suiteb X509_CRL_cmp X509_CRL_delete_ext X509_CRL_diff X509_CRL_digest X509_CRL_dup X509_CRL_free X509_CRL_get0_by_cert X509_CRL_get0_by_serial X509_CRL_get0_extensions X509_CRL_get0_lastUpdate X509_CRL_get0_nextUpdate X509_CRL_get0_signature X509_CRL_get_REVOKED X509_CRL_get_ext X509_CRL_get_ext_by_NID X509_CRL_get_ext_by_OBJ X509_CRL_get_ext_by_critical X509_CRL_get_ext_count X509_CRL_get_ext_d2i X509_CRL_get_issuer X509_CRL_get_lastUpdate X509_CRL_get_meth_data X509_CRL_get_nextUpdate X509_CRL_get_signature_nid X509_CRL_get_version X509_CRL_it X509_CRL_load_http X509_CRL_match X509_CRL_new X509_CRL_new_ex X509_CRL_print X509_CRL_print_ex X509_CRL_print_fp X509_CRL_set1_lastUpdate X509_CRL_set1_nextUpdate X509_CRL_set_default_method X509_CRL_set_issuer_name X509_CRL_set_meth_data X509_CRL_set_version X509_CRL_sign X509_CRL_sign_ctx X509_CRL_sort X509_CRL_up_ref X509_CRL_verify X509_EXTENSIONS_it X509_EXTENSION_create_by_NID X509_EXTENSION_create_by_OBJ X509_EXTENSION_dup X509_EXTENSION_free X509_EXTENSION_get_critical X509_EXTENSION_get_data X509_EXTENSION_get_object X509_EXTENSION_it X509_EXTENSION_new X509_EXTENSION_set_critical X509_EXTENSION_set_data X509_EXTENSION_set_object X509_INFO_free X509_INFO_new X509_LOOKUP_by_alias X509_LOOKUP_by_fingerprint X509_LOOKUP_by_issuer_serial X509_LOOKUP_by_subject X509_LOOKUP_by_subject_ex X509_LOOKUP_ctrl X509_LOOKUP_ctrl_ex X509_LOOKUP_file X509_LOOKUP_free X509_LOOKUP_get_method_data X509_LOOKUP_get_store X509_LOOKUP_hash_dir X509_LOOKUP_init X509_LOOKUP_meth_free X509_LOOKUP_meth_get_ctrl X509_LOOKUP_meth_get_free X509_LOOKUP_meth_get_get_by_alias X509_LOOKUP_meth_get_get_by_fingerprint X509_LOOKUP_meth_get_get_by_issuer_serial X509_LOOKUP_meth_get_get_by_subject X509_LOOKUP_meth_get_init X509_LOOKUP_meth_get_new_item X509_LOOKUP_meth_get_shutdown X509_LOOKUP_meth_new X509_LOOKUP_meth_set_ctrl X509_LOOKUP_meth_set_free X509_LOOKUP_meth_set_get_by_alias X509_LOOKUP_meth_set_get_by_fingerprint X509_LOOKUP_meth_set_get_by_issuer_serial X509_LOOKUP_meth_set_get_by_subject X509_LOOKUP_meth_set_init X509_LOOKUP_meth_set_new_item X509_LOOKUP_meth_set_shutdown X509_LOOKUP_new X509_LOOKUP_set_method_data X509_LOOKUP_shutdown X509_LOOKUP_store X509_NAME_ENTRY_create_by_NID X509_NAME_ENTRY_create_by_OBJ X509_NAME_ENTRY_create_by_txt X509_NAME_ENTRY_dup X509_NAME_ENTRY_free X509_NAME_ENTRY_get_data X509_NAME_ENTRY_get_object X509_NAME_ENTRY_it X509_NAME_ENTRY_new X509_NAME_ENTRY_set X509_NAME_ENTRY_set_data X509_NAME_ENTRY_set_object X509_NAME_add_entry X509_NAME_add_entry_by_NID X509_NAME_add_entry_by_OBJ X509_NAME_add_entry_by_txt X509_NAME_cmp X509_NAME_delete_entry X509_NAME_digest X509_NAME_dup X509_NAME_entry_count X509_NAME_free X509_NAME_get0_der X509_NAME_get_entry X509_NAME_get_index_by_NID X509_NAME_get_index_by_OBJ X509_NAME_get_text_by_NID X509_NAME_get_text_by_OBJ X509_NAME_hash_ex X509_NAME_hash_old X509_NAME_it X509_NAME_new X509_NAME_oneline X509_NAME_print X509_NAME_print_ex X509_NAME_print_ex_fp X509_NAME_set X509_OBJECT_free X509_OBJECT_get0_X509 X509_OBJECT_get0_X509_CRL X509_OBJECT_get_type X509_OBJECT_idx_by_subject X509_OBJECT_new X509_OBJECT_retrieve_by_subject X509_OBJECT_retrieve_match X509_OBJECT_set1_X509 X509_OBJECT_set1_X509_CRL X509_OBJECT_up_ref_count X509_PKEY_free X509_PKEY_new X509_POLICY_NODE_print X509_PUBKEY_dup X509_PUBKEY_eq X509_PUBKEY_free X509_PUBKEY_get X509_PUBKEY_get0 X509_PUBKEY_get0_param X509_PUBKEY_it X509_PUBKEY_new X509_PUBKEY_new_ex X509_PUBKEY_set X509_PUBKEY_set0_param X509_PURPOSE_add X509_PURPOSE_cleanup X509_PURPOSE_get0 X509_PURPOSE_get0_name X509_PURPOSE_get0_sname X509_PURPOSE_get_by_id X509_PURPOSE_get_by_sname X509_PURPOSE_get_count X509_PURPOSE_get_id X509_PURPOSE_get_trust X509_PURPOSE_set X509_REQ_INFO_free X509_REQ_INFO_it X509_REQ_INFO_new X509_REQ_add1_attr X509_REQ_add1_attr_by_NID X509_REQ_add1_attr_by_OBJ X509_REQ_add1_attr_by_txt X509_REQ_add_extensions X509_REQ_add_extensions_nid X509_REQ_check_private_key X509_REQ_delete_attr X509_REQ_digest X509_REQ_dup X509_REQ_extension_nid X509_REQ_free X509_REQ_get0_distinguishing_id X509_REQ_get0_pubkey X509_REQ_get0_signature X509_REQ_get1_email X509_REQ_get_X509_PUBKEY X509_REQ_get_attr X509_REQ_get_attr_by_NID X509_REQ_get_attr_by_OBJ X509_REQ_get_attr_count X509_REQ_get_extension_nids X509_REQ_get_extensions X509_REQ_get_pubkey X509_REQ_get_signature_nid X509_REQ_get_subject_name X509_REQ_get_version X509_REQ_it X509_REQ_new X509_REQ_new_ex X509_REQ_print X509_REQ_print_ex X509_REQ_print_fp X509_REQ_set0_distinguishing_id X509_REQ_set0_signature X509_REQ_set1_signature_algo X509_REQ_set_extension_nids X509_REQ_set_pubkey X509_REQ_set_subject_name X509_REQ_set_version X509_REQ_sign X509_REQ_sign_ctx X509_REQ_to_X509 X509_REQ_verify X509_REQ_verify_ex X509_REVOKED_add1_ext_i2d X509_REVOKED_add_ext X509_REVOKED_delete_ext X509_REVOKED_dup X509_REVOKED_free X509_REVOKED_get0_extensions X509_REVOKED_get0_revocationDate X509_REVOKED_get0_serialNumber X509_REVOKED_get_ext X509_REVOKED_get_ext_by_NID X509_REVOKED_get_ext_by_OBJ X509_REVOKED_get_ext_by_critical X509_REVOKED_get_ext_count X509_REVOKED_get_ext_d2i X509_REVOKED_it X509_REVOKED_new X509_REVOKED_set_revocationDate X509_REVOKED_set_serialNumber X509_SIG_INFO_get X509_SIG_INFO_set X509_SIG_free X509_SIG_get0 X509_SIG_getm X509_SIG_it X509_SIG_new X509_STORE_CTX_cleanup X509_STORE_CTX_free X509_STORE_CTX_get0_cert X509_STORE_CTX_get0_chain X509_STORE_CTX_get0_current_crl X509_STORE_CTX_get0_current_issuer X509_STORE_CTX_get0_param X509_STORE_CTX_get0_parent_ctx X509_STORE_CTX_get0_policy_tree X509_STORE_CTX_get0_store X509_STORE_CTX_get0_untrusted X509_STORE_CTX_get1_certs X509_STORE_CTX_get1_chain X509_STORE_CTX_get1_crls X509_STORE_CTX_get1_issuer X509_STORE_CTX_get_by_subject X509_STORE_CTX_get_cert_crl X509_STORE_CTX_get_check_crl X509_STORE_CTX_get_check_issued X509_STORE_CTX_get_check_policy X509_STORE_CTX_get_check_revocation X509_STORE_CTX_get_cleanup X509_STORE_CTX_get_current_cert X509_STORE_CTX_get_error X509_STORE_CTX_get_error_depth X509_STORE_CTX_get_ex_data X509_STORE_CTX_get_explicit_policy X509_STORE_CTX_get_get_crl X509_STORE_CTX_get_get_issuer X509_STORE_CTX_get_lookup_certs X509_STORE_CTX_get_lookup_crls X509_STORE_CTX_get_num_untrusted X509_STORE_CTX_get_obj_by_subject X509_STORE_CTX_get_verify X509_STORE_CTX_get_verify_cb X509_STORE_CTX_init X509_STORE_CTX_new X509_STORE_CTX_new_ex X509_STORE_CTX_print_verify_cb X509_STORE_CTX_purpose_inherit X509_STORE_CTX_set0_crls X509_STORE_CTX_set0_dane X509_STORE_CTX_set0_param X509_STORE_CTX_set0_trusted_stack X509_STORE_CTX_set0_untrusted X509_STORE_CTX_set0_verified_chain X509_STORE_CTX_set_cert X509_STORE_CTX_set_current_cert X509_STORE_CTX_set_default X509_STORE_CTX_set_depth X509_STORE_CTX_set_error X509_STORE_CTX_set_error_depth X509_STORE_CTX_set_ex_data X509_STORE_CTX_set_flags X509_STORE_CTX_set_purpose X509_STORE_CTX_set_time X509_STORE_CTX_set_trust X509_STORE_CTX_set_verify X509_STORE_CTX_set_verify_cb X509_STORE_CTX_verify X509_STORE_add_cert X509_STORE_add_crl X509_STORE_add_lookup X509_STORE_free X509_STORE_get0_objects X509_STORE_get0_param X509_STORE_get1_all_certs X509_STORE_get_cert_crl X509_STORE_get_check_crl X509_STORE_get_check_issued X509_STORE_get_check_policy X509_STORE_get_check_revocation X509_STORE_get_cleanup X509_STORE_get_ex_data X509_STORE_get_get_crl X509_STORE_get_get_issuer X509_STORE_get_lookup_certs X509_STORE_get_lookup_crls X509_STORE_get_verify X509_STORE_get_verify_cb X509_STORE_load_file X509_STORE_load_file_ex X509_STORE_load_locations X509_STORE_load_locations_ex X509_STORE_load_path X509_STORE_load_store X509_STORE_load_store_ex X509_STORE_lock X509_STORE_new X509_STORE_set1_param X509_STORE_set_cert_crl X509_STORE_set_check_crl X509_STORE_set_check_issued X509_STORE_set_check_policy X509_STORE_set_check_revocation X509_STORE_set_cleanup X509_STORE_set_default_paths X509_STORE_set_default_paths_ex X509_STORE_set_depth X509_STORE_set_ex_data X509_STORE_set_flags X509_STORE_set_get_crl X509_STORE_set_get_issuer X509_STORE_set_lookup_certs X509_STORE_set_lookup_crls X509_STORE_set_purpose X509_STORE_set_trust X509_STORE_set_verify X509_STORE_set_verify_cb X509_STORE_unlock X509_STORE_up_ref X509_TRUST_add X509_TRUST_cleanup X509_TRUST_get0 X509_TRUST_get0_name X509_TRUST_get_by_id X509_TRUST_get_count X509_TRUST_get_flags X509_TRUST_get_trust X509_TRUST_set X509_TRUST_set_default X509_VAL_free X509_VAL_it X509_VAL_new X509_VERIFY_PARAM_add0_policy X509_VERIFY_PARAM_add0_table X509_VERIFY_PARAM_add1_host X509_VERIFY_PARAM_clear_flags X509_VERIFY_PARAM_free X509_VERIFY_PARAM_get0 X509_VERIFY_PARAM_get0_email X509_VERIFY_PARAM_get0_host X509_VERIFY_PARAM_get0_name X509_VERIFY_PARAM_get0_peername X509_VERIFY_PARAM_get1_ip_asc X509_VERIFY_PARAM_get_auth_level X509_VERIFY_PARAM_get_count X509_VERIFY_PARAM_get_depth X509_VERIFY_PARAM_get_flags X509_VERIFY_PARAM_get_hostflags X509_VERIFY_PARAM_get_inh_flags X509_VERIFY_PARAM_get_time X509_VERIFY_PARAM_inherit X509_VERIFY_PARAM_lookup X509_VERIFY_PARAM_move_peername X509_VERIFY_PARAM_new X509_VERIFY_PARAM_set1 X509_VERIFY_PARAM_set1_email X509_VERIFY_PARAM_set1_host X509_VERIFY_PARAM_set1_ip X509_VERIFY_PARAM_set1_ip_asc X509_VERIFY_PARAM_set1_name X509_VERIFY_PARAM_set1_policies X509_VERIFY_PARAM_set_auth_level X509_VERIFY_PARAM_set_depth X509_VERIFY_PARAM_set_flags X509_VERIFY_PARAM_set_hostflags X509_VERIFY_PARAM_set_inh_flags X509_VERIFY_PARAM_set_purpose X509_VERIFY_PARAM_set_time X509_VERIFY_PARAM_set_trust X509_VERIFY_PARAM_table_cleanup X509_add1_ext_i2d X509_add1_reject_object X509_add1_trust_object X509_add_cert X509_add_certs X509_add_ext X509_alias_get0 X509_alias_set1 X509_aux_print X509_build_chain X509_certificate_type X509_chain_check_suiteb X509_chain_up_ref X509_check_akid X509_check_ca X509_check_email X509_check_host X509_check_ip X509_check_ip_asc X509_check_issued X509_check_private_key X509_check_purpose X509_check_trust X509_cmp X509_cmp_current_time X509_cmp_time X509_cmp_timeframe X509_delete_ext X509_digest X509_digest_sig X509_dup X509_email_free X509_find_by_issuer_and_serial X509_find_by_subject X509_free X509_get0_authority_issuer X509_get0_authority_key_id X509_get0_authority_serial X509_get0_distinguishing_id X509_get0_extensions X509_get0_notAfter X509_get0_notBefore X509_get0_pubkey X509_get0_pubkey_bitstr X509_get0_reject_objects X509_get0_serialNumber X509_get0_signature X509_get0_subject_key_id X509_get0_tbs_sigalg X509_get0_trust_objects X509_get0_uids X509_get1_email X509_get1_ocsp X509_get_X509_PUBKEY X509_get_default_cert_area X509_get_default_cert_dir X509_get_default_cert_dir_env X509_get_default_cert_file X509_get_default_cert_file_env X509_get_default_private_dir X509_get_ex_data X509_get_ext X509_get_ext_by_NID X509_get_ext_by_OBJ X509_get_ext_by_critical X509_get_ext_count X509_get_ext_d2i X509_get_extended_key_usage X509_get_extension_flags X509_get_issuer_name X509_get_key_usage X509_get_pathlen X509_get_proxy_pathlen X509_get_pubkey X509_get_pubkey_parameters X509_get_serialNumber X509_get_signature_info X509_get_signature_nid X509_get_signature_type X509_get_subject_name X509_get_version X509_getm_notAfter X509_getm_notBefore X509_gmtime_adj X509_issuer_and_serial_cmp X509_issuer_and_serial_hash X509_issuer_name_cmp X509_issuer_name_hash X509_issuer_name_hash_old X509_it X509_keyid_get0 X509_keyid_set1 X509_load_cert_crl_file X509_load_cert_crl_file_ex X509_load_cert_file X509_load_cert_file_ex X509_load_crl_file X509_load_http X509_new X509_new_ex X509_ocspid_print X509_policy_check X509_policy_level_get0_node X509_policy_level_node_count X509_policy_node_get0_parent X509_policy_node_get0_policy X509_policy_node_get0_qualifiers X509_policy_tree_free X509_policy_tree_get0_level X509_policy_tree_get0_policies X509_policy_tree_get0_user_policies X509_policy_tree_level_count X509_print X509_print_ex X509_print_ex_fp X509_print_fp X509_pubkey_digest X509_reject_clear X509_self_signed X509_set0_distinguishing_id X509_set1_notAfter X509_set1_notBefore X509_set_ex_data X509_set_issuer_name X509_set_proxy_flag X509_set_proxy_pathlen X509_set_pubkey X509_set_serialNumber X509_set_subject_name X509_set_version X509_sign X509_sign_ctx X509_signature_dump X509_signature_print X509_subject_name_cmp X509_subject_name_hash X509_subject_name_hash_old X509_supported_extension X509_time_adj X509_time_adj_ex X509_to_X509_REQ X509_trust_clear X509_trusted X509_up_ref X509_verify X509_verify_cert X509_verify_cert_error_string X509at_add1_attr X509at_add1_attr_by_NID X509at_add1_attr_by_OBJ X509at_add1_attr_by_txt X509at_delete_attr X509at_get0_data_by_OBJ X509at_get_attr X509at_get_attr_by_NID X509at_get_attr_by_OBJ X509at_get_attr_count X509v3_add_ext X509v3_addr_add_inherit X509v3_addr_add_prefix X509v3_addr_add_range X509v3_addr_canonize X509v3_addr_get_afi X509v3_addr_get_range X509v3_addr_inherits X509v3_addr_is_canonical X509v3_addr_subset X509v3_addr_validate_path X509v3_addr_validate_resource_set X509v3_asid_add_id_or_range X509v3_asid_add_inherit X509v3_asid_canonize X509v3_asid_inherits X509v3_asid_is_canonical X509v3_asid_subset X509v3_asid_validate_path X509v3_asid_validate_resource_set X509v3_delete_ext X509v3_get_ext X509v3_get_ext_by_NID X509v3_get_ext_by_OBJ X509v3_get_ext_by_critical X509v3_get_ext_count ZINT32_it ZINT64_it ZLONG_it ZUINT32_it ZUINT64_it a2d_ASN1_OBJECT a2i_ASN1_ENUMERATED a2i_ASN1_INTEGER a2i_ASN1_STRING a2i_GENERAL_NAME a2i_IPADDRESS a2i_IPADDRESS_NC asn1_d2i_read_bio b2i_PVK_bio b2i_PVK_bio_ex b2i_PrivateKey b2i_PrivateKey_bio b2i_PublicKey b2i_PublicKey_bio conf_ssl_get conf_ssl_get_cmd conf_ssl_name_find d2i_ACCESS_DESCRIPTION d2i_ADMISSIONS d2i_ADMISSION_SYNTAX d2i_ASIdOrRange d2i_ASIdentifierChoice d2i_ASIdentifiers d2i_ASN1_BIT_STRING d2i_ASN1_BMPSTRING d2i_ASN1_ENUMERATED d2i_ASN1_GENERALIZEDTIME d2i_ASN1_GENERALSTRING d2i_ASN1_IA5STRING d2i_ASN1_INTEGER d2i_ASN1_NULL d2i_ASN1_OBJECT d2i_ASN1_OCTET_STRING d2i_ASN1_PRINTABLE d2i_ASN1_PRINTABLESTRING d2i_ASN1_SEQUENCE_ANY d2i_ASN1_SET_ANY d2i_ASN1_T61STRING d2i_ASN1_TIME d2i_ASN1_TYPE d2i_ASN1_UINTEGER d2i_ASN1_UNIVERSALSTRING d2i_ASN1_UTCTIME d2i_ASN1_UTF8STRING d2i_ASN1_VISIBLESTRING d2i_ASRange d2i_AUTHORITY_INFO_ACCESS d2i_AUTHORITY_KEYID d2i_AutoPrivateKey d2i_AutoPrivateKey_ex d2i_BASIC_CONSTRAINTS d2i_CERTIFICATEPOLICIES d2i_CMS_ContentInfo d2i_CMS_ReceiptRequest d2i_CMS_bio d2i_CRL_DIST_POINTS d2i_DHparams d2i_DHxparams d2i_DIRECTORYSTRING d2i_DISPLAYTEXT d2i_DIST_POINT d2i_DIST_POINT_NAME d2i_DSAPrivateKey d2i_DSAPrivateKey_bio d2i_DSAPrivateKey_fp d2i_DSAPublicKey d2i_DSA_PUBKEY d2i_DSA_PUBKEY_bio d2i_DSA_PUBKEY_fp d2i_DSA_SIG d2i_DSAparams d2i_ECDSA_SIG d2i_ECPKParameters d2i_ECParameters d2i_ECPrivateKey d2i_ECPrivateKey_bio d2i_ECPrivateKey_fp d2i_EC_PUBKEY d2i_EC_PUBKEY_bio d2i_EC_PUBKEY_fp d2i_EDIPARTYNAME d2i_ESS_CERT_ID d2i_ESS_CERT_ID_V2 d2i_ESS_ISSUER_SERIAL d2i_ESS_SIGNING_CERT d2i_ESS_SIGNING_CERT_V2 d2i_EXTENDED_KEY_USAGE d2i_GENERAL_NAME d2i_GENERAL_NAMES d2i_IPAddressChoice d2i_IPAddressFamily d2i_IPAddressOrRange d2i_IPAddressRange d2i_ISSUER_SIGN_TOOL d2i_ISSUING_DIST_POINT d2i_KeyParams d2i_KeyParams_bio d2i_NAMING_AUTHORITY d2i_NETSCAPE_CERT_SEQUENCE d2i_NETSCAPE_SPKAC d2i_NETSCAPE_SPKI d2i_NOTICEREF d2i_OCSP_BASICRESP d2i_OCSP_CERTID d2i_OCSP_CERTSTATUS d2i_OCSP_CRLID d2i_OCSP_ONEREQ d2i_OCSP_REQINFO d2i_OCSP_REQUEST d2i_OCSP_RESPBYTES d2i_OCSP_RESPDATA d2i_OCSP_RESPID d2i_OCSP_RESPONSE d2i_OCSP_REVOKEDINFO d2i_OCSP_SERVICELOC d2i_OCSP_SIGNATURE d2i_OCSP_SINGLERESP d2i_OSSL_CMP_MSG d2i_OSSL_CMP_MSG_bio d2i_OSSL_CMP_PKIHEADER d2i_OSSL_CMP_PKISI d2i_OSSL_CRMF_CERTID d2i_OSSL_CRMF_CERTTEMPLATE d2i_OSSL_CRMF_ENCRYPTEDVALUE d2i_OSSL_CRMF_MSG d2i_OSSL_CRMF_MSGS d2i_OSSL_CRMF_PBMPARAMETER d2i_OSSL_CRMF_PKIPUBLICATIONINFO d2i_OSSL_CRMF_SINGLEPUBINFO d2i_OTHERNAME d2i_PBE2PARAM d2i_PBEPARAM d2i_PBKDF2PARAM d2i_PKCS12 d2i_PKCS12_BAGS d2i_PKCS12_MAC_DATA d2i_PKCS12_SAFEBAG d2i_PKCS12_bio d2i_PKCS12_fp d2i_PKCS7 d2i_PKCS7_DIGEST d2i_PKCS7_ENCRYPT d2i_PKCS7_ENC_CONTENT d2i_PKCS7_ENVELOPE d2i_PKCS7_ISSUER_AND_SERIAL d2i_PKCS7_RECIP_INFO d2i_PKCS7_SIGNED d2i_PKCS7_SIGNER_INFO d2i_PKCS7_SIGN_ENVELOPE d2i_PKCS7_bio d2i_PKCS7_fp d2i_PKCS8PrivateKey_bio d2i_PKCS8PrivateKey_fp d2i_PKCS8_PRIV_KEY_INFO d2i_PKCS8_PRIV_KEY_INFO_bio d2i_PKCS8_PRIV_KEY_INFO_fp d2i_PKCS8_bio d2i_PKCS8_fp d2i_PKEY_USAGE_PERIOD d2i_POLICYINFO d2i_POLICYQUALINFO d2i_PROFESSION_INFO d2i_PROXY_CERT_INFO_EXTENSION d2i_PROXY_POLICY d2i_PUBKEY d2i_PUBKEY_bio d2i_PUBKEY_ex d2i_PUBKEY_fp d2i_PrivateKey d2i_PrivateKey_bio d2i_PrivateKey_ex d2i_PrivateKey_ex_bio d2i_PrivateKey_ex_fp d2i_PrivateKey_fp d2i_PublicKey d2i_RSAPrivateKey d2i_RSAPrivateKey_bio d2i_RSAPrivateKey_fp d2i_RSAPublicKey d2i_RSAPublicKey_bio d2i_RSAPublicKey_fp d2i_RSA_OAEP_PARAMS d2i_RSA_PSS_PARAMS d2i_RSA_PUBKEY d2i_RSA_PUBKEY_bio d2i_RSA_PUBKEY_fp d2i_SCRYPT_PARAMS d2i_SCT_LIST d2i_SXNET d2i_SXNETID d2i_TS_ACCURACY d2i_TS_MSG_IMPRINT d2i_TS_MSG_IMPRINT_bio d2i_TS_MSG_IMPRINT_fp d2i_TS_REQ d2i_TS_REQ_bio d2i_TS_REQ_fp d2i_TS_RESP d2i_TS_RESP_bio d2i_TS_RESP_fp d2i_TS_STATUS_INFO d2i_TS_TST_INFO d2i_TS_TST_INFO_bio d2i_TS_TST_INFO_fp d2i_USERNOTICE d2i_X509 d2i_X509_ALGOR d2i_X509_ALGORS d2i_X509_ATTRIBUTE d2i_X509_AUX d2i_X509_CERT_AUX d2i_X509_CINF d2i_X509_CRL d2i_X509_CRL_INFO d2i_X509_CRL_bio d2i_X509_CRL_fp d2i_X509_EXTENSION d2i_X509_EXTENSIONS d2i_X509_NAME d2i_X509_NAME_ENTRY d2i_X509_PUBKEY d2i_X509_PUBKEY_bio d2i_X509_PUBKEY_fp d2i_X509_REQ d2i_X509_REQ_INFO d2i_X509_REQ_bio d2i_X509_REQ_fp d2i_X509_REVOKED d2i_X509_SIG d2i_X509_VAL d2i_X509_bio d2i_X509_fp err_free_strings_int i2a_ACCESS_DESCRIPTION i2a_ASN1_ENUMERATED i2a_ASN1_INTEGER i2a_ASN1_OBJECT i2a_ASN1_STRING i2b_PVK_bio i2b_PVK_bio_ex i2b_PrivateKey_bio i2b_PublicKey_bio i2d_ACCESS_DESCRIPTION i2d_ADMISSIONS i2d_ADMISSION_SYNTAX i2d_ASIdOrRange i2d_ASIdentifierChoice i2d_ASIdentifiers i2d_ASN1_BIT_STRING i2d_ASN1_BMPSTRING i2d_ASN1_ENUMERATED i2d_ASN1_GENERALIZEDTIME i2d_ASN1_GENERALSTRING i2d_ASN1_IA5STRING i2d_ASN1_INTEGER i2d_ASN1_NULL i2d_ASN1_OBJECT i2d_ASN1_OCTET_STRING i2d_ASN1_PRINTABLE i2d_ASN1_PRINTABLESTRING i2d_ASN1_SEQUENCE_ANY i2d_ASN1_SET_ANY i2d_ASN1_T61STRING i2d_ASN1_TIME i2d_ASN1_TYPE i2d_ASN1_UNIVERSALSTRING i2d_ASN1_UTCTIME i2d_ASN1_UTF8STRING i2d_ASN1_VISIBLESTRING i2d_ASN1_bio_stream i2d_ASRange i2d_AUTHORITY_INFO_ACCESS i2d_AUTHORITY_KEYID i2d_BASIC_CONSTRAINTS i2d_CERTIFICATEPOLICIES i2d_CMS_ContentInfo i2d_CMS_ReceiptRequest i2d_CMS_bio i2d_CMS_bio_stream i2d_CRL_DIST_POINTS i2d_DHparams i2d_DHxparams i2d_DIRECTORYSTRING i2d_DISPLAYTEXT i2d_DIST_POINT i2d_DIST_POINT_NAME i2d_DSAPrivateKey i2d_DSAPrivateKey_bio i2d_DSAPrivateKey_fp i2d_DSAPublicKey i2d_DSA_PUBKEY i2d_DSA_PUBKEY_bio i2d_DSA_PUBKEY_fp i2d_DSA_SIG i2d_DSAparams i2d_ECDSA_SIG i2d_ECPKParameters i2d_ECParameters i2d_ECPrivateKey i2d_ECPrivateKey_bio i2d_ECPrivateKey_fp i2d_EC_PUBKEY i2d_EC_PUBKEY_bio i2d_EC_PUBKEY_fp i2d_EDIPARTYNAME i2d_ESS_CERT_ID i2d_ESS_CERT_ID_V2 i2d_ESS_ISSUER_SERIAL i2d_ESS_SIGNING_CERT i2d_ESS_SIGNING_CERT_V2 i2d_EXTENDED_KEY_USAGE i2d_GENERAL_NAME i2d_GENERAL_NAMES i2d_IPAddressChoice i2d_IPAddressFamily i2d_IPAddressOrRange i2d_IPAddressRange i2d_ISSUER_SIGN_TOOL i2d_ISSUING_DIST_POINT i2d_KeyParams i2d_KeyParams_bio i2d_NAMING_AUTHORITY i2d_NETSCAPE_CERT_SEQUENCE i2d_NETSCAPE_SPKAC i2d_NETSCAPE_SPKI i2d_NOTICEREF i2d_OCSP_BASICRESP i2d_OCSP_CERTID i2d_OCSP_CERTSTATUS i2d_OCSP_CRLID i2d_OCSP_ONEREQ i2d_OCSP_REQINFO i2d_OCSP_REQUEST i2d_OCSP_RESPBYTES i2d_OCSP_RESPDATA i2d_OCSP_RESPID i2d_OCSP_RESPONSE i2d_OCSP_REVOKEDINFO i2d_OCSP_SERVICELOC i2d_OCSP_SIGNATURE i2d_OCSP_SINGLERESP i2d_OSSL_CMP_MSG i2d_OSSL_CMP_MSG_bio i2d_OSSL_CMP_PKIHEADER i2d_OSSL_CMP_PKISI i2d_OSSL_CRMF_CERTID i2d_OSSL_CRMF_CERTTEMPLATE i2d_OSSL_CRMF_ENCRYPTEDVALUE i2d_OSSL_CRMF_MSG i2d_OSSL_CRMF_MSGS i2d_OSSL_CRMF_PBMPARAMETER i2d_OSSL_CRMF_PKIPUBLICATIONINFO i2d_OSSL_CRMF_SINGLEPUBINFO i2d_OTHERNAME i2d_PBE2PARAM i2d_PBEPARAM i2d_PBKDF2PARAM i2d_PKCS12 i2d_PKCS12_BAGS i2d_PKCS12_MAC_DATA i2d_PKCS12_SAFEBAG i2d_PKCS12_bio i2d_PKCS12_fp i2d_PKCS7 i2d_PKCS7_DIGEST i2d_PKCS7_ENCRYPT i2d_PKCS7_ENC_CONTENT i2d_PKCS7_ENVELOPE i2d_PKCS7_ISSUER_AND_SERIAL i2d_PKCS7_NDEF i2d_PKCS7_RECIP_INFO i2d_PKCS7_SIGNED i2d_PKCS7_SIGNER_INFO i2d_PKCS7_SIGN_ENVELOPE i2d_PKCS7_bio i2d_PKCS7_bio_stream i2d_PKCS7_fp i2d_PKCS8PrivateKeyInfo_bio i2d_PKCS8PrivateKeyInfo_fp i2d_PKCS8PrivateKey_bio i2d_PKCS8PrivateKey_fp i2d_PKCS8PrivateKey_nid_bio i2d_PKCS8PrivateKey_nid_fp i2d_PKCS8_PRIV_KEY_INFO i2d_PKCS8_PRIV_KEY_INFO_bio i2d_PKCS8_PRIV_KEY_INFO_fp i2d_PKCS8_bio i2d_PKCS8_fp i2d_PKEY_USAGE_PERIOD i2d_POLICYINFO i2d_POLICYQUALINFO i2d_PROFESSION_INFO i2d_PROXY_CERT_INFO_EXTENSION i2d_PROXY_POLICY i2d_PUBKEY i2d_PUBKEY_bio i2d_PUBKEY_fp i2d_PrivateKey i2d_PrivateKey_bio i2d_PrivateKey_fp i2d_PublicKey i2d_RSAPrivateKey i2d_RSAPrivateKey_bio i2d_RSAPrivateKey_fp i2d_RSAPublicKey i2d_RSAPublicKey_bio i2d_RSAPublicKey_fp i2d_RSA_OAEP_PARAMS i2d_RSA_PSS_PARAMS i2d_RSA_PUBKEY i2d_RSA_PUBKEY_bio i2d_RSA_PUBKEY_fp i2d_SCRYPT_PARAMS i2d_SCT_LIST i2d_SXNET i2d_SXNETID i2d_TS_ACCURACY i2d_TS_MSG_IMPRINT i2d_TS_MSG_IMPRINT_bio i2d_TS_MSG_IMPRINT_fp i2d_TS_REQ i2d_TS_REQ_bio i2d_TS_REQ_fp i2d_TS_RESP i2d_TS_RESP_bio i2d_TS_RESP_fp i2d_TS_STATUS_INFO i2d_TS_TST_INFO i2d_TS_TST_INFO_bio i2d_TS_TST_INFO_fp i2d_USERNOTICE i2d_X509 i2d_X509_ALGOR i2d_X509_ALGORS i2d_X509_ATTRIBUTE i2d_X509_AUX i2d_X509_CERT_AUX i2d_X509_CINF i2d_X509_CRL i2d_X509_CRL_INFO i2d_X509_CRL_bio i2d_X509_CRL_fp i2d_X509_EXTENSION i2d_X509_EXTENSIONS i2d_X509_NAME i2d_X509_NAME_ENTRY i2d_X509_PUBKEY i2d_X509_PUBKEY_bio i2d_X509_PUBKEY_fp i2d_X509_REQ i2d_X509_REQ_INFO i2d_X509_REQ_bio i2d_X509_REQ_fp i2d_X509_REVOKED i2d_X509_SIG i2d_X509_VAL i2d_X509_bio i2d_X509_fp i2d_re_X509_CRL_tbs i2d_re_X509_REQ_tbs i2d_re_X509_tbs i2o_ECPublicKey i2o_SCT i2o_SCT_LIST i2s_ASN1_ENUMERATED i2s_ASN1_ENUMERATED_TABLE i2s_ASN1_IA5STRING i2s_ASN1_INTEGER i2s_ASN1_OCTET_STRING i2s_ASN1_UTF8STRING i2t_ASN1_OBJECT i2v_ASN1_BIT_STRING i2v_GENERAL_NAME i2v_GENERAL_NAMES o2i_ECPublicKey o2i_SCT o2i_SCT_LIST s2i_ASN1_IA5STRING s2i_ASN1_INTEGER s2i_ASN1_OCTET_STRING s2i_ASN1_UTF8STRING v2i_ASN1_BIT_STRING v2i_GENERAL_NAME v2i_GENERAL_NAMES v2i_GENERAL_NAME_ex

Name

.text

Size

2.6MB

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

844KB

Virtual Size

844KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

17KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

113KB

Virtual Size

112KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

libcurl32.dll

IMPHASH 9b3e7aeb251685658b5586e13849c1cc
SHA256 b56052c5a6037badd469626ee8f57f04a5ec5056a732802b7f02ef328c3c2f1d
MD5 42d6766509cfe037ea45efab0f06bd3a
SHA1 fcb6307f9f24762d484828e2f576b406405b3453
SHA512 2c71b004803c62dda9114e33ce97bcd15a436d467ace26384f4a23f5abff31f619a8f519086deec496e139604bcf74c4226b99213f99d4d19dce6b278d87da93
SSDEEP 12288:um5h4qYogXJ9+0Wo9tIsx7PTRFmad3gEZnFysIy8muxcF2ogQop51HjxuvXTlLud:um5hTYD+Eop51HjxsThuxbn
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

4a:bb:f7:45:d1:ce:20:eb:eb:ec:9c:fa:b9:fb:8a:6a:7c:e0:f7:9e:f1:0d:ee:0f:8f:ed:3e:df:97:13:0b:e4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Sep 2, 2020

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

28:7c:fd:69:70:e9:7c:28:d7:0d:ad:3c:3c:e5:a9:fa:d4:ae:a6:4d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Sep 2, 2020

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

5

Entry point

258880

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\libs\libcurl-7.26\Release\libcurl32.pdb

kernel32

InitializeCriticalSection LeaveCriticalSection GetLastError SetLastError EnterCriticalSection DeleteCriticalSection SleepEx FreeLibrary GetModuleHandleW LoadLibraryW GetFileAttributesW GetModuleFileNameW GetSystemDirectoryA GetProcAddress LoadLibraryA GetModuleHandleA OutputDebugStringA GetVersion WaitForSingleObject CloseHandle MultiByteToWideChar ExpandEnvironmentStringsA Sleep FormatMessageA PeekNamedPipe ReadFile GetStdHandle GetFileType WaitForMultipleObjects GetTickCount HeapSize SetEnvironmentVariableA CompareStringW CompareStringA WriteConsoleW GetConsoleOutputCP WriteConsoleA GetTimeZoneInformation CreateFileA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetStringTypeW GetStringTypeA GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetProcessHeap SetEndOfFile FlushFileBuffers LCMapStringW LCMapStringA GetFullPathNameW GetCurrentDirectoryA GetFullPathNameA GetConsoleMode GetConsoleCP SetStdHandle GetModuleFileNameA WriteFile VirtualAlloc VirtualFree HeapDestroy HeapCreate RtlUnwind ExitProcess GetStartupInfoA SetHandleCount IsValidCodePage GetOEMCP GetACP GetCPInfo InterlockedDecrement InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCommandLineA WideCharToMultiByte CreateFileW FindFirstFileW GetDriveTypeW FindFirstFileA GetDriveTypeA FindClose GetFileInformationByHandle FileTimeToLocalFileTime FileTimeToSystemTime SetFilePointer HeapReAlloc HeapAlloc CreateThread GetCurrentThreadId ExitThread HeapFree GetSystemTimeAsFileTime

wldap32

ord22 ord26 ord79 ord166 ord207 ord146 ord215 ord126 ord144 ord27 ord301 ord211 ord141 ord46 ord132 ord41

ws2_32

gethostbyname getpeername connect htons ntohs getsockname gethostbyaddr recv bind socket WSASetLastError closesocket getsockopt WSAGetLastError getservbyname getservbyport htonl inet_addr inet_ntoa gethostname WSACleanup WSAStartup accept listen ioctlsocket __WSAFDIsSet send sendto setsockopt recvfrom select

libeay32

ord2604 ord224 ord2454 ord656 ord280 ord579 ord1951 ord222 ord181 ord1958 ord544 ord467 ord78 ord625 ord391 ord227 ord52 ord120 ord654 ord641 ord2075 ord1180 ord298 ord281 ord95 ord188 ord18 ord657 ord7 ord2023 ord808 ord2437 ord809 ord2435 ord784 ord2436 ord342 ord464 ord341 ord340 ord2254 ord2291 ord66 ord2596 ord223 ord680 ord151 ord542 ord2442 ord556 ord979 ord1216 ord566 ord4445 ord2431 ord653 ord1 ord1653 ord958 ord1654 ord248 ord3212 ord578 ord421 ord466 ord1015

ssleay32

ord74 ord60 ord90 ord43 ord21 ord5 ord87 ord15 ord76 ord242 ord110 ord183 ord86 ord126 ord78 ord8 ord48 ord108 ord12 ord30 ord235 ord24 ord127 ord96 ord17 ord77 ord243 ord222 ord172 ord49 ord75 ord141 ord130 ord58 ord61 ord180 ord116 ord6 ord157 ord31 ord45

libcurl64.dll

IMPHASH 234b971b2319ad2560c54bf20998aba0
SHA256 e777ded2132f91d6e42e40d37a50a7065cebbd2f84efa1557ad93322a0195392
MD5 45766f221a6988f1fd0185ec4291dfee
SHA1 aa16fbdf5824e46767fe03b7646704cbb4274b55
SHA512 3d84bb62018e7d73f31efe5107eb7b37b3a0c851fe5db8695081b95c3bc9609307596439ec7307199b27c9c5510df69653a5dbd58fa86f7f7b5ced21e54bbdb0
SSDEEP 12288:TPSFvXdMNQMmzjaZ+hJGxJsoYqOpsbYbTpuC3kk:OFvnMmRaJsoMi+TISkk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

Digest

d3:41:e8:b6:e8:c4:bc:91:50:a5:0a:35:41:ce:d3:04:3d:f4:fc:ef:40:a7:70:53:d6:bd:48:3b:29:9e:be:a0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Sep 2, 2020

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

d9:d3:7e:90:91:3b:4d:ed:ca:6a:15:ed:a1:45:d1:2f:4e:c1:ae:0e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Sep 2, 2020

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

2

Major OS version

5

Entry point

307060

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\po\trunk\libs\libcurl-7.26\Release\libcurl64.pdb

kernel32

InitializeCriticalSection LeaveCriticalSection GetLastError SetLastError EnterCriticalSection DeleteCriticalSection SleepEx FreeLibrary GetModuleHandleExW QueryActCtxW CreateActCtxW ActivateActCtx LoadLibraryW GetModuleFileNameW GetSystemDirectoryA DeactivateActCtx GetProcAddress LoadLibraryA OutputDebugStringA FindActCtxSectionStringW WaitForSingleObject CloseHandle MultiByteToWideChar ExpandEnvironmentStringsA Sleep FormatMessageA PeekNamedPipe ReadFile GetStdHandle GetFileType WaitForMultipleObjects GetTickCount HeapSize SetEnvironmentVariableA CompareStringW CompareStringA WriteConsoleW GetConsoleOutputCP WriteConsoleA GetTimeZoneInformation CreateFileA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetStringTypeW GetStringTypeA GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetProcessHeap SetEndOfFile FlushFileBuffers LCMapStringW LCMapStringA GetFullPathNameW GetCurrentDirectoryA GetFullPathNameA GetConsoleMode GetConsoleCP SetStdHandle GetModuleFileNameA WriteFile HeapDestroy HeapCreate HeapSetInformation ExitProcess GetModuleHandleW GetStartupInfoA SetHandleCount RtlUnwindEx IsValidCodePage GetOEMCP GetACP GetCPInfo FlsAlloc FlsFree FlsGetValue DecodePointer EncodePointer RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCommandLineA FlsSetValue WideCharToMultiByte CreateFileW FindFirstFileW GetDriveTypeW FindFirstFileA GetDriveTypeA FindClose GetFileInformationByHandle FileTimeToLocalFileTime FileTimeToSystemTime SetFilePointer HeapReAlloc HeapAlloc CreateThread GetCurrentThreadId ExitThread HeapFree GetSystemTimeAsFileTime

wldap32

ord22 ord26 ord79 ord166 ord207 ord146 ord215 ord126 ord144 ord27 ord301 ord211 ord141 ord46 ord132 ord41

ws2_32

gethostbyname getpeername connect htons ntohs getsockname gethostbyaddr recv bind socket WSASetLastError closesocket getsockopt WSAGetLastError getservbyname getservbyport htonl inet_addr inet_ntoa gethostname WSACleanup WSAStartup accept listen ioctlsocket __WSAFDIsSet send sendto setsockopt recvfrom select

libeay64

ord656 ord280 ord579 ord1951 ord222 ord181 ord1958 ord544 ord467 ord78 ord625 ord391 ord227 ord52 ord120 ord654 ord641 ord2075 ord2454 ord298 ord281 ord95 ord188 ord18 ord657 ord7 ord2023 ord808 ord2437 ord809 ord2435 ord784 ord2436 ord342 ord464 ord341 ord340 ord2254 ord2291 ord66 ord2596 ord223 ord680 ord151 ord542 ord2442 ord556 ord979 ord1216 ord566 ord4445 ord2431 ord653 ord1 ord1653 ord958 ord1654 ord248 ord3212 ord578 ord421 ord466 ord1180 ord2604 ord224 ord1015

ssleay64

ord43 ord21 ord60 ord74 ord45 ord5 ord87 ord15 ord76 ord242 ord110 ord183 ord86 ord126 ord78 ord8 ord48 ord108 ord12 ord30 ord235 ord24 ord127 ord96 ord17 ord77 ord243 ord222 ord172 ord49 ord75 ord141 ord130 ord58 ord61 ord180 ord116 ord6 ord157 ord31 ord90

libeay32.dll

IMPHASH 2c30af1e6ba5c85ae00579debdabf312
SHA256 496134cf94370bf1df575829439888dcefed18c4c1a4c0274572eff27c5278b6
MD5 34f31522fadb94d074024065f60a2619
SHA1 5c299590038a8add456e610295e560b940e7c706
SHA512 301e9bae37e96893a83125409b930965b157995e2e373ed4e2e2c7bf093ea56c19eb78f03654c1f24257450610e3bc5043d1c14622cea988dae74820bd234cd2
SSDEEP 24576:AQ282x7qIOyRUiDCR3fvJRB1VN2crCqtqZV3poRZqiAxYjjVl7:AR1GZS5DCRvvzBLN7mNV3po/qJx2jVR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

fd:e2:0a:82:78:19:02:ed:e0:3a:1d:dc:8a:75:38:90:bd:85:81:9c:11:07:90:81:7d:8f:c6:36:9b:fa:42:fd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Aug 9, 2019

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

2d:8f:f9:26:a6:af:29:fc:63:ab:0f:05:9c:24:a6:6a:27:87:fa:ef

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Aug 9, 2019

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:52:d7

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 13, 2011 - Jan 28, 2028

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Serial Number

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 24, 2016 - Jun 24, 2027

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

09:9d:1a:13:bd:f7:cb:77:51:1e:e5:cd:06:e1:2d:24

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 8, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0d:ae:6d:bb:e5:f1:95:e4:e1:77:47:a4:ee:de:a4:f1

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 8, 2019 - Aug 11, 2022

Subject

CN=GlobalSign TSA for Advanced - G2

Serial Number

0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Feb 19, 2018 - Mar 18, 2029

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:31:89:c6:50:04

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 2, 2011 - Mar 29, 2029

Minor OS version

0

Major OS version

5

Entry point

812239

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\libs\openssl-1.0.2o\out32dll\libeay32.pdb

ws2_32

sendto recvfrom bind listen accept ntohl ioctlsocket WSACleanup WSAStartup gethostbyname getsockopt getservbyname ntohs htons htonl socket setsockopt connect send WSASetLastError recv WSAGetLastError shutdown closesocket

gdi32

CreateCompatibleBitmap GetObjectA GetDIBits DeleteObject GetDeviceCaps

advapi32

ReportEventA DeregisterEventSource RegisterEventSourceA

user32

GetDC ReleaseDC MessageBoxA GetProcessWindowStation GetUserObjectInformationW

kernel32

GetStringTypeW GetStringTypeA GetLocaleInfoA HeapSize GetEnvironmentStringsW FreeEnvironmentStringsW FreeEnvironmentStringsA LCMapStringW LCMapStringA GetProcessHeap SetEndOfFile GetCurrentDirectoryA CompareStringA CreateFileW CompareStringW SetEnvironmentVariableA GetEnvironmentStrings GetConsoleCP PeekNamedPipe GetFileInformationByHandle GetFullPathNameA FlushFileBuffers RtlUnwind WriteConsoleW ExitProcess GetProcAddress GetModuleHandleA GetCurrentThreadId GetLastError GetVersion WriteFile GetFileType GetStdHandle FindNextFileA FindFirstFileA FindClose FreeLibrary LoadLibraryA CloseHandle SetLastError MultiByteToWideChar SystemTimeToFileTime GetSystemTime GetTickCount QueryPerformanceCounter GetCurrentProcessId GlobalMemoryStatus FlushConsoleInputBuffer GetModuleHandleW Sleep SetConsoleCtrlHandler EnterCriticalSection LeaveCriticalSection HeapFree HeapReAlloc HeapAlloc GetSystemTimeAsFileTime ReadFile WideCharToMultiByte GetConsoleMode FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA SetFileAttributesA GetFileAttributesA CreateFileA ReadConsoleInputA SetConsoleMode GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetModuleFileNameA DeleteCriticalSection InitializeCriticalSectionAndSpinCount SetHandleCount GetStartupInfoA HeapCreate HeapDestroy VirtualFree VirtualAlloc GetTimeZoneInformation GetCPInfo GetACP GetOEMCP IsValidCodePage SetFilePointer SetStdHandle WriteConsoleA GetConsoleOutputCP

ACCESS_DESCRIPTION_free ACCESS_DESCRIPTION_it ACCESS_DESCRIPTION_new AES_bi_ige_encrypt AES_cbc_encrypt AES_cfb128_encrypt AES_cfb1_encrypt AES_cfb8_encrypt AES_ctr128_encrypt AES_decrypt AES_ecb_encrypt AES_encrypt AES_ige_encrypt AES_ofb128_encrypt AES_options AES_set_decrypt_key AES_set_encrypt_key AES_unwrap_key AES_wrap_key ASN1_ANY_it ASN1_BIT_STRING_check ASN1_BIT_STRING_free ASN1_BIT_STRING_get_bit ASN1_BIT_STRING_it ASN1_BIT_STRING_name_print ASN1_BIT_STRING_new ASN1_BIT_STRING_num_asc ASN1_BIT_STRING_set ASN1_BIT_STRING_set_asc ASN1_BIT_STRING_set_bit ASN1_BMPSTRING_free ASN1_BMPSTRING_it ASN1_BMPSTRING_new ASN1_BOOLEAN_it ASN1_ENUMERATED_free ASN1_ENUMERATED_get ASN1_ENUMERATED_it ASN1_ENUMERATED_new ASN1_ENUMERATED_set ASN1_ENUMERATED_to_BN ASN1_FBOOLEAN_it ASN1_GENERALIZEDTIME_adj ASN1_GENERALIZEDTIME_check ASN1_GENERALIZEDTIME_free ASN1_GENERALIZEDTIME_it ASN1_GENERALIZEDTIME_new ASN1_GENERALIZEDTIME_print ASN1_GENERALIZEDTIME_set ASN1_GENERALIZEDTIME_set_string ASN1_GENERALSTRING_free ASN1_GENERALSTRING_it ASN1_GENERALSTRING_new ASN1_IA5STRING_free ASN1_IA5STRING_it ASN1_IA5STRING_new ASN1_INTEGER_cmp ASN1_INTEGER_dup ASN1_INTEGER_free ASN1_INTEGER_get ASN1_INTEGER_it ASN1_INTEGER_new ASN1_INTEGER_set ASN1_INTEGER_to_BN ASN1_NULL_free ASN1_NULL_it ASN1_NULL_new ASN1_OBJECT_create ASN1_OBJECT_free ASN1_OBJECT_it ASN1_OBJECT_new ASN1_OCTET_STRING_NDEF_it ASN1_OCTET_STRING_cmp ASN1_OCTET_STRING_dup ASN1_OCTET_STRING_free ASN1_OCTET_STRING_it ASN1_OCTET_STRING_new ASN1_OCTET_STRING_set ASN1_PCTX_free ASN1_PCTX_get_cert_flags ASN1_PCTX_get_flags ASN1_PCTX_get_nm_flags ASN1_PCTX_get_oid_flags ASN1_PCTX_get_str_flags ASN1_PCTX_new ASN1_PCTX_set_cert_flags ASN1_PCTX_set_flags ASN1_PCTX_set_nm_flags ASN1_PCTX_set_oid_flags ASN1_PCTX_set_str_flags ASN1_PRINTABLESTRING_free ASN1_PRINTABLESTRING_it ASN1_PRINTABLESTRING_new ASN1_PRINTABLE_free ASN1_PRINTABLE_it ASN1_PRINTABLE_new ASN1_PRINTABLE_type ASN1_SEQUENCE_ANY_it ASN1_SEQUENCE_it ASN1_SET_ANY_it ASN1_STRING_TABLE_add ASN1_STRING_TABLE_cleanup ASN1_STRING_TABLE_get ASN1_STRING_clear_free ASN1_STRING_cmp ASN1_STRING_copy ASN1_STRING_data ASN1_STRING_dup ASN1_STRING_free ASN1_STRING_get_default_mask ASN1_STRING_length ASN1_STRING_length_set ASN1_STRING_new ASN1_STRING_print ASN1_STRING_print_ex ASN1_STRING_print_ex_fp ASN1_STRING_set ASN1_STRING_set0 ASN1_STRING_set_by_NID ASN1_STRING_set_default_mask ASN1_STRING_set_default_mask_asc ASN1_STRING_to_UTF8 ASN1_STRING_type ASN1_STRING_type_new ASN1_T61STRING_free ASN1_T61STRING_it ASN1_T61STRING_new ASN1_TBOOLEAN_it ASN1_TIME_adj ASN1_TIME_check ASN1_TIME_diff ASN1_TIME_free ASN1_TIME_it ASN1_TIME_new ASN1_TIME_print ASN1_TIME_set ASN1_TIME_set_string ASN1_TIME_to_generalizedtime ASN1_TYPE_cmp ASN1_TYPE_free ASN1_TYPE_get ASN1_TYPE_get_int_octetstring ASN1_TYPE_get_octetstring ASN1_TYPE_new ASN1_TYPE_set ASN1_TYPE_set1 ASN1_TYPE_set_int_octetstring ASN1_TYPE_set_octetstring ASN1_UNIVERSALSTRING_free ASN1_UNIVERSALSTRING_it ASN1_UNIVERSALSTRING_new ASN1_UNIVERSALSTRING_to_string ASN1_UTCTIME_adj ASN1_UTCTIME_check ASN1_UTCTIME_cmp_time_t ASN1_UTCTIME_free ASN1_UTCTIME_it ASN1_UTCTIME_new ASN1_UTCTIME_print ASN1_UTCTIME_set ASN1_UTCTIME_set_string ASN1_UTF8STRING_free ASN1_UTF8STRING_it ASN1_UTF8STRING_new ASN1_VISIBLESTRING_free ASN1_VISIBLESTRING_it ASN1_VISIBLESTRING_new ASN1_add_oid_module ASN1_bn_print ASN1_check_infinite_end ASN1_const_check_infinite_end ASN1_d2i_bio ASN1_d2i_fp ASN1_digest ASN1_dup ASN1_generate_nconf ASN1_generate_v3 ASN1_get_object ASN1_i2d_bio ASN1_i2d_fp ASN1_item_d2i ASN1_item_d2i_bio ASN1_item_d2i_fp ASN1_item_digest ASN1_item_dup ASN1_item_ex_d2i ASN1_item_ex_free ASN1_item_ex_i2d ASN1_item_ex_new ASN1_item_free ASN1_item_i2d ASN1_item_i2d_bio ASN1_item_i2d_fp ASN1_item_ndef_i2d ASN1_item_new ASN1_item_pack ASN1_item_print ASN1_item_sign ASN1_item_sign_ctx ASN1_item_unpack ASN1_item_verify ASN1_mbstring_copy ASN1_mbstring_ncopy ASN1_object_size ASN1_pack_string ASN1_parse ASN1_parse_dump ASN1_primitive_free ASN1_primitive_new ASN1_put_eoc ASN1_put_object ASN1_seq_pack ASN1_seq_unpack ASN1_sign ASN1_tag2bit ASN1_tag2str ASN1_template_d2i ASN1_template_free ASN1_template_i2d ASN1_template_new ASN1_unpack_string ASN1_verify AUTHORITY_INFO_ACCESS_free AUTHORITY_INFO_ACCESS_it AUTHORITY_INFO_ACCESS_new AUTHORITY_KEYID_free AUTHORITY_KEYID_it AUTHORITY_KEYID_new BASIC_CONSTRAINTS_free BASIC_CONSTRAINTS_it BASIC_CONSTRAINTS_new BF_cbc_encrypt BF_cfb64_encrypt BF_decrypt BF_ecb_encrypt BF_encrypt BF_ofb64_encrypt BF_options BF_set_key BIGNUM_it BIO_accept BIO_asn1_get_prefix BIO_asn1_get_suffix BIO_asn1_set_prefix BIO_asn1_set_suffix BIO_callback_ctrl BIO_clear_flags BIO_copy_next_retry BIO_ctrl BIO_ctrl_get_read_request BIO_ctrl_get_write_guarantee BIO_ctrl_pending BIO_ctrl_reset_read_request BIO_ctrl_wpending BIO_debug_callback BIO_dgram_non_fatal_error BIO_dump BIO_dump_cb BIO_dump_fp BIO_dump_indent BIO_dump_indent_cb BIO_dump_indent_fp BIO_dup_chain BIO_f_asn1 BIO_f_base64 BIO_f_buffer BIO_f_cipher BIO_f_md BIO_f_nbio_test BIO_f_null BIO_f_reliable BIO_fd_non_fatal_error BIO_fd_should_retry BIO_find_type BIO_free BIO_free_all BIO_get_accept_socket BIO_get_callback BIO_get_callback_arg BIO_get_ex_data BIO_get_ex_new_index BIO_get_host_ip BIO_get_port BIO_get_retry_BIO BIO_get_retry_reason BIO_gethostbyname BIO_gets BIO_hex_string BIO_indent BIO_int_ctrl BIO_method_name BIO_method_type BIO_new BIO_new_CMS BIO_new_NDEF BIO_new_PKCS7 BIO_new_accept BIO_new_bio_pair BIO_new_connect BIO_new_dgram BIO_new_fd BIO_new_file BIO_new_fp BIO_new_mem_buf BIO_new_socket BIO_next BIO_nread BIO_nread0 BIO_number_read BIO_number_written BIO_nwrite BIO_nwrite0 BIO_pop BIO_printf BIO_ptr_ctrl BIO_push BIO_puts BIO_read BIO_s_accept BIO_s_bio BIO_s_connect BIO_s_datagram BIO_s_fd BIO_s_file BIO_s_mem BIO_s_null BIO_s_socket BIO_set BIO_set_callback BIO_set_callback_arg BIO_set_cipher BIO_set_ex_data BIO_set_flags BIO_set_tcp_ndelay BIO_snprintf BIO_sock_cleanup BIO_sock_error BIO_sock_init BIO_sock_non_fatal_error BIO_sock_should_retry BIO_socket_ioctl BIO_socket_nbio BIO_test_flags BIO_vfree BIO_vprintf BIO_vsnprintf BIO_write BN_BLINDING_convert BN_BLINDING_convert_ex BN_BLINDING_create_param BN_BLINDING_free BN_BLINDING_get_flags BN_BLINDING_get_thread_id BN_BLINDING_invert BN_BLINDING_invert_ex BN_BLINDING_new BN_BLINDING_set_flags BN_BLINDING_set_thread_id BN_BLINDING_thread_id BN_BLINDING_update BN_CTX_end BN_CTX_free BN_CTX_get BN_CTX_init BN_CTX_new BN_CTX_start BN_GENCB_call BN_GF2m_add BN_GF2m_arr2poly BN_GF2m_mod BN_GF2m_mod_arr BN_GF2m_mod_div BN_GF2m_mod_div_arr BN_GF2m_mod_exp BN_GF2m_mod_exp_arr BN_GF2m_mod_inv BN_GF2m_mod_inv_arr BN_GF2m_mod_mul BN_GF2m_mod_mul_arr BN_GF2m_mod_solve_quad BN_GF2m_mod_solve_quad_arr BN_GF2m_mod_sqr BN_GF2m_mod_sqr_arr BN_GF2m_mod_sqrt BN_GF2m_mod_sqrt_arr BN_GF2m_poly2arr BN_MONT_CTX_copy BN_MONT_CTX_free BN_MONT_CTX_init BN_MONT_CTX_new BN_MONT_CTX_set BN_MONT_CTX_set_locked BN_RECP_CTX_free BN_RECP_CTX_init BN_RECP_CTX_new BN_RECP_CTX_set BN_X931_derive_prime_ex BN_X931_generate_Xpq BN_X931_generate_prime_ex BN_add BN_add_word BN_asc2bn BN_bin2bn BN_bn2bin BN_bn2dec BN_bn2hex BN_bn2mpi BN_bntest_rand BN_clear BN_clear_bit BN_clear_free BN_cmp BN_consttime_swap BN_copy BN_dec2bn BN_div BN_div_recp BN_div_word BN_dup BN_exp BN_free BN_from_montgomery BN_gcd BN_generate_prime BN_generate_prime_ex BN_get0_nist_prime_192 BN_get0_nist_prime_224 BN_get0_nist_prime_256 BN_get0_nist_prime_384 BN_get0_nist_prime_521 BN_get_params BN_get_word BN_hex2bn BN_init BN_is_bit_set BN_is_prime BN_is_prime_ex BN_is_prime_fasttest BN_is_prime_fasttest_ex BN_kronecker BN_lshift BN_lshift1 BN_mask_bits BN_mod_add BN_mod_add_quick BN_mod_exp BN_mod_exp2_mont BN_mod_exp_mont BN_mod_exp_mont_consttime BN_mod_exp_mont_word BN_mod_exp_recp BN_mod_exp_simple BN_mod_inverse BN_mod_lshift BN_mod_lshift1 BN_mod_lshift1_quick BN_mod_lshift_quick BN_mod_mul BN_mod_mul_montgomery BN_mod_mul_reciprocal BN_mod_sqr BN_mod_sqrt BN_mod_sub BN_mod_sub_quick BN_mod_word BN_mpi2bn BN_mul BN_mul_word BN_new BN_nist_mod_192 BN_nist_mod_224 BN_nist_mod_256 BN_nist_mod_384 BN_nist_mod_521 BN_nnmod BN_num_bits BN_num_bits_word BN_options BN_print BN_print_fp BN_pseudo_rand BN_pseudo_rand_range BN_rand BN_rand_range BN_reciprocal BN_rshift BN_rshift1 BN_set_bit BN_set_negative BN_set_params BN_set_word BN_sqr BN_sub BN_sub_word BN_swap BN_to_ASN1_ENUMERATED BN_to_ASN1_INTEGER BN_uadd BN_ucmp BN_usub BN_value_one BUF_MEM_free BUF_MEM_grow BUF_MEM_grow_clean BUF_MEM_new BUF_memdup BUF_reverse BUF_strdup BUF_strlcat BUF_strlcpy BUF_strndup BUF_strnlen CAST_cbc_encrypt CAST_cfb64_encrypt CAST_decrypt CAST_ecb_encrypt CAST_encrypt CAST_ofb64_encrypt CAST_set_key CBIGNUM_it CERTIFICATEPOLICIES_free CERTIFICATEPOLICIES_it CERTIFICATEPOLICIES_new CMAC_CTX_cleanup CMAC_CTX_copy CMAC_CTX_free CMAC_CTX_get0_cipher_ctx CMAC_CTX_new CMAC_Final CMAC_Init CMAC_Update CMAC_resume CMS_ContentInfo_free CMS_ContentInfo_it CMS_ContentInfo_new CMS_ContentInfo_print_ctx CMS_EncryptedData_decrypt CMS_EncryptedData_encrypt CMS_EncryptedData_set1_key CMS_EnvelopedData_create CMS_ReceiptRequest_create0 CMS_ReceiptRequest_free CMS_ReceiptRequest_get0_values CMS_ReceiptRequest_it CMS_ReceiptRequest_new CMS_RecipientEncryptedKey_cert_cmp CMS_RecipientEncryptedKey_get0_id CMS_RecipientInfo_decrypt CMS_RecipientInfo_encrypt CMS_RecipientInfo_get0_pkey_ctx CMS_RecipientInfo_kari_decrypt CMS_RecipientInfo_kari_get0_alg CMS_RecipientInfo_kari_get0_ctx CMS_RecipientInfo_kari_get0_orig_id CMS_RecipientInfo_kari_get0_reks CMS_RecipientInfo_kari_orig_id_cmp CMS_RecipientInfo_kari_set0_pkey CMS_RecipientInfo_kekri_get0_id CMS_RecipientInfo_kekri_id_cmp CMS_RecipientInfo_ktri_cert_cmp CMS_RecipientInfo_ktri_get0_algs CMS_RecipientInfo_ktri_get0_signer_id CMS_RecipientInfo_set0_key CMS_RecipientInfo_set0_password CMS_RecipientInfo_set0_pkey CMS_RecipientInfo_type CMS_SharedInfo_encode CMS_SignedData_init CMS_SignerInfo_cert_cmp CMS_SignerInfo_get0_algs CMS_SignerInfo_get0_md_ctx CMS_SignerInfo_get0_pkey_ctx CMS_SignerInfo_get0_signature CMS_SignerInfo_get0_signer_id CMS_SignerInfo_set1_signer_cert CMS_SignerInfo_sign CMS_SignerInfo_verify CMS_SignerInfo_verify_content CMS_add0_CertificateChoices CMS_add0_RevocationInfoChoice CMS_add0_cert CMS_add0_crl CMS_add0_recipient_key CMS_add0_recipient_password CMS_add1_ReceiptRequest CMS_add1_cert CMS_add1_crl CMS_add1_recipient_cert CMS_add1_signer CMS_add_simple_smimecap CMS_add_smimecap CMS_add_standard_smimecap CMS_compress CMS_data CMS_dataFinal CMS_dataInit CMS_data_create CMS_decrypt CMS_decrypt_set1_key CMS_decrypt_set1_password CMS_decrypt_set1_pkey CMS_digest_create CMS_digest_verify CMS_encrypt CMS_final CMS_get0_RecipientInfos CMS_get0_SignerInfos CMS_get0_content CMS_get0_eContentType CMS_get0_signers CMS_get0_type CMS_get1_ReceiptRequest CMS_get1_certs CMS_get1_crls CMS_is_detached CMS_set1_eContentType CMS_set1_signers_certs CMS_set_detached CMS_sign CMS_sign_receipt CMS_signed_add1_attr CMS_signed_add1_attr_by_NID CMS_signed_add1_attr_by_OBJ CMS_signed_add1_attr_by_txt CMS_signed_delete_attr CMS_signed_get0_data_by_OBJ CMS_signed_get_attr CMS_signed_get_attr_by_NID CMS_signed_get_attr_by_OBJ CMS_signed_get_attr_count CMS_stream CMS_uncompress CMS_unsigned_add1_attr CMS_unsigned_add1_attr_by_NID CMS_unsigned_add1_attr_by_OBJ CMS_unsigned_add1_attr_by_txt CMS_unsigned_delete_attr CMS_unsigned_get0_data_by_OBJ CMS_unsigned_get_attr CMS_unsigned_get_attr_by_NID CMS_unsigned_get_attr_by_OBJ CMS_unsigned_get_attr_count CMS_verify CMS_verify_receipt COMP_CTX_free COMP_CTX_new COMP_compress_block COMP_expand_block COMP_rle COMP_zlib COMP_zlib_cleanup CONF_dump_bio CONF_dump_fp CONF_free CONF_get1_default_config_file CONF_get_number CONF_get_section CONF_get_string CONF_imodule_get_flags CONF_imodule_get_module CONF_imodule_get_name CONF_imodule_get_usr_data CONF_imodule_get_value CONF_imodule_set_flags CONF_imodule_set_usr_data CONF_load CONF_load_bio CONF_load_fp CONF_module_add CONF_module_get_usr_data CONF_module_set_usr_data CONF_modules_finish CONF_modules_free CONF_modules_load CONF_modules_load_file CONF_modules_unload CONF_parse_list CONF_set_default_method CONF_set_nconf CRL_DIST_POINTS_free CRL_DIST_POINTS_it CRL_DIST_POINTS_new CRYPTO_128_unwrap CRYPTO_128_wrap CRYPTO_THREADID_cmp CRYPTO_THREADID_cpy CRYPTO_THREADID_current CRYPTO_THREADID_get_callback CRYPTO_THREADID_hash CRYPTO_THREADID_set_callback CRYPTO_THREADID_set_numeric CRYPTO_THREADID_set_pointer CRYPTO_add_lock CRYPTO_cbc128_decrypt CRYPTO_cbc128_encrypt CRYPTO_ccm128_aad CRYPTO_ccm128_decrypt CRYPTO_ccm128_decrypt_ccm64 CRYPTO_ccm128_encrypt CRYPTO_ccm128_encrypt_ccm64 CRYPTO_ccm128_init CRYPTO_ccm128_setiv CRYPTO_ccm128_tag CRYPTO_cfb128_1_encrypt CRYPTO_cfb128_8_encrypt CRYPTO_cfb128_encrypt CRYPTO_cleanup_all_ex_data CRYPTO_ctr128_encrypt CRYPTO_ctr128_encrypt_ctr32 CRYPTO_cts128_decrypt CRYPTO_cts128_decrypt_block CRYPTO_cts128_encrypt CRYPTO_cts128_encrypt_block CRYPTO_dbg_free CRYPTO_dbg_get_options CRYPTO_dbg_malloc CRYPTO_dbg_realloc CRYPTO_dbg_set_options CRYPTO_destroy_dynlockid CRYPTO_dup_ex_data CRYPTO_ex_data_new_class CRYPTO_free CRYPTO_free_ex_data CRYPTO_free_locked CRYPTO_gcm128_aad CRYPTO_gcm128_decrypt CRYPTO_gcm128_decrypt_ctr32 CRYPTO_gcm128_encrypt CRYPTO_gcm128_encrypt_ctr32 CRYPTO_gcm128_finish CRYPTO_gcm128_init CRYPTO_gcm128_new CRYPTO_gcm128_release CRYPTO_gcm128_setiv CRYPTO_gcm128_tag CRYPTO_get_add_lock_callback CRYPTO_get_dynlock_create_callback CRYPTO_get_dynlock_destroy_callback CRYPTO_get_dynlock_lock_callback CRYPTO_get_dynlock_value CRYPTO_get_ex_data CRYPTO_get_ex_data_implementation CRYPTO_get_ex_new_index CRYPTO_get_id_callback CRYPTO_get_lock_name CRYPTO_get_locked_mem_ex_functions CRYPTO_get_locked_mem_functions CRYPTO_get_locking_callback CRYPTO_get_mem_debug_functions CRYPTO_get_mem_debug_options CRYPTO_get_mem_ex_functions CRYPTO_get_mem_functions CRYPTO_get_new_dynlockid CRYPTO_get_new_lockid CRYPTO_is_mem_check_on CRYPTO_lock CRYPTO_malloc CRYPTO_malloc_locked CRYPTO_mem_ctrl CRYPTO_mem_leaks CRYPTO_mem_leaks_cb CRYPTO_mem_leaks_fp CRYPTO_memcmp CRYPTO_new_ex_data CRYPTO_nistcts128_decrypt CRYPTO_nistcts128_decrypt_block CRYPTO_nistcts128_encrypt CRYPTO_nistcts128_encrypt_block CRYPTO_num_locks CRYPTO_ofb128_encrypt CRYPTO_pop_info CRYPTO_push_info_ CRYPTO_realloc CRYPTO_realloc_clean CRYPTO_remalloc CRYPTO_remove_all_info CRYPTO_set_add_lock_callback CRYPTO_set_dynlock_create_callback CRYPTO_set_dynlock_destroy_callback CRYPTO_set_dynlock_lock_callback CRYPTO_set_ex_data CRYPTO_set_ex_data_implementation CRYPTO_set_id_callback CRYPTO_set_locked_mem_ex_functions CRYPTO_set_locked_mem_functions CRYPTO_set_locking_callback CRYPTO_set_mem_debug_functions CRYPTO_set_mem_debug_options CRYPTO_set_mem_ex_functions CRYPTO_set_mem_functions CRYPTO_strdup CRYPTO_thread_id CRYPTO_xts128_encrypt Camellia_cbc_encrypt Camellia_cfb128_encrypt Camellia_cfb1_encrypt Camellia_cfb8_encrypt Camellia_ctr128_encrypt Camellia_decrypt Camellia_ecb_encrypt Camellia_encrypt Camellia_ofb128_encrypt Camellia_set_key DES_cbc_cksum DES_cbc_encrypt DES_cfb64_encrypt DES_cfb_encrypt DES_check_key_parity DES_crypt DES_decrypt3 DES_ecb3_encrypt DES_ecb_encrypt DES_ede3_cbc_encrypt DES_ede3_cbcm_encrypt DES_ede3_cfb64_encrypt DES_ede3_cfb_encrypt DES_ede3_ofb64_encrypt DES_enc_read DES_enc_write DES_encrypt1 DES_encrypt2 DES_encrypt3 DES_fcrypt DES_is_weak_key DES_key_sched DES_ncbc_encrypt DES_ofb64_encrypt DES_ofb_encrypt DES_options DES_pcbc_encrypt DES_quad_cksum DES_random_key DES_read_2passwords DES_read_password DES_set_key DES_set_key_checked DES_set_key_unchecked DES_set_odd_parity DES_string_to_2keys DES_string_to_key DES_xcbc_encrypt DH_KDF_X9_42 DH_OpenSSL DH_check DH_check_pub_key DH_compute_key DH_compute_key_padded DH_free DH_generate_key DH_generate_parameters DH_generate_parameters_ex DH_get_1024_160 DH_get_2048_224 DH_get_2048_256 DH_get_default_method DH_get_ex_data DH_get_ex_new_index DH_new DH_new_method DH_set_default_method DH_set_ex_data DH_set_method DH_size DH_up_ref DHparams_dup DHparams_print DHparams_print_fp DIRECTORYSTRING_free DIRECTORYSTRING_it DIRECTORYSTRING_new DISPLAYTEXT_free DISPLAYTEXT_it DISPLAYTEXT_new DIST_POINT_NAME_free DIST_POINT_NAME_it DIST_POINT_NAME_new DIST_POINT_free DIST_POINT_it DIST_POINT_new DIST_POINT_set_dpname DSA_OpenSSL DSA_SIG_free DSA_SIG_new DSA_do_sign DSA_do_verify DSA_dup_DH DSA_free DSA_generate_key DSA_generate_parameters DSA_generate_parameters_ex DSA_get_default_method DSA_get_ex_data DSA_get_ex_new_index DSA_new DSA_new_method DSA_print DSA_print_fp DSA_set_default_method DSA_set_ex_data DSA_set_method DSA_sign DSA_sign_setup DSA_size DSA_up_ref DSA_verify DSAparams_dup DSAparams_print DSAparams_print_fp DSO_METHOD_beos DSO_METHOD_dl DSO_METHOD_dlfcn DSO_METHOD_null DSO_METHOD_openssl DSO_METHOD_vms DSO_METHOD_win32 DSO_bind_func DSO_bind_var DSO_convert_filename DSO_ctrl DSO_flags DSO_free DSO_get_default_method DSO_get_filename DSO_get_loaded_filename DSO_get_method DSO_global_lookup DSO_load DSO_merge DSO_new DSO_new_method DSO_pathbyaddr DSO_set_default_method DSO_set_filename DSO_set_method DSO_set_name_converter DSO_up_ref ECDH_KDF_X9_62 ECDH_OpenSSL ECDH_compute_key ECDH_get_default_method ECDH_get_ex_data ECDH_get_ex_new_index ECDH_set_default_method ECDH_set_ex_data ECDH_set_method ECDSA_METHOD_free ECDSA_METHOD_get_app_data ECDSA_METHOD_new ECDSA_METHOD_set_app_data ECDSA_METHOD_set_flags ECDSA_METHOD_set_name ECDSA_METHOD_set_sign ECDSA_METHOD_set_sign_setup ECDSA_METHOD_set_verify ECDSA_OpenSSL ECDSA_SIG_free ECDSA_SIG_new ECDSA_do_sign ECDSA_do_sign_ex ECDSA_do_verify ECDSA_get_default_method ECDSA_get_ex_data ECDSA_get_ex_new_index ECDSA_set_default_method ECDSA_set_ex_data ECDSA_set_method ECDSA_sign ECDSA_sign_ex ECDSA_sign_setup ECDSA_size ECDSA_verify ECPKParameters_print ECPKParameters_print_fp ECParameters_print ECParameters_print_fp EC_GF2m_simple_method EC_GFp_mont_method EC_GFp_nist_method EC_GFp_simple_method EC_GROUP_check EC_GROUP_check_discriminant EC_GROUP_clear_free EC_GROUP_cmp EC_GROUP_copy EC_GROUP_dup EC_GROUP_free EC_GROUP_get0_generator EC_GROUP_get0_seed EC_GROUP_get_asn1_flag EC_GROUP_get_basis_type EC_GROUP_get_cofactor EC_GROUP_get_curve_GF2m EC_GROUP_get_curve_GFp EC_GROUP_get_curve_name EC_GROUP_get_degree EC_GROUP_get_mont_data EC_GROUP_get_order EC_GROUP_get_pentanomial_basis EC_GROUP_get_point_conversion_form EC_GROUP_get_seed_len EC_GROUP_get_trinomial_basis EC_GROUP_have_precompute_mult EC_GROUP_method_of EC_GROUP_new EC_GROUP_new_by_curve_name EC_GROUP_new_curve_GF2m EC_GROUP_new_curve_GFp EC_GROUP_precompute_mult EC_GROUP_set_asn1_flag EC_GROUP_set_curve_GF2m EC_GROUP_set_curve_GFp EC_GROUP_set_curve_name EC_GROUP_set_generator EC_GROUP_set_point_conversion_form EC_GROUP_set_seed EC_KEY_check_key EC_KEY_clear_flags EC_KEY_copy EC_KEY_dup EC_KEY_free EC_KEY_generate_key EC_KEY_get0_group EC_KEY_get0_private_key EC_KEY_get0_public_key EC_KEY_get_conv_form EC_KEY_get_enc_flags EC_KEY_get_flags EC_KEY_get_key_method_data EC_KEY_insert_key_method_data EC_KEY_new EC_KEY_new_by_curve_name EC_KEY_precompute_mult EC_KEY_print EC_KEY_print_fp EC_KEY_set_asn1_flag EC_KEY_set_conv_form EC_KEY_set_enc_flags EC_KEY_set_flags EC_KEY_set_group EC_KEY_set_private_key EC_KEY_set_public_key EC_KEY_set_public_key_affine_coordinates EC_KEY_up_ref EC_METHOD_get_field_type EC_POINT_add EC_POINT_bn2point EC_POINT_clear_free EC_POINT_cmp EC_POINT_copy EC_POINT_dbl EC_POINT_dup EC_POINT_free EC_POINT_get_Jprojective_coordinates_GFp EC_POINT_get_affine_coordinates_GF2m EC_POINT_get_affine_coordinates_GFp EC_POINT_hex2point EC_POINT_invert EC_POINT_is_at_infinity EC_POINT_is_on_curve EC_POINT_make_affine EC_POINT_method_of EC_POINT_mul EC_POINT_new EC_POINT_oct2point EC_POINT_point2bn EC_POINT_point2hex EC_POINT_point2oct EC_POINT_set_Jprojective_coordinates_GFp EC_POINT_set_affine_coordinates_GF2m EC_POINT_set_affine_coordinates_GFp EC_POINT_set_compressed_coordinates_GF2m EC_POINT_set_compressed_coordinates_GFp EC_POINT_set_to_infinity EC_POINTs_make_affine EC_POINTs_mul EC_curve_nid2nist EC_curve_nist2nid EC_get_builtin_curves EDIPARTYNAME_free EDIPARTYNAME_it EDIPARTYNAME_new ENGINE_add ENGINE_add_conf_module ENGINE_by_id ENGINE_cleanup ENGINE_cmd_is_executable ENGINE_ctrl ENGINE_ctrl_cmd ENGINE_ctrl_cmd_string ENGINE_finish ENGINE_free ENGINE_get_DH ENGINE_get_DSA ENGINE_get_ECDH ENGINE_get_ECDSA ENGINE_get_RAND ENGINE_get_RSA ENGINE_get_STORE ENGINE_get_cipher ENGINE_get_cipher_engine ENGINE_get_ciphers ENGINE_get_cmd_defns ENGINE_get_ctrl_function ENGINE_get_default_DH ENGINE_get_default_DSA ENGINE_get_default_ECDH ENGINE_get_default_ECDSA ENGINE_get_default_RAND ENGINE_get_default_RSA ENGINE_get_destroy_function ENGINE_get_digest ENGINE_get_digest_engine ENGINE_get_digests ENGINE_get_ex_data ENGINE_get_ex_new_index ENGINE_get_finish_function ENGINE_get_first ENGINE_get_flags ENGINE_get_id ENGINE_get_init_function ENGINE_get_last ENGINE_get_load_privkey_function ENGINE_get_load_pubkey_function ENGINE_get_name ENGINE_get_next ENGINE_get_pkey_asn1_meth ENGINE_get_pkey_asn1_meth_engine ENGINE_get_pkey_asn1_meth_str ENGINE_get_pkey_asn1_meths ENGINE_get_pkey_meth ENGINE_get_pkey_meth_engine ENGINE_get_pkey_meths ENGINE_get_prev ENGINE_get_ssl_client_cert_function ENGINE_get_static_state ENGINE_get_table_flags ENGINE_init ENGINE_load_builtin_engines ENGINE_load_cryptodev ENGINE_load_dynamic ENGINE_load_openssl ENGINE_load_private_key ENGINE_load_public_key ENGINE_load_rdrand ENGINE_load_ssl_client_cert ENGINE_new ENGINE_pkey_asn1_find_str ENGINE_register_DH ENGINE_register_DSA ENGINE_register_ECDH ENGINE_register_ECDSA ENGINE_register_RAND ENGINE_register_RSA ENGINE_register_STORE ENGINE_register_all_DH ENGINE_register_all_DSA ENGINE_register_all_ECDH ENGINE_register_all_ECDSA ENGINE_register_all_RAND ENGINE_register_all_RSA ENGINE_register_all_STORE ENGINE_register_all_ciphers ENGINE_register_all_complete ENGINE_register_all_digests ENGINE_register_all_pkey_asn1_meths ENGINE_register_all_pkey_meths ENGINE_register_ciphers ENGINE_register_complete ENGINE_register_digests ENGINE_register_pkey_asn1_meths ENGINE_register_pkey_meths ENGINE_remove ENGINE_set_DH ENGINE_set_DSA ENGINE_set_ECDH ENGINE_set_ECDSA ENGINE_set_RAND ENGINE_set_RSA ENGINE_set_STORE ENGINE_set_ciphers ENGINE_set_cmd_defns ENGINE_set_ctrl_function ENGINE_set_default ENGINE_set_default_DH ENGINE_set_default_DSA ENGINE_set_default_ECDH ENGINE_set_default_ECDSA ENGINE_set_default_RAND ENGINE_set_default_RSA ENGINE_set_default_ciphers ENGINE_set_default_digests ENGINE_set_default_pkey_asn1_meths ENGINE_set_default_pkey_meths ENGINE_set_default_string ENGINE_set_destroy_function ENGINE_set_digests ENGINE_set_ex_data ENGINE_set_finish_function ENGINE_set_flags ENGINE_set_id ENGINE_set_init_function ENGINE_set_load_privkey_function ENGINE_set_load_pubkey_function ENGINE_set_load_ssl_client_cert_function ENGINE_set_name ENGINE_set_pkey_asn1_meths ENGINE_set_pkey_meths ENGINE_set_table_flags ENGINE_unregister_DH ENGINE_unregister_DSA ENGINE_unregister_ECDH ENGINE_unregister_ECDSA ENGINE_unregister_RAND ENGINE_unregister_RSA ENGINE_unregister_STORE ENGINE_unregister_ciphers ENGINE_unregister_digests ENGINE_unregister_pkey_asn1_meths ENGINE_unregister_pkey_meths ENGINE_up_ref ERR_add_error_data ERR_add_error_vdata ERR_clear_error ERR_error_string ERR_error_string_n ERR_free_strings ERR_func_error_string ERR_get_err_state_table ERR_get_error ERR_get_error_line ERR_get_error_line_data ERR_get_implementation ERR_get_next_error_library ERR_get_state ERR_get_string_table ERR_lib_error_string ERR_load_ASN1_strings ERR_load_BIO_strings ERR_load_BN_strings ERR_load_BUF_strings ERR_load_CMS_strings ERR_load_COMP_strings ERR_load_CONF_strings ERR_load_CRYPTO_strings ERR_load_DH_strings ERR_load_DSA_strings ERR_load_DSO_strings ERR_load_ECDH_strings ERR_load_ECDSA_strings ERR_load_EC_strings ERR_load_ENGINE_strings ERR_load_ERR_strings ERR_load_EVP_strings ERR_load_OBJ_strings ERR_load_OCSP_strings ERR_load_PEM_strings ERR_load_PKCS12_strings ERR_load_PKCS7_strings ERR_load_RAND_strings ERR_load_RSA_strings ERR_load_TS_strings ERR_load_UI_strings ERR_load_X509V3_strings ERR_load_X509_strings ERR_load_crypto_strings ERR_load_strings ERR_peek_error ERR_peek_error_line ERR_peek_error_line_data ERR_peek_last_error ERR_peek_last_error_line ERR_peek_last_error_line_data ERR_pop_to_mark ERR_print_errors ERR_print_errors_cb ERR_print_errors_fp ERR_put_error ERR_reason_error_string ERR_release_err_state_table ERR_remove_state ERR_remove_thread_state ERR_set_error_data ERR_set_implementation ERR_set_mark ERR_unload_strings ESS_CERT_ID_dup ESS_CERT_ID_free ESS_CERT_ID_new ESS_ISSUER_SERIAL_dup ESS_ISSUER_SERIAL_free ESS_ISSUER_SERIAL_new ESS_SIGNING_CERT_dup ESS_SIGNING_CERT_free ESS_SIGNING_CERT_new EVP_BytesToKey EVP_CIPHER_CTX_block_size EVP_CIPHER_CTX_cipher EVP_CIPHER_CTX_cleanup EVP_CIPHER_CTX_clear_flags EVP_CIPHER_CTX_copy EVP_CIPHER_CTX_ctrl EVP_CIPHER_CTX_flags EVP_CIPHER_CTX_free EVP_CIPHER_CTX_get_app_data EVP_CIPHER_CTX_init EVP_CIPHER_CTX_iv_length EVP_CIPHER_CTX_key_length EVP_CIPHER_CTX_new EVP_CIPHER_CTX_nid EVP_CIPHER_CTX_rand_key EVP_CIPHER_CTX_set_app_data EVP_CIPHER_CTX_set_flags EVP_CIPHER_CTX_set_key_length EVP_CIPHER_CTX_set_padding EVP_CIPHER_CTX_test_flags EVP_CIPHER_asn1_to_param EVP_CIPHER_block_size EVP_CIPHER_do_all EVP_CIPHER_do_all_sorted EVP_CIPHER_flags EVP_CIPHER_get_asn1_iv EVP_CIPHER_iv_length EVP_CIPHER_key_length EVP_CIPHER_nid EVP_CIPHER_param_to_asn1 EVP_CIPHER_set_asn1_iv EVP_CIPHER_type EVP_Cipher EVP_CipherFinal EVP_CipherFinal_ex EVP_CipherInit EVP_CipherInit_ex EVP_CipherUpdate EVP_DecodeBlock EVP_DecodeFinal EVP_DecodeInit EVP_DecodeUpdate EVP_DecryptFinal EVP_DecryptFinal_ex EVP_DecryptInit EVP_DecryptInit_ex EVP_DecryptUpdate EVP_Digest EVP_DigestFinal EVP_DigestFinal_ex EVP_DigestInit EVP_DigestInit_ex EVP_DigestSignFinal EVP_DigestSignInit EVP_DigestUpdate EVP_DigestVerifyFinal EVP_DigestVerifyInit EVP_EncodeBlock EVP_EncodeFinal EVP_EncodeInit EVP_EncodeUpdate EVP_EncryptFinal EVP_EncryptFinal_ex EVP_EncryptInit EVP_EncryptInit_ex EVP_EncryptUpdate EVP_MD_CTX_cleanup EVP_MD_CTX_clear_flags EVP_MD_CTX_copy EVP_MD_CTX_copy_ex EVP_MD_CTX_create EVP_MD_CTX_destroy EVP_MD_CTX_init EVP_MD_CTX_md EVP_MD_CTX_set_flags EVP_MD_CTX_test_flags EVP_MD_block_size EVP_MD_do_all EVP_MD_do_all_sorted EVP_MD_flags EVP_MD_pkey_type EVP_MD_size EVP_MD_type EVP_OpenFinal EVP_OpenInit EVP_PBE_CipherInit EVP_PBE_alg_add EVP_PBE_alg_add_type EVP_PBE_cleanup EVP_PBE_find EVP_PKCS82PKEY EVP_PKEY2PKCS8 EVP_PKEY2PKCS8_broken EVP_PKEY_CTX_ctrl EVP_PKEY_CTX_ctrl_str EVP_PKEY_CTX_dup EVP_PKEY_CTX_free EVP_PKEY_CTX_get0_peerkey EVP_PKEY_CTX_get0_pkey EVP_PKEY_CTX_get_app_data EVP_PKEY_CTX_get_cb EVP_PKEY_CTX_get_data EVP_PKEY_CTX_get_keygen_info EVP_PKEY_CTX_get_operation EVP_PKEY_CTX_new EVP_PKEY_CTX_new_id EVP_PKEY_CTX_set0_keygen_info EVP_PKEY_CTX_set_app_data EVP_PKEY_CTX_set_cb EVP_PKEY_CTX_set_data EVP_PKEY_add1_attr EVP_PKEY_add1_attr_by_NID EVP_PKEY_add1_attr_by_OBJ EVP_PKEY_add1_attr_by_txt EVP_PKEY_asn1_add0 EVP_PKEY_asn1_add_alias EVP_PKEY_asn1_copy EVP_PKEY_asn1_find EVP_PKEY_asn1_find_str EVP_PKEY_asn1_free EVP_PKEY_asn1_get0 EVP_PKEY_asn1_get0_info EVP_PKEY_asn1_get_count EVP_PKEY_asn1_new EVP_PKEY_asn1_set_ctrl EVP_PKEY_asn1_set_free EVP_PKEY_asn1_set_item EVP_PKEY_asn1_set_param EVP_PKEY_asn1_set_private EVP_PKEY_asn1_set_public EVP_PKEY_assign EVP_PKEY_base_id EVP_PKEY_bits EVP_PKEY_cmp EVP_PKEY_cmp_parameters EVP_PKEY_copy_parameters EVP_PKEY_decrypt EVP_PKEY_decrypt_init EVP_PKEY_decrypt_old EVP_PKEY_delete_attr EVP_PKEY_derive EVP_PKEY_derive_init EVP_PKEY_derive_set_peer EVP_PKEY_encrypt EVP_PKEY_encrypt_init EVP_PKEY_encrypt_old EVP_PKEY_free EVP_PKEY_get0 EVP_PKEY_get0_asn1 EVP_PKEY_get1_DH EVP_PKEY_get1_DSA EVP_PKEY_get1_EC_KEY EVP_PKEY_get1_RSA EVP_PKEY_get_attr EVP_PKEY_get_attr_by_NID EVP_PKEY_get_attr_by_OBJ EVP_PKEY_get_attr_count EVP_PKEY_get_default_digest_nid EVP_PKEY_id EVP_PKEY_keygen EVP_PKEY_keygen_init EVP_PKEY_meth_add0 EVP_PKEY_meth_copy EVP_PKEY_meth_find EVP_PKEY_meth_free EVP_PKEY_meth_get0_info EVP_PKEY_meth_get_cleanup EVP_PKEY_meth_get_copy EVP_PKEY_meth_get_ctrl EVP_PKEY_meth_get_decrypt EVP_PKEY_meth_get_derive EVP_PKEY_meth_get_encrypt EVP_PKEY_meth_get_init EVP_PKEY_meth_get_keygen EVP_PKEY_meth_get_paramgen EVP_PKEY_meth_get_sign EVP_PKEY_meth_get_signctx EVP_PKEY_meth_get_verify EVP_PKEY_meth_get_verify_recover EVP_PKEY_meth_get_verifyctx EVP_PKEY_meth_new EVP_PKEY_meth_set_cleanup EVP_PKEY_meth_set_copy EVP_PKEY_meth_set_ctrl EVP_PKEY_meth_set_decrypt EVP_PKEY_meth_set_derive EVP_PKEY_meth_set_encrypt EVP_PKEY_meth_set_init EVP_PKEY_meth_set_keygen EVP_PKEY_meth_set_paramgen EVP_PKEY_meth_set_sign EVP_PKEY_meth_set_signctx EVP_PKEY_meth_set_verify EVP_PKEY_meth_set_verify_recover EVP_PKEY_meth_set_verifyctx EVP_PKEY_missing_parameters EVP_PKEY_new EVP_PKEY_new_mac_key EVP_PKEY_paramgen EVP_PKEY_paramgen_init EVP_PKEY_print_params EVP_PKEY_print_private EVP_PKEY_print_public EVP_PKEY_save_parameters EVP_PKEY_set1_DH EVP_PKEY_set1_DSA EVP_PKEY_set1_EC_KEY EVP_PKEY_set1_RSA EVP_PKEY_set_type EVP_PKEY_set_type_str EVP_PKEY_sign EVP_PKEY_sign_init EVP_PKEY_size EVP_PKEY_type EVP_PKEY_verify EVP_PKEY_verify_init EVP_PKEY_verify_recover EVP_PKEY_verify_recover_init EVP_SealFinal EVP_SealInit EVP_SignFinal EVP_VerifyFinal EVP_add_alg_module EVP_add_cipher EVP_add_digest EVP_aes_128_cbc EVP_aes_128_cbc_hmac_sha1 EVP_aes_128_cbc_hmac_sha256 EVP_aes_128_ccm EVP_aes_128_cfb1 EVP_aes_128_cfb128 EVP_aes_128_cfb8 EVP_aes_128_ctr EVP_aes_128_ecb EVP_aes_128_gcm EVP_aes_128_ofb EVP_aes_128_wrap EVP_aes_128_xts EVP_aes_192_cbc EVP_aes_192_ccm EVP_aes_192_cfb1 EVP_aes_192_cfb128 EVP_aes_192_cfb8 EVP_aes_192_ctr EVP_aes_192_ecb EVP_aes_192_gcm EVP_aes_192_ofb EVP_aes_192_wrap EVP_aes_256_cbc EVP_aes_256_cbc_hmac_sha1 EVP_aes_256_cbc_hmac_sha256 EVP_aes_256_ccm EVP_aes_256_cfb1 EVP_aes_256_cfb128 EVP_aes_256_cfb8 EVP_aes_256_ctr EVP_aes_256_ecb EVP_aes_256_gcm EVP_aes_256_ofb EVP_aes_256_wrap EVP_aes_256_xts EVP_bf_cbc EVP_bf_cfb64 EVP_bf_ecb EVP_bf_ofb EVP_camellia_128_cbc EVP_camellia_128_cfb1 EVP_camellia_128_cfb128 EVP_camellia_128_cfb8 EVP_camellia_128_ecb EVP_camellia_128_ofb EVP_camellia_192_cbc EVP_camellia_192_cfb1 EVP_camellia_192_cfb128 EVP_camellia_192_cfb8 EVP_camellia_192_ecb EVP_camellia_192_ofb EVP_camellia_256_cbc EVP_camellia_256_cfb1 EVP_camellia_256_cfb128 EVP_camellia_256_cfb8 EVP_camellia_256_ecb EVP_camellia_256_ofb EVP_cast5_cbc EVP_cast5_cfb64 EVP_cast5_ecb EVP_cast5_ofb EVP_cleanup EVP_des_cbc EVP_des_cfb1 EVP_des_cfb64 EVP_des_cfb8 EVP_des_ecb EVP_des_ede EVP_des_ede3 EVP_des_ede3_cbc EVP_des_ede3_cfb1 EVP_des_ede3_cfb64 EVP_des_ede3_cfb8 EVP_des_ede3_ecb EVP_des_ede3_ofb EVP_des_ede3_wrap EVP_des_ede_cbc EVP_des_ede_cfb64 EVP_des_ede_ecb EVP_des_ede_ofb EVP_des_ofb EVP_desx_cbc EVP_dss EVP_dss1 EVP_ecdsa EVP_enc_null EVP_get_cipherbyname EVP_get_digestbyname EVP_get_pw_prompt EVP_idea_cbc EVP_idea_cfb64 EVP_idea_ecb EVP_idea_ofb EVP_md4 EVP_md5 EVP_md_null EVP_mdc2 EVP_rc2_40_cbc EVP_rc2_64_cbc EVP_rc2_cbc EVP_rc2_cfb64 EVP_rc2_ecb EVP_rc2_ofb EVP_rc4 EVP_rc4_40 EVP_rc4_hmac_md5 EVP_read_pw_string EVP_read_pw_string_min EVP_ripemd160 EVP_seed_cbc EVP_seed_cfb128 EVP_seed_ecb EVP_seed_ofb EVP_set_pw_prompt EVP_sha EVP_sha1 EVP_sha224 EVP_sha256 EVP_sha384 EVP_sha512 EVP_whirlpool EXTENDED_KEY_USAGE_free EXTENDED_KEY_USAGE_it EXTENDED_KEY_USAGE_new FIPS_mode FIPS_mode_set GENERAL_NAMES_free GENERAL_NAMES_it GENERAL_NAMES_new GENERAL_NAME_cmp GENERAL_NAME_dup GENERAL_NAME_free GENERAL_NAME_get0_otherName GENERAL_NAME_get0_value GENERAL_NAME_it GENERAL_NAME_new GENERAL_NAME_print GENERAL_NAME_set0_othername GENERAL_NAME_set0_value GENERAL_SUBTREE_free GENERAL_SUBTREE_it GENERAL_SUBTREE_new HMAC HMAC_CTX_cleanup HMAC_CTX_copy HMAC_CTX_init HMAC_CTX_set_flags HMAC_Final HMAC_Init HMAC_Init_ex HMAC_Update ISSUING_DIST_POINT_free ISSUING_DIST_POINT_it ISSUING_DIST_POINT_new KRB5_APREQBODY_free KRB5_APREQBODY_it KRB5_APREQBODY_new KRB5_APREQ_free KRB5_APREQ_it KRB5_APREQ_new KRB5_AUTHDATA_free KRB5_AUTHDATA_it KRB5_AUTHDATA_new KRB5_AUTHENTBODY_free KRB5_AUTHENTBODY_it KRB5_AUTHENTBODY_new KRB5_AUTHENT_free KRB5_AUTHENT_it KRB5_AUTHENT_new KRB5_CHECKSUM_free KRB5_CHECKSUM_it KRB5_CHECKSUM_new KRB5_ENCDATA_free KRB5_ENCDATA_it KRB5_ENCDATA_new KRB5_ENCKEY_free KRB5_ENCKEY_it KRB5_ENCKEY_new KRB5_PRINCNAME_free KRB5_PRINCNAME_it KRB5_PRINCNAME_new KRB5_TICKET_free KRB5_TICKET_it KRB5_TICKET_new KRB5_TKTBODY_free KRB5_TKTBODY_it KRB5_TKTBODY_new LONG_it MD4 MD4_Final MD4_Init MD4_Transform MD4_Update MD5 MD5_Final MD5_Init MD5_Transform MD5_Update MDC2 MDC2_Final MDC2_Init MDC2_Update NAME_CONSTRAINTS_check NAME_CONSTRAINTS_free NAME_CONSTRAINTS_it NAME_CONSTRAINTS_new NCONF_WIN32 NCONF_default NCONF_dump_bio NCONF_dump_fp NCONF_free NCONF_free_data NCONF_get_number_e NCONF_get_section NCONF_get_string NCONF_load NCONF_load_bio NCONF_load_fp NCONF_new NETSCAPE_CERT_SEQUENCE_free NETSCAPE_CERT_SEQUENCE_it NETSCAPE_CERT_SEQUENCE_new NETSCAPE_SPKAC_free NETSCAPE_SPKAC_it NETSCAPE_SPKAC_new NETSCAPE_SPKI_b64_decode NETSCAPE_SPKI_b64_encode NETSCAPE_SPKI_free NETSCAPE_SPKI_get_pubkey NETSCAPE_SPKI_it NETSCAPE_SPKI_new NETSCAPE_SPKI_print NETSCAPE_SPKI_set_pubkey NETSCAPE_SPKI_sign NETSCAPE_SPKI_verify NETSCAPE_X509_free NETSCAPE_X509_it NETSCAPE_X509_new NOTICEREF_free NOTICEREF_it NOTICEREF_new OBJ_NAME_add OBJ_NAME_cleanup OBJ_NAME_do_all OBJ_NAME_do_all_sorted OBJ_NAME_get OBJ_NAME_init OBJ_NAME_new_index OBJ_NAME_remove OBJ_add_object OBJ_add_sigid OBJ_bsearch_ OBJ_bsearch_ex_ OBJ_cleanup OBJ_cmp OBJ_create OBJ_create_objects OBJ_dup OBJ_find_sigid_algs OBJ_find_sigid_by_algs OBJ_ln2nid OBJ_new_nid OBJ_nid2ln OBJ_nid2obj OBJ_nid2sn OBJ_obj2nid OBJ_obj2txt OBJ_sigid_free OBJ_sn2nid OBJ_txt2nid OBJ_txt2obj OCSP_BASICRESP_add1_ext_i2d OCSP_BASICRESP_add_ext OCSP_BASICRESP_delete_ext OCSP_BASICRESP_free OCSP_BASICRESP_get1_ext_d2i OCSP_BASICRESP_get_ext OCSP_BASICRESP_get_ext_by_NID OCSP_BASICRESP_get_ext_by_OBJ OCSP_BASICRESP_get_ext_by_critical OCSP_BASICRESP_get_ext_count OCSP_BASICRESP_it OCSP_BASICRESP_new OCSP_CERTID_dup OCSP_CERTID_free OCSP_CERTID_it OCSP_CERTID_new OCSP_CERTSTATUS_free OCSP_CERTSTATUS_it OCSP_CERTSTATUS_new OCSP_CRLID_free OCSP_CRLID_it OCSP_CRLID_new OCSP_ONEREQ_add1_ext_i2d OCSP_ONEREQ_add_ext OCSP_ONEREQ_delete_ext OCSP_ONEREQ_free OCSP_ONEREQ_get1_ext_d2i OCSP_ONEREQ_get_ext OCSP_ONEREQ_get_ext_by_NID OCSP_ONEREQ_get_ext_by_OBJ OCSP_ONEREQ_get_ext_by_critical OCSP_ONEREQ_get_ext_count OCSP_ONEREQ_it OCSP_ONEREQ_new OCSP_REQINFO_free OCSP_REQINFO_it OCSP_REQINFO_new OCSP_REQUEST_add1_ext_i2d OCSP_REQUEST_add_ext OCSP_REQUEST_delete_ext OCSP_REQUEST_free OCSP_REQUEST_get1_ext_d2i OCSP_REQUEST_get_ext OCSP_REQUEST_get_ext_by_NID OCSP_REQUEST_get_ext_by_OBJ OCSP_REQUEST_get_ext_by_critical OCSP_REQUEST_get_ext_count OCSP_REQUEST_it OCSP_REQUEST_new OCSP_REQUEST_print OCSP_REQ_CTX_add1_header OCSP_REQ_CTX_free OCSP_REQ_CTX_get0_mem_bio OCSP_REQ_CTX_http OCSP_REQ_CTX_i2d OCSP_REQ_CTX_nbio OCSP_REQ_CTX_nbio_d2i OCSP_REQ_CTX_new OCSP_REQ_CTX_set1_req OCSP_RESPBYTES_free OCSP_RESPBYTES_it OCSP_RESPBYTES_new OCSP_RESPDATA_free OCSP_RESPDATA_it OCSP_RESPDATA_new OCSP_RESPID_free OCSP_RESPID_it OCSP_RESPID_new OCSP_RESPONSE_free OCSP_RESPONSE_it OCSP_RESPONSE_new OCSP_RESPONSE_print OCSP_REVOKEDINFO_free OCSP_REVOKEDINFO_it OCSP_REVOKEDINFO_new OCSP_SERVICELOC_free OCSP_SERVICELOC_it OCSP_SERVICELOC_new OCSP_SIGNATURE_free OCSP_SIGNATURE_it OCSP_SIGNATURE_new OCSP_SINGLERESP_add1_ext_i2d OCSP_SINGLERESP_add_ext OCSP_SINGLERESP_delete_ext OCSP_SINGLERESP_free OCSP_SINGLERESP_get1_ext_d2i OCSP_SINGLERESP_get_ext OCSP_SINGLERESP_get_ext_by_NID OCSP_SINGLERESP_get_ext_by_OBJ OCSP_SINGLERESP_get_ext_by_critical OCSP_SINGLERESP_get_ext_count OCSP_SINGLERESP_it OCSP_SINGLERESP_new OCSP_accept_responses_new OCSP_archive_cutoff_new OCSP_basic_add1_cert OCSP_basic_add1_nonce OCSP_basic_add1_status OCSP_basic_sign OCSP_basic_verify OCSP_cert_id_new OCSP_cert_status_str OCSP_cert_to_id OCSP_check_nonce OCSP_check_validity OCSP_copy_nonce OCSP_crlID_new OCSP_crl_reason_str OCSP_id_cmp OCSP_id_get0_info OCSP_id_issuer_cmp OCSP_onereq_get0_id OCSP_parse_url OCSP_request_add0_id OCSP_request_add1_cert OCSP_request_add1_nonce OCSP_request_is_signed OCSP_request_onereq_count OCSP_request_onereq_get0 OCSP_request_set1_name OCSP_request_sign OCSP_request_verify OCSP_resp_count OCSP_resp_find OCSP_resp_find_status OCSP_resp_get0 OCSP_response_create OCSP_response_get1_basic OCSP_response_status OCSP_response_status_str OCSP_sendreq_bio OCSP_sendreq_nbio OCSP_sendreq_new OCSP_set_max_response_length OCSP_single_get0_status OCSP_url_svcloc_new OPENSSL_DIR_end OPENSSL_DIR_read OPENSSL_add_all_algorithms_conf OPENSSL_add_all_algorithms_noconf OPENSSL_asc2uni OPENSSL_cleanse OPENSSL_config OPENSSL_cpuid_setup OPENSSL_gmtime OPENSSL_gmtime_adj OPENSSL_gmtime_diff OPENSSL_ia32cap_loc OPENSSL_init OPENSSL_isservice OPENSSL_issetugid OPENSSL_load_builtin_modules OPENSSL_memcmp OPENSSL_no_config OPENSSL_showfatal OPENSSL_stderr OPENSSL_strcasecmp OPENSSL_strncasecmp OPENSSL_uni2asc OSSL_DES_version OSSL_libdes_version OTHERNAME_cmp OTHERNAME_free OTHERNAME_it OTHERNAME_new OpenSSLDie OpenSSL_add_all_ciphers OpenSSL_add_all_digests PBE2PARAM_free PBE2PARAM_it PBE2PARAM_new PBEPARAM_free PBEPARAM_it PBEPARAM_new PBKDF2PARAM_free PBKDF2PARAM_it PBKDF2PARAM_new PEM_ASN1_read PEM_ASN1_read_bio PEM_ASN1_write PEM_ASN1_write_bio PEM_SealFinal PEM_SealInit PEM_SealUpdate PEM_SignFinal PEM_SignInit PEM_SignUpdate PEM_X509_INFO_read PEM_X509_INFO_read_bio PEM_X509_INFO_write_bio PEM_bytes_read_bio PEM_def_callback PEM_dek_info PEM_do_header PEM_get_EVP_CIPHER_INFO PEM_proc_type PEM_read PEM_read_CMS PEM_read_DHparams PEM_read_DSAPrivateKey PEM_read_DSA_PUBKEY PEM_read_DSAparams PEM_read_ECPKParameters PEM_read_ECPrivateKey PEM_read_EC_PUBKEY PEM_read_NETSCAPE_CERT_SEQUENCE PEM_read_PKCS7 PEM_read_PKCS8 PEM_read_PKCS8_PRIV_KEY_INFO PEM_read_PUBKEY PEM_read_PrivateKey PEM_read_RSAPrivateKey PEM_read_RSAPublicKey PEM_read_RSA_PUBKEY PEM_read_X509 PEM_read_X509_AUX PEM_read_X509_CERT_PAIR PEM_read_X509_CRL PEM_read_X509_REQ PEM_read_bio PEM_read_bio_CMS PEM_read_bio_DHparams PEM_read_bio_DSAPrivateKey PEM_read_bio_DSA_PUBKEY PEM_read_bio_DSAparams PEM_read_bio_ECPKParameters PEM_read_bio_ECPrivateKey PEM_read_bio_EC_PUBKEY PEM_read_bio_NETSCAPE_CERT_SEQUENCE PEM_read_bio_PKCS7 PEM_read_bio_PKCS8 PEM_read_bio_PKCS8_PRIV_KEY_INFO PEM_read_bio_PUBKEY PEM_read_bio_Parameters PEM_read_bio_PrivateKey PEM_read_bio_RSAPrivateKey PEM_read_bio_RSAPublicKey PEM_read_bio_RSA_PUBKEY PEM_read_bio_X509 PEM_read_bio_X509_AUX PEM_read_bio_X509_CERT_PAIR PEM_read_bio_X509_CRL PEM_read_bio_X509_REQ PEM_write PEM_write_CMS PEM_write_DHparams PEM_write_DHxparams PEM_write_DSAPrivateKey PEM_write_DSA_PUBKEY PEM_write_DSAparams PEM_write_ECPKParameters PEM_write_ECPrivateKey PEM_write_EC_PUBKEY PEM_write_NETSCAPE_CERT_SEQUENCE PEM_write_PKCS7 PEM_write_PKCS8 PEM_write_PKCS8PrivateKey PEM_write_PKCS8PrivateKey_nid PEM_write_PKCS8_PRIV_KEY_INFO PEM_write_PUBKEY PEM_write_PrivateKey PEM_write_RSAPrivateKey PEM_write_RSAPublicKey PEM_write_RSA_PUBKEY PEM_write_X509 PEM_write_X509_AUX PEM_write_X509_CERT_PAIR PEM_write_X509_CRL PEM_write_X509_REQ PEM_write_X509_REQ_NEW PEM_write_bio PEM_write_bio_ASN1_stream PEM_write_bio_CMS PEM_write_bio_CMS_stream PEM_write_bio_DHparams PEM_write_bio_DHxparams PEM_write_bio_DSAPrivateKey PEM_write_bio_DSA_PUBKEY PEM_write_bio_DSAparams PEM_write_bio_ECPKParameters PEM_write_bio_ECPrivateKey PEM_write_bio_EC_PUBKEY PEM_write_bio_NETSCAPE_CERT_SEQUENCE PEM_write_bio_PKCS7 PEM_write_bio_PKCS7_stream PEM_write_bio_PKCS8 PEM_write_bio_PKCS8PrivateKey PEM_write_bio_PKCS8PrivateKey_nid PEM_write_bio_PKCS8_PRIV_KEY_INFO PEM_write_bio_PUBKEY PEM_write_bio_Parameters PEM_write_bio_PrivateKey PEM_write_bio_RSAPrivateKey PEM_write_bio_RSAPublicKey PEM_write_bio_RSA_PUBKEY PEM_write_bio_X509 PEM_write_bio_X509_AUX PEM_write_bio_X509_CERT_PAIR PEM_write_bio_X509_CRL PEM_write_bio_X509_REQ PEM_write_bio_X509_REQ_NEW PKCS12_AUTHSAFES_it PKCS12_BAGS_free PKCS12_BAGS_it PKCS12_BAGS_new PKCS12_MAC_DATA_free PKCS12_MAC_DATA_it PKCS12_MAC_DATA_new PKCS12_MAKE_KEYBAG PKCS12_MAKE_SHKEYBAG PKCS12_PBE_add PKCS12_PBE_keyivgen PKCS12_SAFEBAGS_it PKCS12_SAFEBAG_free PKCS12_SAFEBAG_it PKCS12_SAFEBAG_new PKCS12_add_CSPName_asc PKCS12_add_cert PKCS12_add_friendlyname_asc PKCS12_add_friendlyname_uni PKCS12_add_key PKCS12_add_localkeyid PKCS12_add_safe PKCS12_add_safes PKCS12_certbag2x509 PKCS12_certbag2x509crl PKCS12_create PKCS12_decrypt_skey PKCS12_free PKCS12_gen_mac PKCS12_get_attr_gen PKCS12_get_friendlyname PKCS12_init PKCS12_it PKCS12_item_decrypt_d2i PKCS12_item_i2d_encrypt PKCS12_item_pack_safebag PKCS12_key_gen_asc PKCS12_key_gen_uni PKCS12_new PKCS12_newpass PKCS12_pack_authsafes PKCS12_pack_p7data PKCS12_pack_p7encdata PKCS12_parse PKCS12_pbe_crypt PKCS12_set_mac PKCS12_setup_mac PKCS12_unpack_authsafes PKCS12_unpack_p7data PKCS12_unpack_p7encdata PKCS12_verify_mac PKCS12_x5092certbag PKCS12_x509crl2certbag PKCS1_MGF1 PKCS5_PBE_add PKCS5_PBE_keyivgen PKCS5_PBKDF2_HMAC PKCS5_PBKDF2_HMAC_SHA1 PKCS5_pbe2_set PKCS5_pbe2_set_iv PKCS5_pbe_set PKCS5_pbe_set0_algor PKCS5_pbkdf2_set PKCS5_v2_PBE_keyivgen PKCS7_ATTR_SIGN_it PKCS7_ATTR_VERIFY_it PKCS7_DIGEST_free PKCS7_DIGEST_it PKCS7_DIGEST_new PKCS7_ENCRYPT_free PKCS7_ENCRYPT_it PKCS7_ENCRYPT_new PKCS7_ENC_CONTENT_free PKCS7_ENC_CONTENT_it PKCS7_ENC_CONTENT_new PKCS7_ENVELOPE_free PKCS7_ENVELOPE_it PKCS7_ENVELOPE_new PKCS7_ISSUER_AND_SERIAL_digest PKCS7_ISSUER_AND_SERIAL_free PKCS7_ISSUER_AND_SERIAL_it PKCS7_ISSUER_AND_SERIAL_new PKCS7_RECIP_INFO_free PKCS7_RECIP_INFO_get0_alg PKCS7_RECIP_INFO_it PKCS7_RECIP_INFO_new PKCS7_RECIP_INFO_set PKCS7_SIGNED_free PKCS7_SIGNED_it PKCS7_SIGNED_new PKCS7_SIGNER_INFO_free PKCS7_SIGNER_INFO_get0_algs PKCS7_SIGNER_INFO_it PKCS7_SIGNER_INFO_new PKCS7_SIGNER_INFO_set PKCS7_SIGNER_INFO_sign PKCS7_SIGN_ENVELOPE_free PKCS7_SIGN_ENVELOPE_it PKCS7_SIGN_ENVELOPE_new PKCS7_add0_attrib_signing_time PKCS7_add1_attrib_digest PKCS7_add_attrib_content_type PKCS7_add_attrib_smimecap PKCS7_add_attribute PKCS7_add_certificate PKCS7_add_crl PKCS7_add_recipient PKCS7_add_recipient_info PKCS7_add_signature PKCS7_add_signed_attribute PKCS7_add_signer PKCS7_cert_from_signer_info PKCS7_content_new PKCS7_ctrl PKCS7_dataDecode PKCS7_dataFinal PKCS7_dataInit PKCS7_dataVerify PKCS7_decrypt PKCS7_digest_from_attributes PKCS7_dup PKCS7_encrypt PKCS7_final PKCS7_free PKCS7_get0_signers PKCS7_get_attribute PKCS7_get_issuer_and_serial PKCS7_get_signed_attribute PKCS7_get_signer_info PKCS7_get_smimecap PKCS7_it PKCS7_new PKCS7_print_ctx PKCS7_set0_type_other PKCS7_set_attributes PKCS7_set_cipher PKCS7_set_content PKCS7_set_digest PKCS7_set_signed_attributes PKCS7_set_type PKCS7_sign PKCS7_sign_add_signer PKCS7_signatureVerify PKCS7_simple_smimecap PKCS7_stream PKCS7_to_TS_TST_INFO PKCS7_verify PKCS8_PRIV_KEY_INFO_free PKCS8_PRIV_KEY_INFO_it PKCS8_PRIV_KEY_INFO_new PKCS8_add_keyusage PKCS8_decrypt PKCS8_encrypt PKCS8_pkey_get0 PKCS8_pkey_set0 PKCS8_set_broken PKEY_USAGE_PERIOD_free PKEY_USAGE_PERIOD_it PKEY_USAGE_PERIOD_new POLICYINFO_free POLICYINFO_it POLICYINFO_new POLICYQUALINFO_free POLICYQUALINFO_it POLICYQUALINFO_new POLICY_CONSTRAINTS_free POLICY_CONSTRAINTS_it POLICY_CONSTRAINTS_new POLICY_MAPPINGS_it POLICY_MAPPING_free POLICY_MAPPING_it POLICY_MAPPING_new PROXY_CERT_INFO_EXTENSION_free PROXY_CERT_INFO_EXTENSION_it PROXY_CERT_INFO_EXTENSION_new PROXY_POLICY_free PROXY_POLICY_it PROXY_POLICY_new RAND_SSLeay RAND_add RAND_bytes RAND_cleanup RAND_egd RAND_egd_bytes RAND_event RAND_file_name RAND_get_rand_method RAND_load_file RAND_poll RAND_pseudo_bytes RAND_query_egd_bytes RAND_screen RAND_seed RAND_set_rand_engine RAND_set_rand_method RAND_status RAND_write_file RC2_cbc_encrypt RC2_cfb64_encrypt RC2_decrypt RC2_ecb_encrypt RC2_encrypt RC2_ofb64_encrypt RC2_set_key RC4 RC4_options RC4_set_key RIPEMD160 RIPEMD160_Final RIPEMD160_Init RIPEMD160_Transform RIPEMD160_Update RSAPrivateKey_dup RSAPrivateKey_it RSAPublicKey_dup RSAPublicKey_it RSA_OAEP_PARAMS_free RSA_OAEP_PARAMS_it RSA_OAEP_PARAMS_new RSA_PKCS1_SSLeay RSA_PSS_PARAMS_free RSA_PSS_PARAMS_it RSA_PSS_PARAMS_new RSA_X931_hash_id RSA_blinding_off RSA_blinding_on RSA_check_key RSA_flags RSA_free RSA_generate_key RSA_generate_key_ex RSA_get_default_method RSA_get_ex_data RSA_get_ex_new_index RSA_get_method RSA_memory_lock RSA_new RSA_new_method RSA_null_method RSA_padding_add_PKCS1_OAEP RSA_padding_add_PKCS1_OAEP_mgf1 RSA_padding_add_PKCS1_PSS RSA_padding_add_PKCS1_PSS_mgf1 RSA_padding_add_PKCS1_type_1 RSA_padding_add_PKCS1_type_2 RSA_padding_add_SSLv23 RSA_padding_add_X931 RSA_padding_add_none RSA_padding_check_PKCS1_OAEP RSA_padding_check_PKCS1_OAEP_mgf1 RSA_padding_check_PKCS1_type_1 RSA_padding_check_PKCS1_type_2 RSA_padding_check_SSLv23 RSA_padding_check_X931 RSA_padding_check_none RSA_print RSA_print_fp RSA_private_decrypt RSA_private_encrypt RSA_public_decrypt RSA_public_encrypt RSA_set_default_method RSA_set_ex_data RSA_set_method RSA_setup_blinding RSA_sign RSA_sign_ASN1_OCTET_STRING RSA_size RSA_up_ref RSA_verify RSA_verify_ASN1_OCTET_STRING RSA_verify_PKCS1_PSS RSA_verify_PKCS1_PSS_mgf1 SEED_cbc_encrypt SEED_cfb128_encrypt SEED_decrypt SEED_ecb_encrypt SEED_encrypt SEED_ofb128_encrypt SEED_set_key SHA SHA1 SHA1_Final SHA1_Init SHA1_Transform SHA1_Update SHA224 SHA224_Final SHA224_Init SHA224_Update SHA256 SHA256_Final SHA256_Init SHA256_Transform SHA256_Update SHA384 SHA384_Final SHA384_Init SHA384_Update SHA512 SHA512_Final SHA512_Init SHA512_Transform SHA512_Update SHA_Final SHA_Init SHA_Transform SHA_Update SMIME_crlf_copy SMIME_read_ASN1 SMIME_read_CMS SMIME_read_PKCS7 SMIME_text SMIME_write_ASN1 SMIME_write_CMS SMIME_write_PKCS7 SRP_Calc_A SRP_Calc_B SRP_Calc_client_key SRP_Calc_server_key SRP_Calc_u SRP_Calc_x SRP_VBASE_free SRP_VBASE_get1_by_user SRP_VBASE_get_by_user SRP_VBASE_init SRP_VBASE_new SRP_Verify_A_mod_N SRP_Verify_B_mod_N SRP_check_known_gN_param SRP_create_verifier SRP_create_verifier_BN SRP_get_default_gN SRP_user_pwd_free SSLeay SSLeay_version SXNETID_free SXNETID_it SXNETID_new SXNET_add_id_INTEGER SXNET_add_id_asc SXNET_add_id_ulong SXNET_free SXNET_get_id_INTEGER SXNET_get_id_asc SXNET_get_id_ulong SXNET_it SXNET_new TS_ACCURACY_dup TS_ACCURACY_free TS_ACCURACY_get_micros TS_ACCURACY_get_millis TS_ACCURACY_get_seconds TS_ACCURACY_new TS_ACCURACY_set_micros TS_ACCURACY_set_millis TS_ACCURACY_set_seconds TS_ASN1_INTEGER_print_bio TS_CONF_get_tsa_section TS_CONF_load_cert TS_CONF_load_certs TS_CONF_load_key TS_CONF_set_accuracy TS_CONF_set_certs TS_CONF_set_clock_precision_digits TS_CONF_set_crypto_device TS_CONF_set_def_policy TS_CONF_set_default_engine TS_CONF_set_digests TS_CONF_set_ess_cert_id_chain TS_CONF_set_ordering TS_CONF_set_policies TS_CONF_set_serial TS_CONF_set_signer_cert TS_CONF_set_signer_key TS_CONF_set_tsa_name TS_MSG_IMPRINT_dup TS_MSG_IMPRINT_free TS_MSG_IMPRINT_get_algo TS_MSG_IMPRINT_get_msg TS_MSG_IMPRINT_new TS_MSG_IMPRINT_print_bio TS_MSG_IMPRINT_set_algo TS_MSG_IMPRINT_set_msg TS_OBJ_print_bio TS_REQ_add_ext TS_REQ_delete_ext TS_REQ_dup TS_REQ_ext_free TS_REQ_free TS_REQ_get_cert_req TS_REQ_get_ext TS_REQ_get_ext_by_NID TS_REQ_get_ext_by_OBJ TS_REQ_get_ext_by_critical TS_REQ_get_ext_count TS_REQ_get_ext_d2i TS_REQ_get_exts TS_REQ_get_msg_imprint TS_REQ_get_nonce TS_REQ_get_policy_id TS_REQ_get_version TS_REQ_new TS_REQ_print_bio TS_REQ_set_cert_req TS_REQ_set_msg_imprint TS_REQ_set_nonce TS_REQ_set_policy_id TS_REQ_set_version TS_REQ_to_TS_VERIFY_CTX TS_RESP_CTX_add_failure_info TS_RESP_CTX_add_flags TS_RESP_CTX_add_md TS_RESP_CTX_add_policy TS_RESP_CTX_free TS_RESP_CTX_get_request TS_RESP_CTX_get_tst_info TS_RESP_CTX_new TS_RESP_CTX_set_accuracy TS_RESP_CTX_set_certs TS_RESP_CTX_set_clock_precision_digits TS_RESP_CTX_set_def_policy TS_RESP_CTX_set_extension_cb TS_RESP_CTX_set_serial_cb TS_RESP_CTX_set_signer_cert TS_RESP_CTX_set_signer_key TS_RESP_CTX_set_status_info TS_RESP_CTX_set_status_info_cond TS_RESP_CTX_set_time_cb TS_RESP_create_response TS_RESP_dup TS_RESP_free TS_RESP_get_status_info TS_RESP_get_token TS_RESP_get_tst_info TS_RESP_new TS_RESP_print_bio TS_RESP_set_status_info TS_RESP_set_tst_info TS_RESP_verify_response TS_RESP_verify_signature TS_RESP_verify_token TS_STATUS_INFO_dup TS_STATUS_INFO_free TS_STATUS_INFO_new TS_STATUS_INFO_print_bio TS_TST_INFO_add_ext TS_TST_INFO_delete_ext TS_TST_INFO_dup TS_TST_INFO_ext_free TS_TST_INFO_free TS_TST_INFO_get_accuracy TS_TST_INFO_get_ext TS_TST_INFO_get_ext_by_NID TS_TST_INFO_get_ext_by_OBJ TS_TST_INFO_get_ext_by_critical TS_TST_INFO_get_ext_count TS_TST_INFO_get_ext_d2i TS_TST_INFO_get_exts TS_TST_INFO_get_msg_imprint TS_TST_INFO_get_nonce TS_TST_INFO_get_ordering TS_TST_INFO_get_policy_id TS_TST_INFO_get_serial TS_TST_INFO_get_time TS_TST_INFO_get_tsa TS_TST_INFO_get_version TS_TST_INFO_new TS_TST_INFO_print_bio TS_TST_INFO_set_accuracy TS_TST_INFO_set_msg_imprint TS_TST_INFO_set_nonce TS_TST_INFO_set_ordering TS_TST_INFO_set_policy_id TS_TST_INFO_set_serial TS_TST_INFO_set_time TS_TST_INFO_set_tsa TS_TST_INFO_set_version TS_VERIFY_CTX_cleanup TS_VERIFY_CTX_free TS_VERIFY_CTX_init TS_VERIFY_CTX_new TS_X509_ALGOR_print_bio TS_ext_print_bio TXT_DB_create_index TXT_DB_free TXT_DB_get_by_index TXT_DB_insert TXT_DB_read TXT_DB_write UI_OpenSSL UI_UTIL_read_pw UI_UTIL_read_pw_string UI_add_error_string UI_add_info_string UI_add_input_boolean UI_add_input_string UI_add_user_data UI_add_verify_string UI_construct_prompt UI_create_method UI_ctrl UI_destroy_method UI_dup_error_string UI_dup_info_string UI_dup_input_boolean UI_dup_input_string UI_dup_verify_string UI_free UI_get0_action_string UI_get0_output_string UI_get0_result UI_get0_result_string UI_get0_test_string UI_get0_user_data UI_get_default_method UI_get_ex_data UI_get_ex_new_index UI_get_input_flags UI_get_method UI_get_result_maxsize UI_get_result_minsize UI_get_string_type UI_method_get_closer UI_method_get_flusher UI_method_get_opener UI_method_get_prompt_constructor UI_method_get_reader UI_method_get_writer UI_method_set_closer UI_method_set_flusher UI_method_set_opener UI_method_set_prompt_constructor UI_method_set_reader UI_method_set_writer UI_new UI_new_method UI_process UI_set_default_method UI_set_ex_data UI_set_method UI_set_result USERNOTICE_free USERNOTICE_it USERNOTICE_new UTF8_getc UTF8_putc WHIRLPOOL WHIRLPOOL_BitUpdate WHIRLPOOL_Final WHIRLPOOL_Init WHIRLPOOL_Update X509V3_EXT_CRL_add_conf X509V3_EXT_CRL_add_nconf X509V3_EXT_REQ_add_conf X509V3_EXT_REQ_add_nconf X509V3_EXT_add X509V3_EXT_add_alias X509V3_EXT_add_conf X509V3_EXT_add_list X509V3_EXT_add_nconf X509V3_EXT_add_nconf_sk X509V3_EXT_cleanup X509V3_EXT_conf X509V3_EXT_conf_nid X509V3_EXT_d2i X509V3_EXT_free X509V3_EXT_get X509V3_EXT_get_nid X509V3_EXT_i2d X509V3_EXT_nconf X509V3_EXT_nconf_nid X509V3_EXT_print X509V3_EXT_print_fp X509V3_EXT_val_prn X509V3_NAME_from_section X509V3_add1_i2d X509V3_add_standard_extensions X509V3_add_value X509V3_add_value_bool X509V3_add_value_bool_nf X509V3_add_value_int X509V3_add_value_uchar X509V3_conf_free X509V3_extensions_print X509V3_get_d2i X509V3_get_section X509V3_get_string X509V3_get_value_bool X509V3_get_value_int X509V3_parse_list X509V3_section_free X509V3_set_conf_lhash X509V3_set_ctx X509V3_set_nconf X509V3_string_free X509_ALGORS_it X509_ALGOR_cmp X509_ALGOR_dup X509_ALGOR_free X509_ALGOR_get0 X509_ALGOR_it X509_ALGOR_new X509_ALGOR_set0 X509_ALGOR_set_md X509_ATTRIBUTE_count X509_ATTRIBUTE_create X509_ATTRIBUTE_create_by_NID X509_ATTRIBUTE_create_by_OBJ X509_ATTRIBUTE_create_by_txt X509_ATTRIBUTE_dup X509_ATTRIBUTE_free X509_ATTRIBUTE_get0_data X509_ATTRIBUTE_get0_object X509_ATTRIBUTE_get0_type X509_ATTRIBUTE_it X509_ATTRIBUTE_new X509_ATTRIBUTE_set1_data X509_ATTRIBUTE_set1_object X509_CERT_AUX_free X509_CERT_AUX_it X509_CERT_AUX_new X509_CERT_AUX_print X509_CERT_PAIR_free X509_CERT_PAIR_it X509_CERT_PAIR_new X509_CINF_free X509_CINF_it X509_CINF_new X509_CRL_INFO_free X509_CRL_INFO_it X509_CRL_INFO_new X509_CRL_METHOD_free X509_CRL_METHOD_new X509_CRL_add0_revoked X509_CRL_add1_ext_i2d X509_CRL_add_ext X509_CRL_check_suiteb X509_CRL_cmp X509_CRL_delete_ext X509_CRL_diff X509_CRL_digest X509_CRL_dup X509_CRL_free X509_CRL_get0_by_cert X509_CRL_get0_by_serial X509_CRL_get_ext X509_CRL_get_ext_by_NID X509_CRL_get_ext_by_OBJ X509_CRL_get_ext_by_critical X509_CRL_get_ext_count X509_CRL_get_ext_d2i X509_CRL_get_meth_data X509_CRL_http_nbio X509_CRL_it X509_CRL_match X509_CRL_new X509_CRL_print X509_CRL_print_fp X509_CRL_set_default_method X509_CRL_set_issuer_name X509_CRL_set_lastUpdate X509_CRL_set_meth_data X509_CRL_set_nextUpdate X509_CRL_set_version X509_CRL_sign X509_CRL_sign_ctx X509_CRL_sort X509_CRL_verify X509_EXTENSIONS_it X509_EXTENSION_create_by_NID X509_EXTENSION_create_by_OBJ X509_EXTENSION_dup X509_EXTENSION_free X509_EXTENSION_get_critical X509_EXTENSION_get_data X509_EXTENSION_get_object X509_EXTENSION_it X509_EXTENSION_new X509_EXTENSION_set_critical X509_EXTENSION_set_data X509_EXTENSION_set_object X509_INFO_free X509_INFO_new X509_LOOKUP_by_alias X509_LOOKUP_by_fingerprint X509_LOOKUP_by_issuer_serial X509_LOOKUP_by_subject X509_LOOKUP_ctrl X509_LOOKUP_file X509_LOOKUP_free X509_LOOKUP_hash_dir X509_LOOKUP_init X509_LOOKUP_new X509_LOOKUP_shutdown X509_NAME_ENTRY_create_by_NID X509_NAME_ENTRY_create_by_OBJ X509_NAME_ENTRY_create_by_txt X509_NAME_ENTRY_dup X509_NAME_ENTRY_free X509_NAME_ENTRY_get_data X509_NAME_ENTRY_get_object X509_NAME_ENTRY_it X509_NAME_ENTRY_new X509_NAME_ENTRY_set_data X509_NAME_ENTRY_set_object X509_NAME_add_entry X509_NAME_add_entry_by_NID X509_NAME_add_entry_by_OBJ X509_NAME_add_entry_by_txt X509_NAME_cmp X509_NAME_delete_entry X509_NAME_digest X509_NAME_dup X509_NAME_entry_count X509_NAME_free X509_NAME_get_entry X509_NAME_get_index_by_NID X509_NAME_get_index_by_OBJ X509_NAME_get_text_by_NID X509_NAME_get_text_by_OBJ X509_NAME_hash X509_NAME_hash_old X509_NAME_it X509_NAME_new X509_NAME_oneline X509_NAME_print X509_NAME_print_ex X509_NAME_print_ex_fp X509_NAME_set X509_OBJECT_free_contents X509_OBJECT_idx_by_subject X509_OBJECT_retrieve_by_subject X509_OBJECT_retrieve_match X509_OBJECT_up_ref_count X509_PKEY_free X509_PKEY_new X509_POLICY_NODE_print X509_PUBKEY_free X509_PUBKEY_get X509_PUBKEY_get0_param X509_PUBKEY_it X509_PUBKEY_new X509_PUBKEY_set X509_PUBKEY_set0_param X509_PURPOSE_add X509_PURPOSE_cleanup X509_PURPOSE_get0 X509_PURPOSE_get0_name X509_PURPOSE_get0_sname X509_PURPOSE_get_by_id X509_PURPOSE_get_by_sname X509_PURPOSE_get_count X509_PURPOSE_get_id X509_PURPOSE_get_trust X509_PURPOSE_set X509_REQ_INFO_free X509_REQ_INFO_it X509_REQ_INFO_new X509_REQ_add1_attr X509_REQ_add1_attr_by_NID X509_REQ_add1_attr_by_OBJ X509_REQ_add1_attr_by_txt X509_REQ_add_extensions X509_REQ_add_extensions_nid X509_REQ_check_private_key X509_REQ_delete_attr X509_REQ_digest X509_REQ_dup X509_REQ_extension_nid X509_REQ_free X509_REQ_get1_email X509_REQ_get_attr X509_REQ_get_attr_by_NID X509_REQ_get_attr_by_OBJ X509_REQ_get_attr_count X509_REQ_get_extension_nids X509_REQ_get_extensions X509_REQ_get_pubkey X509_REQ_it X509_REQ_new X509_REQ_print X509_REQ_print_ex X509_REQ_print_fp X509_REQ_set_extension_nids X509_REQ_set_pubkey X509_REQ_set_subject_name X509_REQ_set_version X509_REQ_sign X509_REQ_sign_ctx X509_REQ_to_X509 X509_REQ_verify X509_REVOKED_add1_ext_i2d X509_REVOKED_add_ext X509_REVOKED_delete_ext X509_REVOKED_dup X509_REVOKED_free X509_REVOKED_get_ext X509_REVOKED_get_ext_by_NID X509_REVOKED_get_ext_by_OBJ X509_REVOKED_get_ext_by_critical X509_REVOKED_get_ext_count X509_REVOKED_get_ext_d2i X509_REVOKED_it X509_REVOKED_new X509_REVOKED_set_revocationDate X509_REVOKED_set_serialNumber X509_SIG_free X509_SIG_it X509_SIG_new X509_STORE_CTX_cleanup X509_STORE_CTX_free X509_STORE_CTX_get0_current_crl X509_STORE_CTX_get0_current_issuer X509_STORE_CTX_get0_param X509_STORE_CTX_get0_parent_ctx X509_STORE_CTX_get0_policy_tree X509_STORE_CTX_get0_store X509_STORE_CTX_get1_chain X509_STORE_CTX_get1_issuer X509_STORE_CTX_get_chain X509_STORE_CTX_get_current_cert X509_STORE_CTX_get_error X509_STORE_CTX_get_error_depth X509_STORE_CTX_get_ex_data X509_STORE_CTX_get_ex_new_index X509_STORE_CTX_get_explicit_policy X509_STORE_CTX_init X509_STORE_CTX_new X509_STORE_CTX_purpose_inherit X509_STORE_CTX_set0_crls X509_STORE_CTX_set0_param X509_STORE_CTX_set_cert X509_STORE_CTX_set_chain X509_STORE_CTX_set_default X509_STORE_CTX_set_depth X509_STORE_CTX_set_error X509_STORE_CTX_set_ex_data X509_STORE_CTX_set_flags X509_STORE_CTX_set_purpose X509_STORE_CTX_set_time X509_STORE_CTX_set_trust X509_STORE_CTX_set_verify_cb X509_STORE_CTX_trusted_stack X509_STORE_add_cert X509_STORE_add_crl X509_STORE_add_lookup X509_STORE_free X509_STORE_get1_certs X509_STORE_get1_crls X509_STORE_get_by_subject X509_STORE_load_locations X509_STORE_new X509_STORE_set1_param X509_STORE_set_default_paths X509_STORE_set_depth X509_STORE_set_flags X509_STORE_set_lookup_crls_cb X509_STORE_set_purpose X509_STORE_set_trust X509_STORE_set_verify_cb X509_TRUST_add X509_TRUST_cleanup X509_TRUST_get0 X509_TRUST_get0_name X509_TRUST_get_by_id X509_TRUST_get_count X509_TRUST_get_flags X509_TRUST_get_trust X509_TRUST_set X509_TRUST_set_default X509_VAL_free X509_VAL_it X509_VAL_new X509_VERIFY_PARAM_add0_policy X509_VERIFY_PARAM_add0_table X509_VERIFY_PARAM_add1_host X509_VERIFY_PARAM_clear_flags X509_VERIFY_PARAM_free X509_VERIFY_PARAM_get0 X509_VERIFY_PARAM_get0_name X509_VERIFY_PARAM_get0_peername X509_VERIFY_PARAM_get_count X509_VERIFY_PARAM_get_depth X509_VERIFY_PARAM_get_flags X509_VERIFY_PARAM_inherit X509_VERIFY_PARAM_lookup X509_VERIFY_PARAM_new X509_VERIFY_PARAM_set1 X509_VERIFY_PARAM_set1_email X509_VERIFY_PARAM_set1_host X509_VERIFY_PARAM_set1_ip X509_VERIFY_PARAM_set1_ip_asc X509_VERIFY_PARAM_set1_name X509_VERIFY_PARAM_set1_policies X509_VERIFY_PARAM_set_depth X509_VERIFY_PARAM_set_flags X509_VERIFY_PARAM_set_hostflags X509_VERIFY_PARAM_set_purpose X509_VERIFY_PARAM_set_time X509_VERIFY_PARAM_set_trust X509_VERIFY_PARAM_table_cleanup X509_add1_ext_i2d X509_add1_reject_object X509_add1_trust_object X509_add_ext X509_alias_get0 X509_alias_set1 X509_certificate_type X509_chain_check_suiteb X509_chain_up_ref X509_check_akid X509_check_ca X509_check_email X509_check_host X509_check_ip X509_check_ip_asc X509_check_issued X509_check_private_key X509_check_purpose X509_check_trust X509_cmp X509_cmp_current_time X509_cmp_time X509_delete_ext X509_digest X509_dup X509_email_free X509_find_by_issuer_and_serial X509_find_by_subject X509_free X509_get0_pubkey_bitstr X509_get0_signature X509_get1_email X509_get1_ocsp X509_get_default_cert_area X509_get_default_cert_dir X509_get_default_cert_dir_env X509_get_default_cert_file X509_get_default_cert_file_env X509_get_default_private_dir X509_get_ex_data X509_get_ex_new_index X509_get_ext X509_get_ext_by_NID X509_get_ext_by_OBJ X509_get_ext_by_critical X509_get_ext_count X509_get_ext_d2i X509_get_issuer_name X509_get_pubkey X509_get_pubkey_parameters X509_get_serialNumber X509_get_signature_nid X509_get_subject_name X509_gmtime_adj X509_http_nbio X509_issuer_and_serial_cmp X509_issuer_and_serial_hash X509_issuer_name_cmp X509_issuer_name_hash X509_issuer_name_hash_old X509_it X509_keyid_get0 X509_keyid_set1 X509_load_cert_crl_file X509_load_cert_file X509_load_crl_file X509_new X509_ocspid_print X509_policy_check X509_policy_level_get0_node X509_policy_level_node_count X509_policy_node_get0_parent X509_policy_node_get0_policy X509_policy_node_get0_qualifiers X509_policy_tree_free X509_policy_tree_get0_level X509_policy_tree_get0_policies X509_policy_tree_get0_user_policies X509_policy_tree_level_count X509_print X509_print_ex X509_print_ex_fp X509_print_fp X509_pubkey_digest X509_reject_clear X509_set_ex_data X509_set_issuer_name X509_set_notAfter X509_set_notBefore X509_set_pubkey X509_set_serialNumber X509_set_subject_name X509_set_version X509_sign X509_sign_ctx X509_signature_dump X509_signature_print X509_subject_name_cmp X509_subject_name_hash X509_subject_name_hash_old X509_supported_extension X509_time_adj X509_time_adj_ex X509_to_X509_REQ X509_trust_clear X509_verify X509_verify_cert X509_verify_cert_error_string X509at_add1_attr X509at_add1_attr_by_NID X509at_add1_attr_by_OBJ X509at_add1_attr_by_txt X509at_delete_attr X509at_get0_data_by_OBJ X509at_get_attr X509at_get_attr_by_NID X509at_get_attr_by_OBJ X509at_get_attr_count X509v3_add_ext X509v3_delete_ext X509v3_get_ext X509v3_get_ext_by_NID X509v3_get_ext_by_OBJ X509v3_get_ext_by_critical X509v3_get_ext_count ZLONG_it _ossl_096_des_random_seed _ossl_old_crypt _ossl_old_des_cbc_cksum _ossl_old_des_cbc_encrypt _ossl_old_des_cfb64_encrypt _ossl_old_des_cfb_encrypt _ossl_old_des_crypt _ossl_old_des_decrypt3 _ossl_old_des_ecb3_encrypt _ossl_old_des_ecb_encrypt _ossl_old_des_ede3_cbc_encrypt _ossl_old_des_ede3_cfb64_encrypt _ossl_old_des_ede3_ofb64_encrypt _ossl_old_des_enc_read _ossl_old_des_enc_write _ossl_old_des_encrypt _ossl_old_des_encrypt2 _ossl_old_des_encrypt3 _ossl_old_des_fcrypt _ossl_old_des_is_weak_key _ossl_old_des_key_sched _ossl_old_des_ncbc_encrypt _ossl_old_des_ofb64_encrypt _ossl_old_des_ofb_encrypt _ossl_old_des_options _ossl_old_des_pcbc_encrypt _ossl_old_des_quad_cksum _ossl_old_des_random_key _ossl_old_des_random_seed _ossl_old_des_read_2passwords _ossl_old_des_read_password _ossl_old_des_read_pw _ossl_old_des_read_pw_string _ossl_old_des_set_key _ossl_old_des_set_odd_parity _ossl_old_des_string_to_2keys _ossl_old_des_string_to_key _ossl_old_des_xcbc_encrypt _shadow_DES_check_key _shadow_DES_rw_mode a2d_ASN1_OBJECT a2i_ASN1_ENUMERATED a2i_ASN1_INTEGER a2i_ASN1_STRING a2i_GENERAL_NAME a2i_IPADDRESS a2i_IPADDRESS_NC a2i_ipadd asn1_Finish asn1_GetSequence asn1_add_error asn1_const_Finish asn1_do_adb asn1_do_lock asn1_enc_free asn1_enc_init asn1_enc_restore asn1_enc_save asn1_ex_c2i asn1_ex_i2c asn1_get_choice_selector asn1_get_field_ptr asn1_set_choice_selector b2i_PVK_bio b2i_PrivateKey b2i_PrivateKey_bio b2i_PublicKey b2i_PublicKey_bio bn_add_words bn_div_words bn_dup_expand bn_expand2 bn_mul_add_words bn_mul_words bn_sqr_words bn_sub_words c2i_ASN1_BIT_STRING c2i_ASN1_INTEGER c2i_ASN1_OBJECT check_defer d2i_ACCESS_DESCRIPTION d2i_ASN1_BIT_STRING d2i_ASN1_BMPSTRING d2i_ASN1_BOOLEAN d2i_ASN1_ENUMERATED d2i_ASN1_GENERALIZEDTIME d2i_ASN1_GENERALSTRING d2i_ASN1_IA5STRING d2i_ASN1_INTEGER d2i_ASN1_NULL d2i_ASN1_OBJECT d2i_ASN1_OCTET_STRING d2i_ASN1_PRINTABLE d2i_ASN1_PRINTABLESTRING d2i_ASN1_SEQUENCE_ANY d2i_ASN1_SET d2i_ASN1_SET_ANY d2i_ASN1_T61STRING d2i_ASN1_TIME d2i_ASN1_TYPE d2i_ASN1_UINTEGER d2i_ASN1_UNIVERSALSTRING d2i_ASN1_UTCTIME d2i_ASN1_UTF8STRING d2i_ASN1_VISIBLESTRING d2i_ASN1_bytes d2i_ASN1_type_bytes d2i_AUTHORITY_INFO_ACCESS d2i_AUTHORITY_KEYID d2i_AutoPrivateKey d2i_BASIC_CONSTRAINTS d2i_CERTIFICATEPOLICIES d2i_CMS_ContentInfo d2i_CMS_ReceiptRequest d2i_CMS_bio d2i_CRL_DIST_POINTS d2i_DHparams d2i_DHxparams d2i_DIRECTORYSTRING d2i_DISPLAYTEXT d2i_DIST_POINT d2i_DIST_POINT_NAME d2i_DSAPrivateKey d2i_DSAPrivateKey_bio d2i_DSAPrivateKey_fp d2i_DSAPublicKey d2i_DSA_PUBKEY d2i_DSA_PUBKEY_bio d2i_DSA_PUBKEY_fp d2i_DSA_SIG d2i_DSAparams d2i_ECDSA_SIG d2i_ECPKParameters d2i_ECParameters d2i_ECPrivateKey d2i_ECPrivateKey_bio d2i_ECPrivateKey_fp d2i_EC_PUBKEY d2i_EC_PUBKEY_bio d2i_EC_PUBKEY_fp d2i_EDIPARTYNAME d2i_ESS_CERT_ID d2i_ESS_ISSUER_SERIAL d2i_ESS_SIGNING_CERT d2i_EXTENDED_KEY_USAGE d2i_GENERAL_NAME d2i_GENERAL_NAMES d2i_ISSUING_DIST_POINT d2i_KRB5_APREQ d2i_KRB5_APREQBODY d2i_KRB5_AUTHDATA d2i_KRB5_AUTHENT d2i_KRB5_AUTHENTBODY d2i_KRB5_CHECKSUM d2i_KRB5_ENCDATA d2i_KRB5_ENCKEY d2i_KRB5_PRINCNAME d2i_KRB5_TICKET d2i_KRB5_TKTBODY d2i_NETSCAPE_CERT_SEQUENCE d2i_NETSCAPE_SPKAC d2i_NETSCAPE_SPKI d2i_NETSCAPE_X509 d2i_NOTICEREF d2i_Netscape_RSA d2i_OCSP_BASICRESP d2i_OCSP_CERTID d2i_OCSP_CERTSTATUS d2i_OCSP_CRLID d2i_OCSP_ONEREQ d2i_OCSP_REQINFO d2i_OCSP_REQUEST d2i_OCSP_RESPBYTES d2i_OCSP_RESPDATA d2i_OCSP_RESPID d2i_OCSP_RESPONSE d2i_OCSP_REVOKEDINFO d2i_OCSP_SERVICELOC d2i_OCSP_SIGNATURE d2i_OCSP_SINGLERESP d2i_OTHERNAME d2i_PBE2PARAM d2i_PBEPARAM d2i_PBKDF2PARAM d2i_PKCS12 d2i_PKCS12_BAGS d2i_PKCS12_MAC_DATA d2i_PKCS12_SAFEBAG d2i_PKCS12_bio d2i_PKCS12_fp d2i_PKCS7 d2i_PKCS7_DIGEST d2i_PKCS7_ENCRYPT d2i_PKCS7_ENC_CONTENT d2i_PKCS7_ENVELOPE d2i_PKCS7_ISSUER_AND_SERIAL d2i_PKCS7_RECIP_INFO d2i_PKCS7_SIGNED d2i_PKCS7_SIGNER_INFO d2i_PKCS7_SIGN_ENVELOPE d2i_PKCS7_bio d2i_PKCS7_fp d2i_PKCS8PrivateKey_bio d2i_PKCS8PrivateKey_fp d2i_PKCS8_PRIV_KEY_INFO d2i_PKCS8_PRIV_KEY_INFO_bio d2i_PKCS8_PRIV_KEY_INFO_fp d2i_PKCS8_bio d2i_PKCS8_fp d2i_PKEY_USAGE_PERIOD d2i_POLICYINFO d2i_POLICYQUALINFO d2i_PROXY_CERT_INFO_EXTENSION d2i_PROXY_POLICY d2i_PUBKEY d2i_PUBKEY_bio d2i_PUBKEY_fp d2i_PrivateKey d2i_PrivateKey_bio d2i_PrivateKey_fp d2i_PublicKey d2i_RSAPrivateKey d2i_RSAPrivateKey_bio d2i_RSAPrivateKey_fp d2i_RSAPublicKey d2i_RSAPublicKey_bio d2i_RSAPublicKey_fp d2i_RSA_NET d2i_RSA_OAEP_PARAMS d2i_RSA_PSS_PARAMS d2i_RSA_PUBKEY d2i_RSA_PUBKEY_bio d2i_RSA_PUBKEY_fp d2i_SXNET d2i_SXNETID d2i_TS_ACCURACY d2i_TS_MSG_IMPRINT d2i_TS_MSG_IMPRINT_bio d2i_TS_MSG_IMPRINT_fp d2i_TS_REQ d2i_TS_REQ_bio d2i_TS_REQ_fp d2i_TS_RESP d2i_TS_RESP_bio d2i_TS_RESP_fp d2i_TS_STATUS_INFO d2i_TS_TST_INFO d2i_TS_TST_INFO_bio d2i_TS_TST_INFO_fp d2i_USERNOTICE d2i_X509 d2i_X509_ALGOR d2i_X509_ALGORS d2i_X509_ATTRIBUTE d2i_X509_AUX d2i_X509_CERT_AUX d2i_X509_CERT_PAIR d2i_X509_CINF d2i_X509_CRL d2i_X509_CRL_INFO d2i_X509_CRL_bio d2i_X509_CRL_fp d2i_X509_EXTENSION d2i_X509_EXTENSIONS d2i_X509_NAME d2i_X509_NAME_ENTRY d2i_X509_PKEY d2i_X509_PUBKEY d2i_X509_REQ d2i_X509_REQ_INFO d2i_X509_REQ_bio d2i_X509_REQ_fp d2i_X509_REVOKED d2i_X509_SIG d2i_X509_VAL d2i_X509_bio d2i_X509_fp get_rfc2409_prime_1024 get_rfc2409_prime_768 get_rfc3526_prime_1536 get_rfc3526_prime_2048 get_rfc3526_prime_3072 get_rfc3526_prime_4096 get_rfc3526_prime_6144 get_rfc3526_prime_8192 hex_to_string i2a_ACCESS_DESCRIPTION i2a_ASN1_ENUMERATED i2a_ASN1_INTEGER i2a_ASN1_OBJECT i2a_ASN1_STRING i2b_PVK_bio i2b_PrivateKey_bio i2b_PublicKey_bio i2c_ASN1_BIT_STRING i2c_ASN1_INTEGER i2d_ACCESS_DESCRIPTION i2d_ASN1_BIT_STRING i2d_ASN1_BMPSTRING i2d_ASN1_BOOLEAN i2d_ASN1_ENUMERATED i2d_ASN1_GENERALIZEDTIME i2d_ASN1_GENERALSTRING i2d_ASN1_IA5STRING i2d_ASN1_INTEGER i2d_ASN1_NULL i2d_ASN1_OBJECT i2d_ASN1_OCTET_STRING i2d_ASN1_PRINTABLE i2d_ASN1_PRINTABLESTRING i2d_ASN1_SEQUENCE_ANY i2d_ASN1_SET i2d_ASN1_SET_ANY i2d_ASN1_T61STRING i2d_ASN1_TIME i2d_ASN1_TYPE i2d_ASN1_UNIVERSALSTRING i2d_ASN1_UTCTIME i2d_ASN1_UTF8STRING i2d_ASN1_VISIBLESTRING i2d_ASN1_bio_stream i2d_ASN1_bytes i2d_AUTHORITY_INFO_ACCESS i2d_AUTHORITY_KEYID i2d_BASIC_CONSTRAINTS i2d_CERTIFICATEPOLICIES i2d_CMS_ContentInfo i2d_CMS_ReceiptRequest i2d_CMS_bio i2d_CMS_bio_stream i2d_CRL_DIST_POINTS i2d_DHparams i2d_DHxparams i2d_DIRECTORYSTRING i2d_DISPLAYTEXT i2d_DIST_POINT i2d_DIST_POINT_NAME i2d_DSAPrivateKey i2d_DSAPrivateKey_bio i2d_DSAPrivateKey_fp i2d_DSAPublicKey i2d_DSA_PUBKEY i2d_DSA_PUBKEY_bio i2d_DSA_PUBKEY_fp i2d_DSA_SIG i2d_DSAparams i2d_ECDSA_SIG i2d_ECPKParameters i2d_ECParameters i2d_ECPrivateKey i2d_ECPrivateKey_bio i2d_ECPrivateKey_fp i2d_EC_PUBKEY i2d_EC_PUBKEY_bio i2d_EC_PUBKEY_fp i2d_EDIPARTYNAME i2d_ESS_CERT_ID i2d_ESS_ISSUER_SERIAL i2d_ESS_SIGNING_CERT i2d_EXTENDED_KEY_USAGE i2d_GENERAL_NAME i2d_GENERAL_NAMES i2d_ISSUING_DIST_POINT i2d_KRB5_APREQ i2d_KRB5_APREQBODY i2d_KRB5_AUTHDATA i2d_KRB5_AUTHENT i2d_KRB5_AUTHENTBODY i2d_KRB5_CHECKSUM i2d_KRB5_ENCDATA i2d_KRB5_ENCKEY i2d_KRB5_PRINCNAME i2d_KRB5_TICKET i2d_KRB5_TKTBODY i2d_NETSCAPE_CERT_SEQUENCE i2d_NETSCAPE_SPKAC i2d_NETSCAPE_SPKI i2d_NETSCAPE_X509 i2d_NOTICEREF i2d_Netscape_RSA i2d_OCSP_BASICRESP i2d_OCSP_CERTID i2d_OCSP_CERTSTATUS i2d_OCSP_CRLID i2d_OCSP_ONEREQ i2d_OCSP_REQINFO i2d_OCSP_REQUEST i2d_OCSP_RESPBYTES i2d_OCSP_RESPDATA i2d_OCSP_RESPID i2d_OCSP_RESPONSE i2d_OCSP_REVOKEDINFO i2d_OCSP_SERVICELOC i2d_OCSP_SIGNATURE i2d_OCSP_SINGLERESP i2d_OTHERNAME i2d_PBE2PARAM i2d_PBEPARAM i2d_PBKDF2PARAM i2d_PKCS12 i2d_PKCS12_BAGS i2d_PKCS12_MAC_DATA i2d_PKCS12_SAFEBAG i2d_PKCS12_bio i2d_PKCS12_fp i2d_PKCS7 i2d_PKCS7_DIGEST i2d_PKCS7_ENCRYPT i2d_PKCS7_ENC_CONTENT i2d_PKCS7_ENVELOPE i2d_PKCS7_ISSUER_AND_SERIAL i2d_PKCS7_NDEF i2d_PKCS7_RECIP_INFO i2d_PKCS7_SIGNED i2d_PKCS7_SIGNER_INFO i2d_PKCS7_SIGN_ENVELOPE i2d_PKCS7_bio i2d_PKCS7_bio_stream i2d_PKCS7_fp i2d_PKCS8PrivateKeyInfo_bio i2d_PKCS8PrivateKeyInfo_fp i2d_PKCS8PrivateKey_bio i2d_PKCS8PrivateKey_fp i2d_PKCS8PrivateKey_nid_bio i2d_PKCS8PrivateKey_nid_fp i2d_PKCS8_PRIV_KEY_INFO i2d_PKCS8_PRIV_KEY_INFO_bio i2d_PKCS8_PRIV_KEY_INFO_fp i2d_PKCS8_bio i2d_PKCS8_fp i2d_PKEY_USAGE_PERIOD i2d_POLICYINFO i2d_POLICYQUALINFO i2d_PROXY_CERT_INFO_EXTENSION i2d_PROXY_POLICY i2d_PUBKEY i2d_PUBKEY_bio i2d_PUBKEY_fp i2d_PrivateKey i2d_PrivateKey_bio i2d_PrivateKey_fp i2d_PublicKey i2d_RSAPrivateKey i2d_RSAPrivateKey_bio i2d_RSAPrivateKey_fp i2d_RSAPublicKey i2d_RSAPublicKey_bio i2d_RSAPublicKey_fp i2d_RSA_NET i2d_RSA_OAEP_PARAMS i2d_RSA_PSS_PARAMS i2d_RSA_PUBKEY i2d_RSA_PUBKEY_bio i2d_RSA_PUBKEY_fp i2d_SXNET i2d_SXNETID i2d_TS_ACCURACY i2d_TS_MSG_IMPRINT i2d_TS_MSG_IMPRINT_bio i2d_TS_MSG_IMPRINT_fp i2d_TS_REQ i2d_TS_REQ_bio i2d_TS_REQ_fp i2d_TS_RESP i2d_TS_RESP_bio i2d_TS_RESP_fp i2d_TS_STATUS_INFO i2d_TS_TST_INFO i2d_TS_TST_INFO_bio i2d_TS_TST_INFO_fp i2d_USERNOTICE i2d_X509 i2d_X509_ALGOR i2d_X509_ALGORS i2d_X509_ATTRIBUTE i2d_X509_AUX i2d_X509_CERT_AUX i2d_X509_CERT_PAIR i2d_X509_CINF i2d_X509_CRL i2d_X509_CRL_INFO i2d_X509_CRL_bio i2d_X509_CRL_fp i2d_X509_EXTENSION i2d_X509_EXTENSIONS i2d_X509_NAME i2d_X509_NAME_ENTRY i2d_X509_PKEY i2d_X509_PUBKEY i2d_X509_REQ i2d_X509_REQ_INFO i2d_X509_REQ_bio i2d_X509_REQ_fp i2d_X509_REVOKED i2d_X509_SIG i2d_X509_VAL i2d_X509_bio i2d_X509_fp i2d_re_X509_tbs i2o_ECPublicKey i2s_ASN1_ENUMERATED i2s_ASN1_ENUMERATED_TABLE i2s_ASN1_INTEGER i2s_ASN1_OCTET_STRING i2t_ASN1_OBJECT i2v_ASN1_BIT_STRING i2v_GENERAL_NAME i2v_GENERAL_NAMES idea_cbc_encrypt idea_cfb64_encrypt idea_ecb_encrypt idea_encrypt idea_ofb64_encrypt idea_options idea_set_decrypt_key idea_set_encrypt_key lh_delete lh_doall lh_doall_arg lh_free lh_insert lh_new lh_node_stats lh_node_stats_bio lh_node_usage_stats lh_node_usage_stats_bio lh_num_items lh_retrieve lh_stats lh_stats_bio lh_strhash name_cmp o2i_ECPublicKey pitem_free pitem_new pqueue_find pqueue_free pqueue_insert pqueue_iterator pqueue_new pqueue_next pqueue_peek pqueue_pop pqueue_print pqueue_size private_AES_set_decrypt_key private_AES_set_encrypt_key private_RC4_set_key s2i_ASN1_INTEGER s2i_ASN1_OCTET_STRING sk_deep_copy sk_delete sk_delete_ptr sk_dup sk_find sk_find_ex sk_free sk_insert sk_is_sorted sk_new sk_new_null sk_num sk_pop sk_pop_free sk_push sk_set sk_set_cmp_func sk_shift sk_sort sk_unshift sk_value sk_zero string_to_hex v2i_ASN1_BIT_STRING v2i_GENERAL_NAME v2i_GENERAL_NAMES v2i_GENERAL_NAME_ex

libeay64.dll

IMPHASH 34d90530287c7d4c9de543c94b2e2cba
SHA256 9aaf8dc2b9f6d89ff9e8b180cfada6ce02e7d577c369257d3b6498a144f974ad
MD5 f4a3e88e57657ae7347264521b188ba6
SHA1 42d63613163ea16424a6a8b056b06419585032d3
SHA512 03f6fd5cea8a3636a4a324fbea931de5f926c5ca3a5ab90d9ca936bb8a4a4ae97b8fb595c1fccf3d113f7c0485e6bf29699360eb30ef64c95294cdb050cceba4
SSDEEP 49152:3+OGtlqg7VwASONUjSYXuj/9yAauHTw05iqQIU6i6MqTS3PWbg:8dwuHTNrv+LqTSJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

Digest

9e:ff:35:0e:78:e2:95:3c:d0:eb:70:ea:e4:6f:75:8d:3f:22:96:29:1e:9b:5c:f2:60:cc:d3:4e:04:ac:b6:f8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Jul 16, 2020

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

35:22:9e:0a:92:7b:6d:13:17:de:58:bc:48:5d:3a:5c:84:c8:3d:99

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Jul 16, 2020

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

2

Major OS version

5

Entry point

1274540

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\libs\openssl-1.0.2o\out32dll\libeay64.pdb

ws2_32

sendto recvfrom bind listen accept ntohl ioctlsocket WSACleanup WSAStartup gethostbyname getsockopt getservbyname ntohs htons htonl socket setsockopt connect send WSASetLastError recv WSAGetLastError shutdown closesocket

gdi32

CreateCompatibleBitmap GetObjectW GetDIBits DeleteObject GetDeviceCaps

advapi32

ReportEventW DeregisterEventSource RegisterEventSourceW

user32

GetDC ReleaseDC MessageBoxW GetProcessWindowStation GetUserObjectInformationW

kernel32

GetStringTypeW GetStringTypeA GetEnvironmentStringsW FreeEnvironmentStringsW GetLocaleInfoA FreeEnvironmentStringsA LCMapStringW LCMapStringA GetProcessHeap SetEndOfFile GetCurrentDirectoryA CompareStringA CompareStringW HeapSize SetEnvironmentVariableA CreateFileW GetEnvironmentStrings GetConsoleCP PeekNamedPipe GetFileInformationByHandle GetFullPathNameA FlushFileBuffers WriteConsoleW GetConsoleOutputCP ExitProcess GetProcAddress GetModuleHandleW GetCurrentThreadId GetLastError GetVersion MultiByteToWideChar WriteFile GetFileType GetStdHandle WideCharToMultiByte FindNextFileW FindFirstFileW FindClose RtlVirtualUnwind FreeLibrary LoadLibraryA CloseHandle LoadLibraryW SetLastError SystemTimeToFileTime GetSystemTime GetTickCount QueryPerformanceCounter GetCurrentProcessId GlobalMemoryStatus FlushConsoleInputBuffer Sleep SetConsoleCtrlHandler EnterCriticalSection LeaveCriticalSection HeapFree HeapReAlloc HeapAlloc GetSystemTimeAsFileTime ReadFile GetConsoleMode FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA FindFirstFileA SetFileAttributesA GetFileAttributesA CreateFileA ReadConsoleInputA SetConsoleMode FlsSetValue GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlLookupFunctionEntry RtlCaptureContext GetCPInfo GetACP GetOEMCP IsValidCodePage EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc RtlUnwindEx DeleteCriticalSection GetModuleFileNameA InitializeCriticalSectionAndSpinCount SetHandleCount GetStartupInfoA HeapSetInformation HeapCreate HeapDestroy GetTimeZoneInformation SetFilePointer SetStdHandle WriteConsoleA

ACCESS_DESCRIPTION_free ACCESS_DESCRIPTION_it ACCESS_DESCRIPTION_new AES_bi_ige_encrypt AES_cbc_encrypt AES_cfb128_encrypt AES_cfb1_encrypt AES_cfb8_encrypt AES_ctr128_encrypt AES_decrypt AES_ecb_encrypt AES_encrypt AES_ige_encrypt AES_ofb128_encrypt AES_options AES_set_decrypt_key AES_set_encrypt_key AES_unwrap_key AES_wrap_key ASN1_ANY_it ASN1_BIT_STRING_check ASN1_BIT_STRING_free ASN1_BIT_STRING_get_bit ASN1_BIT_STRING_it ASN1_BIT_STRING_name_print ASN1_BIT_STRING_new ASN1_BIT_STRING_num_asc ASN1_BIT_STRING_set ASN1_BIT_STRING_set_asc ASN1_BIT_STRING_set_bit ASN1_BMPSTRING_free ASN1_BMPSTRING_it ASN1_BMPSTRING_new ASN1_BOOLEAN_it ASN1_ENUMERATED_free ASN1_ENUMERATED_get ASN1_ENUMERATED_it ASN1_ENUMERATED_new ASN1_ENUMERATED_set ASN1_ENUMERATED_to_BN ASN1_FBOOLEAN_it ASN1_GENERALIZEDTIME_adj ASN1_GENERALIZEDTIME_check ASN1_GENERALIZEDTIME_free ASN1_GENERALIZEDTIME_it ASN1_GENERALIZEDTIME_new ASN1_GENERALIZEDTIME_print ASN1_GENERALIZEDTIME_set ASN1_GENERALIZEDTIME_set_string ASN1_GENERALSTRING_free ASN1_GENERALSTRING_it ASN1_GENERALSTRING_new ASN1_IA5STRING_free ASN1_IA5STRING_it ASN1_IA5STRING_new ASN1_INTEGER_cmp ASN1_INTEGER_dup ASN1_INTEGER_free ASN1_INTEGER_get ASN1_INTEGER_it ASN1_INTEGER_new ASN1_INTEGER_set ASN1_INTEGER_to_BN ASN1_NULL_free ASN1_NULL_it ASN1_NULL_new ASN1_OBJECT_create ASN1_OBJECT_free ASN1_OBJECT_it ASN1_OBJECT_new ASN1_OCTET_STRING_NDEF_it ASN1_OCTET_STRING_cmp ASN1_OCTET_STRING_dup ASN1_OCTET_STRING_free ASN1_OCTET_STRING_it ASN1_OCTET_STRING_new ASN1_OCTET_STRING_set ASN1_PCTX_free ASN1_PCTX_get_cert_flags ASN1_PCTX_get_flags ASN1_PCTX_get_nm_flags ASN1_PCTX_get_oid_flags ASN1_PCTX_get_str_flags ASN1_PCTX_new ASN1_PCTX_set_cert_flags ASN1_PCTX_set_flags ASN1_PCTX_set_nm_flags ASN1_PCTX_set_oid_flags ASN1_PCTX_set_str_flags ASN1_PRINTABLESTRING_free ASN1_PRINTABLESTRING_it ASN1_PRINTABLESTRING_new ASN1_PRINTABLE_free ASN1_PRINTABLE_it ASN1_PRINTABLE_new ASN1_PRINTABLE_type ASN1_SEQUENCE_ANY_it ASN1_SEQUENCE_it ASN1_SET_ANY_it ASN1_STRING_TABLE_add ASN1_STRING_TABLE_cleanup ASN1_STRING_TABLE_get ASN1_STRING_clear_free ASN1_STRING_cmp ASN1_STRING_copy ASN1_STRING_data ASN1_STRING_dup ASN1_STRING_free ASN1_STRING_get_default_mask ASN1_STRING_length ASN1_STRING_length_set ASN1_STRING_new ASN1_STRING_print ASN1_STRING_print_ex ASN1_STRING_print_ex_fp ASN1_STRING_set ASN1_STRING_set0 ASN1_STRING_set_by_NID ASN1_STRING_set_default_mask ASN1_STRING_set_default_mask_asc ASN1_STRING_to_UTF8 ASN1_STRING_type ASN1_STRING_type_new ASN1_T61STRING_free ASN1_T61STRING_it ASN1_T61STRING_new ASN1_TBOOLEAN_it ASN1_TIME_adj ASN1_TIME_check ASN1_TIME_diff ASN1_TIME_free ASN1_TIME_it ASN1_TIME_new ASN1_TIME_print ASN1_TIME_set ASN1_TIME_set_string ASN1_TIME_to_generalizedtime ASN1_TYPE_cmp ASN1_TYPE_free ASN1_TYPE_get ASN1_TYPE_get_int_octetstring ASN1_TYPE_get_octetstring ASN1_TYPE_new ASN1_TYPE_set ASN1_TYPE_set1 ASN1_TYPE_set_int_octetstring ASN1_TYPE_set_octetstring ASN1_UNIVERSALSTRING_free ASN1_UNIVERSALSTRING_it ASN1_UNIVERSALSTRING_new ASN1_UNIVERSALSTRING_to_string ASN1_UTCTIME_adj ASN1_UTCTIME_check ASN1_UTCTIME_cmp_time_t ASN1_UTCTIME_free ASN1_UTCTIME_it ASN1_UTCTIME_new ASN1_UTCTIME_print ASN1_UTCTIME_set ASN1_UTCTIME_set_string ASN1_UTF8STRING_free ASN1_UTF8STRING_it ASN1_UTF8STRING_new ASN1_VISIBLESTRING_free ASN1_VISIBLESTRING_it ASN1_VISIBLESTRING_new ASN1_add_oid_module ASN1_bn_print ASN1_check_infinite_end ASN1_const_check_infinite_end ASN1_d2i_bio ASN1_d2i_fp ASN1_digest ASN1_dup ASN1_generate_nconf ASN1_generate_v3 ASN1_get_object ASN1_i2d_bio ASN1_i2d_fp ASN1_item_d2i ASN1_item_d2i_bio ASN1_item_d2i_fp ASN1_item_digest ASN1_item_dup ASN1_item_ex_d2i ASN1_item_ex_free ASN1_item_ex_i2d ASN1_item_ex_new ASN1_item_free ASN1_item_i2d ASN1_item_i2d_bio ASN1_item_i2d_fp ASN1_item_ndef_i2d ASN1_item_new ASN1_item_pack ASN1_item_print ASN1_item_sign ASN1_item_sign_ctx ASN1_item_unpack ASN1_item_verify ASN1_mbstring_copy ASN1_mbstring_ncopy ASN1_object_size ASN1_pack_string ASN1_parse ASN1_parse_dump ASN1_primitive_free ASN1_primitive_new ASN1_put_eoc ASN1_put_object ASN1_seq_pack ASN1_seq_unpack ASN1_sign ASN1_tag2bit ASN1_tag2str ASN1_template_d2i ASN1_template_free ASN1_template_i2d ASN1_template_new ASN1_unpack_string ASN1_verify AUTHORITY_INFO_ACCESS_free AUTHORITY_INFO_ACCESS_it AUTHORITY_INFO_ACCESS_new AUTHORITY_KEYID_free AUTHORITY_KEYID_it AUTHORITY_KEYID_new BASIC_CONSTRAINTS_free BASIC_CONSTRAINTS_it BASIC_CONSTRAINTS_new BF_cbc_encrypt BF_cfb64_encrypt BF_decrypt BF_ecb_encrypt BF_encrypt BF_ofb64_encrypt BF_options BF_set_key BIGNUM_it BIO_accept BIO_asn1_get_prefix BIO_asn1_get_suffix BIO_asn1_set_prefix BIO_asn1_set_suffix BIO_callback_ctrl BIO_clear_flags BIO_copy_next_retry BIO_ctrl BIO_ctrl_get_read_request BIO_ctrl_get_write_guarantee BIO_ctrl_pending BIO_ctrl_reset_read_request BIO_ctrl_wpending BIO_debug_callback BIO_dgram_non_fatal_error BIO_dump BIO_dump_cb BIO_dump_fp BIO_dump_indent BIO_dump_indent_cb BIO_dump_indent_fp BIO_dup_chain BIO_f_asn1 BIO_f_base64 BIO_f_buffer BIO_f_cipher BIO_f_md BIO_f_nbio_test BIO_f_null BIO_f_reliable BIO_fd_non_fatal_error BIO_fd_should_retry BIO_find_type BIO_free BIO_free_all BIO_get_accept_socket BIO_get_callback BIO_get_callback_arg BIO_get_ex_data BIO_get_ex_new_index BIO_get_host_ip BIO_get_port BIO_get_retry_BIO BIO_get_retry_reason BIO_gethostbyname BIO_gets BIO_hex_string BIO_indent BIO_int_ctrl BIO_method_name BIO_method_type BIO_new BIO_new_CMS BIO_new_NDEF BIO_new_PKCS7 BIO_new_accept BIO_new_bio_pair BIO_new_connect BIO_new_dgram BIO_new_fd BIO_new_file BIO_new_fp BIO_new_mem_buf BIO_new_socket BIO_next BIO_nread BIO_nread0 BIO_number_read BIO_number_written BIO_nwrite BIO_nwrite0 BIO_pop BIO_printf BIO_ptr_ctrl BIO_push BIO_puts BIO_read BIO_s_accept BIO_s_bio BIO_s_connect BIO_s_datagram BIO_s_fd BIO_s_file BIO_s_mem BIO_s_null BIO_s_socket BIO_set BIO_set_callback BIO_set_callback_arg BIO_set_cipher BIO_set_ex_data BIO_set_flags BIO_set_tcp_ndelay BIO_snprintf BIO_sock_cleanup BIO_sock_error BIO_sock_init BIO_sock_non_fatal_error BIO_sock_should_retry BIO_socket_ioctl BIO_socket_nbio BIO_test_flags BIO_vfree BIO_vprintf BIO_vsnprintf BIO_write BN_BLINDING_convert BN_BLINDING_convert_ex BN_BLINDING_create_param BN_BLINDING_free BN_BLINDING_get_flags BN_BLINDING_get_thread_id BN_BLINDING_invert BN_BLINDING_invert_ex BN_BLINDING_new BN_BLINDING_set_flags BN_BLINDING_set_thread_id BN_BLINDING_thread_id BN_BLINDING_update BN_CTX_end BN_CTX_free BN_CTX_get BN_CTX_init BN_CTX_new BN_CTX_start BN_GENCB_call BN_GF2m_add BN_GF2m_arr2poly BN_GF2m_mod BN_GF2m_mod_arr BN_GF2m_mod_div BN_GF2m_mod_div_arr BN_GF2m_mod_exp BN_GF2m_mod_exp_arr BN_GF2m_mod_inv BN_GF2m_mod_inv_arr BN_GF2m_mod_mul BN_GF2m_mod_mul_arr BN_GF2m_mod_solve_quad BN_GF2m_mod_solve_quad_arr BN_GF2m_mod_sqr BN_GF2m_mod_sqr_arr BN_GF2m_mod_sqrt BN_GF2m_mod_sqrt_arr BN_GF2m_poly2arr BN_MONT_CTX_copy BN_MONT_CTX_free BN_MONT_CTX_init BN_MONT_CTX_new BN_MONT_CTX_set BN_MONT_CTX_set_locked BN_RECP_CTX_free BN_RECP_CTX_init BN_RECP_CTX_new BN_RECP_CTX_set BN_X931_derive_prime_ex BN_X931_generate_Xpq BN_X931_generate_prime_ex BN_add BN_add_word BN_asc2bn BN_bin2bn BN_bn2bin BN_bn2dec BN_bn2hex BN_bn2mpi BN_bntest_rand BN_clear BN_clear_bit BN_clear_free BN_cmp BN_consttime_swap BN_copy BN_dec2bn BN_div BN_div_recp BN_div_word BN_dup BN_exp BN_free BN_from_montgomery BN_gcd BN_generate_prime BN_generate_prime_ex BN_get0_nist_prime_192 BN_get0_nist_prime_224 BN_get0_nist_prime_256 BN_get0_nist_prime_384 BN_get0_nist_prime_521 BN_get_params BN_get_word BN_hex2bn BN_init BN_is_bit_set BN_is_prime BN_is_prime_ex BN_is_prime_fasttest BN_is_prime_fasttest_ex BN_kronecker BN_lshift BN_lshift1 BN_mask_bits BN_mod_add BN_mod_add_quick BN_mod_exp BN_mod_exp2_mont BN_mod_exp_mont BN_mod_exp_mont_consttime BN_mod_exp_mont_word BN_mod_exp_recp BN_mod_exp_simple BN_mod_inverse BN_mod_lshift BN_mod_lshift1 BN_mod_lshift1_quick BN_mod_lshift_quick BN_mod_mul BN_mod_mul_montgomery BN_mod_mul_reciprocal BN_mod_sqr BN_mod_sqrt BN_mod_sub BN_mod_sub_quick BN_mod_word BN_mpi2bn BN_mul BN_mul_word BN_new BN_nist_mod_192 BN_nist_mod_224 BN_nist_mod_256 BN_nist_mod_384 BN_nist_mod_521 BN_nnmod BN_num_bits BN_num_bits_word BN_options BN_print BN_print_fp BN_pseudo_rand BN_pseudo_rand_range BN_rand BN_rand_range BN_reciprocal BN_rshift BN_rshift1 BN_set_bit BN_set_negative BN_set_params BN_set_word BN_sqr BN_sub BN_sub_word BN_swap BN_to_ASN1_ENUMERATED BN_to_ASN1_INTEGER BN_uadd BN_ucmp BN_usub BN_value_one BUF_MEM_free BUF_MEM_grow BUF_MEM_grow_clean BUF_MEM_new BUF_memdup BUF_reverse BUF_strdup BUF_strlcat BUF_strlcpy BUF_strndup BUF_strnlen CAST_cbc_encrypt CAST_cfb64_encrypt CAST_decrypt CAST_ecb_encrypt CAST_encrypt CAST_ofb64_encrypt CAST_set_key CBIGNUM_it CERTIFICATEPOLICIES_free CERTIFICATEPOLICIES_it CERTIFICATEPOLICIES_new CMAC_CTX_cleanup CMAC_CTX_copy CMAC_CTX_free CMAC_CTX_get0_cipher_ctx CMAC_CTX_new CMAC_Final CMAC_Init CMAC_Update CMAC_resume CMS_ContentInfo_free CMS_ContentInfo_it CMS_ContentInfo_new CMS_ContentInfo_print_ctx CMS_EncryptedData_decrypt CMS_EncryptedData_encrypt CMS_EncryptedData_set1_key CMS_EnvelopedData_create CMS_ReceiptRequest_create0 CMS_ReceiptRequest_free CMS_ReceiptRequest_get0_values CMS_ReceiptRequest_it CMS_ReceiptRequest_new CMS_RecipientEncryptedKey_cert_cmp CMS_RecipientEncryptedKey_get0_id CMS_RecipientInfo_decrypt CMS_RecipientInfo_encrypt CMS_RecipientInfo_get0_pkey_ctx CMS_RecipientInfo_kari_decrypt CMS_RecipientInfo_kari_get0_alg CMS_RecipientInfo_kari_get0_ctx CMS_RecipientInfo_kari_get0_orig_id CMS_RecipientInfo_kari_get0_reks CMS_RecipientInfo_kari_orig_id_cmp CMS_RecipientInfo_kari_set0_pkey CMS_RecipientInfo_kekri_get0_id CMS_RecipientInfo_kekri_id_cmp CMS_RecipientInfo_ktri_cert_cmp CMS_RecipientInfo_ktri_get0_algs CMS_RecipientInfo_ktri_get0_signer_id CMS_RecipientInfo_set0_key CMS_RecipientInfo_set0_password CMS_RecipientInfo_set0_pkey CMS_RecipientInfo_type CMS_SharedInfo_encode CMS_SignedData_init CMS_SignerInfo_cert_cmp CMS_SignerInfo_get0_algs CMS_SignerInfo_get0_md_ctx CMS_SignerInfo_get0_pkey_ctx CMS_SignerInfo_get0_signature CMS_SignerInfo_get0_signer_id CMS_SignerInfo_set1_signer_cert CMS_SignerInfo_sign CMS_SignerInfo_verify CMS_SignerInfo_verify_content CMS_add0_CertificateChoices CMS_add0_RevocationInfoChoice CMS_add0_cert CMS_add0_crl CMS_add0_recipient_key CMS_add0_recipient_password CMS_add1_ReceiptRequest CMS_add1_cert CMS_add1_crl CMS_add1_recipient_cert CMS_add1_signer CMS_add_simple_smimecap CMS_add_smimecap CMS_add_standard_smimecap CMS_compress CMS_data CMS_dataFinal CMS_dataInit CMS_data_create CMS_decrypt CMS_decrypt_set1_key CMS_decrypt_set1_password CMS_decrypt_set1_pkey CMS_digest_create CMS_digest_verify CMS_encrypt CMS_final CMS_get0_RecipientInfos CMS_get0_SignerInfos CMS_get0_content CMS_get0_eContentType CMS_get0_signers CMS_get0_type CMS_get1_ReceiptRequest CMS_get1_certs CMS_get1_crls CMS_is_detached CMS_set1_eContentType CMS_set1_signers_certs CMS_set_detached CMS_sign CMS_sign_receipt CMS_signed_add1_attr CMS_signed_add1_attr_by_NID CMS_signed_add1_attr_by_OBJ CMS_signed_add1_attr_by_txt CMS_signed_delete_attr CMS_signed_get0_data_by_OBJ CMS_signed_get_attr CMS_signed_get_attr_by_NID CMS_signed_get_attr_by_OBJ CMS_signed_get_attr_count CMS_stream CMS_uncompress CMS_unsigned_add1_attr CMS_unsigned_add1_attr_by_NID CMS_unsigned_add1_attr_by_OBJ CMS_unsigned_add1_attr_by_txt CMS_unsigned_delete_attr CMS_unsigned_get0_data_by_OBJ CMS_unsigned_get_attr CMS_unsigned_get_attr_by_NID CMS_unsigned_get_attr_by_OBJ CMS_unsigned_get_attr_count CMS_verify CMS_verify_receipt COMP_CTX_free COMP_CTX_new COMP_compress_block COMP_expand_block COMP_rle COMP_zlib COMP_zlib_cleanup CONF_dump_bio CONF_dump_fp CONF_free CONF_get1_default_config_file CONF_get_number CONF_get_section CONF_get_string CONF_imodule_get_flags CONF_imodule_get_module CONF_imodule_get_name CONF_imodule_get_usr_data CONF_imodule_get_value CONF_imodule_set_flags CONF_imodule_set_usr_data CONF_load CONF_load_bio CONF_load_fp CONF_module_add CONF_module_get_usr_data CONF_module_set_usr_data CONF_modules_finish CONF_modules_free CONF_modules_load CONF_modules_load_file CONF_modules_unload CONF_parse_list CONF_set_default_method CONF_set_nconf CRL_DIST_POINTS_free CRL_DIST_POINTS_it CRL_DIST_POINTS_new CRYPTO_128_unwrap CRYPTO_128_wrap CRYPTO_THREADID_cmp CRYPTO_THREADID_cpy CRYPTO_THREADID_current CRYPTO_THREADID_get_callback CRYPTO_THREADID_hash CRYPTO_THREADID_set_callback CRYPTO_THREADID_set_numeric CRYPTO_THREADID_set_pointer CRYPTO_add_lock CRYPTO_cbc128_decrypt CRYPTO_cbc128_encrypt CRYPTO_ccm128_aad CRYPTO_ccm128_decrypt CRYPTO_ccm128_decrypt_ccm64 CRYPTO_ccm128_encrypt CRYPTO_ccm128_encrypt_ccm64 CRYPTO_ccm128_init CRYPTO_ccm128_setiv CRYPTO_ccm128_tag CRYPTO_cfb128_1_encrypt CRYPTO_cfb128_8_encrypt CRYPTO_cfb128_encrypt CRYPTO_cleanup_all_ex_data CRYPTO_ctr128_encrypt CRYPTO_ctr128_encrypt_ctr32 CRYPTO_cts128_decrypt CRYPTO_cts128_decrypt_block CRYPTO_cts128_encrypt CRYPTO_cts128_encrypt_block CRYPTO_dbg_free CRYPTO_dbg_get_options CRYPTO_dbg_malloc CRYPTO_dbg_realloc CRYPTO_dbg_set_options CRYPTO_destroy_dynlockid CRYPTO_dup_ex_data CRYPTO_ex_data_new_class CRYPTO_free CRYPTO_free_ex_data CRYPTO_free_locked CRYPTO_gcm128_aad CRYPTO_gcm128_decrypt CRYPTO_gcm128_decrypt_ctr32 CRYPTO_gcm128_encrypt CRYPTO_gcm128_encrypt_ctr32 CRYPTO_gcm128_finish CRYPTO_gcm128_init CRYPTO_gcm128_new CRYPTO_gcm128_release CRYPTO_gcm128_setiv CRYPTO_gcm128_tag CRYPTO_get_add_lock_callback CRYPTO_get_dynlock_create_callback CRYPTO_get_dynlock_destroy_callback CRYPTO_get_dynlock_lock_callback CRYPTO_get_dynlock_value CRYPTO_get_ex_data CRYPTO_get_ex_data_implementation CRYPTO_get_ex_new_index CRYPTO_get_id_callback CRYPTO_get_lock_name CRYPTO_get_locked_mem_ex_functions CRYPTO_get_locked_mem_functions CRYPTO_get_locking_callback CRYPTO_get_mem_debug_functions CRYPTO_get_mem_debug_options CRYPTO_get_mem_ex_functions CRYPTO_get_mem_functions CRYPTO_get_new_dynlockid CRYPTO_get_new_lockid CRYPTO_is_mem_check_on CRYPTO_lock CRYPTO_malloc CRYPTO_malloc_locked CRYPTO_mem_ctrl CRYPTO_mem_leaks CRYPTO_mem_leaks_cb CRYPTO_mem_leaks_fp CRYPTO_memcmp CRYPTO_new_ex_data CRYPTO_nistcts128_decrypt CRYPTO_nistcts128_decrypt_block CRYPTO_nistcts128_encrypt CRYPTO_nistcts128_encrypt_block CRYPTO_num_locks CRYPTO_ofb128_encrypt CRYPTO_pop_info CRYPTO_push_info_ CRYPTO_realloc CRYPTO_realloc_clean CRYPTO_remalloc CRYPTO_remove_all_info CRYPTO_set_add_lock_callback CRYPTO_set_dynlock_create_callback CRYPTO_set_dynlock_destroy_callback CRYPTO_set_dynlock_lock_callback CRYPTO_set_ex_data CRYPTO_set_ex_data_implementation CRYPTO_set_id_callback CRYPTO_set_locked_mem_ex_functions CRYPTO_set_locked_mem_functions CRYPTO_set_locking_callback CRYPTO_set_mem_debug_functions CRYPTO_set_mem_debug_options CRYPTO_set_mem_ex_functions CRYPTO_set_mem_functions CRYPTO_strdup CRYPTO_thread_id CRYPTO_xts128_encrypt Camellia_cbc_encrypt Camellia_cfb128_encrypt Camellia_cfb1_encrypt Camellia_cfb8_encrypt Camellia_ctr128_encrypt Camellia_decrypt Camellia_ecb_encrypt Camellia_encrypt Camellia_ofb128_encrypt Camellia_set_key DES_cbc_cksum DES_cbc_encrypt DES_cfb64_encrypt DES_cfb_encrypt DES_check_key_parity DES_crypt DES_decrypt3 DES_ecb3_encrypt DES_ecb_encrypt DES_ede3_cbc_encrypt DES_ede3_cbcm_encrypt DES_ede3_cfb64_encrypt DES_ede3_cfb_encrypt DES_ede3_ofb64_encrypt DES_enc_read DES_enc_write DES_encrypt1 DES_encrypt2 DES_encrypt3 DES_fcrypt DES_is_weak_key DES_key_sched DES_ncbc_encrypt DES_ofb64_encrypt DES_ofb_encrypt DES_options DES_pcbc_encrypt DES_quad_cksum DES_random_key DES_read_2passwords DES_read_password DES_set_key DES_set_key_checked DES_set_key_unchecked DES_set_odd_parity DES_string_to_2keys DES_string_to_key DES_xcbc_encrypt DH_KDF_X9_42 DH_OpenSSL DH_check DH_check_pub_key DH_compute_key DH_compute_key_padded DH_free DH_generate_key DH_generate_parameters DH_generate_parameters_ex DH_get_1024_160 DH_get_2048_224 DH_get_2048_256 DH_get_default_method DH_get_ex_data DH_get_ex_new_index DH_new DH_new_method DH_set_default_method DH_set_ex_data DH_set_method DH_size DH_up_ref DHparams_dup DHparams_print DHparams_print_fp DIRECTORYSTRING_free DIRECTORYSTRING_it DIRECTORYSTRING_new DISPLAYTEXT_free DISPLAYTEXT_it DISPLAYTEXT_new DIST_POINT_NAME_free DIST_POINT_NAME_it DIST_POINT_NAME_new DIST_POINT_free DIST_POINT_it DIST_POINT_new DIST_POINT_set_dpname DSA_OpenSSL DSA_SIG_free DSA_SIG_new DSA_do_sign DSA_do_verify DSA_dup_DH DSA_free DSA_generate_key DSA_generate_parameters DSA_generate_parameters_ex DSA_get_default_method DSA_get_ex_data DSA_get_ex_new_index DSA_new DSA_new_method DSA_print DSA_print_fp DSA_set_default_method DSA_set_ex_data DSA_set_method DSA_sign DSA_sign_setup DSA_size DSA_up_ref DSA_verify DSAparams_dup DSAparams_print DSAparams_print_fp DSO_METHOD_beos DSO_METHOD_dl DSO_METHOD_dlfcn DSO_METHOD_null DSO_METHOD_openssl DSO_METHOD_vms DSO_METHOD_win32 DSO_bind_func DSO_bind_var DSO_convert_filename DSO_ctrl DSO_flags DSO_free DSO_get_default_method DSO_get_filename DSO_get_loaded_filename DSO_get_method DSO_global_lookup DSO_load DSO_merge DSO_new DSO_new_method DSO_pathbyaddr DSO_set_default_method DSO_set_filename DSO_set_method DSO_set_name_converter DSO_up_ref ECDH_KDF_X9_62 ECDH_OpenSSL ECDH_compute_key ECDH_get_default_method ECDH_get_ex_data ECDH_get_ex_new_index ECDH_set_default_method ECDH_set_ex_data ECDH_set_method ECDSA_METHOD_free ECDSA_METHOD_get_app_data ECDSA_METHOD_new ECDSA_METHOD_set_app_data ECDSA_METHOD_set_flags ECDSA_METHOD_set_name ECDSA_METHOD_set_sign ECDSA_METHOD_set_sign_setup ECDSA_METHOD_set_verify ECDSA_OpenSSL ECDSA_SIG_free ECDSA_SIG_new ECDSA_do_sign ECDSA_do_sign_ex ECDSA_do_verify ECDSA_get_default_method ECDSA_get_ex_data ECDSA_get_ex_new_index ECDSA_set_default_method ECDSA_set_ex_data ECDSA_set_method ECDSA_sign ECDSA_sign_ex ECDSA_sign_setup ECDSA_size ECDSA_verify ECPKParameters_print ECPKParameters_print_fp ECParameters_print ECParameters_print_fp EC_GF2m_simple_method EC_GFp_mont_method EC_GFp_nist_method EC_GFp_simple_method EC_GROUP_check EC_GROUP_check_discriminant EC_GROUP_clear_free EC_GROUP_cmp EC_GROUP_copy EC_GROUP_dup EC_GROUP_free EC_GROUP_get0_generator EC_GROUP_get0_seed EC_GROUP_get_asn1_flag EC_GROUP_get_basis_type EC_GROUP_get_cofactor EC_GROUP_get_curve_GF2m EC_GROUP_get_curve_GFp EC_GROUP_get_curve_name EC_GROUP_get_degree EC_GROUP_get_mont_data EC_GROUP_get_order EC_GROUP_get_pentanomial_basis EC_GROUP_get_point_conversion_form EC_GROUP_get_seed_len EC_GROUP_get_trinomial_basis EC_GROUP_have_precompute_mult EC_GROUP_method_of EC_GROUP_new EC_GROUP_new_by_curve_name EC_GROUP_new_curve_GF2m EC_GROUP_new_curve_GFp EC_GROUP_precompute_mult EC_GROUP_set_asn1_flag EC_GROUP_set_curve_GF2m EC_GROUP_set_curve_GFp EC_GROUP_set_curve_name EC_GROUP_set_generator EC_GROUP_set_point_conversion_form EC_GROUP_set_seed EC_KEY_check_key EC_KEY_clear_flags EC_KEY_copy EC_KEY_dup EC_KEY_free EC_KEY_generate_key EC_KEY_get0_group EC_KEY_get0_private_key EC_KEY_get0_public_key EC_KEY_get_conv_form EC_KEY_get_enc_flags EC_KEY_get_flags EC_KEY_get_key_method_data EC_KEY_insert_key_method_data EC_KEY_new EC_KEY_new_by_curve_name EC_KEY_precompute_mult EC_KEY_print EC_KEY_print_fp EC_KEY_set_asn1_flag EC_KEY_set_conv_form EC_KEY_set_enc_flags EC_KEY_set_flags EC_KEY_set_group EC_KEY_set_private_key EC_KEY_set_public_key EC_KEY_set_public_key_affine_coordinates EC_KEY_up_ref EC_METHOD_get_field_type EC_POINT_add EC_POINT_bn2point EC_POINT_clear_free EC_POINT_cmp EC_POINT_copy EC_POINT_dbl EC_POINT_dup EC_POINT_free EC_POINT_get_Jprojective_coordinates_GFp EC_POINT_get_affine_coordinates_GF2m EC_POINT_get_affine_coordinates_GFp EC_POINT_hex2point EC_POINT_invert EC_POINT_is_at_infinity EC_POINT_is_on_curve EC_POINT_make_affine EC_POINT_method_of EC_POINT_mul EC_POINT_new EC_POINT_oct2point EC_POINT_point2bn EC_POINT_point2hex EC_POINT_point2oct EC_POINT_set_Jprojective_coordinates_GFp EC_POINT_set_affine_coordinates_GF2m EC_POINT_set_affine_coordinates_GFp EC_POINT_set_compressed_coordinates_GF2m EC_POINT_set_compressed_coordinates_GFp EC_POINT_set_to_infinity EC_POINTs_make_affine EC_POINTs_mul EC_curve_nid2nist EC_curve_nist2nid EC_get_builtin_curves EDIPARTYNAME_free EDIPARTYNAME_it EDIPARTYNAME_new ENGINE_add ENGINE_add_conf_module ENGINE_by_id ENGINE_cleanup ENGINE_cmd_is_executable ENGINE_ctrl ENGINE_ctrl_cmd ENGINE_ctrl_cmd_string ENGINE_finish ENGINE_free ENGINE_get_DH ENGINE_get_DSA ENGINE_get_ECDH ENGINE_get_ECDSA ENGINE_get_RAND ENGINE_get_RSA ENGINE_get_STORE ENGINE_get_cipher ENGINE_get_cipher_engine ENGINE_get_ciphers ENGINE_get_cmd_defns ENGINE_get_ctrl_function ENGINE_get_default_DH ENGINE_get_default_DSA ENGINE_get_default_ECDH ENGINE_get_default_ECDSA ENGINE_get_default_RAND ENGINE_get_default_RSA ENGINE_get_destroy_function ENGINE_get_digest ENGINE_get_digest_engine ENGINE_get_digests ENGINE_get_ex_data ENGINE_get_ex_new_index ENGINE_get_finish_function ENGINE_get_first ENGINE_get_flags ENGINE_get_id ENGINE_get_init_function ENGINE_get_last ENGINE_get_load_privkey_function ENGINE_get_load_pubkey_function ENGINE_get_name ENGINE_get_next ENGINE_get_pkey_asn1_meth ENGINE_get_pkey_asn1_meth_engine ENGINE_get_pkey_asn1_meth_str ENGINE_get_pkey_asn1_meths ENGINE_get_pkey_meth ENGINE_get_pkey_meth_engine ENGINE_get_pkey_meths ENGINE_get_prev ENGINE_get_ssl_client_cert_function ENGINE_get_static_state ENGINE_get_table_flags ENGINE_init ENGINE_load_builtin_engines ENGINE_load_cryptodev ENGINE_load_dynamic ENGINE_load_openssl ENGINE_load_private_key ENGINE_load_public_key ENGINE_load_rdrand ENGINE_load_ssl_client_cert ENGINE_new ENGINE_pkey_asn1_find_str ENGINE_register_DH ENGINE_register_DSA ENGINE_register_ECDH ENGINE_register_ECDSA ENGINE_register_RAND ENGINE_register_RSA ENGINE_register_STORE ENGINE_register_all_DH ENGINE_register_all_DSA ENGINE_register_all_ECDH ENGINE_register_all_ECDSA ENGINE_register_all_RAND ENGINE_register_all_RSA ENGINE_register_all_STORE ENGINE_register_all_ciphers ENGINE_register_all_complete ENGINE_register_all_digests ENGINE_register_all_pkey_asn1_meths ENGINE_register_all_pkey_meths ENGINE_register_ciphers ENGINE_register_complete ENGINE_register_digests ENGINE_register_pkey_asn1_meths ENGINE_register_pkey_meths ENGINE_remove ENGINE_set_DH ENGINE_set_DSA ENGINE_set_ECDH ENGINE_set_ECDSA ENGINE_set_RAND ENGINE_set_RSA ENGINE_set_STORE ENGINE_set_ciphers ENGINE_set_cmd_defns ENGINE_set_ctrl_function ENGINE_set_default ENGINE_set_default_DH ENGINE_set_default_DSA ENGINE_set_default_ECDH ENGINE_set_default_ECDSA ENGINE_set_default_RAND ENGINE_set_default_RSA ENGINE_set_default_ciphers ENGINE_set_default_digests ENGINE_set_default_pkey_asn1_meths ENGINE_set_default_pkey_meths ENGINE_set_default_string ENGINE_set_destroy_function ENGINE_set_digests ENGINE_set_ex_data ENGINE_set_finish_function ENGINE_set_flags ENGINE_set_id ENGINE_set_init_function ENGINE_set_load_privkey_function ENGINE_set_load_pubkey_function ENGINE_set_load_ssl_client_cert_function ENGINE_set_name ENGINE_set_pkey_asn1_meths ENGINE_set_pkey_meths ENGINE_set_table_flags ENGINE_unregister_DH ENGINE_unregister_DSA ENGINE_unregister_ECDH ENGINE_unregister_ECDSA ENGINE_unregister_RAND ENGINE_unregister_RSA ENGINE_unregister_STORE ENGINE_unregister_ciphers ENGINE_unregister_digests ENGINE_unregister_pkey_asn1_meths ENGINE_unregister_pkey_meths ENGINE_up_ref ERR_add_error_data ERR_add_error_vdata ERR_clear_error ERR_error_string ERR_error_string_n ERR_free_strings ERR_func_error_string ERR_get_err_state_table ERR_get_error ERR_get_error_line ERR_get_error_line_data ERR_get_implementation ERR_get_next_error_library ERR_get_state ERR_get_string_table ERR_lib_error_string ERR_load_ASN1_strings ERR_load_BIO_strings ERR_load_BN_strings ERR_load_BUF_strings ERR_load_CMS_strings ERR_load_COMP_strings ERR_load_CONF_strings ERR_load_CRYPTO_strings ERR_load_DH_strings ERR_load_DSA_strings ERR_load_DSO_strings ERR_load_ECDH_strings ERR_load_ECDSA_strings ERR_load_EC_strings ERR_load_ENGINE_strings ERR_load_ERR_strings ERR_load_EVP_strings ERR_load_OBJ_strings ERR_load_OCSP_strings ERR_load_PEM_strings ERR_load_PKCS12_strings ERR_load_PKCS7_strings ERR_load_RAND_strings ERR_load_RSA_strings ERR_load_TS_strings ERR_load_UI_strings ERR_load_X509V3_strings ERR_load_X509_strings ERR_load_crypto_strings ERR_load_strings ERR_peek_error ERR_peek_error_line ERR_peek_error_line_data ERR_peek_last_error ERR_peek_last_error_line ERR_peek_last_error_line_data ERR_pop_to_mark ERR_print_errors ERR_print_errors_cb ERR_print_errors_fp ERR_put_error ERR_reason_error_string ERR_release_err_state_table ERR_remove_state ERR_remove_thread_state ERR_set_error_data ERR_set_implementation ERR_set_mark ERR_unload_strings ESS_CERT_ID_dup ESS_CERT_ID_free ESS_CERT_ID_new ESS_ISSUER_SERIAL_dup ESS_ISSUER_SERIAL_free ESS_ISSUER_SERIAL_new ESS_SIGNING_CERT_dup ESS_SIGNING_CERT_free ESS_SIGNING_CERT_new EVP_BytesToKey EVP_CIPHER_CTX_block_size EVP_CIPHER_CTX_cipher EVP_CIPHER_CTX_cleanup EVP_CIPHER_CTX_clear_flags EVP_CIPHER_CTX_copy EVP_CIPHER_CTX_ctrl EVP_CIPHER_CTX_flags EVP_CIPHER_CTX_free EVP_CIPHER_CTX_get_app_data EVP_CIPHER_CTX_init EVP_CIPHER_CTX_iv_length EVP_CIPHER_CTX_key_length EVP_CIPHER_CTX_new EVP_CIPHER_CTX_nid EVP_CIPHER_CTX_rand_key EVP_CIPHER_CTX_set_app_data EVP_CIPHER_CTX_set_flags EVP_CIPHER_CTX_set_key_length EVP_CIPHER_CTX_set_padding EVP_CIPHER_CTX_test_flags EVP_CIPHER_asn1_to_param EVP_CIPHER_block_size EVP_CIPHER_do_all EVP_CIPHER_do_all_sorted EVP_CIPHER_flags EVP_CIPHER_get_asn1_iv EVP_CIPHER_iv_length EVP_CIPHER_key_length EVP_CIPHER_nid EVP_CIPHER_param_to_asn1 EVP_CIPHER_set_asn1_iv EVP_CIPHER_type EVP_Cipher EVP_CipherFinal EVP_CipherFinal_ex EVP_CipherInit EVP_CipherInit_ex EVP_CipherUpdate EVP_DecodeBlock EVP_DecodeFinal EVP_DecodeInit EVP_DecodeUpdate EVP_DecryptFinal EVP_DecryptFinal_ex EVP_DecryptInit EVP_DecryptInit_ex EVP_DecryptUpdate EVP_Digest EVP_DigestFinal EVP_DigestFinal_ex EVP_DigestInit EVP_DigestInit_ex EVP_DigestSignFinal EVP_DigestSignInit EVP_DigestUpdate EVP_DigestVerifyFinal EVP_DigestVerifyInit EVP_EncodeBlock EVP_EncodeFinal EVP_EncodeInit EVP_EncodeUpdate EVP_EncryptFinal EVP_EncryptFinal_ex EVP_EncryptInit EVP_EncryptInit_ex EVP_EncryptUpdate EVP_MD_CTX_cleanup EVP_MD_CTX_clear_flags EVP_MD_CTX_copy EVP_MD_CTX_copy_ex EVP_MD_CTX_create EVP_MD_CTX_destroy EVP_MD_CTX_init EVP_MD_CTX_md EVP_MD_CTX_set_flags EVP_MD_CTX_test_flags EVP_MD_block_size EVP_MD_do_all EVP_MD_do_all_sorted EVP_MD_flags EVP_MD_pkey_type EVP_MD_size EVP_MD_type EVP_OpenFinal EVP_OpenInit EVP_PBE_CipherInit EVP_PBE_alg_add EVP_PBE_alg_add_type EVP_PBE_cleanup EVP_PBE_find EVP_PKCS82PKEY EVP_PKEY2PKCS8 EVP_PKEY2PKCS8_broken EVP_PKEY_CTX_ctrl EVP_PKEY_CTX_ctrl_str EVP_PKEY_CTX_dup EVP_PKEY_CTX_free EVP_PKEY_CTX_get0_peerkey EVP_PKEY_CTX_get0_pkey EVP_PKEY_CTX_get_app_data EVP_PKEY_CTX_get_cb EVP_PKEY_CTX_get_data EVP_PKEY_CTX_get_keygen_info EVP_PKEY_CTX_get_operation EVP_PKEY_CTX_new EVP_PKEY_CTX_new_id EVP_PKEY_CTX_set0_keygen_info EVP_PKEY_CTX_set_app_data EVP_PKEY_CTX_set_cb EVP_PKEY_CTX_set_data EVP_PKEY_add1_attr EVP_PKEY_add1_attr_by_NID EVP_PKEY_add1_attr_by_OBJ EVP_PKEY_add1_attr_by_txt EVP_PKEY_asn1_add0 EVP_PKEY_asn1_add_alias EVP_PKEY_asn1_copy EVP_PKEY_asn1_find EVP_PKEY_asn1_find_str EVP_PKEY_asn1_free EVP_PKEY_asn1_get0 EVP_PKEY_asn1_get0_info EVP_PKEY_asn1_get_count EVP_PKEY_asn1_new EVP_PKEY_asn1_set_ctrl EVP_PKEY_asn1_set_free EVP_PKEY_asn1_set_item EVP_PKEY_asn1_set_param EVP_PKEY_asn1_set_private EVP_PKEY_asn1_set_public EVP_PKEY_assign EVP_PKEY_base_id EVP_PKEY_bits EVP_PKEY_cmp EVP_PKEY_cmp_parameters EVP_PKEY_copy_parameters EVP_PKEY_decrypt EVP_PKEY_decrypt_init EVP_PKEY_decrypt_old EVP_PKEY_delete_attr EVP_PKEY_derive EVP_PKEY_derive_init EVP_PKEY_derive_set_peer EVP_PKEY_encrypt EVP_PKEY_encrypt_init EVP_PKEY_encrypt_old EVP_PKEY_free EVP_PKEY_get0 EVP_PKEY_get0_asn1 EVP_PKEY_get1_DH EVP_PKEY_get1_DSA EVP_PKEY_get1_EC_KEY EVP_PKEY_get1_RSA EVP_PKEY_get_attr EVP_PKEY_get_attr_by_NID EVP_PKEY_get_attr_by_OBJ EVP_PKEY_get_attr_count EVP_PKEY_get_default_digest_nid EVP_PKEY_id EVP_PKEY_keygen EVP_PKEY_keygen_init EVP_PKEY_meth_add0 EVP_PKEY_meth_copy EVP_PKEY_meth_find EVP_PKEY_meth_free EVP_PKEY_meth_get0_info EVP_PKEY_meth_get_cleanup EVP_PKEY_meth_get_copy EVP_PKEY_meth_get_ctrl EVP_PKEY_meth_get_decrypt EVP_PKEY_meth_get_derive EVP_PKEY_meth_get_encrypt EVP_PKEY_meth_get_init EVP_PKEY_meth_get_keygen EVP_PKEY_meth_get_paramgen EVP_PKEY_meth_get_sign EVP_PKEY_meth_get_signctx EVP_PKEY_meth_get_verify EVP_PKEY_meth_get_verify_recover EVP_PKEY_meth_get_verifyctx EVP_PKEY_meth_new EVP_PKEY_meth_set_cleanup EVP_PKEY_meth_set_copy EVP_PKEY_meth_set_ctrl EVP_PKEY_meth_set_decrypt EVP_PKEY_meth_set_derive EVP_PKEY_meth_set_encrypt EVP_PKEY_meth_set_init EVP_PKEY_meth_set_keygen EVP_PKEY_meth_set_paramgen EVP_PKEY_meth_set_sign EVP_PKEY_meth_set_signctx EVP_PKEY_meth_set_verify EVP_PKEY_meth_set_verify_recover EVP_PKEY_meth_set_verifyctx EVP_PKEY_missing_parameters EVP_PKEY_new EVP_PKEY_new_mac_key EVP_PKEY_paramgen EVP_PKEY_paramgen_init EVP_PKEY_print_params EVP_PKEY_print_private EVP_PKEY_print_public EVP_PKEY_save_parameters EVP_PKEY_set1_DH EVP_PKEY_set1_DSA EVP_PKEY_set1_EC_KEY EVP_PKEY_set1_RSA EVP_PKEY_set_type EVP_PKEY_set_type_str EVP_PKEY_sign EVP_PKEY_sign_init EVP_PKEY_size EVP_PKEY_type EVP_PKEY_verify EVP_PKEY_verify_init EVP_PKEY_verify_recover EVP_PKEY_verify_recover_init EVP_SealFinal EVP_SealInit EVP_SignFinal EVP_VerifyFinal EVP_add_alg_module EVP_add_cipher EVP_add_digest EVP_aes_128_cbc EVP_aes_128_cbc_hmac_sha1 EVP_aes_128_cbc_hmac_sha256 EVP_aes_128_ccm EVP_aes_128_cfb1 EVP_aes_128_cfb128 EVP_aes_128_cfb8 EVP_aes_128_ctr EVP_aes_128_ecb EVP_aes_128_gcm EVP_aes_128_ofb EVP_aes_128_wrap EVP_aes_128_xts EVP_aes_192_cbc EVP_aes_192_ccm EVP_aes_192_cfb1 EVP_aes_192_cfb128 EVP_aes_192_cfb8 EVP_aes_192_ctr EVP_aes_192_ecb EVP_aes_192_gcm EVP_aes_192_ofb EVP_aes_192_wrap EVP_aes_256_cbc EVP_aes_256_cbc_hmac_sha1 EVP_aes_256_cbc_hmac_sha256 EVP_aes_256_ccm EVP_aes_256_cfb1 EVP_aes_256_cfb128 EVP_aes_256_cfb8 EVP_aes_256_ctr EVP_aes_256_ecb EVP_aes_256_gcm EVP_aes_256_ofb EVP_aes_256_wrap EVP_aes_256_xts EVP_bf_cbc EVP_bf_cfb64 EVP_bf_ecb EVP_bf_ofb EVP_camellia_128_cbc EVP_camellia_128_cfb1 EVP_camellia_128_cfb128 EVP_camellia_128_cfb8 EVP_camellia_128_ecb EVP_camellia_128_ofb EVP_camellia_192_cbc EVP_camellia_192_cfb1 EVP_camellia_192_cfb128 EVP_camellia_192_cfb8 EVP_camellia_192_ecb EVP_camellia_192_ofb EVP_camellia_256_cbc EVP_camellia_256_cfb1 EVP_camellia_256_cfb128 EVP_camellia_256_cfb8 EVP_camellia_256_ecb EVP_camellia_256_ofb EVP_cast5_cbc EVP_cast5_cfb64 EVP_cast5_ecb EVP_cast5_ofb EVP_cleanup EVP_des_cbc EVP_des_cfb1 EVP_des_cfb64 EVP_des_cfb8 EVP_des_ecb EVP_des_ede EVP_des_ede3 EVP_des_ede3_cbc EVP_des_ede3_cfb1 EVP_des_ede3_cfb64 EVP_des_ede3_cfb8 EVP_des_ede3_ecb EVP_des_ede3_ofb EVP_des_ede3_wrap EVP_des_ede_cbc EVP_des_ede_cfb64 EVP_des_ede_ecb EVP_des_ede_ofb EVP_des_ofb EVP_desx_cbc EVP_dss EVP_dss1 EVP_ecdsa EVP_enc_null EVP_get_cipherbyname EVP_get_digestbyname EVP_get_pw_prompt EVP_idea_cbc EVP_idea_cfb64 EVP_idea_ecb EVP_idea_ofb EVP_md4 EVP_md5 EVP_md_null EVP_mdc2 EVP_rc2_40_cbc EVP_rc2_64_cbc EVP_rc2_cbc EVP_rc2_cfb64 EVP_rc2_ecb EVP_rc2_ofb EVP_rc4 EVP_rc4_40 EVP_rc4_hmac_md5 EVP_read_pw_string EVP_read_pw_string_min EVP_ripemd160 EVP_seed_cbc EVP_seed_cfb128 EVP_seed_ecb EVP_seed_ofb EVP_set_pw_prompt EVP_sha EVP_sha1 EVP_sha224 EVP_sha256 EVP_sha384 EVP_sha512 EVP_whirlpool EXTENDED_KEY_USAGE_free EXTENDED_KEY_USAGE_it EXTENDED_KEY_USAGE_new FIPS_mode FIPS_mode_set GENERAL_NAMES_free GENERAL_NAMES_it GENERAL_NAMES_new GENERAL_NAME_cmp GENERAL_NAME_dup GENERAL_NAME_free GENERAL_NAME_get0_otherName GENERAL_NAME_get0_value GENERAL_NAME_it GENERAL_NAME_new GENERAL_NAME_print GENERAL_NAME_set0_othername GENERAL_NAME_set0_value GENERAL_SUBTREE_free GENERAL_SUBTREE_it GENERAL_SUBTREE_new HMAC HMAC_CTX_cleanup HMAC_CTX_copy HMAC_CTX_init HMAC_CTX_set_flags HMAC_Final HMAC_Init HMAC_Init_ex HMAC_Update ISSUING_DIST_POINT_free ISSUING_DIST_POINT_it ISSUING_DIST_POINT_new KRB5_APREQBODY_free KRB5_APREQBODY_it KRB5_APREQBODY_new KRB5_APREQ_free KRB5_APREQ_it KRB5_APREQ_new KRB5_AUTHDATA_free KRB5_AUTHDATA_it KRB5_AUTHDATA_new KRB5_AUTHENTBODY_free KRB5_AUTHENTBODY_it KRB5_AUTHENTBODY_new KRB5_AUTHENT_free KRB5_AUTHENT_it KRB5_AUTHENT_new KRB5_CHECKSUM_free KRB5_CHECKSUM_it KRB5_CHECKSUM_new KRB5_ENCDATA_free KRB5_ENCDATA_it KRB5_ENCDATA_new KRB5_ENCKEY_free KRB5_ENCKEY_it KRB5_ENCKEY_new KRB5_PRINCNAME_free KRB5_PRINCNAME_it KRB5_PRINCNAME_new KRB5_TICKET_free KRB5_TICKET_it KRB5_TICKET_new KRB5_TKTBODY_free KRB5_TKTBODY_it KRB5_TKTBODY_new LONG_it MD4 MD4_Final MD4_Init MD4_Transform MD4_Update MD5 MD5_Final MD5_Init MD5_Transform MD5_Update MDC2 MDC2_Final MDC2_Init MDC2_Update NAME_CONSTRAINTS_check NAME_CONSTRAINTS_free NAME_CONSTRAINTS_it NAME_CONSTRAINTS_new NCONF_WIN32 NCONF_default NCONF_dump_bio NCONF_dump_fp NCONF_free NCONF_free_data NCONF_get_number_e NCONF_get_section NCONF_get_string NCONF_load NCONF_load_bio NCONF_load_fp NCONF_new NETSCAPE_CERT_SEQUENCE_free NETSCAPE_CERT_SEQUENCE_it NETSCAPE_CERT_SEQUENCE_new NETSCAPE_SPKAC_free NETSCAPE_SPKAC_it NETSCAPE_SPKAC_new NETSCAPE_SPKI_b64_decode NETSCAPE_SPKI_b64_encode NETSCAPE_SPKI_free NETSCAPE_SPKI_get_pubkey NETSCAPE_SPKI_it NETSCAPE_SPKI_new NETSCAPE_SPKI_print NETSCAPE_SPKI_set_pubkey NETSCAPE_SPKI_sign NETSCAPE_SPKI_verify NETSCAPE_X509_free NETSCAPE_X509_it NETSCAPE_X509_new NOTICEREF_free NOTICEREF_it NOTICEREF_new OBJ_NAME_add OBJ_NAME_cleanup OBJ_NAME_do_all OBJ_NAME_do_all_sorted OBJ_NAME_get OBJ_NAME_init OBJ_NAME_new_index OBJ_NAME_remove OBJ_add_object OBJ_add_sigid OBJ_bsearch_ OBJ_bsearch_ex_ OBJ_cleanup OBJ_cmp OBJ_create OBJ_create_objects OBJ_dup OBJ_find_sigid_algs OBJ_find_sigid_by_algs OBJ_ln2nid OBJ_new_nid OBJ_nid2ln OBJ_nid2obj OBJ_nid2sn OBJ_obj2nid OBJ_obj2txt OBJ_sigid_free OBJ_sn2nid OBJ_txt2nid OBJ_txt2obj OCSP_BASICRESP_add1_ext_i2d OCSP_BASICRESP_add_ext OCSP_BASICRESP_delete_ext OCSP_BASICRESP_free OCSP_BASICRESP_get1_ext_d2i OCSP_BASICRESP_get_ext OCSP_BASICRESP_get_ext_by_NID OCSP_BASICRESP_get_ext_by_OBJ OCSP_BASICRESP_get_ext_by_critical OCSP_BASICRESP_get_ext_count OCSP_BASICRESP_it OCSP_BASICRESP_new OCSP_CERTID_dup OCSP_CERTID_free OCSP_CERTID_it OCSP_CERTID_new OCSP_CERTSTATUS_free OCSP_CERTSTATUS_it OCSP_CERTSTATUS_new OCSP_CRLID_free OCSP_CRLID_it OCSP_CRLID_new OCSP_ONEREQ_add1_ext_i2d OCSP_ONEREQ_add_ext OCSP_ONEREQ_delete_ext OCSP_ONEREQ_free OCSP_ONEREQ_get1_ext_d2i OCSP_ONEREQ_get_ext OCSP_ONEREQ_get_ext_by_NID OCSP_ONEREQ_get_ext_by_OBJ OCSP_ONEREQ_get_ext_by_critical OCSP_ONEREQ_get_ext_count OCSP_ONEREQ_it OCSP_ONEREQ_new OCSP_REQINFO_free OCSP_REQINFO_it OCSP_REQINFO_new OCSP_REQUEST_add1_ext_i2d OCSP_REQUEST_add_ext OCSP_REQUEST_delete_ext OCSP_REQUEST_free OCSP_REQUEST_get1_ext_d2i OCSP_REQUEST_get_ext OCSP_REQUEST_get_ext_by_NID OCSP_REQUEST_get_ext_by_OBJ OCSP_REQUEST_get_ext_by_critical OCSP_REQUEST_get_ext_count OCSP_REQUEST_it OCSP_REQUEST_new OCSP_REQUEST_print OCSP_REQ_CTX_add1_header OCSP_REQ_CTX_free OCSP_REQ_CTX_get0_mem_bio OCSP_REQ_CTX_http OCSP_REQ_CTX_i2d OCSP_REQ_CTX_nbio OCSP_REQ_CTX_nbio_d2i OCSP_REQ_CTX_new OCSP_REQ_CTX_set1_req OCSP_RESPBYTES_free OCSP_RESPBYTES_it OCSP_RESPBYTES_new OCSP_RESPDATA_free OCSP_RESPDATA_it OCSP_RESPDATA_new OCSP_RESPID_free OCSP_RESPID_it OCSP_RESPID_new OCSP_RESPONSE_free OCSP_RESPONSE_it OCSP_RESPONSE_new OCSP_RESPONSE_print OCSP_REVOKEDINFO_free OCSP_REVOKEDINFO_it OCSP_REVOKEDINFO_new OCSP_SERVICELOC_free OCSP_SERVICELOC_it OCSP_SERVICELOC_new OCSP_SIGNATURE_free OCSP_SIGNATURE_it OCSP_SIGNATURE_new OCSP_SINGLERESP_add1_ext_i2d OCSP_SINGLERESP_add_ext OCSP_SINGLERESP_delete_ext OCSP_SINGLERESP_free OCSP_SINGLERESP_get1_ext_d2i OCSP_SINGLERESP_get_ext OCSP_SINGLERESP_get_ext_by_NID OCSP_SINGLERESP_get_ext_by_OBJ OCSP_SINGLERESP_get_ext_by_critical OCSP_SINGLERESP_get_ext_count OCSP_SINGLERESP_it OCSP_SINGLERESP_new OCSP_accept_responses_new OCSP_archive_cutoff_new OCSP_basic_add1_cert OCSP_basic_add1_nonce OCSP_basic_add1_status OCSP_basic_sign OCSP_basic_verify OCSP_cert_id_new OCSP_cert_status_str OCSP_cert_to_id OCSP_check_nonce OCSP_check_validity OCSP_copy_nonce OCSP_crlID_new OCSP_crl_reason_str OCSP_id_cmp OCSP_id_get0_info OCSP_id_issuer_cmp OCSP_onereq_get0_id OCSP_parse_url OCSP_request_add0_id OCSP_request_add1_cert OCSP_request_add1_nonce OCSP_request_is_signed OCSP_request_onereq_count OCSP_request_onereq_get0 OCSP_request_set1_name OCSP_request_sign OCSP_request_verify OCSP_resp_count OCSP_resp_find OCSP_resp_find_status OCSP_resp_get0 OCSP_response_create OCSP_response_get1_basic OCSP_response_status OCSP_response_status_str OCSP_sendreq_bio OCSP_sendreq_nbio OCSP_sendreq_new OCSP_set_max_response_length OCSP_single_get0_status OCSP_url_svcloc_new OPENSSL_DIR_end OPENSSL_DIR_read OPENSSL_add_all_algorithms_conf OPENSSL_add_all_algorithms_noconf OPENSSL_asc2uni OPENSSL_cleanse OPENSSL_config OPENSSL_cpuid_setup OPENSSL_gmtime OPENSSL_gmtime_adj OPENSSL_gmtime_diff OPENSSL_ia32cap_loc OPENSSL_init OPENSSL_isservice OPENSSL_issetugid OPENSSL_load_builtin_modules OPENSSL_memcmp OPENSSL_no_config OPENSSL_showfatal OPENSSL_stderr OPENSSL_strcasecmp OPENSSL_strncasecmp OPENSSL_uni2asc OSSL_DES_version OSSL_libdes_version OTHERNAME_cmp OTHERNAME_free OTHERNAME_it OTHERNAME_new OpenSSLDie OpenSSL_add_all_ciphers OpenSSL_add_all_digests PBE2PARAM_free PBE2PARAM_it PBE2PARAM_new PBEPARAM_free PBEPARAM_it PBEPARAM_new PBKDF2PARAM_free PBKDF2PARAM_it PBKDF2PARAM_new PEM_ASN1_read PEM_ASN1_read_bio PEM_ASN1_write PEM_ASN1_write_bio PEM_SealFinal PEM_SealInit PEM_SealUpdate PEM_SignFinal PEM_SignInit PEM_SignUpdate PEM_X509_INFO_read PEM_X509_INFO_read_bio PEM_X509_INFO_write_bio PEM_bytes_read_bio PEM_def_callback PEM_dek_info PEM_do_header PEM_get_EVP_CIPHER_INFO PEM_proc_type PEM_read PEM_read_CMS PEM_read_DHparams PEM_read_DSAPrivateKey PEM_read_DSA_PUBKEY PEM_read_DSAparams PEM_read_ECPKParameters PEM_read_ECPrivateKey PEM_read_EC_PUBKEY PEM_read_NETSCAPE_CERT_SEQUENCE PEM_read_PKCS7 PEM_read_PKCS8 PEM_read_PKCS8_PRIV_KEY_INFO PEM_read_PUBKEY PEM_read_PrivateKey PEM_read_RSAPrivateKey PEM_read_RSAPublicKey PEM_read_RSA_PUBKEY PEM_read_X509 PEM_read_X509_AUX PEM_read_X509_CERT_PAIR PEM_read_X509_CRL PEM_read_X509_REQ PEM_read_bio PEM_read_bio_CMS PEM_read_bio_DHparams PEM_read_bio_DSAPrivateKey PEM_read_bio_DSA_PUBKEY PEM_read_bio_DSAparams PEM_read_bio_ECPKParameters PEM_read_bio_ECPrivateKey PEM_read_bio_EC_PUBKEY PEM_read_bio_NETSCAPE_CERT_SEQUENCE PEM_read_bio_PKCS7 PEM_read_bio_PKCS8 PEM_read_bio_PKCS8_PRIV_KEY_INFO PEM_read_bio_PUBKEY PEM_read_bio_Parameters PEM_read_bio_PrivateKey PEM_read_bio_RSAPrivateKey PEM_read_bio_RSAPublicKey PEM_read_bio_RSA_PUBKEY PEM_read_bio_X509 PEM_read_bio_X509_AUX PEM_read_bio_X509_CERT_PAIR PEM_read_bio_X509_CRL PEM_read_bio_X509_REQ PEM_write PEM_write_CMS PEM_write_DHparams PEM_write_DHxparams PEM_write_DSAPrivateKey PEM_write_DSA_PUBKEY PEM_write_DSAparams PEM_write_ECPKParameters PEM_write_ECPrivateKey PEM_write_EC_PUBKEY PEM_write_NETSCAPE_CERT_SEQUENCE PEM_write_PKCS7 PEM_write_PKCS8 PEM_write_PKCS8PrivateKey PEM_write_PKCS8PrivateKey_nid PEM_write_PKCS8_PRIV_KEY_INFO PEM_write_PUBKEY PEM_write_PrivateKey PEM_write_RSAPrivateKey PEM_write_RSAPublicKey PEM_write_RSA_PUBKEY PEM_write_X509 PEM_write_X509_AUX PEM_write_X509_CERT_PAIR PEM_write_X509_CRL PEM_write_X509_REQ PEM_write_X509_REQ_NEW PEM_write_bio PEM_write_bio_ASN1_stream PEM_write_bio_CMS PEM_write_bio_CMS_stream PEM_write_bio_DHparams PEM_write_bio_DHxparams PEM_write_bio_DSAPrivateKey PEM_write_bio_DSA_PUBKEY PEM_write_bio_DSAparams PEM_write_bio_ECPKParameters PEM_write_bio_ECPrivateKey PEM_write_bio_EC_PUBKEY PEM_write_bio_NETSCAPE_CERT_SEQUENCE PEM_write_bio_PKCS7 PEM_write_bio_PKCS7_stream PEM_write_bio_PKCS8 PEM_write_bio_PKCS8PrivateKey PEM_write_bio_PKCS8PrivateKey_nid PEM_write_bio_PKCS8_PRIV_KEY_INFO PEM_write_bio_PUBKEY PEM_write_bio_Parameters PEM_write_bio_PrivateKey PEM_write_bio_RSAPrivateKey PEM_write_bio_RSAPublicKey PEM_write_bio_RSA_PUBKEY PEM_write_bio_X509 PEM_write_bio_X509_AUX PEM_write_bio_X509_CERT_PAIR PEM_write_bio_X509_CRL PEM_write_bio_X509_REQ PEM_write_bio_X509_REQ_NEW PKCS12_AUTHSAFES_it PKCS12_BAGS_free PKCS12_BAGS_it PKCS12_BAGS_new PKCS12_MAC_DATA_free PKCS12_MAC_DATA_it PKCS12_MAC_DATA_new PKCS12_MAKE_KEYBAG PKCS12_MAKE_SHKEYBAG PKCS12_PBE_add PKCS12_PBE_keyivgen PKCS12_SAFEBAGS_it PKCS12_SAFEBAG_free PKCS12_SAFEBAG_it PKCS12_SAFEBAG_new PKCS12_add_CSPName_asc PKCS12_add_cert PKCS12_add_friendlyname_asc PKCS12_add_friendlyname_uni PKCS12_add_key PKCS12_add_localkeyid PKCS12_add_safe PKCS12_add_safes PKCS12_certbag2x509 PKCS12_certbag2x509crl PKCS12_create PKCS12_decrypt_skey PKCS12_free PKCS12_gen_mac PKCS12_get_attr_gen PKCS12_get_friendlyname PKCS12_init PKCS12_it PKCS12_item_decrypt_d2i PKCS12_item_i2d_encrypt PKCS12_item_pack_safebag PKCS12_key_gen_asc PKCS12_key_gen_uni PKCS12_new PKCS12_newpass PKCS12_pack_authsafes PKCS12_pack_p7data PKCS12_pack_p7encdata PKCS12_parse PKCS12_pbe_crypt PKCS12_set_mac PKCS12_setup_mac PKCS12_unpack_authsafes PKCS12_unpack_p7data PKCS12_unpack_p7encdata PKCS12_verify_mac PKCS12_x5092certbag PKCS12_x509crl2certbag PKCS1_MGF1 PKCS5_PBE_add PKCS5_PBE_keyivgen PKCS5_PBKDF2_HMAC PKCS5_PBKDF2_HMAC_SHA1 PKCS5_pbe2_set PKCS5_pbe2_set_iv PKCS5_pbe_set PKCS5_pbe_set0_algor PKCS5_pbkdf2_set PKCS5_v2_PBE_keyivgen PKCS7_ATTR_SIGN_it PKCS7_ATTR_VERIFY_it PKCS7_DIGEST_free PKCS7_DIGEST_it PKCS7_DIGEST_new PKCS7_ENCRYPT_free PKCS7_ENCRYPT_it PKCS7_ENCRYPT_new PKCS7_ENC_CONTENT_free PKCS7_ENC_CONTENT_it PKCS7_ENC_CONTENT_new PKCS7_ENVELOPE_free PKCS7_ENVELOPE_it PKCS7_ENVELOPE_new PKCS7_ISSUER_AND_SERIAL_digest PKCS7_ISSUER_AND_SERIAL_free PKCS7_ISSUER_AND_SERIAL_it PKCS7_ISSUER_AND_SERIAL_new PKCS7_RECIP_INFO_free PKCS7_RECIP_INFO_get0_alg PKCS7_RECIP_INFO_it PKCS7_RECIP_INFO_new PKCS7_RECIP_INFO_set PKCS7_SIGNED_free PKCS7_SIGNED_it PKCS7_SIGNED_new PKCS7_SIGNER_INFO_free PKCS7_SIGNER_INFO_get0_algs PKCS7_SIGNER_INFO_it PKCS7_SIGNER_INFO_new PKCS7_SIGNER_INFO_set PKCS7_SIGNER_INFO_sign PKCS7_SIGN_ENVELOPE_free PKCS7_SIGN_ENVELOPE_it PKCS7_SIGN_ENVELOPE_new PKCS7_add0_attrib_signing_time PKCS7_add1_attrib_digest PKCS7_add_attrib_content_type PKCS7_add_attrib_smimecap PKCS7_add_attribute PKCS7_add_certificate PKCS7_add_crl PKCS7_add_recipient PKCS7_add_recipient_info PKCS7_add_signature PKCS7_add_signed_attribute PKCS7_add_signer PKCS7_cert_from_signer_info PKCS7_content_new PKCS7_ctrl PKCS7_dataDecode PKCS7_dataFinal PKCS7_dataInit PKCS7_dataVerify PKCS7_decrypt PKCS7_digest_from_attributes PKCS7_dup PKCS7_encrypt PKCS7_final PKCS7_free PKCS7_get0_signers PKCS7_get_attribute PKCS7_get_issuer_and_serial PKCS7_get_signed_attribute PKCS7_get_signer_info PKCS7_get_smimecap PKCS7_it PKCS7_new PKCS7_print_ctx PKCS7_set0_type_other PKCS7_set_attributes PKCS7_set_cipher PKCS7_set_content PKCS7_set_digest PKCS7_set_signed_attributes PKCS7_set_type PKCS7_sign PKCS7_sign_add_signer PKCS7_signatureVerify PKCS7_simple_smimecap PKCS7_stream PKCS7_to_TS_TST_INFO PKCS7_verify PKCS8_PRIV_KEY_INFO_free PKCS8_PRIV_KEY_INFO_it PKCS8_PRIV_KEY_INFO_new PKCS8_add_keyusage PKCS8_decrypt PKCS8_encrypt PKCS8_pkey_get0 PKCS8_pkey_set0 PKCS8_set_broken PKEY_USAGE_PERIOD_free PKEY_USAGE_PERIOD_it PKEY_USAGE_PERIOD_new POLICYINFO_free POLICYINFO_it POLICYINFO_new POLICYQUALINFO_free POLICYQUALINFO_it POLICYQUALINFO_new POLICY_CONSTRAINTS_free POLICY_CONSTRAINTS_it POLICY_CONSTRAINTS_new POLICY_MAPPINGS_it POLICY_MAPPING_free POLICY_MAPPING_it POLICY_MAPPING_new PROXY_CERT_INFO_EXTENSION_free PROXY_CERT_INFO_EXTENSION_it PROXY_CERT_INFO_EXTENSION_new PROXY_POLICY_free PROXY_POLICY_it PROXY_POLICY_new RAND_SSLeay RAND_add RAND_bytes RAND_cleanup RAND_egd RAND_egd_bytes RAND_event RAND_file_name RAND_get_rand_method RAND_load_file RAND_poll RAND_pseudo_bytes RAND_query_egd_bytes RAND_screen RAND_seed RAND_set_rand_engine RAND_set_rand_method RAND_status RAND_write_file RC2_cbc_encrypt RC2_cfb64_encrypt RC2_decrypt RC2_ecb_encrypt RC2_encrypt RC2_ofb64_encrypt RC2_set_key RC4 RC4_options RC4_set_key RIPEMD160 RIPEMD160_Final RIPEMD160_Init RIPEMD160_Transform RIPEMD160_Update RSAPrivateKey_dup RSAPrivateKey_it RSAPublicKey_dup RSAPublicKey_it RSA_OAEP_PARAMS_free RSA_OAEP_PARAMS_it RSA_OAEP_PARAMS_new RSA_PKCS1_SSLeay RSA_PSS_PARAMS_free RSA_PSS_PARAMS_it RSA_PSS_PARAMS_new RSA_X931_hash_id RSA_blinding_off RSA_blinding_on RSA_check_key RSA_flags RSA_free RSA_generate_key RSA_generate_key_ex RSA_get_default_method RSA_get_ex_data RSA_get_ex_new_index RSA_get_method RSA_memory_lock RSA_new RSA_new_method RSA_null_method RSA_padding_add_PKCS1_OAEP RSA_padding_add_PKCS1_OAEP_mgf1 RSA_padding_add_PKCS1_PSS RSA_padding_add_PKCS1_PSS_mgf1 RSA_padding_add_PKCS1_type_1 RSA_padding_add_PKCS1_type_2 RSA_padding_add_SSLv23 RSA_padding_add_X931 RSA_padding_add_none RSA_padding_check_PKCS1_OAEP RSA_padding_check_PKCS1_OAEP_mgf1 RSA_padding_check_PKCS1_type_1 RSA_padding_check_PKCS1_type_2 RSA_padding_check_SSLv23 RSA_padding_check_X931 RSA_padding_check_none RSA_print RSA_print_fp RSA_private_decrypt RSA_private_encrypt RSA_public_decrypt RSA_public_encrypt RSA_set_default_method RSA_set_ex_data RSA_set_method RSA_setup_blinding RSA_sign RSA_sign_ASN1_OCTET_STRING RSA_size RSA_up_ref RSA_verify RSA_verify_ASN1_OCTET_STRING RSA_verify_PKCS1_PSS RSA_verify_PKCS1_PSS_mgf1 SEED_cbc_encrypt SEED_cfb128_encrypt SEED_decrypt SEED_ecb_encrypt SEED_encrypt SEED_ofb128_encrypt SEED_set_key SHA SHA1 SHA1_Final SHA1_Init SHA1_Transform SHA1_Update SHA224 SHA224_Final SHA224_Init SHA224_Update SHA256 SHA256_Final SHA256_Init SHA256_Transform SHA256_Update SHA384 SHA384_Final SHA384_Init SHA384_Update SHA512 SHA512_Final SHA512_Init SHA512_Transform SHA512_Update SHA_Final SHA_Init SHA_Transform SHA_Update SMIME_crlf_copy SMIME_read_ASN1 SMIME_read_CMS SMIME_read_PKCS7 SMIME_text SMIME_write_ASN1 SMIME_write_CMS SMIME_write_PKCS7 SRP_Calc_A SRP_Calc_B SRP_Calc_client_key SRP_Calc_server_key SRP_Calc_u SRP_Calc_x SRP_VBASE_free SRP_VBASE_get1_by_user SRP_VBASE_get_by_user SRP_VBASE_init SRP_VBASE_new SRP_Verify_A_mod_N SRP_Verify_B_mod_N SRP_check_known_gN_param SRP_create_verifier SRP_create_verifier_BN SRP_get_default_gN SRP_user_pwd_free SSLeay SSLeay_version SXNETID_free SXNETID_it SXNETID_new SXNET_add_id_INTEGER SXNET_add_id_asc SXNET_add_id_ulong SXNET_free SXNET_get_id_INTEGER SXNET_get_id_asc SXNET_get_id_ulong SXNET_it SXNET_new TS_ACCURACY_dup TS_ACCURACY_free TS_ACCURACY_get_micros TS_ACCURACY_get_millis TS_ACCURACY_get_seconds TS_ACCURACY_new TS_ACCURACY_set_micros TS_ACCURACY_set_millis TS_ACCURACY_set_seconds TS_ASN1_INTEGER_print_bio TS_CONF_get_tsa_section TS_CONF_load_cert TS_CONF_load_certs TS_CONF_load_key TS_CONF_set_accuracy TS_CONF_set_certs TS_CONF_set_clock_precision_digits TS_CONF_set_crypto_device TS_CONF_set_def_policy TS_CONF_set_default_engine TS_CONF_set_digests TS_CONF_set_ess_cert_id_chain TS_CONF_set_ordering TS_CONF_set_policies TS_CONF_set_serial TS_CONF_set_signer_cert TS_CONF_set_signer_key TS_CONF_set_tsa_name TS_MSG_IMPRINT_dup TS_MSG_IMPRINT_free TS_MSG_IMPRINT_get_algo TS_MSG_IMPRINT_get_msg TS_MSG_IMPRINT_new TS_MSG_IMPRINT_print_bio TS_MSG_IMPRINT_set_algo TS_MSG_IMPRINT_set_msg TS_OBJ_print_bio TS_REQ_add_ext TS_REQ_delete_ext TS_REQ_dup TS_REQ_ext_free TS_REQ_free TS_REQ_get_cert_req TS_REQ_get_ext TS_REQ_get_ext_by_NID TS_REQ_get_ext_by_OBJ TS_REQ_get_ext_by_critical TS_REQ_get_ext_count TS_REQ_get_ext_d2i TS_REQ_get_exts TS_REQ_get_msg_imprint TS_REQ_get_nonce TS_REQ_get_policy_id TS_REQ_get_version TS_REQ_new TS_REQ_print_bio TS_REQ_set_cert_req TS_REQ_set_msg_imprint TS_REQ_set_nonce TS_REQ_set_policy_id TS_REQ_set_version TS_REQ_to_TS_VERIFY_CTX TS_RESP_CTX_add_failure_info TS_RESP_CTX_add_flags TS_RESP_CTX_add_md TS_RESP_CTX_add_policy TS_RESP_CTX_free TS_RESP_CTX_get_request TS_RESP_CTX_get_tst_info TS_RESP_CTX_new TS_RESP_CTX_set_accuracy TS_RESP_CTX_set_certs TS_RESP_CTX_set_clock_precision_digits TS_RESP_CTX_set_def_policy TS_RESP_CTX_set_extension_cb TS_RESP_CTX_set_serial_cb TS_RESP_CTX_set_signer_cert TS_RESP_CTX_set_signer_key TS_RESP_CTX_set_status_info TS_RESP_CTX_set_status_info_cond TS_RESP_CTX_set_time_cb TS_RESP_create_response TS_RESP_dup TS_RESP_free TS_RESP_get_status_info TS_RESP_get_token TS_RESP_get_tst_info TS_RESP_new TS_RESP_print_bio TS_RESP_set_status_info TS_RESP_set_tst_info TS_RESP_verify_response TS_RESP_verify_signature TS_RESP_verify_token TS_STATUS_INFO_dup TS_STATUS_INFO_free TS_STATUS_INFO_new TS_STATUS_INFO_print_bio TS_TST_INFO_add_ext TS_TST_INFO_delete_ext TS_TST_INFO_dup TS_TST_INFO_ext_free TS_TST_INFO_free TS_TST_INFO_get_accuracy TS_TST_INFO_get_ext TS_TST_INFO_get_ext_by_NID TS_TST_INFO_get_ext_by_OBJ TS_TST_INFO_get_ext_by_critical TS_TST_INFO_get_ext_count TS_TST_INFO_get_ext_d2i TS_TST_INFO_get_exts TS_TST_INFO_get_msg_imprint TS_TST_INFO_get_nonce TS_TST_INFO_get_ordering TS_TST_INFO_get_policy_id TS_TST_INFO_get_serial TS_TST_INFO_get_time TS_TST_INFO_get_tsa TS_TST_INFO_get_version TS_TST_INFO_new TS_TST_INFO_print_bio TS_TST_INFO_set_accuracy TS_TST_INFO_set_msg_imprint TS_TST_INFO_set_nonce TS_TST_INFO_set_ordering TS_TST_INFO_set_policy_id TS_TST_INFO_set_serial TS_TST_INFO_set_time TS_TST_INFO_set_tsa TS_TST_INFO_set_version TS_VERIFY_CTX_cleanup TS_VERIFY_CTX_free TS_VERIFY_CTX_init TS_VERIFY_CTX_new TS_X509_ALGOR_print_bio TS_ext_print_bio TXT_DB_create_index TXT_DB_free TXT_DB_get_by_index TXT_DB_insert TXT_DB_read TXT_DB_write UI_OpenSSL UI_UTIL_read_pw UI_UTIL_read_pw_string UI_add_error_string UI_add_info_string UI_add_input_boolean UI_add_input_string UI_add_user_data UI_add_verify_string UI_construct_prompt UI_create_method UI_ctrl UI_destroy_method UI_dup_error_string UI_dup_info_string UI_dup_input_boolean UI_dup_input_string UI_dup_verify_string UI_free UI_get0_action_string UI_get0_output_string UI_get0_result UI_get0_result_string UI_get0_test_string UI_get0_user_data UI_get_default_method UI_get_ex_data UI_get_ex_new_index UI_get_input_flags UI_get_method UI_get_result_maxsize UI_get_result_minsize UI_get_string_type UI_method_get_closer UI_method_get_flusher UI_method_get_opener UI_method_get_prompt_constructor UI_method_get_reader UI_method_get_writer UI_method_set_closer UI_method_set_flusher UI_method_set_opener UI_method_set_prompt_constructor UI_method_set_reader UI_method_set_writer UI_new UI_new_method UI_process UI_set_default_method UI_set_ex_data UI_set_method UI_set_result USERNOTICE_free USERNOTICE_it USERNOTICE_new UTF8_getc UTF8_putc WHIRLPOOL WHIRLPOOL_BitUpdate WHIRLPOOL_Final WHIRLPOOL_Init WHIRLPOOL_Update X509V3_EXT_CRL_add_conf X509V3_EXT_CRL_add_nconf X509V3_EXT_REQ_add_conf X509V3_EXT_REQ_add_nconf X509V3_EXT_add X509V3_EXT_add_alias X509V3_EXT_add_conf X509V3_EXT_add_list X509V3_EXT_add_nconf X509V3_EXT_add_nconf_sk X509V3_EXT_cleanup X509V3_EXT_conf X509V3_EXT_conf_nid X509V3_EXT_d2i X509V3_EXT_free X509V3_EXT_get X509V3_EXT_get_nid X509V3_EXT_i2d X509V3_EXT_nconf X509V3_EXT_nconf_nid X509V3_EXT_print X509V3_EXT_print_fp X509V3_EXT_val_prn X509V3_NAME_from_section X509V3_add1_i2d X509V3_add_standard_extensions X509V3_add_value X509V3_add_value_bool X509V3_add_value_bool_nf X509V3_add_value_int X509V3_add_value_uchar X509V3_conf_free X509V3_extensions_print X509V3_get_d2i X509V3_get_section X509V3_get_string X509V3_get_value_bool X509V3_get_value_int X509V3_parse_list X509V3_section_free X509V3_set_conf_lhash X509V3_set_ctx X509V3_set_nconf X509V3_string_free X509_ALGORS_it X509_ALGOR_cmp X509_ALGOR_dup X509_ALGOR_free X509_ALGOR_get0 X509_ALGOR_it X509_ALGOR_new X509_ALGOR_set0 X509_ALGOR_set_md X509_ATTRIBUTE_count X509_ATTRIBUTE_create X509_ATTRIBUTE_create_by_NID X509_ATTRIBUTE_create_by_OBJ X509_ATTRIBUTE_create_by_txt X509_ATTRIBUTE_dup X509_ATTRIBUTE_free X509_ATTRIBUTE_get0_data X509_ATTRIBUTE_get0_object X509_ATTRIBUTE_get0_type X509_ATTRIBUTE_it X509_ATTRIBUTE_new X509_ATTRIBUTE_set1_data X509_ATTRIBUTE_set1_object X509_CERT_AUX_free X509_CERT_AUX_it X509_CERT_AUX_new X509_CERT_AUX_print X509_CERT_PAIR_free X509_CERT_PAIR_it X509_CERT_PAIR_new X509_CINF_free X509_CINF_it X509_CINF_new X509_CRL_INFO_free X509_CRL_INFO_it X509_CRL_INFO_new X509_CRL_METHOD_free X509_CRL_METHOD_new X509_CRL_add0_revoked X509_CRL_add1_ext_i2d X509_CRL_add_ext X509_CRL_check_suiteb X509_CRL_cmp X509_CRL_delete_ext X509_CRL_diff X509_CRL_digest X509_CRL_dup X509_CRL_free X509_CRL_get0_by_cert X509_CRL_get0_by_serial X509_CRL_get_ext X509_CRL_get_ext_by_NID X509_CRL_get_ext_by_OBJ X509_CRL_get_ext_by_critical X509_CRL_get_ext_count X509_CRL_get_ext_d2i X509_CRL_get_meth_data X509_CRL_http_nbio X509_CRL_it X509_CRL_match X509_CRL_new X509_CRL_print X509_CRL_print_fp X509_CRL_set_default_method X509_CRL_set_issuer_name X509_CRL_set_lastUpdate X509_CRL_set_meth_data X509_CRL_set_nextUpdate X509_CRL_set_version X509_CRL_sign X509_CRL_sign_ctx X509_CRL_sort X509_CRL_verify X509_EXTENSIONS_it X509_EXTENSION_create_by_NID X509_EXTENSION_create_by_OBJ X509_EXTENSION_dup X509_EXTENSION_free X509_EXTENSION_get_critical X509_EXTENSION_get_data X509_EXTENSION_get_object X509_EXTENSION_it X509_EXTENSION_new X509_EXTENSION_set_critical X509_EXTENSION_set_data X509_EXTENSION_set_object X509_INFO_free X509_INFO_new X509_LOOKUP_by_alias X509_LOOKUP_by_fingerprint X509_LOOKUP_by_issuer_serial X509_LOOKUP_by_subject X509_LOOKUP_ctrl X509_LOOKUP_file X509_LOOKUP_free X509_LOOKUP_hash_dir X509_LOOKUP_init X509_LOOKUP_new X509_LOOKUP_shutdown X509_NAME_ENTRY_create_by_NID X509_NAME_ENTRY_create_by_OBJ X509_NAME_ENTRY_create_by_txt X509_NAME_ENTRY_dup X509_NAME_ENTRY_free X509_NAME_ENTRY_get_data X509_NAME_ENTRY_get_object X509_NAME_ENTRY_it X509_NAME_ENTRY_new X509_NAME_ENTRY_set_data X509_NAME_ENTRY_set_object X509_NAME_add_entry X509_NAME_add_entry_by_NID X509_NAME_add_entry_by_OBJ X509_NAME_add_entry_by_txt X509_NAME_cmp X509_NAME_delete_entry X509_NAME_digest X509_NAME_dup X509_NAME_entry_count X509_NAME_free X509_NAME_get_entry X509_NAME_get_index_by_NID X509_NAME_get_index_by_OBJ X509_NAME_get_text_by_NID X509_NAME_get_text_by_OBJ X509_NAME_hash X509_NAME_hash_old X509_NAME_it X509_NAME_new X509_NAME_oneline X509_NAME_print X509_NAME_print_ex X509_NAME_print_ex_fp X509_NAME_set X509_OBJECT_free_contents X509_OBJECT_idx_by_subject X509_OBJECT_retrieve_by_subject X509_OBJECT_retrieve_match X509_OBJECT_up_ref_count X509_PKEY_free X509_PKEY_new X509_POLICY_NODE_print X509_PUBKEY_free X509_PUBKEY_get X509_PUBKEY_get0_param X509_PUBKEY_it X509_PUBKEY_new X509_PUBKEY_set X509_PUBKEY_set0_param X509_PURPOSE_add X509_PURPOSE_cleanup X509_PURPOSE_get0 X509_PURPOSE_get0_name X509_PURPOSE_get0_sname X509_PURPOSE_get_by_id X509_PURPOSE_get_by_sname X509_PURPOSE_get_count X509_PURPOSE_get_id X509_PURPOSE_get_trust X509_PURPOSE_set X509_REQ_INFO_free X509_REQ_INFO_it X509_REQ_INFO_new X509_REQ_add1_attr X509_REQ_add1_attr_by_NID X509_REQ_add1_attr_by_OBJ X509_REQ_add1_attr_by_txt X509_REQ_add_extensions X509_REQ_add_extensions_nid X509_REQ_check_private_key X509_REQ_delete_attr X509_REQ_digest X509_REQ_dup X509_REQ_extension_nid X509_REQ_free X509_REQ_get1_email X509_REQ_get_attr X509_REQ_get_attr_by_NID X509_REQ_get_attr_by_OBJ X509_REQ_get_attr_count X509_REQ_get_extension_nids X509_REQ_get_extensions X509_REQ_get_pubkey X509_REQ_it X509_REQ_new X509_REQ_print X509_REQ_print_ex X509_REQ_print_fp X509_REQ_set_extension_nids X509_REQ_set_pubkey X509_REQ_set_subject_name X509_REQ_set_version X509_REQ_sign X509_REQ_sign_ctx X509_REQ_to_X509 X509_REQ_verify X509_REVOKED_add1_ext_i2d X509_REVOKED_add_ext X509_REVOKED_delete_ext X509_REVOKED_dup X509_REVOKED_free X509_REVOKED_get_ext X509_REVOKED_get_ext_by_NID X509_REVOKED_get_ext_by_OBJ X509_REVOKED_get_ext_by_critical X509_REVOKED_get_ext_count X509_REVOKED_get_ext_d2i X509_REVOKED_it X509_REVOKED_new X509_REVOKED_set_revocationDate X509_REVOKED_set_serialNumber X509_SIG_free X509_SIG_it X509_SIG_new X509_STORE_CTX_cleanup X509_STORE_CTX_free X509_STORE_CTX_get0_current_crl X509_STORE_CTX_get0_current_issuer X509_STORE_CTX_get0_param X509_STORE_CTX_get0_parent_ctx X509_STORE_CTX_get0_policy_tree X509_STORE_CTX_get0_store X509_STORE_CTX_get1_chain X509_STORE_CTX_get1_issuer X509_STORE_CTX_get_chain X509_STORE_CTX_get_current_cert X509_STORE_CTX_get_error X509_STORE_CTX_get_error_depth X509_STORE_CTX_get_ex_data X509_STORE_CTX_get_ex_new_index X509_STORE_CTX_get_explicit_policy X509_STORE_CTX_init X509_STORE_CTX_new X509_STORE_CTX_purpose_inherit X509_STORE_CTX_set0_crls X509_STORE_CTX_set0_param X509_STORE_CTX_set_cert X509_STORE_CTX_set_chain X509_STORE_CTX_set_default X509_STORE_CTX_set_depth X509_STORE_CTX_set_error X509_STORE_CTX_set_ex_data X509_STORE_CTX_set_flags X509_STORE_CTX_set_purpose X509_STORE_CTX_set_time X509_STORE_CTX_set_trust X509_STORE_CTX_set_verify_cb X509_STORE_CTX_trusted_stack X509_STORE_add_cert X509_STORE_add_crl X509_STORE_add_lookup X509_STORE_free X509_STORE_get1_certs X509_STORE_get1_crls X509_STORE_get_by_subject X509_STORE_load_locations X509_STORE_new X509_STORE_set1_param X509_STORE_set_default_paths X509_STORE_set_depth X509_STORE_set_flags X509_STORE_set_lookup_crls_cb X509_STORE_set_purpose X509_STORE_set_trust X509_STORE_set_verify_cb X509_TRUST_add X509_TRUST_cleanup X509_TRUST_get0 X509_TRUST_get0_name X509_TRUST_get_by_id X509_TRUST_get_count X509_TRUST_get_flags X509_TRUST_get_trust X509_TRUST_set X509_TRUST_set_default X509_VAL_free X509_VAL_it X509_VAL_new X509_VERIFY_PARAM_add0_policy X509_VERIFY_PARAM_add0_table X509_VERIFY_PARAM_add1_host X509_VERIFY_PARAM_clear_flags X509_VERIFY_PARAM_free X509_VERIFY_PARAM_get0 X509_VERIFY_PARAM_get0_name X509_VERIFY_PARAM_get0_peername X509_VERIFY_PARAM_get_count X509_VERIFY_PARAM_get_depth X509_VERIFY_PARAM_get_flags X509_VERIFY_PARAM_inherit X509_VERIFY_PARAM_lookup X509_VERIFY_PARAM_new X509_VERIFY_PARAM_set1 X509_VERIFY_PARAM_set1_email X509_VERIFY_PARAM_set1_host X509_VERIFY_PARAM_set1_ip X509_VERIFY_PARAM_set1_ip_asc X509_VERIFY_PARAM_set1_name X509_VERIFY_PARAM_set1_policies X509_VERIFY_PARAM_set_depth X509_VERIFY_PARAM_set_flags X509_VERIFY_PARAM_set_hostflags X509_VERIFY_PARAM_set_purpose X509_VERIFY_PARAM_set_time X509_VERIFY_PARAM_set_trust X509_VERIFY_PARAM_table_cleanup X509_add1_ext_i2d X509_add1_reject_object X509_add1_trust_object X509_add_ext X509_alias_get0 X509_alias_set1 X509_certificate_type X509_chain_check_suiteb X509_chain_up_ref X509_check_akid X509_check_ca X509_check_email X509_check_host X509_check_ip X509_check_ip_asc X509_check_issued X509_check_private_key X509_check_purpose X509_check_trust X509_cmp X509_cmp_current_time X509_cmp_time X509_delete_ext X509_digest X509_dup X509_email_free X509_find_by_issuer_and_serial X509_find_by_subject X509_free X509_get0_pubkey_bitstr X509_get0_signature X509_get1_email X509_get1_ocsp X509_get_default_cert_area X509_get_default_cert_dir X509_get_default_cert_dir_env X509_get_default_cert_file X509_get_default_cert_file_env X509_get_default_private_dir X509_get_ex_data X509_get_ex_new_index X509_get_ext X509_get_ext_by_NID X509_get_ext_by_OBJ X509_get_ext_by_critical X509_get_ext_count X509_get_ext_d2i X509_get_issuer_name X509_get_pubkey X509_get_pubkey_parameters X509_get_serialNumber X509_get_signature_nid X509_get_subject_name X509_gmtime_adj X509_http_nbio X509_issuer_and_serial_cmp X509_issuer_and_serial_hash X509_issuer_name_cmp X509_issuer_name_hash X509_issuer_name_hash_old X509_it X509_keyid_get0 X509_keyid_set1 X509_load_cert_crl_file X509_load_cert_file X509_load_crl_file X509_new X509_ocspid_print X509_policy_check X509_policy_level_get0_node X509_policy_level_node_count X509_policy_node_get0_parent X509_policy_node_get0_policy X509_policy_node_get0_qualifiers X509_policy_tree_free X509_policy_tree_get0_level X509_policy_tree_get0_policies X509_policy_tree_get0_user_policies X509_policy_tree_level_count X509_print X509_print_ex X509_print_ex_fp X509_print_fp X509_pubkey_digest X509_reject_clear X509_set_ex_data X509_set_issuer_name X509_set_notAfter X509_set_notBefore X509_set_pubkey X509_set_serialNumber X509_set_subject_name X509_set_version X509_sign X509_sign_ctx X509_signature_dump X509_signature_print X509_subject_name_cmp X509_subject_name_hash X509_subject_name_hash_old X509_supported_extension X509_time_adj X509_time_adj_ex X509_to_X509_REQ X509_trust_clear X509_verify X509_verify_cert X509_verify_cert_error_string X509at_add1_attr X509at_add1_attr_by_NID X509at_add1_attr_by_OBJ X509at_add1_attr_by_txt X509at_delete_attr X509at_get0_data_by_OBJ X509at_get_attr X509at_get_attr_by_NID X509at_get_attr_by_OBJ X509at_get_attr_count X509v3_add_ext X509v3_delete_ext X509v3_get_ext X509v3_get_ext_by_NID X509v3_get_ext_by_OBJ X509v3_get_ext_by_critical X509v3_get_ext_count ZLONG_it _ossl_096_des_random_seed _ossl_old_crypt _ossl_old_des_cbc_cksum _ossl_old_des_cbc_encrypt _ossl_old_des_cfb64_encrypt _ossl_old_des_cfb_encrypt _ossl_old_des_crypt _ossl_old_des_decrypt3 _ossl_old_des_ecb3_encrypt _ossl_old_des_ecb_encrypt _ossl_old_des_ede3_cbc_encrypt _ossl_old_des_ede3_cfb64_encrypt _ossl_old_des_ede3_ofb64_encrypt _ossl_old_des_enc_read _ossl_old_des_enc_write _ossl_old_des_encrypt _ossl_old_des_encrypt2 _ossl_old_des_encrypt3 _ossl_old_des_fcrypt _ossl_old_des_is_weak_key _ossl_old_des_key_sched _ossl_old_des_ncbc_encrypt _ossl_old_des_ofb64_encrypt _ossl_old_des_ofb_encrypt _ossl_old_des_options _ossl_old_des_pcbc_encrypt _ossl_old_des_quad_cksum _ossl_old_des_random_key _ossl_old_des_random_seed _ossl_old_des_read_2passwords _ossl_old_des_read_password _ossl_old_des_read_pw _ossl_old_des_read_pw_string _ossl_old_des_set_key _ossl_old_des_set_odd_parity _ossl_old_des_string_to_2keys _ossl_old_des_string_to_key _ossl_old_des_xcbc_encrypt _shadow_DES_check_key _shadow_DES_rw_mode a2d_ASN1_OBJECT a2i_ASN1_ENUMERATED a2i_ASN1_INTEGER a2i_ASN1_STRING a2i_GENERAL_NAME a2i_IPADDRESS a2i_IPADDRESS_NC a2i_ipadd asn1_Finish asn1_GetSequence asn1_add_error asn1_const_Finish asn1_do_adb asn1_do_lock asn1_enc_free asn1_enc_init asn1_enc_restore asn1_enc_save asn1_ex_c2i asn1_ex_i2c asn1_get_choice_selector asn1_get_field_ptr asn1_set_choice_selector b2i_PVK_bio b2i_PrivateKey b2i_PrivateKey_bio b2i_PublicKey b2i_PublicKey_bio bn_add_words bn_div_words bn_dup_expand bn_expand2 bn_mul_add_words bn_mul_words bn_sqr_words bn_sub_words c2i_ASN1_BIT_STRING c2i_ASN1_INTEGER c2i_ASN1_OBJECT check_defer d2i_ACCESS_DESCRIPTION d2i_ASN1_BIT_STRING d2i_ASN1_BMPSTRING d2i_ASN1_BOOLEAN d2i_ASN1_ENUMERATED d2i_ASN1_GENERALIZEDTIME d2i_ASN1_GENERALSTRING d2i_ASN1_IA5STRING d2i_ASN1_INTEGER d2i_ASN1_NULL d2i_ASN1_OBJECT d2i_ASN1_OCTET_STRING d2i_ASN1_PRINTABLE d2i_ASN1_PRINTABLESTRING d2i_ASN1_SEQUENCE_ANY d2i_ASN1_SET d2i_ASN1_SET_ANY d2i_ASN1_T61STRING d2i_ASN1_TIME d2i_ASN1_TYPE d2i_ASN1_UINTEGER d2i_ASN1_UNIVERSALSTRING d2i_ASN1_UTCTIME d2i_ASN1_UTF8STRING d2i_ASN1_VISIBLESTRING d2i_ASN1_bytes d2i_ASN1_type_bytes d2i_AUTHORITY_INFO_ACCESS d2i_AUTHORITY_KEYID d2i_AutoPrivateKey d2i_BASIC_CONSTRAINTS d2i_CERTIFICATEPOLICIES d2i_CMS_ContentInfo d2i_CMS_ReceiptRequest d2i_CMS_bio d2i_CRL_DIST_POINTS d2i_DHparams d2i_DHxparams d2i_DIRECTORYSTRING d2i_DISPLAYTEXT d2i_DIST_POINT d2i_DIST_POINT_NAME d2i_DSAPrivateKey d2i_DSAPrivateKey_bio d2i_DSAPrivateKey_fp d2i_DSAPublicKey d2i_DSA_PUBKEY d2i_DSA_PUBKEY_bio d2i_DSA_PUBKEY_fp d2i_DSA_SIG d2i_DSAparams d2i_ECDSA_SIG d2i_ECPKParameters d2i_ECParameters d2i_ECPrivateKey d2i_ECPrivateKey_bio d2i_ECPrivateKey_fp d2i_EC_PUBKEY d2i_EC_PUBKEY_bio d2i_EC_PUBKEY_fp d2i_EDIPARTYNAME d2i_ESS_CERT_ID d2i_ESS_ISSUER_SERIAL d2i_ESS_SIGNING_CERT d2i_EXTENDED_KEY_USAGE d2i_GENERAL_NAME d2i_GENERAL_NAMES d2i_ISSUING_DIST_POINT d2i_KRB5_APREQ d2i_KRB5_APREQBODY d2i_KRB5_AUTHDATA d2i_KRB5_AUTHENT d2i_KRB5_AUTHENTBODY d2i_KRB5_CHECKSUM d2i_KRB5_ENCDATA d2i_KRB5_ENCKEY d2i_KRB5_PRINCNAME d2i_KRB5_TICKET d2i_KRB5_TKTBODY d2i_NETSCAPE_CERT_SEQUENCE d2i_NETSCAPE_SPKAC d2i_NETSCAPE_SPKI d2i_NETSCAPE_X509 d2i_NOTICEREF d2i_Netscape_RSA d2i_OCSP_BASICRESP d2i_OCSP_CERTID d2i_OCSP_CERTSTATUS d2i_OCSP_CRLID d2i_OCSP_ONEREQ d2i_OCSP_REQINFO d2i_OCSP_REQUEST d2i_OCSP_RESPBYTES d2i_OCSP_RESPDATA d2i_OCSP_RESPID d2i_OCSP_RESPONSE d2i_OCSP_REVOKEDINFO d2i_OCSP_SERVICELOC d2i_OCSP_SIGNATURE d2i_OCSP_SINGLERESP d2i_OTHERNAME d2i_PBE2PARAM d2i_PBEPARAM d2i_PBKDF2PARAM d2i_PKCS12 d2i_PKCS12_BAGS d2i_PKCS12_MAC_DATA d2i_PKCS12_SAFEBAG d2i_PKCS12_bio d2i_PKCS12_fp d2i_PKCS7 d2i_PKCS7_DIGEST d2i_PKCS7_ENCRYPT d2i_PKCS7_ENC_CONTENT d2i_PKCS7_ENVELOPE d2i_PKCS7_ISSUER_AND_SERIAL d2i_PKCS7_RECIP_INFO d2i_PKCS7_SIGNED d2i_PKCS7_SIGNER_INFO d2i_PKCS7_SIGN_ENVELOPE d2i_PKCS7_bio d2i_PKCS7_fp d2i_PKCS8PrivateKey_bio d2i_PKCS8PrivateKey_fp d2i_PKCS8_PRIV_KEY_INFO d2i_PKCS8_PRIV_KEY_INFO_bio d2i_PKCS8_PRIV_KEY_INFO_fp d2i_PKCS8_bio d2i_PKCS8_fp d2i_PKEY_USAGE_PERIOD d2i_POLICYINFO d2i_POLICYQUALINFO d2i_PROXY_CERT_INFO_EXTENSION d2i_PROXY_POLICY d2i_PUBKEY d2i_PUBKEY_bio d2i_PUBKEY_fp d2i_PrivateKey d2i_PrivateKey_bio d2i_PrivateKey_fp d2i_PublicKey d2i_RSAPrivateKey d2i_RSAPrivateKey_bio d2i_RSAPrivateKey_fp d2i_RSAPublicKey d2i_RSAPublicKey_bio d2i_RSAPublicKey_fp d2i_RSA_NET d2i_RSA_OAEP_PARAMS d2i_RSA_PSS_PARAMS d2i_RSA_PUBKEY d2i_RSA_PUBKEY_bio d2i_RSA_PUBKEY_fp d2i_SXNET d2i_SXNETID d2i_TS_ACCURACY d2i_TS_MSG_IMPRINT d2i_TS_MSG_IMPRINT_bio d2i_TS_MSG_IMPRINT_fp d2i_TS_REQ d2i_TS_REQ_bio d2i_TS_REQ_fp d2i_TS_RESP d2i_TS_RESP_bio d2i_TS_RESP_fp d2i_TS_STATUS_INFO d2i_TS_TST_INFO d2i_TS_TST_INFO_bio d2i_TS_TST_INFO_fp d2i_USERNOTICE d2i_X509 d2i_X509_ALGOR d2i_X509_ALGORS d2i_X509_ATTRIBUTE d2i_X509_AUX d2i_X509_CERT_AUX d2i_X509_CERT_PAIR d2i_X509_CINF d2i_X509_CRL d2i_X509_CRL_INFO d2i_X509_CRL_bio d2i_X509_CRL_fp d2i_X509_EXTENSION d2i_X509_EXTENSIONS d2i_X509_NAME d2i_X509_NAME_ENTRY d2i_X509_PKEY d2i_X509_PUBKEY d2i_X509_REQ d2i_X509_REQ_INFO d2i_X509_REQ_bio d2i_X509_REQ_fp d2i_X509_REVOKED d2i_X509_SIG d2i_X509_VAL d2i_X509_bio d2i_X509_fp get_rfc2409_prime_1024 get_rfc2409_prime_768 get_rfc3526_prime_1536 get_rfc3526_prime_2048 get_rfc3526_prime_3072 get_rfc3526_prime_4096 get_rfc3526_prime_6144 get_rfc3526_prime_8192 hex_to_string i2a_ACCESS_DESCRIPTION i2a_ASN1_ENUMERATED i2a_ASN1_INTEGER i2a_ASN1_OBJECT i2a_ASN1_STRING i2b_PVK_bio i2b_PrivateKey_bio i2b_PublicKey_bio i2c_ASN1_BIT_STRING i2c_ASN1_INTEGER i2d_ACCESS_DESCRIPTION i2d_ASN1_BIT_STRING i2d_ASN1_BMPSTRING i2d_ASN1_BOOLEAN i2d_ASN1_ENUMERATED i2d_ASN1_GENERALIZEDTIME i2d_ASN1_GENERALSTRING i2d_ASN1_IA5STRING i2d_ASN1_INTEGER i2d_ASN1_NULL i2d_ASN1_OBJECT i2d_ASN1_OCTET_STRING i2d_ASN1_PRINTABLE i2d_ASN1_PRINTABLESTRING i2d_ASN1_SEQUENCE_ANY i2d_ASN1_SET i2d_ASN1_SET_ANY i2d_ASN1_T61STRING i2d_ASN1_TIME i2d_ASN1_TYPE i2d_ASN1_UNIVERSALSTRING i2d_ASN1_UTCTIME i2d_ASN1_UTF8STRING i2d_ASN1_VISIBLESTRING i2d_ASN1_bio_stream i2d_ASN1_bytes i2d_AUTHORITY_INFO_ACCESS i2d_AUTHORITY_KEYID i2d_BASIC_CONSTRAINTS i2d_CERTIFICATEPOLICIES i2d_CMS_ContentInfo i2d_CMS_ReceiptRequest i2d_CMS_bio i2d_CMS_bio_stream i2d_CRL_DIST_POINTS i2d_DHparams i2d_DHxparams i2d_DIRECTORYSTRING i2d_DISPLAYTEXT i2d_DIST_POINT i2d_DIST_POINT_NAME i2d_DSAPrivateKey i2d_DSAPrivateKey_bio i2d_DSAPrivateKey_fp i2d_DSAPublicKey i2d_DSA_PUBKEY i2d_DSA_PUBKEY_bio i2d_DSA_PUBKEY_fp i2d_DSA_SIG i2d_DSAparams i2d_ECDSA_SIG i2d_ECPKParameters i2d_ECParameters i2d_ECPrivateKey i2d_ECPrivateKey_bio i2d_ECPrivateKey_fp i2d_EC_PUBKEY i2d_EC_PUBKEY_bio i2d_EC_PUBKEY_fp i2d_EDIPARTYNAME i2d_ESS_CERT_ID i2d_ESS_ISSUER_SERIAL i2d_ESS_SIGNING_CERT i2d_EXTENDED_KEY_USAGE i2d_GENERAL_NAME i2d_GENERAL_NAMES i2d_ISSUING_DIST_POINT i2d_KRB5_APREQ i2d_KRB5_APREQBODY i2d_KRB5_AUTHDATA i2d_KRB5_AUTHENT i2d_KRB5_AUTHENTBODY i2d_KRB5_CHECKSUM i2d_KRB5_ENCDATA i2d_KRB5_ENCKEY i2d_KRB5_PRINCNAME i2d_KRB5_TICKET i2d_KRB5_TKTBODY i2d_NETSCAPE_CERT_SEQUENCE i2d_NETSCAPE_SPKAC i2d_NETSCAPE_SPKI i2d_NETSCAPE_X509 i2d_NOTICEREF i2d_Netscape_RSA i2d_OCSP_BASICRESP i2d_OCSP_CERTID i2d_OCSP_CERTSTATUS i2d_OCSP_CRLID i2d_OCSP_ONEREQ i2d_OCSP_REQINFO i2d_OCSP_REQUEST i2d_OCSP_RESPBYTES i2d_OCSP_RESPDATA i2d_OCSP_RESPID i2d_OCSP_RESPONSE i2d_OCSP_REVOKEDINFO i2d_OCSP_SERVICELOC i2d_OCSP_SIGNATURE i2d_OCSP_SINGLERESP i2d_OTHERNAME i2d_PBE2PARAM i2d_PBEPARAM i2d_PBKDF2PARAM i2d_PKCS12 i2d_PKCS12_BAGS i2d_PKCS12_MAC_DATA i2d_PKCS12_SAFEBAG i2d_PKCS12_bio i2d_PKCS12_fp i2d_PKCS7 i2d_PKCS7_DIGEST i2d_PKCS7_ENCRYPT i2d_PKCS7_ENC_CONTENT i2d_PKCS7_ENVELOPE i2d_PKCS7_ISSUER_AND_SERIAL i2d_PKCS7_NDEF i2d_PKCS7_RECIP_INFO i2d_PKCS7_SIGNED i2d_PKCS7_SIGNER_INFO i2d_PKCS7_SIGN_ENVELOPE i2d_PKCS7_bio i2d_PKCS7_bio_stream i2d_PKCS7_fp i2d_PKCS8PrivateKeyInfo_bio i2d_PKCS8PrivateKeyInfo_fp i2d_PKCS8PrivateKey_bio i2d_PKCS8PrivateKey_fp i2d_PKCS8PrivateKey_nid_bio i2d_PKCS8PrivateKey_nid_fp i2d_PKCS8_PRIV_KEY_INFO i2d_PKCS8_PRIV_KEY_INFO_bio i2d_PKCS8_PRIV_KEY_INFO_fp i2d_PKCS8_bio i2d_PKCS8_fp i2d_PKEY_USAGE_PERIOD i2d_POLICYINFO i2d_POLICYQUALINFO i2d_PROXY_CERT_INFO_EXTENSION i2d_PROXY_POLICY i2d_PUBKEY i2d_PUBKEY_bio i2d_PUBKEY_fp i2d_PrivateKey i2d_PrivateKey_bio i2d_PrivateKey_fp i2d_PublicKey i2d_RSAPrivateKey i2d_RSAPrivateKey_bio i2d_RSAPrivateKey_fp i2d_RSAPublicKey i2d_RSAPublicKey_bio i2d_RSAPublicKey_fp i2d_RSA_NET i2d_RSA_OAEP_PARAMS i2d_RSA_PSS_PARAMS i2d_RSA_PUBKEY i2d_RSA_PUBKEY_bio i2d_RSA_PUBKEY_fp i2d_SXNET i2d_SXNETID i2d_TS_ACCURACY i2d_TS_MSG_IMPRINT i2d_TS_MSG_IMPRINT_bio i2d_TS_MSG_IMPRINT_fp i2d_TS_REQ i2d_TS_REQ_bio i2d_TS_REQ_fp i2d_TS_RESP i2d_TS_RESP_bio i2d_TS_RESP_fp i2d_TS_STATUS_INFO i2d_TS_TST_INFO i2d_TS_TST_INFO_bio i2d_TS_TST_INFO_fp i2d_USERNOTICE i2d_X509 i2d_X509_ALGOR i2d_X509_ALGORS i2d_X509_ATTRIBUTE i2d_X509_AUX i2d_X509_CERT_AUX i2d_X509_CERT_PAIR i2d_X509_CINF i2d_X509_CRL i2d_X509_CRL_INFO i2d_X509_CRL_bio i2d_X509_CRL_fp i2d_X509_EXTENSION i2d_X509_EXTENSIONS i2d_X509_NAME i2d_X509_NAME_ENTRY i2d_X509_PKEY i2d_X509_PUBKEY i2d_X509_REQ i2d_X509_REQ_INFO i2d_X509_REQ_bio i2d_X509_REQ_fp i2d_X509_REVOKED i2d_X509_SIG i2d_X509_VAL i2d_X509_bio i2d_X509_fp i2d_re_X509_tbs i2o_ECPublicKey i2s_ASN1_ENUMERATED i2s_ASN1_ENUMERATED_TABLE i2s_ASN1_INTEGER i2s_ASN1_OCTET_STRING i2t_ASN1_OBJECT i2v_ASN1_BIT_STRING i2v_GENERAL_NAME i2v_GENERAL_NAMES idea_cbc_encrypt idea_cfb64_encrypt idea_ecb_encrypt idea_encrypt idea_ofb64_encrypt idea_options idea_set_decrypt_key idea_set_encrypt_key lh_delete lh_doall lh_doall_arg lh_free lh_insert lh_new lh_node_stats lh_node_stats_bio lh_node_usage_stats lh_node_usage_stats_bio lh_num_items lh_retrieve lh_stats lh_stats_bio lh_strhash name_cmp o2i_ECPublicKey pitem_free pitem_new pqueue_find pqueue_free pqueue_insert pqueue_iterator pqueue_new pqueue_next pqueue_peek pqueue_pop pqueue_print pqueue_size private_AES_set_decrypt_key private_AES_set_encrypt_key private_RC4_set_key s2i_ASN1_INTEGER s2i_ASN1_OCTET_STRING sk_deep_copy sk_delete sk_delete_ptr sk_dup sk_find sk_find_ex sk_free sk_insert sk_is_sorted sk_new sk_new_null sk_num sk_pop sk_pop_free sk_push sk_set sk_set_cmp_func sk_shift sk_sort sk_unshift sk_value sk_zero string_to_hex v2i_ASN1_BIT_STRING v2i_GENERAL_NAME v2i_GENERAL_NAMES v2i_GENERAL_NAME_ex

libssl-3.dll

IMPHASH 93c29966cac61d073a926989d4a7f069
SHA256 9dabf03e1f1343833e6d9093235adc354fb79eda71219f3e4ff1194c29fe5603
MD5 62b807571388930d2de83ab58d450683
SHA1 92f365eeace96c1c1c8c30bb5fb19358e5e1935d
SHA512 e6c4013867be3a11cd645bb0221c6da6c14d5a2c91b48d499ddbfd713960e9e7030ee5c5febbd4a3056a374f2cd28b1edbe8da7eb95b690bbf0fe6cb17fb9b15
SSDEEP 12288:RmZ0uE9UW7BqLSUynZoAbuuwSoVct5zzSsMEo06vk6zl1UPpz01sQiCPOPzB:RmGuOndnYEoXzlUx01sQiCmPF
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

79:67:9d:25:a2:ce:d5:71:3b:6f:99:f8:59:42:fb:b8:63:86:04:15:9c:f6:c2:24:0e:cf:6b:6b:15:f7:e9:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Feb 21, 2024

PE Signature issue

Digest

5b:88:61:7e:b8:80:d1:f5:7c:25:8d:c6:1b:0b:79:20:6a:c6:ee:7b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Feb 21, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

6

Entry point

426655

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\projects\projectsJ\nfsdk2_1.6\protocolfilters\openssl\out32dll\libssl-3.pdb

libcrypto-3

EVP_PKEY_paramgen_init EVP_PKEY_paramgen EVP_PKEY_keygen_init EVP_PKEY_keygen EVP_PKEY_CTX_set_group_name X509_NAME_free X509_free RAND_bytes_ex X509_it ASN1_OCTET_STRING_it INT32_it ZINT32_it UINT32_it ZUINT32_it ZINT64_it ZUINT64_it CRYPTO_strndup ASN1_item_free ASN1_item_d2i ASN1_item_i2d OPENSSL_DIR_read OPENSSL_DIR_end OPENSSL_sk_shift OPENSSL_sk_pop OPENSSL_sk_set_cmp_func CRYPTO_THREAD_lock_new CRYPTO_THREAD_lock_free CRYPTO_get_ex_new_index CRYPTO_THREAD_run_once OSSL_LIB_CTX_set0_default BIO_s_file BIO_snprintf OBJ_nid2ln OBJ_nid2sn OPENSSL_LH_new OPENSSL_LH_free OPENSSL_LH_insert OPENSSL_LH_retrieve X509_verify_cert X509_STORE_new X509_STORE_free X509_STORE_up_ref X509_STORE_CTX_new_ex X509_STORE_CTX_free X509_STORE_CTX_init X509_STORE_CTX_set_verify_cb X509_STORE_add_cert X509_STORE_CTX_set_ex_data X509_STORE_CTX_get_error X509_STORE_CTX_get0_chain X509_STORE_CTX_get1_chain X509_STORE_CTX_set_flags X509_STORE_CTX_get0_param X509_STORE_CTX_set_default X509_STORE_CTX_set0_dane X509_VERIFY_PARAM_set1 X509_VERIFY_PARAM_set_auth_level X509_VERIFY_PARAM_move_peername X509_verify_cert_error_string X509_NAME_dup i2d_X509_NAME X509_new_ex X509_get_subject_name X509_up_ref X509_chain_up_ref X509_cmp X509_NAME_hash_ex PEM_read_bio_X509 OSSL_STORE_open OSSL_STORE_load OSSL_STORE_eof OSSL_STORE_error OSSL_STORE_close OSSL_STORE_INFO_get_type OSSL_STORE_INFO_get0_NAME OSSL_STORE_INFO_get0_CERT OSSL_STORE_INFO_free X509_get_extension_flags OPENSSL_sk_new OPENSSL_sk_delete OPENSSL_sk_unshift OPENSSL_sk_dup OPENSSL_sk_sort COMP_get_type COMP_get_name COMP_zlib EVP_CIPHER_get_block_size EVP_CIPHER_get_flags EVP_CIPHER_get_mode EVP_CIPHER_fetch EVP_get_cipherbyname EVP_get_digestbyname EVP_PKEY_asn1_find_str EVP_PKEY_asn1_get0_info EVP_SIGNATURE_free EVP_SIGNATURE_fetch EVP_KEYEXCH_free EVP_KEYEXCH_fetch CONF_parse_list ERR_set_mark ERR_pop_to_mark OPENSSL_strcasecmp OPENSSL_strncasecmp ERR_clear_last_mark X509_STORE_load_path X509_STORE_load_file_ex X509_STORE_load_store_ex OSSL_DECODER_CTX_free OSSL_DECODER_from_bio OSSL_DECODER_CTX_new_for_pkey ERR_reason_error_string ERR_load_strings_const OPENSSL_init_crypto OPENSSL_atexit OPENSSL_sk_insert CRYPTO_THREAD_read_lock CRYPTO_THREAD_write_lock CRYPTO_THREAD_unlock CRYPTO_new_ex_data CRYPTO_dup_ex_data CRYPTO_free_ex_data CRYPTO_set_ex_data CRYPTO_get_ex_data CRYPTO_realloc CRYPTO_secure_zalloc CRYPTO_secure_free BUF_MEM_free COMP_CTX_get_method BIO_int_ctrl BIO_pop BIO_free_all BIO_s_socket ASN1_OCTET_STRING_free OPENSSL_LH_num_items ERR_peek_error OBJ_bsearch_ EVP_MD_get0_provider EVP_CIPHER_up_ref EVP_CIPHER_free EVP_MD_fetch EVP_MD_up_ref EVP_MD_free EVP_CIPHER_CTX_free EVP_PKEY_get_security_bits X509_STORE_add_lookup X509_LOOKUP_hash_dir X509_LOOKUP_file X509_LOOKUP_store X509_LOOKUP_ctrl X509_LOOKUP_ctrl_ex X509_STORE_set_default_paths_ex X509_VERIFY_PARAM_new X509_VERIFY_PARAM_free X509_VERIFY_PARAM_inherit X509_VERIFY_PARAM_set_purpose X509_VERIFY_PARAM_set_trust X509_VERIFY_PARAM_set_depth X509_VERIFY_PARAM_set1_host X509_VERIFY_PARAM_add1_host X509_VERIFY_PARAM_set_hostflags X509_VERIFY_PARAM_get0_peername X509_VERIFY_PARAM_get1_ip_asc X509_VERIFY_PARAM_set1_ip_asc X509_VERIFY_PARAM_get_depth d2i_PUBKEY X509_EXTENSION_free d2i_X509 X509_get0_pubkey X509_check_private_key X509_get_ext_d2i ASYNC_WAIT_CTX_new ASYNC_WAIT_CTX_free ASYNC_WAIT_CTX_get_all_fds ASYNC_WAIT_CTX_set_callback ASYNC_WAIT_CTX_get_status ASYNC_WAIT_CTX_get_changed_fds ASYNC_start_job ASYNC_get_current_job CT_POLICY_EVAL_CTX_new_ex CT_POLICY_EVAL_CTX_free CT_POLICY_EVAL_CTX_set1_cert CT_POLICY_EVAL_CTX_set1_issuer CT_POLICY_EVAL_CTX_set_shared_CTLOG_STORE CT_POLICY_EVAL_CTX_set_time SCT_LIST_free SCT_set_source SCT_get_validation_status SCT_LIST_validate o2i_SCT_LIST CTLOG_STORE_new_ex CTLOG_STORE_free CTLOG_STORE_load_file CTLOG_STORE_load_default_file X509_get_key_usage a2i_IPADDRESS RAND_priv_bytes_ex EVP_PKEY_decapsulate OCSP_resp_count OCSP_resp_get0 OCSP_SINGLERESP_get1_ext_d2i OCSP_BASICRESP_free OCSP_RESPID_free OCSP_RESPONSE_free d2i_OCSP_RESPONSE conf_ssl_get conf_ssl_name_find conf_ssl_get_cmd ERR_peek_last_error EVP_PKEY_can_sign d2i_PrivateKey_ex EVP_PKEY_copy_parameters EVP_PKEY_missing_parameters EVP_PKEY_eq d2i_X509_bio d2i_PrivateKey_ex_bio X509_get_pubkey PEM_read_bio PEM_read_bio_X509_AUX PEM_read_bio_PrivateKey_ex RSA_free RSA_up_ref d2i_RSAPrivateKey EVP_PKEY_assign EVP_PKEY_new d2i_RSAPrivateKey_bio PEM_read_bio_RSAPrivateKey OPENSSL_LH_delete OPENSSL_LH_get_down_load OPENSSL_LH_set_down_load PEM_ASN1_read_bio PEM_ASN1_write_bio PEM_ASN1_read PEM_ASN1_write BIO_puts BIO_dump_indent BIO_printf OSSL_PARAM_construct_int OSSL_PARAM_construct_size_t OSSL_PARAM_construct_utf8_string EVP_MD_get0_name EVP_DigestSignInit_ex EVP_CIPHER_CTX_ctrl EVP_CIPHER_CTX_set_params EVP_PKEY_new_mac_key EVP_PKEY_new_raw_private_key_ex EVP_KDF_free EVP_KDF_fetch EVP_KDF_CTX_new EVP_KDF_CTX_free EVP_KDF_derive CRYPTO_memcmp BN_free BN_get_rfc2409_prime_1024 BN_get_rfc3526_prime_2048 BN_get_rfc3526_prime_3072 BN_get_rfc3526_prime_4096 BN_get_rfc3526_prime_8192 OBJ_txt2nid OBJ_ln2nid OBJ_sn2nid OSSL_PARAM_locate_const OSSL_PARAM_get_int OSSL_PARAM_get_uint OSSL_PARAM_free EVP_CIPHER_CTX_get_iv_length EVP_DecryptInit_ex EVP_DecryptUpdate EVP_DecryptFinal EVP_MAC_fetch EVP_MAC_free EVP_MAC_CTX_new EVP_MAC_CTX_free EVP_MAC_CTX_get_mac_size EVP_MAC_init EVP_MAC_update EVP_MAC_final EVP_PKEY_get_id EVP_PKEY_get_bits EVP_PKEY_get_size EVP_PKEY_set_type EVP_PKEY_digestsign_supports_digest EVP_PKEY_set1_encoded_public_key EVP_KEYMGMT_fetch EVP_KEYMGMT_free EVP_KEYMGMT_get0_provider EVP_PKEY_fromdata_init EVP_PKEY_fromdata EVP_PKEY_get_ec_point_conv_form EVP_PKEY_get_field_type EVP_PKEY_get_group_name X509_get_signature_info X509_get_signature_nid X509_get_issuer_name X509_chain_check_suiteb X509_NAME_cmp OSSL_PROVIDER_do_all OSSL_PROVIDER_get_capabilities OSSL_PARAM_BLD_new OSSL_PARAM_BLD_to_param OSSL_PARAM_BLD_free OSSL_PARAM_BLD_push_uint OSSL_PARAM_BLD_push_BN BIO_indent d2i_X509_NAME X509_NAME_print_ex X509_print_ex PEM_write_bio_X509 EVP_Q_mac EC_GROUP_get_curve_name EC_KEY_get0_group EVP_PKEY_set1_DH ENGINE_get_ssl_client_cert_function ENGINE_get_cipher ENGINE_get_digest ENGINE_init ENGINE_finish ENGINE_load_ssl_client_cert ENGINE_get_cipher_engine ENGINE_get_digest_engine HMAC_size HMAC_CTX_new HMAC_CTX_free HMAC_Init_ex HMAC_Update HMAC_Final BN_is_zero BN_num_bits BN_clear_free BN_copy BN_bin2bn BN_bn2bin BN_dup BN_ucmp SRP_create_verifier_BN_ex SRP_check_known_gN_param SRP_get_default_gN SRP_Calc_server_key SRP_Calc_B_ex SRP_Verify_A_mod_N SRP_Calc_u_ex SRP_Calc_x_ex SRP_Calc_A SRP_Calc_client_key_ex SRP_Verify_B_mod_N EVP_CIPHER_CTX_get0_cipher COMP_compress_block COMP_expand_block OSSL_PARAM_construct_octet_ptr EVP_MD_CTX_get_pkey_ctx EVP_CIPHER_CTX_get_block_size EVP_Cipher EVP_MD_CTX_ctrl EVP_MD_CTX_copy EVP_CipherUpdate EVP_DigestSignUpdate EVP_DigestSignFinal EVP_CIPHER_CTX_get_params EVP_PKEY_CTX_set_params EVP_CipherFinal_ex EVP_PKEY_get1_encoded_public_key i2d_X509_EXTENSIONS i2d_OCSP_RESPID EVP_DigestSign d2i_X509_EXTENSIONS d2i_OCSP_RESPID BUF_MEM_new BUF_MEM_grow_clean ERR_vset_error EVP_Digest EVP_DigestInit EVP_DigestVerify EVP_DigestVerifyInit_ex EVP_PKEY_CTX_ctrl EVP_PKEY_encrypt_init EVP_PKEY_encrypt EVP_PKEY_public_check EVP_PKEY_param_check_quick EVP_PKEY_CTX_set_rsa_padding EVP_PKEY_CTX_set_rsa_pss_saltlen BUF_reverse EVP_DigestVerifyUpdate EVP_DigestVerifyFinal i2d_X509 ASN1_ANY_it ASN1_TYPE_get ASN1_item_new OSSL_PARAM_construct_uint EVP_EncryptInit_ex EVP_EncryptUpdate EVP_EncryptFinal EVP_PKEY_decrypt_init EVP_PKEY_decrypt EVP_PKEY_get_bn_param EVP_PKEY_decapsulate_init EVP_PKEY_encapsulate EVP_PKEY_encapsulate_init EVP_PKEY_derive EVP_PKEY_derive_set_peer EVP_PKEY_derive_init EVP_PKEY_CTX_free EVP_PKEY_CTX_new_from_pkey EVP_PKEY_CTX_new_from_name EVP_PKEY_free EVP_PKEY_up_ref EVP_PKEY_is_a EVP_PKEY_CTX_set_dh_pad CRYPTO_strdup CRYPTO_memdup OPENSSL_sk_pop_free OPENSSL_sk_new_reserve OPENSSL_sk_value OPENSSL_sk_num EVP_CIPHER_CTX_reset EVP_CIPHER_CTX_new EVP_CipherInit_ex EVP_DigestFinal_ex EVP_MD_CTX_copy_ex EVP_MD_CTX_set_params EVP_CIPHER_get_iv_length EVP_CIPHER_get_key_length EVP_CIPHER_get0_provider EVP_MD_CTX_get0_md EVP_MD_get_size EVP_MD_get_type OSSL_PARAM_construct_end OSSL_PARAM_construct_octet_string BIO_s_mem COMP_CTX_free COMP_CTX_new OPENSSL_cleanse CRYPTO_clear_free SHA512_Transform SHA512_Init SHA384_Init SHA256_Transform SHA256_Init SHA224_Init SHA1_Transform SHA1_Init MD5_Transform MD5_Init EVP_DigestFinal EVP_DigestUpdate EVP_DigestInit_ex EVP_MD_CTX_free EVP_MD_CTX_new EVP_MD_is_a CRYPTO_malloc OPENSSL_sk_push OPENSSL_sk_find OPENSSL_sk_free OPENSSL_sk_new_null ERR_clear_error BIO_ADDR_clear BIO_ADDR_free BIO_ADDR_new BIO_read BIO_test_flags BIO_copy_next_retry BIO_f_buffer BIO_s_connect BIO_set_retry_reason BIO_get_retry_reason BIO_set_next BIO_next BIO_find_type BIO_push BIO_callback_ctrl BIO_ctrl BIO_write BIO_up_ref BIO_get_shutdown BIO_set_shutdown BIO_get_init BIO_set_init BIO_get_data BIO_set_data BIO_free BIO_new BIO_method_type BIO_clear_flags BIO_set_flags ERR_set_error ERR_set_debug ERR_new BUF_MEM_grow CRYPTO_free OCSP_response_get1_basic CRYPTO_zalloc

kernel32

FlushFileBuffers GetFullPathNameA WriteConsoleW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW HeapSize LoadLibraryW OutputDebugStringW ReadConsoleW ReadFile SetEndOfFile GetTimeZoneInformation SetStdHandle GetStringTypeW HeapReAlloc HeapAlloc RtlUnwind SetFilePointerEx GetConsoleMode GetConsoleCP SetConsoleCtrlHandler LoadLibraryExW FreeLibrary InterlockedExchange GetModuleFileNameW WriteFile CloseHandle CreateFileW GetCurrentDirectoryW SetCurrentDirectoryW GetFullPathNameW PeekNamedPipe GetFileInformationByHandle GetCPInfo GetOEMCP GetACP IsValidCodePage FatalAppExitA LeaveCriticalSection EnterCriticalSection Sleep WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStringsW GetCurrentProcessId QueryPerformanceCounter GetModuleFileNameA DeleteCriticalSection GetFileType GetStdHandle GetProcessHeap CreateSemaphoreW GetModuleHandleW GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter UnhandledExceptionFilter HeapFree MultiByteToWideChar AreFileApisANSI GetProcAddress GetModuleHandleExW ExitProcess FileTimeToSystemTime GetDriveTypeW FindFirstFileExW FindClose FileTimeToLocalFileTime GetCurrentThread InterlockedDecrement InterlockedIncrement DecodePointer EncodePointer GetCurrentThreadId GetCommandLineA IsProcessorFeaturePresent IsDebuggerPresent GetSystemTimeAsFileTime GetLastError SystemTimeToFileTime GetSystemTime SetLastError SetEnvironmentVariableA

BIO_f_ssl BIO_new_buffer_ssl_connect BIO_new_ssl BIO_new_ssl_connect BIO_ssl_copy_session_id BIO_ssl_shutdown DTLS_client_method DTLS_get_data_mtu DTLS_method DTLS_server_method DTLS_set_timer_cb DTLSv1_2_client_method DTLSv1_2_method DTLSv1_2_server_method DTLSv1_client_method DTLSv1_listen DTLSv1_method DTLSv1_server_method ERR_load_SSL_strings OPENSSL_cipher_name OPENSSL_init_ssl OSSL_default_cipher_list OSSL_default_ciphersuites PEM_read_SSL_SESSION PEM_read_bio_SSL_SESSION PEM_write_SSL_SESSION PEM_write_bio_SSL_SESSION SRP_Calc_A_param SSL_CIPHER_description SSL_CIPHER_find SSL_CIPHER_get_auth_nid SSL_CIPHER_get_bits SSL_CIPHER_get_cipher_nid SSL_CIPHER_get_digest_nid SSL_CIPHER_get_handshake_digest SSL_CIPHER_get_id SSL_CIPHER_get_kx_nid SSL_CIPHER_get_name SSL_CIPHER_get_protocol_id SSL_CIPHER_get_version SSL_CIPHER_is_aead SSL_CIPHER_standard_name SSL_COMP_add_compression_method SSL_COMP_get0_name SSL_COMP_get_compression_methods SSL_COMP_get_id SSL_COMP_get_name SSL_COMP_set0_compression_methods SSL_CONF_CTX_clear_flags SSL_CONF_CTX_finish SSL_CONF_CTX_free SSL_CONF_CTX_new SSL_CONF_CTX_set1_prefix SSL_CONF_CTX_set_flags SSL_CONF_CTX_set_ssl SSL_CONF_CTX_set_ssl_ctx SSL_CONF_cmd SSL_CONF_cmd_argv SSL_CONF_cmd_value_type SSL_CTX_SRP_CTX_free SSL_CTX_SRP_CTX_init SSL_CTX_add1_to_CA_list SSL_CTX_add_client_CA SSL_CTX_add_client_custom_ext SSL_CTX_add_custom_ext SSL_CTX_add_server_custom_ext SSL_CTX_add_session SSL_CTX_callback_ctrl SSL_CTX_check_private_key SSL_CTX_clear_options SSL_CTX_config SSL_CTX_ct_is_enabled SSL_CTX_ctrl SSL_CTX_dane_clear_flags SSL_CTX_dane_enable SSL_CTX_dane_mtype_set SSL_CTX_dane_set_flags SSL_CTX_enable_ct SSL_CTX_flush_sessions SSL_CTX_free SSL_CTX_get0_CA_list SSL_CTX_get0_certificate SSL_CTX_get0_ctlog_store SSL_CTX_get0_param SSL_CTX_get0_privatekey SSL_CTX_get0_security_ex_data SSL_CTX_get_cert_store SSL_CTX_get_ciphers SSL_CTX_get_client_CA_list SSL_CTX_get_client_cert_cb SSL_CTX_get_default_passwd_cb SSL_CTX_get_default_passwd_cb_userdata SSL_CTX_get_ex_data SSL_CTX_get_info_callback SSL_CTX_get_keylog_callback SSL_CTX_get_max_early_data SSL_CTX_get_num_tickets SSL_CTX_get_options SSL_CTX_get_quiet_shutdown SSL_CTX_get_record_padding_callback_arg SSL_CTX_get_recv_max_early_data SSL_CTX_get_security_callback SSL_CTX_get_security_level SSL_CTX_get_ssl_method SSL_CTX_get_timeout SSL_CTX_get_verify_callback SSL_CTX_get_verify_depth SSL_CTX_get_verify_mode SSL_CTX_has_client_custom_ext SSL_CTX_load_verify_dir SSL_CTX_load_verify_file SSL_CTX_load_verify_locations SSL_CTX_load_verify_store SSL_CTX_new SSL_CTX_new_ex SSL_CTX_remove_session SSL_CTX_sess_get_get_cb SSL_CTX_sess_get_new_cb SSL_CTX_sess_get_remove_cb SSL_CTX_sess_set_get_cb SSL_CTX_sess_set_new_cb SSL_CTX_sess_set_remove_cb SSL_CTX_sessions SSL_CTX_set0_CA_list SSL_CTX_set0_ctlog_store SSL_CTX_set0_security_ex_data SSL_CTX_set0_tmp_dh_pkey SSL_CTX_set1_cert_store SSL_CTX_set1_param SSL_CTX_set_allow_early_data_cb SSL_CTX_set_alpn_protos SSL_CTX_set_alpn_select_cb SSL_CTX_set_async_callback SSL_CTX_set_async_callback_arg SSL_CTX_set_block_padding SSL_CTX_set_cert_cb SSL_CTX_set_cert_store SSL_CTX_set_cert_verify_callback SSL_CTX_set_cipher_list SSL_CTX_set_ciphersuites SSL_CTX_set_client_CA_list SSL_CTX_set_client_cert_cb SSL_CTX_set_client_cert_engine SSL_CTX_set_client_hello_cb SSL_CTX_set_cookie_generate_cb SSL_CTX_set_cookie_verify_cb SSL_CTX_set_ct_validation_callback SSL_CTX_set_ctlog_list_file SSL_CTX_set_default_ctlog_list_file SSL_CTX_set_default_passwd_cb SSL_CTX_set_default_passwd_cb_userdata SSL_CTX_set_default_read_buffer_len SSL_CTX_set_default_verify_dir SSL_CTX_set_default_verify_file SSL_CTX_set_default_verify_paths SSL_CTX_set_default_verify_store SSL_CTX_set_ex_data SSL_CTX_set_generate_session_id SSL_CTX_set_info_callback SSL_CTX_set_keylog_callback SSL_CTX_set_max_early_data SSL_CTX_set_msg_callback SSL_CTX_set_next_proto_select_cb SSL_CTX_set_next_protos_advertised_cb SSL_CTX_set_not_resumable_session_callback SSL_CTX_set_num_tickets SSL_CTX_set_options SSL_CTX_set_post_handshake_auth SSL_CTX_set_psk_client_callback SSL_CTX_set_psk_find_session_callback SSL_CTX_set_psk_server_callback SSL_CTX_set_psk_use_session_callback SSL_CTX_set_purpose SSL_CTX_set_quiet_shutdown SSL_CTX_set_record_padding_callback SSL_CTX_set_record_padding_callback_arg SSL_CTX_set_recv_max_early_data SSL_CTX_set_security_callback SSL_CTX_set_security_level SSL_CTX_set_session_id_context SSL_CTX_set_session_ticket_cb SSL_CTX_set_srp_cb_arg SSL_CTX_set_srp_client_pwd_callback SSL_CTX_set_srp_password SSL_CTX_set_srp_strength SSL_CTX_set_srp_username SSL_CTX_set_srp_username_callback SSL_CTX_set_srp_verify_param_callback SSL_CTX_set_ssl_version SSL_CTX_set_stateless_cookie_generate_cb SSL_CTX_set_stateless_cookie_verify_cb SSL_CTX_set_timeout SSL_CTX_set_tlsext_max_fragment_length SSL_CTX_set_tlsext_ticket_key_evp_cb SSL_CTX_set_tlsext_use_srtp SSL_CTX_set_tmp_dh_callback SSL_CTX_set_trust SSL_CTX_set_verify SSL_CTX_set_verify_depth SSL_CTX_up_ref SSL_CTX_use_PrivateKey SSL_CTX_use_PrivateKey_ASN1 SSL_CTX_use_PrivateKey_file SSL_CTX_use_RSAPrivateKey SSL_CTX_use_RSAPrivateKey_ASN1 SSL_CTX_use_RSAPrivateKey_file SSL_CTX_use_cert_and_key SSL_CTX_use_certificate SSL_CTX_use_certificate_ASN1 SSL_CTX_use_certificate_chain_file SSL_CTX_use_certificate_file SSL_CTX_use_psk_identity_hint SSL_CTX_use_serverinfo SSL_CTX_use_serverinfo_ex SSL_CTX_use_serverinfo_file SSL_SESSION_dup SSL_SESSION_free SSL_SESSION_get0_alpn_selected SSL_SESSION_get0_cipher SSL_SESSION_get0_hostname SSL_SESSION_get0_id_context SSL_SESSION_get0_peer SSL_SESSION_get0_ticket SSL_SESSION_get0_ticket_appdata SSL_SESSION_get_compress_id SSL_SESSION_get_ex_data SSL_SESSION_get_id SSL_SESSION_get_master_key SSL_SESSION_get_max_early_data SSL_SESSION_get_max_fragment_length SSL_SESSION_get_protocol_version SSL_SESSION_get_ticket_lifetime_hint SSL_SESSION_get_time SSL_SESSION_get_timeout SSL_SESSION_has_ticket SSL_SESSION_is_resumable SSL_SESSION_new SSL_SESSION_print SSL_SESSION_print_fp SSL_SESSION_print_keylog SSL_SESSION_set1_alpn_selected SSL_SESSION_set1_hostname SSL_SESSION_set1_id SSL_SESSION_set1_id_context SSL_SESSION_set1_master_key SSL_SESSION_set1_ticket_appdata SSL_SESSION_set_cipher SSL_SESSION_set_ex_data SSL_SESSION_set_max_early_data SSL_SESSION_set_protocol_version SSL_SESSION_set_time SSL_SESSION_set_timeout SSL_SESSION_up_ref SSL_SRP_CTX_free SSL_SRP_CTX_init SSL_accept SSL_add1_host SSL_add1_to_CA_list SSL_add_client_CA SSL_add_dir_cert_subjects_to_stack SSL_add_file_cert_subjects_to_stack SSL_add_ssl_module SSL_add_store_cert_subjects_to_stack SSL_alert_desc_string SSL_alert_desc_string_long SSL_alert_type_string SSL_alert_type_string_long SSL_alloc_buffers SSL_bytes_to_cipher_list SSL_callback_ctrl SSL_certs_clear SSL_check_chain SSL_check_private_key SSL_clear SSL_clear_options SSL_client_hello_get0_ciphers SSL_client_hello_get0_compression_methods SSL_client_hello_get0_ext SSL_client_hello_get0_legacy_version SSL_client_hello_get0_random SSL_client_hello_get0_session_id SSL_client_hello_get1_extensions_present SSL_client_hello_isv2 SSL_client_version SSL_config SSL_connect SSL_copy_session_id SSL_ct_is_enabled SSL_ctrl SSL_dane_clear_flags SSL_dane_enable SSL_dane_set_flags SSL_dane_tlsa_add SSL_do_handshake SSL_dup SSL_dup_CA_list SSL_enable_ct SSL_export_keying_material SSL_export_keying_material_early SSL_extension_supported SSL_free SSL_free_buffers SSL_get0_CA_list SSL_get0_alpn_selected SSL_get0_dane SSL_get0_dane_authority SSL_get0_dane_tlsa SSL_get0_next_proto_negotiated SSL_get0_param SSL_get0_peer_CA_list SSL_get0_peer_certificate SSL_get0_peer_scts SSL_get0_peername SSL_get0_security_ex_data SSL_get0_verified_chain SSL_get1_peer_certificate SSL_get1_session SSL_get1_supported_ciphers SSL_get_SSL_CTX SSL_get_all_async_fds SSL_get_async_status SSL_get_certificate SSL_get_changed_async_fds SSL_get_cipher_list SSL_get_ciphers SSL_get_client_CA_list SSL_get_client_ciphers SSL_get_client_random SSL_get_current_cipher SSL_get_current_compression SSL_get_current_expansion SSL_get_default_passwd_cb SSL_get_default_passwd_cb_userdata SSL_get_default_timeout SSL_get_early_data_status SSL_get_error SSL_get_ex_data SSL_get_ex_data_X509_STORE_CTX_idx SSL_get_fd SSL_get_finished SSL_get_info_callback SSL_get_key_update_type SSL_get_max_early_data SSL_get_num_tickets SSL_get_options SSL_get_peer_cert_chain SSL_get_peer_finished SSL_get_peer_signature_type_nid SSL_get_pending_cipher SSL_get_privatekey SSL_get_psk_identity SSL_get_psk_identity_hint SSL_get_quiet_shutdown SSL_get_rbio SSL_get_read_ahead SSL_get_record_padding_callback_arg SSL_get_recv_max_early_data SSL_get_rfd SSL_get_security_callback SSL_get_security_level SSL_get_selected_srtp_profile SSL_get_server_random SSL_get_servername SSL_get_servername_type SSL_get_session SSL_get_shared_ciphers SSL_get_shared_sigalgs SSL_get_shutdown SSL_get_sigalgs SSL_get_signature_type_nid SSL_get_srp_N SSL_get_srp_g SSL_get_srp_userinfo SSL_get_srp_username SSL_get_srtp_profiles SSL_get_ssl_method SSL_get_state SSL_get_verify_callback SSL_get_verify_depth SSL_get_verify_mode SSL_get_verify_result SSL_get_version SSL_get_wbio SSL_get_wfd SSL_group_to_name SSL_has_matching_session_id SSL_has_pending SSL_in_before SSL_in_init SSL_is_dtls SSL_is_init_finished SSL_is_server SSL_key_update SSL_load_client_CA_file SSL_load_client_CA_file_ex SSL_new SSL_new_session_ticket SSL_peek SSL_peek_ex SSL_pending SSL_read SSL_read_early_data SSL_read_ex SSL_renegotiate SSL_renegotiate_abbreviated SSL_renegotiate_pending SSL_rstate_string SSL_rstate_string_long SSL_select_next_proto SSL_sendfile SSL_session_reused SSL_set0_CA_list SSL_set0_rbio SSL_set0_security_ex_data SSL_set0_tmp_dh_pkey SSL_set0_wbio SSL_set1_host SSL_set1_param SSL_set_SSL_CTX SSL_set_accept_state SSL_set_allow_early_data_cb SSL_set_alpn_protos SSL_set_async_callback SSL_set_async_callback_arg SSL_set_bio SSL_set_block_padding SSL_set_cert_cb SSL_set_cipher_list SSL_set_ciphersuites SSL_set_client_CA_list SSL_set_connect_state SSL_set_ct_validation_callback SSL_set_debug SSL_set_default_passwd_cb SSL_set_default_passwd_cb_userdata SSL_set_default_read_buffer_len SSL_set_ex_data SSL_set_fd SSL_set_generate_session_id SSL_set_hostflags SSL_set_info_callback SSL_set_max_early_data SSL_set_msg_callback SSL_set_not_resumable_session_callback SSL_set_num_tickets SSL_set_options SSL_set_post_handshake_auth SSL_set_psk_client_callback SSL_set_psk_find_session_callback SSL_set_psk_server_callback SSL_set_psk_use_session_callback SSL_set_purpose SSL_set_quiet_shutdown SSL_set_read_ahead SSL_set_record_padding_callback SSL_set_record_padding_callback_arg SSL_set_recv_max_early_data SSL_set_rfd SSL_set_security_callback SSL_set_security_level SSL_set_session SSL_set_session_id_context SSL_set_session_secret_cb SSL_set_session_ticket_ext SSL_set_session_ticket_ext_cb SSL_set_shutdown SSL_set_srp_server_param SSL_set_srp_server_param_pw SSL_set_ssl_method SSL_set_tlsext_max_fragment_length SSL_set_tlsext_use_srtp SSL_set_tmp_dh_callback SSL_set_trust SSL_set_verify SSL_set_verify_depth SSL_set_verify_result SSL_set_wfd SSL_shutdown SSL_srp_server_param_with_username SSL_state_string SSL_state_string_long SSL_stateless SSL_trace SSL_up_ref SSL_use_PrivateKey SSL_use_PrivateKey_ASN1 SSL_use_PrivateKey_file SSL_use_RSAPrivateKey SSL_use_RSAPrivateKey_ASN1 SSL_use_RSAPrivateKey_file SSL_use_cert_and_key SSL_use_certificate SSL_use_certificate_ASN1 SSL_use_certificate_chain_file SSL_use_certificate_file SSL_use_psk_identity_hint SSL_verify_client_post_handshake SSL_version SSL_waiting_for_async SSL_want SSL_write SSL_write_early_data SSL_write_ex TLS_client_method TLS_method TLS_server_method TLSv1_1_client_method TLSv1_1_method TLSv1_1_server_method TLSv1_2_client_method TLSv1_2_method TLSv1_2_server_method TLSv1_client_method TLSv1_method TLSv1_server_method d2i_SSL_SESSION i2d_SSL_SESSION

Name

.text

Size

537KB

Virtual Size

536KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

132KB

Virtual Size

131KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

21KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

magichk32.dll

IMPHASH 1e02664e74e061136922be84ac79f7f7
SHA256 6da5f57d3b2d6c573c8c49d211f5d34a318dc475066fe5577228dfa5b0379fad
MD5 2c7218c8c53d754a6f5f34c179b416a3
SHA1 3b4bbbb627850d24d99dadf67633d665d70d4c8f
SHA512 688511943edcf0e3751add890979bcf0411ce48b4420853ce2fff9ce6bc0baf3266ebe9d5ad22f136bcb6b8b5914adcabc29cad5ae83111dc56847525852f492
SSDEEP 3072:vi0bQIdj/0iIGAP/5N9KbeowIQP/HVx5rin0rY1k02wj1r+N:kQ/0d/ce/FXVkcdN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

ec:ee:cc:58:81:96:70:46:a4:68:32:73:74:42:b0:98:09:86:d9:4b:ec:68:e5:0d:79:a3:f3:88:46:45:50:9b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Mar 5, 2020

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

5a:dc:4c:5b:49:c6:60:a3:d6:ff:21:47:84:cf:04:ba:9a:62:ce:d5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Mar 5, 2020

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

1

Major OS version

5

Entry point

9433

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\free\EasyHook-2.7.6789.0\Build\netfx3.5-Release\x86\magichk32.pdb

psapi

EnumProcessModules GetModuleInformation

kernel32

TlsFree GetCurrentThreadId GetSystemInfo GetLastError GetCurrentProcess GetProcAddress GetModuleFileNameA GetFullPathNameW GetEnvironmentVariableW SetEnvironmentVariableW SetEvent GetModuleHandleW LoadLibraryW GetModuleHandleA CloseHandle InitializeCriticalSectionAndSpinCount RaiseException DecodePointer DeleteCriticalSection GetThreadContext SetThreadContext WaitForSingleObject OpenProcess Thread32First ReadProcessMemory Thread32Next VirtualAllocEx OpenThread CreateEventW CreateToolhelp32Snapshot DuplicateHandle TlsAlloc SuspendThread ResumeThread TlsGetValue CreateProcessW CreateRemoteThread TlsSetValue WideCharToMultiByte TerminateProcess lstrlenW SetLastError GetExitCodeThread Module32FirstW WaitForMultipleObjects Module32NextW GetCurrentProcessId FatalAppExitW GetModuleFileNameW CreateFileW HeapAlloc HeapFree IsBadReadPtr InitializeCriticalSection Sleep LeaveCriticalSection EnterCriticalSection VirtualProtect InterlockedExchange VirtualQuery SetStdHandle OutputDebugStringW LoadLibraryA HeapCreate HeapDestroy FreeLibrary WriteConsoleW SetEndOfFile WriteProcessMemory GetVersionExW LCMapStringW EncodePointer GetCommandLineA IsDebuggerPresent IsProcessorFeaturePresent ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar GetStdHandle GetFileType GetStartupInfoW GetProcessHeap HeapSize IsValidCodePage GetACP GetOEMCP GetCPInfo WriteFile RtlUnwind QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers HeapReAlloc LoadLibraryExW ReadFile ReadConsoleW GetStringTypeW

advapi32

StartServiceW OpenServiceW OpenSCManagerW DeleteService CloseServiceHandle CreateServiceW OpenProcessToken

ole32

CoTaskMemAlloc CoTaskMemFree

shlwapi

PathQuoteSpacesW

naca32.dll

IMPHASH 7946363053b0344e97034fb32804596d
SHA256 8f13478d9deeb08cec99a2fb9d4259ec7a1035350a9061c0c644c4da51594649
MD5 9072c29b73cb87487d23f0f8e0ad0b97
SHA1 4814225689078ff31d68a3e1441a614d1829680f
SHA512 49a58ef9da6bac9c72b6eaa6c32d644afb60684c93d5c949d30a9ecc36b3bce338871cc0220985d99ed3511a327ebb333837f25b68949cdde6f0520f8431ec3c
SSDEEP 6144:NGZlVLn01lbj9IsvLnYE4WCS52tTJZdR5CE:6VL01ftvLnYEnSZdR5t
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

70:79:a7:8d:47:d3:eb:e1:5a:0d:14:60:e2:2c:76:03:8d:65:80:5a:53:dd:80:28:4a:e1:db:b5:15:c0:24:bb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,L=济南市,ST=山东省,C=CN

Chains

Nov 11, 2022

CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,L=济南市,ST=山东省,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

eb:a8:7e:2c:92:ac:63:63:65:a1:08:32:b7:7c:bc:c0:3d:a0:d2:03

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,L=济南市,ST=山东省,C=CN

Serial Number

0a:5b:05:21:b0:1f:8f:a1:fd:1e:2a:e0:34:06:d6:ef

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 19, 2022 - Aug 20, 2025

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

5

Entry point

139307

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\naca\Release\naca32.pdb

kernel32

LocalAlloc lstrcmpiW FreeLibrary DisableThreadLibraryCalls GetModuleFileNameW lstrcmpA SetLastError lstrlenW lstrcpynW GetExitCodeProcess OutputDebugStringW WaitForSingleObject CreateThread CloseHandle EnterCriticalSection GetProcAddress lstrcmpiA GetLastError MultiByteToWideChar GetACP LeaveCriticalSection Sleep OutputDebugStringA Module32NextW GetFileAttributesExW CreateToolhelp32Snapshot lstrcatW Process32NextW Module32FirstW QueryDosDeviceW LoadLibraryW InitializeCriticalSection GetModuleHandleW ProcessIdToSessionId Process32FirstW CreateFileW HeapFree HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind HeapCreate HeapDestroy VirtualFree DeleteCriticalSection VirtualAlloc HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapSize SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount InterlockedExchange LoadLibraryA GetCPInfo GetOEMCP IsValidCodePage GetLocaleInfoW GetLocaleInfoA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA GetLogicalDrives GetWindowsDirectoryW GetModuleHandleA lstrcpyW lstrcpyA VirtualQuery CreateProcessW GlobalSize GlobalLock OpenProcess GetVersionExW ReadFile

user32

SendMessageTimeoutW PostMessageW IsWindowEnabled FindWindowW GetWindowLongW EnumChildWindows IsWindow

iphlpapi

GetAdaptersInfo

shlwapi

SHGetValueW StrChrW StrCmpNIW StrStrIA wvnsprintfA wnsprintfW PathFileExistsW PathAppendW SHSetValueW wnsprintfA PathIsDirectoryW StrStrW StrStrIW wvnsprintfW PathFindFileNameW SHGetValueA StrChrA PathFileExistsA

ws2_32

inet_ntoa

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

psapi

GetProcessImageFileNameW

libcurl32

curl_slist_append curl_easy_setopt curl_easy_perform curl_easy_strerror curl_easy_cleanup curl_global_init curl_slist_free_all curl_easy_init curl_easy_reset

advapi32

CloseServiceHandle OpenProcessToken OpenSCManagerW OpenServiceW CreateProcessAsUserW ControlService QueryServiceStatus

ole32

CreateStreamOnHGlobal GetHGlobalFromStream

nacmacwatch.dll

IMPHASH 1e696572c3ff4dfe665db4b1cf3794f4
SHA256 c2513d19c503575a98724d3d694bb4f34a1f0e67e14c6380c72426ab6e94d538
MD5 3a95de2669930e2e90f7b4fbc67396f0
SHA1 3c254753fff383fc09853cae252d73463dbf695d
SHA512 1f24a97c638e8223c14239c44581fc70e301729becac897f1ba97f8e7742f537f722ee9136614959b8008e60d0672c2c84f1c4cc6c8b701924c928d5dbee1f94
SSDEEP 6144:biE7JW84UL9EB4Hqb+1gVrMaldemJbxhT2gvTbHtXLG5G39:br3L9EBw1gJvlEeLHvTbtXb
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

5c:62:7e:1f:9c:3d:1f:02:83:10:9b:08:1c:7d:8d:9c:eb:21:f1:24:5b:d9:29:e0:de:56:ac:b5:63:11:78:14

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

PE Signature issue

Digest

26:20:cd:5f:2e:36:32:ae:64:82:7a:51:d4:bd:ca:a2:b8:86:ca:97

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

143644

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\nacmacwatch\Release\nacmacwatch.pdb

shlwapi

PathAppendW PathFileExistsW StrStrIA wnsprintfA wvnsprintfW PathIsDirectoryW StrStrW PathFindFileNameW wnsprintfW wvnsprintfA PathRemoveFileSpecW StrStrIW StrChrW SHGetValueW StrCmpNIW SHSetValueW StrChrA

ws2_32

ioctlsocket connect inet_addr select WSAGetLastError htons socket inet_ntoa closesocket __WSAFDIsSet

iphlpapi

GetAdaptersInfo

kernel32

lstrcmpiW GetModuleHandleA OutputDebugStringA GetVersion GetFileAttributesW LoadLibraryW GetModuleHandleW FreeLibrary DisableThreadLibraryCalls lstrcmpiA lstrcpynW lstrcmpA GetCurrentThreadId GetProcAddress EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetTickCount SetEvent InterlockedIncrement CreateThread CloseHandle SetLastError GetLastError GetTempPathW GetExitCodeProcess Sleep OutputDebugStringW WaitForSingleObject CreateEventW GetModuleFileNameW LocalAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle SetFilePointer GetWindowsDirectoryW lstrcpyA lstrcpyW LocalFree DeleteFileW Module32NextW OpenEventW GetFileAttributesExW CreateToolhelp32Snapshot lstrcatW Process32NextW Module32FirstW QueryDosDeviceW WriteConsoleA GetConsoleOutputCP InterlockedDecrement InterlockedExchange DeleteCriticalSection HeapFree TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc GetCommandLineA RaiseException RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo HeapCreate HeapDestroy VirtualFree VirtualAlloc HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree WriteFile GetStdHandle GetModuleFileNameA ExitProcess HeapSize SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount LoadLibraryA GetLocaleInfoW WriteConsoleW CreateFileA VirtualQuery lstrcpynA CreateProcessW GetLogicalDrives OpenProcess GetVersionExW ReadFile CreateFileW lstrlenW GetLocalTime Process32FirstW ProcessIdToSessionId

user32

SendMessageTimeoutW PostMessageW IsWindowEnabled FindWindowW GetWindowLongW EnumChildWindows IsWindow

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

shell32

ord165

psapi

GetProcessImageFileNameW

advapi32

SetFileSecurityW RegOpenKeyExW FreeSid RegEnumValueW OpenProcessToken GetUserNameW RegCloseKey CreateProcessAsUserW InitializeSecurityDescriptor SetSecurityDescriptorDacl SetEntriesInAclW AllocateAndInitializeSid

ole32

CoCreateGuid

nfapi.dll

IMPHASH 599e11bf6d8a09b832bbe62adc5c96cd
SHA256 ca6b7bbee8705398ca2eacc14851cbbd4ef6b6cf89156d0f47e7e5c569c319d3
MD5 a42c02bbf3e9c0ffafb92d213b468c28
SHA1 bfb90f15b927c9f9d84ff03de16b393a5ed17e20
SHA512 fdee3ccedab559f10e0dd510b8594b107bef822ba509b617638a4535a04085d4b96dd61b7f27a3d7c1e6fe4de5f4ed123ebbd62f3c8506641cb7d5034ce28f2d
SSDEEP 3072:4ExIjrh/UwAcAZvPYcxO6bAdqxLbEW9sM6w6SbIDjipkzCE86Pn+BjMRSz/ERJei:vbzsM6ibIDmiCENnjRRZNxfGIGuJ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

b4:30:c0:e6:d9:3c:32:8f:74:b1:5c:08:65:08:ec:7c:88:08:4c:3e:bb:b0:8d:23:49:21:0a:fc:3d:d4:65:ca

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Feb 21, 2024

PE Signature issue

Digest

70:d6:f3:be:5a:ec:72:c0:c5:0b:fe:7e:ed:8f:94:34:d4:82:72:a0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Feb 21, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

6

Entry point

70131

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\projects\projectsJ\nfsdk2_1.6\nfapi\build\release\win32\nfapi.pdb

kernel32

GetOverlappedResult ReadFile DeviceIoControl GetProcAddress GetModuleHandleA OpenProcess CancelIo GetLogicalDriveStringsW QueryDosDeviceW GetDriveTypeW SetLastError CreateFileA GetVersionExA GetLastError WriteFile GetTickCount WaitForMultipleObjects WaitForSingleObject SetEvent GetSystemInfo ResetEvent CreateEventA CloseHandle DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection GetCurrentProcessId EnterCriticalSection FlushFileBuffers WriteConsoleW SetStdHandle HeapAlloc HeapFree EncodePointer DecodePointer CreateThread GetCurrentThreadId ExitThread LoadLibraryExW GetCommandLineA RaiseException RtlUnwind IsDebuggerPresent IsProcessorFeaturePresent InterlockedDecrement ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar GetStdHandle GetModuleFileNameW GetProcessHeap HeapSize Sleep InterlockedIncrement GetCurrentThread UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW CreateSemaphoreW GetFileType GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW WideCharToMultiByte FatalAppExitA InterlockedExchange FreeLibrary SetConsoleCtrlHandler IsValidCodePage GetACP GetOEMCP GetCPInfo OutputDebugStringW LoadLibraryW HeapReAlloc GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleCP GetConsoleMode SetFilePointerEx GetStringTypeW CreateFileW

advapi32

DeleteService RegSetValueExA QueryServiceStatus OpenServiceA StartServiceA CloseServiceHandle CreateServiceW OpenSCManagerA RegCloseKey RegOpenKeyExA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken RegQueryValueExA

psapi

GetModuleFileNameExA GetModuleFileNameExW

?nf_addBindingRule@nfapi@@YA?AW4_NF_STATUS@@PAU_NF_BINDING_RULE@1@H@Z ?nf_addFlowCtl@nfapi@@YA?AW4_NF_STATUS@@PAU_NF_FLOWCTL_DATA@1@PAI@Z ?nf_addRule@nfapi@@YA?AW4_NF_STATUS@@PAU_NF_RULE@1@H@Z ?nf_addRuleEx@nfapi@@YA?AW4_NF_STATUS@@PAU_NF_RULE_EX@1@H@Z ?nf_adjustProcessPriviledges@nfapi@@YAXXZ ?nf_completeTCPConnectRequest@nfapi@@YA?AW4_NF_STATUS@@_KPAU_NF_TCP_CONN_INFO@1@@Z ?nf_completeUDPConnectRequest@nfapi@@YA?AW4_NF_STATUS@@_KPAU_NF_UDP_CONN_REQUEST@1@@Z ?nf_deleteBindingRules@nfapi@@YA?AW4_NF_STATUS@@XZ ?nf_deleteFlowCtl@nfapi@@YA?AW4_NF_STATUS@@I@Z ?nf_deleteRules@nfapi@@YA?AW4_NF_STATUS@@XZ ?nf_free@nfapi@@YAXXZ ?nf_getConnCount@nfapi@@YAKXZ ?nf_getDriverType@nfapi@@YAKXZ ?nf_getFlowCtlStat@nfapi@@YA?AW4_NF_STATUS@@IPAU_NF_FLOWCTL_STAT@1@@Z ?nf_getProcessNameA@nfapi@@YAHKPADK@Z ?nf_getProcessNameFromKernel@nfapi@@YAHKPA_WK@Z ?nf_getProcessNameW@nfapi@@YAHKPA_WK@Z ?nf_getTCPConnInfo@nfapi@@YA?AW4_NF_STATUS@@_KPAU_NF_TCP_CONN_INFO@1@@Z ?nf_getTCPStat@nfapi@@YA?AW4_NF_STATUS@@_KPAU_NF_FLOWCTL_STAT@1@@Z ?nf_getUDPConnInfo@nfapi@@YA?AW4_NF_STATUS@@_KPAU_NF_UDP_CONN_INFO@1@@Z ?nf_getUDPStat@nfapi@@YA?AW4_NF_STATUS@@_KPAU_NF_FLOWCTL_STAT@1@@Z ?nf_init@nfapi@@YA?AW4_NF_STATUS@@PBDPAVNF_EventHandler@1@@Z ?nf_ipPostReceive@nfapi@@YA?AW4_NF_STATUS@@PBDHPAU_NF_IP_PACKET_OPTIONS@1@@Z ?nf_ipPostSend@nfapi@@YA?AW4_NF_STATUS@@PBDHPAU_NF_IP_PACKET_OPTIONS@1@@Z ?nf_modifyFlowCtl@nfapi@@YA?AW4_NF_STATUS@@IPAU_NF_FLOWCTL_DATA@1@@Z ?nf_registerDriver@nfapi@@YA?AW4_NF_STATUS@@PBD@Z ?nf_registerDriverEx@nfapi@@YA?AW4_NF_STATUS@@PBD0@Z ?nf_setIPEventHandler@nfapi@@YAXPAVNF_IPEventHandler@1@@Z ?nf_setOptions@nfapi@@YAXKK@Z ?nf_setRules@nfapi@@YA?AW4_NF_STATUS@@PAU_NF_RULE@1@H@Z ?nf_setRulesEx@nfapi@@YA?AW4_NF_STATUS@@PAU_NF_RULE_EX@1@H@Z ?nf_setTCPFlowCtl@nfapi@@YA?AW4_NF_STATUS@@_KI@Z ?nf_setTCPTimeout@nfapi@@YAKK@Z ?nf_setUDPFlowCtl@nfapi@@YA?AW4_NF_STATUS@@_KI@Z ?nf_tcpClose@nfapi@@YA?AW4_NF_STATUS@@_K@Z ?nf_tcpDisableFiltering@nfapi@@YA?AW4_NF_STATUS@@_K@Z ?nf_tcpIsProxy@nfapi@@YAHK@Z ?nf_tcpPostReceive@nfapi@@YA?AW4_NF_STATUS@@_KPBDH@Z ?nf_tcpPostSend@nfapi@@YA?AW4_NF_STATUS@@_KPBDH@Z ?nf_tcpSetConnectionState@nfapi@@YA?AW4_NF_STATUS@@_KH@Z ?nf_tcpSetSockOpt@nfapi@@YA?AW4_NF_STATUS@@_KHPBDH@Z ?nf_udpDisableFiltering@nfapi@@YA?AW4_NF_STATUS@@_K@Z ?nf_udpPostReceive@nfapi@@YA?AW4_NF_STATUS@@_KPBEPBDHPAU_NF_UDP_OPTIONS@1@@Z ?nf_udpPostSend@nfapi@@YA?AW4_NF_STATUS@@_KPBEPBDHPAU_NF_UDP_OPTIONS@1@@Z ?nf_udpSetConnectionState@nfapi@@YA?AW4_NF_STATUS@@_KH@Z ?nf_unRegisterDriver@nfapi@@YA?AW4_NF_STATUS@@PBD@Z

nfentry32.dll

IMPHASH 46ffd97f0e5521bc04bdc7fac4010491
SHA256 65b4299f2b5436e44a10091acefe3b12b866a49c8db9ccad99e82dcc59832a00
MD5 bd8d3876eb4217fb52df2bf1a3e79f12
SHA1 8412d18e354c55312607a4d8419e28af6034efa7
SHA512 76bf167d7b5510bc431d0b2ff95db5fde8e390b28620ded24ac828c348ac6b79b2d44849f1a82bbf6ef7f6c804fd9cd2b9034c245e7d78fd6c9cdc246549e36d
SSDEEP 12288:imZQrGKNVwa9xZYmZCB1LuRpU9wU2lH0fa7HF801+2I9Qy5BpBWhpURxMIaeuFL8:imirGKNVNxZRB5fqK+2sBScieuhlJVxU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

9c:6d:1d:f1:5f:f6:56:d8:66:48:74:74:8b:41:38:80:e6:eb:35:71:94:dd:50:a5:ab:61:4a:25:08:3d:e4:b8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 25, 2024

PE Signature issue

Digest

48:5d:20:c3:9f:ae:99:0a:00:f4:f4:ae:2c:90:80:33:53:5f:fc:77

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 25, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

359245

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\nfentry\Release\nfentry32.pdb

kernel32

GetModuleFileNameW GetFileAttributesW GetCurrentProcessId GetLocalTime OpenProcess DisableThreadLibraryCalls GetSystemDirectoryW lstrcpynW DeleteCriticalSection GetCurrentThreadId lstrcmpA SetEndOfFile lstrlenA SetFilePointer lstrlenW CreateThread lstrcmpiW CreateEventW CreateEventA WriteFile SetEvent EnterCriticalSection SetLastError GetTempPathW LeaveCriticalSection InitializeCriticalSection OutputDebugStringW WaitForSingleObject DeleteFileW CloseHandle lstrcmpiA GetLastError CreateFileW ReadFile GetFileSize GetWindowsDirectoryW MoveFileExW OutputDebugStringA lstrcpyA SetFileAttributesW lstrcpyW LocalFree Module32NextW OpenEventW GetFileAttributesExW CreateToolhelp32Snapshot FindNextFileW lstrcatW GetModuleHandleA Process32NextW Module32FirstW QueryDosDeviceW RemoveDirectoryW LockResource Sleep ProcessIdToSessionId Process32FirstW FindClose GetCurrentDirectoryW GetFileSizeEx lstrcmpW GetVersionExW SizeofResource CopyFileW LoadLibraryW InterlockedIncrement InterlockedDecrement InterlockedExchange TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetTimeFormatA GetDateFormatA GetSystemTimeAsFileTime HeapAlloc GetCommandLineA RaiseException RtlUnwind LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetCPInfo GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA HeapCreate HeapDestroy VirtualFree VirtualAlloc HeapReAlloc GetConsoleCP GetConsoleMode FlushFileBuffers GetACP GetOEMCP IsValidCodePage GetTimeZoneInformation HeapSize ExitProcess FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW LoadLibraryA GetLocaleInfoW InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle CreateFileA GetProcessHeap CompareStringA CompareStringW SetEnvironmentVariableA GetTempFileNameW FindFirstFileW VirtualQuery lstrcpynA FindResourceW LoadResource CreateProcessW SystemTimeToFileTime GetLogicalDrives

user32

GetForegroundWindow IsWindow GetWindowThreadProcessId

shell32

SHGetPathFromIDListW SHGetSpecialFolderLocation ord165

ole32

CoCreateGuid CoTaskMemFree

shlwapi

StrStrIA StrStrW StrStrIW StrStrA PathFileExistsW StrCatW SHCreateStreamOnFileW SHDeleteValueW PathAppendW PathMatchSpecA wnsprintfW PathFindFileNameW PathFindExtensionW SHDeleteKeyW wnsprintfA SHGetValueW wvnsprintfW PathIsDirectoryW SHGetValueA PathRemoveFileSpecW StrChrW StrCmpNIW SHSetValueW StrChrA StrCmpNIA wvnsprintfA

ws2_32

inet_addr closesocket ntohl bind gethostbyname htons WSASocketW connect WSACloseEvent recv send

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

psapi

GetProcessImageFileNameW

dnsapi

DnsFree DnsQuery_A

nfapi

?nf_tcpSetConnectionState@nfapi@@YA?AW4_NF_STATUS@@_KH@Z ?nf_tcpPostSend@nfapi@@YA?AW4_NF_STATUS@@_KPBDH@Z ?nf_udpPostSend@nfapi@@YA?AW4_NF_STATUS@@_KPBEPBDHPAU_NF_UDP_OPTIONS@1@@Z ?nf_deleteRules@nfapi@@YA?AW4_NF_STATUS@@XZ ?nf_udpSetConnectionState@nfapi@@YA?AW4_NF_STATUS@@_KH@Z ?nf_adjustProcessPriviledges@nfapi@@YAXXZ ?nf_init@nfapi@@YA?AW4_NF_STATUS@@PBDPAVNF_EventHandler@1@@Z ?nf_tcpClose@nfapi@@YA?AW4_NF_STATUS@@_K@Z ?nf_udpPostReceive@nfapi@@YA?AW4_NF_STATUS@@_KPBEPBDHPAU_NF_UDP_OPTIONS@1@@Z ?nf_addRule@nfapi@@YA?AW4_NF_STATUS@@PAU_NF_RULE@1@H@Z ?nf_tcpPostReceive@nfapi@@YA?AW4_NF_STATUS@@_KPBDH@Z

protocolfilters

?pf_unzipStream@ProtocolFilters@@YAHPAVPFStream@1@@Z ?pf_init@ProtocolFilters@@YAHPAVPFEvents@1@PB_W@Z ?pf_setRootSSLCertSubject@ProtocolFilters@@YAXPBD@Z ?pf_postObject@ProtocolFilters@@YAH_KPAVPFObject@1@@Z ?pf_addFilter@ProtocolFilters@@YAH_KW4_PF_FilterType@1@KW4_PF_OpTarget@1@1@Z ?pf_getNFEventHandler@ProtocolFilters@@YAPAVNF_EventHandler@nfapi@@XZ ?PFObject_create@ProtocolFilters@@YAPAVPFObject@1@HH@Z ?pf_deleteExceptions@ProtocolFilters@@YAXW4_eEXCEPTION_CLASS@1@@Z

advapi32

GetUserNameW CloseServiceHandle OpenProcessToken DeleteService OpenSCManagerW OpenServiceW RegCreateKeyExW CreateProcessAsUserW InitializeSecurityDescriptor SetSecurityDescriptorDacl RegCloseKey QueryServiceStatus SetFileSecurityW AllocateAndInitializeSid SetEntriesInAclW RegEnumValueW FreeSid RegOpenKeyExW ControlService RegEnumKeyExW RegSetValueExW

nftdi32.sys

IMPHASH 76c69bae38bdd5bdc4a08a9bd7c3df11
SHA256 3ed01b98d86e0e85f71a8ec2856e7fa170db6b34d0955a508f116b5ec1172b16
MD5 fe8e1a5cef15ac5f3ec1091e5402d7d2
SHA1 d9e0cb3455c566884614e4fbe5f3e994e5e18e22
SHA512 c9ed3b95ed906a1e85bb08486e81bd4d5c3f14ce12246caf43f712eecfddb18e27f5cb1bb6e75af6a0556bdcb2d0e29fb788f3930a6ff92f9d2958f6e56de7d5
SSDEEP 1536:uLAQAzC3r9knTXJRMT5UzRhUyjjbdbmezu:eAQAzyezJRPHjj9mea
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

af:64:26:56:ab:53:7a:4a:db:aa:0e:2d:ff:95:32:0d:15:73:7c:29:77:a2:36:fd:63:93:60:26:e2:7d:0b:56

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 26, 2024

Minor OS version

0

Major OS version

6

Entry point

54021

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\projects\projectsj\nfsdk2_1.6\driver_tdi\demo\objfre_wxp_x86\i386\netfilter2.pdb

Name

.text

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

640B

Virtual Size

564B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

nfwfp32.sys

IMPHASH a65ef72ae30959ac4919b9570eff3a27
SHA256 88e185e59514b87f1a77870fbe446405518a4d6c88c675dd8c2c12adda62f7c5
MD5 4cd48a1cd29733d7c91e2bdf7adac633
SHA1 bedfdb8634fe1d43917436df3e168e222d44f5ff
SHA512 8ea955b6f269cf199d4b0f3c4cfac73f4d28044f51113524c64be99d279270f7e4824b56cbc28d7cc61e1c744d790bc0a59a054ea13129d104fa22e9e2e78abb
SSDEEP 1536:0RgYdsXrPXPDFCWx6T1HNp2wqUTycorD7bj2OIPYhk9aq8AIJCE13Fa1pm7DhTz5:egusXDDFCWx6T1tuZcoP7P8Pp/Q/ajUn
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

78:a7:68:b5:53:9a:7f:c1:1d:8b:e6:2f:e3:a1:e6:c4:81:a5:2d:ea:3d:75:d9:41:6e:44:0b:77:43:00:4f:56

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 26, 2024

Minor OS version

2

Major OS version

6

Entry point

73834

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\projects\projectsJ\nfsdk2_1.6\driver_wfp\msvc\Win8ReleaseDemo\Win32\netfilter2.pdb

fwpkclnt.sys

FwpsFreeNetBufferList0

ndis.sys

NdisGetDataBuffer NdisAllocateGenericObject NdisFreeGenericObject NdisAdvanceNetBufferDataStart NdisWaitEvent NdisAllocateNetBufferListPool NdisFreeNetBufferListPool NdisRetreatNetBufferDataStart NdisInitializeEvent

ntoskrnl.exe

memcpy memset RtlInitUnicodeString MmGetSystemRoutineAddress RtlAppendUnicodeToString RtlCreateSecurityDescriptor RtlSetDaclSecurityDescriptor KeInitializeEvent KeSetEvent KeWaitForSingleObject ExFreePoolWithTag InterlockedPopEntrySList InterlockedPushEntrySList ExInitializeNPagedLookasideList ExDeleteNPagedLookasideList MmBuildMdlForNonPagedPool MmMapLockedPagesSpecifyCache MmUnmapLockedPages MmAllocatePagesForMdl MmFreePagesFromMdl PsCreateSystemThread PsTerminateSystemThread swprintf_s IofCompleteRequest IoCreateDevice IoCreateSymbolicLink IoDeleteDevice IoDeleteSymbolicLink IoFreeMdl IoReleaseCancelSpinLock ObReferenceObjectByHandle ObfDereferenceObject ZwClose ZwOpenKey ZwQueryValueKey PsGetCurrentProcessId ZwSetInformationThread RtlLengthSid RtlCreateAcl RtlAddAccessAllowedAce PsLookupProcessByProcessId ObOpenObjectByPointer ZwSetSecurityObject SeExports RtlGetVersion KeQuerySystemTime _allmul _aulldiv _aullrem RtlValidSid _stricmp ZwQuerySystemInformation RtlUnwind KeTickCount KeBugCheckEx ExUuidCreate ExAllocatePoolWithTag RtlCompareMemory IoAllocateMdl

hal

KeReleaseInStackQueuedSpinLock KeGetCurrentIrql KeAcquireInStackQueuedSpinLock

Name

.text

Size

54KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

nfwfp64.sys

IMPHASH bf49958382ca6b93c13a5627ef967bcd
SHA256 09d0671a8c071a9fe575762e7939193949adeb8b61a6e30e1b1a0f33f6730a60
MD5 c075e11f23341bceb58454a4511f76af
SHA1 15eb0f23887cb7319d8b33576c1f48ce7dedca99
SHA512 1207655c79106f694ad86868f022cd656935bb72b8b02695808fa2423710c6a41ba4b98dc9ef72c28959b6abe650a9e9c137fd40e04df8d9f0fed3a1c771ff1f
SSDEEP 1536:i98OJqyF2jikwawQ3HminaV1dopIUQhsmSBdGyV3b1ciWAksBzNk:i980KikwawWHmiaV16xpmSBdG45WxMpk
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

ad:b1:49:17:00:37:63:a7:e3:c4:a1:b1:ba:8a:38:fa:c5:34:21:5b:8c:60:0b:4e:b0:f5:b0:0a:bb:7e:94:6d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 26, 2024

Minor OS version

2

Major OS version

6

Entry point

94320

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\projects\projectsJ\nfsdk2_1.6\driver_wfp\msvc\Win8ReleaseDemo\x64\netfilter2.pdb

fwpkclnt.sys

FwpsFreeNetBufferList0

ndis.sys

NdisFreeGenericObject NdisFreeNetBufferListPool NdisRetreatNetBufferDataStart NdisAdvanceNetBufferDataStart NdisGetDataBuffer NdisAllocateGenericObject NdisInitializeEvent NdisWaitEvent NdisAllocateNetBufferListPool

ntoskrnl.exe

RtlCompareMemory KeAcquireInStackQueuedSpinLock KeReleaseInStackQueuedSpinLock ExAllocatePoolWithTag ExUuidCreate swprintf_s __C_specific_handler RtlInitUnicodeString MmGetSystemRoutineAddress RtlAppendUnicodeToString RtlCreateSecurityDescriptor RtlSetDaclSecurityDescriptor KeInitializeEvent KeSetEvent KeWaitForSingleObject ExFreePoolWithTag ExQueryDepthSList ExpInterlockedPopEntrySList ExpInterlockedPushEntrySList ExInitializeNPagedLookasideList ExDeleteNPagedLookasideList MmBuildMdlForNonPagedPool MmMapLockedPagesSpecifyCache MmUnmapLockedPages MmAllocatePagesForMdl MmFreePagesFromMdl PsCreateSystemThread PsTerminateSystemThread IoAllocateMdl IofCompleteRequest IoCreateDevice IoCreateSymbolicLink IoDeleteDevice IoDeleteSymbolicLink IoFreeMdl IoReleaseCancelSpinLock ObReferenceObjectByHandle ObfDereferenceObject ZwClose ZwOpenKey ZwQueryValueKey PsGetCurrentProcessId ZwSetInformationThread RtlLengthSid RtlCreateAcl RtlAddAccessAllowedAce PsLookupProcessByProcessId ObOpenObjectByPointer ZwSetSecurityObject SeExports RtlGetVersion RtlValidSid _stricmp ZwQuerySystemInformation KeBugCheckEx

Name

.text

Size

64KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

602B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

nfwfp64_win7.sys

IMPHASH bf49958382ca6b93c13a5627ef967bcd
SHA256 e9b200404f06725a774459bd4c272cf8dec840487b630217052ee87010788a24
MD5 4ad0dcf1d7414b83a7623bf23ddd48ae
SHA1 44d8e7039494a7aad69046613afb49c026069943
SHA512 117795f097c01317575f2d4c09185817f6b17a5e989e3592c5be7ed4573f9c5f2ccc1aeebf9f00dd583a2869702fabccfc7f8a9b94cb156939d2e401487380e2
SSDEEP 1536:rjbBFaFTbBrR//TI363tbE1K4c6Q+M3dyEifa1+6mweUeu9hRBjT:rjerR//TS63tw1NhMrxmweUe2HT
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

e5:13:ac:35:01:71:71:3d:2c:90:db:64:50:d7:7f:8e:56:b5:2a:21

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Microsoft Authenticode(tm) Root Authority,O=MSFT,C=US

Serial Number

01

Issuer

CN=Microsoft Authenticode(tm) Root Authority,O=MSFT,C=US

Timespan

Jan 1, 1995 - Dec 31, 1999

Subject

Serial Number

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

Issuer

Timespan

Jan 10, 1997 - Dec 31, 2020

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:1c:b2:8a:00:00:00:00:00:26

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Serial Number

79:ad:16:a1:4a:a0:a5:ad:4c:73:58:f4:07:13:2e:65

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 9, 2001 - May 9, 2021

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

72:94:04:10:1f:3e:0c:a3:47:83:7f:ca:17:5a:84:38

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 1, 2005 - Nov 1, 2025

Minor OS version

2

Major OS version

6

Entry point

90224

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\projects\projectsJ\nfsdk2_1.6\driver_wfp\msvc\Win8ReleaseDemo\x64\netfilter2.pdb

fwpkclnt.sys

FwpsFreeNetBufferList0

ndis.sys

NdisFreeGenericObject NdisFreeNetBufferListPool NdisRetreatNetBufferDataStart NdisAdvanceNetBufferDataStart NdisGetDataBuffer NdisAllocateGenericObject NdisInitializeEvent NdisWaitEvent NdisAllocateNetBufferListPool

ntoskrnl.exe

RtlCompareMemory KeAcquireInStackQueuedSpinLock KeReleaseInStackQueuedSpinLock ExAllocatePoolWithTag ExUuidCreate swprintf_s __C_specific_handler RtlInitUnicodeString MmGetSystemRoutineAddress RtlAppendUnicodeToString RtlCreateSecurityDescriptor RtlSetDaclSecurityDescriptor KeInitializeEvent KeSetEvent KeWaitForSingleObject ExFreePoolWithTag ExQueryDepthSList ExpInterlockedPopEntrySList ExpInterlockedPushEntrySList ExInitializeNPagedLookasideList ExDeleteNPagedLookasideList MmBuildMdlForNonPagedPool MmMapLockedPagesSpecifyCache MmUnmapLockedPages MmAllocatePagesForMdl MmFreePagesFromMdl PsCreateSystemThread PsTerminateSystemThread IoAllocateMdl IofCompleteRequest IoCreateDevice IoCreateSymbolicLink IoDeleteDevice IoDeleteSymbolicLink IoFreeMdl IoReleaseCancelSpinLock ObReferenceObjectByHandle ObfDereferenceObject ZwClose ZwOpenKey ZwQueryValueKey PsGetCurrentProcessId ZwSetInformationThread RtlLengthSid RtlCreateAcl RtlAddAccessAllowedAce PsLookupProcessByProcessId ObOpenObjectByPointer ZwSetSecurityObject SeExports RtlGetVersion RtlValidSid _stricmp ZwQuerySystemInformation KeBugCheckEx

Name

.text

Size

63KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

524B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

nnagent32.dll

IMPHASH 543349eff07ec01705b2884cb9d4fdab
SHA256 b7dbff220e35ba10f49a3e26e866f42973c1e422a56dc70b980a0e6e63c45fcd
MD5 29855916d37e68ffc33e64898db4a6c3
SHA1 8f86b28ece2588a90f16cb3e56a9a19c0de42fe9
SHA512 4352c7ed7065e999486853baf46a3c47b9788a99b1084849ffe2381427428eb544114c04262600808c0c19b60696e819b8571a4510952f66a69953dda0e67da5
SSDEEP 6144:x4ADQj4hrt2eamigSLqvQYYI2MHMvWpld:+A9b2B5gVE6cWp/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

a1:db:4d:c6:c6:72:fe:7a:9c:81:fc:ce:0b:03:32:07:8d:20:03:08:a7:3f:fa:3e:fa:24:97:45:96:ca:8a:c6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Jan 11, 2022

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

39:70:fe:98:60:5f:5a:fa:41:e8:0d:5e:72:bc:b6:ae:20:fa:56:33

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 23, 2020 - Jan 22, 2032

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

5

Entry point

87261

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\nnagent\Release\nnagent32.pdb

kernel32

CloseHandle GetProcAddress GetLastError GetModuleFileNameW lstrcpynW Sleep LoadLibraryW WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetModuleHandleW DisableThreadLibraryCalls lstrcmpA CreateFileA VirtualQuery HeapAlloc GetCurrentProcess HeapFree GetTickCount WriteFile InitializeCriticalSection OpenProcess WideCharToMultiByte LeaveCriticalSection TerminateProcess ReadFile CreateFileW GetACP MultiByteToWideChar lstrlenW SetLastError EnterCriticalSection LoadLibraryA Process32FirstW ProcessIdToSessionId Module32FirstW Process32NextW lstrcmpiW GetModuleHandleA CreateToolhelp32Snapshot GetFileAttributesExW Module32NextW GetCurrentProcessId lstrcpyW lstrcpyA CreateThread GetWindowsDirectoryW SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetStdHandle GetModuleFileNameA ExitProcess SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime VirtualAlloc HeapSize GetCPInfo GetOEMCP IsValidCodePage LCMapStringA LCMapStringW GetLocaleInfoW GetLocaleInfoA InterlockedExchange InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW

shell32

ShellExecuteA

shlwapi

wvnsprintfW wnsprintfW SHGetValueW SHSetValueW StrChrA wnsprintfA wvnsprintfA PathFindFileNameW PathAppendW PathFileExistsW

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

advapi32

CreateProcessAsUserW OpenProcessToken

npcap_inst.exe

IMPHASH 16cdca0a54bf8076dc7e57fab55dbc5b
SHA256 488ab12e28e81d0dcf3d5d996f9cb676293f6f73b39e9c99476b5a44cec2250a
MD5 fc8cb1b4677c90859af51c8c664e755d
SHA1 62f3d68f01f93c1b5b3f915a2781cd523394b944
SHA512 bbdc020bf97f75c8f63f09495e5580fcc77af342fe4866fcc12023d75d8ff73b0826c66a655b70f79588ab7a1b8eea0baf228305214a9b3ea60667799246dcaf
SSDEEP 24576:KhIZQgFuCUj2CEtEDJcw7pWA1rHDuB54I:XZ5l82CEt+JjrHCn4I
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

80:33:52:e4:67:8a:3f:cd:44:36:99:0d:5f:46:e6:18:26:d1:1b:68:37:71:35:be:c6:85:e9:f2:6a:58:12:39

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Sep 25, 2020

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

09:25:63:14:06:9e:7e:6a:88:cb:82:30:75:c0:d9:c9

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 1, 2020 - May 7, 2021

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

4

Entry point

14055

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetShortPathNameA GetFullPathNameA MoveFileA GetLastError SetCurrentDirectoryA GetFileAttributesA SearchPathA SetFileAttributesA Sleep GetTickCount CreateFileA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess SetFileTime CompareFileTime GetCommandLineA lstrlenA GetVersion SetErrorMode lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateDirectoryA CreateProcessA RemoveDirectoryA GetTempFileNameA lstrcatA GetSystemDirectoryA CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetTempPathA GetWindowsDirectoryA GetProcAddress DeleteFileA FindFirstFileA FindNextFileA FindClose SetFilePointer ReadFile WriteFile GetPrivateProfileStringA WritePrivateProfileStringA MultiByteToWideChar FreeLibrary MulDiv LoadLibraryExA GetModuleHandleA

user32

GetWindowRect EnableMenuItem GetSystemMenu ScreenToClient SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetAsyncKeyState IsDlgButtonChecked GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SystemParametersInfoA RegisterClassA EndDialog TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA wvsprintfA DispatchMessageA PeekMessageA EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA SetTimer OpenClipboard SetWindowTextA GetDC LoadImageA ShowWindow wsprintfA SendMessageTimeoutA FindWindowExA IsWindow GetDlgItem SetWindowLongA SetClipboardData EmptyClipboard DestroyWindow ExitWindowsEx SetForegroundWindow PostQuitMessage CreateDialogParamA

gdi32

SelectObject SetTextColor SetBkMode CreateFontIndirectA CreateBrushIndirect DeleteObject GetDeviceCaps SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegDeleteValueA SetFileSecurityA RegOpenKeyExA RegDeleteKeyA RegEnumValueA RegCloseKey RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_Destroy ord17 ImageList_AddMasked

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/InstallOptions.dll

IMPHASH 738dc9bb91549f627cf1953c2000e1d6
SHA256 75fca8af133756a0d36ad9b6177ef8ee01b6dd18ede216d82b2eb5f8092a84cd
MD5 d8bfba73978801ed5c291b847ae6ed0f
SHA1 afd973df6c0fd92372b787f2a06a02fa4c03b877
SHA512 62b921725c727247b96622765caa4ddec1126980e677764f9bdb5e68eae50044747f0ee99744c44b7a7253a57e3c28a2fc19a99d479787aa4944499871db92f2
SSDEEP 384:5GvdH4qMebzPY2Vijn+BEnboiLI84pj8vlHith5kCCfpGGNGb5hiX8ZpHmDS4:C6qnYYiL0EnboqsEticpkriXiR8S4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Digest

79:76:e2:23:e1:ed:ec:62:c9:50:78:71:8d:ac:be:b6:44:0c:6f:27:cb:1c:b7:74:f8:f8:fd:7f:d6:c9:8e:e9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Nov 25, 2019

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

ee:6d:f2:fc:b5:4a:8b:58:0c:72:af:81:b4:64:47:1a

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 6, 2019 - Nov 5, 2022

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 3, 2014 - Dec 2, 2029

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Aug 1, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentDirectoryA MultiByteToWideChar SetCurrentDirectoryA GetPrivateProfileStringA GetPrivateProfileIntA GetModuleHandleA lstrcmpiA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalAlloc GlobalUnlock GlobalLock

user32

GetDlgCtrlID CloseClipboard GetClipboardData MapWindowPoints LoadCursorA GetClientRect SetWindowRgn LoadIconA GetWindowLongA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow SetCursor PtInRect EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA EnableMenuItem DrawTextA GetSystemMenu OpenClipboard LoadImageA

gdi32

SetTextColor DeleteObject CombineRgn CreateRectRgn GetDIBits SelectObject CreateCompatibleDC GetObjectA

shell32

SHGetPathFromIDListA ShellExecuteA SHBrowseForFolderA SHGetDesktopFolder

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/SimpleSC.dll

SHA256 18b17999996d73fe911a8eb676c231cb0bf002174954b552f880bdabf4c78124
MD5 4a2b58bd7cab29463d9e53fcb9a252b6
SHA1 4679ba66db7989a64c41892bbb3f7cec38fb5597
SHA512 e6a69b5bb52467e7b8168a3e0ad45252b196b8eaea87b91f8d3b150545ce6bc7ee586ebe1d83da6c04203a9a9bab5f4af66759ba35b73306f7962ca5b6ff2fff
SSDEEP 1536:p/qXv1si+Xsp9MNptZ8KMT6+nMA4fx+kmA/11HWXiZ:Qv1EXZnLMT5M3x+kmu3Hgy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

2a:d4:87:31:b0:61:ac:c3:c0:e4:d7:82:5a:1d:cf:7b:ff:ef:be:b6:0d:27:13:35:99:e8:08:73:09:d8:93:72

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Nov 25, 2019

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

ee:6d:f2:fc:b5:4a:8b:58:0c:72:af:81:b4:64:47:1a

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 6, 2019 - Nov 5, 2022

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 3, 2014 - Dec 2, 2029

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Aug 1, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

0

Major OS version

4

Entry point

52320

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

47KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1024B

Virtual Size

950B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

$PLUGINSDIR/SysRestore.dll

IMPHASH 85e5ccd224baa6cdcd31e3be33a1d2bc
SHA256 c470b78687c1134007977b9025ef8481ad6ffe163c8afcc5c1810df03e93c306
MD5 54630ddb77ed9a17110d955458b6b0f0
SHA1 7c80960cdeba57d3325e7894f2126b12f2ad38c8
SHA512 475fef9ccc483eaa1ec0913a8235aff12bc3a3ac9eb93c595a9046ce6409824c9f990e30582d54ba0f423355db4535816ee046f5f50ed2e8f069aa5b9b78ee9f
SSDEEP 384:0k1IeZDcLI84pj8vlHith5kC+2GNGb5hiX8ZpH6Ay:0k1VksEtifriXiR+
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

38:6c:36:9c:20:00:fb:a6:94:a3:d8:76:38:34:5d:e6:bc:5a:a3:f2:1e:c4:f8:19:a2:dd:ee:fd:ce:28:1c:c3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Nov 25, 2019

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

ee:6d:f2:fc:b5:4a:8b:58:0c:72:af:81:b4:64:47:1a

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 6, 2019 - Nov 5, 2022

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 3, 2014 - Dec 2, 2029

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Aug 1, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

0

Major OS version

6

Entry point

5040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH f2ac1ab587d5531d5f1bf76c094aef4c
SHA256 1e981423fda8f74e9a7079675c1a6fe55c716d4c0d50fb03ea482ff7500db14b
MD5 6a2f80ed640b6c2458329c2d3f8d9e3f
SHA1 c6dba02a05dbf15aa5de3ac1464bc9dce995eb80
SHA512 00d49b1874d76b150a646ac40032b34608e548cfd806642982e446619c9852a0ab5389791468651c4d51d118aad502174e7b887c2b5b6a7a3e35ddd9bd50d722
SSDEEP 384:sf6rtFRduQ1W+fG8fLI84pj8vlHith5kC+6UGNGb5hiX8ZpHhqsMu:syfuQ19+8TsEti2riXiRX
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Digest

8d:21:79:58:2a:d2:fd:70:ec:a8:a7:c7:8f:49:cc:9b:25:7e:62:da:77:d9:ad:e7:bd:7a:a0:3b:cb:7f:80:9f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Nov 25, 2019

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

ee:6d:f2:fc:b5:4a:8b:58:0c:72:af:81:b4:64:47:1a

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 6, 2019 - Nov 5, 2022

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 3, 2014 - Dec 2, 2029

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Aug 1, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

0

Major OS version

4

Entry point

10512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/final.ini

SHA256 4af865b65fdba7bb5c874f3d67bfdce7eead2459a572e0681a6c067568af4902
MD5 5faa58b0398f6c4442d5cfbc616b4531
SHA1 3a60c28df9b3a846feab4d90ed34b430e1d76f61
SHA512 04fb34f2a941b488d0974fb000b36abdee7d198017c3469495a46b808c99ec89eff77871227797bc974e1c235cab8e40b8b71114609847c0c02b7477f2588704
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-header.bmp

SHA256 f22d49eec7926cde60dad056a3a9fa844327f759f38e76bad4c3119a57e37888
MD5 b514f98a3df2f23fb0fdf170fa772f5c
SHA1 24cedd88d5571b376ec26b5a652b010e117b8a10
SHA512 cbc84fb3d0af69462130584180996704fefb4c8d0468c9492ebe9b2e8f02c4ae8f0f7f7bbf9e9148e9f013e9b3209a6e93a0e1b308bc5d1b3b25260c6068e641
SSDEEP 768:raVhI0gORS1EpyfG2tn1vXLawAnOEaooxdtXK:rYK+7p5S+woojt6
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/nsExec.dll

IMPHASH 8abe046ef411de4d3e6e831b6b1ee264
SHA256 6bd24522cd139c978cc259d5612188053577ba9de46e2d77642bd4d19fc959d4
MD5 78bda400d7b80858c014fc79bd8fc49b
SHA1 f5bb0e85ba892611cf79b3c2756e87a59e1e213c
SHA512 95a1aced8deaad51ad7990b83f0e5768fab9e1c7aa64d9fd656baa850d81c0955b7989ce08a02fedbb8c9d77ec135b2a9d132effbfc0f8478a052095140c74cc
SSDEEP 384:ogrwgTzylQKaOqJVgNyYLI84pj8vlHith5kCCY4gcGNGb5hiX8ZpHC9:ogrVi9aOYgoQsEtiQgiriXiR+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

dd:bf:5f:d2:36:3b:47:5b:3a:ce:58:90:e6:4e:cd:27:2b:ad:86:df:1a:59:1e:2c:37:11:61:51:6c:28:64:04

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Nov 25, 2019

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,POSTALCODE=98104-2205,STREET=113 Cherry St #1337,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

ee:6d:f2:fc:b5:4a:8b:58:0c:72:af:81:b4:64:47:1a

Issuer

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 6, 2019 - Nov 5, 2022

Subject

CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Dec 3, 2014 - Dec 2, 2029

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Aug 1, 2030

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/options.ini

SHA256 df25cef49b32ee80f5320c44f3021e7fef78349b4c450c3e50be9bf68a1184a8
MD5 14a7380dcf0cc55cc3907c0c2a11223a
SHA1 4327dd899aeb0c9872d647756d8eeadaa7d06696
SHA512 a8c5c56363b401ca0ab329e97130cb50958c2e08b47e7cc07209587766eef32868f994a94971f433256c1912d6aabe751c14fdc01409d21dd64f2f011d3305e6
MD5 SHA1 SHA512

NSIS installer

installer

DiagReport.bat

SHA256 0843361f05255e3970ed955171c20003238756c57137fef9ac19d29fbd49f9f6
MD5 b82606a6afb3777d62e35e8d9850faed
SHA1 13b5cd6ce43346eacc6d8334a251b429ca8d30f7
SHA512 e2852b1862d9a3aaa52367ca885951e63bf519159cb5358131792c7dcfe5b3acd8f9282279af0323804f246f853ed7627c370d2ec541452995c9177bd115e9c6
MD5 SHA1 SHA512

NSIS installer

installer

DiagReport.ps1

SHA256 5ad0d8757aa797d81f8c10e2ec3838c110bccefbc6d820e0992545a8ad9e87c3
MD5 afd631b0c63f04c75b86655dd296f6b9
SHA1 d35c7409849c16580160d37304837151bc9e8296
SHA512 1aa3c7e48761d3ab6101a9a11dcff4ae7f04292171761f4e1b870ef15f49736dd2967079508cd5291c9d4219f5016288db892fc25e2a40367cb9a0325d28e3cd
SSDEEP 96:4g+14dBdsaHQCoz1OtBG7IYMGOUd8Sz13P7RZE8Ln:4x4dBdsaHQNl6WuE1r
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

FixInstall.bat

SHA256 0eef66a27fec8d6f74f1037dabdca0094c5c877606d33185fb560f26ecb08af1
MD5 6995c16f3fc3f788fd9e3e9c801f9758
SHA1 2eec9a249b77abee855de6e771ce69fa64b053ce
SHA512 2e0f6730e5a28839fc664f397e6d56db48ba1fe8ce59dca8ccc506f2c2b0ce83e548097c84d3dc2a569ee36c32ff8eceb4668394d39d07a387fdbb998d3062cc
MD5 SHA1 SHA512

NSIS installer

installer

LICENSE

SHA256 394856b08b9431dce157ad66b99da338a7fb2be993a842e3c955f4016e7ee0eb
MD5 07c3fa2b84d9b09d425f71e390733fc9
SHA1 b22ff7ca232a2d98613cdedf2047a99a7325ef06
SHA512 27d6be265c9ed148c64a0cfd0302aa43b3b9b7fb4c8c8ba23505f20b8686c6a960248397777a07a8d232c7dab1443211e20442b1879188984d399711cbf52772
SSDEEP 192:qEiJiDm7yNpQVeSp96B8EFRVUwiQQfm3+233O63p5o5Kjncadr5C:xY7uQVh96BPQwkfYB7pry
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

NpcapHelper.exe

IMPHASH 56a29ee32c45f19895b1e6f87646a0ba
SHA256 435dd3de1a0093d0e9d12c09f08a991e5511e703d5423e6931f0082a89248799
MD5 97ebc97781f7e118a8315372ee0d91d9
SHA1 09666467638d52afa3c8866d7e2cdffc53cc0af8
SHA512 419f1f76586066f68179cc0b62ee0301781b4dde46e8559d39102710ed09bf0bd19bd404c085f2543b17d0b57aa0a6113f723cff319298da89012a7e04378c9b
SSDEEP 3072:XswMo2A8lJwCLfjZ+G1ESolh+vqjLunjke6sTfiK8xHHaD:cntr3TN+hlhzunj4bt6D
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

79:64:ca:9d:a5:ab:ef:f1:c6:1f:23:ce:ce:b6:18:b0:1a:31:2a:53:77:49:3e:ec:e2:c3:de:5c:4a:03:49:26

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Sep 25, 2020

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

09:25:63:14:06:9e:7e:6a:88:cb:82:30:75:c0:d9:c9

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 1, 2020 - May 7, 2021

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

6

Entry point

6238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\nmap\Source\Repos\npcap\packetWin7\vs14\Release\NpcapHelper.pdb

kernel32

GetLastError CreateFileA CloseHandle CreateThread OpenProcess GetProcessHeap ConnectNamedPipe FlushFileBuffers CreateFileW DisconnectNamedPipe DuplicateHandle TerminateProcess WriteFile GetCurrentProcess HeapFree CreateNamedPipeA HeapAlloc ReadFile UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException GetStdHandle GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW CompareStringW LCMapStringW SetFilePointerEx GetConsoleMode ReadConsoleW HeapSize HeapReAlloc GetConsoleOutputCP DecodePointer WriteConsoleW

advapi32

IsValidSid OpenProcessToken InitializeSecurityDescriptor InitializeAcl GetLengthSid AddAccessAllowedAce GetTokenInformation SetSecurityDescriptorDacl

Packet.dll

IMPHASH c32f23f62c3e927bb603b2fec6e876ed
SHA256 f73e0d409d3df6f2d9cad9703495581d011857c301a87e01ac64147fdbe6cc81
MD5 057342374fde7c1330253b552a3fa0cc
SHA1 d3b11fbfc5b984c6daf9465fe4c31080fd14c4d5
SHA512 9e83b00caa13b7bc8b4240fb677ee78341075ff7e92812861cf57a2f2cfac4d096d222d00354028a89f71595ccf546149e537d649d7f01604b86ea8e56620cbd
SSDEEP 3072:TqZ7wW93xXY7EMRFwvokgB5btWJGgVPpV+wdG4r0Hw7clPXJT9qvduYy9RQKdnUG:O6WHXY7EM3mFXcSG25AlP5T9guYyU14b
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

bd:11:9e:5a:4c:81:db:77:d5:ca:e0:28:bf:5a:01:a7:7a:12:85:75:5a:89:90:ae:b7:25:e7:91:06:ac:90:6f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Sep 25, 2020

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

09:25:63:14:06:9e:7e:6a:88:cb:82:30:75:c0:d9:c9

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 1, 2020 - May 7, 2021

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

6

Entry point

28083

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Users\nmap\Source\Repos\npcap\packetWin7\vs14\Release\Packet.pdb

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

ws2_32

inet_pton InetPtonW

iphlpapi

GetAdaptersAddresses GetAdaptersInfo

kernel32

GlobalReAlloc InitializeCriticalSectionEx GetLastError RaiseException DecodePointer DeleteCriticalSection ReadFile GetModuleFileNameA SetNamedPipeHandleState SetLastError GetFullPathNameW WriteFile DeviceIoControl GetModuleFileNameW CreateMutexW GlobalAlloc CreateEventW MultiByteToWideChar GlobalLock CreateFileA SetEvent QueryPerformanceFrequency CloseHandle LoadLibraryW GetProcAddress GetCurrentProcessId FreeLibrary WideCharToMultiByte QueryPerformanceCounter ReleaseMutex WaitForSingleObject GlobalHandle GlobalUnlock Sleep GlobalFree GetConsoleOutputCP GetConsoleMode GetProcessHeap CreateFileW HeapSize WriteConsoleW GetSystemDirectoryW LCMapStringW FlushFileBuffers SetStdHandle GetStringTypeW SetFilePointerEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead OutputDebugStringW EnterCriticalSection LeaveCriticalSection RtlUnwind InterlockedFlushSList EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW HeapReAlloc

advapi32

QueryServiceStatus CloseServiceHandle OpenSCManagerW AllocateAndInitializeSid ControlService FreeSid StartServiceW CheckTokenMembership RegOpenKeyExA OpenServiceA RegCloseKey RegEnumKeyW RegQueryValueExA RegOpenKeyExW RegQueryValueExW

shell32

ShellExecuteExA

shlwapi

PathFileExistsA

WlanHelper.exe

IMPHASH f80d7719c04f12a0b7416e5c7e5c32e0
SHA256 ce078676bb205bac1807f5825ad065df10d636ff6fb6c1c47f851ec412ead5f4
MD5 a1f254b7c1b181df8668e52aaf531dbe
SHA1 c22f61c0fb83fb6b61dd4a73838e8be758790d2d
SHA512 33baeab4b5a173974bb228cccd5d2de23bbe63f8f7a1fe41a2f2c6b30f76330eea2c5412d328936d6ea280447b6a572b9ebc9169fc08e27b2d1f6a4f08c161c2
SSDEEP 768:J9eMY9B67z0i+vH2fvIZnJjDZXaSNgiXVqnUxYwVjMNlQnbXUf2ho:eMp7z0iCHWIZJjlXaSNjVqyYKjeOUfJ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

25:76:0c:c0:ac:80:0f:9e:5a:d3:1e:59:bc:bd:b0:8d:46:f8:a6:3e:2c:72:85:37:19:68:73:c6:32:33:03:02

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Sep 25, 2020

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

09:25:63:14:06:9e:7e:6a:88:cb:82:30:75:c0:d9:c9

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 1, 2020 - May 7, 2021

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

6

Entry point

27252

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\nmap\Source\Repos\npcap\packetWin7\vs14\Release\WlanHelper.pdb

rpcrt4

RpcStringFreeW UuidToStringW

wlanapi

WlanFreeMemory WlanEnumInterfaces WlanQueryInterface WlanOpenHandle WlanSetInterface WlanCloseHandle

kernel32

GetStdHandle SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetModuleHandleW GlobalHandle FormatMessageW GetLastError GlobalAlloc GlobalFree LoadLibraryW GetProcAddress GlobalLock LocalFree FreeLibrary WideCharToMultiByte GlobalUnlock UnhandledExceptionFilter ReadConsoleW SetConsoleTitleW IsProcessorFeaturePresent IsDebuggerPresent

msvcp140

?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z

vcruntime140

__current_exception __current_exception_context _except_handler4_common __std_exception_copy __std_exception_destroy memcpy _CxxThrowException __CxxFrameHandler3 memset memmove

api-ms-win-crt-stdio-l1-1-0

_set_fmode __stdio_common_vsprintf_s __acrt_iob_func _pclose __stdio_common_vswprintf_s feof fgetws _wpopen __p__commode __stdio_common_vfwprintf __stdio_common_vswscanf _putws

api-ms-win-crt-convert-l1-1-0

_wtoi _itow_s

api-ms-win-crt-string-l1-1-0

tolower

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _register_onexit_function _crt_atexit _invalid_parameter_noinfo_noreturn _seh_filter_exe _configure_wide_argv _initialize_wide_environment _get_initial_wide_environment _initterm _initterm_e exit _exit _set_app_type __p___argc _controlfp_s _c_exit _register_thread_local_exe_atexit_callback _wsystem _cexit terminate __p___wargv

api-ms-win-crt-heap-l1-1-0

malloc _callnewh free _set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

npcap.cat

SHA256 ba63fe527a8b0b1e9b6ddbb227ee81d446259e55cba227e7d74e7bd396a1b4a2
MD5 f12ab0ae56dd97d7d5bdc58699fc095a
SHA1 0494e1bcaf6507843a6cc3758e022613ef7e5508
SHA512 f9c51becd78fadf00aa90b81c4dc3a9c21d63f0fb4fbca62fb2e39421272e0960d05f3c72b3c5ed240a5adcab97570cefff2636c235b88108ff141f1f8a391be
SSDEEP 192:YhgvOfkbJC4bp5UEwQl/WGhYCUfeP+CjAWqnajKsTNRbx:j7bpzlnh3TP+CcWlGsJRd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

npcap.inf

SHA256 7cd24030b0373d45988e8fa07933d31967c68e645ab28ef7f93fed6de5aa380e
MD5 95f3e308d4d4439b533c0db3f69d4ce9
SHA1 a51d13dbc101ef93affb91beb2e7b4a4477f60a2
SHA512 9094c2202ec2a912d4494b5f36ec390fd42874084ae1a01cf78362b4bd855ca40377e62e73c2a29b5fbdc69e51a6c9b93e97d9fd7f67a244bc524dacaa7d2447
SSDEEP 192:M3ZVK71HTe4BMNwiyOpW0O3lv5YMNwiyOpW0O3lU7Ke1V//q/4EOOgS:eKJTe4BMNhyOXO3lv5YMNhyOXO3lU7KZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

npcap.sys

IMPHASH ad78d21533b3b7883dfc743e073ef782
SHA256 036e22eccd489713ae7f87ca8b1cf40e82968d1cfba52d2b6570944173c5c72a
MD5 1e894da10e3730d27bedaba562f0d02d
SHA1 dfc1fadf5f085a10ef5bd0e71ae93e0952668ecc
SHA512 adad97078ccf352b506881b75172c77be1a30e11ce5647f08ffc5a597b94723df7e4b7dcf221cf4f7a5a6543e4416d963b4f29f8a84004f34e07b2899148e675
SSDEEP 1536:/N1svdthKsvaYJvTBKR68TAdORovLw0WR2W9UA11OGUfUvtymw4K:/N1svdDVvaYJv9rdORR0g2WmopnK
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

f6:dd:7b:72:24:ec:c0:8d:43:fd:b3:1d:9c:4d:f9:e0:88:d8:92:83:01:dc:8b:89:29:81:77:4a:94:81:8a:ea

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 26, 2024

Digest

f6:dd:7b:72:24:ec:c0:8d:43:fd:b3:1d:9c:4d:f9:e0:88:d8:92:83:01:dc:8b:89:29:81:77:4a:94:81:8a:ea

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Sep 25, 2020

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

09:25:63:14:06:9e:7e:6a:88:cb:82:30:75:c0:d9:c9

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 1, 2020 - May 7, 2021

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:3a:6a:e3:33:70:8f:da:7a:7b:00:00:00:00:00:3a

Issuer

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Mar 11, 2020 - Mar 5, 2021

Subject

CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Oct 15, 2014 - Oct 15, 2029

Minor OS version

0

Major OS version

10

Entry point

51040

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\nmap\Source\Repos\npcap\packetWin7\vs14\Win10 Release\npcap.pdb

ntoskrnl.exe

RtlSetDaclSecurityDescriptor memcpy IoDeviceObjectType ZwSetValueKey ZwCreateKey RtlFreeUnicodeString ZwSetSecurityObject RtlUnwind _allmul MmBuildMdlForNonPagedPool ExfInterlockedInsertTailList KeClearEvent ExfInterlockedRemoveHeadList ExfInterlockedInsertHeadList ZwOpenKey InterlockedPopEntrySList KeResetEvent ZwClose IoCreateSymbolicLink ExEventObjectType ExInitializeLookasideListEx KeQuerySystemTime IoIsWdmVersionAvailable MmGetSystemRoutineAddress RtlGetVersion ObReferenceObjectByHandle IoDeleteSymbolicLink RtlCopyUnicodeString IoDeleteDevice RtlInitUnicodeString RtlCheckRegistryKey RtlAppendUnicodeStringToString ExDeleteLookasideListEx KeDelayExecutionThread RtlCompareMemory InterlockedPushEntrySList IofCompleteRequest ExFreePoolWithTag KefAcquireSpinLockAtDpcLevel ExAllocatePoolWithTag KefReleaseSpinLockFromDpcLevel KeInitializeSpinLock ObfDereferenceObject RtlAppendUnicodeToString IoGetRequestorProcessId RtlLengthSid RtlAddAccessAllowedAce RtlAbsoluteToSelfRelativeSD wcschr _wcsnicmp RtlCreateSecurityDescriptor SeExports RtlLengthSecurityDescriptor _snwprintf SeCaptureSecurityDescriptor RtlGetSaclSecurityDescriptor RtlGetOwnerSecurityDescriptor RtlGetGroupSecurityDescriptor RtlGetDaclSecurityDescriptor ObOpenObjectByPointer ZwQueryValueKey IoCreateDevice KeWaitForSingleObject KeInitializeEvent IoAllocateIrp IoFreeIrp KeSetEvent MmProbeAndLockPages MmUnlockPages memset MmMapLockedPagesSpecifyCache _alldiv _allrem

ndis.sys

NdisInitializeEvent NdisFreeNetBufferList NdisRetreatNetBufferListDataStart NdisFreeMdl NdisAllocateMdl NdisFSendNetBufferListsComplete NdisFIndicateReceiveNetBufferLists NdisFSendNetBufferLists NdisFDeregisterFilterDriver NdisFRegisterFilterDriver NdisFIndicateStatus NdisReleaseRWLock NdisFreeNetBufferListPool NdisAcquireRWLockRead NdisAcquireRWLockWrite NdisSetEvent NdisWaitEvent NdisFCancelOidRequest NdisFOidRequest NdisFreeRWLock NdisFOidRequestComplete NdisAdvanceNetBufferListDataStart NdisFCancelSendNetBufferLists NdisFDevicePnPEventNotify NdisResetEvent NdisAllocateNetBufferListPool NdisAllocateCloneOidRequest NdisFNetPnPEvent NdisAllocateRWLock NdisFReturnNetBufferLists NdisFSetAttributes NdisFreeCloneOidRequest NdisFreeNetBuffer NdisAllocateMemoryWithTagPriority NdisFreeMemory NdisAllocateNetBuffer NdisGetDataBuffer NdisAllocateNetBufferAndNetBufferList

fwpkclnt.sys

FwpsAllocateCloneNetBufferList0 FwpmEngineClose0 FwpmFilterAdd0 FwpmCalloutAdd0 FwpsFreeCloneNetBufferList0 FwpsCalloutRegister2 FwpmTransactionAbort0 FwpmTransactionBegin0 FwpsInjectionHandleCreate0 FwpmEngineOpen0 FwpsInjectNetworkSendAsync0 FwpsInjectionHandleDestroy0 FwpmSubLayerAdd0 FwpmTransactionCommit0 FwpsQueryPacketInjectionState0 FwpsCalloutUnregisterById0

netio.sys

WskCaptureProviderNPI WskReleaseProviderNPI WskDeregister WskRegister

hal

KeQueryPerformanceCounter KfReleaseSpinLock KfAcquireSpinLock

Name

.text

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

824B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

PAGE

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

992B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

wpcap.dll

IMPHASH 0eea9165117f4b0b41ada88aaa4d34ad
SHA256 f2a3ed0cbbfd9982695cd5b668953c8b761eb251fbed4489265474425d7bdaa8
MD5 87c03d52f9f4b2d4b7769200221fd818
SHA1 ce40ca56d43be6f04adfefc8d50fdf8a85fcff99
SHA512 f0db4860a3ddaf7fe1be05e686b8b0e46af8ee93d9fa6bb2df00fd835280e7e5475ea7aeda10cb0efebfea51cbbd84acd208aea3cdf09d722e54e9a2d1c16fad
SSDEEP 6144:GKQSMOKsxygWkzfVnU03pX5TctZSVzXmScBs4wFxqXnTgqHvXubafTRcbG86me49:BQSMOKsxZhdUkXJctZSVzXmScXSxq/uV
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

Digest

5a:31:ad:38:ad:de:88:9e:db:45:85:ac:df:86:32:40:f0:69:a2:da:c5:1f:3f:9d:83:77:80:6d:7f:3f:11:ad

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Sep 25, 2020

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:20:4d:b4:00:00:00:00:00:27

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

SERIALNUMBER=200010310013,CN=Insecure.Com LLC,O=Insecure.Com LLC,L=Seattle,ST=Washington,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Serial Number

09:25:63:14:06:9e:7e:6a:88:cb:82:30:75:c0:d9:c9

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 1, 2020 - May 7, 2021

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

0

Major OS version

6

Entry point

142808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Users\nmap\Source\Repos\npcap\wpcap\build-win32\run\Release\wpcap.pdb

packet

PacketSetMinToCopy PacketCloseAdapter PacketIsDumpEnded PacketSetDumpLimits PacketSetDumpName PacketGetReadEvent PacketRequest PacketGetNetInfoEx PacketGetAdapterNames PacketSetHwFilter PacketReceivePacket PacketInitPacket PacketSendPackets PacketSendPacket PacketOpenAdapter PacketGetMonitorMode PacketSetMonitorMode PacketIsMonitorModeSupported PacketIsLoopbackAdapter PacketGetNetType PacketSetBuff PacketGetStatsEx PacketGetStats PacketSetLoopbackBehavior PacketSetBpf PacketSetReadTimeout PacketSetMode PacketGetVersion

ws2_32

ntohl socket shutdown send recv listen connect bind getnameinfo getaddrinfo setsockopt select getsockopt getsockname getpeername closesocket accept WSACleanup WSAStartup WSAGetLastError WSASetLastError getprotobyname getservbyname getservbyport gethostbyname gethostbyaddr inet_ntoa inet_addr htons freeaddrinfo htonl ntohs

kernel32

GetCurrentProcess WriteConsoleW SetEndOfFile HeapSize CreateFileW GetStringTypeW GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW GetFileSizeEx GetConsoleOutputCP FlushFileBuffers HeapReAlloc ReadConsoleW GetConsoleMode WriteFile SetFilePointerEx GetStdHandle LCMapStringW HeapFree HeapAlloc GetModuleFileNameW GetModuleHandleExW ExitProcess ReadFile GetFileType SetStdHandle CloseHandle RaiseException LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetLastError RtlUnwind FormatMessageA GetSystemDirectoryA FreeLibrary GetProcAddress LoadLibraryA GetLastError GetVersion FindClose FindFirstFileA FindNextFileA InterlockedFlushSList UnhandledExceptionFilter SetUnhandledExceptionFilter DecodePointer TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead

bpf_dump bpf_filter bpf_image bpf_validate eproto_db pcap_activate pcap_breakloop pcap_bufsize pcap_can_set_rfmon pcap_close pcap_compile pcap_compile_nopcap pcap_create pcap_createsrcstr pcap_datalink pcap_datalink_ext pcap_datalink_name_to_val pcap_datalink_val_to_description pcap_datalink_val_to_description_or_dlt pcap_datalink_val_to_name pcap_dispatch pcap_dump pcap_dump_close pcap_dump_file pcap_dump_flush pcap_dump_ftell pcap_dump_ftell64 pcap_dump_hopen pcap_dump_open pcap_dump_open_append pcap_ether_aton pcap_ether_hostton pcap_file pcap_fileno pcap_findalldevs pcap_findalldevs_ex pcap_free_datalinks pcap_free_tstamp_types pcap_freealldevs pcap_freecode pcap_get_airpcap_handle pcap_get_tstamp_precision pcap_geterr pcap_getevent pcap_getnonblock pcap_hopen_offline pcap_hopen_offline_with_tstamp_precision pcap_inject pcap_is_swapped pcap_lib_version pcap_list_datalinks pcap_list_tstamp_types pcap_live_dump pcap_live_dump_ended pcap_lookupdev pcap_lookupnet pcap_loop pcap_major_version pcap_minor_version pcap_nametoaddr pcap_nametoaddrinfo pcap_nametoeproto pcap_nametollc pcap_nametonetaddr pcap_nametoport pcap_nametoportrange pcap_nametoproto pcap_next pcap_next_etherent pcap_next_ex pcap_offline_filter pcap_oid_get_request pcap_oid_set_request pcap_open pcap_open_dead pcap_open_dead_with_tstamp_precision pcap_open_live pcap_open_offline pcap_open_offline_with_tstamp_precision pcap_parsesrcstr pcap_perror pcap_remoteact_accept pcap_remoteact_cleanup pcap_remoteact_close pcap_remoteact_list pcap_sendpacket pcap_sendqueue_alloc pcap_sendqueue_destroy pcap_sendqueue_queue pcap_sendqueue_transmit pcap_set_buffer_size pcap_set_datalink pcap_set_immediate_mode pcap_set_promisc pcap_set_rfmon pcap_set_snaplen pcap_set_timeout pcap_set_tstamp_precision pcap_set_tstamp_type pcap_setbuff pcap_setdirection pcap_setfilter pcap_setmintocopy pcap_setmode pcap_setnonblock pcap_setsampling pcap_setuserbuffer pcap_snapshot pcap_stats pcap_stats_ex pcap_statustostr pcap_strerror pcap_tstamp_type_name_to_val pcap_tstamp_type_val_to_description pcap_tstamp_type_val_to_name pcap_version pcap_wsockinit

odipus32.dll

IMPHASH 5ed426d4b20b5aa1f88de17e82ce524b
SHA256 3110e0c44250532b36e47f8af5ad303ee53602bdee79cacb363fb8670c3bc88b
MD5 856292e7897878b741d2123536346eed
SHA1 80f55ecc2b289d4b825ff9728d956e48c5464a1b
SHA512 2ac961c49d1d8a9f580a34770c10be67906a779d27a5d96b4befc5e8bc3b708cf947c067c748acf8be333278ad615a8f2f31581cecc0287c79841fffabb09dc0
SSDEEP 6144:tyK8wTPdB2kKRmc+JxnHJWxVGxwS20fU29SGe/GWqC:tJ8wbdBSm18ACeJ9SN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

ee:96:ff:68:44:fe:30:92:5c:d6:df:e4:4a:ea:e0:47:29:d3:5e:92:c0:7f:78:bf:f2:37:b1:f3:2c:50:86:4e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 16, 2024

PE Signature issue

Digest

1f:da:46:56:7f:1f:96:98:fa:04:bd:03:bd:f6:a6:44:27:2d:3b:a2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 16, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

118488

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\odipus\Release\odipus32.pdb

kernel32

FlushFileBuffers GetConsoleMode GetConsoleCP SetStdHandle WriteConsoleA GetConsoleOutputCP GetModuleHandleA LoadLibraryA GetProcAddress CreateEventW GetExitCodeThread SetEvent SystemTimeToFileTime SetLocalTime lstrlenA CreateThread GetComputerNameW DisableThreadLibraryCalls lstrcmpA GetVersionExW GetWindowsDirectoryW GetDiskFreeSpaceExW GetLocalTime SetLastError GetLastError GetTempPathW GetExitCodeProcess OutputDebugStringW GetLogicalDrives WaitForSingleObject GetDriveTypeW Sleep lstrcmpiW DeleteFileW SetFilePointer lstrcpyA lstrcpyW LocalFree Module32NextW OpenEventW CreateToolhelp32Snapshot Process32NextW Module32FirstW DeviceIoControl ProcessIdToSessionId Process32FirstW CloseHandle CreateFileW ReadFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree HeapAlloc HeapReAlloc GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA HeapSize ExitProcess HeapCreate HeapDestroy VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoW GetLocaleInfoA InterlockedExchange InitializeCriticalSectionAndSpinCount GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetTempFileNameW CreateFileA VirtualQuery lstrcpynA CreateProcessW GetDriveTypeA InitializeCriticalSection OpenProcess lstrcpynW GetFileAttributesW GetModuleFileNameW lstrlenW WriteConsoleW

user32

SendMessageTimeoutW CloseWindow GetForegroundWindow GetWindowTextW PostMessageW FindWindowW GetClassNameW IsWindow

ole32

CoCreateGuid CoCreateInstance CoInitialize CLSIDFromString

oleaut32

VariantInit VariantClear SysFreeString

iphlpapi

GetAdaptersInfo

oleacc

AccessibleObjectFromWindow GetStateTextA AccessibleChildren GetRoleTextW

netapi32

NetUserSetInfo NetUserEnum NetApiBufferFree

shlwapi

StrCatW wvnsprintfA wnsprintfA StrChrA SHSetValueW SHDeleteValueW PathFileExistsW PathAppendW StrStrW StrStrIW SHDeleteKeyW wvnsprintfW PathIsDirectoryW PathFindFileNameW PathRemoveFileSpecW StrChrW wnsprintfW SHGetValueW

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

advapi32

GetUserNameW CloseServiceHandle OpenProcessToken OpenSCManagerW OpenServiceW CreateProcessAsUserW InitializeSecurityDescriptor SetSecurityDescriptorDacl QueryServiceStatus SetFileSecurityW AllocateAndInitializeSid SetEntriesInAclW FreeSid ControlService

shell32

ord165

odipus64.dll

IMPHASH 30c2f15858daa0e4e286678bbd6f0821
SHA256 25fa685969da5fc7c951fc587fa93ffe8c39fef7bc8e1693a70c7e6aef3d3c56
MD5 12e8484559f8c942eea63069c9a40f61
SHA1 19b189c390eb8b5093050d4e0b5bb7452e2e823e
SHA512 6ac73163d08286943eeaf50d0662000f343a3a7cd5b6cfb8b0ddab39eb41d79b120a68ffde471dc33b314e89acac58c7b5b146484a9059bc245a87d725947793
SSDEEP 6144:9e416nXp6Jtw7SKBsN+oq7tI1zbdeUYbPY0hEE9WVdjCuPfs+BlKw0rGQGBT:U26XpaA1r7LUmdAfs+/0Q
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

27:7f:87:d1:30:c7:13:25:2b:df:05:d4:de:3b:82:fe:72:3d:0d:db:54:d4:6e:63:90:4d:9b:1e:82:6f:e6:e9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 16, 2024

PE Signature issue

Digest

a2:93:77:f3:4c:be:ab:05:6d:5c:5e:ac:27:df:f3:59:39:92:76:32

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 16, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

183208

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\odipus\Release\odipus64.pdb

kernel32

SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP WriteConsoleA GetConsoleOutputCP GetModuleHandleA LoadLibraryA GetProcAddress CreateEventW GetExitCodeThread SetEvent SystemTimeToFileTime SetLocalTime lstrlenA CreateThread GetComputerNameW DisableThreadLibraryCalls lstrcmpA GetVersionExW GetWindowsDirectoryW GetDiskFreeSpaceExW GetLocalTime SetLastError GetLastError GetTempPathW GetExitCodeProcess OutputDebugStringW GetLogicalDrives WaitForSingleObject GetDriveTypeW Sleep lstrcmpiW DeleteFileW SetFilePointer lstrcpyA lstrcpyW LocalFree Module32NextW OpenEventW CreateToolhelp32Snapshot Process32NextW Module32FirstW DeviceIoControl ProcessIdToSessionId Process32FirstW CloseHandle CreateFileW ReadFile TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapFree HeapAlloc HeapReAlloc GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc WriteFile GetStdHandle GetModuleFileNameA HeapSize GetModuleHandleW ExitProcess HeapSetInformation HeapCreate HeapDestroy SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoW GetLocaleInfoA InitializeCriticalSectionAndSpinCount GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW GetTempFileNameW CreateFileA VirtualQuery lstrcpynA CreateProcessW GetDriveTypeA InitializeCriticalSection OpenProcess lstrcpynW GetFileAttributesW GetModuleFileNameW lstrlenW WriteConsoleW

user32

SendMessageTimeoutW GetForegroundWindow GetWindowTextW PostMessageW FindWindowW GetClassNameW IsWindow CloseWindow

ole32

CoCreateGuid CoCreateInstance CoInitialize CLSIDFromString

oleaut32

VariantInit VariantClear SysFreeString

iphlpapi

GetAdaptersInfo

oleacc

AccessibleObjectFromWindow GetStateTextA AccessibleChildren GetRoleTextW

netapi32

NetUserSetInfo NetUserEnum NetApiBufferFree

shlwapi

StrCatW wvnsprintfA wnsprintfA StrChrA SHSetValueW SHDeleteValueW PathFileExistsW PathAppendW StrStrW StrStrIW SHDeleteKeyW wvnsprintfW PathIsDirectoryW PathFindFileNameW PathRemoveFileSpecW StrChrW SHGetValueW wnsprintfW

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

advapi32

GetUserNameW CloseServiceHandle OpenProcessToken OpenSCManagerW OpenServiceW CreateProcessAsUserW InitializeSecurityDescriptor SetSecurityDescriptorDacl QueryServiceStatus SetFileSecurityW AllocateAndInitializeSid SetEntriesInAclW FreeSid ControlService

shell32

ord165

patch32.dll

IMPHASH efa114d0f32f7936fe8ae8498511d936
SHA256 c16081c282d39d2e843097bc3768c4b4f62c46447926871e39de80d0bb90028f
MD5 a5cad9e2f0cc02b1ea8aa684f99703d2
SHA1 d26bfb89cf11c0636c9e7f5e9d152343b8ef7a40
SHA512 932bc603f19dcc3e1f3355fd0c38efe37efed946fe3056894f1c3645102d23e19bfc129136e2b96c459842d89995a725b82dd44ae91534f7a6f6c8ca57a53f3e
SSDEEP 12288:+ieQYTUYyUPHB9FFkhZWXEtTd3IdneHXSLJw9fuIPoQoIvTIRX6fo+Wvkv:/eQYTUYzGiLJ4uQ7q6fobvM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

3b:ad:5f:a5:09:60:bc:a3:ad:95:bf:6f:7a:a7:8c:cc:93:da:05:87:dc:57:a2:e7:20:3e:35:89:7c:26:e5:47

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 15, 2024

PE Signature issue

Digest

40:30:ac:b5:80:42:62:1e:dd:22:a5:85:bb:db:94:7e:39:ff:74:82

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 15, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

344025

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\patch\Release\patch32.pdb

kernel32

GetModuleFileNameW MultiByteToWideChar RaiseException VerifyVersionInfoW GetProcAddress FindClose GetLocalTime LockResource GetModuleHandleA FindNextFileW SetFileAttributesW ExpandEnvironmentStringsW GetSystemDirectoryW lstrcpynW lstrcatW GetWindowsDirectoryW lstrcpynA OutputDebugStringW lstrcmpiW GetFileAttributesExW lstrcpyW GetVersionExW SizeofResource LoadLibraryW WideCharToMultiByte GetCurrentProcess VerSetConditionMask LoadResource FindResourceW FindResourceExW GetSystemDefaultUILanguage FindFirstFileW InterlockedDecrement LocalFree FileTimeToLocalFileTime LocalAlloc FileTimeToSystemTime lstrlenW WriteFile DisableThreadLibraryCalls lstrlenA lstrcmpA CreateThread GetCurrentProcessId DeleteFileW CloseHandle DeleteCriticalSection CreateEventW EnterCriticalSection GetLastError GetTempPathW CreateFileW ReadFile GetFileAttributesW GetExitCodeProcess LeaveCriticalSection Sleep InitializeCriticalSection GetTickCount SetEvent MoveFileExW lstrcpyA Module32NextW OpenEventW CreateToolhelp32Snapshot Module32FirstW RemoveDirectoryW GetCurrentDirectoryW lstrcmpW VirtualQuery GetTempFileNameW GetProcessHeap SetEndOfFile CreateFileA GetLocaleInfoW LoadLibraryA SetStdHandle WaitForSingleObject SetFilePointer GetFileSize InterlockedIncrement InterlockedExchange HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc HeapReAlloc GetCurrentThreadId GetCommandLineA RtlUnwind LCMapStringA LCMapStringW GetCPInfo SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapCreate HeapDestroy VirtualFree VirtualAlloc GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW

advapi32

GetUserNameW RegEnumValueW RegQueryValueExW RegEnumKeyW RegEnumKeyExW RegCloseKey RegOpenKeyExW

shell32

ord165 SHGetPathFromIDListW SHGetSpecialFolderLocation ShellExecuteExW SHGetSpecialFolderPathW

ole32

CoCreateInstance CoSetProxyBlanket CoCreateGuid CoTaskMemFree CoUninitialize CoInitializeSecurity CoInitializeEx

oleaut32

SafeArrayGetUBound SysAllocString SafeArrayGetLBound VariantClear SafeArrayDestroy VariantInit VariantChangeType SafeArrayGetElement SysFreeString

wintrust

WTHelperProvDataFromStateData WTHelperGetProvCertFromChain WinVerifyTrust WTHelperGetProvSignerFromChain

crypt32

CertGetNameStringW

shlwapi

StrRChrW StrCatW wvnsprintfA wnsprintfA StrChrA StrChrW wvnsprintfW PathRemoveExtensionW PathFindFileNameA StrNCatW PathStripToRootW PathAddBackslashW SHSetValueW SHGetValueW SHEnumValueW PathRemoveFileSpecW PathIsDirectoryW SHEnumKeyExW StrCatBuffW StrStrIW PathFindFileNameW PathAppendW wnsprintfW PathFileExistsW

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

patch64.dll

IMPHASH d670fff5a8f3446183db90db22cb773f
SHA256 f15d75645d34f9ed869bcbd27b617a9363ccda1b760162bf47bab7a8e010af46
MD5 aac31baa84f8b4e68760498a76800fae
SHA1 252f407ff0e85c0d3c8bd71e4a212ce7f9b74bdb
SHA512 6a66f35339304133843d4989ab9b88a1f9207ba70e59f5f209607d9299e90aad52b6c49a0b603177313d4943dc24b81a8a0996112711c700ef451c8993699d78
SSDEEP 24576:PF+JurqYGu/sYAWvKnPkxTXK7rGza3ANTLI5N6j:PF+Jurq1u//AWvKnPkxDerEap5NM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

03:b6:f7:70:ef:d4:a4:71:bf:39:cb:a9:58:a0:1c:28:db:56:5b:f4:1e:de:53:0b:9b:e4:08:98:d1:81:11:97

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 15, 2024

PE Signature issue

Digest

8e:e1:84:9a:a2:9c:fa:07:11:50:5d:16:e2:fe:29:e8:75:ae:fd:8e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 15, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

461480

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\patch\Release\patch64.pdb

kernel32

MultiByteToWideChar RaiseException VerifyVersionInfoW GetProcAddress FindClose GetLocalTime LockResource GetModuleHandleA FindNextFileW SetFileAttributesW ExpandEnvironmentStringsW GetSystemDirectoryW lstrcpynW lstrcatW GetWindowsDirectoryW lstrcpynA OutputDebugStringW lstrcmpiW GetFileAttributesExW lstrcpyW GetModuleFileNameW GetVersionExW SizeofResource LoadLibraryW WideCharToMultiByte GetCurrentProcess VerSetConditionMask LoadResource FindResourceW FindResourceExW GetSystemDefaultUILanguage FindFirstFileW LocalFree FileTimeToLocalFileTime LocalAlloc FileTimeToSystemTime lstrlenW WriteFile DisableThreadLibraryCalls lstrlenA lstrcmpA CreateThread GetCurrentProcessId DeleteFileW CloseHandle DeleteCriticalSection CreateEventW EnterCriticalSection GetLastError GetTempPathW CreateFileW ReadFile GetFileAttributesW GetExitCodeProcess LeaveCriticalSection Sleep InitializeCriticalSection GetTickCount SetEvent MoveFileExW lstrcpyA Module32NextW OpenEventW CreateToolhelp32Snapshot Module32FirstW RemoveDirectoryW GetCurrentDirectoryW lstrcmpW VirtualQuery GetTempFileNameW GetProcessHeap SetEndOfFile CreateFileA GetLocaleInfoW LoadLibraryA SetStdHandle WaitForSingleObject SetFilePointer GetFileSize HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapAlloc HeapReAlloc GetCurrentThreadId FlsSetValue GetCommandLineA RtlPcToFileHeader RtlUnwindEx LCMapStringA LCMapStringW GetCPInfo SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetACP GetOEMCP IsValidCodePage EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc HeapSetInformation HeapCreate HeapDestroy GetConsoleCP GetConsoleMode FlushFileBuffers HeapSize GetModuleHandleW ExitProcess GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale GetStringTypeA GetStringTypeW InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW

advapi32

GetUserNameW RegEnumValueW RegQueryValueExW RegEnumKeyW RegEnumKeyExW RegCloseKey RegOpenKeyExW

shell32

ord165 SHGetPathFromIDListW SHGetSpecialFolderLocation ShellExecuteExW SHGetSpecialFolderPathW

ole32

CoCreateInstance CoSetProxyBlanket CoCreateGuid CoTaskMemFree CoUninitialize CoInitializeSecurity CoInitializeEx

oleaut32

SafeArrayGetUBound SysAllocString SafeArrayGetLBound VariantClear SafeArrayDestroy VariantInit VariantChangeType SafeArrayGetElement SysFreeString

wintrust

WTHelperProvDataFromStateData WTHelperGetProvCertFromChain WinVerifyTrust WTHelperGetProvSignerFromChain

crypt32

CertGetNameStringW

shlwapi

StrRChrW StrCatW wvnsprintfA wnsprintfA StrChrA StrChrW wvnsprintfW PathRemoveExtensionW PathFindFileNameA StrNCatW PathStripToRootW PathAddBackslashW SHSetValueW SHGetValueW SHEnumValueW PathRemoveFileSpecW PathIsDirectoryW SHEnumKeyExW StrCatBuffW StrStrIW PathFindFileNameW PathAppendW wnsprintfW PathFileExistsW

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

pobus32.exe

IMPHASH 6c34ba3604ed125364fad455e6422283
SHA256 f80bad454d92c705d0bac7a227c3e614d6a5254bcba1873468862bb3c646cea2
MD5 41f10066796c02e23df78394f18e35f9
SHA1 db16ba55ec8e009e20d8026145059e1821b71685
SHA512 9cd98cc2a80c2f9cc6ddebfe93aa064503c83cdf390127318beed2273f1c35e1ce75c93b1d7add01c13139efaa7c7da54c535e6a945a2df94be947f929106639
SSDEEP 12288:AbejQlageperJc5pMQk5KfBotTXxp3YodZ+UcercXvmNc+1nSaAE7clW4F/vQQj9:AqjR4JmMQk5cBklNc+1nSRE7clW4JvQw
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

7b:74:89:5d:bd:84:90:cf:fc:58:2d:03:ad:82:6d:ed:e9:f6:16:35:91:bf:77:71:d7:a3:f5:5b:fa:16:19:52

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

PE Signature issue

Digest

b0:a2:e2:f8:f3:7f:d4:89:50:63:d5:54:d0:7f:07:3e:ac:4b:5b:df

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

254292

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\po\trunk\modules\pohost\Release\pobus32.pdb

kernel32

WriteConsoleA GetConsoleOutputCP WriteConsoleW GetCurrentThread CreateThread OutputDebugStringA SetLastError GetFileAttributesExW ResetEvent GetTickCount LocalFree SetProcessShutdownParameters LocalAlloc OutputDebugStringW MoveFileExW lstrcpynA FlushFileBuffers GetConsoleMode GetConsoleCP ExitThread PeekNamedPipe GetFileInformationByHandle SetStdHandle GetTempPathW GetModuleFileNameW CreateEventA CopyFileW lstrcmpA ExitProcess lstrcpyA GetVolumeInformationW SetFileAttributesW GetWindowsDirectoryW GetProcAddress GetLastError CreateFileW ReadFile GetFileAttributesW LoadLibraryW WriteFile GetModuleHandleW lstrlenA lstrcpyW lstrcatW GetProcessId EnterCriticalSection lstrcpynW LeaveCriticalSection GetVersionExW OpenProcess DeleteFileW CloseHandle lstrcmpiW CreateEventW MoveFileW lstrcmpiA Sleep PostQueuedCompletionStatus CreateSemaphoreA CreateIoCompletionPort GetQueuedCompletionStatus ReleaseSemaphore QueryPerformanceFrequency GetSystemDirectoryA GetSystemInfo CreateFileMappingA FormatMessageA LoadLibraryExA LoadLibraryExW SuspendThread GetThreadContext SetThreadContext FlushInstructionCache ResumeThread VirtualProtect InterlockedCompareExchange SetFilePointer InitializeCriticalSection SetEvent WaitForSingleObject TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStartupInfoW RaiseException RtlUnwind HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetStdHandle GetModuleFileNameA HeapSize DeleteCriticalSection SetConsoleCtrlHandler FreeLibrary InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetTimeZoneInformation CompareStringA CompareStringW SetEnvironmentVariableA GetTempFileNameW CreateFileA FindFirstFileW MapViewOfFile UnmapViewOfFile VirtualQuery SetEndOfFile CreateProcessW GlobalSize GlobalLock GetLogicalDrives GetProcessHeap IsBadReadPtr GetDriveTypeA FileTimeToSystemTime lstrcmpW lstrlenW GetFileSizeEx GetCurrentDirectoryW FindClose GetLocalTime Process32FirstW ProcessIdToSessionId CreateFileMappingW RemoveDirectoryW QueryDosDeviceW DeviceIoControl Module32FirstW Process32NextW GetModuleHandleA FindNextFileW CreateToolhelp32Snapshot OpenEventW Module32NextW FileTimeToLocalFileTime GetDriveTypeW GetDiskFreeSpaceExW GetFileSize

user32

GetSystemMetrics wsprintfA wsprintfW

advapi32

RegCloseKey GetTokenInformation CreateServiceW CloseServiceHandle OpenSCManagerW StartServiceCtrlDispatcherW DeleteService RegSetValueExA RegCreateKeyExW CreateProcessAsUserW InitializeSecurityDescriptor SetTokenInformation SetSecurityDescriptorDacl RegCreateKeyExA LookupPrivilegeValueW StartServiceW DuplicateTokenEx QueryServiceStatus SetFileSecurityW AllocateAndInitializeSid SetEntriesInAclW RegEnumValueW FreeSid RegSetKeySecurity ControlService AdjustTokenPrivileges RegSetValueExW GetUserNameW CryptGenRandom CryptAcquireContextA OpenServiceW QueryServiceConfigW RegNotifyChangeKeyValue RegOpenKeyExW SetServiceStatus ChangeServiceConfigW ChangeServiceConfig2W QueryServiceConfig2W RegisterServiceCtrlHandlerExW OpenProcessToken

shell32

SHGetSpecialFolderLocation ord165 SHGetPathFromIDListW

wtsapi32

WTSEnumerateSessionsW WTSFreeMemory

shlwapi

wnsprintfW StrStrIA StrStrIW PathFileExistsW StrNCatA StrNCatW SHDeleteValueW SHDeleteKeyW PathQuoteSpacesW PathFindFileNameW PathAppendW PathFindExtensionW PathMatchSpecW PathRemoveExtensionW wvnsprintfW PathIsDirectoryW SHGetValueA PathRemoveFileSpecW SHSetValueA StrChrW SHGetValueW StrCmpNIW SHSetValueW StrChrA wnsprintfA wvnsprintfA SHDeleteValueA PathFileExistsA SHCreateStreamOnFileW StrRChrW StrCatBuffW

version

VerQueryValueW GetFileVersionInfoW

ws2_32

setsockopt bind closesocket socket select htons WSAGetLastError connect WSAIoctl recvfrom WSAStartup shutdown getnameinfo WSASetLastError getsockopt listen send recv ioctlsocket WSASend WSARecv ntohl ntohs getservbyname getprotobynumber freeaddrinfo getaddrinfo accept getsockname htonl getpeername WSAGetOverlappedResult

psapi

GetProcessImageFileNameW

ole32

GetHGlobalFromStream CoInitializeEx CreateStreamOnHGlobal CoTaskMemFree CoCreateGuid CoCreateInstance

oleaut32

SysFreeString SysAllocString VariantInit VariantChangeType VariantClear

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

Name

.text

Size

523KB

Virtual Size

522KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

87KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

76KB

Virtual Size

94KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourd

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

pobus64.exe

IMPHASH 5470786ec23024288e11369382a00236
SHA256 ccb81015a5b76f46b57ba43900f7dc5cd58dbdda88d66c4d55a65d1d84613d30
MD5 2e966ac5b359d8f1f7156b369b1c30c1
SHA1 56154a24bd3a47e1de3ad6efcddaca0cd72262f1
SHA512 1989a0ad8aa4bef8c58c6b30506c37e664927cfdbae893c5ffab221ba7876e8e95517c897c61160ac20925b0c4352708293f108179366264e71a6ef89ae17395
SSDEEP 12288:LmgkP8xTrGKQX17HJZnh0HeLdWdsANDkDtsdY:LmaxTrGKQlpZnh0HeLdkjpatsK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

4c:4e:90:c2:b5:61:ed:58:e2:1b:10:d1:cb:e7:63:49:62:c2:49:6a:f2:e0:26:4d:d1:02:2f:95:81:c4:56:12

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

PE Signature issue

Digest

4d:ca:dc:fa:28:25:a8:28:e1:f7:7f:14:8a:90:4f:94:fb:17:8c:6c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

395200

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

e:\po\trunk\modules\pohost\Release\pobus64.pdb

kernel32

WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateThread OutputDebugStringA SetLastError GetFileAttributesExW ResetEvent GetTickCount LocalFree SetProcessShutdownParameters LocalAlloc OutputDebugStringW MoveFileExW lstrcpynA FlushFileBuffers GetConsoleMode GetConsoleCP ResumeThread ExitThread PeekNamedPipe GetFileInformationByHandle SetStdHandle GetTempPathW GetModuleFileNameW CreateEventA CopyFileW lstrcmpA ExitProcess lstrcpyA GetVolumeInformationW SetFileAttributesW GetWindowsDirectoryW GetProcAddress GetLastError CreateFileW ReadFile GetFileAttributesW LoadLibraryW WriteFile GetModuleHandleW lstrlenA lstrcpyW lstrcatW GetProcessId EnterCriticalSection lstrcpynW LeaveCriticalSection GetVersionExW OpenProcess DeleteFileW CloseHandle lstrcmpiW CreateEventW MoveFileW lstrcmpiA Sleep PostQueuedCompletionStatus CreateSemaphoreA CreateIoCompletionPort GetQueuedCompletionStatus ReleaseSemaphore QueryPerformanceFrequency GetSystemDirectoryA GetSystemInfo CreateFileMappingA FormatMessageA SetFilePointer GetFileSize GetDiskFreeSpaceExW GetDriveTypeW FileTimeToLocalFileTime Module32NextW OpenEventW CreateToolhelp32Snapshot InitializeCriticalSection SetEvent WaitForSingleObject TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetStartupInfoW RaiseException RtlPcToFileHeader RtlUnwindEx HeapAlloc HeapFree EncodePointer DecodePointer FlsGetValue FlsSetValue FlsFree GetCurrentThreadId FlsAlloc GetStdHandle GetModuleFileNameA HeapSize DeleteCriticalSection SetConsoleCtrlHandler FreeLibrary LoadLibraryA InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapSetInformation HeapCreate QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW GetLocaleInfoA HeapReAlloc GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetTimeZoneInformation CompareStringA CompareStringW SetEnvironmentVariableA GetTempFileNameW CreateFileA FindFirstFileW MapViewOfFile UnmapViewOfFile VirtualQuery SetEndOfFile CreateProcessW GlobalSize GlobalLock GetLogicalDrives GetProcessHeap IsBadReadPtr GetDriveTypeA FileTimeToSystemTime lstrcmpW lstrlenW GetFileSizeEx GetCurrentDirectoryW FindClose GetLocalTime Process32FirstW ProcessIdToSessionId CreateFileMappingW RemoveDirectoryW QueryDosDeviceW DeviceIoControl Module32FirstW Process32NextW GetModuleHandleA FindNextFileW

user32

wsprintfW GetSystemMetrics wsprintfA

advapi32

GetTokenInformation CreateServiceW CloseServiceHandle OpenSCManagerW StartServiceCtrlDispatcherW DeleteService RegSetValueExA RegCreateKeyExW CreateProcessAsUserW InitializeSecurityDescriptor SetTokenInformation SetSecurityDescriptorDacl RegCreateKeyExA LookupPrivilegeValueW StartServiceW DuplicateTokenEx QueryServiceStatus SetFileSecurityW AllocateAndInitializeSid SetEntriesInAclW RegEnumValueW FreeSid RegSetKeySecurity ControlService AdjustTokenPrivileges RegSetValueExW GetUserNameW CryptGenRandom CryptAcquireContextA OpenServiceW RegCloseKey QueryServiceConfigW RegNotifyChangeKeyValue RegOpenKeyExW SetServiceStatus ChangeServiceConfigW ChangeServiceConfig2W QueryServiceConfig2W RegisterServiceCtrlHandlerExW OpenProcessToken

shell32

SHGetPathFromIDListW ord165 SHGetSpecialFolderLocation

wtsapi32

WTSEnumerateSessionsW WTSFreeMemory

shlwapi

wnsprintfW StrStrIA StrStrIW PathFileExistsW StrNCatW SHDeleteValueW SHDeleteKeyW PathQuoteSpacesW PathFindFileNameW PathAppendW PathFindExtensionW PathMatchSpecW PathRemoveExtensionW wvnsprintfW PathIsDirectoryW SHGetValueA PathRemoveFileSpecW SHSetValueA StrChrW SHGetValueW StrCmpNIW SHSetValueW StrChrA wnsprintfA wvnsprintfA SHDeleteValueA PathFileExistsA SHCreateStreamOnFileW StrRChrW StrNCatA StrCatBuffW

version

VerQueryValueW GetFileVersionInfoW

ws2_32

bind recvfrom closesocket socket setsockopt htons WSAGetLastError connect WSAIoctl WSAStartup shutdown getnameinfo WSASetLastError getsockopt listen send recv ioctlsocket WSASend WSARecv ntohl ntohs getservbyname getprotobynumber freeaddrinfo getaddrinfo accept getsockname htonl getpeername select WSAGetOverlappedResult

psapi

GetProcessImageFileNameW

ole32

GetHGlobalFromStream CoInitializeEx CreateStreamOnHGlobal CoTaskMemFree CoCreateGuid CoCreateInstance

oleaut32

SysAllocString VariantClear SysFreeString VariantChangeType VariantInit

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

poda32.exe

IMPHASH 57c9f693f2ae638e21e29938caf2f118
SHA256 4c18ab54e1322ce5032219b326d18bc46af4b4ec1bb34c93fbcf2b1dcc0b9206
MD5 9ceff7a1cb8df994e224d14819689253
SHA1 b667b0c04ebbce3d5fdb109e75f95335fc96e373
SHA512 e4d18bac9c17832918211a442bc50710fa9804a2d15e40b3536c3fc8b94dec47dcf7f4da31683d8fbf3ba77be661a9423b705ce3bda5de70cdecd15c1186ab67
SSDEEP 6144:UMexU2t6XXvDtevJq8nfYj4q5HSVltHx+oFLPZL7nC54Xo2YPgGshYMZLGlMGlH:lei2cXfDtqngj8lpx+oF1L7C54KP5MZO
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

90:f0:80:30:2b:81:89:60:94:80:ce:e8:fe:c1:ad:d1:fd:1a:19:a4:62:8b:47:ad:b0:e9:6e:69:b6:04:f5:68

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 11, 2024

PE Signature issue

Digest

25:fa:b1:99:0a:c0:76:20:49:8a:f5:54:7b:2c:5b:69:95:32:cc:8b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 11, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

160828

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\po\trunk\modules\poagent\Release\poda32.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW lstrcpyA lstrlenW GetCurrentThread lstrcpynA lstrcpyW DeleteFileW SetProcessShutdownParameters lstrcatW OpenEventA GetLastError GetTempPathW CreateEventA WaitForSingleObject lstrcpynW LoadLibraryExA LoadLibraryExW SuspendThread GetThreadContext SetThreadContext FlushInstructionCache ResumeThread VirtualProtect InterlockedCompareExchange SetFilePointer OutputDebugStringW GetFileSize GetWindowsDirectoryW SetFileAttributesW Module32NextW OpenEventW CreateToolhelp32Snapshot FindNextFileW Process32NextW Module32FirstW CloseHandle Sleep lstrcmpA RemoveDirectoryW CreateFileMappingW ProcessIdToSessionId Process32FirstW FindClose lstrcmpiA GetCurrentDirectoryW GetFileSizeEx TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW GetProcAddress ExitProcess GetStartupInfoW RaiseException RtlUnwind WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapFree HeapAlloc HeapSize DeleteCriticalSection LeaveCriticalSection EnterCriticalSection FreeLibrary InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW GetLocaleInfoA VirtualAlloc HeapReAlloc GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetEvent GetLocalTime CreateEventW GetFileAttributesExW CreateThread lstrcmpiW GetModuleHandleA CreateFileA FindFirstFileW lstrlenA MapViewOfFile UnmapViewOfFile VirtualQuery CreateProcessW GlobalSize GlobalLock GetProcessHeap IsBadReadPtr InitializeCriticalSection OpenProcess LoadLibraryW CopyFileW GetFileAttributesW ReadFile CreateFileW lstrcmpW

user32

wsprintfW GetMessageW TranslateMessage RegisterClassExW IsWindow CreateWindowExW DispatchMessageA MessageBoxW UpdateWindow RegisterHotKey DefWindowProcW

gdi32

GetStockObject

advapi32

RegEnumValueW OpenProcessToken RegCreateKeyExW RegOpenKeyExW CreateProcessAsUserW LookupPrivilegeValueW RegSetValueExW RegCloseKey AdjustTokenPrivileges GetUserNameW ImpersonateLoggedOnUser RegOpenCurrentUser RevertToSelf

shell32

SHGetDesktopFolder SHGetSpecialFolderPathW SHOpenFolderAndSelectItems ord165

ole32

CreateStreamOnHGlobal CoTaskMemFree CoCreateGuid GetHGlobalFromStream CoInitialize

wtsapi32

WTSQueryUserToken

secur32

GetUserNameExW

shlwapi

PathFileExistsW StrChrW StrStrIW PathAddBackslashW SHGetValueW SHDeleteKeyW PathRemoveFileSpecW StrCatBuffW SHSetValueW wnsprintfW SHDeleteValueW PathIsDirectoryW StrNCatW PathAppendW PathQuoteSpacesW wnsprintfA wvnsprintfW PathFindFileNameW wvnsprintfA StrStrIA PathRemoveExtensionW PathFindExtensionW SHGetValueA SHCreateStreamOnFileW PathFileExistsA StrNCatA StrRChrW StrChrA

version

VerQueryValueW GetFileVersionInfoW

ws2_32

htons bind WSAGetLastError socket WSAStartup recvfrom

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

libcurl32

curl_easy_init curl_slist_append curl_free curl_easy_setopt curl_easy_perform curl_easy_strerror curl_easy_cleanup curl_global_init curl_easy_reset curl_slist_free_all curl_formfree curl_formadd curl_easy_getinfo curl_easy_escape

Name

.text

Size

260KB

Virtual Size

260KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourd

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

poda64.exe

IMPHASH 025995ad6e2ac4e2bd97c8f1f7d1331d
SHA256 6282307f7a329ea70730effc0dc1a466a41f2f8051011baf23fa87c1cf4c6013
MD5 0e557e20201b0d3247f915a239e2550b
SHA1 e7121595a0e18dca6c2de32eec185906a46b06c5
SHA512 a8a29c14ecd076f482453b7c1a779f440922601de382002875d4f576780e052a8805dfd695664a567c66a7a8faee013901377a79ed2e696c751c733e74834e8a
SSDEEP 6144:F2VoWt5qJjJpSeoS0y8WfHophyGR5bihu+2SS6viWSmaLj/w10KRGjG8x:koWt5qJHSNQfHoT5M2SmmaLLr
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

79:d4:d9:cd:d8:9c:45:c4:97:83:25:f0:ba:d9:55:17:ac:85:65:0d:07:52:eb:6e:9d:cf:03:ac:49:8f:8e:c1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 11, 2024

PE Signature issue

Digest

e7:ca:ea:cf:1a:75:35:e1:4d:f7:df:ea:a3:8a:19:76:27:42:02:97

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 11, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

247140

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

e:\po\trunk\modules\poagent\Release\poda64.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW lstrcpyA lstrlenW GetCurrentThread lstrcpynA lstrcpyW DeleteFileW SetProcessShutdownParameters lstrcatW GetLastError GetTempPathW CreateEventA WaitForSingleObject lstrcpynW LoadLibraryExA LoadLibraryExW VirtualAlloc SuspendThread VirtualFree GetThreadContext SetThreadContext FlushInstructionCache ResumeThread VirtualProtect SetFilePointer OutputDebugStringW GetFileSize GetWindowsDirectoryW SetFileAttributesW Module32NextW OpenEventW CreateToolhelp32Snapshot FindNextFileW Process32NextW CloseHandle Sleep lstrcmpA Module32FirstW RemoveDirectoryW CreateFileMappingW ProcessIdToSessionId Process32FirstW FindClose lstrcmpiA GetCurrentDirectoryW GetFileSizeEx TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetModuleHandleW GetProcAddress ExitProcess GetStartupInfoW RaiseException RtlPcToFileHeader RtlUnwindEx WriteFile GetStdHandle GetModuleFileNameA EncodePointer DecodePointer FlsGetValue FlsSetValue FlsFree SetLastError GetCurrentThreadId FlsAlloc HeapFree HeapAlloc HeapSize DeleteCriticalSection LeaveCriticalSection EnterCriticalSection FreeLibrary LoadLibraryA InitializeCriticalSectionAndSpinCount GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapSetInformation HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetLocaleInfoW GetLocaleInfoA HeapReAlloc GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale SetEvent GetLocalTime CreateEventW GetFileAttributesExW CreateThread lstrcmpiW GetModuleHandleA CreateFileA FindFirstFileW lstrlenA MapViewOfFile UnmapViewOfFile VirtualQuery CreateProcessW GlobalSize GlobalLock GetProcessHeap IsBadReadPtr InitializeCriticalSection OpenProcess LoadLibraryW CopyFileW GetFileAttributesW ReadFile CreateFileW lstrcmpW

user32

wsprintfW GetMessageW TranslateMessage RegisterClassExW IsWindow CreateWindowExW DispatchMessageA MessageBoxW UpdateWindow DefWindowProcW

gdi32

GetStockObject

advapi32

RegEnumValueW OpenProcessToken RegCreateKeyExW RegOpenKeyExW CreateProcessAsUserW LookupPrivilegeValueW RegSetValueExW RegCloseKey AdjustTokenPrivileges GetUserNameW ImpersonateLoggedOnUser RegOpenCurrentUser RevertToSelf

shell32

SHGetDesktopFolder SHGetSpecialFolderPathW SHOpenFolderAndSelectItems ord165

ole32

CreateStreamOnHGlobal CoTaskMemFree CoCreateGuid GetHGlobalFromStream CoInitialize

wtsapi32

WTSQueryUserToken

secur32

GetUserNameExW

shlwapi

PathFileExistsW StrChrW StrStrIW PathAddBackslashW SHGetValueW SHDeleteKeyW PathRemoveFileSpecW StrCatBuffW SHSetValueW wnsprintfW SHDeleteValueW PathIsDirectoryW StrNCatW PathAppendW wnsprintfA wvnsprintfW PathFindFileNameW wvnsprintfA StrStrIA PathRemoveExtensionW PathFindExtensionW SHGetValueA SHCreateStreamOnFileW PathFileExistsA StrNCatA StrRChrW StrChrA

version

VerQueryValueW GetFileVersionInfoW

ws2_32

htons bind WSAGetLastError socket WSAStartup recvfrom

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

libcurl64

curl_easy_init curl_slist_append curl_free curl_easy_setopt curl_easy_perform curl_easy_strerror curl_easy_cleanup curl_global_init curl_easy_reset curl_slist_free_all curl_formfree curl_formadd curl_easy_getinfo curl_easy_escape

Name

.text

Size

360KB

Virtual Size

360KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

101KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

13KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourd

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

podumper32.dll

IMPHASH 5cfe27b2e5d59cfab06cb80771f8da85
SHA256 1171d2e4218f2c8e0b0649275edebd9109f9d7e064f203bbcfb3d3fbbdc0182e
MD5 a09ada5e4b2b976f47b7a161a1568e9b
SHA1 fb84b0cd55e1d27b129e679bd437d1de2c5dc140
SHA512 f81ffa63a34995a17baff86e53a263a1b287b433c00c30c866794aecea594b5ee999f541465f46cf4a142b9c8ed558b6b2f98d41ef9a7a8b07b9d6c9e75e6b0c
SSDEEP 3072:5jtKRxb1VjHMdJmdHLLr1y0R3hZCG5sH/qg5fQI218AIO:dtgpquL10HXfQIOIO
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

13:1f:44:bb:56:bb:56:e8:3d:4b:9e:e5:85:a4:82:6b:2f:c2:44:5b:c2:1d:95:17:6d:79:ed:df:7d:59:b2:1b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Nov 11, 2021

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

0b:e9:a0:68:e4:0c:f6:c5:8d:f5:e9:c0:c8:0b:c4:db:e0:9a:d9:4d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 23, 2020 - Jan 22, 2032

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

5

Entry point

34105

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\podumper\Release\podumper32.pdb

kernel32

GetCurrentProcessId FileTimeToLocalFileTime CloseHandle GetLocalTime GetProcAddress lstrlenW CreateFileW GetModuleFileNameW FileTimeToSystemTime GetFileAttributesW LoadLibraryW GetSystemDirectoryW OpenProcess GetProcessTimes GetCurrentThread GetModuleHandleW WaitForSingleObject GetCurrentProcess LoadLibraryExA LoadLibraryExW SuspendThread GetThreadContext SetThreadContext FlushInstructionCache ResumeThread VirtualProtect InterlockedCompareExchange OutputDebugStringW SetFileAttributesW SetUnhandledExceptionFilter DisableThreadLibraryCalls lstrcmpA TerminateProcess UnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind HeapAlloc GetLastError HeapFree WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetConsoleCP GetConsoleMode Sleep ExitProcess SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc LoadLibraryA GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA HeapSize CreateFileA InitializeCriticalSectionAndSpinCount SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetStdHandle FlushFileBuffers FreeLibrary InterlockedExchange GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetEndOfFile GetProcessHeap ReadFile FindFirstFileW lstrlenA VirtualQuery CreateProcessW InitializeCriticalSection GetVersionExW lstrcpynW lstrcmpW GetCurrentDirectoryW FindClose Process32FirstW RemoveDirectoryW Module32FirstW Process32NextW lstrcmpiW GetModuleHandleA FindNextFileW CreateToolhelp32Snapshot Module32NextW DeleteFileW lstrcpyW

user32

MessageBoxW

shell32

SHCreateDirectoryExW

shlwapi

wvnsprintfW PathFindFileNameW PathFileExistsW SHGetValueW StrCmpNIW wvnsprintfA StrCatW wnsprintfW PathAppendW

Name

.text

Size

103KB

Virtual Size

102KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourd

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

podumper64.dll

IMPHASH d11fa07a19b5e71ef12b30ec447f6056
SHA256 da057a270bf9a90e64f235ed8f8ab6a39afbaee2f2a72cdd670282aed21c2047
MD5 748455fea15552a6d22b41540444c98b
SHA1 fa0185ed26a58810f2219a5e00e0ab6927137386
SHA512 fd4bd0cd9586a0ddaf42e609c7b37500956373a443e880a8e469cd5d441c3579d23dcb9c0cde854151c1cc8fbcca015bfdcea8be6dfe8b0049805f86dca882f5
SSDEEP 3072:i95N+2cp580COoGQBYfzuq/j6oooFRjC3DhuCpMYum/BR5GRqgZ2MV3:iJ4W0H4Yq46oxchuC2Yu4i57V3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

Digest

bc:86:5c:70:a4:e7:c9:76:5c:fa:7d:65:60:ab:54:81:06:dc:4d:39:8b:dd:b3:4f:81:a5:01:7c:96:df:a9:c0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Nov 11, 2021

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

dc:bc:c0:9c:62:cf:11:a0:49:9e:83:01:f9:2c:30:13:cf:1a:89:e6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 23, 2020 - Jan 22, 2032

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

2

Major OS version

5

Entry point

42972

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\podumper\Release\podumper64.pdb

kernel32

GetCurrentProcessId FileTimeToLocalFileTime CloseHandle GetLocalTime GetProcAddress lstrlenW CreateFileW GetModuleFileNameW FileTimeToSystemTime GetFileAttributesW LoadLibraryW GetSystemDirectoryW OpenProcess GetProcessTimes GetCurrentThread GetModuleHandleW WaitForSingleObject GetCurrentProcess OutputDebugStringW SetFileAttributesW lstrcpyW DeleteFileW Module32NextW CreateToolhelp32Snapshot FindNextFileW SetUnhandledExceptionFilter DisableThreadLibraryCalls lstrcmpA TerminateProcess UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapAlloc GetLastError HeapFree WriteFile GetStdHandle GetModuleFileNameA EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetConsoleCP GetConsoleMode Sleep ExitProcess SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LoadLibraryA GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA HeapSize CreateFileA InitializeCriticalSectionAndSpinCount SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetStdHandle FlushFileBuffers HeapReAlloc FreeLibrary GetStringTypeA GetStringTypeW LCMapStringA LCMapStringW SetEndOfFile GetProcessHeap ReadFile VirtualQuery VirtualProtect ResumeThread FlushInstructionCache SetThreadContext GetThreadContext VirtualFree SuspendThread VirtualAlloc LoadLibraryExW LoadLibraryExA FindFirstFileW lstrlenA CreateProcessW InitializeCriticalSection GetVersionExW lstrcpynW lstrcmpW GetCurrentDirectoryW FindClose Process32FirstW RemoveDirectoryW Module32FirstW Process32NextW lstrcmpiW GetModuleHandleA

user32

MessageBoxW

shell32

SHCreateDirectoryExW

shlwapi

wvnsprintfW PathFindFileNameW PathFileExistsW SHGetValueW StrCmpNIW wvnsprintfA StrCatW wnsprintfW PathAppendW

Name

.text

Size

117KB

Virtual Size

116KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourd

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

poflt32.sys

IMPHASH 38fe47ff1ab13be87731fb7741418312
SHA256 7f0665c3bfa103512de01c2ffc7b3ff7849ef13a86b969312c6d5a0580d798c1
MD5 52b0a6992a91e7dadd85eedb78366a49
SHA1 8eb30c1db67da4ed313fddb94093eff647a5ed65
SHA512 07c84ce6d8b8c8fd2aba89060316939b9ec854ca50dbf6ee3f8e0724f40507e0aae58c93a19c1105afb90cfb9f70f30e51bab1e37dab612057c68aa9353a9e77
SSDEEP 768:dz4OeP0+qzDKkBaeFQgNGfoXp/skNlTD2om+8IxGL:l4VLqzmEaejNq2pZNDk+lxGL
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

4a:8d:04:60:a6:dd:14:97:df:a0:46:a6:5f:38:87:85:39:ec:e6:e4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jul 27, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Minor OS version

1

Major OS version

6

Entry point

4886590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\po\trunk\modules\poflt\sys\Debug\i386\poflt32.pdb

Name

.text

Size

27KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1024B

Virtual Size

932B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

4.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

832B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

poflt64.sys

IMPHASH e5e37374456e5f4f3f3e614869606fbd
SHA256 4413334713427103e0f50fd300c961193376e75569d82bfadddc1923d0d2f6d3
MD5 a35177f3cacf2a9691b22ccc5877b351
SHA1 ef19d66df572d0e18541eaa85432d8fae0f51a07
SHA512 7c3997424776fdfc90e78fa5942c3c59ce47a43e5b980f23c71b17a0ade262b6ec6d6806bd1db3d72bcdec86ba622c7e0bb0bfdc87aa13d522888d8a65852134
SSDEEP 768:yu0oKA2srwIF+f1vEd4iT1v3pCuqOFCmOBVb+c4JX13W049zo7:yu0rnIF+NvELZ5lMPR+colvwzo7
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

17:98:99:99:55:70:f3:c5:39:65:c3:c2:2b:2e:06:66:79:56:c0:e4:f7:7c:1b:91:9d:0c:c3:d9:98:9b:7f:85

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 26, 2024

Minor OS version

1

Major OS version

6

Entry point

4898916

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

e:\po\trunk\modules\poflt\sys\Debug\amd64\poflt64.pdb

Name

.text

Size

33KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

4.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

832B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

84B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

poflt64_win7.sys

IMPHASH e5e37374456e5f4f3f3e614869606fbd
SHA256 007cbfb75b79f65500ab4568c9cae1a1bae83b89cb3df9de7573d8a392bcd049
MD5 b2d522bd91b7d775051727e5ce0eb6f8
SHA1 96e9a83b664092e83024ba872d1656954b68ee97
SHA512 c46387d00d92d494642709ec2f999e6abee398d02f1f38d6402c304af1489c7777ab9b8957f0212ab79a6db8f4363336b7f77343a126d94fa49accca946a0b93
SSDEEP 768:Ku0oKA2srwIF+f1vEd4iT1v3pCuqOFCmOBVb+c4JIeUeu9hRKRM8:Ku0rnIF+NvELZ5lMPR+coIeUeu9hRB8
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

c1:a9:2d:5a:fc:24:44:c1:fd:8e:3a:60:4e:78:bc:ac:da:f8:da:d1

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Microsoft Authenticode(tm) Root Authority,O=MSFT,C=US

Serial Number

01

Issuer

CN=Microsoft Authenticode(tm) Root Authority,O=MSFT,C=US

Timespan

Jan 1, 1995 - Dec 31, 1999

Subject

Serial Number

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

Issuer

Timespan

Jan 10, 1997 - Dec 31, 2020

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:1c:b2:8a:00:00:00:00:00:26

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Serial Number

79:ad:16:a1:4a:a0:a5:ad:4c:73:58:f4:07:13:2e:65

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 9, 2001 - May 9, 2021

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

72:94:04:10:1f:3e:0c:a3:47:83:7f:ca:17:5a:84:38

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 1, 2005 - Nov 1, 2025

Minor OS version

1

Major OS version

6

Entry point

4898916

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

e:\po\trunk\modules\poflt\sys\Debug\amd64\poflt64.pdb

Name

.text

Size

33KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

4.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

832B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

84B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

pomqc3.dll

IMPHASH 227910cfacfe1c59467a7fc01c7bdff8
SHA256 4fce6d4b12971e3109092915f12a254ee1666b378de0636b799cc77443734430
MD5 f55b80b90410cd41451bd7ffa8f588cc
SHA1 c58b5ed579ce8fc7c24239fe0ecb8f74d57c4d97
SHA512 376f80915cf9eaec0e342467717441a280a6fae26dad211c722979b669ebc44f1fea0d54a12c451ab2bc74ab875e1f272846ff34508ab4ced8cd87f84b68dd03
SSDEEP 12288:GnsDMOeJQKX0p4iyOIlni66c75+M1283Pnhb1EHULGZhHU6s:GIM9Xs4iyOIw66d8fnp5qZFU6s
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

11:e1:2d:af:eb:bc:98:9e:4c:f1:72:a6:43:f4:09:13:e0:67:54:e5:50:5f:41:f9:d1:c4:39:c5:3b:16:f6:5c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 4, 2023

PE Signature issue

Digest

23:eb:9d:6a:56:38:0f:ad:b9:48:0d:b1:71:8c:5e:bc:9b:2f:08:1a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 4, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

1

Major OS version

5

Entry point

210887

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\po\trunk\modules\pomqc3\Release\pomqc3.pdb

shlwapi

wnsprintfW wvnsprintfW wvnsprintfA SHGetValueA PathFindFileNameW StrChrA SHGetValueW SHSetValueW StrCmpNIA SHSetValueA wnsprintfA SHDeleteValueA PathAppendW StrStrIA

ws2_32

WSAGetOverlappedResult setsockopt WSAGetLastError htons WSAWaitForMultipleEvents send recv connect WSASocketW WSACreateEvent WSACloseEvent closesocket WSAIoctl bind inet_ntoa inet_addr WSAStartup socket

iphlpapi

GetAdaptersInfo

dnsapi

DnsQuery_A DnsFree

kernel32

VirtualFree VirtualAlloc LoadLibraryExW FreeLibraryAndExitThread FreeLibrary GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask VirtualProtect GetNumaHighestNodeNumber DeleteTimerQueueTimer ReleaseSemaphore CreateTimerQueueTimer GetSystemDirectoryW GetThreadPriority SetThreadPriority SwitchToThread SignalObjectAndWait GetProcessAffinityMask CreateTimerQueue InitializeSListHead GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter InterlockedPopEntrySList ChangeTimerQueueTimer InterlockedPushEntrySList lstrlenW CreateEventW GetWindowsDirectoryW GetCurrentProcessId lstrcpyA lstrcpyW SetLastError GetModuleFileNameW GetCurrentThreadId lstrcmpA GetModuleHandleA CreateThread GetProcAddress ReadFile WriteFile CreateFileW Sleep CloseHandle GetLastError LoadLibraryW GetModuleHandleW CancelIo HeapFree EnterCriticalSection InterlockedFlushSList GetCurrentProcess TerminateProcess LeaveCriticalSection InitializeCriticalSection lstrlenA FindClose WaitForSingleObject GetVersionExW GetACP CreateToolhelp32Snapshot MultiByteToWideChar GetFileAttributesExW SetEvent HeapAlloc Module32FirstW GetLocalTime SetFilePointerEx GetProcessHeap WideCharToMultiByte lstrcmpiA Module32NextW GetTickCount DisableThreadLibraryCalls TerminateThread DeleteCriticalSection UnhandledExceptionFilter GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DecodePointer EncodePointer GetExitCodeThread GetCurrentThread WaitForSingleObjectEx DuplicateHandle QueryPerformanceCounter TryEnterCriticalSection QueryDepthSList UnregisterWaitEx RaiseException RtlUnwind ExitThread GetModuleHandleExW HeapReAlloc ExitProcess GetModuleFileNameA GetStdHandle GetFileType GetConsoleMode ReadConsoleW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleCP FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle WriteConsoleW HeapSize VirtualQuery

user32

MessageBoxA

advapi32

CryptReleaseContext CryptGenRandom CryptAcquireContextW

pomqc364.dll

IMPHASH 5d5b9358878f4cb4b007dd2ecf83ea69
SHA256 e0c9f5ad15762aaab2e075f6b825fb5b07dd3c2ae461c5977fcb8a4afdb40891
MD5 c64a3be18528a452de7c75c5120ad568
SHA1 4e5a67943d9d5d75484be9892ab85772f7f19606
SHA512 f2e66724d60bf85babee64691b380594b5912bb6f918070b161d93ca8306dd160a43c4b1f56a0315f709ff0171bafe6fc5eaad201ecf179f110d639a3c1effb6
SSDEEP 12288:3WB6yh48nEEPcBDVNiJ/E7ZNRJ9UZnimoJklliD872ZO:k6ygEPcBDVq/+RJ9UZnPknc2ZO
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

57:c1:0a:c7:92:c4:59:a6:4a:41:e7:59:60:2d:3d:02:da:78:eb:1e:be:27:1f:2c:ff:50:2a:36:61:2b:52:cb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 4, 2023

PE Signature issue

Digest

7c:c5:28:79:eb:ca:b8:0b:75:b8:2d:36:4d:e6:d7:0d:9a:c8:91:55

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 4, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

251992

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\po\trunk\modules\pomqc3\Release\pomqc364.pdb

shlwapi

wnsprintfW wvnsprintfW wvnsprintfA SHGetValueA PathFindFileNameW StrChrA SHGetValueW SHSetValueW StrCmpNIA SHSetValueA wnsprintfA SHDeleteValueA PathAppendW StrStrIA

ws2_32

WSACreateEvent WSAWaitForMultipleEvents WSAGetOverlappedResult setsockopt WSAGetLastError htons WSASocketW connect socket send WSACloseEvent closesocket WSAIoctl bind inet_ntoa inet_addr WSAStartup recv

iphlpapi

GetAdaptersInfo

dnsapi

DnsQuery_A DnsFree

kernel32

VirtualFree VirtualAlloc LoadLibraryExW FreeLibraryAndExitThread FreeLibrary GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask VirtualProtect GetNumaHighestNodeNumber DeleteTimerQueueTimer ReleaseSemaphore CreateTimerQueueTimer GetLogicalProcessorInformation GetThreadPriority SetThreadPriority SwitchToThread SignalObjectAndWait GetProcessAffinityMask CreateTimerQueue InitializeSListHead GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter InterlockedPopEntrySList ChangeTimerQueueTimer InterlockedPushEntrySList lstrlenW CreateEventW GetWindowsDirectoryW GetCurrentProcessId lstrcpyA lstrcpyW SetLastError GetModuleFileNameW GetCurrentThreadId lstrcmpA GetModuleHandleA CreateThread GetProcAddress ReadFile WriteFile CreateFileW Sleep CloseHandle GetModuleHandleExW GetLastError LoadLibraryW CancelIo HeapFree EnterCriticalSection InterlockedFlushSList TerminateProcess LeaveCriticalSection InitializeCriticalSection lstrlenA FindClose WaitForSingleObject GetVersionExW GetACP CreateToolhelp32Snapshot MultiByteToWideChar GetFileAttributesExW SetEvent HeapAlloc Module32FirstW GetLocalTime SetFilePointerEx GetProcessHeap GetModuleHandleW WideCharToMultiByte lstrcmpiA Module32NextW GetTickCount VirtualQuery DisableThreadLibraryCalls TerminateThread DeleteCriticalSection UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DecodePointer EncodePointer GetExitCodeThread GetCurrentThread WaitForSingleObjectEx DuplicateHandle QueryPerformanceCounter TryEnterCriticalSection QueryDepthSList UnregisterWaitEx RtlPcToFileHeader RaiseException RtlUnwindEx ExitThread HeapReAlloc ExitProcess GetModuleFileNameA GetStdHandle GetFileType GetConsoleMode ReadConsoleW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleCP FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle WriteConsoleW HeapSize GetCurrentProcess

user32

MessageBoxA

advapi32

CryptReleaseContext CryptGenRandom CryptAcquireContextW

Name

.text

Size

521KB

Virtual Size

521KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

185KB

Virtual Size

184KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

15KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

poprotect32.dll

IMPHASH 05c278290476de12a0382aef5745b89e
SHA256 142441c65b22b43c97ea50ba953422c4fee111292af00a35c2a5e07ac9b3dab7
MD5 cfa1cd47037ad77acd31df830b073a75
SHA1 2704c84a71dfecfe87e23b08d1a6c2ef86546ceb
SHA512 9f683ca3455041647ca33e1634431fa2fbe58e140dafe034fbaa61a462ec2c7d37599a3dd1e4326d4acd4581de38d0581feb0c3ab9fa7e895b65b7e5934e28e3
SSDEEP 6144:fCKjV1osrsjEVttMfv/KZNAZxkNGkeej6k65js2iEbxAmmGXXG6E:fCKjV1olEVtt6AAZxkNGkfG55jYiT0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

24:ec:f1:6c:b1:4f:dd:2c:0f:25:42:08:bc:18:cf:18:6c:60:13:90:d7:e1:0a:18:01:a4:88:24:32:d2:cb:95

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

PE Signature issue

Digest

8a:ea:67:82:20:55:27:86:c0:a0:d5:d6:0a:8e:e2:e0:90:31:64:a6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

168227

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\poprotect\release\poprotect32.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP DeleteCriticalSection CreateEventW EnterCriticalSection SetLastError GetTempPathW LeaveCriticalSection InitializeCriticalSection OutputDebugStringW WaitForSingleObject lstrlenW lstrcpynW OpenProcess DeviceIoControl CreateThread GetWindowsDirectoryW GetSystemDirectoryW CloseHandle CreateFileW Sleep SetFilePointer lstrcpyA lstrcpyW LocalFree DeleteFileW Module32NextW OpenEventW GetFileAttributesExW CreateToolhelp32Snapshot lstrcatW GetModuleHandleA DisableThreadLibraryCalls lstrcmpA GetLastError TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW HeapSize ExitProcess SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc LoadLibraryA GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale InterlockedExchange InitializeCriticalSectionAndSpinCount CreateFileA lstrlenA VirtualQuery lstrcpynA CreateProcessW SetEvent GetLogicalDrives LoadLibraryW FormatMessageW GetVersionExW GetFileAttributesW ReadFile GetModuleFileNameW GetLocalTime Process32FirstW ProcessIdToSessionId QueryDosDeviceW Module32FirstW Process32NextW lstrcmpiW WriteConsoleW

user32

GetWindowRect GetDesktopWindow IsWindow MoveWindow SetWindowTextW GetWindowTextLengthA DialogBoxParamA SetWindowTextA EndDialog GetDlgItem InvalidateRect GetWindowTextA SendMessageA SetTimer

advapi32

RegOpenKeyExW ControlService CreateServiceW CloseServiceHandle OpenProcessToken DeleteService OpenSCManagerW OpenServiceW CreateProcessAsUserW InitializeSecurityDescriptor SetSecurityDescriptorDacl StartServiceW QueryServiceStatus SetFileSecurityW AllocateAndInitializeSid SetEntriesInAclW RegEnumValueW FreeSid GetUserNameW RegCreateKeyExW RegNotifyChangeKeyValue RegCloseKey

shlwapi

StrStrIA StrStrIW wnsprintfW PathFileExistsW PathMatchSpecW PathFindFileNameW SHDeleteKeyW PathAppendW wvnsprintfW PathIsDirectoryW PathFindExtensionW StrNCatW PathRemoveFileSpecW StrChrW SHGetValueW StrCmpNIW SHSetValueW StrChrA wnsprintfA wvnsprintfA StrCatW

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

psapi

GetProcessImageFileNameW

shell32

ord165

ole32

CoCreateGuid

poprotect532.sys

IMPHASH 9066601dbfbaf243fce2b34e0ba80598
SHA256 b5a96065c39c55ac80e741561fd03e23664b634fa98debfd5aec384ac2428a7f
MD5 389747e19d49bd9b83fcc738f18c111e
SHA1 b6ad2e77e42c590803ec12e1fceff0a24ccda756
SHA512 ade6eabb254b069dafbde8a04a911cbf11d7ec27b38839d14f4cc9b40c7509ca7025162a528b94d2e617033c30564e0e95aa0ac672d3b1d62df866babdc1dc47
SSDEEP 768:KRJOmcIYIyUi/Xd9qjZ2tT5BGirP/1wvMGD5ekNlTD2om+8IxGJ:mopZd9aG/1/6fDpNDk+lxGJ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

28:5a:ac:c6:dd:be:0a:ab:ad:5e:91:65:fb:97:34:72:d9:15:dd:df

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jul 27, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Minor OS version

1

Major OS version

6

Entry point

453182

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\po\trunk\modules\poprotect\Debug\i386\poprotect532.pdb

Name

.text

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

512B

Virtual Size

484B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

407KB

Virtual Size

407KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

896B

Virtual Size

880B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

poprotect632.sys

IMPHASH 320c27af019f2287474068c36cca9746
SHA256 c720e4bf878f7a45c421324269fb8ff9de6c49fa4396f1966ab4b7f76c8f28e9
MD5 dcb7048a5438c70743f75c087d4dd7b6
SHA1 608563b132e8b18bdc3f5acf9ed0a0ddd87c0a7f
SHA512 f2484b98e88189956b20aefa941863c67036d6fbe2d4ca199f696e7882d3058210e841cb4cd0acb53c4d49139988665f5e5a5fea18d69f66f097e5202eb753dd
SSDEEP 768:+sgJK9nZJG1unnjr++HuCRxRbyXbLi3fkNlTD2om+8IxGH1Op:+ZgLGojrtOdXbm8NDk+lxGV+
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

0e:53:8a:ef:d7:27:a3:0b:b1:e6:97:2e:7f:a1:af:51:11:7a:cf:8e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jul 27, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Minor OS version

1

Major OS version

6

Entry point

462910

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\po\trunk\modules\poprotect\Debug\i386\poprotect632.pdb

Name

.text

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

512B

Virtual Size

358B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

407KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

880B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

poprotect64.dll

IMPHASH a3ea2437df0e6f7c328bf3dd15fc51e2
SHA256 e475b983c1eb0682aa968750a5c90c1d4baa73000ca8dc3a7db44d4742070270
MD5 521fff8fd00f17e9c9e7dec86604c309
SHA1 788bf8f4e0bde737ce9f46f5ccc7d20e4f21d9f9
SHA512 81e0a0c971745f7cf64c90e48315d001ad702c9bd2acebe702e846edc81ed861f1591a6120001097bb01db3acb2f17fcc21ff10a91cd3a5b91bee0d8869550cb
SSDEEP 6144:LLoRIc7nUJUnxSHCMxCm7MXMpmT73dPrMSsm6zdGOwR+wWNa/sSp/lsEGgsGFr:LMRIcTUpHxQMpmTLR8zxwR+K/sAJ9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

73:69:94:eb:60:43:cf:d2:d0:12:74:9f:8a:dd:1c:fd:ba:f9:f3:6b:6b:ad:25:90:52:8b:d7:5c:f9:eb:06:cc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

PE Signature issue

Digest

04:68:4f:34:81:ec:55:d5:57:99:b8:21:1f:c7:f2:fb:58:b9:c8:22

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

251356

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\poprotect\release\poprotect64.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP DeleteCriticalSection CreateEventW EnterCriticalSection SetLastError GetTempPathW LeaveCriticalSection InitializeCriticalSection OutputDebugStringW WaitForSingleObject lstrlenW lstrcpynW OpenProcess DeviceIoControl CreateThread GetWindowsDirectoryW GetSystemDirectoryW CloseHandle CreateFileW Sleep SetFilePointer lstrcpyA lstrcpyW LocalFree DeleteFileW Module32NextW OpenEventW GetFileAttributesExW CreateToolhelp32Snapshot lstrcatW GetModuleHandleA lstrcmpiW DisableThreadLibraryCalls lstrcmpA GetLastError TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapAlloc HeapFree EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW HeapSize GetModuleHandleW GetProcAddress ExitProcess SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryA GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale HeapReAlloc InitializeCriticalSectionAndSpinCount CreateFileA lstrlenA VirtualQuery lstrcpynA CreateProcessW SetEvent GetLogicalDrives FormatMessageW GetVersionExW GetFileAttributesW ReadFile GetModuleFileNameW GetLocalTime Process32FirstW ProcessIdToSessionId QueryDosDeviceW Module32FirstW Process32NextW WriteConsoleW

user32

GetWindowRect GetDesktopWindow IsWindow MoveWindow SetTimer GetWindowTextLengthA SendMessageA GetWindowTextA InvalidateRect GetDlgItem EndDialog SetWindowTextA DialogBoxParamA SetWindowTextW

advapi32

StartServiceW RegOpenKeyExW ControlService CreateServiceW CloseServiceHandle OpenProcessToken DeleteService OpenSCManagerW OpenServiceW CreateProcessAsUserW InitializeSecurityDescriptor SetSecurityDescriptorDacl QueryServiceStatus SetFileSecurityW AllocateAndInitializeSid SetEntriesInAclW RegEnumValueW GetUserNameW RegCreateKeyExW RegNotifyChangeKeyValue RegCloseKey FreeSid

shlwapi

PathMatchSpecW PathFileExistsW wnsprintfW StrStrIW PathFindFileNameW SHDeleteKeyW PathAppendW wvnsprintfW PathIsDirectoryW PathFindExtensionW StrNCatW PathRemoveFileSpecW StrChrW SHGetValueW StrCmpNIW SHSetValueW StrChrA wnsprintfA wvnsprintfA StrCatW StrStrIA

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

psapi

GetProcessImageFileNameW

shell32

ord165

ole32

CoCreateGuid

poprotect664.sys

IMPHASH ac4976b0116eee1e3b1ec55e44aaf183
SHA256 8af07db392cad49f934b936ab0b938802f1d18aae4ac5fcdeb7f3a6b644d46d9
MD5 6b4ade0a85fe951c5fd52c963d15a8a8
SHA1 357cbbc717c28aec612fb9f88c2382295cc879ef
SHA512 3d7c562f200107b1107c3f7e8580924d1ff90239fd3ad4f5f43ffae824d1ccd6b41013db3052df9c35cf4fbefab402e0e74331448e3d511f31b7aa669db9a6c7
SSDEEP 768:9UAqO7CpfLUXeyDgjN3GNtsSPDQ2oykDFRCHCtT13HZL9zAQV:9B7CNWxShGjsSPDQ2JkBAHmR3Zhzv
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

6b:89:2c:12:18:6b:ef:4e:c8:13:d4:8f:34:8c:8f:ed:55:28:86:8b:9f:2e:b5:cb:10:34:1e:bf:6e:f6:86:79

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 26, 2024

Minor OS version

1

Major OS version

6

Entry point

475236

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

e:\po\trunk\modules\poprotect\Debug\amd64\poprotect664.pdb

Name

.text

Size

40KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

407KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

880B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

poprotect664_win7.sys

IMPHASH ac4976b0116eee1e3b1ec55e44aaf183
SHA256 c059413f3182c865f56a45db154b52ec85e77a57716760a8dc71ad21b1f8d39f
MD5 4b19aa663aa0519e124ed10e4882bb07
SHA1 dbe715d12a981bcacc750d90132a94a008b3987d
SHA512 8bca61a75373ef9f29c49ef987bd49e00c912d1df447e60aa2ca05ffc01c8c7d23ee0d8d93f3eba9c873cd599d4a36b3fcf827c2221cbd5276f83b2bb46f6acf
SSDEEP 1536:HB7CNWxShGjsSPDQ2JkBAHmOeUeu9hRBD:HdCQxLoSznGOeUe23
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

c9:1a:cb:9c:7e:14:f7:48:bd:08:b1:38:01:77:dc:b5:7f:91:1f:01

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Microsoft Authenticode(tm) Root Authority,O=MSFT,C=US

Serial Number

01

Issuer

CN=Microsoft Authenticode(tm) Root Authority,O=MSFT,C=US

Timespan

Jan 1, 1995 - Dec 31, 1999

Subject

Serial Number

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

Issuer

Timespan

Jan 10, 1997 - Dec 31, 2020

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:1c:b2:8a:00:00:00:00:00:26

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Serial Number

79:ad:16:a1:4a:a0:a5:ad:4c:73:58:f4:07:13:2e:65

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 9, 2001 - May 9, 2021

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

72:94:04:10:1f:3e:0c:a3:47:83:7f:ca:17:5a:84:38

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 1, 2005 - Nov 1, 2025

Minor OS version

1

Major OS version

6

Entry point

475236

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

e:\po\trunk\modules\poprotect\Debug\amd64\poprotect664.pdb

Name

.text

Size

40KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

407KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

880B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

poscsaver.exe

IMPHASH 41e00b6fa32009ef34da6e4208049d1e
SHA256 771cd56130a201297ecc66e817959a79e946a51e7d01499fa39f663287e7c11d
MD5 10d177c46afd644bf3d39cba2d9120ad
SHA1 35c5bdd9b28ad3fc575f4ecce98093e97d8018fe
SHA512 e8eb6c6753d7530d05438e0412f32faa336d8147dba0182563da5251cc7363cafd60538c8ab5ecf2eb0347a87f26384eb6d749178db4db9939c45e368a8ca5f3
SSDEEP 1536:+OZ5eQSKxd6hvNoU934sXFQRqicdEPpfJtTOcNDk+lxG2k+lxGKP0A:3ZYQxxd+u7iFQRqiUqLtTD1Js2JsKP0A
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

05:65:f6:ad:bd:22:98:4a:95:1a:09:33:5d:b5:8d:71:5c:80:71:10:94:40:76:28:a7:c6:f7:15:85:c4:d3:ab

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Feb 5, 2024

PE Signature issue

Digest

72:35:11:62:1e:d5:71:66:5b:d0:0d:b2:12:dd:81:f0:83:ff:3b:4e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Feb 5, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

19419

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\po\trunk\modules\deskmgr\Release\poscsaver.pdb

kernel32

SetFilePointer GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW IsDebuggerPresent GetFileAttributesW CloseHandle Module32NextW CreateToolhelp32Snapshot Module32FirstW lstrlenW GetModuleFileNameW lstrcpynW LocalFree lstrcmpiW GetCommandLineW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetCommandLineA GetStartupInfoA RaiseException RtlUnwind WriteFile GetStdHandle GetModuleFileNameA GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId GetLastError InterlockedDecrement HeapFree HeapAlloc Sleep HeapSize ExitProcess FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryA LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage GetLocaleInfoA VirtualAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW OutputDebugStringW lstrcpyW CreateFileA VirtualQuery FlushFileBuffers

user32

CreateWindowExW IsWindow MessageBoxW SetWindowPos DispatchMessageW DefWindowProcW UpdateWindow GetUserObjectInformationW ShowWindow ReleaseDC RegisterClassExW ShowCursor TranslateMessage GetDC CloseDesktop GetClientRect OpenInputDesktop KillTimer PostMessageW PostQuitMessage GetMessageW GetSystemMetrics DestroyWindow SetTimer LockWorkStation

gdi32

BitBlt DeleteDC CreateDIBSection DeleteObject SelectObject CreateCompatibleDC

shell32

CommandLineToArgvW

gdiplus

GdiplusStartup GdipCloneImage GdipCreateFromHDC GdipFree GdipDeleteGraphics GdipDrawImageRectI GdipLoadImageFromFile GdiplusShutdown GdipDisposeImage GdipAlloc

shlwapi

PathFindFileNameW StrToIntW wnsprintfW wvnsprintfW StrCatW PathAppendW SHGetValueW StrChrW StrCmpNIW

potdi323.sys

IMPHASH e7540f45a43a5cf626a3352fbbf462f0
SHA256 f5c605a2f423e5df86679cc56ef11fd9beee32de5643f5ec932e6c4d7562494c
MD5 f29aa1c6dc24d5234274989f61b72fef
SHA1 1b928384193d36a5a7789c688472ff2106c124d4
SHA512 d785890a56a7ddd1903c2b34aea9989b363bca1b80f91cd189fbb1be4ecef8fb1846a45aea0863478675c1cfd4ecb7c262c4afcd957330d630bc3585e40d546d
SSDEEP 768:FkU8KdsznIbd09hQWKX3RPMCRvQIP4aHkNlTD2om+8IxGd7:qKdWno+9IXBBP4a0NDk+lxGd7
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

f4:ef:4b:30:5f:eb:c7:94:77:e9:90:dc:cb:a4:cb:4e:c2:6a:08:fd

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jul 27, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Minor OS version

1

Major OS version

6

Entry point

235070

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\po\trunk\modules\powall\driver\Debug\i386\potdi323.pdb

Name

.text

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

384B

Virtual Size

286B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

203KB

Virtual Size

203KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

896B

Virtual Size

840B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

powall32.dll

IMPHASH 78db26e221f3c03c94bd4b1cd62eaf1a
SHA256 001446b1f192bdc0d85c16f490e86cf9f14337c92eb04468ff55f0802c9bbaaa
MD5 e3052dec9d13091848801edc23caee01
SHA1 65741b4f83a2f45c79b902453e258dbd57b912fd
SHA512 1255e636f7a6e6cec2b42dd414dee7008f7de1def296cde3a45c47fd182a0a5f5d2cf7d69a223f0a6c77ae0d0c17146bc71225dac2a01a418cf9ffbf1f5d8647
SSDEEP 12288:cje5VYqTpopaMGm2yCU4qnns0YO46IXiKlcRP:HbQGmhW874PyKE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

2d:b6:60:f1:25:73:b5:b2:43:f0:1f:ca:ba:83:ee:1b:fb:3a:85:d1:6c:8d:73:93:11:0e:c1:9c:38:79:25:ab

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 3, 2023

PE Signature issue

Digest

cc:f5:f5:99:2d:2b:df:b9:10:b8:8e:6d:68:19:3d:16:2a:3f:42:b0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 3, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

320508

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\powall\Release\powall32.pdb

kernel32

FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleMode lstrcpyW GetProcAddress GetConsoleCP GetConsoleOutputCP LocalAlloc lstrcmpW GetFileAttributesW CopyFileW LoadLibraryW GetModuleHandleW lstrcpynA ExpandEnvironmentStringsW lstrcmpiW CreateThread DeleteFileW DisableThreadLibraryCalls Sleep lstrcmpA CloseHandle DeviceIoControl SetFilePointer OutputDebugStringW GetWindowsDirectoryW lstrcpyA Module32NextW GetFileAttributesExW CreateToolhelp32Snapshot FindNextFileW lstrcatW GetModuleHandleA Process32NextW Module32FirstW GetLastError CreateFileW lstrcpynW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree HeapAlloc HeapReAlloc GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW HeapCreate HeapDestroy VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime FreeLibrary InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale CreateFileA FindFirstFileW lstrlenA VirtualQuery GetLogicalDrives InitializeCriticalSection OpenProcess GetVersionExW ReadFile GetModuleFileNameW lstrlenW GetFileSizeEx GetCurrentDirectoryW lstrcmpiA FindClose Process32FirstW QueryDosDeviceW WriteConsoleW

user32

GetWindowRect GetDesktopWindow IsWindow DialogBoxParamA SendMessageW SetWindowTextA EndDialog GetDlgItem GetWindowTextW InvalidateRect GetWindowTextA PostMessageW MoveWindow GetWindowTextLengthA LoadIconW SendMessageA SetTimer

ws2_32

htonl htons ntohl inet_ntoa inet_addr

iphlpapi

GetExtendedUdpTable GetExtendedTcpTable GetAdaptersInfo

shlwapi

wvnsprintfA wnsprintfA StrChrA StrCatW StrCmpNW StrCmpNIW SHGetValueW StrChrW SHSetValueW PathFindExtensionW StrStrIA StrStrW StrStrIW StrStrA PathFileExistsW PathAppendW PathMatchSpecW wnsprintfW wvnsprintfW PathIsDirectoryW StrNCatW PathFindFileNameW

psapi

GetProcessImageFileNameW

dnsapi

DnsFree DnsQuery_A

advapi32

ControlService CreateServiceW CloseServiceHandle DeleteService OpenSCManagerW OpenServiceW StartServiceW QueryServiceStatus

powall64.dll

IMPHASH 6cc850aa7849a1d17eba87fa053f2d42
SHA256 c17ed69e9937f9d8c6fb2cba401117500c906b15c0fb9b797dc8ce16abc15b94
MD5 f0afa7ba5a3368467f1f70c073de7120
SHA1 bd4e44fba11e24b0f254e56034bcce0bceff16bc
SHA512 17821d47b3102f04c58d585a7506c630b4024544dcf973c3fcc68d4f627f8e493c952ee0748c06eba50412e8f6a1ebf1577214c891a4061256052b88bfe810a6
SSDEEP 6144:rtp44CdnXZEqKk8PcRmRWx1EFsCD8Q+x4DGs+cX6Txx6VkgKcFWTJg+s4niDV6dz:5pBNEMAEFeId3JVGcsVniC
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

1d:a1:46:73:2f:b7:e9:17:79:9d:3d:91:a1:a9:f2:36:2b:55:64:94:53:9b:d3:57:63:c4:3f:59:27:6b:11:b7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 3, 2023

PE Signature issue

Digest

86:84:0e:09:2b:a0:01:84:68:0d:3a:d8:d1:3c:44:69:87:2d:00:98

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 3, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

413244

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\powall\Release\powall64.pdb

kernel32

SetStdHandle WriteConsoleA GetConsoleOutputCP FlushFileBuffers lstrcpyW GetProcAddress lstrcmpW GetConsoleMode GetConsoleCP LocalAlloc GetFileAttributesW CopyFileW LoadLibraryW GetModuleHandleW lstrcpynA ExpandEnvironmentStringsW lstrcmpiW CreateThread DeleteFileW DisableThreadLibraryCalls Sleep lstrcmpA CloseHandle DeviceIoControl SetFilePointer OutputDebugStringW GetWindowsDirectoryW lstrcpyA Module32NextW GetFileAttributesExW CreateToolhelp32Snapshot FindNextFileW lstrcatW GetModuleHandleA Process32NextW Module32FirstW QueryDosDeviceW GetLastError CreateFileW lstrcpynW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapFree HeapAlloc HeapReAlloc GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW HeapSetInformation HeapCreate HeapDestroy SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection FreeLibrary LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale CreateFileA FindFirstFileW lstrlenA VirtualQuery GetLogicalDrives InitializeCriticalSection OpenProcess GetVersionExW ReadFile GetModuleFileNameW lstrlenW GetFileSizeEx GetCurrentDirectoryW lstrcmpiA FindClose Process32FirstW WriteConsoleW

user32

GetWindowRect GetDesktopWindow IsWindow DialogBoxParamA SendMessageW SetWindowTextA EndDialog GetDlgItem GetWindowTextW InvalidateRect PostMessageW MoveWindow GetWindowTextLengthA GetWindowTextA LoadIconW SendMessageA SetTimer

ws2_32

inet_ntoa htonl htons ntohl inet_addr

iphlpapi

GetExtendedUdpTable GetExtendedTcpTable GetAdaptersInfo

shlwapi

wvnsprintfA wnsprintfA StrChrA StrCatW StrCmpNW StrCmpNIW SHGetValueW StrChrW PathFindFileNameW SHSetValueW PathFindExtensionW StrStrIA StrStrW StrStrIW StrStrA PathFileExistsW PathAppendW PathMatchSpecW wnsprintfW wvnsprintfW PathIsDirectoryW StrNCatW

psapi

GetProcessImageFileNameW

dnsapi

DnsFree DnsQuery_A

advapi32

CreateServiceW CloseServiceHandle DeleteService OpenSCManagerW OpenServiceW ControlService StartServiceW QueryServiceStatus

powfp323.sys

IMPHASH 1345329aa1db494e9486bfdd1a63b1b5
SHA256 c6911a6689be02bc1b93d176f1e8acb85c5491c00d0893f258e99545010a6ab8
MD5 1edd9f29068abc4ca4c3ed71fbc0bcbb
SHA1 2ac38705011d13314341efd9aa4aa1f9faf19f06
SHA512 b65ce2414c715522d8a57eee229dafd793227f7860f762802d182d2d6bae5b6b00a6dbc5a4a6df0389bd533fcb7d5ec47d452546beac5c34d7576caf400c20aa
SSDEEP 768:NnKXGPz4YnSbxQAeaiWD+KZkvhDuUGcBLg5cZ6eUsHBEGwJerZsc5zxkNlTD2omc:RKXG74M2caaGK3Nh5z+NDk+lxG0
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

56:8f:9d:bd:5e:73:35:eb:e5:3d:ef:a7:12:bd:7a:81:6a:72:83:8c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Sep 7, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Minor OS version

1

Major OS version

6

Entry point

245822

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\po\trunk\modules\powall\driver\Debug\i386\powfp323.pdb

Name

.text

Size

29KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1024B

Virtual Size

884B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

197KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

824B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

powfp643.sys

IMPHASH 5b09ea1afbd4d79691ffcaafaf67f5ad
SHA256 035ddabdffc0fc2606d59e6e5809928eb22c5c6fb665a05f8b89981ff3e3606a
MD5 7c3555b5354fcea1d725ef0223045e37
SHA1 5868c686b786f3085eaee0d82408454bdcbb946e
SHA512 73a053c2aa773d1f871fe40e7284a72dc9eb13d03c578737f37137ac3274b99d803d226cadd2399d06e1df0d1f94a4ac49b49475840f71b8a59ef785ea8fb1ac
SSDEEP 768:AveNubiJHRqvE8zbGrd4gSt1FhuDO+I92Dv9CpzwvHUU6JKRADp13uY9q9zc:AvNbiZRqs0bIY1FhuDOJpw74KmDelzc
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

f8:b3:47:9c:63:36:0b:25:8d:10:53:46:45:9e:5d:6d:b6:d6:40:b9:31:cc:4c:75:55:54:02:c2:af:5f:37:a8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 26, 2024

Minor OS version

1

Major OS version

6

Entry point

254052

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

e:\po\trunk\modules\powall\driver\Debug\amd64\powfp643.pdb

Name

.text

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

198KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

824B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

powfp643_win7.sys

IMPHASH 5b09ea1afbd4d79691ffcaafaf67f5ad
SHA256 4a0b7f6a54e0e6d9c83d0bad94354c054de114321e29174c6ad3ef2851a31cdb
MD5 6ffd0e61b950ee503b5cc7e94e872a5e
SHA1 14c858f5b4c8fa9fd64875013bf056ca67583a73
SHA512 dff01d98360644339512fb088771aabed525e43ebd9ee5710f7f920de233bdd6dc64c0eaaf98e286ee7dd8d155fb3ebb7a62416771efc155c1cf1d69876ea9cc
SSDEEP 1536:9vNbiZRqs0bIY1FhuDOJpw74KmceUeu9hRBG:9vNmZRqs0bIumOJK74DceUe2a
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

fe:81:7a:58:30:60:f8:46:41:68:c4:71:de:9c:27:cf:39:87:ad:fd

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Microsoft Authenticode(tm) Root Authority,O=MSFT,C=US

Serial Number

01

Issuer

CN=Microsoft Authenticode(tm) Root Authority,O=MSFT,C=US

Timespan

Jan 1, 1995 - Dec 31, 1999

Subject

Serial Number

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

Issuer

Timespan

Jan 10, 1997 - Dec 31, 2020

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:1c:b2:8a:00:00:00:00:00:26

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Serial Number

79:ad:16:a1:4a:a0:a5:ad:4c:73:58:f4:07:13:2e:65

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 9, 2001 - May 9, 2021

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

72:94:04:10:1f:3e:0c:a3:47:83:7f:ca:17:5a:84:38

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 1, 2005 - Nov 1, 2025

Minor OS version

1

Major OS version

6

Entry point

254052

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

e:\po\trunk\modules\powall\driver\Debug\amd64\powfp643.pdb

Name

.text

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

198KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

824B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

powol32.dll

IMPHASH 4aa0a9489d282d805adcb196167b2c4a
SHA256 445bb2cfc6d02ed76b115c357981076b77c6ec8ce564663977ce8e3f77688f0e
MD5 b428c0d6209abc6af81ddf957d3c4427
SHA1 cf54b8206c7b87e06c98bc9957730ce679f949b3
SHA512 c19fa203fd668d80344e2de0002bfd71564fb8a708a9d0765b5a3241b1c95b316479cda7a0cd1aaad2d4bcf5ef254978736f65b664e6b5fd19391d86734b73d4
SSDEEP 3072:Q9rWygwE8yogazEECbl1KOP9e43r74kzqRzW4IJQ3BZNtDy2Sp0GMc5sSPeGH/xF:QYrXEu11P9P2W4BPL22SpJMNQLY1m
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

0f:64:e2:53:bd:d0:4b:91:4d:5c:5d:15:fc:13:d8:85:51:53:71:8b:61:89:c8:fa:93:ee:5d:16:4e:01:e0:51

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

May 31, 2021

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

eb:30:a7:31:f3:f2:48:a6:f9:19:24:5c:68:9a:c1:d6:00:1c:f6:c1

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 23, 2020 - Jan 22, 2032

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

5

Entry point

95270

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\powol\Release\powol32.pdb

kernel32

CloseHandle GetLocalTime WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID FlushFileBuffers Sleep DisableThreadLibraryCalls lstrcmpA GetModuleFileNameW GetProcAddress GetModuleHandleA lstrcpyW CreateThread lstrcpyA lstrlenA VirtualQuery HeapAlloc SystemTimeToFileTime GetCurrentProcess HeapFree GetModuleHandleW GetTickCount WriteFile InitializeCriticalSection WideCharToMultiByte LeaveCriticalSection lstrcpynW TerminateProcess ReadFile CreateFileW GetACP MultiByteToWideChar lstrlenW GetLastError SetLastError EnterCriticalSection LoadLibraryA Module32FirstW CreateToolhelp32Snapshot GetFileAttributesExW Module32NextW GetCurrentProcessId CreateFileA SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind HeapReAlloc GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapSize ExitProcess SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime VirtualAlloc GetCPInfo GetOEMCP IsValidCodePage LCMapStringA LCMapStringW GetLocaleInfoW GetLocaleInfoA InterlockedExchange InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode

shlwapi

wnsprintfW PathAppendW wvnsprintfW PathFindFileNameW wnsprintfA SHGetValueW StrChrA wvnsprintfA

ws2_32

setsockopt htons WSAGetLastError socket closesocket sendto

powol64.dll

IMPHASH 865bbc8edf938592bae75ab9bfaafee0
SHA256 081bc10ed92c766fba6aca76767032a77a4507e5dfd5cdf3954cc53b5334062a
MD5 d01dcea651f81b83da4e9e3ef1185416
SHA1 1e7d282e4dc55104872f182509673eef578ae331
SHA512 c6734a6e876a5d70fa3abae60ae6d66cad085aa189fd1ddebda2bf52280b7ea921a70af2cd7085ba7bdaeed1312e52994f7f23d96f5137dee207ec50bd8a54ec
SSDEEP 6144:fgRdTjWMptxf6QZLKbAa5uxq18N6qdraWiZWiIB4QfC1jm:oTOMpvtAALxOUi1q
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

Digest

27:a5:1c:a9:68:e2:f1:80:e0:b2:7c:d3:a3:01:fd:5c:6c:cf:37:ff:d0:a3:85:72:70:91:d3:cd:4e:69:90:4c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

May 31, 2021

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

b0:f2:44:d3:81:16:e5:1d:ab:30:40:3b:af:fc:9b:bd:db:b4:14:26

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 2, 2019 - Jan 18, 2038

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Serial Number

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 23, 2020 - Jan 22, 2032

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

2

Major OS version

5

Entry point

137024

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\powol\Release\powol64.pdb

kernel32

CloseHandle GetLocalTime WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID FlushFileBuffers Sleep DisableThreadLibraryCalls lstrcmpA GetModuleFileNameW GetProcAddress GetModuleHandleA lstrcpyW CreateThread lstrcpyA lstrlenA VirtualQuery HeapAlloc SystemTimeToFileTime GetCurrentProcess HeapFree GetModuleHandleW GetTickCount WriteFile InitializeCriticalSection WideCharToMultiByte LeaveCriticalSection lstrcpynW TerminateProcess ReadFile CreateFileW GetACP MultiByteToWideChar lstrlenW GetLastError SetLastError EnterCriticalSection LoadLibraryA Module32FirstW CreateToolhelp32Snapshot GetFileAttributesExW Module32NextW GetCurrentProcessId CreateFileA SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapReAlloc GetStdHandle GetModuleFileNameA EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc HeapSize ExitProcess SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetSystemTimeAsFileTime GetCPInfo GetOEMCP IsValidCodePage LCMapStringA LCMapStringW GetLocaleInfoW GetLocaleInfoA InitializeCriticalSectionAndSpinCount GetConsoleCP GetConsoleMode

shlwapi

wnsprintfW PathAppendW wvnsprintfW SHGetValueW StrChrA wvnsprintfA wnsprintfA PathFindFileNameW

ws2_32

closesocket sendto setsockopt htons WSAGetLastError socket

prntmgr32.dll

IMPHASH 82cbaf8e4e24f51ea26bccbfc76396c9
SHA256 731c71dbc8ef88981aa3c153587be32d572677edbe9f8e398f14d1fc4d748d8b
MD5 94255aee2c5394802894ee572ec597d6
SHA1 0232a747412a2e308393978924ac310ec7475881
SHA512 7f34cfb582b32aff2b2ab6be3bd79cf4423e6c416d63de5ab10c4b06c7634a97497696b8bfbeeeec67a9a3187cac861ba9454b571a3453818848a7abba8ff0e9
SSDEEP 12288:H35caOEGGlMxWjjZGZkrQ5564Pf0iAgeNkPrDqgRRsQLp22m:HVbQ5OgOknBReQLppm
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

9f:02:17:db:c0:e5:49:8e:e9:e8:cc:f7:a7:ab:2f:e6:96:8f:e7:70:d6:27:54:21:91:22:70:07:dc:65:92:8e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 24, 2024

PE Signature issue

Digest

6b:26:3c:9d:fc:5b:57:2c:2e:24:6f:7b:c4:aa:90:8c:44:59:98:58

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 24, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

226162

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\prntmgr\Release\prntmgr32.pdb

kernel32

GetLocalTime GetComputerNameW Sleep CreateThread DisableThreadLibraryCalls GetModuleFileNameW lstrcmpA CloseHandle lstrcatW lstrcmpiW EnterCriticalSection lstrcmpiA SetLastError GetCurrentDirectoryW GetLastError GetTempPathW lstrlenW lstrcpynW LeaveCriticalSection InitializeCriticalSection GetCurrentThread GetTickCount GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP LoadLibraryExA LoadLibraryExW SuspendThread GetThreadContext SetThreadContext FlushInstructionCache ResumeThread VirtualProtect InterlockedCompareExchange SetFilePointer GetWindowsDirectoryW lstrcpyA lstrcpyW LocalFree DeleteFileW OutputDebugStringW lstrlenA Module32NextW GetFileAttributesExW CreateToolhelp32Snapshot GetModuleHandleA Process32NextW Module32FirstW ProcessIdToSessionId Process32FirstW CreateFileW ReadFile GetFileAttributesW OpenProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc FreeLibrary InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale CreateFileA VirtualQuery lstrcpynA CreateProcessW WriteConsoleW

user32

GetDC GetMessageW PostQuitMessage LoadCursorW CallNextHookEx TranslateMessage RegisterClassExW LoadIconW IsWindow CreateWindowExW DispatchMessageA SetWindowsHookExW UpdateWindow DefWindowProcW

gdi32

GetObjectA GetStockObject GetDeviceCaps

winspool.drv

EnumPrintersW

advapi32

SetEntriesInAclW FreeSid RegOpenKeyExW OpenProcessToken CreateProcessAsUserW InitializeSecurityDescriptor SetSecurityDescriptorDacl RegEnumValueW SetFileSecurityW AllocateAndInitializeSid GetUserNameW RevertToSelf ImpersonateLoggedOnUser RegCloseKey

shlwapi

wvnsprintfA StrCatW wnsprintfA StrChrA SHSetValueW PathFindExtensionW PathFindFileNameW StrStrIW PathFileExistsW PathAppendW wnsprintfW wvnsprintfW PathIsDirectoryW SHGetValueA PathRemoveFileSpecW StrChrW SHGetValueW

ws2_32

socket sendto WSAStartup

wtsapi32

WTSQueryUserToken

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

gdiplus

GdipTranslateTextureTransform GdipCloneBrush GdipFree GdipCreateTexture GdipAlloc GdipSetPageUnit GdipCreateFromHDC GdipFillRectangleI GdipGetImageHeight GdipCreateBitmapFromScan0 GdipGetImageGraphicsContext GdipGraphicsClear GdipCreateSolidFill GdipDrawImageI GdipDisposeImage GdipCloneImage GdipGetImageWidth GdipFillEllipseI GdipScaleWorldTransform GdipSetInterpolationMode GdipCreateFontFromLogfontA GdipMeasureString GdipDeleteGraphics GdipDeleteBrush GdipSetStringFormatLineAlign GdipSetTextRenderingHint GdipDeleteFont GdipSetStringFormatAlign GdipDeleteFontFamily GdipCreateFont GdipRotateWorldTransform GdipGetGenericFontFamilySansSerif GdipDrawImagePointRect GdipDrawString GdipTranslateWorldTransform GdipCreateFontFamilyFromName GdipCreateLineBrushI GdipCreateStringFormat GdipDeleteStringFormat GdipCreateFontFromDC GdipDrawImageRectI GdipLoadImageFromFile GdipDrawImageRectRectI GdiplusStartup

shell32

ord165 SHGetPathFromIDListW SHGetSpecialFolderLocation

ole32

CoTaskMemFree CoCreateGuid

Name

.text

Size

333KB

Virtual Size

332KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

65KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

13KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourd

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

prntmgr64.dll

IMPHASH 5972a0dc5851954bfa6e08cf87276363
SHA256 10c76b37ebe078127271c1bf4bb01ca68639198e0374b469247fb145eaf486af
MD5 88e0fb05e75fe56fbc1fcbc33fb7bf5b
SHA1 5a9db6da5e839b1d45b5545f8a0149ee1d820342
SHA512 7f3491a79dbbd61b93818744e4b608f7c45291124e82b34fd1549671c1b2febb85d2a9a893e28165925f2721e079a7395ffb74823894e0b14a2c212729211589
SSDEEP 12288:ymJQtkYBYIH2B1BaMrGEpQKsTXw67NSsP9TDpK6a:ymJQtkYCZ1BaM6ZTTXwyNbPL5a
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

58:bc:c3:96:91:b2:79:af:9e:11:55:99:80:98:ca:79:16:d6:06:45:0f:4b:7c:4f:22:7b:5f:0b:33:d2:57:7a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 24, 2024

PE Signature issue

Digest

d5:5b:88:e3:97:45:ed:37:aa:93:6d:e4:34:87:d9:43:1d:ba:f2:a3

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 24, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

321644

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\prntmgr\Release\prntmgr64.pdb

kernel32

GetLocalTime GetComputerNameW Sleep CreateThread DisableThreadLibraryCalls GetModuleFileNameW lstrcmpA CloseHandle lstrcatW lstrcmpiW EnterCriticalSection lstrcmpiA SetLastError GetCurrentDirectoryW GetLastError GetTempPathW lstrlenW lstrcpynW LeaveCriticalSection InitializeCriticalSection GetCurrentThread GetTickCount GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP LoadLibraryExA LoadLibraryExW VirtualAlloc SuspendThread VirtualFree GetThreadContext SetThreadContext FlushInstructionCache ResumeThread VirtualProtect SetFilePointer GetWindowsDirectoryW lstrcpyA lstrcpyW LocalFree OutputDebugStringW lstrlenA DeleteFileW Module32NextW GetFileAttributesExW CreateToolhelp32Snapshot GetModuleHandleA Process32NextW Module32FirstW ProcessIdToSessionId Process32FirstW CreateFileW ReadFile GetFileAttributesW OpenProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapAlloc HeapFree EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc HeapSize GetModuleHandleW GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc FreeLibrary LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale CreateFileA VirtualQuery lstrcpynA CreateProcessW WriteConsoleW

user32

GetDC GetMessageW PostQuitMessage LoadCursorW CallNextHookEx TranslateMessage RegisterClassExW LoadIconW IsWindow CreateWindowExW DispatchMessageA SetWindowsHookExW UpdateWindow DefWindowProcW

gdi32

GetObjectA GetStockObject GetDeviceCaps

winspool.drv

EnumPrintersW

advapi32

SetEntriesInAclW FreeSid RegOpenKeyExW OpenProcessToken CreateProcessAsUserW InitializeSecurityDescriptor SetSecurityDescriptorDacl RegEnumValueW SetFileSecurityW AllocateAndInitializeSid GetUserNameW RevertToSelf ImpersonateLoggedOnUser RegCloseKey

shlwapi

wvnsprintfA StrCatW wnsprintfA StrChrA SHSetValueW PathFindExtensionW PathFindFileNameW StrStrIW PathFileExistsW PathAppendW wnsprintfW wvnsprintfW PathIsDirectoryW SHGetValueA PathRemoveFileSpecW StrChrW SHGetValueW

ws2_32

socket sendto WSAStartup

wtsapi32

WTSQueryUserToken

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

gdiplus

GdipTranslateTextureTransform GdipCloneBrush GdipFree GdipCreateTexture GdipAlloc GdipSetPageUnit GdipCreateFromHDC GdipFillRectangleI GdipGetImageHeight GdipCreateBitmapFromScan0 GdipGetImageGraphicsContext GdipGraphicsClear GdipCreateSolidFill GdipDrawImageI GdipDisposeImage GdipCloneImage GdipGetImageWidth GdipFillEllipseI GdipScaleWorldTransform GdipSetInterpolationMode GdipCreateFontFromLogfontA GdipMeasureString GdipDeleteGraphics GdipDeleteBrush GdipSetStringFormatLineAlign GdipSetTextRenderingHint GdipDeleteFont GdipSetStringFormatAlign GdipDeleteFontFamily GdipCreateFont GdipRotateWorldTransform GdipGetGenericFontFamilySansSerif GdipDrawImagePointRect GdipDrawString GdipTranslateWorldTransform GdipCreateFontFamilyFromName GdipCreateLineBrushI GdipCreateStringFormat GdipDeleteStringFormat GdipCreateFontFromDC GdipDrawImageRectI GdipLoadImageFromFile GdipDrawImageRectRectI GdiplusStartup

shell32

ord165 SHGetPathFromIDListW SHGetSpecialFolderLocation

ole32

CoTaskMemFree CoCreateGuid

Name

.text

Size

446KB

Virtual Size

445KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

119KB

Virtual Size

119KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourd

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

procmgr32.dll

IMPHASH 2ccc140547a4089f30302b2487c5ff15
SHA256 b70cb2b165ce3a8f2116230ee8779cd5a192a6925049de06f60dbe9db741b9fc
MD5 515f5a819fe9cf105ae5f7b6540656ed
SHA1 8188408894c0ce33b3f76b5129f4192b6d591132
SHA512 5224c2aaa4dd7e1cd9e627162a17458337e6cd200704bc19f112abc4e46297daa87b0b818ff858fe381589958bac5d49563d498768955d21312767907dbedf0e
SSDEEP 12288:zMgSMszlRjMTpCUC2q44g2tl2lHocmajclK/uGDc1PXtfuoQgl6Sriq2Wg:4pipdSl21ocmajYuc6Srd4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

16:ee:91:58:64:e6:9b:b9:08:c1:4c:5e:c7:c3:c2:7f:d6:1e:50:2d:df:b9:78:6a:fe:d6:3c:8b:11:d0:6a:0b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 11, 2024

PE Signature issue

Digest

c4:0a:bd:f6:86:d8:d0:8b:10:ec:01:5f:0c:ee:3d:3a:83:18:fb:98

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 11, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

240398

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\procmgr\Release\procmgr32.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP lstrlenA lstrlenW GetTickCount CreateThread CreateEventW SetEvent TerminateProcess FileTimeToLocalFileTime GetWindowsDirectoryW GetLocalTime FileTimeToSystemTime OpenProcess GetProcessTimes SystemTimeToFileTime DisableThreadLibraryCalls lstrcmpA LocalFree CloseHandle lstrcmpiW SetLastError GetFileSizeEx GetTempPathW CreateFileW ReadFile Sleep OutputDebugStringW WaitForSingleObject lstrcpyW DeleteFileW DeleteCriticalSection EnterCriticalSection GetLastError GetFileAttributesW SetFilePointer lstrcpyA Module32NextW OpenEventW GetFileAttributesExW CreateToolhelp32Snapshot lstrcatW GetModuleHandleA Process32NextW Module32FirstW QueryDosDeviceW ProcessIdToSessionId Process32FirstW GetModuleFileNameW lstrcpynW LeaveCriticalSection CopyFileW InitializeCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree HeapAlloc HeapReAlloc GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW HeapCreate HeapDestroy VirtualFree VirtualAlloc SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale CreateFileA VirtualQuery lstrcpynA CreateProcessW GetLogicalDrives GetVersionExW WriteConsoleW

user32

SendMessageTimeoutW EnumWindows GetForegroundWindow EnumChildWindows IsWindow GetWindowThreadProcessId

advapi32

RegOpenKeyW RegQueryInfoKeyW RegOpenKeyExW RegCloseKey ImpersonateLoggedOnUser OpenProcessToken CreateProcessAsUserW InitializeSecurityDescriptor SetSecurityDescriptorDacl RevertToSelf SetFileSecurityW AllocateAndInitializeSid SetEntriesInAclW RegEnumValueW FreeSid RegEnumKeyExW GetUserNameW RegCreateKeyExW

shell32

CommandLineToArgvW ord165

msi

ord8 ord92 ord159 ord232 ord74 ord32 ord118 ord160

wtsapi32

WTSQueryUserToken

shlwapi

StrStrW PathIsDirectoryW SHSetValueW SHGetValueW PathMatchSpecW PathFileExistsW PathAppendW wnsprintfW PathFindFileNameW StrStrIW StrCatW wnsprintfA StrChrA StrCmpNIW wvnsprintfW wvnsprintfA StrNCatW PathRemoveFileSpecW SHDeleteKeyW

sqlcipher32

sqlite3_exec sqlite3_close sqlite3_open

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

psapi

GetProcessImageFileNameW

ole32

CoInitializeEx CoSetProxyBlanket CoCreateGuid CoCreateInstance

oleaut32

VariantInit VariantClear

procmgr64.dll

IMPHASH 3df134ec941ac03f894ca1025ecc4fa6
SHA256 44cb4f35895642c0c2b357280abbcc7d29cb955452acc49ed7876ef1b48b27b3
MD5 4f69e3c27b27e7196566307625a3402f
SHA1 c5d96caa5aee37619683f5f93de001f2f1dd5f5c
SHA512 d881d786791e33ea73978e9dbda126ac213664ba5b3c2a2e878ebd441c387bf0cb731278b76eb755f368fdfe4efc7330be3410f56deac71371819c9950eb56bd
SSDEEP 12288:nlbiEUTwyRBs67/srKdQ+Q49V3c7i7/wL:lbiEUT5Ogsr4Q6M7irY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

05:83:5f:5a:33:a1:31:f8:1c:af:3f:7e:e7:dd:11:3d:20:62:25:61:47:4b:c7:b0:b3:91:e1:27:80:73:f4:4e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 11, 2024

PE Signature issue

Digest

2b:c1:32:fd:ae:d7:21:4f:07:8f:d0:c6:87:8a:09:6b:0b:ff:7d:25

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 11, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

348648

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\procmgr\Release\procmgr64.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP lstrlenA lstrlenW GetTickCount CreateThread CreateEventW SetEvent TerminateProcess FileTimeToLocalFileTime GetWindowsDirectoryW GetLocalTime FileTimeToSystemTime OpenProcess GetProcessTimes SystemTimeToFileTime DisableThreadLibraryCalls lstrcmpA LocalFree CloseHandle lstrcmpiW SetLastError GetFileSizeEx GetTempPathW CreateFileW ReadFile Sleep OutputDebugStringW WaitForSingleObject lstrcpyW DeleteFileW DeleteCriticalSection EnterCriticalSection GetLastError GetFileAttributesW SetFilePointer lstrcpyA Module32NextW OpenEventW GetFileAttributesExW CreateToolhelp32Snapshot lstrcatW GetModuleHandleA Process32NextW Module32FirstW QueryDosDeviceW ProcessIdToSessionId Process32FirstW GetModuleFileNameW lstrcpynW GetVersionExW LeaveCriticalSection CopyFileW InitializeCriticalSection GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapFree HeapAlloc HeapReAlloc GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc HeapSize GetModuleHandleW GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW HeapSetInformation HeapCreate HeapDestroy SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale CreateFileA VirtualQuery lstrcpynA CreateProcessW GetLogicalDrives WriteConsoleW

user32

SendMessageTimeoutW EnumWindows GetForegroundWindow EnumChildWindows IsWindow GetWindowThreadProcessId

advapi32

RegCreateKeyExW RegOpenKeyW RegQueryInfoKeyW RegOpenKeyExW RegCloseKey OpenProcessToken CreateProcessAsUserW InitializeSecurityDescriptor SetSecurityDescriptorDacl GetUserNameW SetFileSecurityW AllocateAndInitializeSid SetEntriesInAclW RegEnumValueW FreeSid RegEnumKeyExW RevertToSelf ImpersonateLoggedOnUser

shell32

CommandLineToArgvW ord165

msi

ord8 ord118 ord92 ord159 ord232 ord74 ord32 ord160

wtsapi32

WTSQueryUserToken

shlwapi

PathIsDirectoryW SHSetValueW SHGetValueW PathMatchSpecW PathFileExistsW StrStrW PathAppendW wnsprintfW PathFindFileNameW StrStrIW StrCatW wnsprintfA StrChrA StrCmpNIW PathRemoveFileSpecW wvnsprintfW wvnsprintfA StrNCatW SHDeleteKeyW

sqlcipher64

sqlite3_exec sqlite3_close sqlite3_open

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

psapi

GetProcessImageFileNameW

ole32

CoInitializeEx CoSetProxyBlanket CoCreateGuid CoCreateInstance

oleaut32

VariantInit VariantClear

protocolfilters.dll

IMPHASH 9323c00e0e145a590b42b7de7c14b02a
SHA256 d212ddcd4f95c1e9442e1037bd2bee20e0c031bdd19c23f5f2a3b655c51ff612
MD5 8879561053510d2d58188e8f4fac9542
SHA1 ba43886c6a4a44654318a19d25cab42973f6beae
SHA512 bbbfb46d04527ed1aac4a88012a561783299d09dd75474c573840d5d97f4247feb08546811c3f4b00e3befc57d525f2d4d29d2f667b3ad4dd5186b04ee536449
SSDEEP 24576:sjUE6j21RUeMd1h/Vvx6b9LY+/8/jnIUUU4hDaB1TtbT8Agz:3EbU7yJ0rIUUPohTqz
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

db:59:f5:4b:c7:03:03:a9:76:c7:d3:2c:87:e3:90:8b:ea:97:85:e0:12:8c:d0:b5:84:2c:a5:82:83:ac:e8:cc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Feb 21, 2024

PE Signature issue

Digest

90:cf:d9:08:81:ba:41:c2:57:a1:f1:ca:a9:2e:52:be:16:98:b2:c6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Feb 21, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

6

Entry point

514354

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\projects\projectsJ\nfsdk2_1.6\protocolfilters\build\release_demo\win32\protocolfilters.pdb

kernel32

ProcessIdToSessionId FreeLibrary GetVersion LoadLibraryA CreateEventA CreateMutexA SetEvent GetLastError GetFileAttributesW DeleteFileW CreateDirectoryW InterlockedDecrement InterlockedIncrement DeleteCriticalSection InitializeCriticalSection OpenProcess QueryPerformanceFrequency QueryPerformanceCounter GetTempFileNameW CreateProcessW WaitForSingleObject LeaveCriticalSection EnterCriticalSection CloseHandle GetShortPathNameW FindNextFileW FindFirstFileW FindClose GetProcAddress ExpandEnvironmentStringsW GetFileAttributesExW LoadLibraryW OutputDebugStringW CreateFileW WriteConsoleW GetTimeZoneInformation SetConsoleCtrlHandler FreeEnvironmentStringsW GetEnvironmentStringsW GetModuleFileNameA FlushFileBuffers HeapSize AreFileApisANSI GetModuleHandleExW ExitProcess SetStdHandle GetCurrentProcessId GetModuleFileNameW GetConsoleCP WriteFile GetFileType GetStdHandle SetFilePointerEx SetFilePointer ReadConsoleW GetConsoleMode GetOEMCP GetACP IsValidCodePage GetCurrentThread EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW CreateSemaphoreW GetModuleHandleW GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess SetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo FatalAppExitA InitializeCriticalSectionAndSpinCount GetCommandLineA GetSystemTimeAsFileTime MoveFileExW LoadLibraryExW ExitThread GetCurrentThreadId CreateThread HeapReAlloc GetProcessHeap HeapFree HeapAlloc SetEndOfFile GetTempPathA ReadFile IsProcessorFeaturePresent IsDebuggerPresent RtlUnwind RaiseException GetStringTypeW MultiByteToWideChar DecodePointer EncodePointer InterlockedExchange Sleep WideCharToMultiByte SetEnvironmentVariableA

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW OpenProcessToken GetTokenInformation LookupAccountSidA LookupAccountSidW DuplicateTokenEx ImpersonateLoggedOnUser RevertToSelf RegEnumKeyExW

cryptdt

CertCloseStore CertFreeCertificateContext CertAddEncodedCertificateToStore CertEnumCertificatesInStore CertSetCertificateContextProperty CertOpenSystemStoreA CertGetCertificateChain CertFreeCertificateChain CertVerifyCertificateChainPolicy CertFindCertificateInStore CertAddCertificateContextToStore CertOpenStore PFXExportCertStoreEx

libssl-3

SSL_CTX_set_security_level SSL_CTX_enable_ct SSL_set_accept_state SSL_set_connect_state TLS_client_method TLS_server_method SSL_free SSL_new SSL_CTX_get_default_passwd_cb_userdata SSL_CTX_get_default_passwd_cb SSL_CTX_use_certificate SSL_CTX_use_PrivateKey SSL_set_bio SSL_CTX_new SSL_CTX_set_options SSL_get0_peer_scts SSL_get_session SSL_client_version SSL_version SSL_get_shutdown SSL_shutdown SSL_renegotiate_pending SSL_renegotiate SSL_do_handshake SSL_get_ciphers SSL_get_error SSL_CTX_callback_ctrl SSL_CTX_ctrl SSL_ctrl SSL_write SSL_read SSL_connect SSL_accept SSL_get_peer_cert_chain SSL_get1_peer_certificate SSL_set_session SSL_set_verify SSL_set_cipher_list SSL_CIPHER_get_name SSL_CTX_set_cipher_list SSL_is_init_finished SSL_get_servername SSL_get0_alpn_selected SSL_CTX_set_alpn_select_cb SSL_set_alpn_protos SSL_select_next_proto SSL_CTX_set_client_cert_cb OPENSSL_init_ssl SSL_get1_session SSL_SESSION_free SSL_CTX_free SSL_CTX_up_ref

libcrypto-3

X509_STORE_free X509_STORE_CTX_new X509_STORE_CTX_free X509_STORE_CTX_init X509_STORE_add_cert X509_STORE_load_locations X509_STORE_CTX_get_error X509_verify_cert_error_string X509_sign X509_digest X509_cmp_time X509_gmtime_adj X509_EXTENSION_free X509_new EVP_sha256 X509_get_signature_nid X509_NAME_oneline X509_set_version X509_set_serialNumber X509_get_serialNumber X509_set_issuer_name X509_get_issuer_name X509_set_subject_name X509_get_subject_name X509_getm_notBefore X509_set1_notBefore X509_getm_notAfter X509_set1_notAfter X509_set_pubkey X509_NAME_get_index_by_NID X509_NAME_get_entry X509_NAME_delete_entry X509_NAME_add_entry_by_txt X509_NAME_ENTRY_get_data X509_get_ext_by_NID X509_get_ext X509_delete_ext X509_add_ext X509_get_ext_d2i X509_find_by_subject PEM_write_bio_X509_AUX X509V3_EXT_conf_nid X509_STORE_new AES_set_encrypt_key AES_set_decrypt_key AES_cbc_encrypt OCSP_cert_to_id OCSP_response_status OCSP_response_get1_basic OCSP_resp_get0_certs OCSP_resp_find_status OCSP_check_validity OCSP_basic_add1_cert OCSP_BASICRESP_free OCSP_basic_verify OPENSSL_sk_pop_free BIO_write OBJ_obj2nid EVP_PKEY_get_id EVP_PKEY_get_bits EVP_PKEY_CTX_new EVP_PKEY_CTX_free EVP_PKEY_param_check PKCS7_free X509_NAME_get_text_by_NID PKCS8_PRIV_KEY_INFO_free EVP_PKCS82PKEY ERR_get_error ERR_error_string PKCS12_SAFEBAG_get_nid PKCS12_SAFEBAG_get_bag_nid PKCS12_SAFEBAG_get1_cert PKCS12_SAFEBAG_get0_safes PKCS12_SAFEBAG_get0_p8inf PKCS12_decrypt_skey PKCS12_unpack_p7data PKCS12_unpack_p7encdata PKCS12_unpack_authsafes PKCS12_free PKCS12_SAFEBAG_free d2i_PKCS12_bio BIO_f_buffer PEM_read_bio_X509 PEM_read_bio_PrivateKey X509_verify_cert EVP_PKEY_Q_keygen i2d_PrivateKey d2i_AutoPrivateKey EVP_PKEY_free EVP_PKEY_dup X509V3_set_ctx EVP_get_digestbyname EVP_sha1 OBJ_nid2sn ASN1_STRING_to_UTF8 BN_to_ASN1_INTEGER i2a_ASN1_INTEGER BN_free BN_new BN_pseudo_rand BIO_free_all BIO_new_file CRYPTO_free CRYPTO_malloc OPENSSL_sk_push OPENSSL_sk_free OPENSSL_sk_new_null OPENSSL_sk_value OPENSSL_sk_num PEM_write_bio_X509 d2i_X509 X509_free BIO_s_mem BIO_ctrl BIO_read BIO_free BIO_new i2d_X509

ws2_32

WSAStartup htons ntohs ntohl htonl WSAAddressToStringA WSACleanup

rptcache32.dll

IMPHASH cc8afb01d84a1a62ef153ccf54bf0c36
SHA256 a2c04a21157c137ca66894f89e9e5e8c560f3381edd1b35cee700cd90e513c3c
MD5 9c278fccc178fe5089d27db94a34982c
SHA1 7306a8e3ec2d00c63b8dd1e599b71208c51259d8
SHA512 ce58732a82cdfcaecd79c309d3a5392ac2f881d762b5a527b317b056b15d0e548ea5095363b668cb58f739554fb6ae1e4c550843ec6ca625cf8ef32a868b3c82
SSDEEP 6144:rXgdgUBHJScPSxRvt/X2WjqMdFwB72+Jom2WtIy/97YWGTGbu:rOWY2Rvt/X2WjqM/wBiOoqpRY1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

af:cf:0d:21:62:0c:ee:5e:03:8b:61:96:ca:7c:29:00:28:d0:6c:2c:7e:7e:1d:64:f4:77:8a:23:c7:53:67:57

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Dec 28, 2023

PE Signature issue

Digest

b3:c1:40:bb:15:b0:92:51:ec:4c:cf:8e:7f:4c:6c:de:46:c6:e4:35

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Dec 28, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

145352

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\rptcache\Release\rptcache32.pdb

kernel32

GetLastError CopyFileW DeleteFileW CloseHandle GetLocalTime EnterCriticalSection lstrcmpW LeaveCriticalSection Sleep InitializeCriticalSection WaitForSingleObject WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID FlushFileBuffers GetConsoleMode GetConsoleCP InitializeCriticalSectionAndSpinCount InterlockedExchange GetLocaleInfoA GetLocaleInfoW lstrlenA DisableThreadLibraryCalls lstrcmpA CreateFileA FindFirstFileW VirtualQuery HeapAlloc SystemTimeToFileTime GetCurrentProcess HeapFree SetEvent GetModuleHandleW GetTickCount WriteFile WideCharToMultiByte lstrcpynW GetFileAttributesW TerminateProcess FileTimeToSystemTime ReadFile GetModuleFileNameW CreateFileW GetACP MultiByteToWideChar lstrlenW GetCurrentDirectoryW SetLastError GetProcAddress FindClose LoadLibraryA CreateEventW RemoveDirectoryW Module32FirstW GetModuleHandleA FindNextFileW CreateToolhelp32Snapshot GetFileAttributesExW OpenEventW Module32NextW GetCurrentProcessId LocalFree lstrcpyW SetFileAttributesW lstrcpyA GetCurrentThreadId CreateThread GetWindowsDirectoryW SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetStdHandle GetModuleFileNameA HeapSize ExitProcess SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime VirtualAlloc GetCPInfo GetOEMCP IsValidCodePage LCMapStringA LCMapStringW

advapi32

InitializeSecurityDescriptor SetSecurityDescriptorDacl RegOpenKeyW RegDeleteValueW RegCloseKey RegEnumKeyExW RegOpenKeyExW RegSetKeySecurity FreeSid RegEnumValueW SetEntriesInAclW AllocateAndInitializeSid SetFileSecurityW RegCreateKeyExW

shlwapi

wnsprintfW SHDeleteValueW PathFileExistsW SHDeleteKeyW StrStrIW PathFindFileNameW PathAppendW SHGetValueW SHSetValueW StrChrA wnsprintfA wvnsprintfA StrCatBuffW SHGetValueA PathIsDirectoryW wvnsprintfW

ws2_32

WSAGetLastError recvfrom WSAStartup bind socket

shell32

SHGetSpecialFolderLocation ord165 SHGetPathFromIDListW

ole32

CoCreateGuid CoTaskMemFree

rptcache64.dll

IMPHASH e237ce1ebbd070a4ef7bc99753bbbe86
SHA256 22037d98bf738e12816c7dce5a193d80882f21be4d3c60a7b2440b9d6505e495
MD5 add484bd0992999805a6f1bbf8926d2f
SHA1 3c24dc616392b2df69ba15ce7e195b67683bf07c
SHA512 d2e8594ab75178ec0cac9400902ff71ec22d552648e87bf6c8f885cfd2fee6eecd06dc5136a16bf5ecbf8beee2664fb4d9e31271e6c9fd838ec0c2faf2504e69
SSDEEP 6144:7URjx0OOxSeTSnkcNZMWaHLqtDQAmedGsl4aXWbarKvfUfcwxRho9m5GLGe0:7kQRSxZMLL1+GONRhoO
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

ad:8f:dd:43:e2:1e:d6:1f:50:6e:c0:f5:08:b9:5c:c1:09:35:b0:4e:3a:37:97:63:5f:7f:a8:5f:50:4c:ba:b3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Dec 28, 2023

PE Signature issue

Digest

fc:5b:7a:04:d2:b4:b7:45:5f:89:c4:31:f2:c2:8f:33:bb:f0:a8:fb

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Dec 28, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

212444

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\rptcache\Release\rptcache64.pdb

kernel32

GetLastError CopyFileW DeleteFileW CloseHandle GetLocalTime EnterCriticalSection lstrcmpW LeaveCriticalSection Sleep InitializeCriticalSection WaitForSingleObject WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID FlushFileBuffers GetConsoleMode GetConsoleCP InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetLocaleInfoW LCMapStringW lstrlenA DisableThreadLibraryCalls lstrcmpA CreateFileA FindFirstFileW VirtualQuery HeapAlloc SystemTimeToFileTime GetCurrentProcess HeapFree SetEvent GetModuleHandleW GetTickCount WriteFile WideCharToMultiByte lstrcpynW GetFileAttributesW TerminateProcess FileTimeToSystemTime ReadFile GetModuleFileNameW CreateFileW GetACP MultiByteToWideChar lstrlenW GetCurrentDirectoryW SetLastError GetProcAddress FindClose LoadLibraryA CreateEventW RemoveDirectoryW Module32FirstW GetModuleHandleA FindNextFileW CreateToolhelp32Snapshot GetFileAttributesExW OpenEventW Module32NextW GetCurrentProcessId LocalFree lstrcpyW SetFileAttributesW lstrcpyA GetCurrentThreadId CreateThread GetWindowsDirectoryW SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapReAlloc EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc GetStdHandle GetModuleFileNameA HeapSize ExitProcess SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetSystemTimeAsFileTime GetCPInfo GetOEMCP IsValidCodePage LCMapStringA

advapi32

InitializeSecurityDescriptor SetSecurityDescriptorDacl RegOpenKeyW RegDeleteValueW RegCloseKey RegEnumKeyExW RegOpenKeyExW RegSetKeySecurity FreeSid RegEnumValueW SetEntriesInAclW AllocateAndInitializeSid SetFileSecurityW RegCreateKeyExW

shlwapi

wnsprintfW SHDeleteValueW PathFileExistsW SHDeleteKeyW StrStrIW PathFindFileNameW PathAppendW wvnsprintfW PathIsDirectoryW SHGetValueW SHSetValueW StrChrA wnsprintfA wvnsprintfA StrCatBuffW SHGetValueA

ws2_32

recvfrom WSAStartup WSAGetLastError bind socket

shell32

ord165 SHGetPathFromIDListW SHGetSpecialFolderLocation

ole32

CoCreateGuid CoTaskMemFree

rtfile32.dll

IMPHASH e1c77070a91b1064d146d43b4cae9d30
SHA256 e3adf162f87185b77b4a9b9283fb7aaedbb475f797b3cc6227c3120acd5a3645
MD5 ef739694ae9f9015533d572715671737
SHA1 eae74c5dd0f444a9d5ec5e2d228d9a0328707b8e
SHA512 ae2ce09a4054ab25e4bfd1f71c4d49690b2890f81ce08407474fe47f50cf81532e184ffa894a56ca70fa657bd9b542ac57009b34083e686accbaa3c8e9954248
SSDEEP 6144:EwCrMTlrw5qHNsq/eNEzkmhl3AxHs8G4NLukxzWrvDQZm8AZgj122l5Tvu8Q9lJC:EwCr7SNsq/YEzkqAds8G4NLJxCrkZEZs
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

a2:aa:9f:eb:be:76:20:7d:a5:fb:a6:f0:4c:1d:42:4f:18:e6:19:9d:14:97:1c:de:4f:7c:f4:6a:ca:9d:62:e5

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,L=济南市,ST=山东省,C=CN

Chains

Mar 2, 2024

CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,L=济南市,ST=山东省,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

6d:84:25:08:cd:8f:3e:34:fd:66:f8:1a:df:d6:53:70:eb:3e:1d:a7

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,L=济南市,ST=山东省,C=CN

Serial Number

0a:5b:05:21:b0:1f:8f:a1:fd:1e:2a:e0:34:06:d6:ef

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 19, 2022 - Aug 20, 2025

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

5

Entry point

172269

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\rtfile\Release\rtfile32.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CreateThread GetVolumeInformationW FileTimeToLocalFileTime GetWindowsDirectoryW CloseHandle GetCurrentThreadId GetFileAttributesExW GetModuleHandleA lstrcmpiW CreateEventW LoadLibraryA ResetEvent EnterCriticalSection GetProcAddress FileTimeToSystemTime lstrcpynW LeaveCriticalSection InitializeCriticalSection GetLogicalDrives SetEvent WaitForSingleObject GetDriveTypeW DisableThreadLibraryCalls lstrcmpA DeleteFileW GetFileSize SetFilePointer MoveFileExW SetFileAttributesW LocalFree Module32NextW OpenEventW CreateToolhelp32Snapshot FindNextFileW lstrcatW GetLastError GetFileAttributesW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc InterlockedExchange InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetModuleFileNameW lstrlenW lstrcpyW lstrcpyA GetTempFileNameW CreateFileA FindFirstFileW VirtualQuery lstrcpynA SetEndOfFile GetDriveTypeA OpenProcess LoadLibraryW FormatMessageW ReadFile CreateFileW lstrcmpW GetTempPathW GetCurrentDirectoryW FindClose GetLocalTime Process32FirstW ProcessIdToSessionId RemoveDirectoryW DeviceIoControl Module32FirstW Process32NextW WriteConsoleW

advapi32

RegEnumValueW RegCloseKey RegSetValueExW GetUserNameW OpenProcessToken RegCreateKeyExW CreateProcessAsUserW ImpersonateLoggedOnUser RevertToSelf RegOpenKeyExW

shell32

SHGetSpecialFolderPathW ord165

shlwapi

PathRemoveBackslashW PathFindFileNameW PathFindExtensionW PathFileExistsW PathIsDirectoryW PathRemoveFileSpecW StrStrIW StrChrW SHGetValueW PathAppendW SHSetValueW StrChrA wvnsprintfA wvnsprintfW wnsprintfA wnsprintfW SHGetValueA

wtsapi32

WTSQueryUserToken

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

ole32

CoCreateGuid CoInitialize CoCreateInstance

rtfile64.dll

IMPHASH 7ff223a86d240b5bdf7a9dbfbacb7990
SHA256 c5f594dfe782d83d69a77400569e3012e468a28807808698e737b022d1eb04ad
MD5 cae2c22ba92bd370ea5b0bbf626ff2c1
SHA1 f32b6245ead3dd8ca1596d4a57852872c7ae9f3f
SHA512 4bc619f8b51bf4e3675f2540d805f6a7a114fd14842455ad340947e4027fe445411589dbc64980caf47a0f85ab8328027d6d562db565cea16b275352c91771c1
SSDEEP 12288:8D/YimSHo0HtCaswPjCRmASXvpkyS+jvzlyD2:8cimSHjtVpjCRJ0vpkyRjv8K
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

Digest

0a:8b:92:4a:40:54:c0:e4:f9:3e:97:9f:1d:c8:e1:d6:96:48:11:de:37:0a:b8:a8:4b:9a:20:7d:4b:b5:57:42

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,L=济南市,ST=山东省,C=CN

Chains

Mar 2, 2024

CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,L=济南市,ST=山东省,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

dd:8d:ba:f2:f4:06:13:91:94:5e:dd:87:03:d1:f9:49:a5:f7:25:ba

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,L=济南市,ST=山东省,C=CN

Serial Number

0a:5b:05:21:b0:1f:8f:a1:fd:1e:2a:e0:34:06:d6:ef

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 19, 2022 - Aug 20, 2025

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

2

Major OS version

5

Entry point

266692

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\rtfile\Release\rtfile64.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CreateThread GetVolumeInformationW FileTimeToLocalFileTime GetWindowsDirectoryW CloseHandle GetCurrentThreadId GetFileAttributesExW GetModuleHandleA lstrcmpiW CreateEventW LoadLibraryA ResetEvent EnterCriticalSection GetProcAddress FileTimeToSystemTime lstrcpynW LeaveCriticalSection InitializeCriticalSection GetLogicalDrives SetEvent WaitForSingleObject GetDriveTypeW DisableThreadLibraryCalls lstrcmpA DeleteFileW GetFileSize SetFilePointer MoveFileExW SetFileAttributesW LocalFree Module32NextW OpenEventW CreateToolhelp32Snapshot FindNextFileW lstrcatW GetLastError GetFileAttributesW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapAlloc HeapFree EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc Sleep HeapSize GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapReAlloc InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetModuleFileNameW lstrlenW lstrcpyW lstrcpyA GetTempFileNameW CreateFileA FindFirstFileW VirtualQuery lstrcpynA SetEndOfFile GetDriveTypeA OpenProcess LoadLibraryW FormatMessageW ReadFile CreateFileW lstrcmpW GetTempPathW GetCurrentDirectoryW FindClose GetLocalTime Process32FirstW ProcessIdToSessionId RemoveDirectoryW DeviceIoControl Module32FirstW Process32NextW WriteConsoleW

advapi32

RegCloseKey RegSetValueExW GetUserNameW OpenProcessToken RegCreateKeyExW CreateProcessAsUserW ImpersonateLoggedOnUser RevertToSelf RegEnumValueW RegOpenKeyExW

shell32

SHGetSpecialFolderPathW ord165

shlwapi

PathFindExtensionW PathFileExistsW PathIsDirectoryW PathFindFileNameW PathRemoveBackslashW PathRemoveFileSpecW StrStrIW StrChrW SHGetValueW PathAppendW SHSetValueW StrChrA SHGetValueA wnsprintfW wvnsprintfA wvnsprintfW wnsprintfA

wtsapi32

WTSQueryUserToken

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

ole32

CoCreateGuid CoCreateInstance CoInitialize

rtinfo32.dll

IMPHASH 25c62012a3e4f6103668026a6bc702ca
SHA256 52f6aefb309ab0429538525c9137aa1973589f770dc7f8b358e49c1fcd385514
MD5 2e7becfa5a8431cdc7b0de522c5a96a4
SHA1 ae949e3082a95c8a92a21c6935a486f61701952e
SHA512 c707148c37a9dbd2793a3a82e7625dc86c03ef64ef463de363cebdd7a95c72929af56ef69de6a7e20983c1917dc486705e01442da9b192ec961992ca6bf617bb
SSDEEP 12288:O3He1ceSlj0NSczfwFpBwtCtm1ChZHl7MQxlEcB:3wFzZHlFxlt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

16:a1:0a:66:8b:d2:c8:12:74:d7:ed:8d:b0:27:9a:30:72:01:8c:c4:b5:ac:d7:dd:16:58:85:67:82:44:5d:cc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 13, 2023

PE Signature issue

Digest

b7:7f:b7:93:ee:1a:64:3a:b2:2f:9a:5f:73:77:94:01:70:e7:85:45

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 13, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

254416

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\rtinfo\Release\rtinfo32.pdb

kernel32

GetSystemTimes LoadLibraryW GetTickCount GetVolumeInformationW GetWindowsDirectoryW GetDiskFreeSpaceExW ExpandEnvironmentStringsW GetLongPathNameW GetLogicalDrives GetDriveTypeW LocalFree GetModuleHandleA GetProcAddress lstrlenW GetModuleFileNameW GetSystemDirectoryW lstrcmpW GetFileAttributesW lstrcpynW lstrcmpiW GetVersionExW lstrlenA CreateThread CreateIoCompletionPort WaitForMultipleObjects GetSystemInfo CreateEventW ResetEvent EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetQueuedCompletionStatus DeleteFileW CloseHandle lstrcatW OpenEventA DisableThreadLibraryCalls GlobalMemoryStatusEx OpenProcess GetModuleHandleW GetProcessTimes SetLastError GetLastError GetTempPathW SetComputerNameExW CreateFileW ReadFile Sleep OutputDebugStringW SetEvent WaitForSingleObject SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA GetLocaleInfoW InitializeCriticalSectionAndSpinCount GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetSystemTimeAsFileTime QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA FlushFileBuffers GetConsoleMode GetConsoleCP GetStartupInfoA GetFileType SetHandleCount IsValidCodePage GetOEMCP VirtualAlloc VirtualFree HeapDestroy HeapCreate GetModuleFileNameA GetStdHandle ExitProcess HeapSize TlsFree TlsSetValue TlsAlloc TlsGetValue HeapReAlloc GetCPInfo LCMapStringW LCMapStringA RtlUnwind RaiseException GetCommandLineA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentThreadId lstrcpyA SetFileAttributesW lstrcpyW GetCurrentProcessId Module32NextW OpenEventW GetFileAttributesExW CreateToolhelp32Snapshot FindNextFileW Process32NextW Module32FirstW DeviceIoControl QueryDosDeviceW RemoveDirectoryW CreateFileMappingW ProcessIdToSessionId Process32FirstW LoadLibraryA FindClose GetCurrentProcess SetFilePointer GetCurrentDirectoryW GetFileSizeEx MultiByteToWideChar GetACP TerminateProcess FormatMessageW CopyFileW WideCharToMultiByte lstrcmpA InterlockedIncrement InterlockedDecrement InterlockedExchange DeleteCriticalSection GetTempFileNameW CreateFileA FindFirstFileW MapViewOfFile UnmapViewOfFile VirtualQuery lstrcpynA SetEndOfFile CreateProcessW HeapAlloc HeapFree GetProcessHeap IsBadReadPtr WriteFile GetDriveTypeA

user32

BlockInput ExitWindowsEx GetIconInfo DestroyIcon

gdi32

DeleteObject GetObjectW

advapi32

AllocateAndInitializeSid RegCloseKey RegEnumKeyExW ControlService RegOpenKeyExW OpenProcessToken LookupPrivilegeValueW CreateProcessAsUserW InitializeSecurityDescriptor SetTokenInformation SetSecurityDescriptorDacl StartServiceW DuplicateTokenEx QueryServiceStatus SetFileSecurityW SetEntriesInAclW RegEnumValueW FreeSid QueryServiceConfigW EnumServicesStatusW QueryServiceConfig2W OpenServiceW OpenSCManagerW CloseServiceHandle GetUserNameW RevertToSelf ImpersonateLoggedOnUser LookupAccountSidW LookupAccountNameW AdjustTokenPrivileges

shell32

CommandLineToArgvW SHGetSpecialFolderPathW ord165 SHGetPathFromIDListW SHGetSpecialFolderLocation SHCreateDirectoryExW SHGetFileInfoW ord727

ole32

CoTaskMemFree CoCreateGuid CoInitializeEx CoCreateInstance CoUninitialize CoInitializeSecurity CoInitialize

oleaut32

VariantInit VariantClear SysAllocString VariantChangeType SysFreeString

iphlpapi

GetExtendedUdpTable GetAdaptersInfo GetExtendedTcpTable

ws2_32

WSAStartup inet_addr WSASocketW htons WSARecvFrom setsockopt bind closesocket inet_ntoa ioctlsocket ntohs

shlwapi

SHDeleteKeyA PathIsDirectoryW SHDeleteValueW PathFileExistsW PathAppendW PathFindExtensionW PathFindFileNameW StrCatW wvnsprintfA StrCmpNIA wnsprintfA SHSetValueW StrCmpNIW SHGetValueW StrChrW PathAddBackslashW PathRemoveFileSpecW StrStrW SHGetValueA wvnsprintfW StrStrIW wnsprintfW

gdiplus

GdipFree GdipGetImageHeight GdipCreateBitmapFromHICON GdipGetImagePixelFormat GdipCreateBitmapFromScan0 GdipAlloc GdipGetImageEncodersSize GdipDisposeImage GdipCreateBitmapFromHBITMAP GdipGetImageEncoders GdipSaveImageToFile GdipBitmapLockBits GdipCloneImage GdipGetImageWidth GdiplusStartup GdiplusShutdown

netapi32

NetShareDel NetShareEnum NetUserEnum NetApiBufferFree NetUserGetInfo NetLocalGroupAddMembers NetUserDel NetUserSetInfo NetUserAdd

setupapi

SetupDiGetDeviceInfoListDetailW SetupDiSetClassInstallParamsW SetupDiDestroyClassImageList SetupDiClassNameFromGuidExW SetupDiGetClassImageList SetupDiBuildClassInfoListExW SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW SetupDiLoadClassIcon SetupDiCallClassInstaller SetupDiGetClassImageIndex SetupDiGetClassDevsExW CM_Get_Device_ID_ExW SetupDiGetDeviceInstanceIdW SetupDiGetClassDescriptionExW SetupDiOpenDeviceInfoW SetupDiClassGuidsFromNameExW SetupDiGetDeviceInstallParamsW CM_Get_DevNode_Status_Ex

comctl32

ImageList_GetIcon

wtsapi32

WTSFreeMemory WTSQueryUserToken WTSEnumerateSessionsW WTSEnumerateProcessesW

version

VerQueryValueW GetFileVersionInfoW

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

psapi

GetProcessImageFileNameW

rtinfo64.dll

IMPHASH ab0faebd608e87cc053aacb84298255e
SHA256 4041cfa37c29145ea32342f50745699ffda0996fa8755a3c9faff01968b3043a
MD5 0bd00c379f49c4af51d7e4b051f066fa
SHA1 0e909506787fd1c4e7d61fd3e1a27c7e05dd40c5
SHA512 9c50c44983746ed66499047e18dcdfda601729fb02cd873f235d05f0e2d7dabdf077336b11b049a8faee8d100b6b503baa63aad54517bfcca76158522f1abb11
SSDEEP 12288:B4B/cDRe+YGjgJUQ1VwS4rGmpg7MqZ+GgD2i:Q/cRYGE71VH4rqhZ+GS5
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

36:52:49:f8:60:8d:38:69:0a:83:17:23:a4:fd:1d:86:20:46:0d:8b:a4:b9:24:84:a6:fa:81:7c:84:9f:ca:05

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 13, 2023

PE Signature issue

Digest

32:f4:d7:1b:7e:0f:93:30:43:c7:70:c3:f3:5e:d9:51:cb:2a:00:e3

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 13, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

402472

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\rtinfo\Release\rtinfo64.pdb

kernel32

GetSystemTimes LoadLibraryW GetTickCount GetVolumeInformationW GetWindowsDirectoryW GetDiskFreeSpaceExW ExpandEnvironmentStringsW GetLongPathNameW GetLogicalDrives GetDriveTypeW LocalFree GetModuleHandleA GetProcAddress lstrlenW GetModuleFileNameW GetSystemDirectoryW lstrcmpW GetFileAttributesW lstrcpynW lstrcmpiW GetVersionExW lstrlenA CreateThread CreateIoCompletionPort WaitForMultipleObjects GetSystemInfo CreateEventW ResetEvent EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetQueuedCompletionStatus DeleteFileW CloseHandle lstrcatW OpenEventA DisableThreadLibraryCalls GlobalMemoryStatusEx OpenProcess GetModuleHandleW GetProcessTimes SetLastError GetLastError GetTempPathW SetComputerNameExW CreateFileW ReadFile Sleep OutputDebugStringW SetEvent WaitForSingleObject SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA GetLocaleInfoW InitializeCriticalSectionAndSpinCount GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetSystemTimeAsFileTime QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA FlushFileBuffers GetConsoleMode GetConsoleCP GetStartupInfoA GetFileType SetHandleCount IsValidCodePage GetOEMCP HeapDestroy HeapCreate HeapSetInformation GetModuleFileNameA GetStdHandle ExitProcess HeapSize FlsAlloc FlsFree FlsGetValue DecodePointer EncodePointer HeapReAlloc GetCPInfo LCMapStringW LCMapStringA RtlUnwindEx RtlPcToFileHeader RaiseException GetCommandLineA FlsSetValue RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentThreadId lstrcpyA SetFileAttributesW lstrcpyW GetCurrentProcessId Module32NextW OpenEventW GetFileAttributesExW CreateToolhelp32Snapshot FindNextFileW Process32NextW Module32FirstW DeviceIoControl QueryDosDeviceW RemoveDirectoryW CreateFileMappingW ProcessIdToSessionId GetCurrentProcess SetFilePointer Process32FirstW LoadLibraryA FindClose GetCurrentDirectoryW GetFileSizeEx MultiByteToWideChar GetACP lstrcmpA DeleteCriticalSection GetTempFileNameW CreateFileA FindFirstFileW MapViewOfFile UnmapViewOfFile VirtualQuery lstrcpynA SetEndOfFile CreateProcessW HeapAlloc HeapFree GetProcessHeap IsBadReadPtr WriteFile GetDriveTypeA WideCharToMultiByte CopyFileW FormatMessageW TerminateProcess

user32

BlockInput ExitWindowsEx GetIconInfo DestroyIcon

gdi32

DeleteObject GetObjectW

advapi32

AllocateAndInitializeSid RegCloseKey RegEnumKeyExW ControlService RegOpenKeyExW OpenProcessToken LookupPrivilegeValueW CreateProcessAsUserW InitializeSecurityDescriptor SetTokenInformation SetSecurityDescriptorDacl StartServiceW DuplicateTokenEx QueryServiceStatus SetFileSecurityW SetEntriesInAclW RegEnumValueW FreeSid QueryServiceConfigW EnumServicesStatusW QueryServiceConfig2W OpenServiceW OpenSCManagerW CloseServiceHandle GetUserNameW RevertToSelf ImpersonateLoggedOnUser LookupAccountSidW LookupAccountNameW AdjustTokenPrivileges

shell32

CommandLineToArgvW ord165 SHGetPathFromIDListW SHGetSpecialFolderPathW SHGetSpecialFolderLocation SHCreateDirectoryExW SHGetFileInfoW ord727

ole32

CoCreateInstance CoUninitialize CoCreateGuid CoInitializeEx CoInitializeSecurity CoInitialize CoTaskMemFree

oleaut32

VariantInit VariantClear SysAllocString VariantChangeType SysFreeString

iphlpapi

GetExtendedUdpTable GetAdaptersInfo GetExtendedTcpTable

ws2_32

ioctlsocket inet_ntoa WSAStartup inet_addr WSASocketW htons WSARecvFrom setsockopt bind closesocket ntohs

shlwapi

PathFindFileNameW PathIsDirectoryW SHDeleteValueW PathFileExistsW PathAppendW PathFindExtensionW SHDeleteKeyA StrStrIW StrCatW wvnsprintfA StrCmpNIA wnsprintfA SHSetValueW StrCmpNIW SHGetValueW StrChrW PathAddBackslashW PathRemoveFileSpecW StrStrW SHGetValueA wvnsprintfW wnsprintfW

gdiplus

GdipFree GdipGetImageHeight GdipCreateBitmapFromHICON GdipGetImagePixelFormat GdipCreateBitmapFromScan0 GdipAlloc GdipGetImageEncodersSize GdipDisposeImage GdipCreateBitmapFromHBITMAP GdipGetImageEncoders GdipSaveImageToFile GdipBitmapLockBits GdipCloneImage GdipGetImageWidth GdiplusStartup GdiplusShutdown

netapi32

NetUserSetInfo NetShareDel NetShareEnum NetUserEnum NetApiBufferFree NetUserGetInfo NetLocalGroupAddMembers NetUserDel NetUserAdd

setupapi

SetupDiOpenDeviceInfoW SetupDiGetDeviceInfoListDetailW SetupDiSetClassInstallParamsW SetupDiDestroyClassImageList SetupDiClassNameFromGuidExW SetupDiGetClassImageList SetupDiBuildClassInfoListExW SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW SetupDiLoadClassIcon SetupDiCallClassInstaller SetupDiGetClassImageIndex SetupDiGetClassDevsExW CM_Get_Device_ID_ExW SetupDiGetDeviceInstanceIdW SetupDiGetClassDescriptionExW SetupDiClassGuidsFromNameExW SetupDiGetDeviceInstallParamsW CM_Get_DevNode_Status_Ex

comctl32

ImageList_GetIcon

wtsapi32

WTSFreeMemory WTSQueryUserToken WTSEnumerateSessionsW WTSEnumerateProcessesW

version

GetFileVersionInfoW VerQueryValueW

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

psapi

GetProcessImageFileNameW

screenhooks32.dll

IMPHASH 223c37c9528ff509e08c201bd4e12683
SHA256 1842aa25c8b4d356d0d52ba08f527364f125e451255dc9799f2304fb99096286
MD5 f164c24fc798a4cc39a85fb07a293e5c
SHA1 a1a51a6a692781108f54da5478008b8b519df9c1
SHA512 617b08a6fe0fda48a22281e2d9a4a3667ba796215f674f7c40e831761e7cc3f9a1ff39e719e07b7ae156befb24177847a70708de1d02285fc9d0c87bb389a3c5
SSDEEP 1536:ijQ9fdeFzsDCwWEhRRhr5/9hRUl9X3hV:ijQBcFzsDoEhRRhr5jq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

89:ba:f6:81:fb:98:e1:96:e5:34:ec:a8:89:79:db:6b:b3:d0:28:32:9a:04:88:49:57:5e:43:c3:c6:33:72:b7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 20, 2020

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

84:ff:95:b0:3f:11:15:9b:59:6e:22:f0:0f:1a:51:0c:54:fb:bb:bd

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 20, 2020

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

5

Entry point

13880

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\tightvnc\Release\screenhooks32.pdb

Name

.text

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.shared

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

scrnrcd32.dll

IMPHASH 5fbdd49400d053b048896c42afd23c9c
SHA256 2658fd793c96fa63d5d61308327c738fdcf62297df97d0128f8976067b22bf48
MD5 aae12afb8b1efea2acf54585e98e642f
SHA1 4f90f8776c7eef0a1e8081bb83b0686cd512bcca
SHA512 2bf359acef95b6937793046e21c3fc1a4f2996c83869224a2fd3b92e5e5fe184918eb105af539dfce9d701119c16b97e391afd8a40d3f6ee58d73e4819ce9a09
SSDEEP 6144:folBD9sMAuabXHpo66P37Dv/rYBMXdD1bBQJ2+U55e2PTPGbLnYmGSGm4:foDxsM7arHp+LLDYBMXvbBQ/UXvTOE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

58:67:77:2a:09:52:1c:83:af:ba:d1:e4:81:44:69:d7:b3:95:09:f0:37:f0:0a:c9:3f:e2:b8:d9:4e:fe:31:48

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

PE Signature issue

Digest

b9:90:56:a6:03:1e:54:92:6a:0d:07:d7:81:9c:bd:8a:ca:db:6f:4e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

145002

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\scrnrcd\Release\scrnrcd32.pdb

kernel32

GetDiskFreeSpaceExW RemoveDirectoryW CloseHandle MoveFileW ReadFile Sleep lstrlenA lstrcpyW DeleteFileW GetCurrentThreadId lstrcatW lstrcmpiW GetLocalTime EnterCriticalSection lstrcpynW LeaveCriticalSection InitializeCriticalSection CreateFileW WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetLocaleInfoW LCMapStringW LCMapStringA IsValidCodePage GetOEMCP GetCPInfo QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount HeapSize ExitProcess VirtualAlloc DeleteCriticalSection VirtualFree HeapDestroy HeapCreate GetModuleFileNameA GetStdHandle InterlockedDecrement TlsFree TlsSetValue TlsAlloc TlsGetValue GetSystemTimeAsFileTime HeapReAlloc RtlUnwind RaiseException GetCommandLineA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter InterlockedExchange InterlockedIncrement SetFilePointer GetTickCount DisableThreadLibraryCalls lstrcmpA GetTempFileNameW CreateFileA FindFirstFileW VirtualQuery lstrcpynA SetEndOfFile CreateProcessW HeapAlloc SystemTimeToFileTime GetCurrentProcess HeapFree WaitForSingleObject SetEvent GetLogicalDrives GetModuleHandleW WriteFile OpenProcess WideCharToMultiByte GetExitCodeProcess GetFileAttributesW TerminateProcess GetModuleFileNameW GetACP lstrcmpW MultiByteToWideChar lstrlenW GetTempPathW GetLastError GetCurrentDirectoryW SetLastError GetProcAddress FindClose LoadLibraryA Process32FirstW CreateEventW QueryDosDeviceW Module32FirstW Process32NextW GetModuleHandleA FindNextFileW CreateToolhelp32Snapshot GetFileAttributesExW OpenEventW Module32NextW GetCurrentProcessId SetFileAttributesW lstrcpyA CreateThread GetWindowsDirectoryW OutputDebugStringW GetFileSize

user32

GetWindowDC ReleaseDC EnumDisplaySettingsW GetSystemMetrics DrawIconEx LoadCursorW GetForegroundWindow SetRect GetCursorPos GetLastInputInfo GetWindowThreadProcessId MessageBoxW GetUserObjectInformationW SetThreadDesktop GetDC CloseDesktop OpenInputDesktop GetThreadDesktop

gdi32

BitBlt DeleteDC DeleteObject SelectObject CreateCompatibleDC CreateCompatibleBitmap GetDIBits GetObjectW GetStockObject StretchBlt

shell32

ord165 SHGetSpecialFolderPathW

ole32

CoUninitialize CoCreateGuid CoInitialize

avifil32

AVIStreamWrite AVIFileOpenW AVIStreamRelease AVIFileInit AVIFileCreateStreamW AVIStreamSetFormat AVIFileRelease AVIMakeCompressedStream

winmm

mmioStringToFOURCCW

gdiplus

GdipDeletePen GdipFree GdipDeleteBrush GdipCreateFontFamilyFromName GdipSetInterpolationMode GdipMeasureString GdipFillPath GdipDrawPath GdipSetPenLineJoin GdiplusStartup GdipCreateFromHDC GdipCreatePen1 GdipCreatePath GdipCloneImage GdipDeleteFont GdipDeleteGraphics GdipSetSmoothingMode GdipDeleteFontFamily GdipCreateSolidFill GdipAlloc GdipGetImageEncodersSize GdipDisposeImage GdipCreateFont GdipAddPathString GdipDeletePath GdipCreateBitmapFromHBITMAP GdipStringFormatGetGenericDefault GdipGetImageEncoders GdipSaveImageToFile

shlwapi

wnsprintfW PathAppendW PathFindExtensionW PathFindFileNameW SHDeleteValueW PathFileExistsW PathIsDirectoryW wvnsprintfW SHGetValueA StrCatW wvnsprintfA wnsprintfA StrChrA SHSetValueW StrCmpNIW SHGetValueW StrChrW StrStrIW PathRemoveFileSpecW StrStrW

psapi

GetProcessImageFileNameW

advapi32

GetUserNameW

scrnrcd64.dll

IMPHASH 4559b18e699521cb9eba95f09bc23ef8
SHA256 88db2c325641c739b8cf3c7d2b8c5119c9788dfd281f387ec53570724ca2c4a2
MD5 e373efdf3df40cb822c2d1558495ef5d
SHA1 2ae6301875919f7114c2fe3d9cfcdb76ebd09c35
SHA512 e754cd45e6def207bd5122a4f739b5929f28438ce1da48cd8756008f48889f363541053ce5f6ae443eaed0daa5c653be13f08a3ae14c10e1b901fca3fa0fb221
SSDEEP 6144:FKPtYR5bxSOlE5I7ImkR663CdNEy/Z6sBK74u61pNtB0zkWZPpa4i/L6rV/sCTG4:ct83C/xUMC7Twt4qvPFAW/F
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

9d:c6:12:b0:7a:28:bd:3e:8e:7b:33:92:43:ea:a1:dc:3e:0d:ea:e9:2c:a1:10:b0:b3:f5:2c:a1:02:f1:15:1f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

PE Signature issue

Digest

26:11:ca:65:f8:c1:fc:2a:5c:8f:84:52:73:66:e5:9b:c8:73:f6:37

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

223088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\scrnrcd\Release\scrnrcd64.pdb

kernel32

GetDiskFreeSpaceExW RemoveDirectoryW CloseHandle MoveFileW ReadFile Sleep lstrlenA lstrcpyW DeleteFileW GetCurrentThreadId lstrcatW lstrcmpiW GetLocalTime EnterCriticalSection lstrcpynW LeaveCriticalSection InitializeCriticalSection CreateFileW WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetLocaleInfoW LCMapStringW LCMapStringA IsValidCodePage GetOEMCP GetCPInfo QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA DeleteCriticalSection GetStartupInfoA GetFileType SetHandleCount HeapSize ExitProcess HeapDestroy HeapCreate HeapSetInformation GetModuleFileNameA GetStdHandle FlsAlloc FlsFree FlsGetValue DecodePointer EncodePointer GetSystemTimeAsFileTime HeapReAlloc RtlUnwindEx RtlPcToFileHeader RaiseException GetCommandLineA FlsSetValue RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetTickCount DisableThreadLibraryCalls lstrcmpA GetTempFileNameW CreateFileA FindFirstFileW VirtualQuery lstrcpynA SetEndOfFile CreateProcessW HeapAlloc SystemTimeToFileTime GetCurrentProcess HeapFree WaitForSingleObject SetEvent GetLogicalDrives GetModuleHandleW WriteFile OpenProcess WideCharToMultiByte GetExitCodeProcess GetFileAttributesW TerminateProcess GetModuleFileNameW GetACP lstrcmpW MultiByteToWideChar lstrlenW GetTempPathW GetLastError GetCurrentDirectoryW SetLastError GetProcAddress FindClose LoadLibraryA Process32FirstW CreateEventW QueryDosDeviceW Module32FirstW Process32NextW GetModuleHandleA FindNextFileW CreateToolhelp32Snapshot GetFileAttributesExW OpenEventW Module32NextW GetCurrentProcessId SetFileAttributesW lstrcpyA CreateThread GetWindowsDirectoryW OutputDebugStringW GetFileSize SetFilePointer

user32

MessageBoxW GetWindowThreadProcessId GetWindowDC ReleaseDC EnumDisplaySettingsW GetSystemMetrics DrawIconEx LoadCursorW GetForegroundWindow SetRect GetCursorPos GetLastInputInfo GetUserObjectInformationW SetThreadDesktop GetDC CloseDesktop OpenInputDesktop GetThreadDesktop

gdi32

BitBlt DeleteDC DeleteObject SelectObject CreateCompatibleDC CreateCompatibleBitmap GetDIBits GetObjectW GetStockObject StretchBlt

shell32

ord165 SHGetSpecialFolderPathW

ole32

CoInitialize CoUninitialize CoCreateGuid

avifil32

AVIStreamWrite AVIFileOpenW AVIStreamRelease AVIFileInit AVIFileCreateStreamW AVIStreamSetFormat AVIFileRelease AVIMakeCompressedStream

winmm

mmioStringToFOURCCW

gdiplus

GdipStringFormatGetGenericDefault GdipMeasureString GdipFree GdipDeleteBrush GdipDrawPath GdipDeleteFont GdipDeleteGraphics GdipSetSmoothingMode GdipDeleteFontFamily GdipCreateSolidFill GdipAlloc GdipGetImageEncodersSize GdipDisposeImage GdipCreateFont GdipAddPathString GdipDeletePath GdipCreateBitmapFromHBITMAP GdipGetImageEncoders GdipCreateFontFamilyFromName GdipCreateFromHDC GdiplusStartup GdipSetPenLineJoin GdipCreatePen1 GdipCreatePath GdipCloneImage GdipSetInterpolationMode GdipFillPath GdipDeletePen GdipSaveImageToFile

shlwapi

StrCmpNIW wnsprintfW PathAppendW PathFindExtensionW PathFindFileNameW SHDeleteValueW PathFileExistsW PathIsDirectoryW wvnsprintfW SHGetValueA StrCatW StrStrW wnsprintfA StrChrA SHSetValueW wvnsprintfA SHGetValueW StrChrW StrStrIW PathRemoveFileSpecW

psapi

GetProcessImageFileNameW

advapi32

GetUserNameW

sensinfo32.dll

IMPHASH e45a7062d34cc769e1c67fe2c0e8315f
SHA256 913572643f1e0795a8851b03f8e04934f637debb1e42d806b3d720ad53d9313e
MD5 ae211a27e7c82ceb1f8c52dcbc462048
SHA1 7abc4fe7cbf05b926ebfc53a0a18fc3fcfd76fd9
SHA512 9383e010923f5edcaf9f46113fd7c956be20707a0eebe2d59dc73f177ce722967fcf1430f40a596594fb157bf3ed0d74ed566208b52a51e94bbc86625651b532
SSDEEP 6144:qIzmwz3AsIo5Eipd8klvE/c5Ljj7ESZ2asZo2hDGhax3xGJGjq:qInztIoypOgcF4SZhsZHFi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

78:ec:4f:1c:3f:a7:b3:14:df:4c:4c:f7:ba:46:32:6a:9e:44:53:b9:7a:58:4d:ec:e5:16:79:bc:28:7d:39:d2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 16, 2024

PE Signature issue

Digest

20:b7:6b:bf:fa:63:29:64:7a:c8:f9:8b:03:43:e9:0f:3d:a3:e4:b2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 16, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

116271

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\sensinfo\Release\sensinfo32.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle EnterCriticalSection SetLastError GetLastError GetTempPathW lstrlenW LeaveCriticalSection InitializeCriticalSection OutputDebugStringW SetFilePointer GetWindowsDirectoryW lstrcpyA DisableThreadLibraryCalls lstrcmpA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind HeapAlloc HeapFree GetModuleHandleW GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement Sleep HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage InterlockedExchange LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW CreateFileA VirtualQuery lstrcpynA CreateProcessW SetEvent OpenProcess lstrcpynW GetFileAttributesW ReadFile GetModuleFileNameW CreateFileW GetLocalTime Process32FirstW ProcessIdToSessionId Module32FirstW Process32NextW lstrcmpiW GetModuleHandleA CreateToolhelp32Snapshot OpenEventW Module32NextW DeleteFileW LocalFree lstrcpyW WriteConsoleW

user32

EnumWindows SendMessageTimeoutW GetWindowThreadProcessId

shlwapi

PathIsDirectoryW PathFindFileNameW PathRemoveFileSpecW StrChrW SHGetValueW wvnsprintfW SHSetValueW StrChrA wnsprintfA wvnsprintfA PathFileExistsW StrStrIW wnsprintfW PathAppendW

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

advapi32

SetFileSecurityW OpenProcessToken CreateProcessAsUserW InitializeSecurityDescriptor GetUserNameW FreeSid SetEntriesInAclW AllocateAndInitializeSid SetSecurityDescriptorDacl

shell32

ord165

ole32

CoCreateGuid

sensinfo64.dll

IMPHASH 1915340feee753373e0a2231bc46452c
SHA256 9b38cf577294ca46b0838ab4ee4a0d09e44377b450ffc68d124b36db651f3cbc
MD5 6db234826bcac225a4e62b425500f1d2
SHA1 6795005be206166b29b277b4a32b611632925026
SHA512 6456f7b3055fb97d8e4446928e31079a84fbc46b9633c9588b803cfec536d31a85477cac98dabb977e38ebae0c4954c41946e9338f03a2c479734590e115b277
SSDEEP 6144:qadnpDcL3WPQ/cqAxegN+/ysXhxeJZXPQWLqPWeK6R4xbGAGcB:qadnKMCAxegNwyfPgun3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

ce:74:42:48:c8:d2:b3:b9:ec:01:00:3f:ed:31:c3:0c:c3:51:ce:e6:ad:35:29:09:56:ac:78:d2:44:24:c5:0e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 16, 2024

PE Signature issue

Digest

93:cd:8c:4f:7c:3f:3b:69:04:db:d3:72:2e:dd:52:46:50:b8:bc:ef

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 16, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

164752

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\sensinfo\Release\sensinfo64.pdb

kernel32

GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle EnterCriticalSection SetLastError GetLastError GetTempPathW lstrlenW LeaveCriticalSection InitializeCriticalSection OutputDebugStringW SetFilePointer GetWindowsDirectoryW lstrcpyA lstrcpyW DisableThreadLibraryCalls lstrcmpA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCurrentThreadId FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapAlloc HeapFree EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc Sleep HeapSize GetModuleHandleW GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoW GetLocaleInfoA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW CreateFileA VirtualQuery lstrcpynA CreateProcessW SetEvent OpenProcess lstrcpynW GetFileAttributesW ReadFile GetModuleFileNameW CreateFileW GetLocalTime Process32FirstW ProcessIdToSessionId Module32FirstW Process32NextW lstrcmpiW GetModuleHandleA CreateToolhelp32Snapshot OpenEventW Module32NextW DeleteFileW LocalFree WriteConsoleW

user32

EnumWindows SendMessageTimeoutW GetWindowThreadProcessId

shlwapi

PathIsDirectoryW wvnsprintfW PathFindFileNameW PathRemoveFileSpecW StrChrW SHGetValueW SHSetValueW StrChrA wnsprintfA wvnsprintfA PathFileExistsW wnsprintfW StrStrIW PathAppendW

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

advapi32

SetSecurityDescriptorDacl OpenProcessToken CreateProcessAsUserW InitializeSecurityDescriptor GetUserNameW FreeSid SetEntriesInAclW AllocateAndInitializeSid SetFileSecurityW

shell32

ord165

ole32

CoCreateGuid

setuphlpr.dll

IMPHASH 1e9f056e1466e07b04362d71a93cdc8d
SHA256 c9bfcea372292fbd29f5a5f6cb51f97143d80e036133830fcb74f0994de51050
MD5 5b8659339fb6f998f25f3d7055b90a8c
SHA1 f28ec774744fbd6e2fc9f594bd4d31ef2adb8276
SHA512 37515fee58d2b2df3f3e9d270ec9d4f83f49333411a41c5a7d0514a5745c747ea5d79de2bffc543a2d54124ac49476805d99c18dc9ec0550be538eb9ecac3d99
SSDEEP 6144:yHLpnU4NBjqLzHNDJzB+cjoLq+OAMGsGSU:yHLpU4q9+cjo2+FL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

ee:fe:44:da:d0:26:42:89:92:2c:d4:5a:63:c7:91:7a:d8:8d:53:68:d2:6a:2a:de:e9:82:6e:18:25:f4:dc:a4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Dec 28, 2023

PE Signature issue

Digest

a0:e2:f8:86:0d:55:53:7b:8e:25:b7:00:d9:02:58:0e:50:e3:6a:7d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Dec 28, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

95271

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\deploy\client\setuphlpr\Release\setuphlpr.pdb

kernel32

LocalAlloc GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CreateEventW DeleteFileW DisableThreadLibraryCalls MoveFileW GetModuleFileNameW lstrcpynW CloseHandle lstrcmpiW Sleep LoadLibraryW SetFilePointer GetCommandLineW GetWindowsDirectoryW CreateThread OutputDebugStringW GetFileSize lstrcpyW LocalFree Module32NextW GetModuleHandleW FreeLibrary ExitProcess GetLastError HeapFree HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetCommandLineA RaiseException RtlUnwind HeapCreate HeapDestroy VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetProcAddress WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount InterlockedExchange LoadLibraryA GetLocaleInfoW GetLocaleInfoA HeapSize GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale CreateFileA FindFirstFileW lstrlenA VirtualQuery CreateProcessW GlobalLock WaitForSingleObject GetLogicalDrives InitializeCriticalSection OpenProcess GetVersionExW GetExitCodeProcess GetFileAttributesW ReadFile CreateFileW lstrcmpW lstrlenW GlobalUnlock GetCurrentDirectoryW FindClose GetLocalTime Process32FirstW QueryDosDeviceW Module32FirstW Process32NextW GetModuleHandleA lstrcatW FindNextFileW CreateToolhelp32Snapshot GetFileAttributesExW OpenEventW WriteConsoleW

user32

SendDlgItemMessageW GetDlgItem SetFocus DialogBoxIndirectParamW MessageBoxW IsWindow EnumChildWindows SetDlgItemTextW GetWindowLongW GetWindowRect SetWindowLongW EndDialog GetDesktopWindow SendMessageTimeoutW SendMessageW MoveWindow GetForegroundWindow FindWindowW LoadIconW IsWindowEnabled PostMessageW

iphlpapi

GetAdaptersInfo

shlwapi

wnsprintfW PathFileExistsW PathFindFileNameW StrStrIW PathAppendW PathRemoveExtensionW wvnsprintfW PathIsDirectoryW PathRemoveFileSpecW SHSetValueA StrChrW SHGetValueW StrCmpNIW SHSetValueW StrRChrW wnsprintfA wvnsprintfA SHDeleteValueA

ws2_32

ntohl WSAStartup

psapi

GetProcessImageFileNameW

dnsapi

DnsFree DnsQuery_A

advapi32

SetSecurityDescriptorDacl AllocateAndInitializeSid SetEntriesInAclW CloseServiceHandle OpenProcessToken DeleteService OpenSCManagerW OpenServiceW RegCreateKeyExW InitializeSecurityDescriptor LookupPrivilegeValueW RegCloseKey AdjustTokenPrivileges RegOpenKeyExW RegSetKeySecurity FreeSid

shell32

CommandLineToArgvW ord165

ole32

CreateStreamOnHGlobal CoInitializeEx CoCreateGuid CoCreateInstance GetHGlobalFromStream

oleaut32

SysFreeString VariantChangeType VariantInit VariantClear SysAllocString

shlext32.dll

IMPHASH 8f8ccfc381e258ec58670e5a0885eccb
SHA256 10110faeea48c8dcf6ced83e0b7c0e4700bc33dd5ebb0d8bdb9492a274c091b5
MD5 162e9fef5dc86a75ff84dac041a1bb74
SHA1 9b7d649c21531e17e627423b9f1c2954f0649350
SHA512 997b7efaf31222d8a9e80060cddeb70304ebe3d92e969808f111a37bd1d43b39646b4c74456520896f896a7b43f78e2f2b7a4bb070de4511a4bcf5c7effd5af8
SSDEEP 12288:NsHGkBa8NYE2JqRF56FcGbMr/KjylwHLPBzj0SqKyUJKbdQKH0uRftI3:NsHnl2JvbMrWylwHp05bdQKHf7I3
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

4e:82:51:02:b9:cf:88:1b:28:b9:ec:43:88:d4:a4:aa:a4:41:c1:c4:ae:f8:e2:ef:ee:93:73:28:d2:a0:9c:de

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

PE Signature issue

Digest

e1:c2:38:c7:c3:ac:d3:13:55:23:6c:13:f1:4a:b5:da:21:2f:0d:ca

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

250559

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\shlext\Release\shlext32.pdb

kernel32

GetCurrentProcess GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP SetFileTime GetCurrentThreadId DisableThreadLibraryCalls lstrcmpA CreateEventW GetTempPathW SetLastError WaitForSingleObject GetExitCodeProcess OutputDebugStringW LoadLibraryExW FindResourceW LoadResource SizeofResource GetExitCodeThread FreeLibrary InterlockedDecrement InterlockedIncrement GetModuleFileNameW LoadLibraryW lstrcmpiW GetLastError DeleteCriticalSection RaiseException GetFileAttributesW CopyFileW CreateThread InitializeCriticalSection Sleep GetCurrentProcessId GetThreadLocale SetThreadLocale lstrcpyW GetSystemDirectoryW GetModuleHandleW GetFileSize OutputDebugStringA MoveFileExW GetWindowsDirectoryW GetVersionExW GetProcessHeap HeapAlloc HeapFree GetFileAttributesExW SetEvent CreateFileW MultiByteToWideChar GetFileTime GetProcAddress lstrcatW GlobalSize GlobalLock GlobalUnlock TerminateThread CloseHandle DeleteFileW LeaveCriticalSection EnterCriticalSection lstrcpynW GetLocalTime GetLogicalDrives GetDriveTypeW SetFilePointer lstrcpyA SetFileAttributesW LocalFree FileTimeToLocalFileTime Module32NextW OpenEventW CreateToolhelp32Snapshot FindNextFileW GetModuleHandleA Process32NextW Module32FirstW DeviceIoControl QueryDosDeviceW RemoveDirectoryW CreateFileMappingW ProcessIdToSessionId Process32FirstW FindClose GetCurrentDirectoryW GetFileSizeEx lstrcmpW ReadFile FileTimeToSystemTime OpenProcess GetDriveTypeA IsBadReadPtr SetFilePointerEx CreateProcessW SetEndOfFile lstrcpynA VirtualQuery UnmapViewOfFile MapViewOfFile FindFirstFileW CreateFileA GetTempFileNameW InitializeCriticalSectionAndSpinCount InterlockedExchange IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetDiskFreeSpaceExW MoveFileW lstrlenW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte LCMapStringW HeapSize ExitProcess VirtualFree VirtualAlloc HeapReAlloc HeapCreate HeapDestroy SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LoadLibraryA GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW WriteConsoleW

user32

CloseClipboard GetForegroundWindow GetClipboardOwner IsWindow OpenClipboard DefWindowProcW ChangeClipboardChain SendMessageW GetWindowThreadProcessId GetClipboardData RegisterClipboardFormatW ExitWindowsEx CreateMenu InsertMenuW SetMenuItemBitmaps DeleteMenu DestroyMenu GetSystemMetrics SetRect SetClipboardViewer GetIconInfo LoadImageW GetDC FillRect DrawIconEx ReleaseDC DestroyIcon GetDlgItem SetPropW ShowWindow GetClientRect GetPropW CharNextW LoadIconW LoadCursorW DispatchMessageW DestroyWindow PostQuitMessage MessageBoxW PostMessageW FindWindowW RegisterClassExW CreateWindowExW UpdateWindow GetMessageW TranslateMessage DispatchMessageA SetTimer

gdi32

DeleteObject GetDIBits CreateBitmap CreateCompatibleDC SelectObject DeleteDC GetStockObject CreateDIBSection

advapi32

DeleteService GetUserNameW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges ImpersonateLoggedOnUser RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW FreeSid RegEnumValueW CreateServiceW CloseServiceHandle OpenSCManagerW OpenServiceW GetTokenInformation EqualSid CreateProcessAsUserW RegOpenKeyW InitializeSecurityDescriptor SetSecurityDescriptorDacl StartServiceW QueryServiceStatus SetFileSecurityW AllocateAndInitializeSid SetEntriesInAclW

shell32

ShellExecuteW DragQueryFileW SHGetPathFromIDListW SHGetSpecialFolderLocation ord165

ole32

CoCreateGuid StringFromGUID2 ReleaseStgMedium CoCreateInstance CoInitialize CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc

oleaut32

RegisterTypeLi UnRegisterTypeLi SysFreeString SysStringLen VarUI4FromStr LoadRegTypeLi LoadTypeLi SysAllocString

gdiplus

GdipGetImageEncodersSize GdipSaveImageToFile GdipFree GdipAlloc GdipDisposeImage GdipCreateBitmapFromHBITMAP GdipCloneImage GdiplusStartup GdipGetImageEncoders

shlwapi

wvnsprintfA wnsprintfA SHDeleteValueW SHDeleteKeyW PathFindFileNameW PathFileExistsW wnsprintfW PathAppendW PathFindExtensionW PathAddBackslashW StrStrW StrStrIW StrCmpNW PathIsDirectoryW StrChrA SHSetValueW SHGetValueW StrChrW PathRemoveFileSpecW SHGetValueA wvnsprintfW StrCmpNIW

wtsapi32

WTSQueryUserToken

ws2_32

htons WSAStartup socket sendto

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

psapi

GetProcessImageFileNameW

shlext64.dll

IMPHASH 46c306dddbdf4eb83ba2874fe619d57f
SHA256 23391cc2ce3a2af2ae52c89815de459e1834c5c53ec588380cb4692ac11f97ca
MD5 ac59cf438ab7be02489e915ef1023028
SHA1 18ad6c56ee779932fb4df0840a9676679b16c9ef
SHA512 97c240f540b3535da78449ba48352f47fcc0351531322b796b320fd6523b424a9ce65d6d303bc53ddd81df3d586eb6d54723f984296111a61469400500eaf48c
SSDEEP 12288:v33FdHRVKYqZt2Kqm7SwbHkv+nb/HzwpENd7vxtJU7QRi9BjqwT:vfHRkZt2+7SwbHkv+nb/Hz+ENdT/Jy9b
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

7d:9b:8b:ee:5c:d4:34:36:2a:04:96:36:04:c5:9c:ad:6e:12:36:bb:d5:91:ab:b1:bf:1a:f3:c0:ac:ac:8e:5d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

PE Signature issue

Digest

d4:ef:a0:a4:cb:05:50:fd:e3:b6:d6:65:e9:50:ea:3d:c6:a5:75:2b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Mar 22, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

364008

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\shlext\Release\shlext64.pdb

kernel32

GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP CreateFileW GetFileTime SetFileTime GetCurrentThreadId DisableThreadLibraryCalls lstrcmpA CreateEventW GetTempPathW SetLastError OutputDebugStringW WaitForSingleObject GetExitCodeProcess LoadLibraryExW FindResourceW LoadResource SizeofResource FreeLibrary GetModuleFileNameW LoadLibraryW lstrcmpiW GetLastError DeleteCriticalSection RaiseException GetFileAttributesW CopyFileW CreateThread InitializeCriticalSection Sleep GetCurrentProcessId GetCurrentProcess GetExitCodeThread GetThreadLocale GetSystemDirectoryW MoveFileW GetFileSize GetModuleHandleW MoveFileExW GetWindowsDirectoryW SetThreadLocale lstrcpyW GetVersionExW GetProcessHeap HeapAlloc HeapFree GetFileAttributesExW MultiByteToWideChar SetEvent GetProcAddress lstrcatW GlobalSize GlobalLock GlobalUnlock TerminateThread CloseHandle DeleteFileW LeaveCriticalSection EnterCriticalSection lstrcpynW GetLocalTime GetLogicalDrives GetDriveTypeW SetFilePointer lstrcpyA SetFileAttributesW LocalFree FileTimeToLocalFileTime Module32NextW OpenEventW CreateToolhelp32Snapshot FindNextFileW GetModuleHandleA Process32NextW Module32FirstW DeviceIoControl QueryDosDeviceW RemoveDirectoryW CreateFileMappingW ProcessIdToSessionId Process32FirstW FindClose GetCurrentDirectoryW GetFileSizeEx lstrcmpW ReadFile FileTimeToSystemTime OpenProcess GetDriveTypeA IsBadReadPtr SetFilePointerEx CreateProcessW SetEndOfFile lstrcpynA VirtualQuery UnmapViewOfFile MapViewOfFile FindFirstFileW CreateFileA GetTempFileNameW InitializeCriticalSectionAndSpinCount IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA GetDiskFreeSpaceExW OutputDebugStringA lstrlenW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RtlPcToFileHeader RtlUnwindEx FlsSetValue GetCommandLineA WriteFile GetStdHandle GetModuleFileNameA EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA WideCharToMultiByte LCMapStringW HeapSize ExitProcess HeapSetInformation HeapCreate HeapDestroy HeapReAlloc SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LoadLibraryA GetLocaleInfoW GetLocaleInfoA WriteConsoleW

user32

GetForegroundWindow GetClipboardOwner IsWindow CloseClipboard OpenClipboard DefWindowProcW ChangeClipboardChain SendMessageW GetWindowThreadProcessId GetClipboardData RegisterClipboardFormatW ExitWindowsEx CreateMenu InsertMenuW SetMenuItemBitmaps DeleteMenu DestroyMenu GetSystemMetrics SetRect GetIconInfo SetClipboardViewer LoadImageW GetDC FillRect DrawIconEx ReleaseDC DestroyIcon GetDlgItem SetPropW ShowWindow GetClientRect GetPropW CharNextW LoadIconW LoadCursorW DispatchMessageW DestroyWindow PostQuitMessage MessageBoxW PostMessageW FindWindowW RegisterClassExW CreateWindowExW UpdateWindow TranslateMessage DispatchMessageA GetMessageW SetTimer

gdi32

DeleteObject GetDIBits CreateBitmap CreateCompatibleDC SelectObject DeleteDC GetStockObject CreateDIBSection

advapi32

DeleteService GetUserNameW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges ImpersonateLoggedOnUser RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW FreeSid RegEnumValueW CreateServiceW CloseServiceHandle OpenSCManagerW OpenServiceW GetTokenInformation EqualSid CreateProcessAsUserW RegOpenKeyW InitializeSecurityDescriptor SetSecurityDescriptorDacl StartServiceW QueryServiceStatus SetFileSecurityW AllocateAndInitializeSid SetEntriesInAclW

shell32

ShellExecuteW DragQueryFileW SHGetPathFromIDListW SHGetSpecialFolderLocation ord165

ole32

CoCreateGuid StringFromGUID2 ReleaseStgMedium CoCreateInstance CoInitialize CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc

oleaut32

RegisterTypeLi UnRegisterTypeLi SysFreeString SysStringLen VarUI4FromStr LoadRegTypeLi LoadTypeLi SysAllocString

gdiplus

GdipGetImageEncodersSize GdipGetImageEncoders GdipSaveImageToFile GdipFree GdipAlloc GdipDisposeImage GdipCreateBitmapFromHBITMAP GdipCloneImage GdiplusStartup

shlwapi

wvnsprintfA wnsprintfA StrChrA SHDeleteValueW SHDeleteKeyW PathFindFileNameW PathFileExistsW wnsprintfW PathAppendW PathFindExtensionW PathAddBackslashW StrStrIW StrStrW StrCmpNW PathIsDirectoryW SHSetValueW SHGetValueW StrChrW PathRemoveFileSpecW SHGetValueA wvnsprintfW StrCmpNIW

wtsapi32

WTSQueryUserToken

ws2_32

sendto htons WSAStartup socket

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

psapi

GetProcessImageFileNameW

siriuv32.dll

IMPHASH 65162164d02e2e3c38b5b913e2f6df4a
SHA256 475979b58fa6a18a148ffa978690a464e68950579453531f329d0bb7b9b6c14b
MD5 b9c844eb7588b02bdc6878d3cb4215bb
SHA1 bb5230d41f6c0ff0dd9aa6dab82b2bd90f89fe39
SHA512 4a96603db7f4b85f8906dccd7c4e64588e40ff1a985c157dae0420a8fbcacaba807b12f2f26b191f1edb9cb8c52a5189fbc2d39b87489394c54e8b09cc8b31ab
SSDEEP 12288:AflslllfmKLdl62ogziaItnEbzS52ivCw6Q3XKEddoFA3aznpBk:AuhfLd8XvChkKEddIKazpBk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

15:a1:02:da:e2:d4:1f:1b:79:59:7c:ef:33:84:03:3d:12:87:de:35:4c:64:69:b2:75:13:96:91:39:60:ae:ce

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 17, 2024

PE Signature issue

Digest

71:40:dc:34:3e:1e:b6:2b:4b:80:53:20:59:e4:db:80:ea:79:09:9e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 17, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

1

Major OS version

5

Entry point

322715

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\po\trunk\modules\hestia\Release\siriuv32.pdb

ntdll

NtQueryVirtualMemory

kernel32

EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetFileAttributesExW HeapFree GetCurrentProcess TerminateProcess SetEndOfFile GetTempPathW lstrlenA FindClose WaitForSingleObject GetFileAttributesW OpenEventW GetACP CreateToolhelp32Snapshot MultiByteToWideChar SetEvent FileTimeToSystemTime LoadLibraryW HeapAlloc Module32FirstW SetFilePointerEx LocalFree GetProcessHeap SystemTimeToFileTime GetModuleHandleW WideCharToMultiByte Module32NextW GetTickCount lstrcmpW VirtualQuery DeleteCriticalSection DisableThreadLibraryCalls TerminateThread ExitProcess MoveFileW InterlockedIncrement HeapSize GetConsoleCP FlushFileBuffers SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExA GetConsoleMode EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetFileType GetStdHandle GetModuleFileNameA GetModuleHandleExW HeapReAlloc InterlockedFlushSList RtlUnwind RaiseException LoadLibraryExW FreeLibrary VirtualAlloc SuspendThread VirtualFree GetThreadContext SetThreadContext FlushInstructionCache ResumeThread VirtualProtect InterlockedCompareExchange InitializeSListHead QueryPerformanceCounter GetStartupInfoW CloseHandle Sleep CreateFileW WriteFile GetProcAddress CreateThread GetModuleHandleA lstrcmpA GetCurrentThreadId GetModuleFileNameW SetLastError lstrcpyW lstrcpyA OutputDebugStringW GetCurrentProcessId CreateEventW lstrlenW lstrcmpiW CopyFileW lstrcpynA GetLocalTime DeleteFileW GetLastError IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DecodePointer EncodePointer lstrcpynW WriteConsoleW GetCurrentThread

user32

GetClassNameW CharLowerBuffW CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW GetForegroundWindow GetWindowThreadProcessId IsWindow

advapi32

GetUserNameW SetSecurityDescriptorDacl RegCloseKey SetFileSecurityW AllocateAndInitializeSid SetEntriesInAclW RegCreateKeyExW RegEnumKeyExW FreeSid InitializeSecurityDescriptor RegOpenKeyExW RegOpenKeyW RegEnumValueW

shell32

SHGetPathFromIDListW SHGetSpecialFolderLocation ord165

ole32

CoCreateGuid CoTaskMemFree

shlwapi

StrCatW wvnsprintfA PathRemoveFileSpecW StrChrA SHGetValueW wvnsprintfW StrChrW SHSetValueW StrStrW SHDeleteValueW StrStrA StrStrIW StrStrIA wnsprintfW PathIsDirectoryW wnsprintfA PathFindFileNameW PathFileExistsW PathAppendW

version

VerQueryValueW GetFileVersionInfoW

Name

.text

Size

440KB

Virtual Size

440KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

103KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

1024B

Virtual Size

572B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourd

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

siriuv64.dll

IMPHASH ae9cc0180acf194025d3771eda3951fc
SHA256 2bfca8b20388d73bcc06b168caa12cfadd86ce32a9df03bc8d57b663f709e8e2
MD5 2ac2fe9d5ffe1704d1acaee1c5440451
SHA1 efac96f924885f662717c4b8888caef9572e2abd
SHA512 21b901ec88a6ecce43a0af37c4f300391b79597448d6424f110a90002bf8caef5da1759b2b6c17fc31c204ca887288e378e36868fb353742a39fc0a77b9d8c9d
SSDEEP 12288:+OSOEO/RdQwwJfwE112siQjJDEc9GHTmjsoYMemvx1E8g:+OSuU/mEX2q9pGHT3Qem5e8g
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

7a:2c:38:38:ff:19:53:95:24:6b:23:59:9b:33:13:c8:04:0b:97:65:72:db:18:2a:94:99:1d:3d:71:2f:a3:c9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 17, 2024

PE Signature issue

Digest

8d:33:46:28:cf:6f:f9:91:0e:58:a5:12:14:ea:90:3c:91:89:ba:d0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 17, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

399056

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\po\trunk\modules\hestia\Release\siriuv64.pdb

ntdll

NtQueryVirtualMemory

kernel32

EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetFileAttributesExW HeapFree GetCurrentProcess TerminateProcess SetEndOfFile GetTempPathW lstrlenA FindClose WaitForSingleObject GetFileAttributesW OpenEventW GetACP CreateToolhelp32Snapshot MultiByteToWideChar SetEvent FileTimeToSystemTime LoadLibraryW HeapAlloc Module32FirstW SetFilePointerEx LocalFree GetProcessHeap SystemTimeToFileTime GetModuleHandleW WideCharToMultiByte Module32NextW GetTickCount lstrcmpW VirtualQuery GetCurrentThread DisableThreadLibraryCalls TerminateThread ExitProcess MoveFileW HeapSize GetConsoleCP FlushFileBuffers SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExA GetConsoleMode EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetFileType GetStdHandle GetModuleFileNameA GetModuleHandleExW HeapReAlloc InterlockedFlushSList RtlUnwindEx RaiseException RtlPcToFileHeader LoadLibraryExW FreeLibrary VirtualAlloc SuspendThread VirtualFree GetThreadContext SetThreadContext FlushInstructionCache ResumeThread VirtualProtect InitializeSListHead QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent CloseHandle Sleep CreateFileW WriteFile GetProcAddress CreateThread GetModuleHandleA lstrcmpA GetCurrentThreadId GetModuleFileNameW SetLastError lstrcpyW lstrcpyA OutputDebugStringW GetCurrentProcessId CreateEventW lstrlenW lstrcmpiW CopyFileW lstrcpynA GetLocalTime DeleteFileW GetLastError IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DecodePointer EncodePointer lstrcpynW WriteConsoleW DeleteCriticalSection

user32

GetClassNameW CharLowerBuffW CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW GetForegroundWindow GetWindowThreadProcessId IsWindow

advapi32

RegEnumValueW GetUserNameW SetSecurityDescriptorDacl RegCloseKey SetFileSecurityW AllocateAndInitializeSid SetEntriesInAclW RegCreateKeyExW RegEnumKeyExW FreeSid InitializeSecurityDescriptor RegOpenKeyExW RegOpenKeyW

shell32

SHGetPathFromIDListW SHGetSpecialFolderLocation ord165

ole32

CoCreateGuid CoTaskMemFree

shlwapi

PathRemoveFileSpecW StrChrA SHGetValueW wvnsprintfA SHSetValueW StrCatW wvnsprintfW StrStrW SHDeleteValueW StrStrA StrStrIW StrStrIA PathIsDirectoryW wnsprintfA PathFindFileNameW PathFileExistsW wnsprintfW PathAppendW StrChrW

version

VerQueryValueW GetFileVersionInfoW

Name

.text

Size

528KB

Virtual Size

527KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

161KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

35KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourd

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

skin/bakviewer

SHA256 ce6cbba0619f3c57c2b532895f7b9b01edb32db130ee8ef0fe49d92953b270ca
MD5 7ee808be21c0d3ba8155bba8ec827053
SHA1 9c90c615853c93f093db5d42194d1acd93f1c76b
SHA512 674e4611a9b39eba1e86578124bdf6a840d9b5378ac4750eb93c466713af91c3da44e4ba054424d1bef1eb50f5d8655a55bb2c1cf4bef9a3623af3cee81ce9c0
SSDEEP 768:oYKesTg/9PSWl4ACVX2xYEMNkUxlCWp6ZocqOwMJm:BKess1hHCZ2eGUuWpGyOPJm
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

backup.png

SHA256 665d00c6b0b024df149f12480e666425a63c16f04a75972f567b85bc6d04dcdd
MD5 89ec906bff2a0551be4fb16db3014f81
SHA1 b65ad1d33e21add0516848007b3a73403ff38d5e
SHA512 7112d4c59adce854e17ad191d9080bdadc6d01df4d53feb7149ed3aea6e09e3eeb491069df34164063a4762f760a6bb9dfa37b73529f48a63af3daf3eeb733c9
MD5 SHA1 SHA512

NSIS installer

installer

backup_menu.xml

SHA256 79766edf32eb210247d59a327deae18e093d2693900139e073eed9570ad82d0c
MD5 6e249a7822f83fc7b41e44a51bf74a45
SHA1 45b578aa50da1787ac47d196b7c587b8cfbc8dc1
SHA512 7f62cd498b0552746403f7dc0162ace2a9c476a1ecebe8f039dddd8d9292ef639549d08e78921e45e450e5366c682ced4696e549ed5302c459f8c045ddeace2b
MD5 SHA1 SHA512

NSIS installer

installer

backup_menu_console.xml

SHA256 e23098ccb7ad3716047cddcc77f40d0ac9c594474412699b71956d0aee907fe4
MD5 2c1eab0ee9aa6c638b97594d6beff308
SHA1 996c7c3e4662dbdfa5d1987682ac5a97e6ec6801
SHA512 c1d733228d0927a6d38d9af66e710fabecf394ca149bb4268b08a2b72eac5c821a965ddf43846d83c162bc9362e59f7397fdf652bb0882d9c484767881055b0f
MD5 SHA1 SHA512

NSIS installer

installer

bakmgr.xml

SHA256 1851a835bb26524a0dfefcf607e8975990cab3127576cd6111c23ce1d67e9039
MD5 b28d102033e1c9caedf31e306fe2353b
SHA1 ba7fa0d880542457f251352773a4c03fdcd7e00b
SHA512 6fa66b68f38b1b875db6e246ae7b8b8102608c3f5ba3e4b9e7139ccf1737a8c20632897b3ced04e2091912c6901ad428101b9650ca8626235561f1c60880344e
SSDEEP 96:pcCF1xjCwMlZPFrcclbQWdW1oYQSlNeRcd9zcd4CSjzcdkns17u83fSCU:aCVCwMlZdrccCo6oYQQNsIzlzUu84
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

clear.png

SHA256 a114031534d50c09aab50bd2917dcb7f9088215d7e8289d08653a98a2b4bd55b
MD5 3e504cc2323677619b3d0ceb192cce14
SHA1 adbc7e1ff53405cb0ee8adc8e19d2c084265cae4
SHA512 7a4016aea4fcc9c4c9f690296c7201ce9d2b0d232217caeaab5ded5eec9f1b6134b13adfaafcf2fc71bee01b75a011baabe82213e9ba8f22604e7a014c651a29
MD5 SHA1 SHA512

NSIS installer

installer

close.png

SHA256 b819b25e8519f5a13f055b867d5891e4eaab46f466c6892d08dc512bdd9aadc7
MD5 ba1f6321542ea3af476f73ad45020f74
SHA1 7735553f9c31b3230e2ae43eeec852dc6c97f1a3
SHA512 24981787882c1fd73c4c0e8466eadf1e5a7fb302b334ee4f4875b44cbffa3d8ef5b085e88428ec0821105919e5ed95717545702af20e40cc3b40fd31a0596e22
MD5 SHA1 SHA512

NSIS installer

installer

close_h.png

SHA256 81e4516a02f8ab9f073908219bd68a64a41c54c568d21da6c83a4450bb8c580d
MD5 52b576b4c1575b61c8a515705bf2a501
SHA1 ff4fd57b413d0a31be663a52b9e3c620378d4c4e
SHA512 65cbdb8465260e2aad3723e9ce72b87ca0befd5120e03776aa86e3b7e2678c969d49e4adc178468799c8a4576050d3040058d21712061e99785b324b3534e996
MD5 SHA1 SHA512

NSIS installer

installer

close_p.png

SHA256 d44250e430242cbe3b783248f2a645171b1067dcb9dee0e3902021ecc2bce65a
MD5 84879db254962f7e811b3810ff8badc0
SHA1 d5a9dd858643633c2bcbaac62aed7bc09635b992
SHA512 bd723b4504e3de315395c199226444fbb9ca1db3c080a769f55f325153f2f669d1081922a4596559ad26215765443a02ade8253384a45d7280076ea647438ddb
MD5 SHA1 SHA512

NSIS installer

installer

decrypt.png

SHA256 481fe9318f31afa6d1fd2493010b2f553e0fa0b3b7fe261d534f247779dc220f
MD5 ec6bb2500d994503120f6589889e3bc8
SHA1 232a244a264db53b025d11aad377dc036b1fb2e7
SHA512 dfa6d3afe52d7097dba520b1cb7d555354f32c4bd3443771e26b12b51778ac7b698bb4e9714787ec6a6972d0a78816af5ce0a9ac7f93e397c2a70cbae6fa5f67
MD5 SHA1 SHA512

NSIS installer

installer

delete.png

SHA256 2a8569847b26204715c5e1f2cb30bf87b71db59cc4efd369cff193edefbab2fe
MD5 16f8387921a14b421ad7ae826658ea56
SHA1 7fac8e1697c11342d327ee98a2c3fa52198e5b30
SHA512 dac99b0c6d5347352057d8b9ebeba6d2a91805f8411474589b81fde84f9b153e989c92d75f19ffa93776e6488a5b663c751163a58ec3c0816b0124f097cea246
MD5 SHA1 SHA512

NSIS installer

installer

desktop.png

SHA256 6c44a8c2c9b4b4bbc83bf6d19a06cd671e28002ab4848e24c3c3886aa28c04b2
MD5 b38bd6e6bbf33036d234ac5798b6409a
SHA1 4c4e65408f6a9051b26fc86a3df9a5945f24a346
SHA512 923ac55ec1591f6f2be0616caf5db93ac76de350fbb471af4d46313dd20d0894d46469d0d038557c54386bb45f21409729d0604cb7ab1327918b7bacfe2ac701
SSDEEP 384:OLinCujenCN7+hbsd7T4pWmOqYp3KRjOJqH9FS92I6xYk4UaOS:OXEN7+hbsdPwjLYQRjSqH1x+Ua/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

directory.png

SHA256 655d86aa0fd3292f147b42aa47e739cccb20e6537d38c2ff7b7c2ae185ccfd1f
MD5 df9c2d5d8a65c669517452f8f08d5e9f
SHA1 562fc7072e4deb4174a5eefb072c3a9106e8f19c
SHA512 bcc8f6284426d5d546e9fd282047165f98125449426073cde2a2e09067ff1052ce19d71e1080a0d81d3de0e57781f225a8beb67530547e720cd1c7da9e27d3c9
MD5 SHA1 SHA512

NSIS installer

installer

download.png

SHA256 26be552a1c0091fb89d3db9bf122e07bcf6d5f912808747ae267f8b872a24a77
MD5 6b947c2ee08ed1d960b87cc8f406fb49
SHA1 c9d7b1459c162f6432230e1194dde9ee2daecb25
SHA512 1176d5476c0032f93f1fb02d93f06212606ba26ef5be54995b77b4032711f60ea5d49fc32a8270b1907fdb1d0ab81e7910f3cfdf312b1e69f41845b6a2be8e35
MD5 SHA1 SHA512

NSIS installer

installer

drive.png

SHA256 c92a90ac7527821ee6d5b2f232ea151ccd2ba683aa7839b7d7f99090270aec31
MD5 dcbce50344db5747a47d58a4ea254f06
SHA1 5fcb2dd36622085deeba7f9dc5750db2587aca6a
SHA512 6c0c8da14bfdbd3087e40b1d8e02b2c5c2a2742d630b7b06324c59544b3ed712646290ae0717a5b0cf7a1653c042d748a7f7091d4326d796c493d2ce1a0421a9
SSDEEP 96:zSRiFESggvBa5HnCx2Ib3HQYDRryeZ9vFtnSIVYxUkJIZVWy1l77wh1pCn5l:zSkFESgmBahCx2IcYDRrx9tSIVYxUkJ8
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

execute.png

SHA256 052d587278924b57d813abcaa31593e354732328f67f2def42418f56b35ea0f4
MD5 6fe83c872fe96f0bd0287ea7ad1a0672
SHA1 22ed01a5508e36e1c4fb70021aea41fedc8c3356
SHA512 3ee2a242759ccc95c4eebba11c427948397dcd98d38f86e73464a1f65095bdbb71bb50270f10093d621f1f871bba70f7b8e669d50edb618203e8a1b363e2f5eb
MD5 SHA1 SHA512

NSIS installer

installer

file_menu.xml

SHA256 8c6bf3c2ca63510d115085f574a04b66b1184248bceafc8595d628a8c5c01a16
MD5 338b76e0ef8936289e800f796cd0fbc2
SHA1 f7f586f0183a6e3414558e2758bc86ac2a5cd5de
SHA512 4cc3c456fe99d5ea4a10ed235e44d5b19f823d982ddb25ccf8dbe6e952f80f04e9463e8d2bfbb216eb1eb8827de0315157b70b1a91b679445948f21a537424d3
MD5 SHA1 SHA512

NSIS installer

installer

list_header_bg.png

SHA256 18479049a35eb89fd2928d4d86fb6257f19e45db606041fd32f3d683e31bf103
MD5 2100386297ec1fe2d1d980f0be5618e6
SHA1 2485b36e2407f365d95ac0ae08a5a90ccf8c9ba1
SHA512 0f2dae9795acf2a6e99bff3a0e2dab4797423930833cc62e83c3482454bac82f722f5607cc4920074624233fdb3cc8ca337a2c709eaf212b6952362e98f31e5c
MD5 SHA1 SHA512

NSIS installer

installer

list_header_sep.png

SHA256 4c02e981bf55866b41383aa9b41a1c78965333336e103f2934a4d06dc4ac5b42
MD5 ac2057afb31b2727f74e8561c6eda132
SHA1 f81618c1bafb3a03879422da5408307e3e6c55da
SHA512 5036e1805adb08f261a3044d267b4085b683706df1b757d2abaec135051aee3fa630dbb7143d4449e674903d20a952494fdba3226e8a58c401ed313ad8021338
SSDEEP 24:GMI1nqSWuZDv/SADM5cyZlTkISHiaNjQc:GMGqzcvLIZkIt25
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

listitem_general.xml

SHA256 e251b58f8f35051b04a9b0bdc3112613bb0b0f6fc1a0e671425138d8dbeec094
MD5 ad691155896754747d0872dd4c6d1464
SHA1 d8c2f72b63abdbe5fa0e21a5524cd0c7005a5c54
SHA512 0705034f8684d3dc35296734665d794b9274440ec97c7b5be3163a1b16066b3816027c5a576dcf229857dc01fca446dec013e9a313d67a6c7db72c3fbd53d01a
MD5 SHA1 SHA512

NSIS installer

installer

recover.png

SHA256 9588379c69a428610e049ba2fe8d7c8b0903b8cee340a7c315c43bee54a29987
MD5 0d7cb29845dff8fff63f63bbb138a952
SHA1 041d0364e584fe2f43e0c99058abfbad7f5a21a6
SHA512 eabdd38212265df02d89b6f6df418a3a3811a83349b49cba97588274804b41f877daf15e79fb2a439399dd2d8f1725028ee33497f519ab84ba60acda5430d04d
MD5 SHA1 SHA512

NSIS installer

installer

refresh.png

SHA256 5b41d65d3fe8768a033ba03019081247b4913058cc2b417db4957f0a8970cfae
MD5 6092930bbf946cbda159d0c2da855a31
SHA1 c77512b670b3eed4a84f5ce58081a21f02a91f9f
SHA512 5717c7977c07c4b92af1b1da9e50597039238fa5231a24feea2823b224ec2d1819e27ae86463b0f8dd7be20de05018dc53b1a8f0aa429ea5b90e367ef2f0cb76
MD5 SHA1 SHA512

NSIS installer

installer

scroll.png

SHA256 1e8d829f4b8947440e34eb8e1813c1515fc9f13ae7f6fceac784ae199c2001b8
MD5 716fcc1c666201ffbcb895a002ee2447
SHA1 5a001d4304bb0903626983356d21b9052af6b755
SHA512 ca5431938839dd9ad72e03d8187902141b2a635f01932890b040e5331e6b04f70bdd9507cda861fc1b166b84cf84f6aa265efadf7b9c9036b894ba82c028aa07
SSDEEP 24:CMc1nqSWuZDv/SADMSbccZlTkISHiaNOYqT05oQySEDzHxppr2Yf8wU:CMCqzcvLJZkItk7ySEHxDr2mXU
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

treeview_expand.png

SHA256 7b646663b51a5cec915560e3f0ef310a34adfd771eb554cdba7e2c42340d33d9
MD5 1821fcd40941df2bcfa281fc8161b56a
SHA1 dafcc052a1c24491f3af81e663ffdccbe08dabfe
SHA512 4c3b259b19bbe22d661526f9574a0141ae7864ff704549c704914aac2bb8283339a88d4d9cf35ebeb276eccc162c199cdbffebb12053f919a47c84dfbf5f289d
MD5 SHA1 SHA512

NSIS installer

installer

skin/clientinfo

SHA256 cc41d236936a96fe45ebcfbe1e474349a897356cad9ee76f9709c8ed95d5e349
MD5 ebf93a9ea13cde10629b1fbc6dd2280b
SHA1 cf12396ca0515a1bd4269d2b8aa1c228a51c3af8
SHA512 613099f2e1c98dd017e147605feca463994b5276358428bf3df0bb870d2ab0e286b5b563603db6e00686a39c7e5e261c9bdd55032d82bb379ac1718d9fa7c74f
SSDEEP 384:V5dhMlR6qE3EWA6qJ+Avg57wKnFnuYDTU4VJUNCA74LVJ2Md:VSlhvk7sY8i6n4mMd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

clear.png

SHA256 a114031534d50c09aab50bd2917dcb7f9088215d7e8289d08653a98a2b4bd55b
MD5 3e504cc2323677619b3d0ceb192cce14
SHA1 adbc7e1ff53405cb0ee8adc8e19d2c084265cae4
SHA512 7a4016aea4fcc9c4c9f690296c7201ce9d2b0d232217caeaab5ded5eec9f1b6134b13adfaafcf2fc71bee01b75a011baabe82213e9ba8f22604e7a014c651a29
MD5 SHA1 SHA512

NSIS installer

installer

clientinfo.png

SHA256 802c8c9069ae0da137182b7e606ed58a1ce9e127f3f3b5486264c7480f47ecf0
MD5 6b5a401a8d896ecf8eb3d3fcfa032506
SHA1 a20cd9c4974f0ac9c30e2f1a6992752fb2b52537
SHA512 7bd95f9ac95e2058382287d756deab9bfd5a4d06772bda4dd349fb83acf41f39eb8b0259078d87d29b48cd779b83099debf34561dbd2314786a07617bbc0b70d
MD5 SHA1 SHA512

NSIS installer

installer

clientinfownd.xml

SHA256 00151eabb8eeb6e0d3f3814083921ede79628c0908f4c965a2a87f80b5ce1cf1
MD5 6192939ef8d07ac6c754570bb4f842ec
SHA1 e8c015556579110658a975f59dc5f40cf7d7c14f
SHA512 ec6ba50eb09bcc5b9356292c97b9130c3f08ba95826ffcc5cec79be3027649c7764f57546d3d1836edd1113e25f0a0838a6631ee6a334b46e6cc83f25bbc1ead
SSDEEP 96:DmYQ4ICRuuCf00+KbILEIpaw33Yuo9h9iFNo9B9To9Bo:DmYQVM1zkv9h9iFu9B9To9i
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

close.png

SHA256 b819b25e8519f5a13f055b867d5891e4eaab46f466c6892d08dc512bdd9aadc7
MD5 ba1f6321542ea3af476f73ad45020f74
SHA1 7735553f9c31b3230e2ae43eeec852dc6c97f1a3
SHA512 24981787882c1fd73c4c0e8466eadf1e5a7fb302b334ee4f4875b44cbffa3d8ef5b085e88428ec0821105919e5ed95717545702af20e40cc3b40fd31a0596e22
MD5 SHA1 SHA512

NSIS installer

installer

close_h.png

SHA256 81e4516a02f8ab9f073908219bd68a64a41c54c568d21da6c83a4450bb8c580d
MD5 52b576b4c1575b61c8a515705bf2a501
SHA1 ff4fd57b413d0a31be663a52b9e3c620378d4c4e
SHA512 65cbdb8465260e2aad3723e9ce72b87ca0befd5120e03776aa86e3b7e2678c969d49e4adc178468799c8a4576050d3040058d21712061e99785b324b3534e996
MD5 SHA1 SHA512

NSIS installer

installer

close_p.png

SHA256 d44250e430242cbe3b783248f2a645171b1067dcb9dee0e3902021ecc2bce65a
MD5 84879db254962f7e811b3810ff8badc0
SHA1 d5a9dd858643633c2bcbaac62aed7bc09635b992
SHA512 bd723b4504e3de315395c199226444fbb9ca1db3c080a769f55f325153f2f669d1081922a4596559ad26215765443a02ade8253384a45d7280076ea647438ddb
MD5 SHA1 SHA512

NSIS installer

installer

copycid.png

SHA256 02cc0b55a06ecf6492577454613d75b4cedca3ebc839b4256eef8673fa1ddb26
MD5 5bc0610587e3dbb6b27bfca227041a6c
SHA1 b53d7b93fd6d67637dcc1867cd7216c021b7c19d
SHA512 ec0e0ccfe21a5028a0ae5ca068a24bab41dea5b43fdd8eeb9089d96f0287ce1bc436f114c2be3ab185d0e11c8f72f4ecae6421f45e58080f5859dc80a021dc38
MD5 SHA1 SHA512

NSIS installer

installer

delbtn.png

SHA256 ba816aaad87378be29a1e5f8c16c71d94c9ef0b181afd5dce7880b324ba080b9
MD5 00302b31de1b8d580ad194ac96591fe8
SHA1 96df57f9212ec4e6d6933f8781882d2e3ae86aed
SHA512 9d8f6493de05002585005ae2ea6a4533804599d4fdf66ef94daa3309e41ffb606cd6dc43f979261457649746e068978fb40db7f7948e03b698db32d8f8707272
MD5 SHA1 SHA512

NSIS installer

installer

delbtn_h.png

SHA256 63c9cc92af8bc830b7bf41694f5097b9fb57fc0ce45484d65473f1d46ec10f11
MD5 6a6bfdb320d5c2cbb46e3b725ddae859
SHA1 96a2da6a9651da4ecdefd5d862ecd577b865dc6b
SHA512 fe8294d317d74c4f0424192429280e610f58f0fc0e068f3105799a26000a055712f1b4fe9a91c7e539bb92ed458f2c744669bb1b9392750b1e71006f00bf9c27
MD5 SHA1 SHA512

NSIS installer

installer

edit_ci.png

SHA256 79a92113128b942e28b1be0e71c00d23635107052c6ab0cc3a6560b92c91df20
MD5 0ca9cc0150fc58360c7ef2e00e3be99f
SHA1 e3d4400ee8be7244539be53d0cc5cec206e58a6a
SHA512 c10f207a3617b3cbaf39432ccacf042e29204611ad0e8c292cab83a980269baf5ad3e86299421119e56716c88995902947de3d240ae8fd039db41c431d1850e3
MD5 SHA1 SHA512

NSIS installer

installer

edit_hardware.png

SHA256 39ecdd8c1a14bb1343b24833fc9d936f6db6ddd250d7f129c6b5896a4b883ced
MD5 057632829a65dbcfd601504cd8637981
SHA1 6bac386410a70f85ad7ebba2c5dc47972a8317a5
SHA512 79136a0d0660ccdcd5114bf6d5d4b7124b89f697cf12a9fc383bba8b1253e7940d42bbaf706aefe7055a04ffd78f7ec521c5c8c7dd845bd4dda93130b7cf2538
MD5 SHA1 SHA512

NSIS installer

installer

editinput.png

SHA256 7b8d1ac1e019d826e52a94deff88f182e8efc39efdf80ee556e06bdfccbb98b0
MD5 8643bf3538a75888ece14a6e9adac6f2
SHA1 d51e51e9cd6b16835a45024382e21b58e3bf1f72
SHA512 86f0ca7d85f38f9c35037d2d3dcf90adec3c086670272603e49a3078eb9a096334eaf397a790f6dc6021866a5c2bd9c49efb1c9b14ecda2d3c3834f66c4bc430
SSDEEP 96:fQEvyWDtvYQtHfxKc7OnseTDLfZJDihDvuHDqjLiZB3bDjwfiHU1+6QVOan:JXBYCp0nsAXXiNYDqyU46dan
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

editinput1.png

SHA256 c5232be14f97888112ab23699ba35be50024e5c08e0a301b07524ff1838fbf17
MD5 9401c426ef6fcc96f34363a611c82c20
SHA1 4983fb883d5c5de8a0a44a5470ab577e0232ff9a
SHA512 032f50b5c6989c26d576081a85ceb3256e592ac95a1431d5f05bff8236e6ce1e5546fdbc600e9a7d0813a23344893eccd9f5afe5f9e0794a9c6182c40e3a8c39
MD5 SHA1 SHA512

NSIS installer

installer

hardwarecustomwnd.xml

SHA256 f57951c234a56ea128bc3a0ddb35676493df32121450d8c994fdf3769c1709b3
MD5 a2a87c618fe9f23ab2b05ce669060bb4
SHA1 4fbeba754d2f52e8c09ec075039c5a43b5c84538
SHA512 2cf03e68b5f4dc2338f943ebdb1d8dea36c7187dd5ae60ac8df44fcdbe068a223d0b7d24cd678662d93ac885b866fb6618abd074dfaaad7fa5a1eda6ef4bd952
MD5 SHA1 SHA512

NSIS installer

installer

import_rule.png

SHA256 914a3c5a8b229273a43c600b94715e2eb0eae8665ba399e45e028f2772091911
MD5 36566644179f876e9bd7195ae1c579aa
SHA1 fa57e3df29b1f8922782dd780647e02dd258f912
SHA512 4db1149599483fb41b5f9ba920bb315561413345b8cf6b5bae172511f20c7a6778a516c93f2d8d72181f4807649ecb77d445ff0a964f3a75c8ca6c5ac84f2bb7
MD5 SHA1 SHA512

NSIS installer

installer

initinfownd.xml

SHA256 4f9fda866f541fd61c000233f79cb2dfc28eeb234dd766a242a0732feda60aee
MD5 202ac6960362495e35a4815f1bc2d36b
SHA1 d46cfa9d483cb0982e9b1a5392758546235dd064
SHA512 58c57394f8d43e972f3c1f8fc1c6be5f9ac3609ca8b9f446973e7cf01bad3ef75ab34d7e8a1eb99761220f996c9f1571f9c4e4ec95ef696ecc2e2aab6816c6ee
SSDEEP 96:OxjCwMlZPFrcclbQWdWAWYQRN1YaanInsmdwocdfDFQB8c8xJqcdlVo:eCwMlZdrccCojWYQRNOnInFF+DFIZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

savebtn.png

SHA256 5588c692f47a1a29b97f8f1cbda481dfb4ef27fcd64b1b5f2d9f3b31736671e8
MD5 4d0fa506a552193b8db1967b86025aa8
SHA1 f7cfeb158ff41ff9527ad1a9a7182814f6064459
SHA512 995660790c182de73cadd8ee415180965b2b1c82a24598b0ee190f9585f1647b0b2cd8fab9df17d972d8118d2961cc37edb64c6255afeb94b23491e4fd861b2c
MD5 SHA1 SHA512

NSIS installer

installer

savebtn_h.png

SHA256 cabf4f6fb18e6c8816157f05db2453abc0dfd690d26f5e93dddce51677898bbd
MD5 0f31d573d5695e75cfd4de0d64705706
SHA1 8795834d4811b1e986e68106cc6f91c779bb7990
SHA512 929120205b6a21f5459acb97da7e7025cc61c4b62086ed81613daaf07ba6e020895703c9141af1d333c8edc5c2f579298580b8b128958c5c11f591f803709761
MD5 SHA1 SHA512

NSIS installer

installer

scroll.png

SHA256 1e8d829f4b8947440e34eb8e1813c1515fc9f13ae7f6fceac784ae199c2001b8
MD5 716fcc1c666201ffbcb895a002ee2447
SHA1 5a001d4304bb0903626983356d21b9052af6b755
SHA512 ca5431938839dd9ad72e03d8187902141b2a635f01932890b040e5331e6b04f70bdd9507cda861fc1b166b84cf84f6aa265efadf7b9c9036b894ba82c028aa07
SSDEEP 24:CMc1nqSWuZDv/SADMSbccZlTkISHiaNOYqT05oQySEDzHxppr2Yf8wU:CMCqzcvLJZkItk7ySEHxDr2mXU
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

search.png

SHA256 b744ef778c6862faab59fa46b2df318322503b008797a8bdec316fa198c1dd57
MD5 6184c2d54a07d9090f850eabe4da1ced
SHA1 e8eb3fa076bf7353b13238a4c0d7f7f22ab9a004
SHA512 9dd8ce36abf367d3b6970bc55517ce4bcc8f7bb70f78de543ecfcedd1c8b6bd49d886406f079dacbd0c277d8940f84bd75fb075c73785f631ade3871d9ff6d81
MD5 SHA1 SHA512

NSIS installer

installer

treeview_expand.png

SHA256 7b646663b51a5cec915560e3f0ef310a34adfd771eb554cdba7e2c42340d33d9
MD5 1821fcd40941df2bcfa281fc8161b56a
SHA1 dafcc052a1c24491f3af81e663ffdccbe08dabfe
SHA512 4c3b259b19bbe22d661526f9574a0141ae7864ff704549c704914aac2bb8283339a88d4d9cf35ebeb276eccc162c199cdbffebb12053f919a47c84dfbf5f289d
MD5 SHA1 SHA512

NSIS installer

installer

view_reqcode.png

SHA256 243c2473fb2e7347ba67d9f698edf0d4655bb3f7c8da686552cd885142305e6a
MD5 36bd20036927524a4a463aaf0328aaa2
SHA1 ee2e1fff0807a96818f10d6cd9912b2c838fcadc
SHA512 b63c20fa724a7c64874dbbf7ead98e9ced698c18887e35cf2566a03b9b18e1c196c2a651f7ecf0a2722c806c9de0d2ab36ff16f87e881c5f5ba3dcdb2ee96430
MD5 SHA1 SHA512

NSIS installer

installer

view_rule.png

SHA256 243c2473fb2e7347ba67d9f698edf0d4655bb3f7c8da686552cd885142305e6a
MD5 36bd20036927524a4a463aaf0328aaa2
SHA1 ee2e1fff0807a96818f10d6cd9912b2c838fcadc
SHA512 b63c20fa724a7c64874dbbf7ead98e9ced698c18887e35cf2566a03b9b18e1c196c2a651f7ecf0a2722c806c9de0d2ab36ff16f87e881c5f5ba3dcdb2ee96430
MD5 SHA1 SHA512

NSIS installer

installer

skin/dtescanner

SHA256 0a5a203270d1f73b517082d43fa12b9237ffb50d439d223ef55356ff5d447aa4
MD5 7b0d4dd9f99193bfafb472b3810993df
SHA1 c0eac086088fbe730997171a0405a5ae4b69f8f6
SHA512 5cc750830cfec6b05d867f2d1082d70071fe7f4283117f6edd6daec19db14083e1c3fe5f7dfb91fd99eb14eb3fecb466b69b08b3d48ac50af911f6ea23fd0c50
SSDEEP 192:tgW8Sl8KgvxOmlPTK51+3qFPtXDW6FQIa+9OyoYsHimU/lcXBYCp0nsAXX1SoJT1:Vj0V7YA6qJ+9dcKnFnUoJRjH
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

ListItem.xml

SHA256 33035f2914839b6c8cd45d54b684f8b52af8c53df198429eb30c93e03c8a9c98
MD5 4e38f68fcbcb45a8557f09b29492e66a
SHA1 bdbc43817cf517831e2adf528e66d61c4b134955
SHA512 39f46ca43f7e94c2055295f9bd701eb0fd8bb180f9bd193684fc520a0e1ed8d9964663f329f51c862de70f71afef83cdad662c6807844393af46517672a6eabc
MD5 SHA1 SHA512

NSIS installer

installer

btnbk_normal.png

SHA256 cb52f5ae89fc243628d5fecec28f1de4c966baf2d029401eba33d6871c76eb65
MD5 13e7ee091417e35b71801594621aa2d7
SHA1 2054d9e30958f65020e280d1879780f8ac46c9b0
SHA512 3162554c8d47fe705e48782493759c567f6da07455fcd444561440367885634d46bedd3403f582c20c03d43d75fdee6ed09d32ec3790554ef5a245d01db314f0
MD5 SHA1 SHA512

NSIS installer

installer

btnnormal.png

SHA256 5588c692f47a1a29b97f8f1cbda481dfb4ef27fcd64b1b5f2d9f3b31736671e8
MD5 4d0fa506a552193b8db1967b86025aa8
SHA1 f7cfeb158ff41ff9527ad1a9a7182814f6064459
SHA512 995660790c182de73cadd8ee415180965b2b1c82a24598b0ee190f9585f1647b0b2cd8fab9df17d972d8118d2961cc37edb64c6255afeb94b23491e4fd861b2c
MD5 SHA1 SHA512

NSIS installer

installer

btnnormal_h.png

SHA256 cabf4f6fb18e6c8816157f05db2453abc0dfd690d26f5e93dddce51677898bbd
MD5 0f31d573d5695e75cfd4de0d64705706
SHA1 8795834d4811b1e986e68106cc6f91c779bb7990
SHA512 929120205b6a21f5459acb97da7e7025cc61c4b62086ed81613daaf07ba6e020895703c9141af1d333c8edc5c2f579298580b8b128958c5c11f591f803709761
MD5 SHA1 SHA512

NSIS installer

installer

checkbox.png

SHA256 3da9d41a9112d99b7872420ef52970ab4e75e92289a35d036421070580cb258f
MD5 982831e3e8404b66430acbe73e19f8ab
SHA1 3157c40e0c0bfa639c3e1d8869ad157d5debb13e
SHA512 884a45486ebe99b962cce18e53f672bafaa687eb354dc1321f34ce35c9a6accb891d7c6079d4eb18b1f198da276b19009811fd35a64a318b3a45c628f3b79b7d
MD5 SHA1 SHA512

NSIS installer

installer

checkbox_hover.png

SHA256 5015d1e540d01659ab338b25962231c01e49e432ca85e4c7f0603ff901669f15
MD5 018f51674dfd8b25629315fe41eb070f
SHA1 77903f1da3e34096c92534bbf3c3d567bca866cc
SHA512 3ba70d1ad7550802b4cc4d4113f6877bbfa748a1e9e96e39fee9983265f06ed198cdb79c4105c03f879b862dcbf1cb6cee20937f79bde24f9e9161e43f8f1899
MD5 SHA1 SHA512

NSIS installer

installer

checkbox_sel.png

SHA256 39b0f887ef687a38ae142708ec0448401bb5546072d79ee88bbd66cba0a84318
MD5 63f06ac55133c81aae1619d1cd602b07
SHA1 b6d4b7f6effe7ac610a68c2bc837584cfa3bd0c4
SHA512 a88afe9c06923bc1fcc9c33d72e16c74b1d3dd533fcf319ae2833f3b6e9d0c3a82852405143355dd7650ebdac5c93799800a2cb211dcec1afff80771c1bf50bb
MD5 SHA1 SHA512

NSIS installer

installer

clientinfo.png

SHA256 802c8c9069ae0da137182b7e606ed58a1ce9e127f3f3b5486264c7480f47ecf0
MD5 6b5a401a8d896ecf8eb3d3fcfa032506
SHA1 a20cd9c4974f0ac9c30e2f1a6992752fb2b52537
SHA512 7bd95f9ac95e2058382287d756deab9bfd5a4d06772bda4dd349fb83acf41f39eb8b0259078d87d29b48cd779b83099debf34561dbd2314786a07617bbc0b70d
MD5 SHA1 SHA512

NSIS installer

installer

close.png

SHA256 b819b25e8519f5a13f055b867d5891e4eaab46f466c6892d08dc512bdd9aadc7
MD5 ba1f6321542ea3af476f73ad45020f74
SHA1 7735553f9c31b3230e2ae43eeec852dc6c97f1a3
SHA512 24981787882c1fd73c4c0e8466eadf1e5a7fb302b334ee4f4875b44cbffa3d8ef5b085e88428ec0821105919e5ed95717545702af20e40cc3b40fd31a0596e22
MD5 SHA1 SHA512

NSIS installer

installer

close_h.png

SHA256 81e4516a02f8ab9f073908219bd68a64a41c54c568d21da6c83a4450bb8c580d
MD5 52b576b4c1575b61c8a515705bf2a501
SHA1 ff4fd57b413d0a31be663a52b9e3c620378d4c4e
SHA512 65cbdb8465260e2aad3723e9ce72b87ca0befd5120e03776aa86e3b7e2678c969d49e4adc178468799c8a4576050d3040058d21712061e99785b324b3534e996
MD5 SHA1 SHA512

NSIS installer

installer

close_p.png

SHA256 d44250e430242cbe3b783248f2a645171b1067dcb9dee0e3902021ecc2bce65a
MD5 84879db254962f7e811b3810ff8badc0
SHA1 d5a9dd858643633c2bcbaac62aed7bc09635b992
SHA512 bd723b4504e3de315395c199226444fbb9ca1db3c080a769f55f325153f2f669d1081922a4596559ad26215765443a02ade8253384a45d7280076ea647438ddb
MD5 SHA1 SHA512

NSIS installer

installer

directory.png

SHA256 35a78874d48943e9835b6c853ce57810a9544c190933be990f47fb3db681f8ef
MD5 854ee6c6a90803c451feb34f533b8eaf
SHA1 ae70521bbdedbdfa9a846d4f3f031481f334c460
SHA512 08bd4a2205160ee95208b1f92caa92931727ff0a90e1362a0a411032e1591cdbfc665e4e097ca1607118845b58763797b6d2e837b268bf334ad9baa517117530
MD5 SHA1 SHA512

NSIS installer

installer

dtescanner.png

SHA256 b0f1985f020eea0be0fddfb4c9e8a1aadcfa1eeb13ca8b9aba8742cb11edc7c1
MD5 3c3bfe2ae18017146ff59586005bf40b
SHA1 9a27f2234a97a338213045ed597677c686a35b75
SHA512 f31d4b3bf73c7e1ee87402a03649d3ecc97adcafcee1ec8e0a8b73e865b624ffa43da0bd2febaa9ee2d59ccd4dc1d07def815cccf32e4ca69e6b82611df18768
MD5 SHA1 SHA512

NSIS installer

installer

dtescanner.xml

SHA256 cc4c346d01a8ac58dcda80c98ea6e88febcebb7023b6e1e133f98af72f928e4f
MD5 bd2d5c1e3460c1c3b66ca53f65fe8cc2
SHA1 955762221fdb3edf92ed1d9c0d984ab5651532bf
SHA512 fb1ca95a46eb40e2f84d33c069ca69a66a0ae256ff844c92436613972cade7975e22488bf9f6f7f8c6c49086a35d5243d0a6af185adf587e5e2dd49dfbf8532a
SSDEEP 96:Fn3CxjCwMlZPFrcclbQWdWGXMYQ4aM3UIISP6IIKWggxxU/Q3eGcdF1PNqZ:B3SCwMlZdrccCo5XMYQhM3U2CzgF0U4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

scroll.png

SHA256 1e8d829f4b8947440e34eb8e1813c1515fc9f13ae7f6fceac784ae199c2001b8
MD5 716fcc1c666201ffbcb895a002ee2447
SHA1 5a001d4304bb0903626983356d21b9052af6b755
SHA512 ca5431938839dd9ad72e03d8187902141b2a635f01932890b040e5331e6b04f70bdd9507cda861fc1b166b84cf84f6aa265efadf7b9c9036b894ba82c028aa07
SSDEEP 24:CMc1nqSWuZDv/SADMSbccZlTkISHiaNOYqT05oQySEDzHxppr2Yf8wU:CMCqzcvLJZkItk7ySEHxDr2mXU
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/enced_normal.ico

SHA256 c7bca48d66c1f4ff23d9c5c9fc94e511558b9925492dc7e9311f23a6dcebe378
MD5 d0f13e7a5cdbeee6959b4af74b208b5d
SHA1 5f7287bc93800907cf21ea789a49692e0d633a03
SHA512 2937d51e4a67e9353d054f0224d3ce20f13c5b1887a625aad201ee51ea35d8c029971a547a2dd602956796104cdb1520293bc3df96bbb1ea6cc0b73b115934f8
SSDEEP 96:DWhSc1KIhBMU9RvQ3tsWGQUp7Sh0LK6v8T0NVGt3pppppVVlUT+E:DWzhJrvJWGFNLK6v8T0fu3pppppVVlfE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/enced_offline.ico

SHA256 bcf9bcb4ac96a2e25fa94ed922e622023d7efc60f99c41b7e201a72d2d1c9eee
MD5 c07b241992477aca341baf13c01846fe
SHA1 d3a60a0e8dc3f31cfbf513e15d91e8bbc1ed300c
SHA512 6d031a3674168ffc4ae6e4cb95afe1b14bd0a788c0a282a690874cacd11ce3ad82b81cd10ca0b0d8c5e1f1f3b609b3db0ff84b84dbd90dd4a93104381d5682e1
SSDEEP 192:93Nq87ru5fqV8qMiqj84c3SJWWvYbZQMp3I:9hnu5fqsj+SHYVI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/enced_unauthorized.ico

SHA256 5af51d5f5240b246494d4d2b6f524627ba46d246ecb70de85ccf06a7824216b0
MD5 3793ac8dc436ec38cc3ef6beee4a8c91
SHA1 d1b8fa69431e5ccf7180aac852f5766179107d3c
SHA512 f82b9e0b08dc96f00476bbde3cdbb29d868ef3e17a5d164eed9df9ab6af973d87f2b04be509a8782e4f4a62783f17bad2aea7dc7a0bb92b11f6abed5f9888711
SSDEEP 192:szzAHFSTcZ8x8Z7ZMdHiwzLnxfSHGlsC5:tac+xlQw/xB
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/gxlogo.png

SHA256 c330b9f71fae2990c7b2bc8c0403cbd867a176fecba667bf377b1a87ce18a546
MD5 5e1f2e16920453a56005bfab8d4af471
SHA1 d4d83d21391d2a738f20fb541d3c379ae0df9c27
SHA512 811c17cfe1f9c33df5afc458f6c23e9c3e1a9defc98a7b0a62a58cd960e112494ef4904596d44a892b1df906de705f2a34e609cb4b9a829aa862b42ab9485197
SSDEEP 192:XTY/J9NAihEQrhsJdJZwFiWQes+ewGVFvCbfeiEktfu:DYRfEJJZMIPwGfofesW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/gxonecli

SHA256 1b5a5cd44c92ffa8be9d9db048ff24bfc247837f4a0114c7dea1cf2e9dab097f
MD5 8b751a5eec1a735dbc092778ff29c9c5
SHA1 7632a06d7f211e97be446f180326900a41b904f9
SHA512 bc277509f7a52aa2d815788f4fc41fe57eafa85265d4e663aa8b06793cea0fbd8b183e479b73eea539aaddd36855b811f282e54ce67f5d0ad49cad7923de9411
SSDEEP 3072:FekKAwCWrIQ/v0Tz+nFCCV5/Tequ4zPyw3FD:MknwCWv/cG7Teiz31
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

account.png

SHA256 9d818f03358b1e0576b17174e93ee7c43f8c536e6a64fd0b591b3cdc83dcbea4
MD5 32efba14b1640e1a52278f1076b519af
SHA1 23a14178ac7e8ad58a62c2c55750dc1e42020bb3
SHA512 680d81084f0710955d92674bbc2ac1457b6fc2b4c87fcd06322711c8fe89e8c6b96872d907d78e3d8b185b069588cd227d45420d46462dcc49505c74a363e083
MD5 SHA1 SHA512

NSIS installer

installer

account_h.png

SHA256 198dbc731a6a1cf32bf30274ed7e8f90d502acad55eac107947670942bea0acd
MD5 7b497dc0bfb48353c17d37cdb9ad7552
SHA1 fde73f4314cc0571e333da74bd5c9fc570fdc12a
SHA512 d3d197c2cd7bac2e5a7fd93b1e7bab47987587a666de79543ebd6e828562b9aad74a6f2d03ff78ed4c0c86773bbb45f10bfa492e6fd388bf1a3eb5096b353e97
MD5 SHA1 SHA512

NSIS installer

installer

addcustomtoolwnd.xml

SHA256 fdce9a894ae5cf90105917991ae6fe9dcb29e010e24a5066deb5ad870b334749
MD5 89b592cbbf4dace328aa48704daf5bd2
SHA1 78e877eccf9431740d95e5fffce805ae177a8f2b
SHA512 698f2d73fa64153e08c1ee52b7e9e209a738c1781d35800d47264fff81ded6c48e5264528ecf144dc784deb67d0d7087288a0eeb398edffc39ad047dc12c54ea
SSDEEP 96:7KCh3txjCwMlZPFrcclbQWdWLB97YQPWKqWlYxjyfZ:7bh37CwMlZdrccCoQ7YQePWlYx+x
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

addimage.png

SHA256 83e16f0b3338afa0f88d6250575360063cb4f0a56336377c89d45e266a2a480f
MD5 97c1ae765f1af9a68bd83bfa9d8f8461
SHA1 be2843a46e160d4b57a6e1edf5c5e741ed3189fc
SHA512 c111bc0e4c9959f3749acb8ce07bf01622606284470d720695410e7976354fb7940d36d9f9625b7f7eafb6914c049c7fd5be0801e62cab4a39e75016f7c4e112
MD5 SHA1 SHA512

NSIS installer

installer

addoninfo.png

SHA256 03a29f4b1b14331ced5a53c6897a029a608556d1e7b74817f0b7cab3fe7d26fb
MD5 dfbc44e10c67ef13aecdd208a8978dde
SHA1 bdce503e2f7f30ccc17c0673f8fd7f03b5e407f3
SHA512 a53497c9d655712bbfb49a1b588769004b32205e1b27568faa2755a1491e638aaa591a8c6484003a5199e145cbc00a9a0291b3f8b5f6595375c264df492445b3
MD5 SHA1 SHA512

NSIS installer

installer

addoninfo_item.xml

SHA256 acdd40c2c9dd8ae741d5a24a603f989ae953f6cd7e92064d81293d2d3f2b99c8
MD5 8ae2c03d8e6db507b7aec48ea60d5a6d
SHA1 8e17177222a6f4c622275ecde4449f538ed18cc8
SHA512 9094153def65b3f902f3c51258792bdc0f935f117f3180f0609cd4a3c8ebeccd45514585f8ad5bf58342d91213a3131c47170ae0e0a77672c78ca99ae3bc31ea
MD5 SHA1 SHA512

NSIS installer

installer

addoninfownd.xml

SHA256 e17f6e7cb0450162f98573654fda1cd78deab4b267ab45b757fe551d29c382c6
MD5 cbb3d5fca91f009b740ff094e35eb308
SHA1 f8d7b1b1fcb92b2a5d251b76ab5d2fad07a1f329
SHA512 b0d9b045278e07d55128fb791f6e67115168e2695867d6a939c751c0328ee0a86aebdfcadd88b44dce9c46a7af3adadddb2a542ac55cb279d256f8d09d2b0f95
MD5 SHA1 SHA512

NSIS installer

installer

addtool.png

SHA256 db9e1ce9fcaecabcf2d63b732122ee347354718ba8a6a1bb86ebf2a260ae1c3b
MD5 c9c12cfbf2facf5248f0d905769b2c56
SHA1 7ae6ae1ab34f3a321abafaaa5620287c37f860e5
SHA512 090f156410a8b0b65e2d14980e7cc98bb61ad5be57bede99eeedac8a8c4f912b6e2df2db36659b8fa8ebb6f9c9b1ad8714bdd9774514322d8954238c415567a9
MD5 SHA1 SHA512

NSIS installer

installer

addtooltitle.png

SHA256 dc089020f3b2d13fae3c6d38eaa55ac68dd7e999ed5c1cbfe7228892b896a0a8
MD5 d79f1633dc1b007a173ed0d05cb2ff9d
SHA1 e471db63e0752881a9c8168a392bc39d5d441cba
SHA512 012b3ba37785e31fc4b2f3e6de1ca5f6265433802ae77f3a2e5afd253191094fc0f021579fe3544d924ed9dca798764fc8148cdfbe8a2c1bc147347ad201e077
MD5 SHA1 SHA512

NSIS installer

installer

backup.png

SHA256 e779b523dc240d472af2ae091cf788aa9b946d9364886c0effbe725515828d9a
MD5 b9339fcff643f5c25924f6d9c1ed17e1
SHA1 32c64aa4ab32307d9b5792ad4b7f4d475ee89889
SHA512 3bc8e5c87d29bd65d2059f55fa63828f5e24ace357d0b5402dba04c12c4feebffe9d9af8e35c11f460cff01cc3e1f1ccd8bf27eec8204a1a2146061d431307b8
MD5 SHA1 SHA512

NSIS installer

installer

btnbk_normal.png

SHA256 4276cdbe04b207bb01d120bedb254dd49d6a72f7c6a0e8a3f27085e1964ecd65
MD5 50e904c1ff54a33eea7afe1694fc68d3
SHA1 7d415e56167ebd3c5aaab53d214790cc718d7d36
SHA512 89a7fdf2d60e244305b8964be65fcd2de01c834be6ec719a4df2ab95932fa3c0df74efd9162692ce2f5339843a3dd87751d0c59fb0a0041f339b319ac8e6cc06
MD5 SHA1 SHA512

NSIS installer

installer

btnnormal.png

SHA256 dfc1f1ef89de02f9e9e869dd3fb6bef02e73def0a6a93bc001d655bc7af824e2
MD5 e0a4f24515117aa22a016a226df2ad56
SHA1 405c90365717c549e28dcf2f1818ba0f5032a94b
SHA512 193e83e4a9230e14c93c8e1cdca6623400524d8e56acecaa7b9aa192ff0d3f87b2b909d5afe1016a862f94375be9cb2c3526a68bbd81594a25d8f25c572f69b8
MD5 SHA1 SHA512

NSIS installer

installer

btnnormal_h.png

SHA256 4aea0a5863ed4a14b77cbe314bcc88548f571558cee5d7321c8066107fec4dbd
MD5 cb41f392007328b5f2c4212e239e83f7
SHA1 837ab82972357b6b91533ee90de70ee493a721cc
SHA512 51567bac0baea72142e02b55a404ad8561a9b68559701a2d1ee0c7cc4f6032053bd5ddf27c0cf990f9a8e21fb83d4af10c0c12af1ef9aa6c373a538dc4c8d6fd
MD5 SHA1 SHA512

NSIS installer

installer

changedep.png

SHA256 79a92113128b942e28b1be0e71c00d23635107052c6ab0cc3a6560b92c91df20
MD5 0ca9cc0150fc58360c7ef2e00e3be99f
SHA1 e3d4400ee8be7244539be53d0cc5cec206e58a6a
SHA512 c10f207a3617b3cbaf39432ccacf042e29204611ad0e8c292cab83a980269baf5ad3e86299421119e56716c88995902947de3d240ae8fd039db41c431d1850e3
MD5 SHA1 SHA512

NSIS installer

installer

changeinfo.png

SHA256 39ecdd8c1a14bb1343b24833fc9d936f6db6ddd250d7f129c6b5896a4b883ced
MD5 057632829a65dbcfd601504cd8637981
SHA1 6bac386410a70f85ad7ebba2c5dc47972a8317a5
SHA512 79136a0d0660ccdcd5114bf6d5d4b7124b89f697cf12a9fc383bba8b1253e7940d42bbaf706aefe7055a04ffd78f7ec521c5c8c7dd845bd4dda93130b7cf2538
MD5 SHA1 SHA512

NSIS installer

installer

checkbox.png

SHA256 510c18bf6a8af0689337f798c38d5dd1766d8c365b097a01623ca1423ae25f0c
MD5 db47a687314d88bd822fd05a23f9810f
SHA1 3a86a1438769da9ad72d68d525a5e33b8eb256e8
SHA512 85cebbf8ff9ba7cdc17f800aa4c59eff3843e07fa50d764db0e873f2022926c9aae7816487ef5e510e09b37b9b62de838d46aae8b1d5b58639deb16160a75426
MD5 SHA1 SHA512

NSIS installer

installer

checkbox_h.png

SHA256 e4cbe579c6fc26f844fe40bb8b6e4483d7f4ac289a0d6c908bf224ff110e629f
MD5 1c870de675b10ca84b108f3f326c0c31
SHA1 20664ccc22933c0baab42453492bc6045c962f85
SHA512 47cbcc2e1969c9b1a5a1d4069d7774f7e244ee5d9d8bc56d79b6d21e2cb805479de6c56b48d0e20564f7e303a8f9090e9741515c649c541180fef121921ad0e4
MD5 SHA1 SHA512

NSIS installer

installer

checkbox_s.png

SHA256 f1b4889ec49677018368c62cb7b91310e6e70274e97b7b88ecb7db4f68df2254
MD5 2739d2950c3e493cbb5fee220d3eb681
SHA1 90f6fd93d04adbde8dbec705ba0735574edff888
SHA512 215d53c7e82bebfaf2cd2259a680d96d8e40bb2ccc2b64bfbfa40b49c630e3ab6338d985d45a3520216e8ce3f0926f7a1b2f58ab69598173b63834c1038bf854
MD5 SHA1 SHA512

NSIS installer

installer

clearrule.png

SHA256 e33803b2cbf1021f49af4bf0f72b2bfb574040966f961391348b01a35cded91b
MD5 6121cb287939734748ef2cd19a7ee494
SHA1 fc20ed24bd4c408d45abad1507a8c018b5d236fe
SHA512 16a2da708f0e7579bf863a53c5f92263711e748e6e4a36fc409cf448b302defc520481d6e0c77d10a2562bfcf20fa483f6e12b0246f73df02c66c15b6126f922
MD5 SHA1 SHA512

NSIS installer

installer

client.png

SHA256 b50fcf6d78a8d47447ea85bb612ba26c49c8fcd9f64e9a0f354e1da7c8c64b7f
MD5 557ecdfaab76f02815af342e1192a187
SHA1 d0d8caf51613d949ac477e4d3ed276c42aa015d0
SHA512 d7179f4388ff47e8e3b3723a2cd4129bc0c6cd1a9faf8c04e0e5d588664ecf0a27b18cc962e77899808cff781a8bc8b55fceee319ff5b4ba098b9ba99fa53d74
MD5 SHA1 SHA512

NSIS installer

installer

client_h.png

SHA256 ed8882e912cf178b8a3bd564beed980587bc52406a3893718eda505076a4108e
MD5 f6a98fe6f4ad6a057eb4897ccfe8adb2
SHA1 aeef9e0c34deb474459e85378dab76f692b55f18
SHA512 b86063f9c3b1bbed8849354c0734f4ce3a3fc035a424b6c4ae12c5fec399061042a5ba72678980cb0f5180d6b23c3a942fb383ea613cad83f60fedb9e56a64d4
MD5 SHA1 SHA512

NSIS installer

installer

clientcaseviewer.png

SHA256 e7c782a38ff126a65bdbe97d081822e7e36b97fddef6df72ad5cbd682b8cbc7b
MD5 cfa4cbf5c2efdd8d1a608e39fb19860b
SHA1 12c7e219f1ba224d0a6bf6b5bbd769bbdae5eacf
SHA512 5b88de1a4ac136c84f3b996f40ec786d4204aa744ae2753879f4296d63f5a6995e1c65431c85a61401be805ee8fe9ef2d8ce352d7a8faa3df24f171c3434315e
MD5 SHA1 SHA512

NSIS installer

installer

close.png

SHA256 b819b25e8519f5a13f055b867d5891e4eaab46f466c6892d08dc512bdd9aadc7
MD5 ba1f6321542ea3af476f73ad45020f74
SHA1 7735553f9c31b3230e2ae43eeec852dc6c97f1a3
SHA512 24981787882c1fd73c4c0e8466eadf1e5a7fb302b334ee4f4875b44cbffa3d8ef5b085e88428ec0821105919e5ed95717545702af20e40cc3b40fd31a0596e22
MD5 SHA1 SHA512

NSIS installer

installer

close_h.png

SHA256 81e4516a02f8ab9f073908219bd68a64a41c54c568d21da6c83a4450bb8c580d
MD5 52b576b4c1575b61c8a515705bf2a501
SHA1 ff4fd57b413d0a31be663a52b9e3c620378d4c4e
SHA512 65cbdb8465260e2aad3723e9ce72b87ca0befd5120e03776aa86e3b7e2678c969d49e4adc178468799c8a4576050d3040058d21712061e99785b324b3534e996
MD5 SHA1 SHA512

NSIS installer

installer

close_p.png

SHA256 d44250e430242cbe3b783248f2a645171b1067dcb9dee0e3902021ecc2bce65a
MD5 84879db254962f7e811b3810ff8badc0
SHA1 d5a9dd858643633c2bcbaac62aed7bc09635b992
SHA512 bd723b4504e3de315395c199226444fbb9ca1db3c080a769f55f325153f2f669d1081922a4596559ad26215765443a02ade8253384a45d7280076ea647438ddb
MD5 SHA1 SHA512

NSIS installer

installer

combo.png

SHA256 2987e871f8c758dcbd97e737a8a16a543bd66ed445c7d1d69bb4b860d3847806
MD5 f90548f3e5a84e495dc252b10305e77b
SHA1 5ae45e1ec2b76ba94f1a5b8820c193a23f7297c6
SHA512 38d05d6c7a4604057536f663d57d63f3fe09e288c785362d9b255d0af52c91d66f22951e9e487910f3b949195bce04b7efa07a3d491b0838d025f07dc634a5d0
MD5 SHA1 SHA512

NSIS installer

installer

copycid.png

SHA256 02cc0b55a06ecf6492577454613d75b4cedca3ebc839b4256eef8673fa1ddb26
MD5 5bc0610587e3dbb6b27bfca227041a6c
SHA1 b53d7b93fd6d67637dcc1867cd7216c021b7c19d
SHA512 ec0e0ccfe21a5028a0ae5ca068a24bab41dea5b43fdd8eeb9089d96f0287ce1bc436f114c2be3ab185d0e11c8f72f4ecae6421f45e58080f5859dc80a021dc38
MD5 SHA1 SHA512

NSIS installer

installer

decfile.png

SHA256 6da71872eb7c79d67e0ba9538c2c5534325c68f291e1b6b57abce9e463675acb
MD5 dd2870e75ca429f1a79540576a994afa
SHA1 d25c5cf7703570389e157df834130b00055bf5ab
SHA512 ed99d20d1cf89bc9a469adca388b61f5dd6fd734ece455334f7bf90a4bfb6a50ac66cc3205d596913ad64fd49795781521e9566c04e003b6906e21cf2f142f0d
MD5 SHA1 SHA512

NSIS installer

installer

decrypt.png

SHA256 cc0a1b76174adbb4a02cf7e148af1b5d7c325f8d3603b1877f1e83b7a8d1497a
MD5 e5888ef4718fb8d88f2a46dbd47d8731
SHA1 710084607f4d73850debed97f1ce1d18f494a01b
SHA512 39c8dc7ca0060d4ad96aa041d582c1187ad12c16a77c2b9596e940f2a7174d034f60cfc004416a98a1728f6e39ed9afc40923f787705578ee776abc99bc28aec
MD5 SHA1 SHA512

NSIS installer

installer

docwmadd.png

SHA256 48e615d966b41612adf6fccbce17582080d1c3d7f6b77371abce852e32e975c7
MD5 a3d735eaf2cbc38c0573b91f7f5f9f02
SHA1 5376dbd7175d520bcc2a122303ea4e5d866735ab
SHA512 060d1223a558bea187cf36f62a9ce7918e4e8c029203a7ca0997cdaab6ca534e6ccd538b80a83eba1af4936bf36d360788deccb6f23ef371343f4b68b4e68b91
MD5 SHA1 SHA512

NSIS installer

installer

docwmremove.png

SHA256 109af5b6a9f63ec5fcda00786fecd32ddbf568380ac879c53bb0d9194061bf51
MD5 9c9ac910fa0f7733cac5788a4574f531
SHA1 42a39c50a3f09da3423eafc8893fd503de7c24f7
SHA512 f1cd74700acdb99d7f7e7c4e3fd62c7351de28bc50e9f517ab30d8cad23209929a1717835d40b155874e584af8be0c17fb04f116f070e77598c3234e51ef17c7
MD5 SHA1 SHA512

NSIS installer

installer

dtemigrate.png

SHA256 f98f9998ae4063b88cb00d9b8bd3f1c7b880a5caffd9888b13c68de03614a660
MD5 b58803f0d9fedfd9ae93ab992411029e
SHA1 2731ac22ee76ae1eba756ebdaeb260fb5461475a
SHA512 0cbc95e87e1b239302c9028946cc584fc4769a8a11f9b8edaf9e131d0084576b0c860f4f4da350e961dbf98632c2651a89f404a5b0e2ce03bd4e2352d194a13e
MD5 SHA1 SHA512

NSIS installer

installer

dteproc_item.xml

SHA256 dffacd1791ed68971a30340ad8e3ecc0b0d63ce71b7450b2a65a9434d2411eeb
MD5 62e81c868d932f0f2a5fedb6cf4791f5
SHA1 c786112b4242e4446f7d8970459226db46b11f6d
SHA512 b27d983871b6404efdabebdbf6f58d122d90b6136efe90478e4165189df5ff31ba0cd5338d3b5da141e9370a5ce728e7c83ecbb56171c139cabfcfef12681be8
MD5 SHA1 SHA512

NSIS installer

installer

dtescanner.png

SHA256 8e4b26aacaaad4b9375ca411e659dd46560ac1349586d4efc093cbed303fe81c
MD5 363a9d18a73487aad63f5e4ddb2d1df3
SHA1 2c887eb74aa57a832e92a942a1844abead66d379
SHA512 82bdd20293b2d10393791bdc4b1d6153d089a2eda8c13b00cd53f6cadf1d5af44c82a57bc476e69191aa77da358250c13c0cce74ec8477b67e2a7be215534a5f
MD5 SHA1 SHA512

NSIS installer

installer

dtestate.png

SHA256 671eb5d3fc5a16e19b196eca60a87ba1118de05588125f9e009655853e78ab67
MD5 41ba99b2950c2e7ce0c1c844972ddf48
SHA1 7021f8c125ed84f47ec9e2788aa21214bc225e42
SHA512 e58bae961c493c711f316e0c7ab77fccae6047860caacaad6a2905c9d5497e46b928daa26749152afaa1e81bbf27dc9db247e8e78346f9ba3bcddf06b5f92162
MD5 SHA1 SHA512

NSIS installer

installer

dtestatewnd.xml

SHA256 75acfe838528d3d0f213261f4868294475fce5958c320a69836fb0caeec2fdcf
MD5 bfaed7f20ea335fc2e2cefb33c68619e
SHA1 9525751d9af7cee09981ecb4725792116e497e08
SHA512 486964e73c2d538b6586d1222409ad499d377a89eb46f1d9e428f4272c88682e35a6ab716bf9a7bdd07b8a9e6b90ceebee60c95b7f4d160563820ca875e0d8b6
MD5 SHA1 SHA512

NSIS installer

installer

edit_border.png

SHA256 7c564f51899f159d849a94c8fc0ea304eac15a285b7da4400589a092d40e51b1
MD5 bfe8ff66a1b7c33fa2c631b97a33abf8
SHA1 66d5753481f57a4a96aac0323d06a72bbc198841
SHA512 37de7cbff00ecb25318e08ee80226f83d38f49febb089d8057d0fe79ff7549df90e94228d8314fca928a81422e1518a6a501a861697456f42154e7a6fba58dde
MD5 SHA1 SHA512

NSIS installer

installer

edit_border_h.png

SHA256 6dad3a9488ae8275bb20ee6c21365163c39e6ab2d1aab5b405851f1ff3a2336c
MD5 a44bbf3486a8f0310cd47ead91771ce0
SHA1 897475a6751b09ce9787a1b16f2f46b4c89b6120
SHA512 71ddc09329dab1c2972d1471a0a295b85d5eb53fd0185d2bbbb67567dc475c40a5effe3469bab2fbb9cbb90ef7776192ef2b6e9abf0b0605366d5bff8e4c0cb6
MD5 SHA1 SHA512

NSIS installer

installer

encfile.png

SHA256 789ef752f92c3004bf149d93a88237f48148b505db0b2f248215b7ccd0979c9d
MD5 d3907e19ab6130973e7e8bac30da5b3c
SHA1 e1fcced1852aa711e8a35cae9ce338375377c1af
SHA512 b6316eb96678d1b04e0bca09fd1a9993aa3abeb48fdaf4a6129a9669c971039f060924bbae32a8cb8614b1a8b23f8cab458f4738d183f2df6a58913dc1874240
MD5 SHA1 SHA512

NSIS installer

installer

gooxion_blue.png

SHA256 49acaaa476e47d3d6361f28d522fc3057f87721a756fa04653b53a7da93db4fe
MD5 29f601a835c871e085ce36863a252efd
SHA1 ed778628f79b3ec8d13dbe4f96134fa4108ce8c0
SHA512 de4e553929aeca865c3b12f2956522bbb1ffa7bad601cb3e8b19be38015eae2ca4faae197b82cea76344ca65f39a6462507d3d34c397c50f9b6b7abb843de220
MD5 SHA1 SHA512

NSIS installer

installer

gooxion_orange.png

SHA256 96570d806aac105a7caaffc0b57030ed635c50fbf239ce8dd813fcc34681d4c0
MD5 12ec19f92a65cd1e3945db61a2eec5af
SHA1 c52a9e4d7c2363ef1e6eeb0abd92f87c376d6d73
SHA512 1c6cfe54fb2bbb5492911e94c07ae8240b38164d18bee684bd508dac49475b64702dd5913166fbc4fcedf4abcc672cb22e618880ec115b16504629a215b4ad23
MD5 SHA1 SHA512

NSIS installer

installer

gxonecliwnd.xml

SHA256 84b686d77d49d6bd2e4c9f60922ebaf33c743c9168f42b3f0a7f39e739245575
MD5 673f64aadd0da10648da365a70ce2dd0
SHA1 9738f180354e8cc026307aef22f5c13c554620e4
SHA512 90ee38d65c3992d2b71c8ea20a822d07e2dd3716c59b23debdbc4640dae24ecc3ad43443c3d352a7277b2ceaba903d1142d7415681513285e8675752e0121b34
SSDEEP 96:MK3HxjCwMlZPFrcclbQWdWMbI1J+dAcIS5NIS5NIS5d8cdkovC8cd0l9KZ:V3pCwMlZdrccCoCvy5X5X5OXi2
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

item_button.xml

SHA256 bacca812286c03c56f6cf52693005ac8edec2fec6542c973cb9176887f18bf49
MD5 b51ee0d0e6cf33e05779bb06a057a0d1
SHA1 7a8cb2d1701b00dbaf8258d31d776afbb821711d
SHA512 a2cbe239a5971f83c5e61b4db46bb10b2f788d59e70a1f060a6fbf3c7c6812bad754d7a08fe86f983887aff8977f50da2176f7e1ac8d21145b1a1f676c57a9a1
MD5 SHA1 SHA512

NSIS installer

installer

keymanage.png

SHA256 cbbdd2f7a11b19aff093dc4b27007eef7e426363a47958393c7341a674433bcb
MD5 d58553467d16835218ddf8e23a27f2e8
SHA1 c93252549e5e9052e0b6f7756567e980decca956
SHA512 66596b13f11e734da8c7aa2e795dba5a364f71685ecb47891553b5400bacb846ae3b2f2d70078729121388855392ee9babc5d14b2f56940a13aa1efca8366867
MD5 SHA1 SHA512

NSIS installer

installer

localtool.png

SHA256 b27afde3095e18b1c3ac607de8bf390ea60481ad1b4b04da53c6b2a4428ba760
MD5 34b5d9b7b1eb9e2b68d3ceb739a8f6d1
SHA1 868d6431a7fddf009e536460d960bfaff0595645
SHA512 a0226bb0f36fa8c9757750e1fe4417c9e7acc2f94002ff0334d52489347c62d276e1d918689016d08d41676aef1e0d4dae88ad5410ed452cc8dd5f3f38ad845a
MD5 SHA1 SHA512

NSIS installer

installer

login.png

SHA256 73952d0406b7f3699afe2f9bd313c7c06148326804b802bc4d8f104ef5432258
MD5 4701afa2153d2ad5cfc506c199009ee8
SHA1 eba34877a0c9fc927e9a59cd4d22c78edb837dc4
SHA512 0b32a0ffde252cbad9dac7fff9925128421c85eb7d82b44b4fa99195394a68e4e8282ed46d76cfa06416eaacd015c691d6c7782e381dbf439951357ca4669d65
MD5 SHA1 SHA512

NSIS installer

installer

login_background.jpg

SHA256 db8e5fda8e7baf8ed4fb27aa9a708a8f7b3647e0d4847f1574d940fff2d1a794
MD5 5e50672e9865ba8e77d6a52effcfb462
SHA1 c70c9eab0b9c1c9214a482fc0344fa0ee4444a8c
SHA512 60e019312bdc063b3e59940b9c1cebf27d166f8544527db57cbb378c1732b0921570a2cfb09c9dcc583b3df01729e7305a00a24dc39fa0ac91de05b19758b336
SSDEEP 1536:9pZpUN2tLP4VR/CebqqSPUMGmu817en2Sfye:5aN2m//CebqzsMLu81rSfye
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

logoff.png

SHA256 9369f8177f68c9e66286ebaf03f7b7fa0350fea598d159e19f8400e28e6d24ee
MD5 d8722ab29e2854b35b1bb4d41dc56729
SHA1 845ddf5b776a25874a1a885ae8e279dbdc8da392
SHA512 f022f6f0003d9a0f7d22e1a74858972dc596ab6ce68288855615596d54c37c3b19eac8959124ca2b65af975dc6f5283a85c9cf3a3ab2ee336e223322139998ee
MD5 SHA1 SHA512

NSIS installer

installer

menu.xml

SHA256 e4f50407e8480e223d80c2d2d9dcb79a064eb8761dd9283d86b0f6cca76e72c7
MD5 2632a879b40adaf10f6b2a935313bec7
SHA1 1306ebac7adae6defc5ca6497b2d36b20f1b4c3b
SHA512 7e072d5e90760ab403e18877d8804fcac421758ded67083a8272e967014a5d537bc8eb3d1cc5cb1c02aa800296fdfe61288a2ffdf723f9ac42af5c45b511c034
MD5 SHA1 SHA512

NSIS installer

installer

netshare.png

SHA256 c2571de5bec2936f22df0fecc523fd84b49579de2c00baf2e0043181dab006f2
MD5 c5c4fb8f42054e266bd2596c87033aa6
SHA1 8959586d3fb9b77c36f23dff04e15201e2e77b21
SHA512 dbed314ed43c4763d8023b52c139795437026d14315ee76865caabb99750b85a74e46185f6d75dc37aa23f76b4f4cef4e2b7604447368303030f522b192c7730
MD5 SHA1 SHA512

NSIS installer

installer

officemode.png

SHA256 58f1e6b18d216579145815e0d07022f394330d007a083b3671cce083c979f6fe
MD5 5be86a5aa232e566195799e23858ce27
SHA1 8b095e15f152c57d2a1ca9a495c3c69f8a3f2d29
SHA512 eabf6aae1f3dd92aa324d097c288ce2ebecf1d5375b7891e7657e38cd5792a0f35e3fba29adb7b842042aa6dd93939a7554e3a03fa010b46f5af878a7ee6e13c
MD5 SHA1 SHA512

NSIS installer

installer

offline.png

SHA256 3e8bb4d6d130cfccb548f03bfc39e154cf85095d5a3a7eb468008058d6872253
MD5 a1f9c54118b309cacc33e0d7d2b96092
SHA1 847ce890f793761f22017f831310c3e506de0ac4
SHA512 9612e84429c2141ed9ba9000cdb49e3e6208757508ef2dff43abba2a3d4969ceaf5e216aebc7a5ab790deecf5fcfea0a516915ef38a2eb4cb5e9659e473b47c7
MD5 SHA1 SHA512

NSIS installer

installer

patchdown.png

SHA256 6153f858232026e0aa64e68a7d30ef4149e9abc28e5f1c6f3b64eebc64969253
MD5 5ad7fa2ec3c028a78c43194645849f6d
SHA1 4eb9bb810a49d1b3b5a3d1c6cd926fd51a3b79ac
SHA512 331eceb3fe2f36bb0c6d37ee0af325a08a43845b2d264be2f17c5337801ebb64d3cb83d4ee37d00e0aebc03c59931ca2768fdbe77103f0606a06ecb38ba2b66f
MD5 SHA1 SHA512

NSIS installer

installer

personmode.png

SHA256 843526ab24b0b84e17be9a7cbdc6fd0e00c9356f2f9328b42545bce2087dfcc8
MD5 ce88f5496ad2ae0d0f6c58e0e5909c2b
SHA1 4c40587672cf9f038ab78dd628febe7c9c4973ff
SHA512 678592217cb67220ae6b7780d0bd1d150c0031e35fa32c175b4b9464a45c154b6e8d7272b2662587a631977e5948688b6fcc61f0662240be272d8f161a18a2f9
MD5 SHA1 SHA512

NSIS installer

installer

pochat.png

SHA256 df17fe30cd179130f605e3424e3787c9ed4bdb75ee87fe34e724a63f1cb126cf
MD5 58fee6629cd76f2685aeec8a3f19df1f
SHA1 bcdec90cfcac5651906e2222e0cd514fb20ea027
SHA512 bef4bd0a456e511f4055db5c7fef423b37fabaa2f7348ef30e417381ef728719d3f9fa725848d5c97a8af7d7dd725aade9b90b16d9e5f34eceb3500ad6b728eb
MD5 SHA1 SHA512

NSIS installer

installer

posoftmgr.png

SHA256 0ec9b02b2472e2cf37ab8a38bb393ffe1e72aff3c8206f94ce8250f984c47d6f
MD5 c70b57f8018214d5c3b2c5b3a3beb562
SHA1 5d748968713d09eb7fa3e59344ec9bac586ee33e
SHA512 7a08678e5a139f5e1b7167793d2964b7d486aab0aaec08a9ba3a8805dd353f14f8c2da7462bed30ffbb68a14b73489c56dba5ff86b7e89f7986acf494820bc36
MD5 SHA1 SHA512

NSIS installer

installer

remotecontrolrequest.png

SHA256 0f902ac04c7dcf1b1579881573e166f9a5f8b6d3b3ecac6e89ff887d6efe895e
MD5 b6d54929e3826c13c860e1d205cd9074
SHA1 b515ab0d676eb9c9a66d6ecf6656831327bb4cdc
SHA512 97a409665191982a387f9cfb41cffbec6ab9cfe1e540eb4d40364f3621c196da3ee5c5207bed08d5f9587865a097a25eeb081c9be41519587210815aab672a3f
MD5 SHA1 SHA512

NSIS installer

installer

search.png

SHA256 153ecdb061fd3ab063e2beefd9ce5358f3d4a583a4db353dd687566007cc47df
MD5 65a0dfc1880a02d819a74cb2f69cd4c1
SHA1 1868b777c5ee908318d9b7f12ee28f090c231714
SHA512 a4ae7357bb1f970e95b46e1e8e1df4d8ec2c4e540c246ccf0f78d40e9bc5970a558f2eb23519234e76d2225d65b2e09f5f7271b442c3edb72bbf0384482e8784
MD5 SHA1 SHA512

NSIS installer

installer

showappqrcode.png

SHA256 fd9cb9d094b2efa87d7e8f4500efd379813044fb09a06d42e39d9d7d6abaff40
MD5 22f3eb136350f4393daa8fbef69b329c
SHA1 d7b457a5fd4238d78c366b136be86911a2ffecc4
SHA512 37a8a24d5cc78b4e815c5dcd395afbef4e1b1d41979668876857dff825e6c65a8087480c69422e3568ea7f77541caf1fc9df9b9dc7fceb7f0924da529c8a2712
MD5 SHA1 SHA512

NSIS installer

installer

sscanner.png

SHA256 119fe9ef64c08028aa79ed5d3bdbe525ae96049b6e1bd40f28ffdcc1fafedcaa
MD5 55793e8dd010c13a1e77507f60c410af
SHA1 7d44ad9e5f8434aaa306b1f43ccaf733aa99b1e4
SHA512 a9928feb5ac8b23a5bdd79a4f7adef76ca9bdb87b36aa593da99cd50ccee18d05840b11af665de3d7e78cb0cf4b0a80af503e87122b17ac948d0f21b9dc30346
MD5 SHA1 SHA512

NSIS installer

installer

sscreator.png

SHA256 44d295d164e6a5c71738bc2f7d2759cacb0c91b77f43b2b466c52e30c51ce104
MD5 2de272e79312b42ab18fd8f29da546e6
SHA1 9053f90d7f015f2165783cbdd01159de02c2eb5d
SHA512 6d2e08cc2a68e8592d2963823883889ec6f604a2bf4e4f233b321ee77e1cbc7b93763d9d9954a3b022018a58c71fdbff3dd88f847927448b7a9da7977049b94d
MD5 SHA1 SHA512

NSIS installer

installer

updaterule.png

SHA256 aa30f3f7b23a896c9e41d6ef879c9f033eb4ae22b5d039e4187feea43f803c2e
MD5 709ac517744664f8bc8efeae1691e7f6
SHA1 e7df81f74ac855b638eba81f84327d7e70620b49
SHA512 cb8cb93ecba87bddfe20c94b24762ea3f3b712cd2b6b80f2ea068d183d530bf2e60146f37e765272e2e35580228756a426e761fda78ef5a92eeae18c98c164c0
MD5 SHA1 SHA512

NSIS installer

installer

userloginwnd.xml

SHA256 37061f75d95949381c980f72ecf6f72609f6b437e36e83eed87e1b948d2175d0
MD5 ff9012a11ef37e820e844ce7b9c4e68c
SHA1 29c78162758dd77235428bd9892636be42ce0e16
SHA512 d9530218dbb0f287702b71eb93469a50a4ac60e26b2135cf7c5bcc3281be82dc00cb3f53f7baa0bc8f626d80068fd2860e09c1a37c231b5bb5668440a0b139b0
MD5 SHA1 SHA512

NSIS installer

installer

view.png

SHA256 243c2473fb2e7347ba67d9f698edf0d4655bb3f7c8da686552cd885142305e6a
MD5 36bd20036927524a4a463aaf0328aaa2
SHA1 ee2e1fff0807a96818f10d6cd9912b2c838fcadc
SHA512 b63c20fa724a7c64874dbbf7ead98e9ced698c18887e35cf2566a03b9b18e1c196c2a651f7ecf0a2722c806c9de0d2ab36ff16f87e881c5f5ba3dcdb2ee96430
MD5 SHA1 SHA512

NSIS installer

installer

webtool.png

SHA256 0930276b8cec362d9294947faf1ca29f928e9beea385b28ad6638b69d399b786
MD5 2c1517e79f02c058630d111f25ff9788
SHA1 bfd16c1a0372637c0c141b950b1cc34c0f9fa0a3
SHA512 0aeae8089ac7002392a90f555e298893e2ab47ab65299b728c253b70beeba702c4e44c9b88d37f75462d45238b3b1d7a3f37f1f295b6ca873c9653f02136efda
MD5 SHA1 SHA512

NSIS installer

installer

worksheet.png

SHA256 d19ca234e3711cdb542b9c1c9e28a868e99449a10047f0814219f18fae974e4d
MD5 420e5f462bf64e8fc1071122cf3ad4c9
SHA1 63cc15a37bfff7408454b595af4440db389aa331
SHA512 994fdce2272794e325164f70e31ad6e04460c60d9daaa25daad0d86d878ee6cafc965481fdc009feebec858b0a8985886a8cf10468ea947e599261a5d60e9b5a
MD5 SHA1 SHA512

NSIS installer

installer

skin/pochat

SHA256 170178fe031c9c7dcd19f2dabf5d0fdd251cd533ee4b51e1d784320f3b9e1085
MD5 54e9dab62ad79879219d6b4d3d1f4ea3
SHA1 79cbdd0356873f9c6a4e740a5494a6187a0287ac
SHA512 222ca9188cdc6889f49afc520cbf7f9b73250721a83c6c7e40d912659bf6c42833db52e4f9707d89111a879c39c04f2c31404164c0f5372ea720888b0604a60a
SSDEEP 768:uaAnaRujCCNbof67zVO4hn37J5vkOcYU+csir:uaKCy7zo4xd5vk7L5D
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

add_session_friend.png

SHA256 add8dbb39e734513de262a7cd43662e40e02224bf3b7d4e0d4d723078cbc9fc8
MD5 3708b7d1f85ea476cb18a7649f1ac3a6
SHA1 e98ef68db7c78bf497b03f6c6482d853d7c8f15c
SHA512 731932a39f25efb7d8ee0ef6089f5881a62df491814d40f6bc4f796e21e4d2149f1d1ad5f900d76eacad5fe1907b15b92de19fac8ce7286c16a0559e8e1cbbae
MD5 SHA1 SHA512

NSIS installer

installer

avatar_admin.png

SHA256 d3a9fa64d15ee8b45a34cff4142aced07e14357b2c513ca342fb415c935c329a
MD5 99b65f18a821510dfc8425867451e11a
SHA1 bfb9906f589fe3e006ff97c4f6b2a740da0d56ab
SHA512 73435ef38506836accaab8265340f13ff293002ee20483793b59aa31e532b8af0c376b31156c93871be70d4f4dffa4d872d4ec91f6931df106d1db7b11f5af93
MD5 SHA1 SHA512

NSIS installer

installer

avatar_admin_42.png

SHA256 3f7e3db6d21c483ca38e446710e7f46a0ba8f9d9a8efe5c398d01ee7ecdf9bfd
MD5 388d262223140538ad0c754b24c58c97
SHA1 684e77b2c3a5b73e79a736bfd0a61990c96eae6b
SHA512 68b6457c71ce6a798644d7c052dd2578ae9bc5d55bfc0d44df41c49041af12e3c86f5517c00ddc948042f8be2007949560a15584d6c8399db036b3bc0bb585a5
MD5 SHA1 SHA512

NSIS installer

installer

avatar_admin_offline.png

SHA256 71d67784961aa16ebbf0fc4f2d8b030781589d4da1f97e9fb354b29cd9960f31
MD5 99258abbcd842576974aa38549ce09fd
SHA1 94bce5228ee6f962d5d3e26fcb3d3493c9c04d8b
SHA512 f21fe4e1b83faf6d35c3ce6e8d0cd4debbfada87bca527ebb4ebf415ef2aae8517e921cd2061913b153824dac7f45e9adf45e1514250da43681ad77b2d9c9b1c
MD5 SHA1 SHA512

NSIS installer

installer

avatar_client.png

SHA256 7049545050fea9bc66f0b17f7048321cf699c3bb07bacf0b6c3d17402dee7f67
MD5 7808ff2663e7b146020d9b4f4b665ff2
SHA1 2188e2e535c009cbb5735acc784236de27b14167
SHA512 65bdc771f6498258c0e9bf5856ea087a2da15189473c915068d532ef0c874a6280c9d8c4b5313caf44271bd2f3d2cd8895b27361f147ecdc812f107bb6422a45
MD5 SHA1 SHA512

NSIS installer

installer

avatar_client_42.png

SHA256 350e21221fc09a3956e3e30d3aea3a8def1bc700ddd36ea20ea57609aee2da85
MD5 7775c1a160de2fb7d6ecb8e5fb73dc16
SHA1 8cb75c749d1a70d23cad38cfac2b1a36899eab16
SHA512 09b4f19f7c97031b7d1261c8d4f2de26e891351415cdea544fd98241ed95e7603da23efadf0176fe2444f95b13e28dca5816f2f8c49efe31e1647790c1a9a9a1
MD5 SHA1 SHA512

NSIS installer

installer

avatar_client_offline.png

SHA256 a1f9ad6b7b67f76eafa5127305f7526fed14b8925555f3f1f6cf1dbebf703813
MD5 1a5fe16d0f8c1db01951069f698e84a2
SHA1 dc560ce86ef2889218fdf5529c3f68259a2345db
SHA512 bd0b688f0b18c9317f1661ad97280bef018aae6961514ffe7d578e7faf1c08a2099cad5d75d0df8ee637b825fcf78f378691b4aa846ab3d5c54a9877cd21380b
MD5 SHA1 SHA512

NSIS installer

installer

chatarea.xml

SHA256 ad1551f22bdb020451769e24dc0ac10a4c42ccfac1a7850871a10c9e966308b5
MD5 efd6d51f6ad53ecdf7237bc6d1f8caa3
SHA1 bc3c6095f1fc6cc7b350c688ef95549992f2b38b
SHA512 7d0c4d93f48222c5a689605620ab3939741723ce951482d954b81b8c61072551d9de9a20e8f8691dfdd09f0317b5edc551767c108e3d48445d0a1079a29a94a5
SSDEEP 96:+yndaF/cJendaFofuUV39VmLSV+x18endaFLrtq:o/YzoGUVtVmOVNzPQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

chatbk.png

SHA256 f2f74d9f4c910ee5d333d2a7ab68278e058db9d131fcae0055d3c0109a526f36
MD5 89862c0c72895fda0dcefe27deb2d683
SHA1 b6504970f28336246688a8b6b541c11036f0b734
SHA512 e88dbbe31fdf40b68215df718cda41f950c1c63201bff8bded1ba1dde2d0e4ba06281d17bea6e362586591b33c280a7b7d1fd7c45147cc92ce858b8249a026e6
MD5 SHA1 SHA512

NSIS installer

installer

chatwnd.xml

SHA256 a7faeadd560121769efca4927722ac330eb68a8cbfa630ffb3c83631388c637f
MD5 bc08ca6c25e03137e91714f9b1015d40
SHA1 2d2588c94b2200a86093e42d3faf2ea9d7002210
SHA512 30f080d92760b78853ed9fea12dd1922e48fc19f2081d9919ebc62e078fb566cc57deb1aae76f4bf1ddc87ba45c018a488ac93ed182d61f9bb3a05e045155527
SSDEEP 96:cyndaFG0mc8Yz1ehKYVO46IZ6IPOCmpnnrUI8Hq2/Uye6oxJfSt:eTmc8K+VO7x3pnnrgHq2/5ox2
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

cms_failed.png

SHA256 5d0bbb7c576e5325606324fda72dcadcaf8e3420c06ab6caa782f6524125c596
MD5 28657e21501df81b24c6db2865832ec3
SHA1 d176b2558bd7027c062052093fda6aef02ca1338
SHA512 5656a1effad252c97251ffe134727943211ba61321b7e20f7d2cfbcf8f163e7eafb0c940bbe72375074e5048803c57bb8caeed1a78f22745e6b804d31b6f41ec
MD5 SHA1 SHA512

NSIS installer

installer

cms_ok.png

SHA256 dc2628b40da3f6e6d9c9f711d374e730ed648553d81e38ab65d1278457a406e3
MD5 b495b8fa5e5590ca0aa37a34b5bf6008
SHA1 f410b0720bb853f952f0f699aa16d708d7812173
SHA512 870b00713fa96d94807b0d5184abfa457502aeff50f07b64d7062014af9b54aca19b15a05352efdbbd1d917a94563a01d458ae6133ab86bc67637edb0101387d
MD5 SHA1 SHA512

NSIS installer

installer

cms_sending.png

SHA256 72bae109ba25bd3bd972f18874db0bfaaaba5100cf3bfc160e60dc902673575f
MD5 f3fb270243cd7e0e43c32e6444265951
SHA1 0e671b4e7e9588a6ec1838e6dc2a54edf7e3dfb9
SHA512 d6db31a6618e80b366559ea230162742b3370592e342c5c727d04d5d93169bebe6711ad6a58f83b108a63587d4a4996c281b7832d99a3c5340af0038e9c002c0
MD5 SHA1 SHA512

NSIS installer

installer

emoji.png

SHA256 c3bda8da6654e4b9d341570b37a2369fcad99510419802e4b2b8736ecaa218ce
MD5 f316da7ceff384ae58cb477a9989634b
SHA1 1919bb2a33e151dfb14a0c6382ceb58e165c7ccf
SHA512 8cdb606c62f64f48067a57ee659d2efc0f824d8b54a30b95bca344ec133caf718e61106dc2af6e40d772a2c6348318ea95a09881d2db5d608a628efc52e958a0
MD5 SHA1 SHA512

NSIS installer

installer

emoji_active.png

SHA256 51fdb7be90505c0f1d87b4af11eb138e4c5587267518c41f63d54c5c6af1ef70
MD5 c060037471175ec8392212e3073a85b0
SHA1 07940c780d023ef27141eeba6ca88774f7820853
SHA512 f904b69957036404186406e48fb9c2b2ed2817500ce5a88089e1daff104e986b7457fa320b011d1e7482fac1d951d7951b806dbcce84ae5659df9159ee2b7081
MD5 SHA1 SHA512

NSIS installer

installer

emoji_hover.png

SHA256 755fbe462afa825f1880c9c9de80c21ea8441a7ce297fcabd42b742fbe727884
MD5 23f0b8b2555442834194b6d237256f00
SHA1 ebbc598e70f47bb7514569e8ef82de451509b2a4
SHA512 98e9af16f7b5c1c9fa4f13ede387d74282803f3b1eff81a5ce3249a1cee4a4117eb92f37576e54e0db7403540f0142250ec25fe690e03b53c93d7335b5a1a8be
MD5 SHA1 SHA512

NSIS installer

installer

listitem_friend.xml

SHA256 8c292c7636a75b1063b1f494db821465c614c8657b3eee38958459465de3b93e
MD5 f2d2a0ca26a82faa21eee67230aa67e6
SHA1 9682b136be6b8d15b1b2eb3d683b46a848db628c
SHA512 59de5931f0ba95a62eeb31a991554ccf7a2c3f60e38d78ba8d79bb29add0f5fde29402c9eb80b9c3734decf73ab3087b068aa0901efd9fa7e603258f7404b78c
MD5 SHA1 SHA512

NSIS installer

installer

listitem_friendmsg.xml

SHA256 d5fffb6ac3df3d6df04a1274fcab21e8f86a95c8ba1bc8439533bb89a7edcf43
MD5 7da67c7421dbe9d25a896b13f08c495c
SHA1 54c1b5f27551e03e18aed8871b5f2aabd455df20
SHA512 026e990de6895688b9a76bf4f409e8a32d31e416b670bf20dd9e25cb90a65bcf6a989234e97f3732fd715399620a4acfefd1db407930756b4f53802644d19f29
MD5 SHA1 SHA512

NSIS installer

installer

listitem_mymsg.xml

SHA256 eadf4a7901646570eeb3bde8b84262e695303a9a71bd20051cae55736f6e1906
MD5 b1ed9f7304d3690a27ef3219b79f1f9f
SHA1 df6b3da550d615eaef42618a7c2da0ca98b099da
SHA512 d3be06b1a8b9105a27a1f6b8a4b65789cd13ec71025c2b763318ca67b0a3bce9e9cd6c784a854ab12d02b9cf0765c43b0e69bc15c812bc73f3656ec1b5616e55
MD5 SHA1 SHA512

NSIS installer

installer

listitem_session.xml

SHA256 dc85256135fd9153f0b7dc0e45cbcee07d23221b2e1fe6b6a5d23efe4af4af4d
MD5 fd16a72c48e7d19f8021f3d54a9e52e8
SHA1 593b7eebf38c99ffe4e995d04e845cb3b110bfa1
SHA512 ce1b716e8ea49d198264d6621eafb78f2538fe6d946554b32dfab3cc4fc0280eaba50ab1d23df6b2dc00b3d35382e709d6cc8150ca82ab14d1995aa993ab3ad8
MD5 SHA1 SHA512

NSIS installer

installer

more.png

SHA256 a86b55456da9bee60c144a71898aabd02530776e434709c6749ba1394cda4e2d
MD5 2aff9a35bbc636afdaefbc1eef4d0f22
SHA1 90508f812a71f789db5644964038011e9ec6ca71
SHA512 dddc09f093bd988737ff17793f226759bbaf73e350e1b8d8257ee813875c3ac1bf6a71b8a466a10cf24ccded746f15829542c00673729fe11b6e6717656ec468
MD5 SHA1 SHA512

NSIS installer

installer

screenshot.png

SHA256 3fc4e65c7fefca3defc986d8c56b4173e323584c1d34f481bef82577a7bc4682
MD5 04f129fd69fd6f9f12b6e3580be06b30
SHA1 50e9b739502cd7d1f6ae2550d13a224bab97be99
SHA512 c0c1039caa980d37f4c61ad90d370897d30cfd706cac9650b3a32c0b8c7cf43d708f55800e781171be043a7d8e20e8865eecd497f33da32c876f92e7cac59d96
MD5 SHA1 SHA512

NSIS installer

installer

screenshot_active.png

SHA256 a61b1ceab3e8d5f285f283ba8e75657ba5cf731782fd8299ae08f0567c25d844
MD5 0f8f724ef2675e339e4fc3f294191388
SHA1 e4de0244fec47e955b793ccc73177bc27fd3c261
SHA512 0ba835ac8f949bc1d392ba9a03d0b91316ce8680ea9b1cea4ba07a13e57becdb19dace341922728f58ac44ced8fcc716067919ecdc61ae3c71e90386345e89d5
MD5 SHA1 SHA512

NSIS installer

installer

screenshot_hover.png

SHA256 e0f75c01b2a1d27cdde6a31de89fbd204a3b2b4fcc5de103aac387cc0fa3705d
MD5 658cd72366e69a75e2a0377f6c14c581
SHA1 4e092eab305ea096e6bb170caaf23922eaf87331
SHA512 e4978b12a72ccb99cc1b77d010c9fafa9e827ed7fd5e5cfedc7c6a0840ec6b639221fd25b9e764a9b412c017a668e3547cecd7b04af790ca028f94df457dcd40
MD5 SHA1 SHA512

NSIS installer

installer

scrollbar.png

SHA256 e62b11ea6f7c39b53a3d2d55431221f6e67a267967bd286bb31245916acb2f86
MD5 96b2d556110fb1922df85589f603ffc3
SHA1 fa71235ea2ee9ab1f866e503f149d577f5d51f89
SHA512 c3a3822f44611d6524c1ce869f6847b83ea70a0aa0f3bb231515581039ffabf79f8c233c8af546890d506ab8865ab843f0bfcc1a26c4f0166332a45865787454
MD5 SHA1 SHA512

NSIS installer

installer

send_file.png

SHA256 38c2a16de2c94a2c34b2196eb4c19d011ba7293d1421903c080127212883673f
MD5 2955e37c2695cd37153a74ec5278c6b4
SHA1 a9edd580aa00d1720bc3e86a8b788904dd2ec1d6
SHA512 e567d5d190e5a7322514d8cd16e56382761f9f52507fedce63056ed26baea423ad0daed04f4ec5ea7df12699065a36e9beda92de176b566392fe36888ffca5a4
MD5 SHA1 SHA512

NSIS installer

installer

send_file_active.png

SHA256 837a892cc5519c3617f711a5222a07cb955472a41f792739436d4c7aefbb16c2
MD5 c4e0948072b9f42fc26aed5b54769286
SHA1 00566da8954d62de5ac269a18767253bf6517768
SHA512 5f6292f9dff01a07ead4ddfc97339387d6933a8d9b591428a8c28304f6a4d94f4fd1335e5472c4a58c56fb7d475d42adfae34c37a44bb379434de076c4d5aa37
MD5 SHA1 SHA512

NSIS installer

installer

send_file_hover.png

SHA256 6500b2203ebde8c9b5d1d9ce1d2a18f8997251cd0817510504688d14331fe864
MD5 1565b963b460506cafb7a8846117c0f1
SHA1 df874d80629db9cc1e403dbb09e585363d536d2f
SHA512 1f83ee4e4d13cf23e6ac8a593efbd5f6d3609ad5615dfb23c53b832f82b7ccee33b3f7aa8442ca6124738336b184a4547a16318f38d770bce79521133e3e5e27
MD5 SHA1 SHA512

NSIS installer

installer

tabbar_chat.png

SHA256 2e25c4db5b48e09d493ee0a5997777975cb22625fa4c429e204922e257d16c1f
MD5 9187bf89faf35e4b309a947358bc0df1
SHA1 aadcece95dc344ef2db0d5a59ae191aa68def22d
SHA512 603356c41198e482f2fbbc63ed7c78dc0a6429669eca797e684509e16bf2b74628fa6f71c07f02273e3ae9dac34c211177b0fe147dc4b2575697e37f399779b9
MD5 SHA1 SHA512

NSIS installer

installer

tabbar_chat_pressed.png

SHA256 c6e890764dbba4e3626ccd6f5ffbf13ebf76db9a0766006f72f0ea329dad9b41
MD5 a129f64b5943c04283754d34b71774b2
SHA1 18949cea4c21d4accabab4ed306cf1d3c9d322fb
SHA512 f86168dc4eaa35ac06f096cb0c65f7e187409f94ac53cfbf7c22b2f324cadc7fdcbe00ada4dbc8e962af2690155a670ac179b0b750f614592463149a29c8bb17
MD5 SHA1 SHA512

NSIS installer

installer

tabbar_config.png

SHA256 cf81c0a05c830d85a8c5477f01bbe25c26d2f3fa3da127939b2733149ddaca23
MD5 854081845e9cb6b79d32fae0b47872ee
SHA1 c94460462d7c010bc05f57171b145b0385254c53
SHA512 f8ac4c28921d3267ee63dd9be9ec8f0ebc71d0d2333d961a7af79ba22606820862b24a8d50fd146be6b3da121740e866d436e096eb481906cadf44bc6f692f2f
MD5 SHA1 SHA512

NSIS installer

installer

tabbar_config_hover.png

SHA256 6862979525bc2b5c24c3f219dd345dda7d3d1ffe72268a7b23737a7a28ffd1d7
MD5 b516bc20b22fc72750e9ae4739c67b4f
SHA1 dc1f10333c2c5417252e73d2f65847da96858190
SHA512 9cd927881ec0f612bcca5340e6141c14e392ddf7026005ece6c300ed898da9745baecaa6d9bdf000866de1a3b64de05a30615cba9255e38073aabf70ff43705a
MD5 SHA1 SHA512

NSIS installer

installer

tabbar_friend.png

SHA256 5f7a5f0cb73f230cd40dbe93c3ab20694f288a854d072d265f23af3f875da31b
MD5 f6aace10a645fe65c1dcdcefe928ada5
SHA1 df3039b7384f481c43f21466f1dfdb08f1ebbe77
SHA512 58f2a29512e1ece9a1ba52d69165d7672e28838f767b4a85a587abcbb37046d9a6409a41fbd821b1597fa9c758fc9a062131e3135fe2a21a59f37788302a1eb1
MD5 SHA1 SHA512

NSIS installer

installer

tabbar_friend_pressed.png

SHA256 10914ee5d0c852e99af1f02a69333e048e37499512da51d0d2276f4e6b68aae5
MD5 c98a5459f4db5f22bcadb38887207f9b
SHA1 4e03f60c849b79a7d5d5b4e2bdcfe29f4b976dbd
SHA512 b41eb35c2143730e2f06fba1d4cf2a7418506d39f44369708e7a1445ef1b2518384006e4f79a839e6e0196817babca646eeb4975b1e5c1c5882dda7cbc701e76
MD5 SHA1 SHA512

NSIS installer

installer

topbar_close.png

SHA256 92d7e453e81e552f16ceed19d0c8b48e0a2f142fe497e57d8f9242f88bb1f8ee
MD5 f6969195b2c383d99c7a6f6ad2885c75
SHA1 564db8742a1a12255bc0e22472d51482e311c24f
SHA512 919532f345e83aefbef6a420b6a1f8f97259a9b26e578057c56b99f13b58c53b5ecac674ee15b529389f5e42b0ddc05562f85ce5e1307524ac7d1705108ceb6c
MD5 SHA1 SHA512

NSIS installer

installer

topbar_close_click.png

SHA256 098d764e4a14e11a214873984b1bb781a17bcdeb5ad7b7a4f2db485a8e2681f9
MD5 7803ef0c2f2762d8f45e3a6659f24802
SHA1 8f5647ed8278fd0680decfb746d55cf4d3039b31
SHA512 616c53212687eb22e0202d8b8f20734abee2653aa3f559b99597fdb02349f14509a9dd1f6e6cb440f9ce2aaeb076316a8f8fb3ce47104fdcaa511e4895fc14fa
MD5 SHA1 SHA512

NSIS installer

installer

topbar_close_hover.png

SHA256 098d764e4a14e11a214873984b1bb781a17bcdeb5ad7b7a4f2db485a8e2681f9
MD5 7803ef0c2f2762d8f45e3a6659f24802
SHA1 8f5647ed8278fd0680decfb746d55cf4d3039b31
SHA512 616c53212687eb22e0202d8b8f20734abee2653aa3f559b99597fdb02349f14509a9dd1f6e6cb440f9ce2aaeb076316a8f8fb3ce47104fdcaa511e4895fc14fa
MD5 SHA1 SHA512

NSIS installer

installer

skin/posoftmgr

SHA256 63f61b0071f21de9051a688b6c79c2793822f8714addccaa0d55d0f300685054
MD5 a7d9458b7018a9b73eaaf311b85399dd
SHA1 ef671f7fc038041cb05f3a33fe6f4222be9574b6
SHA512 00f57c4ee54117ab2b000fea0c830f9d63b16bacc4d7da41b95113c159fb8ca2e9ca34e604ef49e538a4533ebfce44298f2679da11b5f0f58b78bba81202a699
SSDEEP 384:JcKnFnUoJ1oy31DP72sIdjG6XOPInu4bEVx3:JbVF2jnXqInu4Q/3
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/shlext

SHA256 f927b4aee75263fb31bfc1b01d8483ecc9aff691a7368c61dd375622e772f203
MD5 e0474a128fea3e72cf156d57c2eaa036
SHA1 301b1f980bd8592b61c5e9fbe33244a7bebdc71a
SHA512 5d136ed2950a2dc8197396ce227bda7a9326a644d92632b644d47c3ef693fbe9a7b2426a64763acc797564fe4e97c0e7dfe4b5c26a04f5ee6ec34bb00730dd66
SSDEEP 384:YY6lTevcKnFnUoJ13oRssKnFnUuBKvocOKQ7awMIw6:38TqbV/L4ocMOwMIw6
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/sscannerwnd

SHA256 0b30d2eb6ea6d204376204bbd6702a2364971dee3000a272102a1bc885cb8f23
MD5 69b2cfe33e36ad74e26b28c26da8205f
SHA1 a63137d8aec4fb1a60a855fc6bd236ac964dc275
SHA512 96b1416a9f2da076094f7d4748b139c6c5a10f65fc9363646b84d3d70cca7d681d0fe2ba996dd769e780e4dfd9874bb89f2c25c3338957c341ea705395c039bb
SSDEEP 384:hitPnlcKnFnUoJtwBGDzr3OYbDZA33Q/3Q:s1nlbNwBO9bY32A
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/sscreator

SHA256 bf9318e476e3a8e68bced5be2fdd6f853a256a5eb00de3e88c4f95fb082893f5
MD5 fad00159bddb4fadf1d6152fca3a993a
SHA1 0a6c2f3b4aab67f47b0c95de14c1aa1f82178fbd
SHA512 8c8ee814e41706224ce49f5a26abb2093914d5e39b41f308bac149518fc28f518e80486e74df155d7c47368d8fbdf06a0c5f3cbcd91f8f2db7606593c501e0ca
SSDEEP 1536:ygQqxpoGb/4cvqfVHv50G+sj2V8LTlbHYRfDT:ym2w4cvq9vOV8LRryfDT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/sswallpaper.jpg

SHA256 0caef2f339a91b0e507bac2502f6562831a3d93d33302c89023c50119fe860d3
MD5 9437f41db38f84229930d977f793f9f6
SHA1 e223984b4d44157770bb7f1d636157af74d68800
SHA512 476a560d0e74cef432041682b9378e57ff4ebd62451a0ce9bd86372f180b1ca131cc0a81c54cb0cb0be680213623844eefb69b09c2d2ce8a244881241a2f692c
SSDEEP 3072:lC0fIWhUqfaimz/UB4fAAQ6fmk4nP4CHE9CyYf+4DC45:lCFo/y/iulQu2P4CHGCyipv5
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/wfchost

SHA256 254699fd21a5a400fb79db5978801b7b8c265ee6928506b1853df64d3d1e9567
MD5 6b23d1b5010f62c1b15510d1b82b53a7
SHA1 a95303488aa9410443bd9a7bc37c15c163200cf0
SHA512 797b53f7cf6fec091010530f00527604201c8e9c3392d66646aa0dd53169c670ea3e67a193cc82a66c324fe081ddc329af0eae0795df71d04613fa6467ef95a8
SSDEEP 3072:c/CeMJ0sCzUlCqQxfwBv10HRm7ushDFvuV8NqVy:cKJTCzUlC9xYBK2rUd4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/wfviewer

SHA256 ac7957f2cd2fcb0b406631a2a347e89ceebfb24f1f74f5bde8ad26c633369522
MD5 a4640358433aa7c87dd5996faca84ccb
SHA1 5552cb637943276daa249e48313952b82028f76b
SHA512 58a91298259a53b3606e488dac945502b1211584c83a625ca1bdc60549ab06d34e4b5f84dc4ec93d8003b7924c65b9ba4cebbfe54db127f9a8b89e6c3a8254c1
SSDEEP 768:05suGoEVwyOLTlulsxbVR1/Ldywzmze3A77vK0qb+dsGoEVwyO/WUs:Ws/V8LTQlsxbRpS647vV2+rV8//s
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/woumgr

SHA256 13332bef04d32a5da6ea4a7360242cb29e567aeecaafcfd1c4e3257f644b0e18
MD5 d55f2dfa066bbb3f097c542af093860b
SHA1 24c83f9ff8a302f4be16629fddd843335a108e98
SHA512 ce9d4f6674fd9baf252f48cb68a3a0888f246de3ef40a71cedfa2fbda5371432c71869d25dceb1c919159d9cfaccd190561cfdacc5f68b9a9b8dae2e991234c4
SSDEEP 384:rfvC18Ywgb/9h0g/cQ7i2m4YCS31DPwrdRk9oxB:z9kPh7i2m4YCGwPB
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

sqlcipher32.dll

IMPHASH 11ef71a9e5186f8b4096ae75c3b760e9
SHA256 e91c75224702835bf124efd0850ac1db3eb14f4fd2b5ee89d15838f9fe16f9ea
MD5 d29fb377305d23499a4ec41afd57dcdd
SHA1 adc221f02c7b8668119d20fd0fefc53b62d9b710
SHA512 f31f92459f8db48b901176a91d8039c37bb3c2cce50f9217e53f2aa91605b63a2077ef7f0ea6115480f11b387adbef0060413cc92b37edc4b6229a7b2fa90e3b
SSDEEP 12288:UwObJjxx52AyV7VjwSKij35F2wXA3NG8WtV9VeZg/n8x:UwObJjxx52tVESKijJFBA3NqtDV10x
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

5c:2d:ba:3b:61:40:48:27:81:41:b9:50:a9:39:e5:f5:b7:d2:e6:e4:fb:53:99:52:c4:2f:8f:5d:f5:e2:2b:07

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 11, 2020

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

1d:64:5f:8f:ec:94:c9:9f:3a:89:20:cc:e6:5a:ff:1c:17:e7:a3:e0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 11, 2020

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

5

Entry point

393244

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\libs\sqlcipher\project\Release\sqlcipher32.pdb

kernel32

GetFullPathNameW GetFullPathNameA HeapReAlloc CreateFileA GetFileSize CreateMutexW HeapCompact SetFilePointer TryEnterCriticalSection MapViewOfFile UnmapViewOfFile SetEndOfFile FreeLibrary HeapAlloc SystemTimeToFileTime QueryPerformanceCounter HeapFree WaitForSingleObject InterlockedCompareExchange UnlockFile FlushViewOfFile LockFile WaitForSingleObjectEx OutputDebugStringW GetTickCount UnlockFileEx GetProcessHeap GetSystemTimeAsFileTime FormatMessageA WriteFile InitializeCriticalSection WideCharToMultiByte LoadLibraryW Sleep FormatMessageW GetVersionExW HeapDestroy LeaveCriticalSection GetFileAttributesA HeapCreate HeapValidate GetFileAttributesW ReadFile CreateFileW MultiByteToWideChar VirtualUnlock FlushFileBuffers GetTempPathW GetLastError GetProcAddress HeapSize LockFileEx EnterCriticalSection GetDiskFreeSpaceW LoadLibraryA CreateFileMappingA CreateFileMappingW GetDiskFreeSpaceA VirtualLock GetSystemInfo GetFileAttributesExW DeleteCriticalSection GetCurrentThreadId OutputDebugStringA GetVersionExA CloseHandle DeleteFileW GetCurrentProcessId GetTempPathA LocalFree GetSystemTime AreFileApisANSI DeleteFileA SetEnvironmentVariableA CompareStringW CompareStringA GetModuleHandleA SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetLocaleInfoA IsValidCodePage GetOEMCP GetACP GetConsoleMode GetConsoleCP GetCPInfo InitializeCriticalSectionAndSpinCount GetEnvironmentStringsW ExitThread CreateThread GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree VirtualAlloc GetModuleHandleW ExitProcess GetStdHandle GetModuleFileNameA GetTimeZoneInformation SetHandleCount GetFileType GetStartupInfoA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement RtlUnwind FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW

libeay32

ord363 ord2572 ord3877 ord188 ord298 ord315 ord181 ord2602 ord259 ord3844 ord3816 ord3315 ord464 ord964 ord3212 ord3313 ord3873 ord3783 ord2915 ord3019 ord2784 ord3782 ord333 ord4515 ord3836 ord2201 ord965 ord2747

sqlite3_aggregate_context sqlite3_aggregate_count sqlite3_auto_extension sqlite3_backup_finish sqlite3_backup_init sqlite3_backup_pagecount sqlite3_backup_remaining sqlite3_backup_step sqlite3_bind_blob sqlite3_bind_double sqlite3_bind_int sqlite3_bind_int64 sqlite3_bind_null sqlite3_bind_parameter_count sqlite3_bind_parameter_index sqlite3_bind_parameter_name sqlite3_bind_text sqlite3_bind_text16 sqlite3_bind_value sqlite3_bind_zeroblob sqlite3_blob_bytes sqlite3_blob_close sqlite3_blob_open sqlite3_blob_read sqlite3_blob_reopen sqlite3_blob_write sqlite3_busy_handler sqlite3_busy_timeout sqlite3_cancel_auto_extension sqlite3_changes sqlite3_clear_bindings sqlite3_close sqlite3_close_v2 sqlite3_collation_needed sqlite3_collation_needed16 sqlite3_column_blob sqlite3_column_bytes sqlite3_column_bytes16 sqlite3_column_count sqlite3_column_database_name sqlite3_column_database_name16 sqlite3_column_decltype sqlite3_column_decltype16 sqlite3_column_double sqlite3_column_int sqlite3_column_int64 sqlite3_column_name sqlite3_column_name16 sqlite3_column_origin_name sqlite3_column_origin_name16 sqlite3_column_table_name sqlite3_column_table_name16 sqlite3_column_text sqlite3_column_text16 sqlite3_column_type sqlite3_column_value sqlite3_commit_hook sqlite3_compileoption_get sqlite3_compileoption_used sqlite3_complete sqlite3_complete16 sqlite3_config sqlite3_context_db_handle sqlite3_create_collation sqlite3_create_collation16 sqlite3_create_collation_v2 sqlite3_create_function sqlite3_create_function16 sqlite3_create_function_v2 sqlite3_create_module sqlite3_create_module_v2 sqlite3_data_count sqlite3_db_config sqlite3_db_filename sqlite3_db_handle sqlite3_db_mutex sqlite3_db_readonly sqlite3_db_release_memory sqlite3_db_status sqlite3_declare_vtab sqlite3_enable_load_extension sqlite3_enable_shared_cache sqlite3_errcode sqlite3_errmsg sqlite3_errmsg16 sqlite3_errstr sqlite3_exec sqlite3_expired sqlite3_extended_errcode sqlite3_extended_result_codes sqlite3_file_control sqlite3_finalize sqlite3_free sqlite3_free_table sqlite3_get_autocommit sqlite3_get_auxdata sqlite3_get_table sqlite3_global_recover sqlite3_initialize sqlite3_interrupt sqlite3_last_insert_rowid sqlite3_libversion sqlite3_libversion_number sqlite3_limit sqlite3_load_extension sqlite3_log sqlite3_malloc sqlite3_memory_alarm sqlite3_memory_highwater sqlite3_memory_used sqlite3_mprintf sqlite3_mutex_alloc sqlite3_mutex_enter sqlite3_mutex_free sqlite3_mutex_leave sqlite3_mutex_try sqlite3_next_stmt sqlite3_open sqlite3_open16 sqlite3_open_v2 sqlite3_os_end sqlite3_os_init sqlite3_overload_function sqlite3_prepare sqlite3_prepare16 sqlite3_prepare16_v2 sqlite3_prepare_v2 sqlite3_profile sqlite3_progress_handler sqlite3_randomness sqlite3_realloc sqlite3_release_memory sqlite3_reset sqlite3_reset_auto_extension sqlite3_result_blob sqlite3_result_double sqlite3_result_error sqlite3_result_error16 sqlite3_result_error_code sqlite3_result_error_nomem sqlite3_result_error_toobig sqlite3_result_int sqlite3_result_int64 sqlite3_result_null sqlite3_result_text sqlite3_result_text16 sqlite3_result_text16be sqlite3_result_text16le sqlite3_result_value sqlite3_result_zeroblob sqlite3_rollback_hook sqlite3_rtree_geometry_callback sqlite3_set_authorizer sqlite3_set_auxdata sqlite3_shutdown sqlite3_sleep sqlite3_snprintf sqlite3_soft_heap_limit sqlite3_soft_heap_limit64 sqlite3_sourceid sqlite3_sql sqlite3_status sqlite3_step sqlite3_stmt_busy sqlite3_stmt_readonly sqlite3_stmt_status sqlite3_strglob sqlite3_stricmp sqlite3_strnicmp sqlite3_table_column_metadata sqlite3_test_control sqlite3_thread_cleanup sqlite3_threadsafe sqlite3_total_changes sqlite3_trace sqlite3_transfer_bindings sqlite3_update_hook sqlite3_uri_boolean sqlite3_uri_int64 sqlite3_uri_parameter sqlite3_user_data sqlite3_value_blob sqlite3_value_bytes sqlite3_value_bytes16 sqlite3_value_double sqlite3_value_int sqlite3_value_int64 sqlite3_value_numeric_type sqlite3_value_text sqlite3_value_text16 sqlite3_value_text16be sqlite3_value_text16le sqlite3_value_type sqlite3_vfs_find sqlite3_vfs_register sqlite3_vfs_unregister sqlite3_vmprintf sqlite3_vsnprintf sqlite3_vtab_config sqlite3_vtab_on_conflict sqlite3_wal_autocheckpoint sqlite3_wal_checkpoint sqlite3_wal_checkpoint_v2 sqlite3_wal_hook sqlite3_win32_mbcs_to_utf8 sqlite3_win32_set_directory sqlite3_win32_sleep sqlite3_win32_utf8_to_mbcs sqlite3_win32_write_debug

sqlcipher64.dll

IMPHASH 744f480b483346d8c57ec6b10f070f06
SHA256 45538da9e3c060ff4fc42b0ccb8db01389822bc9c63a4b170bf13ba67bd9ca1a
MD5 20c42c467fda982977e0e94299215c67
SHA1 0268661c4e8f05e014a34d2b1eaa932449dd5bcf
SHA512 5b7539e6c9dd68bc6078704feb5c3a5c9a5df8b37ae139a6f8d52ad65dc6637c02608a0069a82fec0bd54f860caf2c0b77d4e615c33b6fe181c8507d2570f0c0
SSDEEP 12288:4Gb1gNdqbwnFNYHScpOZwhjStHTGdTa0ee8JvduN2GH5kRII5W:4Gb+NdZnF+SIvaHTGdTbee8JvYN/gs
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

Digest

d0:f0:a7:67:d7:7d:20:34:ec:a4:c1:5a:51:8d:b6:ff:99:89:60:f4:e0:72:58:28:0f:b6:ef:99:7f:06:6b:0c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 11, 2020

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

9a:72:ad:df:08:3a:c9:66:03:bc:6d:be:6f:e1:ab:ee:96:72:f6:f4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 11, 2020

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

2

Major OS version

5

Entry point

514984

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\libs\sqlcipher\project\Release\sqlcipher64.pdb

kernel32

GetFullPathNameW GetFullPathNameA HeapReAlloc CreateFileA GetFileSize CreateMutexW HeapCompact SetFilePointer TryEnterCriticalSection MapViewOfFile UnmapViewOfFile SetEndOfFile FreeLibrary HeapAlloc SystemTimeToFileTime QueryPerformanceCounter HeapFree WaitForSingleObject UnlockFile FlushViewOfFile LockFile WaitForSingleObjectEx OutputDebugStringW GetTickCount UnlockFileEx GetProcessHeap GetSystemTimeAsFileTime FormatMessageA WriteFile InitializeCriticalSection WideCharToMultiByte LoadLibraryW Sleep FormatMessageW GetVersionExW HeapDestroy LeaveCriticalSection GetFileAttributesA HeapCreate HeapValidate GetFileAttributesW ReadFile CreateFileW MultiByteToWideChar VirtualUnlock FlushFileBuffers GetTempPathW GetLastError GetProcAddress HeapSize LockFileEx EnterCriticalSection GetDiskFreeSpaceW LoadLibraryA CreateFileMappingA CreateFileMappingW GetDiskFreeSpaceA VirtualLock GetSystemInfo GetFileAttributesExW DeleteCriticalSection GetCurrentThreadId OutputDebugStringA GetVersionExA CloseHandle DeleteFileW GetCurrentProcessId GetTempPathA LocalFree GetSystemTime AreFileApisANSI DeleteFileA CompareStringW CompareStringA SetStdHandle SetEnvironmentVariableA WriteConsoleW GetConsoleOutputCP WriteConsoleA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA GetLocaleInfoA IsValidCodePage GetOEMCP GetACP GetConsoleMode GetConsoleCP GetCPInfo InitializeCriticalSectionAndSpinCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings ExitThread CreateThread FlsSetValue GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapSetInformation GetModuleHandleW ExitProcess GetStdHandle GetModuleFileNameA GetTimeZoneInformation SetHandleCount GetFileType GetStartupInfoA EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc RtlUnwindEx FreeEnvironmentStringsA

libeay64

ord363 ord2572 ord3877 ord188 ord298 ord315 ord181 ord2602 ord259 ord3844 ord3816 ord3315 ord464 ord964 ord3212 ord3313 ord3873 ord3783 ord2915 ord2747 ord2784 ord3782 ord333 ord4515 ord3836 ord2201 ord965 ord3019

sqlite3_aggregate_context sqlite3_aggregate_count sqlite3_auto_extension sqlite3_backup_finish sqlite3_backup_init sqlite3_backup_pagecount sqlite3_backup_remaining sqlite3_backup_step sqlite3_bind_blob sqlite3_bind_double sqlite3_bind_int sqlite3_bind_int64 sqlite3_bind_null sqlite3_bind_parameter_count sqlite3_bind_parameter_index sqlite3_bind_parameter_name sqlite3_bind_text sqlite3_bind_text16 sqlite3_bind_value sqlite3_bind_zeroblob sqlite3_blob_bytes sqlite3_blob_close sqlite3_blob_open sqlite3_blob_read sqlite3_blob_reopen sqlite3_blob_write sqlite3_busy_handler sqlite3_busy_timeout sqlite3_cancel_auto_extension sqlite3_changes sqlite3_clear_bindings sqlite3_close sqlite3_close_v2 sqlite3_collation_needed sqlite3_collation_needed16 sqlite3_column_blob sqlite3_column_bytes sqlite3_column_bytes16 sqlite3_column_count sqlite3_column_database_name sqlite3_column_database_name16 sqlite3_column_decltype sqlite3_column_decltype16 sqlite3_column_double sqlite3_column_int sqlite3_column_int64 sqlite3_column_name sqlite3_column_name16 sqlite3_column_origin_name sqlite3_column_origin_name16 sqlite3_column_table_name sqlite3_column_table_name16 sqlite3_column_text sqlite3_column_text16 sqlite3_column_type sqlite3_column_value sqlite3_commit_hook sqlite3_compileoption_get sqlite3_compileoption_used sqlite3_complete sqlite3_complete16 sqlite3_config sqlite3_context_db_handle sqlite3_create_collation sqlite3_create_collation16 sqlite3_create_collation_v2 sqlite3_create_function sqlite3_create_function16 sqlite3_create_function_v2 sqlite3_create_module sqlite3_create_module_v2 sqlite3_data_count sqlite3_db_config sqlite3_db_filename sqlite3_db_handle sqlite3_db_mutex sqlite3_db_readonly sqlite3_db_release_memory sqlite3_db_status sqlite3_declare_vtab sqlite3_enable_load_extension sqlite3_enable_shared_cache sqlite3_errcode sqlite3_errmsg sqlite3_errmsg16 sqlite3_errstr sqlite3_exec sqlite3_expired sqlite3_extended_errcode sqlite3_extended_result_codes sqlite3_file_control sqlite3_finalize sqlite3_free sqlite3_free_table sqlite3_get_autocommit sqlite3_get_auxdata sqlite3_get_table sqlite3_global_recover sqlite3_initialize sqlite3_interrupt sqlite3_last_insert_rowid sqlite3_libversion sqlite3_libversion_number sqlite3_limit sqlite3_load_extension sqlite3_log sqlite3_malloc sqlite3_memory_alarm sqlite3_memory_highwater sqlite3_memory_used sqlite3_mprintf sqlite3_mutex_alloc sqlite3_mutex_enter sqlite3_mutex_free sqlite3_mutex_leave sqlite3_mutex_try sqlite3_next_stmt sqlite3_open sqlite3_open16 sqlite3_open_v2 sqlite3_os_end sqlite3_os_init sqlite3_overload_function sqlite3_prepare sqlite3_prepare16 sqlite3_prepare16_v2 sqlite3_prepare_v2 sqlite3_profile sqlite3_progress_handler sqlite3_randomness sqlite3_realloc sqlite3_release_memory sqlite3_reset sqlite3_reset_auto_extension sqlite3_result_blob sqlite3_result_double sqlite3_result_error sqlite3_result_error16 sqlite3_result_error_code sqlite3_result_error_nomem sqlite3_result_error_toobig sqlite3_result_int sqlite3_result_int64 sqlite3_result_null sqlite3_result_text sqlite3_result_text16 sqlite3_result_text16be sqlite3_result_text16le sqlite3_result_value sqlite3_result_zeroblob sqlite3_rollback_hook sqlite3_rtree_geometry_callback sqlite3_set_authorizer sqlite3_set_auxdata sqlite3_shutdown sqlite3_sleep sqlite3_snprintf sqlite3_soft_heap_limit sqlite3_soft_heap_limit64 sqlite3_sourceid sqlite3_sql sqlite3_status sqlite3_step sqlite3_stmt_busy sqlite3_stmt_readonly sqlite3_stmt_status sqlite3_strglob sqlite3_stricmp sqlite3_strnicmp sqlite3_table_column_metadata sqlite3_test_control sqlite3_thread_cleanup sqlite3_threadsafe sqlite3_total_changes sqlite3_trace sqlite3_transfer_bindings sqlite3_update_hook sqlite3_uri_boolean sqlite3_uri_int64 sqlite3_uri_parameter sqlite3_user_data sqlite3_value_blob sqlite3_value_bytes sqlite3_value_bytes16 sqlite3_value_double sqlite3_value_int sqlite3_value_int64 sqlite3_value_numeric_type sqlite3_value_text sqlite3_value_text16 sqlite3_value_text16be sqlite3_value_text16le sqlite3_value_type sqlite3_vfs_find sqlite3_vfs_register sqlite3_vfs_unregister sqlite3_vmprintf sqlite3_vsnprintf sqlite3_vtab_config sqlite3_vtab_on_conflict sqlite3_wal_autocheckpoint sqlite3_wal_checkpoint sqlite3_wal_checkpoint_v2 sqlite3_wal_hook sqlite3_win32_mbcs_to_utf8 sqlite3_win32_set_directory sqlite3_win32_sleep sqlite3_win32_utf8_to_mbcs sqlite3_win32_write_debug

sscanner32.dll

IMPHASH f8a7674e6a6a187331bca8e5de867c64
SHA256 d22ae9a4f7143afe271865e6c81c1f76dd64905ffa9c42d0d7c2d3c187a47faf
MD5 215f2a2bc94d9e6815a6082630546cc2
SHA1 a7049f4565f13eab2a5f8ea499e10defcbde6007
SHA512 e5fbde622ba02414bfdead61b93e6080f766a19c91dc1b4803c9d042efcbb468c7f5bd3ec1e363e6e0b9135df66ed55fbf1a5e62321208411541c599f6b29644
SSDEEP 6144:FerwhTQNs5gTAVmz0g/3EgE18UmgOyirvYy3a2KNp9CKzGjGRR:FerwhTQNs5uAV20KfE8TyirwqCP//
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

49:ca:63:34:85:4d:77:10:91:fb:02:85:ee:45:34:54:48:8f:c1:9f:ac:5b:15:04:d3:de:66:2d:24:96:f6:3a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

PE Signature issue

Digest

8d:b4:bb:49:8b:37:e0:ac:b5:b9:92:44:0e:40:99:a9:64:b1:a3:39

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

155858

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\sscanner\Release\sscanner32.pdb

kernel32

lstrcmpiW GetFileAttributesW GetTickCount CreateThread GetCurrentProcessId GetLocalTime GetModuleFileNameW Sleep SetEvent LocalFree FileTimeToLocalFileTime LocalAlloc FileTimeToSystemTime DeleteFileW CloseHandle GetProcAddress GetLastError GetTempPathW LoadLibraryW GetModuleHandleW WaitForSingleObject GetVersionExW lstrcpyW lstrcpynW WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP InitializeCriticalSectionAndSpinCount InterlockedExchange IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA GetLocaleInfoA GetLocaleInfoW GetSystemTimeAsFileTime QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount VirtualAlloc DeleteCriticalSection VirtualFree HeapDestroy HeapCreate ExitProcess HeapSize LCMapStringW DisableThreadLibraryCalls lstrcmpiA lstrcmpA lstrlenW SetLastError GetModuleHandleA GetCurrentThreadId lstrcpyA CreateFileA FindFirstFileW lstrlenA VirtualQuery lstrcpynA CreateProcessW HeapAlloc SystemTimeToFileTime GetCurrentProcess HeapFree GetLogicalDrives WriteFile InitializeCriticalSection OpenProcess WideCharToMultiByte LeaveCriticalSection TerminateProcess ReadFile CreateFileW GetACP lstrcmpW MultiByteToWideChar GetCurrentDirectoryW EnterCriticalSection FindClose LoadLibraryA Process32FirstW CreateEventW QueryDosDeviceW Module32FirstW Process32NextW lstrcatW FindNextFileW CreateToolhelp32Snapshot GetFileAttributesExW OpenEventW Module32NextW GetWindowsDirectoryW OutputDebugStringW SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapReAlloc GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetCPInfo GetOEMCP IsValidCodePage LCMapStringA

advapi32

SetSecurityDescriptorDacl SetEntriesInAclW FreeSid ControlService InitializeSecurityDescriptor StartServiceW QueryServiceStatus AllocateAndInitializeSid LogonUserW GetUserNameW CloseServiceHandle OpenSCManagerW OpenServiceW QueryServiceConfig2W EnumServicesStatusW QueryServiceConfigW

shell32

ord165 SHGetPathFromIDListW SHGetSpecialFolderLocation ShellExecuteExW

ole32

CoUninitialize CoCreateGuid CoTaskMemFree CoInitialize CoCreateInstance

netapi32

NetUserSetInfo NetUserGetInfo NetApiBufferFree

iphlpapi

GetExtendedTcpTable

wintrust

WinVerifyTrust WTHelperProvDataFromStateData WTHelperGetProvCertFromChain WTHelperGetProvSignerFromChain

crypt32

CertGetNameStringW

shlwapi

StrCatBuffW StrStrW PathFindFileNameW StrStrIW PathFileExistsW PathAppendW StrCatW SHSetValueW StrCmpNIW SHGetValueW StrChrW wvnsprintfW wnsprintfA wvnsprintfA PathIsDirectoryW wnsprintfW PathRemoveFileSpecW PathMatchSpecW

ws2_32

inet_ntoa htons

psapi

GetProcessImageFileNameW

sscanner64.dll

IMPHASH 4186490acbe22bfd90bc7919004da532
SHA256 11fbccf8a826717d83bc83fcbf45dd2caa2ac24cbff6393d23957d3ab40c9d73
MD5 e8fb6311b02ecc6812909abeb9b5b793
SHA1 10e65581345face4cb93cc24d0853e2d731fc6d5
SHA512 ebcbeaa4bda06352b973677c44e70172d0e5658a688b2ea06e6a054a97e73709def84ee8102a174b30a2bafc20b5145868a721966b74160524dba07229512b1a
SSDEEP 6144:VtjrO/eQUqlO6gizIHTSx1a7RFayo6S4L98k5ljAX0W0EaKx55sgq5gvxXc9GUGi:VprORg6g1G1krz8uqLsJ5Dd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

a4:91:53:0b:60:85:fa:35:8f:41:21:c3:28:ed:29:66:09:2d:aa:65:58:e3:6e:81:0f:e1:44:de:60:c5:86:ae

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

PE Signature issue

Digest

89:49:23:48:7e:92:80:39:e1:e6:a9:9a:f6:a8:03:08:ea:36:98:45

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Nov 18, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

245184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\sscanner\Release\sscanner64.pdb

kernel32

lstrcmpiW GetFileAttributesW GetTickCount CreateThread GetCurrentProcessId GetLocalTime GetModuleFileNameW Sleep SetEvent LocalFree FileTimeToLocalFileTime LocalAlloc FileTimeToSystemTime DeleteFileW CloseHandle GetProcAddress GetLastError GetTempPathW LoadLibraryW GetModuleHandleW WaitForSingleObject GetVersionExW lstrcpyW lstrcpynW WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP InitializeCriticalSectionAndSpinCount IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA GetLocaleInfoA GetLocaleInfoW GetSystemTimeAsFileTime QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA DeleteCriticalSection GetStartupInfoA GetFileType SetHandleCount HeapDestroy HeapCreate HeapSetInformation ExitProcess HeapSize LCMapStringW LCMapStringA IsValidCodePage DisableThreadLibraryCalls lstrcmpiA lstrcmpA lstrlenW SetLastError GetModuleHandleA GetCurrentThreadId lstrcpyA CreateFileA FindFirstFileW lstrlenA VirtualQuery lstrcpynA CreateProcessW HeapAlloc SystemTimeToFileTime GetCurrentProcess HeapFree GetLogicalDrives WriteFile InitializeCriticalSection OpenProcess WideCharToMultiByte LeaveCriticalSection TerminateProcess ReadFile CreateFileW GetACP lstrcmpW MultiByteToWideChar GetCurrentDirectoryW EnterCriticalSection FindClose LoadLibraryA Process32FirstW CreateEventW QueryDosDeviceW Module32FirstW Process32NextW lstrcatW FindNextFileW CreateToolhelp32Snapshot GetFileAttributesExW OpenEventW Module32NextW GetWindowsDirectoryW OutputDebugStringW SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapReAlloc GetStdHandle GetModuleFileNameA EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc GetCPInfo GetOEMCP

advapi32

SetSecurityDescriptorDacl SetEntriesInAclW FreeSid ControlService InitializeSecurityDescriptor StartServiceW QueryServiceStatus AllocateAndInitializeSid LogonUserW GetUserNameW CloseServiceHandle OpenSCManagerW OpenServiceW QueryServiceConfig2W EnumServicesStatusW QueryServiceConfigW

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW ord165

ole32

CoInitialize CoUninitialize CoCreateInstance CoCreateGuid CoTaskMemFree

netapi32

NetUserSetInfo NetApiBufferFree NetUserGetInfo

iphlpapi

GetExtendedTcpTable

wintrust

WTHelperGetProvSignerFromChain WTHelperProvDataFromStateData WTHelperGetProvCertFromChain WinVerifyTrust

crypt32

CertGetNameStringW

shlwapi

StrStrW PathFindFileNameW StrStrIW PathFileExistsW PathAppendW PathMatchSpecW StrCatBuffW StrCatW SHSetValueW StrCmpNIW SHGetValueW StrChrW wvnsprintfW wnsprintfA wvnsprintfA wnsprintfW PathIsDirectoryW PathRemoveFileSpecW

ws2_32

htons inet_ntoa

psapi

GetProcessImageFileNameW

ssleay32.dll

IMPHASH bb97df0f2e9321ec4e2256179b5b9c2c
SHA256 a076c5707b4ae82d3a62f7300023a2a933dbf3cc3f83b4bb8edc6867105be013
MD5 355152cca9e9493de9fde0fde7c5d21f
SHA1 a1687ce7793a38e82db3eeeafacb439c44aa78a5
SHA512 89db321f17fef11a7c3eac39de1bd58e550114cdb77e48e4016f059537e81acc0de7f378b923597d2f534f597e708b9db82de05b35d074d42eb86cbc08da2076
SSDEEP 6144:DsJ+TKsWjwovdOP44Ekqc4sLzmZDQDT13pf8TH3bKck/xD/tk4NREx4Q2sChEp6n:DsJ+OsWjwovdOP44EHc4sLzmZDuT13d1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

cd:3a:68:99:e7:bb:00:bd:39:9b:f9:5a:13:73:94:60:51:9a:e9:94:6f:ef:f4:3d:65:32:7d:f3:a1:f3:76:ba

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Aug 9, 2019

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

0a:c6:da:50:f9:52:74:4e:d3:9a:8b:8c:49:f7:fd:c0:62:9a:30:29

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Aug 9, 2019

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:2f:4e:e1:52:d7

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 13, 2011 - Jan 28, 2028

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Serial Number

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 24, 2016 - Jun 24, 2027

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

09:9d:1a:13:bd:f7:cb:77:51:1e:e5:cd:06:e1:2d:24

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 8, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 10, 2006 - Nov 10, 2031

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0d:ae:6d:bb:e5:f1:95:e4:e1:77:47:a4:ee:de:a4:f1

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 8, 2019 - Aug 11, 2022

Subject

CN=GlobalSign TSA for Advanced - G2

Serial Number

0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Feb 19, 2018 - Mar 18, 2029

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Serial Number

04:00:00:00:00:01:31:89:c6:50:04

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 2, 2011 - Mar 29, 2029

Minor OS version

0

Major OS version

5

Entry point

210313

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\libs\openssl-1.0.2o\out32dll\ssleay32.pdb

libeay32

ord2894 ord2927 ord2784 ord256 ord168 ord2747 ord961 ord167 ord169 ord3844 ord3837 ord3896 ord2201 ord904 ord176 ord282 ord572 ord3165 ord3489 ord1071 ord2925 ord268 ord316 ord363 ord2712 ord4164 ord493 ord4262 ord3719 ord216 ord333 ord4125 ord4470 ord1010 ord4046 ord3682 ord2877 ord3711 ord129 ord124 ord1000 ord125 ord150 ord205 ord486 ord484 ord577 ord763 ord907 ord87 ord3450 ord2107 ord2063 ord283 ord3418 ord481 ord323 ord2915 ord3836 ord3873 ord1096 ord1097 ord3244 ord3874 ord3816 ord3888 ord109 ord2589 ord78 ord95 ord3891 ord89 ord1145 ord1144 ord3906 ord1081 ord2292 ord3823 ord3846 ord187 ord3857 ord267 ord3675 ord3737 ord3633 ord3631 ord3664 ord3479 ord1011 ord341 ord1012 ord503 ord359 ord365 ord4684 ord3192 ord3388 ord3528 ord2568 ord3312 ord3922 ord2898 ord264 ord266 ord3067 ord3313 ord3314 ord4210 ord4701 ord653 ord4692 ord3925 ord541 ord2702 ord3124 ord4372 ord4144 ord4174 ord2400 ord3782 ord1202 ord193 ord3866 ord3704 ord3758 ord3767 ord3647 ord3766 ord3365 ord4114 ord3460 ord3783 ord3454 ord3754 ord3394 ord897 ord3414 ord3495 ord3610 ord67 ord65 ord53 ord3315 ord3826 ord3559 ord3399 ord636 ord2257 ord914 ord2478 ord626 ord890 ord1004 ord3527 ord4513 ord364 ord2051 ord206 ord497 ord85 ord58 ord630 ord628 ord1041 ord1007 ord1005 ord4331 ord1027 ord3437 ord629 ord892 ord74 ord248 ord3378 ord1655 ord575 ord1025 ord246 ord1100 ord4693 ord2135 ord622 ord679 ord2524 ord3505 ord3595 ord1023 ord2451 ord623 ord657 ord401 ord93 ord911 ord3396 ord3657 ord857 ord908 ord680 ord1016 ord2204 ord3205 ord624 ord128 ord4045 ord2475 ord368 ord367 ord370 ord369 ord887 ord889 ord891 ord4320 ord4383 ord315 ord1671 ord1147 ord189 ord314 ord956 ord280 ord2181 ord399 ord748 ord279 ord400 ord751 ord750 ord394 ord774 ord1959 ord37 ord35 ord824 ord822 ord8 ord1091 ord3700 ord3623 ord718 ord7 ord716 ord703 ord2426 ord86 ord88 ord3724 ord313 ord1101 ord293 ord3914 ord3807 ord3795 ord4740 ord4731 ord4656 ord4637 ord4615 ord4601 ord2996 ord3155 ord959 ord325 ord329 ord318 ord304 ord292 ord299 ord395 ord955 ord2252 ord91 ord247 ord225 ord4578 ord4572 ord4576 ord4570 ord4573 ord4582 ord4575 ord4577 ord4584 ord4580 ord4581 ord2572 ord3899 ord276 ord274 ord964 ord965 ord2411 ord754 ord910 ord641 ord912 ord909 ord635 ord52 ord290 ord498 ord219 ord3666 ord4474 ord4369 ord66 ord464 ord490 ord3245 ord654 ord967 ord2128 ord281 ord118 ord201 ord123 ord202 ord3663 ord3512 ord3459 ord2924 ord3010 ord2578 ord3644 ord2929 ord3422 ord3513 ord170 ord165 ord4119 ord4245 ord4488 ord222 ord32 ord1070 ord4233 ord4430 ord866 ord2630 ord2760 ord4540 ord203 ord3353 ord3729 ord3480 ord3608 ord3550 ord3575 ord3570 ord3695 ord3178 ord188 ord111 ord110 ord151 ord285 ord3239 ord120 ord181 ord3883 ord3109 ord269 ord2936 ord495 ord2821 ord289 ord252 ord1654 ord1653 ord905 ord98 ord903

kernel32

CreateFileA SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA CloseHandle HeapSize SetFilePointer GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA FlushFileBuffers GetConsoleMode GetConsoleCP LoadLibraryA VirtualAlloc HeapReAlloc HeapAlloc RtlUnwind InitializeCriticalSectionAndSpinCount GetCurrentProcessId GetTickCount QueryPerformanceCounter VirtualFree HeapDestroy HeapCreate GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA IsValidCodePage GetOEMCP GetACP GetCPInfo GetModuleFileNameA WriteFile InterlockedDecrement InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue ExitProcess GetModuleHandleW HeapFree Sleep DeleteCriticalSection GetStartupInfoA GetFileType GetStdHandle SetHandleCount GetModuleHandleA GetProcAddress IsDebuggerPresent GetCurrentProcess TerminateProcess GetCommandLineA GetCurrentThreadId SetUnhandledExceptionFilter UnhandledExceptionFilter LeaveCriticalSection EnterCriticalSection GetSystemTimeAsFileTime GetLastError GetSystemTime SystemTimeToFileTime SetLastError

BIO_f_ssl BIO_new_buffer_ssl_connect BIO_new_ssl BIO_new_ssl_connect BIO_ssl_copy_session_id BIO_ssl_shutdown DTLS_client_method DTLS_method DTLS_server_method DTLSv1_2_client_method DTLSv1_2_method DTLSv1_2_server_method DTLSv1_client_method DTLSv1_method DTLSv1_server_method ERR_load_SSL_strings PEM_read_SSL_SESSION PEM_read_bio_SSL_SESSION PEM_write_SSL_SESSION PEM_write_bio_SSL_SESSION SRP_Calc_A_param SRP_generate_client_master_secret SRP_generate_server_master_secret SSL_CIPHER_description SSL_CIPHER_find SSL_CIPHER_get_bits SSL_CIPHER_get_id SSL_CIPHER_get_name SSL_CIPHER_get_version SSL_COMP_add_compression_method SSL_COMP_free_compression_methods SSL_COMP_get_compression_methods SSL_COMP_get_name SSL_COMP_set0_compression_methods SSL_CONF_CTX_clear_flags SSL_CONF_CTX_finish SSL_CONF_CTX_free SSL_CONF_CTX_new SSL_CONF_CTX_set1_prefix SSL_CONF_CTX_set_flags SSL_CONF_CTX_set_ssl SSL_CONF_CTX_set_ssl_ctx SSL_CONF_cmd SSL_CONF_cmd_argv SSL_CONF_cmd_value_type SSL_CTX_SRP_CTX_free SSL_CTX_SRP_CTX_init SSL_CTX_add_client_CA SSL_CTX_add_client_custom_ext SSL_CTX_add_server_custom_ext SSL_CTX_add_session SSL_CTX_callback_ctrl SSL_CTX_check_private_key SSL_CTX_ctrl SSL_CTX_flush_sessions SSL_CTX_free SSL_CTX_get0_certificate SSL_CTX_get0_param SSL_CTX_get0_privatekey SSL_CTX_get_cert_store SSL_CTX_get_client_CA_list SSL_CTX_get_client_cert_cb SSL_CTX_get_ex_data SSL_CTX_get_ex_new_index SSL_CTX_get_info_callback SSL_CTX_get_quiet_shutdown SSL_CTX_get_ssl_method SSL_CTX_get_timeout SSL_CTX_get_verify_callback SSL_CTX_get_verify_depth SSL_CTX_get_verify_mode SSL_CTX_load_verify_locations SSL_CTX_new SSL_CTX_remove_session SSL_CTX_sess_get_get_cb SSL_CTX_sess_get_new_cb SSL_CTX_sess_get_remove_cb SSL_CTX_sess_set_get_cb SSL_CTX_sess_set_new_cb SSL_CTX_sess_set_remove_cb SSL_CTX_sessions SSL_CTX_set1_param SSL_CTX_set_alpn_protos SSL_CTX_set_alpn_select_cb SSL_CTX_set_cert_cb SSL_CTX_set_cert_store SSL_CTX_set_cert_verify_callback SSL_CTX_set_cipher_list SSL_CTX_set_client_CA_list SSL_CTX_set_client_cert_cb SSL_CTX_set_client_cert_engine SSL_CTX_set_cookie_generate_cb SSL_CTX_set_cookie_verify_cb SSL_CTX_set_default_passwd_cb SSL_CTX_set_default_passwd_cb_userdata SSL_CTX_set_default_verify_paths SSL_CTX_set_ex_data SSL_CTX_set_generate_session_id SSL_CTX_set_info_callback SSL_CTX_set_msg_callback SSL_CTX_set_next_proto_select_cb SSL_CTX_set_next_protos_advertised_cb SSL_CTX_set_psk_client_callback SSL_CTX_set_psk_server_callback SSL_CTX_set_purpose SSL_CTX_set_quiet_shutdown SSL_CTX_set_session_id_context SSL_CTX_set_srp_cb_arg SSL_CTX_set_srp_client_pwd_callback SSL_CTX_set_srp_password SSL_CTX_set_srp_strength SSL_CTX_set_srp_username SSL_CTX_set_srp_username_callback SSL_CTX_set_srp_verify_param_callback SSL_CTX_set_ssl_version SSL_CTX_set_timeout SSL_CTX_set_tlsext_use_srtp SSL_CTX_set_tmp_dh_callback SSL_CTX_set_tmp_ecdh_callback SSL_CTX_set_tmp_rsa_callback SSL_CTX_set_trust SSL_CTX_set_verify SSL_CTX_set_verify_depth SSL_CTX_use_PrivateKey SSL_CTX_use_PrivateKey_ASN1 SSL_CTX_use_PrivateKey_file SSL_CTX_use_RSAPrivateKey SSL_CTX_use_RSAPrivateKey_ASN1 SSL_CTX_use_RSAPrivateKey_file SSL_CTX_use_certificate SSL_CTX_use_certificate_ASN1 SSL_CTX_use_certificate_chain_file SSL_CTX_use_certificate_file SSL_CTX_use_psk_identity_hint SSL_CTX_use_serverinfo SSL_CTX_use_serverinfo_file SSL_SESSION_free SSL_SESSION_get0_peer SSL_SESSION_get_compress_id SSL_SESSION_get_ex_data SSL_SESSION_get_ex_new_index SSL_SESSION_get_id SSL_SESSION_get_time SSL_SESSION_get_timeout SSL_SESSION_new SSL_SESSION_print SSL_SESSION_print_fp SSL_SESSION_set1_id_context SSL_SESSION_set_ex_data SSL_SESSION_set_time SSL_SESSION_set_timeout SSL_SRP_CTX_free SSL_SRP_CTX_init SSL_accept SSL_add_client_CA SSL_add_dir_cert_subjects_to_stack SSL_add_file_cert_subjects_to_stack SSL_alert_desc_string SSL_alert_desc_string_long SSL_alert_type_string SSL_alert_type_string_long SSL_cache_hit SSL_callback_ctrl SSL_certs_clear SSL_check_chain SSL_check_private_key SSL_clear SSL_connect SSL_copy_session_id SSL_ctrl SSL_do_handshake SSL_dup SSL_dup_CA_list SSL_export_keying_material SSL_extension_supported SSL_free SSL_get0_alpn_selected SSL_get0_next_proto_negotiated SSL_get0_param SSL_get1_session SSL_get_SSL_CTX SSL_get_certificate SSL_get_cipher_list SSL_get_ciphers SSL_get_client_CA_list SSL_get_current_cipher SSL_get_current_compression SSL_get_current_expansion SSL_get_default_timeout SSL_get_error SSL_get_ex_data SSL_get_ex_data_X509_STORE_CTX_idx SSL_get_ex_new_index SSL_get_fd SSL_get_finished SSL_get_info_callback SSL_get_peer_cert_chain SSL_get_peer_certificate SSL_get_peer_finished SSL_get_privatekey SSL_get_psk_identity SSL_get_psk_identity_hint SSL_get_quiet_shutdown SSL_get_rbio SSL_get_read_ahead SSL_get_rfd SSL_get_selected_srtp_profile SSL_get_servername SSL_get_servername_type SSL_get_session SSL_get_shared_ciphers SSL_get_shared_sigalgs SSL_get_shutdown SSL_get_sigalgs SSL_get_srp_N SSL_get_srp_g SSL_get_srp_userinfo SSL_get_srp_username SSL_get_srtp_profiles SSL_get_ssl_method SSL_get_verify_callback SSL_get_verify_depth SSL_get_verify_mode SSL_get_verify_result SSL_get_version SSL_get_wbio SSL_get_wfd SSL_has_matching_session_id SSL_is_server SSL_library_init SSL_load_client_CA_file SSL_load_error_strings SSL_new SSL_peek SSL_pending SSL_read SSL_renegotiate SSL_renegotiate_abbreviated SSL_renegotiate_pending SSL_rstate_string SSL_rstate_string_long SSL_select_next_proto SSL_set1_param SSL_set_SSL_CTX SSL_set_accept_state SSL_set_alpn_protos SSL_set_bio SSL_set_cert_cb SSL_set_cipher_list SSL_set_client_CA_list SSL_set_connect_state SSL_set_debug SSL_set_ex_data SSL_set_fd SSL_set_generate_session_id SSL_set_info_callback SSL_set_msg_callback SSL_set_psk_client_callback SSL_set_psk_server_callback SSL_set_purpose SSL_set_quiet_shutdown SSL_set_read_ahead SSL_set_rfd SSL_set_session SSL_set_session_id_context SSL_set_session_secret_cb SSL_set_session_ticket_ext SSL_set_session_ticket_ext_cb SSL_set_shutdown SSL_set_srp_server_param SSL_set_srp_server_param_pw SSL_set_ssl_method SSL_set_state SSL_set_tlsext_use_srtp SSL_set_tmp_dh_callback SSL_set_tmp_ecdh_callback SSL_set_tmp_rsa_callback SSL_set_trust SSL_set_verify SSL_set_verify_depth SSL_set_verify_result SSL_set_wfd SSL_shutdown SSL_srp_server_param_with_username SSL_state SSL_state_string SSL_state_string_long SSL_use_PrivateKey SSL_use_PrivateKey_ASN1 SSL_use_PrivateKey_file SSL_use_RSAPrivateKey SSL_use_RSAPrivateKey_ASN1 SSL_use_RSAPrivateKey_file SSL_use_certificate SSL_use_certificate_ASN1 SSL_use_certificate_file SSL_use_psk_identity_hint SSL_version SSL_want SSL_write SSLv23_client_method SSLv23_method SSLv23_server_method SSLv2_client_method SSLv2_method SSLv2_server_method SSLv3_client_method SSLv3_method SSLv3_server_method TLSv1_1_client_method TLSv1_1_method TLSv1_1_server_method TLSv1_2_client_method TLSv1_2_method TLSv1_2_server_method TLSv1_client_method TLSv1_method TLSv1_server_method d2i_SSL_SESSION i2d_SSL_SESSION ssl3_ciphers

ssleay64.dll

IMPHASH e1dea7569813bf7f47c70de61bfd4400
SHA256 fe1b87754b602c27d6c06f31e3c3c955b7ea627b061025ca0de5839832cc4669
MD5 d1cfbeb0e72ef69e3394e5c8be867053
SHA1 9aee512d080c67137855a12fda60c24efa1d0a4e
SHA512 a3c938a19f67b88b1d127c69e5c97843e80574060150da6014a2039eeadf3e82a74688ac5acdc1109c7b490fdd1a6cd6ffa54ed483eaf293ee1ff0fbff93eaac
SSDEEP 12288:cIh498qK/lBeqoF/r6Yp+ZNxQL7zOllCm9/VwiIDUKBYkljZHvCUc5fnG63DcSfC:7U1pJ3vSBpRY
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

Digest

5e:32:1b:2f:09:51:17:12:b7:8d:17:f3:10:b1:c6:24:a2:44:17:15:c8:b5:a7:e6:bf:80:9f:9d:13:6d:66:8f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Jul 16, 2020

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

64:b3:ff:7b:f2:40:07:45:98:9b:22:67:3e:92:43:4d:b1:e8:fd:df

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Jul 16, 2020

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

05:2d:8c:51:24:3c:49:35:1a:b9:89:cc:ef:19:b5:29

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

2

Major OS version

5

Entry point

248256

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\libs\openssl-1.0.2o\out32dll\ssleay64.pdb

libeay64

ord2927 ord2784 ord256 ord168 ord2747 ord961 ord167 ord169 ord3844 ord3837 ord3896 ord2201 ord904 ord176 ord282 ord572 ord3165 ord3489 ord1071 ord2925 ord268 ord316 ord363 ord2712 ord4164 ord493 ord4262 ord3719 ord216 ord333 ord4125 ord4470 ord1010 ord4046 ord3682 ord2877 ord3711 ord129 ord124 ord1000 ord125 ord150 ord205 ord486 ord484 ord577 ord763 ord907 ord87 ord3450 ord2107 ord2063 ord283 ord3418 ord481 ord323 ord2915 ord3836 ord3873 ord1096 ord1097 ord3244 ord3874 ord3816 ord3888 ord109 ord2589 ord78 ord95 ord3891 ord89 ord1145 ord1144 ord3906 ord1081 ord2292 ord3823 ord3846 ord3866 ord2400 ord3857 ord187 ord267 ord3633 ord3631 ord3675 ord3737 ord1011 ord341 ord1012 ord503 ord3664 ord3479 ord359 ord365 ord4684 ord3192 ord3388 ord3528 ord2568 ord3312 ord3922 ord2898 ord264 ord266 ord3067 ord3313 ord3314 ord4210 ord4701 ord653 ord4692 ord3925 ord541 ord2702 ord3124 ord4372 ord4144 ord4174 ord3782 ord1202 ord193 ord3704 ord3758 ord3767 ord3647 ord3766 ord3365 ord4114 ord3460 ord3783 ord3454 ord3754 ord3394 ord897 ord3414 ord3495 ord3610 ord67 ord65 ord53 ord98 ord2894 ord3559 ord3399 ord636 ord2257 ord914 ord2478 ord626 ord890 ord1004 ord3527 ord4513 ord364 ord2051 ord206 ord497 ord85 ord58 ord630 ord628 ord1041 ord1007 ord1005 ord4331 ord1027 ord3437 ord629 ord892 ord74 ord248 ord3378 ord1655 ord575 ord1025 ord246 ord1100 ord4693 ord2135 ord622 ord679 ord2524 ord3505 ord3595 ord1023 ord2451 ord623 ord657 ord401 ord93 ord911 ord3396 ord3657 ord857 ord908 ord680 ord1016 ord2204 ord3205 ord624 ord128 ord4045 ord2475 ord368 ord367 ord370 ord369 ord887 ord889 ord891 ord4320 ord4383 ord315 ord1671 ord1147 ord189 ord314 ord956 ord280 ord2181 ord399 ord748 ord279 ord400 ord751 ord750 ord394 ord774 ord1959 ord37 ord35 ord824 ord822 ord8 ord1091 ord3700 ord3623 ord718 ord7 ord716 ord703 ord2426 ord86 ord88 ord3724 ord313 ord1101 ord293 ord3914 ord3807 ord3795 ord4740 ord4731 ord4656 ord4637 ord4615 ord4601 ord2996 ord3155 ord959 ord325 ord329 ord318 ord304 ord292 ord299 ord395 ord955 ord2252 ord91 ord247 ord225 ord4578 ord4572 ord4576 ord4570 ord4573 ord4582 ord4575 ord4577 ord4584 ord4580 ord4581 ord3315 ord2572 ord3899 ord276 ord274 ord964 ord965 ord2411 ord754 ord910 ord641 ord912 ord909 ord635 ord52 ord290 ord498 ord219 ord3666 ord4474 ord4369 ord66 ord464 ord490 ord3245 ord654 ord967 ord2128 ord281 ord118 ord201 ord123 ord202 ord3663 ord3512 ord3459 ord2924 ord3010 ord2578 ord3644 ord2929 ord3422 ord3513 ord170 ord165 ord4119 ord4245 ord4488 ord222 ord32 ord1070 ord4233 ord4430 ord866 ord2630 ord2760 ord4540 ord203 ord3353 ord3729 ord3480 ord3608 ord3550 ord3575 ord3570 ord3695 ord3178 ord188 ord111 ord110 ord151 ord285 ord3239 ord120 ord181 ord3883 ord3109 ord269 ord2936 ord495 ord2821 ord289 ord252 ord1654 ord1653 ord905 ord3826 ord903

kernel32

CreateFileA SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA CloseHandle HeapSize SetFilePointer GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA FlushFileBuffers GetConsoleMode GetConsoleCP LoadLibraryA HeapReAlloc HeapAlloc InitializeCriticalSectionAndSpinCount GetCurrentProcessId GetTickCount QueryPerformanceCounter HeapDestroy HeapCreate HeapSetInformation GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA IsValidCodePage GetOEMCP GetACP GetCPInfo GetModuleFileNameA WriteFile FlsAlloc FlsFree FlsGetValue DecodePointer EncodePointer ExitProcess GetProcAddress GetModuleHandleW HeapFree Sleep DeleteCriticalSection GetStartupInfoA GetFileType GetStdHandle SetHandleCount RtlUnwindEx RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent GetCurrentProcess TerminateProcess GetCommandLineA FlsSetValue GetCurrentThreadId RtlCaptureContext SetUnhandledExceptionFilter UnhandledExceptionFilter LeaveCriticalSection EnterCriticalSection GetSystemTimeAsFileTime GetLastError GetSystemTime SystemTimeToFileTime SetLastError

BIO_f_ssl BIO_new_buffer_ssl_connect BIO_new_ssl BIO_new_ssl_connect BIO_ssl_copy_session_id BIO_ssl_shutdown DTLS_client_method DTLS_method DTLS_server_method DTLSv1_2_client_method DTLSv1_2_method DTLSv1_2_server_method DTLSv1_client_method DTLSv1_method DTLSv1_server_method ERR_load_SSL_strings PEM_read_SSL_SESSION PEM_read_bio_SSL_SESSION PEM_write_SSL_SESSION PEM_write_bio_SSL_SESSION SRP_Calc_A_param SRP_generate_client_master_secret SRP_generate_server_master_secret SSL_CIPHER_description SSL_CIPHER_find SSL_CIPHER_get_bits SSL_CIPHER_get_id SSL_CIPHER_get_name SSL_CIPHER_get_version SSL_COMP_add_compression_method SSL_COMP_free_compression_methods SSL_COMP_get_compression_methods SSL_COMP_get_name SSL_COMP_set0_compression_methods SSL_CONF_CTX_clear_flags SSL_CONF_CTX_finish SSL_CONF_CTX_free SSL_CONF_CTX_new SSL_CONF_CTX_set1_prefix SSL_CONF_CTX_set_flags SSL_CONF_CTX_set_ssl SSL_CONF_CTX_set_ssl_ctx SSL_CONF_cmd SSL_CONF_cmd_argv SSL_CONF_cmd_value_type SSL_CTX_SRP_CTX_free SSL_CTX_SRP_CTX_init SSL_CTX_add_client_CA SSL_CTX_add_client_custom_ext SSL_CTX_add_server_custom_ext SSL_CTX_add_session SSL_CTX_callback_ctrl SSL_CTX_check_private_key SSL_CTX_ctrl SSL_CTX_flush_sessions SSL_CTX_free SSL_CTX_get0_certificate SSL_CTX_get0_param SSL_CTX_get0_privatekey SSL_CTX_get_cert_store SSL_CTX_get_client_CA_list SSL_CTX_get_client_cert_cb SSL_CTX_get_ex_data SSL_CTX_get_ex_new_index SSL_CTX_get_info_callback SSL_CTX_get_quiet_shutdown SSL_CTX_get_ssl_method SSL_CTX_get_timeout SSL_CTX_get_verify_callback SSL_CTX_get_verify_depth SSL_CTX_get_verify_mode SSL_CTX_load_verify_locations SSL_CTX_new SSL_CTX_remove_session SSL_CTX_sess_get_get_cb SSL_CTX_sess_get_new_cb SSL_CTX_sess_get_remove_cb SSL_CTX_sess_set_get_cb SSL_CTX_sess_set_new_cb SSL_CTX_sess_set_remove_cb SSL_CTX_sessions SSL_CTX_set1_param SSL_CTX_set_alpn_protos SSL_CTX_set_alpn_select_cb SSL_CTX_set_cert_cb SSL_CTX_set_cert_store SSL_CTX_set_cert_verify_callback SSL_CTX_set_cipher_list SSL_CTX_set_client_CA_list SSL_CTX_set_client_cert_cb SSL_CTX_set_client_cert_engine SSL_CTX_set_cookie_generate_cb SSL_CTX_set_cookie_verify_cb SSL_CTX_set_default_passwd_cb SSL_CTX_set_default_passwd_cb_userdata SSL_CTX_set_default_verify_paths SSL_CTX_set_ex_data SSL_CTX_set_generate_session_id SSL_CTX_set_info_callback SSL_CTX_set_msg_callback SSL_CTX_set_next_proto_select_cb SSL_CTX_set_next_protos_advertised_cb SSL_CTX_set_psk_client_callback SSL_CTX_set_psk_server_callback SSL_CTX_set_purpose SSL_CTX_set_quiet_shutdown SSL_CTX_set_session_id_context SSL_CTX_set_srp_cb_arg SSL_CTX_set_srp_client_pwd_callback SSL_CTX_set_srp_password SSL_CTX_set_srp_strength SSL_CTX_set_srp_username SSL_CTX_set_srp_username_callback SSL_CTX_set_srp_verify_param_callback SSL_CTX_set_ssl_version SSL_CTX_set_timeout SSL_CTX_set_tlsext_use_srtp SSL_CTX_set_tmp_dh_callback SSL_CTX_set_tmp_ecdh_callback SSL_CTX_set_tmp_rsa_callback SSL_CTX_set_trust SSL_CTX_set_verify SSL_CTX_set_verify_depth SSL_CTX_use_PrivateKey SSL_CTX_use_PrivateKey_ASN1 SSL_CTX_use_PrivateKey_file SSL_CTX_use_RSAPrivateKey SSL_CTX_use_RSAPrivateKey_ASN1 SSL_CTX_use_RSAPrivateKey_file SSL_CTX_use_certificate SSL_CTX_use_certificate_ASN1 SSL_CTX_use_certificate_chain_file SSL_CTX_use_certificate_file SSL_CTX_use_psk_identity_hint SSL_CTX_use_serverinfo SSL_CTX_use_serverinfo_file SSL_SESSION_free SSL_SESSION_get0_peer SSL_SESSION_get_compress_id SSL_SESSION_get_ex_data SSL_SESSION_get_ex_new_index SSL_SESSION_get_id SSL_SESSION_get_time SSL_SESSION_get_timeout SSL_SESSION_new SSL_SESSION_print SSL_SESSION_print_fp SSL_SESSION_set1_id_context SSL_SESSION_set_ex_data SSL_SESSION_set_time SSL_SESSION_set_timeout SSL_SRP_CTX_free SSL_SRP_CTX_init SSL_accept SSL_add_client_CA SSL_add_dir_cert_subjects_to_stack SSL_add_file_cert_subjects_to_stack SSL_alert_desc_string SSL_alert_desc_string_long SSL_alert_type_string SSL_alert_type_string_long SSL_cache_hit SSL_callback_ctrl SSL_certs_clear SSL_check_chain SSL_check_private_key SSL_clear SSL_connect SSL_copy_session_id SSL_ctrl SSL_do_handshake SSL_dup SSL_dup_CA_list SSL_export_keying_material SSL_extension_supported SSL_free SSL_get0_alpn_selected SSL_get0_next_proto_negotiated SSL_get0_param SSL_get1_session SSL_get_SSL_CTX SSL_get_certificate SSL_get_cipher_list SSL_get_ciphers SSL_get_client_CA_list SSL_get_current_cipher SSL_get_current_compression SSL_get_current_expansion SSL_get_default_timeout SSL_get_error SSL_get_ex_data SSL_get_ex_data_X509_STORE_CTX_idx SSL_get_ex_new_index SSL_get_fd SSL_get_finished SSL_get_info_callback SSL_get_peer_cert_chain SSL_get_peer_certificate SSL_get_peer_finished SSL_get_privatekey SSL_get_psk_identity SSL_get_psk_identity_hint SSL_get_quiet_shutdown SSL_get_rbio SSL_get_read_ahead SSL_get_rfd SSL_get_selected_srtp_profile SSL_get_servername SSL_get_servername_type SSL_get_session SSL_get_shared_ciphers SSL_get_shared_sigalgs SSL_get_shutdown SSL_get_sigalgs SSL_get_srp_N SSL_get_srp_g SSL_get_srp_userinfo SSL_get_srp_username SSL_get_srtp_profiles SSL_get_ssl_method SSL_get_verify_callback SSL_get_verify_depth SSL_get_verify_mode SSL_get_verify_result SSL_get_version SSL_get_wbio SSL_get_wfd SSL_has_matching_session_id SSL_is_server SSL_library_init SSL_load_client_CA_file SSL_load_error_strings SSL_new SSL_peek SSL_pending SSL_read SSL_renegotiate SSL_renegotiate_abbreviated SSL_renegotiate_pending SSL_rstate_string SSL_rstate_string_long SSL_select_next_proto SSL_set1_param SSL_set_SSL_CTX SSL_set_accept_state SSL_set_alpn_protos SSL_set_bio SSL_set_cert_cb SSL_set_cipher_list SSL_set_client_CA_list SSL_set_connect_state SSL_set_debug SSL_set_ex_data SSL_set_fd SSL_set_generate_session_id SSL_set_info_callback SSL_set_msg_callback SSL_set_psk_client_callback SSL_set_psk_server_callback SSL_set_purpose SSL_set_quiet_shutdown SSL_set_read_ahead SSL_set_rfd SSL_set_session SSL_set_session_id_context SSL_set_session_secret_cb SSL_set_session_ticket_ext SSL_set_session_ticket_ext_cb SSL_set_shutdown SSL_set_srp_server_param SSL_set_srp_server_param_pw SSL_set_ssl_method SSL_set_state SSL_set_tlsext_use_srtp SSL_set_tmp_dh_callback SSL_set_tmp_ecdh_callback SSL_set_tmp_rsa_callback SSL_set_trust SSL_set_verify SSL_set_verify_depth SSL_set_verify_result SSL_set_wfd SSL_shutdown SSL_srp_server_param_with_username SSL_state SSL_state_string SSL_state_string_long SSL_use_PrivateKey SSL_use_PrivateKey_ASN1 SSL_use_PrivateKey_file SSL_use_RSAPrivateKey SSL_use_RSAPrivateKey_ASN1 SSL_use_RSAPrivateKey_file SSL_use_certificate SSL_use_certificate_ASN1 SSL_use_certificate_file SSL_use_psk_identity_hint SSL_version SSL_want SSL_write SSLv23_client_method SSLv23_method SSLv23_server_method SSLv2_client_method SSLv2_method SSLv2_server_method SSLv3_client_method SSLv3_method SSLv3_server_method TLSv1_1_client_method TLSv1_1_method TLSv1_1_server_method TLSv1_2_client_method TLSv1_2_method TLSv1_2_server_method TLSv1_client_method TLSv1_method TLSv1_server_method d2i_SSL_SESSION i2d_SSL_SESSION ssl3_ciphers

swvv32.sys

IMPHASH 54fcb3c39e24c730652eff3f5fee13e3
SHA256 d2aacc5a18631ec1a273c0662b2940306f5b39a425868858998ad74048ba165f
MD5 4d585658996c61440d162f3233b98ab2
SHA1 aba292a0b076169c4a11d9212f89d5ea72440af5
SHA512 da3b00d77a6841ac3fc31f005aebefd44437913f4f0542445dee2c1e19e0ba55358525ef6fe32b499e97dd4999c992334f3399a91633c49739fbad7dbf58ad5b
SSDEEP 6144:5K3XyK80ocvvvvvvvvvvvvtU0GOm9Hxl0qqDL6Rh1Gb:5K3XyKXFvvvvvvvvvvvvtglqn6U
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

9a:94:67:8f:b8:d5:f4:3b:d4:22:b4:6c:53:a3:2c:87:89:98:07:d8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jul 27, 2023

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Minor OS version

1

Major OS version

6

Entry point

214229

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

g:\windows\3rd\truecrypt\truecrypt7.1a\driver\obj_driver_release\i386\swvv.pdb

ntoskrnl.exe

IoAttachDeviceToDeviceStack ObfDereferenceObject IoCreateDevice IoGetAttachedDeviceReference ExFreePoolWithTag ExAllocatePoolWithTag IofCallDriver IoReleaseRemoveLockEx PoCallDriver IoAcquireRemoveLockEx PoStartNextPowerIrp IoIsSystemThread memcpy MmFreeContiguousMemory IoFreeMdl PsSetLoadImageNotifyRoutine MmBuildMdlForNonPagedPool IoAllocateMdl MmAllocateContiguousMemory PsTerminateSystemThread _alldiv KeReleaseMutex KeWaitForSingleObject KeSetEvent IoFreeWorkItem IoQueueWorkItem KeInitializeEvent IoAllocateWorkItem IoReleaseRemoveLockAndWaitEx MmMapLockedPagesSpecifyCache ExfInterlockedRemoveHeadList KeSetPriorityThread ZwReadFile ExfInterlockedInsertTailList ZwWriteFile SeImpersonateClientEx KeClearEvent _allmul IoGetDeviceInterfaces IoRegisterShutdownNotification IoCreateSymbolicLink RtlInitUnicodeString ZwClose ObReferenceObjectByHandle PsCreateSystemThread IoDetachDevice KeReleaseSemaphore KeSetTimerEx KeInitializeTimerEx wcsncat SeTokenType MmGetSystemRoutineAddress IoDeleteSymbolicLink IoBuildDeviceIoControlRequest IoGetDeviceObjectPointer ObfReferenceObject ZwCreateFile IoBuildSynchronousFsdRequest IoGetRelatedDeviceObject ZwQuerySymbolicLinkObject ZwOpenSymbolicLinkObject IofCompleteRequest KeQueryActiveProcessors ZwQueryValueKey ZwOpenKey SeReleaseSubjectContext RtlEqualSid SeQueryInformationToken SeTokenIsAdmin SeCaptureSubjectContext KeInitializeSemaphore KeQueryInterruptTime SeCreateClientSecurity RtlCopySid RtlLengthSid IoEnumerateDeviceObjectList PsGetVersion ZwSetInformationFile ZwQueryInformationFile wcsncpy wcsstr _snwprintf IoFileObjectType KeTickCount IoDeleteDevice IoInitializeRemoveLockEx memset KeInitializeMutex MmMapIoSpace MmUnmapIoSpace KeBugCheckEx KeRestoreFloatingPointState KeSaveFloatingPointState _aullshr _allshl RtlUnwind ObOpenObjectByPointer KeGetCurrentThread

hal

ExAcquireFastMutex KeGetCurrentIrql KfAcquireSpinLock KfReleaseSpinLock KeRaiseIrqlToDpcLevel KfLowerIrql ExReleaseFastMutex

Name

.text

Size

120KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

57KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

29KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

384B

Virtual Size

321B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

768B

Virtual Size

680B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

swvv64.sys

IMPHASH 8c44960299283e3c01ad62236513a070
SHA256 de0feedf477d4dfc63563bbc974045d63758459abad87b5fed52e670932ff3f5
MD5 38d4705971aa8797bbf154856df90f69
SHA1 05fa1fa1b51e7d29b2819470b4dc6fea6f17292b
SHA512 20d2726b7f3eac7ba8390c215d46d392444e32ba4b66333b7f92e87a5b4b7de6a3d26a41808737c076d2a0ec0c07f365f0d9ec76e6fc7f7828fd22ac799dd9ff
SSDEEP 6144:sdI5HdbDwdeYTJhreVIqqDL6Mxlom9fivKXape:4IkMahreVNqn6afiCXB
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

a4:b3:0c:bf:f6:35:cd:eb:49:e6:3d:1d:65:2b:c3:f1:ca:f9:bb:7b:f7:f8:69:cc:0a:c9:75:67:e9:18:16:a7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Apr 26, 2024

Minor OS version

1

Major OS version

6

Entry point

254696

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

g:\windows\3rd\truecrypt\truecrypt7.1a\driver\obj_driver_release\amd64\swvv.pdb

ntoskrnl.exe

ExFreePoolWithTag KeInitializeMutex PsSetLoadImageNotifyRoutine IoDeleteDevice KeSetEvent IoFreeWorkItem KeInitializeEvent IoReleaseRemoveLockEx KeReleaseSpinLock MmFreeContiguousMemory IoDetachDevice MmUnmapIoSpace MmBuildMdlForNonPagedPool IoFreeMdl KeReleaseMutex PsTerminateSystemThread IoAllocateWorkItem MmMapIoSpace PoStartNextPowerIrp IoReleaseRemoveLockAndWaitEx KeWaitForSingleObject KeBugCheckEx IoGetAttachedDeviceReference IoAttachDeviceToDeviceStack PoCallDriver ObfDereferenceObject IoInitializeRemoveLockEx IoCreateDevice IoQueueWorkItem IoIsSystemThread IoAllocateMdl MmAllocateContiguousMemory IofCallDriver KeAcquireSpinLockRaiseToDpc MmMapLockedPagesSpecifyCache KeClearEvent ZwReadFile KeSetPriorityThread ExInterlockedInsertTailList SeImpersonateClientEx ExInterlockedRemoveHeadList ZwWriteFile SeTokenIsAdmin KeQueryActiveProcessors IoAcquireRemoveLockEx IoDeleteSymbolicLink IoRegisterShutdownNotification IoBuildSynchronousFsdRequest ZwQuerySymbolicLinkObject IoGetRelatedDeviceObject RtlInitUnicodeString RtlEqualSid RtlCopySid MmGetSystemRoutineAddress wcsncat ZwOpenSymbolicLinkObject KeSetTimerEx SeReleaseSubjectContext SeCreateClientSecurity ZwCreateFile PsCreateSystemThread IoGetDeviceObjectPointer ZwQueryValueKey SeCaptureSubjectContext ZwClose IofCompleteRequest SeQueryInformationToken KeInitializeSemaphore ObReferenceObjectByHandle PsGetVersion KeReleaseSemaphore IoGetDeviceInterfaces ObfReferenceObject IoCreateSymbolicLink IoEnumerateDeviceObjectList KeInitializeTimerEx RtlLengthSid SeTokenType ZwOpenKey _snwprintf wcsncpy ZwSetInformationFile IoFileObjectType wcsstr ZwQueryInformationFile IoBuildDeviceIoControlRequest ExAllocatePoolWithTag ExReleaseFastMutex ExAcquireFastMutex __C_specific_handler

Name

.text

Size

131KB

Virtual Size

130KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

18KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

680B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

588B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

swvv64_win7.sys

IMPHASH 8c44960299283e3c01ad62236513a070
SHA256 a0538c365e260caa4a5d1c91bcdf93d216c92317b7f57876fe1b8c02814cf56b
MD5 a43f30c7031cbf8253e4930117dc6441
SHA1 a64b6fde9b49a3a1f3e31cf4ce4dd4bbbfba7a53
SHA512 fd8704644e652b98adbd091cdaa9534cc012a0db172cf7817b486389eb7b1b85a80648d0f9d6fe09ce90051f5df23bca12ac3c82209d53ed53d35de1276c0b1b
SSDEEP 6144:IdI5HdbDwdeYTJhreVIqqDL6Mxlom9fivKXaAeUe2s:EIkMahreVNqn6afiCXzs
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

07:ba:8b:49:cd:75:02:7e:da:1d:27:e2:ba:f6:e4:c8:10:55:05:19

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Chains

Apr 26, 2024

Subject

CN=Microsoft Authenticode(tm) Root Authority,O=MSFT,C=US

Serial Number

01

Issuer

CN=Microsoft Authenticode(tm) Root Authority,O=MSFT,C=US

Timespan

Jan 1, 1995 - Dec 31, 1999

Subject

Serial Number

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

Issuer

Timespan

Jan 10, 1997 - Dec 31, 2020

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

61:1c:b2:8a:00:00:00:00:00:26

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=Shandong Gooxion Software Co.\,Ltd.,OU=development,O=Shandong Gooxion Software Co.\,Ltd.,L=Jinan,ST=Shandong,C=CN

Serial Number

0f:2d:cc:39:18:5a:9c:0b:9a:4e:98:4b:ba:9b:8e:e3

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 4, 2019 - Aug 11, 2022

Subject

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Serial Number

79:ad:16:a1:4a:a0:a5:ad:4c:73:58:f4:07:13:2e:65

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 9, 2001 - May 9, 2021

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

72:94:04:10:1f:3e:0c:a3:47:83:7f:ca:17:5a:84:38

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 1, 2005 - Nov 1, 2025

Minor OS version

1

Major OS version

6

Entry point

254696

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

g:\windows\3rd\truecrypt\truecrypt7.1a\driver\obj_driver_release\amd64\swvv.pdb

ntoskrnl.exe

ExFreePoolWithTag KeInitializeMutex PsSetLoadImageNotifyRoutine IoDeleteDevice KeSetEvent IoFreeWorkItem KeInitializeEvent IoReleaseRemoveLockEx KeReleaseSpinLock MmFreeContiguousMemory IoDetachDevice MmUnmapIoSpace MmBuildMdlForNonPagedPool IoFreeMdl KeReleaseMutex PsTerminateSystemThread IoAllocateWorkItem MmMapIoSpace PoStartNextPowerIrp IoReleaseRemoveLockAndWaitEx KeWaitForSingleObject KeBugCheckEx IoGetAttachedDeviceReference IoAttachDeviceToDeviceStack PoCallDriver ObfDereferenceObject IoInitializeRemoveLockEx IoCreateDevice IoQueueWorkItem IoIsSystemThread IoAllocateMdl MmAllocateContiguousMemory IofCallDriver KeAcquireSpinLockRaiseToDpc MmMapLockedPagesSpecifyCache KeClearEvent ZwReadFile KeSetPriorityThread ExInterlockedInsertTailList SeImpersonateClientEx ExInterlockedRemoveHeadList ZwWriteFile SeTokenIsAdmin KeQueryActiveProcessors IoAcquireRemoveLockEx IoDeleteSymbolicLink IoRegisterShutdownNotification IoBuildSynchronousFsdRequest ZwQuerySymbolicLinkObject IoGetRelatedDeviceObject RtlInitUnicodeString RtlEqualSid RtlCopySid MmGetSystemRoutineAddress wcsncat ZwOpenSymbolicLinkObject KeSetTimerEx SeReleaseSubjectContext SeCreateClientSecurity ZwCreateFile PsCreateSystemThread IoGetDeviceObjectPointer ZwQueryValueKey SeCaptureSubjectContext ZwClose IofCompleteRequest SeQueryInformationToken KeInitializeSemaphore ObReferenceObjectByHandle PsGetVersion KeReleaseSemaphore IoGetDeviceInterfaces ObfReferenceObject IoCreateSymbolicLink IoEnumerateDeviceObjectList KeInitializeTimerEx RtlLengthSid SeTokenType ZwOpenKey _snwprintf wcsncpy ZwSetInformationFile IoFileObjectType wcsstr ZwQueryInformationFile IoBuildDeviceIoControlRequest ExAllocatePoolWithTag ExReleaseFastMutex ExAcquireFastMutex __C_specific_handler

Name

.text

Size

131KB

Virtual Size

130KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

60KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

18KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

680B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

588B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

unrar32.dll

IMPHASH 0efe2018091554d20cdb506842e83cb3
SHA256 bfee9f77aa121df848961c8c07ffcca2bb2847f7dca72129bafee8b385a64992
MD5 e224eda7b8897e87dd0bccd29161e59e
SHA1 f6af69c41baf5c022b6df0b1585e035e5c308637
SHA512 f9b5c12a386c4ecba50601190f06670a3bdcb7bfa9f339dfe1ff2309921c881386e0d35caf0a5d69ee734850713e96ee0d07e2f66aec44f501493b348aaaa64e
SSDEEP 6144:+v18GVkTvTOhHdmPGETB4r1z6/hVMy4veuH4RO1+:I1VkXO3Qg1qzX4E
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

Digest

5f:52:f8:2e:c3:aa:a6:48:a6:cc:c5:33:27:1a:45:8d:c3:d1:f6:e9:65:1c:7c:c2:46:46:6c:77:26:f9:40:54

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE

Chains

Aug 1, 2023

CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Digest

c0:b4:07:80:07:20:a1:44:fa:08:e1:8c:01:cb:75:05:bf:3e:a5:f6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE

Chains

Aug 1, 2023

CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Serial Number

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Jun 15, 2016 - Jun 15, 2024

Subject

CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE

Serial Number

73:1d:40:ae:3f:3a:1f:b2:bc:3d:83:95

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 25, 2020 - Aug 26, 2023

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Serial Number

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Jun 15, 2016 - Jun 15, 2024

Subject

CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE

Serial Number

73:1d:40:ae:3f:3a:1f:b2:bc:3d:83:95

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 25, 2020 - Aug 26, 2023

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

1

Major OS version

5

Entry point

158928

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Projects\WinRAR\rar\build\unrardll32\Release\UnRAR.pdb

kernel32

RemoveDirectoryW CreateFileW DeleteFileW CreateHardLinkW GetShortPathNameW GetLongPathNameW MoveFileW WriteFile ReadFile FlushFileBuffers SetEndOfFile SetFilePointer GetCurrentProcessId SetFileAttributesW GetFileAttributesW FindClose FindFirstFileW FindNextFileW InterlockedDecrement GetVersionExW GetCurrentDirectoryW GetFullPathNameW FoldStringW FreeLibrary GetProcAddress SetThreadPriority SetThreadExecutionState CreateEventW CreateDirectoryW GetModuleHandleW GetSystemDirectoryW GetProcessAffinityMask CreateThread InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent ResetEvent ReleaseSemaphore WaitForSingleObject CreateSemaphoreW GetSystemTime SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime SystemTimeToFileTime FileTimeToLocalFileTime LocalFileTimeToFileTime FileTimeToSystemTime GetCPInfo IsDBCSLeadByte MultiByteToWideChar WideCharToMultiByte CompareStringW DecodePointer WriteConsoleW SetFilePointerEx HeapSize GetConsoleCP GetProcessHeap CloseHandle GetCommandLineW SetFileTime DeviceIoControl GetCurrentProcess Sleep SetLastError GetLastError AreFileApisANSI GetConsoleMode GetStdHandle GetFileType LoadLibraryW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExA SetStdHandle UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount WaitForSingleObjectEx IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead LocalFree RtlUnwind RaiseException InterlockedFlushSList EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW QueryPerformanceFrequency ExitProcess GetModuleHandleExW GetModuleFileNameA HeapFree HeapReAlloc HeapAlloc GetACP GetStringTypeW LCMapStringW

user32

CharUpperW CharToOemA OemToCharBuffA OemToCharA CharLowerW CharToOemBuffW

advapi32

CheckTokenMembership FreeSid AllocateAndInitializeSid LookupPrivilegeValueW SetFileSecurityW AdjustTokenPrivileges OpenProcessToken

ole32

CoCreateInstance CoSetProxyBlanket

oleaut32

VariantClear SysFreeString SysAllocString

unrar64.dll

IMPHASH e009daf6a5d3c1ff8f576c519f51745c
SHA256 8cd72d68f7b120fbdbffac055cc08620b8b5bd265f1c5bd6d2aa4116804ed42a
MD5 ffb7e5fd3b73b4bacaf1bc798e86ac53
SHA1 996489fdf6cfc1a7d3df30303fb629149eb3df58
SHA512 e98ab9fa5a7c5d4b36849c600ec90109e59543c23b3c754e2c54663097e4dcf8189e352c3af992f7ed9638f7ceb60731f4f7ae0be139752d3b981e402bfb1e8e
SSDEEP 6144:10vN3+9n+/V9fVVauM9a6cnDmr3kqw13laOacjlpr0Jj0D0:10vNuZYVZVV6cnDmr3kqW3s/oW
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

Digest

7f:fd:91:bc:e8:53:6c:c8:5c:78:c8:0a:38:44:77:b2:bd:41:2f:aa:a0:92:fe:a6:6b:51:7c:c4:e7:ab:5d:d1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE

Chains

Aug 1, 2023

CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Digest

3b:14:34:f6:d8:b2:b7:f0:c9:ac:a1:20:2c:a0:e5:b5:67:60:7f:b3

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE

Chains

Aug 1, 2023

CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Serial Number

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Jun 15, 2016 - Jun 15, 2024

Subject

CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE

Serial Number

73:1d:40:ae:3f:3a:1f:b2:bc:3d:83:95

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 25, 2020 - Aug 26, 2023

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Serial Number

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning

Timespan

Jun 15, 2016 - Jun 15, 2024

Subject

CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE

Serial Number

73:1d:40:ae:3f:3a:1f:b2:bc:3d:83:95

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 25, 2020 - Aug 26, 2023

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

170656

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\Projects\WinRAR\rar\build\unrardll64\Release\UnRAR64.pdb

kernel32

RemoveDirectoryW CreateFileW DeleteFileW CreateHardLinkW GetShortPathNameW GetLongPathNameW MoveFileW WriteFile ReadFile FlushFileBuffers SetEndOfFile SetFilePointer GetCurrentProcessId SetFileAttributesW GetFileAttributesW FindClose FindFirstFileW FindNextFileW GetVersionExW GetCurrentDirectoryW GetFullPathNameW FoldStringW FreeLibrary GetProcAddress SetThreadPriority SetThreadExecutionState CreateEventW CreateDirectoryW GetModuleHandleW GetSystemDirectoryW GetProcessAffinityMask CreateThread InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent ResetEvent ReleaseSemaphore WaitForSingleObject CreateSemaphoreW GetSystemTime SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime SystemTimeToFileTime FileTimeToLocalFileTime LocalFileTimeToFileTime FileTimeToSystemTime GetCPInfo IsDBCSLeadByte MultiByteToWideChar WideCharToMultiByte CompareStringW WriteConsoleW SetFilePointerEx HeapSize GetConsoleCP GetProcessHeap CloseHandle SetFileTime DeviceIoControl GetCurrentProcess GetCommandLineW Sleep SetLastError GetLastError AreFileApisANSI GetConsoleMode GetStdHandle GetFileType LoadLibraryW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExA SetStdHandle LCMapStringW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount WaitForSingleObjectEx IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead LocalFree RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedFlushSList EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW QueryPerformanceFrequency ExitProcess GetModuleHandleExW GetModuleFileNameA HeapFree HeapReAlloc HeapAlloc GetACP GetStringTypeW

user32

OemToCharBuffA CharLowerW CharUpperW CharToOemA CharToOemBuffW OemToCharA

advapi32

AdjustTokenPrivileges CheckTokenMembership FreeSid AllocateAndInitializeSid LookupPrivilegeValueW SetFileSecurityW OpenProcessToken

ole32

CoCreateInstance CoSetProxyBlanket

oleaut32

VariantClear SysFreeString SysAllocString

Name

.text

Size

236KB

Virtual Size

235KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

62KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

usbmgr32.dll

IMPHASH 2eda026aad415f34ed10d3903d7ae81b
SHA256 197eececd6173fc1c2f1356ce283b5aff2cc2493fa1addc6b1ec20a58d8346c1
MD5 571ce6270dc6e1e0ba02f61c3d879aaf
SHA1 45d4a12239240dda33e55a2e7b14dbb25202f5b8
SHA512 5b4eb7f38f78983aaf367c8ecc7460e15555d42b672ff6dba4020ffa40d19235dcc43891d2fd0b8f22cc5b47ed18f26eb849f744ab34f987301f89d83c92a6f9
SSDEEP 12288:r9eDe8vqgxASbg9g2BbhIfSLosQgjpM41j:0SygOFsQopR1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

91:be:ec:75:25:a5:9e:22:8d:03:a8:a8:45:41:5c:21:7e:f8:ba:1e:63:ba:f4:05:c9:f6:28:29:95:86:93:6a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 17, 2024

PE Signature issue

Digest

c2:4d:16:c4:d5:e2:60:10:de:1b:ee:f3:6b:ce:e4:fc:3c:6a:bd:3b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 17, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

173083

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\usbmgr\Release\usbmgr32.pdb

kernel32

GetCurrentProcessId GetDiskFreeSpaceExW DeviceIoControl SetVolumeLabelW lstrcmpW CreateFileW GetModuleFileNameW GetFileAttributesA DeleteVolumeMountPointW GetLogicalDrives lstrcmpiW lstrcmpiA EnterCriticalSection lstrcpynW LeaveCriticalSection InitializeCriticalSection GetVolumeInformationW GetLocalTime SetLastError GetLastError GetTempPathW GetExitCodeProcess OutputDebugStringW WaitForSingleObject CloseHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount InterlockedExchange GetLocaleInfoA GetLocaleInfoW VirtualAlloc GetSystemTimeAsFileTime QueryPerformanceCounter VirtualFree HeapDestroy HeapCreate GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA DeleteCriticalSection GetStartupInfoA GetFileType SetHandleCount LCMapStringW LCMapStringA IsValidCodePage GetOEMCP GetCPInfo ExitProcess HeapSize GetModuleFileNameA GetStdHandle InterlockedDecrement InterlockedIncrement TlsFree TlsSetValue DisableThreadLibraryCalls Sleep lstrcmpA lstrlenW GetProcAddress GetModuleHandleA GetCurrentThreadId lstrcpyW CreateThread lstrcpyA CreateFileA FindFirstFileW lstrlenA VirtualQuery lstrcpynA CreateProcessW HeapAlloc SystemTimeToFileTime GetCurrentProcess HeapFree SetEvent GetModuleHandleW GetTickCount WriteFile GetDriveTypeA OpenProcess WideCharToMultiByte LoadLibraryW CopyFileW GetVersionExW GetFileAttributesW TerminateProcess FileTimeToSystemTime ReadFile GetACP MultiByteToWideChar GetFileSizeEx GetCurrentDirectoryW FindClose LoadLibraryA Process32FirstW ProcessIdToSessionId QueryDosDeviceW Module32FirstW Process32NextW FindNextFileW CreateToolhelp32Snapshot GetFileAttributesExW OpenEventW Module32NextW DeleteFileW LocalFree SetFileAttributesW GetSystemDirectoryW MoveFileW GetWindowsDirectoryW SetFilePointer CopyFileA SetFileAttributesA QueryDosDeviceA GetVolumeInformationA GetVolumePathNameA GetDiskFreeSpaceA UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapReAlloc TlsGetValue TlsAlloc

user32

RegisterWindowMessageW wsprintfA wsprintfW SendMessageTimeoutW SetPropW TranslateMessage IsDialogMessageW LoadIconW ShowWindow CreateDialogParamW IsWindow UpdateWindow GetPropW DispatchMessageW DestroyWindow SetTimer RemovePropW GetMessageW PostQuitMessage

shell32

ord165 SHCreateDirectoryExW SHChangeNotify Shell_NotifyIconW

setupapi

CM_Get_Device_IDW SetupDiGetDeviceInstallParamsW SetupDiClassGuidsFromNameExW SetupDiOpenDeviceInfoW SetupDiSetClassInstallParamsW SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW CM_Get_DevNode_Status SetupDiCallClassInstaller SetupDiGetClassDevsExW

shlwapi

StrCmpIW PathFileExistsA StrCmpNIA StrChrA SHSetValueW SHGetValueW StrStrA StrChrW PathAddBackslashW PathRemoveFileSpecW StrNCatW PathFindExtensionW PathIsDirectoryW wvnsprintfA wnsprintfW SHDeleteValueW PathFileExistsW PathAppendW StrStrW StrStrIW SHDeleteValueA wvnsprintfW PathFindFileNameW wnsprintfA

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

advapi32

RegEnumValueW FreeSid RegOpenKeyExW CreateServiceW CloseServiceHandle OpenProcessToken DeleteService OpenSCManagerW OpenServiceW CreateProcessAsUserW InitializeSecurityDescriptor SetSecurityDescriptorDacl LookupPrivilegeValueW StartServiceW QueryServiceStatus SetFileSecurityW AllocateAndInitializeSid GetUserNameW RevertToSelf ImpersonateLoggedOnUser RegCloseKey AdjustTokenPrivileges SetEntriesInAclW

ole32

CoCreateGuid

usbmgr64.dll

IMPHASH 5df1192c646daed26baa86f428385855
SHA256 59d76855055c0942145ff37ea1c42dd897ea3a521a2ccbb69d2004b801d85a75
MD5 d86c75c55fc11fab2cf7fd0496a34688
SHA1 9b643812c5fd9aa125ad1f0f619caea91f5895ca
SHA512 3e1212bfcd26763cce6409c157f9889454f7ae2dfb0f8c07c69a1b040b8e482a44362c4e5b0f1e61f0231fd39864ac3bb58055c8811c479f966095be031e4c1d
SSDEEP 6144:w3cnDYUcUMTl6NKye4iNPS5cKNIf6fm5nkocQM7SkVdUvibUiWIEWfVhBLujzvu+:lDYUsROaCKf6e5HFib/ryHkZtHjMl
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

89:09:0c:a2:f0:6e:29:56:8b:ee:b9:3b:c3:f6:f5:8c:12:61:ec:f9:28:1e:17:a4:56:5d:e7:c0:e5:65:29:b7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 17, 2024

PE Signature issue

Digest

b5:27:62:42:67:87:41:1f:50:37:21:79:c4:63:0b:b1:0b:2f:6c:65

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 17, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

270888

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\usbmgr\Release\usbmgr64.pdb

kernel32

GetCurrentProcessId GetDiskFreeSpaceExW DeviceIoControl SetVolumeLabelW lstrcmpW CreateFileW GetModuleFileNameW GetFileAttributesA DeleteVolumeMountPointW GetLogicalDrives lstrcmpiW lstrcmpiA EnterCriticalSection lstrcpynW LeaveCriticalSection InitializeCriticalSection GetVolumeInformationW GetLocalTime SetLastError GetLastError GetTempPathW GetExitCodeProcess OutputDebugStringW WaitForSingleObject CloseHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount GetLocaleInfoA GetLocaleInfoW GetSystemTimeAsFileTime QueryPerformanceCounter HeapDestroy HeapCreate HeapSetInformation GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA DeleteCriticalSection GetStartupInfoA GetFileType SetHandleCount LCMapStringW LCMapStringA IsValidCodePage GetOEMCP GetCPInfo ExitProcess HeapSize GetModuleFileNameA GetStdHandle FlsAlloc FlsFree FlsGetValue DecodePointer EncodePointer DisableThreadLibraryCalls Sleep lstrcmpA lstrlenW GetProcAddress GetModuleHandleA GetCurrentThreadId lstrcpyW CreateThread lstrcpyA CreateFileA FindFirstFileW lstrlenA VirtualQuery lstrcpynA CreateProcessW HeapAlloc SystemTimeToFileTime GetCurrentProcess HeapFree SetEvent GetModuleHandleW GetTickCount WriteFile GetDriveTypeA OpenProcess WideCharToMultiByte CopyFileW GetVersionExW GetFileAttributesW TerminateProcess FileTimeToSystemTime ReadFile GetACP MultiByteToWideChar GetFileSizeEx GetCurrentDirectoryW FindClose LoadLibraryA Process32FirstW ProcessIdToSessionId QueryDosDeviceW Module32FirstW Process32NextW FindNextFileW CreateToolhelp32Snapshot GetFileAttributesExW OpenEventW Module32NextW DeleteFileW LocalFree SetFileAttributesW GetSystemDirectoryW MoveFileW GetWindowsDirectoryW SetFilePointer CopyFileA SetFileAttributesA QueryDosDeviceA GetVolumeInformationA GetVolumePathNameA GetDiskFreeSpaceA UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapReAlloc

user32

SendMessageTimeoutW wsprintfA wsprintfW PostQuitMessage RegisterWindowMessageW SetPropW TranslateMessage IsDialogMessageW LoadIconW ShowWindow CreateDialogParamW IsWindow UpdateWindow GetPropW DispatchMessageW DestroyWindow SetTimer RemovePropW GetMessageW

shell32

ord165 SHCreateDirectoryExW SHChangeNotify Shell_NotifyIconW

setupapi

SetupDiGetDeviceInstallParamsW SetupDiClassGuidsFromNameExW SetupDiOpenDeviceInfoW SetupDiSetClassInstallParamsW SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW CM_Get_DevNode_Status SetupDiCallClassInstaller SetupDiGetClassDevsExW CM_Get_Device_IDW

shlwapi

StrCmpIW PathFileExistsA StrCmpNIA StrChrA SHSetValueW SHGetValueW StrStrA StrChrW PathAddBackslashW PathRemoveFileSpecW StrNCatW PathFindExtensionW PathIsDirectoryW wvnsprintfA wnsprintfW SHDeleteValueW PathFileExistsW PathAppendW StrStrW StrStrIW SHDeleteValueA wvnsprintfW PathFindFileNameW wnsprintfA

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

advapi32

RegEnumValueW FreeSid RegOpenKeyExW CreateServiceW CloseServiceHandle OpenProcessToken DeleteService OpenSCManagerW OpenServiceW CreateProcessAsUserW InitializeSecurityDescriptor SetSecurityDescriptorDacl LookupPrivilegeValueW StartServiceW QueryServiceStatus SetFileSecurityW AllocateAndInitializeSid GetUserNameW RevertToSelf ImpersonateLoggedOnUser RegCloseKey AdjustTokenPrivileges SetEntriesInAclW

ole32

CoCreateGuid

winpcap_inst.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 fc4623b113a1f603c0d9ad5f83130bd6de1c62b973be9892305132389c8588de
MD5 a11a2f0cfe6d0b4c50945989db6360cd
SHA1 e2516fcd1573e70334c8f50bee5241cdfdf48a00
SHA512 2652d84eb91ca7957b4fb3ff77313e5dae978960492669242df4f246296f1bedaa48c0d33ffb286b2859a1b86ef5460060b551edca597b4ec60ee08676877c70
SSDEEP 24576:UBOldyR6ORWsaM2QROxa6jsqUENfJjNK/CG6niqiL:2KzqWsayROxa6QDENuaG+ifL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

be:72:38:f0:32:8c:16:3b:2e:d9:97:ba:f7:42:66:0c:3b:6b:63:df

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Riverbed Technology\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Marketing,O=Riverbed Technology\, Inc.,L=San Francisco,ST=California,C=US

Chains

Mar 1, 2013

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

Serial Number

61:19:93:e4:00:00:00:00:00:1c

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 22, 2011 - Feb 22, 2021

Subject

CN=Riverbed Technology\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Marketing,O=Riverbed Technology\, Inc.,L=San Francisco,ST=California,C=US

Serial Number

14:02:ae:ef:0d:31:be:74:3e:73:f6:a7:a9:60:c4:f4

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 26, 2012 - Oct 27, 2015

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

4

Entry point

12538

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

workflow32.dll

IMPHASH 483c35f378263e1eacaf1bd95a4886fe
SHA256 80658acd27f140389d597dec4b83232126b8a87fe59902d04c4708361c2f2d3c
MD5 2a04eb59490a922e64ccb1329d845d76
SHA1 cadb4dff808defa4032e14bf5aa20626dc62ce34
SHA512 503053cae9a93658206d20502dc5ec255839b077bf27c2331bd2d2646c208d7ba83797a11114d69a448bada049618b05151586f7a58f012e4947fd2d505abee2
SSDEEP 6144:Fa8jU7RJqMPYLvv1MVP0L15xEe+2gsfTBRGqG1U:Fa8jU7Xmvv1MVP0rxEeR7F
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

89:c0:33:58:2c:69:52:99:0d:de:d7:0b:a5:80:30:9e:5e:d9:fe:b3:32:45:71:9d:c2:c1:59:ce:bf:65:67:ef

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 30, 2024

PE Signature issue

Digest

21:0f:e8:8b:5b:0d:46:9f:1d:66:e3:45:a4:53:d9:cf:35:46:cb:40

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 30, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

0

Major OS version

5

Entry point

97978

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\workflow\Release\workflow32.pdb

kernel32

CreateEventW SetLastError GetLastError GetTempPathW Sleep OutputDebugStringW CloseHandle ResetEvent CreateEventA SetEvent WaitForSingleObject WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA GetLocalTime DisableThreadLibraryCalls lstrcmpA CreateFileA lstrlenA VirtualQuery SetEndOfFile CreateProcessW HeapAlloc SystemTimeToFileTime GetCurrentProcess HeapFree GetModuleHandleW GetTickCount GetProcessHeap WriteFile InitializeCriticalSection OpenProcess WideCharToMultiByte LeaveCriticalSection lstrcpynW GetFileAttributesW TerminateProcess FileTimeToSystemTime ReadFile GetModuleFileNameW CreateFileW GetACP MultiByteToWideChar lstrlenW GetProcAddress EnterCriticalSection LoadLibraryA Process32FirstW ProcessIdToSessionId Module32FirstW Process32NextW lstrcmpiW GetModuleHandleA CreateToolhelp32Snapshot OpenEventW Module32NextW DeleteFileW GetCurrentProcessId LocalFree lstrcpyW lstrcpyA GetCurrentThreadId CreateThread GetWindowsDirectoryW SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RaiseException RtlUnwind HeapReAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement GetStdHandle GetModuleFileNameA HeapSize ExitProcess SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetSystemTimeAsFileTime VirtualAlloc GetCPInfo GetOEMCP IsValidCodePage LCMapStringA LCMapStringW GetLocaleInfoW GetLocaleInfoA InterlockedExchange InitializeCriticalSectionAndSpinCount

shlwapi

SHDeleteValueW wnsprintfW PathFileExistsW PathAppendW PathRemoveFileSpecW SHGetValueW SHSetValueW wnsprintfA wvnsprintfA PathIsDirectoryW wvnsprintfW PathFindFileNameW

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

advapi32

CreateProcessAsUserW InitializeSecurityDescriptor SetSecurityDescriptorDacl OpenProcessToken RegCloseKey RegEnumKeyExW RegOpenKeyExW FreeSid RegEnumValueW SetEntriesInAclW AllocateAndInitializeSid SetFileSecurityW

shell32

ord165

ole32

CoCreateGuid

workflow64.dll

IMPHASH 098854065c47c716ff26a4b78043c12c
SHA256 c1aacb7e9ee6278db68cf804adc8785284a0e13d9f3cf7d543941fb742a1c182
MD5 b83a4dee058cc2a6fd465a81f5f0b9c8
SHA1 16370f4d10190146f203a94b52d3a0e8be915b47
SHA512 61a6736f2c4e57eef8f1cf27455d4567e748dd52ca726e08824ab81237f801bcf56c53d52ab7338f98a0d89e323418eb39e6661b05c11fc2aceb29beb4bc2a62
SSDEEP 6144:Fr2YHdxSTeAKA9bOj9tU5akMx/UH+Wy+wwYkv1Y21GAG+Gsn:FCR7z9b+tKManYGZn
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

3e:1a:74:75:1b:b1:70:2e:83:86:b9:8c:17:47:a7:d1:34:44:f3:fb:c0:3f:64:71:98:c8:9f:04:af:b8:c5:d6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 30, 2024

PE Signature issue

Digest

b8:d1:25:50:4c:e3:85:07:3c:5a:eb:1d:ec:b4:bb:94:c4:a6:cf:52

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Jan 30, 2024

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Dec 10, 2014 - Dec 10, 2034

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=Globalsign TSA for MS Authenticode Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:48:90:3d:c2:8a:bc:a7:a1:19:4d:0c:1c:57:b8:29

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

SERIALNUMBER=91370100MA3QA8QF0C,CN=Shandong Gooxion Software Co.\,Ltd.,O=Shandong Gooxion Software Co.\,Ltd.,STREET=舜华路1768号齐鲁软件大厦C604室,L=Jinan,ST=Shandong,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13054a696e616e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e646f6e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Serial Number

2f:64:5b:14:30:09:e6:10:22:3c:df:48

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 14, 2023 - Jul 14, 2026

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Apr 6, 2022 - May 8, 2033

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Serial Number

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Jun 20, 2018 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Feb 20, 2019 - Mar 18, 2029

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

04:00:00:00:00:01:21:58:53:08:a2

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Mar 18, 2009 - Mar 18, 2029

Minor OS version

2

Major OS version

5

Entry point

152576

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\po\trunk\modules\workflow\Release\workflow64.pdb

kernel32

CreateEventW SetLastError GetLastError GetTempPathW Sleep OutputDebugStringW CloseHandle ResetEvent CreateEventA SetEvent WaitForSingleObject WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle FlushFileBuffers GetConsoleMode GetConsoleCP IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA GetLocalTime DisableThreadLibraryCalls lstrcmpA CreateFileA lstrlenA VirtualQuery SetEndOfFile CreateProcessW HeapAlloc SystemTimeToFileTime GetCurrentProcess HeapFree GetModuleHandleW GetTickCount GetProcessHeap WriteFile InitializeCriticalSection OpenProcess WideCharToMultiByte LeaveCriticalSection lstrcpynW GetFileAttributesW TerminateProcess FileTimeToSystemTime ReadFile GetModuleFileNameW CreateFileW GetACP MultiByteToWideChar lstrlenW GetProcAddress EnterCriticalSection LoadLibraryA Process32FirstW ProcessIdToSessionId Module32FirstW Process32NextW lstrcmpiW GetModuleHandleA CreateToolhelp32Snapshot OpenEventW Module32NextW DeleteFileW GetCurrentProcessId LocalFree lstrcpyW lstrcpyA GetCurrentThreadId CreateThread GetWindowsDirectoryW SetFilePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext FlsSetValue GetCommandLineA RaiseException RtlPcToFileHeader RtlUnwindEx HeapReAlloc EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc GetStdHandle GetModuleFileNameA HeapSize ExitProcess SetHandleCount GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetSystemTimeAsFileTime GetCPInfo GetOEMCP IsValidCodePage LCMapStringA LCMapStringW GetLocaleInfoW GetLocaleInfoA InitializeCriticalSectionAndSpinCount

shlwapi

SHDeleteValueW wnsprintfW PathFileExistsW PathAppendW PathRemoveFileSpecW SHGetValueW SHSetValueW wnsprintfA wvnsprintfA PathIsDirectoryW wvnsprintfW PathFindFileNameW

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

advapi32

CreateProcessAsUserW InitializeSecurityDescriptor SetSecurityDescriptorDacl OpenProcessToken RegCloseKey RegEnumKeyExW RegOpenKeyExW FreeSid RegEnumValueW SetEntriesInAclW AllocateAndInitializeSid SetFileSecurityW

shell32

ord165

ole32

CoCreateGuid

Sharing

General

Malware Config

Signatures

File Explorer

ec4a958ab73fa233b4bb5cbaf68ea3486384997d53740bfa9c3307ce150a59dd.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$TEMP/npcap_inst.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/SimpleSC.dll

generic

$PLUGINSDIR/SysRestore.dll

kernel32

user32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/final.ini

$PLUGINSDIR/modern-header.bmp

$PLUGINSDIR/nsExec.dll

kernel32

user32

advapi32

generic

$PLUGINSDIR/options.ini

DiagReport.bat

DiagReport.ps1

FixInstall.bat

LICENSE

NpcapHelper.exe

kernel32

advapi32

generic

Packet.dll

version

ws2_32

iphlpapi

kernel32

advapi32

shell32