4edef57d96b3814bb14c3885aed6ac98_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4edef57d96b3814bb14c3885aed6ac98_JaffaCakes118
Size

16.8MB
MD5

4edef57d96b3814bb14c3885aed6ac98
SHA1

6181c015f1a3ccaf49a6562e98911d0acbe314bb
SHA256

2dcba4da461d0955a67e77687629267d80280c3b2687a991e919a3add12254d5
SHA512

db35275452efdd0a191724668c8712db07d5ddf29aff073b90a3fc780025086f98e0c3c26c39b95a3895acd79438587cb54fd8c390d16c2a275d5bc5a25cf18f
SSDEEP

393216:kKYtFoAtGhkxM73if5AqdQdfgDOhcagtJh2VrbJ2elzOpmx0V3a:kKW3ekxM7yf5AqdQdfgDOh1gtJh2VHJv

Score

1^/10

Malware Config

Signatures

Files

4edef57d96b3814bb14c3885aed6ac98_JaffaCakes118
.7z
2345DirectUI.dll
.dll windows:5 windows x86 arch:x86

4f605fc1883b799ccf4134d15c973513

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0b:1a:2f:16:b6:55:b0:0d:fc:1f:43:02:63:0a:ae:b9:ae:d7:1d:f9:3f:e7:bb:4c:cc:db:63:99:41:0d:02:96
Signer

Actual PE Digest

0b:1a:2f:16:b6:55:b0:0d:fc:1f:43:02:63:0a:ae:b9:ae:d7:1d:f9:3f:e7:bb:4c:cc:db:63:99:41:0d:02:96

Digest Algorithm

sha256

PE Digest Matches

true

97:4a:aa:b6:c8:dd:fd:4c:ab:66:19:02:3f:83:ee:c3:27:b2:85:b6
Signer

Actual PE Digest

97:4a:aa:b6:c8:dd:fd:4c:ab:66:19:02:3f:83:ee:c3:27:b2:85:b6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\RCFL\DirectUI\SVNServer\DirectUI\bin\vs2017\Win32\release_unicode_static\pdb\2345DirectUI.pdb

Imports

kernel32

FindNextFileA
FindFirstFileExA
FindClose
GetStringTypeW
GetConsoleCP
GetACP
GetStdHandle
ReadConsoleW
GetConsoleMode
SetFilePointerEx
LCMapStringW
GetModuleFileNameA
ExitProcess
GetFileAttributesExW
VirtualQuery
VirtualProtect
GetSystemInfo
GetModuleHandleExW
GetOEMCP
ExitThread
CreateThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RtlUnwind
LocalFree
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
FlushFileBuffers
WriteConsoleW
SetEndOfFile
FindResourceExW
GetCurrentThreadId
IsValidCodePage
SetLastError
GetFileType
SetFilePointer
GetCurrentProcess
ReadFile
LockResource
FreeResource
EncodePointer
CopyFileW
DeleteFileW
GetTickCount
CreateEventW
WideCharToMultiByte
GetCurrentDirectoryW
LoadLibraryExW
FindResourceW
LoadResource
DisableThreadLibraryCalls
MultiByteToWideChar
SizeofResource
InterlockedIncrement
IsBadReadPtr
GlobalFree
CreateFileW
EnterCriticalSection
WriteFile
InterlockedDecrement
GetProcessHeap
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
HeapFree
GlobalUnlock
GetModuleHandleW
GlobalLock
GlobalAlloc
MulDiv
lstrcmpiW
lstrcpyW
LoadLibraryW
lstrcatW
GetVersionExW
GetFileAttributesW
ExpandEnvironmentStringsW
lstrlenW
FreeLibrary
DeleteCriticalSection
GetProcAddress
CloseHandle
LoadLibraryA
InitializeCriticalSection
LeaveCriticalSection
FreeLibraryAndExitThread

user32

DrawTextW
GetSystemMenu
GetKeyState
CallWindowProcW
InflateRect
EqualRect
SetWindowRgn
ScreenToClient
GetSystemMetrics
GetSysColor
BeginDeferWindowPos
OffsetRect
ClientToScreen
GetTopWindow
DrawTextExW
IntersectRect
UnionRect
DestroyCursor
IsMenu
FindWindowW
GetMonitorInfoW
IsWindow
MonitorFromWindow
SetRectEmpty
IsRectEmpty
EnableWindow
ReleaseDC
IsIconic
SetForegroundWindow
PtInRect
GetParent
GetSubMenu
CreatePopupMenu
DeleteMenu
GetMenuItemCount
GetMenuItemID
ModifyMenuW
GetMenuItemInfoW
GetAsyncKeyState
DialogBoxParamW
GetFocus
EndDialog
GetWindowDC
GetMessagePos
DestroyIcon
GetDoubleClickTime
DeferWindowPos
LoadMenuW
RemoveMenu
TrackPopupMenuEx
SetWindowsHookExW
UnhookWindowsHookEx
WindowFromPoint
CallNextHookEx
MonitorFromPoint
LoadImageW
AppendMenuW
GetClassNameW
EndDeferWindowPos
GetClassLongW
GetDesktopWindow
EnableMenuItem
ReleaseCapture
DrawFrameControl
FillRect
GetClassInfoExW
UpdateLayeredWindow
LoadCursorW
SetPropW
GetForegroundWindow
RegisterClassExW
RemovePropW
CreateWindowExW
GetPropW
SetWindowPos
IsWindowVisible
GetDC
DestroyWindow
DestroyMenu
GetWindowRect
PostMessageW
DefWindowProcW
GetWindowThreadProcessId
GetWindowLongW
UnregisterClassW
CopyRect
SetCursor
DrawIconEx
GetIconInfo
GetWindowTextW
InvalidateRect
UpdateWindow
KillTimer
GetDlgItem
IsZoomed
GetClientRect
SetWindowLongW
SetCapture
SetParent
BringWindowToTop
SetFocus
LockWindowUpdate
MoveWindow
IsWindowEnabled
GetDlgCtrlID
RedrawWindow
SetTimer
GetCapture
ShowWindow
GetActiveWindow
SetWindowTextW
SendMessageW
SetActiveWindow
MessageBoxW
CloseWindow
GetWindowTextLengthW
CharNextW
GetWindow
SystemParametersInfoW
EndPaint
BeginPaint
GetCursorPos
SetRect
InsertMenuW
GetMenuStringW

gdi32

CreateBitmap
PtInRegion
SelectClipRgn
SetViewportOrgEx
CreateRectRgn
OffsetRgn
CreatePatternBrush
CreateRectRgnIndirect
GetClipBox
PatBlt
CreateCompatibleBitmap
SetRectRgn
GetViewportOrgEx
WidenPath
CreateFontIndirectW
CreateSolidBrush
MoveToEx
LineTo
GetRegionData
EndPath
SetTextColor
CombineRgn
GetWindowOrgEx
PolyDraw
GetPath
PolyBezierTo
BeginPath
FillPath
ExtTextOutW
GetCurrentObject
SetBkColor
SetDIBits
GetPixel
CreateICW
SetROP2
RestoreDC
SaveDC
IntersectClipRect
SetWindowOrgEx
Rectangle
SetBkMode
DeleteObject
DeleteDC
CreateCompatibleDC
SelectObject
GetObjectW
SelectPalette
GetDeviceCaps
GetDIBits
GetStockObject
CreateDCW
RealizePalette
BitBlt
ExtCreateRegion
CreatePen
CreateDIBSection

advapi32

RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegDeleteValueW

shell32

ShellExecuteW

ole32

CoCreateGuid
CoFreeUnusedLibraries
StringFromGUID2
CoUninitialize
CoInitialize
OleUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
CLSIDFromString
CreateStreamOnHGlobal
OleInitialize
CoTaskMemRealloc

oleaut32

VarBstrCmp
VarUI4FromStr
SysAllocStringLen
VariantCopy
SysStringByteLen
SysAllocStringByteLen
VarBstrCat
SafeArrayRedim
SafeArrayDestroy
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayGetLBound
SysAllocString
SafeArrayPutElement
SafeArrayCreate
OleTranslateColor
LoadRegTypeLi
VariantInit
LoadTypeLi
SysFreeString
SysStringLen
VariantChangeType
VariantClear

comctl32

ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_Destroy
ImageList_LoadImageW
ImageList_GetIcon
_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipCloneBitmapAreaI
GdipDrawImageRectRectI
GdipFillPieI
GdipCreateTexture
GdipCreateHICONFromBitmap
GdipFillPolygon
GdipDrawPolygon
GdipDrawRectangleI
GdipDeletePen
GdipCreatePen1
GdipDrawImageI
GdipCreateStringFormat
GdipSetCompositingQuality
GdipBitmapUnlockBits
GdipSetSmoothingMode
GdipSetStringFormatLineAlign
GdipSetInterpolationMode
GdipSetStringFormatTrimming
GdipCreateFontFromLogfontW
GdipGetStringFormatFlags
GdipSetStringFormatHotkeyPrefix
GdipDrawString
GdipBitmapLockBits
GdipSetTextRenderingHint
GdipMeasureString
GdipDeleteStringFormat
GdipDeleteFont
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCreateLineBrushFromRectWithAngleI
GdipDrawImageRectI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipGetImageHeight
GdipCloneImage
GdipAlloc
GdipDisposeImage
GdipCreateSolidFill
GdipCreateHBITMAPFromBitmap
GdipFree
GdipCloneBrush
GdipGetImageGraphicsContext
GdipFillRectangleI
GdipDeleteGraphics
GdipSetCompositingMode
GdipGetImageWidth
GdipCreateBitmapFromScan0
GdipDeleteBrush

rpcrt4

UuidFromStringW

Exports

Exports

CloseSkin
FreeSkinFileBytes
GetSkinFileBytes
OpenSkin

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 253KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2345Pinyin.ime
.dll regsvr32 windows:5 windows x86 arch:x86

a2a2b472a151fe2846f87cde12f6b649

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:70:a1:7d:75:6f:ec:88:85:9a:29:46:be:d7:69:44
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/05/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:40:74:8d:43:58:a1:47:81:d6:a9:c3:07:b3:aa:9c
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

a9:21:7a:23:9e:60:8d:45:44:0a:8c:63:c7:4f:4c:6e:68:81:e8:77:cd:1f:9a:a4:40:70:0a:cf:13:38:08:4d
Signer

Actual PE Digest

a9:21:7a:23:9e:60:8d:45:44:0a:8c:63:c7:4f:4c:6e:68:81:e8:77:cd:1f:9a:a4:40:70:0a:cf:13:38:08:4d

Digest Algorithm

sha256

PE Digest Matches

true

32:e6:7d:7b:54:2f:bd:d4:65:68:ef:aa:d3:87:aa:e5:f7:bb:dc:15
Signer

Actual PE Digest

32:e6:7d:7b:54:2f:bd:d4:65:68:ef:aa:d3:87:aa:e5:f7:bb:dc:15

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Work\New\2345input\bin\Win32\Release\pdb\2345Pinyin.pdb

Imports

msimg32

AlphaBlend

imm32

ImmUnlockIMCC
ImmSetConversionStatus
ImmCreateIMCC
ImmDisableIME
ImmLockIMC
ImmLockIMCC
ImmGetConversionStatus
ImmGenerateMessage
ImmReSizeIMCC
ImmGetIMCCSize
ImmUnlockIMC

oleacc

AccessibleObjectFromEvent
AccessibleObjectFromWindow

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

dbghelp

MiniDumpWriteDump

kernel32

FreeLibrary
SetFileAttributesW
DeleteFileW
MoveFileExW
CopyFileW
MultiByteToWideChar
GetLocalTime
LCMapStringW
GetStartupInfoW
GlobalMemoryStatusEx
OpenFileMappingW
OpenMutexW
VirtualQuery
GetCurrentProcess
GetModuleHandleW
GetSystemInfo
SetFilePointer
SetEndOfFile
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetSystemDirectoryW
LocalFree
ExpandEnvironmentStringsW
DeviceIoControl
RemoveDirectoryW
SetLastError
FindNextFileW
WriteFile
UnmapViewOfFile
DuplicateHandle
GetFileInformationByHandle
SystemTimeToFileTime
GetFileType
GetSystemTime
CreateFileMappingW
MapViewOfFile
FileTimeToDosDateTime
CreateDirectoryW
SetFileTime
GetCurrentDirectoryW
DosDateTimeToFileTime
ExitProcess
CreateMutexW
ReleaseMutex
ResumeThread
InitializeCriticalSection
GetLongPathNameW
GetFileAttributesExW
LoadLibraryExW
GetACP
QueryDosDeviceW
GetFileTime
HeapFree
GetVersionExW
HeapAlloc
GetProcessHeap
lstrcmpiW
GetEnvironmentVariableW
LoadLibraryW
GetVolumeInformationW
GetDiskFreeSpaceW
GetLogicalDriveStringsW
GetFullPathNameW
GetTempPathW
GetWindowsDirectoryW
MoveFileW
GetFileSizeEx
FormatMessageW
InterlockedExchange
IsBadWritePtr
GetProcAddress
IsBadStringPtrW
QueryPerformanceCounter
GetFileAttributesW
WideCharToMultiByte
FindClose
GetFileSize
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
HeapSize
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetStdHandle
GetTimeZoneInformation
GetModuleFileNameA
FreeLibraryAndExitThread
ExitThread
CreateThread
GetModuleHandleExW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
HeapReAlloc
OutputDebugStringW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
lstrlenW
GetCPInfo
GetLocaleInfoW
CompareStringW
EncodePointer
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
GetStringTypeW
CreateProcessW
IsBadReadPtr
FindFirstFileW
GetPrivateProfileStringW
WritePrivateProfileStringW
OpenEventW
InterlockedExchangeAdd
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
GetCurrentProcessId
OpenProcess
ResetEvent
CloseHandle
SetEvent
CreateEventW
MulDiv
DeleteCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
Sleep
WaitForSingleObject
WaitForMultipleObjects
GetTickCount
GetLastError
GetCurrentThreadId
lstrcpyW
DecodePointer
FindResourceW
LoadResource
RaiseException
LockResource
CreateFileW
SizeofResource
ReadFile
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc

user32

EqualRect
WaitMessage
GetCapture
DispatchMessageW
PeekMessageW
TranslateMessage
MonitorFromRect
MapVirtualKeyExW
GetKeyboardLayout
GetKeyNameTextW
InflateRect
DeleteMenu
RemovePropW
CreatePopupMenu
IsMenu
SetMenuItemInfoW
IsWindowEnabled
DestroyMenu
IntersectRect
SetFocus
GetUpdateRect
InsertMenuW
SetRectEmpty
AppendMenuW
UpdateWindow
FillRect
IsRectEmpty
GetWindowTextLengthW
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoW
CopyRect
LoadKeyboardLayoutW
ActivateKeyboardLayout
LoadStringW
GetKeyboardLayoutList
WindowFromPoint
GetParent
UnhookWinEvent
GetClassInfoExW
RegisterClassExW
UnregisterClassW
PostMessageW
GetKeyState
DefWindowProcW
IsIconic
GetActiveWindow
DrawIconEx
DrawTextW
RegisterClipboardFormatW
keybd_event
OpenClipboard
CloseClipboard
EmptyClipboard
FindWindowExW
GetWindowThreadProcessId
GetWindowLongW
SetClipboardData
GetDesktopWindow
GetKeyboardState
GetFocus
NotifyWinEvent
GetClassNameW
SetWinEventHook
UnhookWindowsHookEx
GetAncestor
GetWindowTextW
CallNextHookEx
SetWindowsHookExW
LoadImageW
UnregisterHotKey
RegisterHotKey
GetAsyncKeyState
SetCursorPos
ReleaseDC
GetDC
MoveWindow
GetMenuItemInfoW
ModifyMenuW
LoadMenuW
GetMenuItemID
MessageBoxW
GetMenuItemCount
GetSubMenu
GetForegroundWindow
GetMenuStringW
LoadIconW
CheckMenuItem
EnableMenuItem
ToUnicodeEx
SystemParametersInfoW
GetGUIThreadInfo
SendInput
GetSystemMetrics
FindWindowW
SetCapture
ReleaseCapture
WindowFromDC
GetClientRect
SetRect
InvalidateRect
ScreenToClient
ClientToScreen
TrackMouseEvent
LoadCursorW
SetCursor
PtInRect
GetCursorPos
SendMessageW
GetWindowRect
DestroyWindow
IsWindowVisible
SetWindowPos
CreateWindowExW
ShowWindow
SetTimer
SetWindowLongW
UpdateLayeredWindow
KillTimer
BeginPaint
EndPaint
IsWindow

gdi32

DeleteObject
CreateCompatibleDC
SelectObject
GetTextExtentPointW
CreatePen
CreateRectRgn
LineTo
CreateFontIndirectW
GetTextMetricsW
SelectClipRgn
MoveToEx
CreateDIBitmap
CreateCompatibleBitmap
CreateSolidBrush
EnumFontFamiliesW
GetStockObject
BitBlt
CreateDIBSection
GetBitmapBits
SetTextColor
SetBkMode
GetObjectW
GetDeviceCaps
DeleteDC
SetBkColor
ExtCreatePen

advapi32

RegQueryValueExW
LookupAccountNameW
RegDeleteValueW
RegOpenKeyW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
RegEnumValueW
GetSecurityDescriptorDacl
RegOpenKeyExW
GetFileSecurityW
GetNamedSecurityInfoW
GetAclInformation
GetAce
EqualSid
SetEntriesInAclW
SetNamedSecurityInfoW

shell32

ShellExecuteExW
SHGetFolderPathW
ShellExecuteW

ole32

RevokeDragDrop
CoUninitialize
RegisterDragDrop
CoCreateInstance
CoInitialize

oleaut32

SysAllocString
SysStringLen
SysFreeString
VariantInit
VariantClear

iphlpapi

GetAdaptersAddresses

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
UIWindowProcedure

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 784KB - Virtual size: 784KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 539KB - Virtual size: 538KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2345Pinyin64.ime
.dll regsvr32 windows:5 windows x64 arch:x64

60ad6f03dc05336b59cea76e7e9db9da

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:70:a1:7d:75:6f:ec:88:85:9a:29:46:be:d7:69:44
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/05/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:40:74:8d:43:58:a1:47:81:d6:a9:c3:07:b3:aa:9c
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

b3:66:d6:3b:59:82:d0:7c:d0:e0:fc:03:ef:82:fd:d4:f6:65:91:9c:84:44:d6:dc:c8:30:e3:35:ad:9b:ed:13
Signer

Actual PE Digest

b3:66:d6:3b:59:82:d0:7c:d0:e0:fc:03:ef:82:fd:d4:f6:65:91:9c:84:44:d6:dc:c8:30:e3:35:ad:9b:ed:13

Digest Algorithm

sha256

PE Digest Matches

true

9e:0a:f6:21:77:3b:60:ac:ce:de:e3:d4:d9:3b:a2:3f:a0:e8:24:f8
Signer

Actual PE Digest

9e:0a:f6:21:77:3b:60:ac:ce:de:e3:d4:d9:3b:a2:3f:a0:e8:24:f8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Work\New\2345input\bin\x64\Release\pdb\2345Pinyin.pdb

Imports

msimg32

AlphaBlend

imm32

ImmUnlockIMCC
ImmCreateIMCC
ImmDisableIME
ImmSetConversionStatus
ImmLockIMC
ImmLockIMCC
ImmGetConversionStatus
ImmGenerateMessage
ImmReSizeIMCC
ImmGetIMCCSize
ImmUnlockIMC

oleacc

AccessibleObjectFromEvent
AccessibleObjectFromWindow

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

dbghelp

MiniDumpWriteDump

kernel32

DeleteFileW
MoveFileExW
CopyFileW
MultiByteToWideChar
GetLocalTime
LCMapStringW
GetStartupInfoW
GlobalMemoryStatusEx
OpenFileMappingW
OpenMutexW
VirtualQuery
GetCurrentProcess
GetModuleHandleW
GetSystemInfo
SetFilePointer
SetEndOfFile
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetSystemDirectoryW
GetSystemWow64DirectoryW
LocalFree
ExpandEnvironmentStringsW
DeviceIoControl
RemoveDirectoryW
SetLastError
FindNextFileW
WriteFile
UnmapViewOfFile
DuplicateHandle
GetFileInformationByHandle
SystemTimeToFileTime
GetFileType
GetSystemTime
CreateFileMappingW
MapViewOfFile
FileTimeToDosDateTime
CreateDirectoryW
SetFileTime
GetCurrentDirectoryW
DosDateTimeToFileTime
ExitProcess
CreateMutexW
ReleaseMutex
ResumeThread
InitializeCriticalSection
GetLongPathNameW
GetFileAttributesExW
LoadLibraryExW
GetACP
QueryDosDeviceW
GetFileTime
HeapFree
GetVersionExW
HeapAlloc
GetProcessHeap
lstrcmpiW
GetEnvironmentVariableW
GlobalLock
GetVolumeInformationW
GetDiskFreeSpaceW
GetLogicalDriveStringsW
GetFullPathNameW
GetTempPathW
GetWindowsDirectoryW
MoveFileW
GetFileSizeEx
FormatMessageW
IsBadWritePtr
IsBadReadPtr
IsBadStringPtrW
QueryPerformanceCounter
GlobalFree
GlobalAlloc
LoadLibraryW
GetFileAttributesW
WriteConsoleW
CreateProcessW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
HeapSize
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetStdHandle
GetTimeZoneInformation
GetModuleFileNameA
FreeLibraryAndExitThread
ExitThread
CreateThread
GetModuleHandleExW
RtlPcToFileHeader
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
HeapReAlloc
OutputDebugStringW
IsDebuggerPresent
WaitForSingleObjectEx
InitializeSListHead
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlLookupFunctionEntry
RtlCaptureContext
WideCharToMultiByte
GetCPInfo
GetLocaleInfoW
CompareStringW
EncodePointer
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
GetStringTypeW
SetFileAttributesW
RtlVirtualUnwind
FindClose
lstrlenW
FindFirstFileW
GetPrivateProfileStringW
WritePrivateProfileStringW
OpenEventW
GetModuleFileNameW
GetCurrentProcessId
OpenProcess
ResetEvent
CloseHandle
SetEvent
CreateEventW
MulDiv
DeleteCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
Sleep
WaitForSingleObject
WaitForMultipleObjects
GetTickCount
GetLastError
GetCurrentThreadId
FreeLibrary
GetProcAddress
lstrcpyW
GetFileSize
DecodePointer
FindResourceW
LoadResource
RaiseException
LockResource
CreateFileW
SizeofResource
ReadFile
SetStdHandle
GlobalUnlock
RtlUnwind

user32

EqualRect
WaitMessage
GetCapture
DispatchMessageW
PeekMessageW
TranslateMessage
MonitorFromRect
MapVirtualKeyExW
GetKeyboardLayout
GetKeyNameTextW
InflateRect
DeleteMenu
RemovePropW
CreatePopupMenu
IsMenu
SetMenuItemInfoW
IsWindowEnabled
DestroyMenu
IntersectRect
SetFocus
GetUpdateRect
InsertMenuW
SetRectEmpty
AppendMenuW
UpdateWindow
FillRect
IsRectEmpty
GetWindowTextLengthW
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoW
CopyRect
LoadKeyboardLayoutW
ActivateKeyboardLayout
LoadStringW
GetKeyboardLayoutList
UnhookWinEvent
GetClassInfoExW
RegisterClassExW
UnregisterClassW
PostMessageW
GetKeyState
DefWindowProcW
WindowFromPoint
GetParent
IsIconic
GetActiveWindow
DrawIconEx
DrawTextW
RegisterClipboardFormatW
keybd_event
GetWindowLongPtrW
FindWindowExW
GetWindowThreadProcessId
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
GetDesktopWindow
GetKeyboardState
GetFocus
NotifyWinEvent
GetClassNameW
SetWinEventHook
GetAncestor
GetWindowTextW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
LoadImageW
UnregisterHotKey
RegisterHotKey
GetAsyncKeyState
SetCursorPos
ReleaseDC
GetDC
MoveWindow
GetMenuItemInfoW
ModifyMenuW
LoadMenuW
GetMenuItemID
MessageBoxW
GetMenuItemCount
GetSubMenu
GetForegroundWindow
GetMenuStringW
LoadIconW
CheckMenuItem
EnableMenuItem
ToUnicodeEx
SystemParametersInfoW
GetGUIThreadInfo
SendInput
GetSystemMetrics
FindWindowW
SetCapture
ReleaseCapture
WindowFromDC
GetClientRect
SetRect
InvalidateRect
ScreenToClient
ClientToScreen
TrackMouseEvent
LoadCursorW
SetCursor
PtInRect
GetCursorPos
SendMessageW
GetWindowRect
DestroyWindow
IsWindowVisible
SetWindowPos
SetWindowLongPtrW
CreateWindowExW
ShowWindow
SetTimer
UpdateLayeredWindow
KillTimer
BeginPaint
EndPaint
IsWindow

gdi32

SelectObject
CreateFontIndirectW
GetTextMetricsW
GetDeviceCaps
GetTextExtentPointW
CreatePen
CreateRectRgn
DeleteDC
CreateCompatibleDC
ExtCreatePen
SelectClipRgn
MoveToEx
CreateDIBitmap
CreateCompatibleBitmap
CreateSolidBrush
EnumFontFamiliesW
GetStockObject
BitBlt
CreateDIBSection
GetBitmapBits
SetTextColor
SetBkMode
SetBkColor
GetObjectW
DeleteObject
LineTo

advapi32

RegOpenKeyExW
GetFileSecurityW
LookupAccountNameW
RegOpenKeyW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
RegQueryValueExW
RegDeleteValueW
RegEnumValueW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
GetSecurityDescriptorDacl
GetAclInformation
GetAce
EqualSid
SetEntriesInAclW

shell32

ShellExecuteExW
SHGetFolderPathW
ShellExecuteW

ole32

RevokeDragDrop
CoUninitialize
RegisterDragDrop
CoCreateInstance
CoInitialize

oleaut32

VariantClear
SysAllocString
SysFreeString
VariantInit
SysStringLen

iphlpapi

GetAdaptersAddresses

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
UIWindowProcedure

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 155KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 539KB - Virtual size: 538KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2345PinyinCloud.exe
.exe windows:5 windows x86 arch:x86

27c91bf5ec0fd17fa62acf5f8b9fef7e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:70:a1:7d:75:6f:ec:88:85:9a:29:46:be:d7:69:44
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/05/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:40:74:8d:43:58:a1:47:81:d6:a9:c3:07:b3:aa:9c
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

fe:93:64:cb:d6:ce:d5:4e:8c:ef:45:c1:57:df:c8:ad:33:42:ad:80:c2:b3:97:ac:d6:41:f1:9d:52:dc:fc:74
Signer

Actual PE Digest

fe:93:64:cb:d6:ce:d5:4e:8c:ef:45:c1:57:df:c8:ad:33:42:ad:80:c2:b3:97:ac:d6:41:f1:9d:52:dc:fc:74

Digest Algorithm

sha256

PE Digest Matches

true

e9:f6:c7:5a:f7:b4:a8:62:f0:c0:22:e3:66:9a:c2:17:eb:38:a3:88
Signer

Actual PE Digest

e9:f6:c7:5a:f7:b4:a8:62:f0:c0:22:e3:66:9a:c2:17:eb:38:a3:88

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Work\New\2345input\bin\Win32\Release\pdb\2345PinyinCloud.pdb

Imports

dbghelp

MiniDumpWriteDump

imm32

ImmDisableIME

kernel32

SetEvent
CloseHandle
GetCurrentProcessId
WaitForMultipleObjects
WriteFile
CreateFileW
Sleep
WideCharToMultiByte
GetLocalTime
LCMapStringW
LoadLibraryW
CreateProcessW
SetFileAttributesW
DeleteFileW
MoveFileExW
CopyFileW
LockResource
GetFileAttributesW
GetStartupInfoW
OpenProcess
OpenFileMappingW
OpenMutexW
VirtualQuery
OpenEventW
ResetEvent
GlobalMemoryStatusEx
GetProcessId
SetFilePointer
SetEndOfFile
GetFileSize
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetSystemDirectoryW
LocalFree
GetCurrentProcess
ExpandEnvironmentStringsW
DeviceIoControl
lstrlenW
GetTempFileNameW
SetLastError
GetACP
CreateMutexW
ReleaseMutex
ResumeThread
InitializeCriticalSection
QueryDosDeviceW
GetVersionExW
GetSystemInfo
InterlockedExchangeAdd
ReadFile
SetFileTime
GetFileTime
FindFirstFileW
GetLongPathNameW
GetFileAttributesExW
InterlockedExchange
SystemTimeToFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetEnvironmentVariableW
UnmapViewOfFile
CreateFileMappingW
CreateEventW
DosDateTimeToFileTime
GetVolumeInformationW
GetDiskFreeSpaceW
GetLogicalDriveStringsW
FindNextFileW
FindClose
CreateDirectoryW
GetFullPathNameW
GetTempPathW
GetCurrentDirectoryW
GetWindowsDirectoryW
MoveFileW
FormatMessageW
GetFileSizeEx
GetFileType
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapSize
GetTimeZoneInformation
GetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
InterlockedPushEntrySList
RtlUnwind
WaitForSingleObject
SetCurrentDirectoryW
LoadLibraryExW
lstrcmpiW
InterlockedIncrement
FreeLibrary
GetModuleHandleW
DeleteCriticalSection
GetProcAddress
DecodePointer
FindResourceW
LoadResource
RaiseException
GetLastError
MultiByteToWideChar
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
InterlockedDecrement
EnterCriticalSection
SizeofResource
GetTickCount
GetCurrentThreadId
WriteConsoleW
SetStdHandle
OutputDebugStringW
QueryPerformanceCounter
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
TerminateProcess
HeapReAlloc
MapViewOfFile
GetCommandLineW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
EncodePointer
CompareStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

LoadStringW
GetKeyboardLayoutList
GetMessageW
DispatchMessageW
PostThreadMessageW
DefWindowProcW
DestroyWindow
CharNextW
TranslateMessage

advapi32

RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
GetSecurityDescriptorDacl
GetAclInformation
GetAce
EqualSid
SetEntriesInAclW
LookupAccountNameW
GetFileSecurityW
GetNamedSecurityInfoW
RegDeleteKeyW
SetNamedSecurityInfoW
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegQueryInfoKeyW

shell32

SHGetFolderPathW

ole32

CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

iphlpapi

GetAdaptersAddresses

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 527KB - Virtual size: 527KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2345PinyinConfig.exe
.exe windows:5 windows x86 arch:x86

8658ac7518caff0bba61a3de11e1ccae

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:70:a1:7d:75:6f:ec:88:85:9a:29:46:be:d7:69:44
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/05/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:40:74:8d:43:58:a1:47:81:d6:a9:c3:07:b3:aa:9c
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ec:e7:50:6d:c0:0d:3b:cc:e4:d0:92:91:fb:9b:65:f7:b8:31:63:13:5c:e3:d1:89:7b:08:45:5f:fb:2b:66:3e
Signer

Actual PE Digest

ec:e7:50:6d:c0:0d:3b:cc:e4:d0:92:91:fb:9b:65:f7:b8:31:63:13:5c:e3:d1:89:7b:08:45:5f:fb:2b:66:3e

Digest Algorithm

sha256

PE Digest Matches

true

87:ba:1c:0e:be:44:4b:d0:18:f7:61:cf:91:5b:6c:73:f6:0b:a2:47
Signer

Actual PE Digest

87:ba:1c:0e:be:44:4b:d0:18:f7:61:cf:91:5b:6c:73:f6:0b:a2:47

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Work\New\2345input\bin\Win32\Release\pdb\2345PinyinConfig.pdb

Imports

dbghelp

MiniDumpWriteDump

shlwapi

PathFindFileNameW
ord12
StrToIntA

msimg32

AlphaBlend

comctl32

ImageList_Destroy
ImageList_Create
ImageList_SetBkColor
ImageList_ReplaceIcon
InitCommonControlsEx
ImageList_GetIcon
_TrackMouseEvent

imm32

ImmDisableIME
ImmNotifyIME
ImmAssociateContextEx
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

GetStartupInfoW
OpenProcess
OpenFileMappingW
OpenMutexW
VirtualQuery
CreateEventW
SetEvent
ResetEvent
GlobalMemoryStatusEx
OpenEventW
ExpandEnvironmentStringsW
GetSystemInfo
SetFilePointer
SetEndOfFile
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetSystemDirectoryW
GetCurrentProcess
LocalAlloc
LocalFree
DeviceIoControl
GetTempFileNameW
RemoveDirectoryW
FindNextFileW
UnmapViewOfFile
DuplicateHandle
SystemTimeToFileTime
GetFileType
GetSystemTime
CreateFileMappingW
MapViewOfFile
FileTimeToDosDateTime
CreateDirectoryW
SetFileTime
GetCurrentDirectoryW
DosDateTimeToFileTime
ExitProcess
CreateMutexW
ReleaseMutex
InterlockedExchangeAdd
GetVersionExW
GetACP
lstrcatW
ResumeThread
GetLongPathNameW
GetFileAttributesExW
QueryDosDeviceW
TryEnterCriticalSection
InitializeCriticalSection
GetFileTime
GetEnvironmentVariableW
LoadLibraryA
GetVolumeInformationW
GetDiskFreeSpaceW
GetLogicalDriveStringsW
GetLocalTime
GetTempPathW
GetWindowsDirectoryW
MoveFileW
SwitchToThread
FormatMessageW
GetFileSizeEx
QueryPerformanceFrequency
QueryPerformanceCounter
ReadFile
WritePrivateProfileStringA
OutputDebugStringA
AreFileApisANSI
InterlockedCompareExchange
HeapCreate
MapViewOfFileEx
FreeResource
CreateWaitableTimerW
SetWaitableTimer
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
lstrcpyW
IsDebuggerPresent
GetLocaleInfoW
CompareStringW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCPInfo
EncodePointer
GetStringTypeW
GetProcessHeap
HeapDestroy
HeapAlloc
HeapReAlloc
HeapSize
HeapFree
GlobalFree
UnlockFile
CreateFileMappingA
LockFileEx
LCMapStringW
GetFullPathNameW
FormatMessageA
FlushFileBuffers
RtlUnwind
GetModuleHandleExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetStdHandle
GetTimeZoneInformation
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
WriteConsoleW
LockResource
MoveFileExW
SetFileAttributesW
CreateProcessW
LoadLibraryW
WaitForSingleObject
WideCharToMultiByte
FindClose
lstrlenW
FindFirstFileW
GetPrivateProfileStringW
WritePrivateProfileStringW
CloseHandle
CreateFileW
WriteFile
CopyFileW
DeleteFileW
GetTickCount
MulDiv
lstrcmpW
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentThreadId
SetLastError
HeapCompact
SetErrorMode
Sleep
WaitForMultipleObjects
GetCurrentProcessId
LoadLibraryExW
lstrcmpiW
InterlockedIncrement
FreeLibrary
GetModuleHandleW
DeleteCriticalSection
GetProcAddress
DecodePointer
FindResourceW
LoadResource
RaiseException
GetLastError
MultiByteToWideChar
InterlockedExchange
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
InterlockedDecrement
EnterCriticalSection
SizeofResource
LockFile
GetFullPathNameA
UnlockFileEx
HeapValidate
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesW
OutputDebugStringW
GetFileSize
GetFileAttributesA
FlushViewOfFile
CreateFileA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
GetPrivateProfileStringA

user32

UnloadKeyboardLayout
LoadKeyboardLayoutW
GetForegroundWindow
IsIconic
DrawTextW
DrawIconEx
SetRect
GetPropW
RemovePropW
SetPropW
EmptyClipboard
SetClipboardData
GetIconInfo
GetKeyboardState
GetCaretBlinkTime
ToAscii
LoadBitmapW
LoadImageW
SetCaretPos
GetClassLongW
SetRectEmpty
MsgWaitForMultipleObjects
ShowWindowAsync
ValidateRect
LoadStringW
GetMessageW
VkKeyScanW
PeekMessageW
TranslateMessage
PostQuitMessage
UnionRect
EqualRect
EnumChildWindows
IntersectRect
GetWindowDC
IsZoomed
GetDCEx
IsRectEmpty
GetAsyncKeyState
TrackMouseEvent
UpdateLayeredWindow
EnableWindow
GetActiveWindow
DialogBoxParamW
GetKeyState
OpenClipboard
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
WindowFromPoint
MonitorFromWindow
SetWindowRgn
EndDialog
OffsetRect
GetMonitorInfoW
MapWindowPoints
PtInRect
MapVirtualKeyW
DestroyIcon
SetCursorPos
SetScrollInfo
ShowScrollBar
GetScrollInfo
GetScrollPos
SetTimer
CopyRect
SetCursor
KillTimer
SetScrollPos
UpdateWindow
GetCursorPos
SystemParametersInfoW
GetWindowTextLengthW
GetWindow
DestroyWindow
GetDC
FillRect
CreateWindowExW
ScreenToClient
GetWindowThreadProcessId
GetLastActivePopup
ActivateKeyboardLayout
MonitorFromPoint
AttachThreadInput
SetWindowTextW
RegisterClassExW
IsWindow
InvalidateRgn
RedrawWindow
ClientToScreen
DestroyAcceleratorTable
IsChild
GetSysColor
MoveWindow
CreateAcceleratorTableW
SetFocus
LoadCursorW
GetClassNameW
SetCapture
GetClientRect
GetDlgItem
GetClassInfoExW
RegisterWindowMessageW
ReleaseCapture
InvalidateRect
ReleaseDC
BeginPaint
EndPaint
GetWindowTextW
GetDesktopWindow
FindWindowW
FindWindowExW
GetWindowRect
IsWindowVisible
SetWindowPos
GetSystemMetrics
ShowWindow
GetWindowLongW
DefWindowProcW
CallWindowProcW
PostMessageW
GetFocus
SendMessageW
LoadIconW
SetWindowLongW
GetParent
SetForegroundWindow
MessageBoxW
UnregisterClassW
CharNextW
DispatchMessageW

gdi32

CreateDIBSection
SetBkColor
ExtTextOutW
EnumFontFamiliesExW
CreatePolygonRgn
SetViewportOrgEx
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
GetDeviceCaps
GetObjectW
DeleteObject
CreateSolidBrush
DeleteDC
SetGraphicsMode
CreateFontIndirectW
GetTextMetricsW
EnumFontFamiliesW
SetWorldTransform
GetBitmapBits
GetStockObject
SetTextColor
CreateDCW
GetDIBits
GetClipBox
CreateRoundRectRgn
PtInRegion
EnumFontsW
CreateRectRgnIndirect
GetRgnBox
SetBkMode
BitBlt

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

GetAclInformation
GetAce
EqualSid
SetEntriesInAclW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
GetFileSecurityW
LookupAccountNameW
RegEnumValueW
RegQueryValueExW
GetSecurityDescriptorDacl
RegCloseKey
RegQueryInfoKeyW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW

shell32

DragQueryFileW
DragFinish
ExtractIconExW
SHGetFolderPathW
SHGetSpecialFolderPathW

ole32

OleLockRunning
CLSIDFromString
OleInitialize
CreateStreamOnHGlobal
StringFromGUID2
OleUninitialize
CoGetClassObject
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
CLSIDFromProgID

oleaut32

VariantClear
SysFreeString
VarUI4FromStr
SysAllocString
SysAllocStringLen
OleCreateFontIndirect
LoadTypeLi
VariantInit
SysStringLen
LoadRegTypeLi
DispCallFunc

gdiplus

GdipSetStringFormatAlign
GdiplusShutdown
GdiplusStartup
GdipSetTextureTransform
GdipSetLineTransform
GdipGetBrushType
GdipCombineRegionRegion
GdipAddPathRectangleI
GdipAddPathArcI
GdipAddPathEllipseI
GdipCombineRegionPath
GdipAddPathBezierI
GdipAddPathLineI
GdipCreateRegionPath
GdipGetInterpolationMode
GdipGetLineTransform
GdipSetImageAttributesColorMatrix
GdipSetCompositingQuality
GdipGetFamily
GdipGetTextRenderingHint
GdipAddPathString
GdipGetStringFormatLineAlign
GdipGetEmHeight
GdipSaveGraphics
GdipDrawImageRectRect
GdipCreateLineBrushI
GdipSetLineWrapMode
GdipGetLineSpacing
GdipCreateMatrix2
GdipDisposeImageAttributes
GdipDeletePath
GdipGetStringFormatAlign
GdipCreateMatrix
GdipSetSmoothingMode
GdipEndContainer
GdipCreatePath
GdipSetLinePresetBlend
GdipSetInterpolationMode
GdipGetCellDescent
GdipCloneBitmapArea
GdipGetFontStyle
GdipTransformRegion
GdipFillPath
GdipGetPathWorldBounds
GdipMultiplyWorldTransform
GdipSetPenDashStyle
GdipDrawLine
GdipDrawRectangle
GdipSetPixelOffsetMode
GdipScaleWorldTransform
GdipSetClipRectI
GdipClosePathFigure
GdipGetSmoothingMode
GdipDrawArcI
GdipCreateImageAttributes
GdipSetClipRegion
GdipDrawPath
GdipSetImageAttributesWrapMode
GdipGetClipBoundsI
GdipFillEllipse
GdipBeginContainer2
GdipCreateTexture
GdipGetTextureTransform
GdipGetMatrixElements
GdipCloneStringFormat
GdipSetTextRenderingHint
GdipGetCellAscent
GdipStringFormatGetGenericTypographic
GdipRotateWorldTransform
GdipRestoreGraphics
GdipDeleteRegion
ord1
GdipGetFontSize
GdipTranslateWorldTransform
GdipSetCompositingMode
GdipDeleteMatrix
GdipGetFamilyName
GdipCloneRegion
GdipSetStringFormatFlags
GdipCloneBitmapAreaI
GdipImageGetFrameDimensionsCount
GdipGetPropertyItem
GdipImageSelectActiveFrame
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdipBitmapUnlockBits
GdipGetImagePixelFormat
GdipBitmapLockBits
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateHBITMAPFromBitmap
GdipDrawImagePointRectI
GdipCreateBitmapFromFile
GdipCreateStringFormat
GdipCloneImage
GdipDisposeImage
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipGraphicsClear
GdipCreateBitmapFromHICON
GdipDeleteStringFormat
GdipDrawImageI
GdipDeleteFontFamily
GdipGetImageHeight
GdipDrawRectangleI
GdipCreateFontFamilyFromName
GdipDeleteBrush
GdipAlloc
GdipCreateFont
GdipCreateSolidFill
GdipGetGenericFontFamilySansSerif
GdipFree
GdipDrawString
GdipCreateFromHDC
GdipCloneBrush
GdipMeasureString
GdipFillRectangleI
GdipDeleteGraphics
GdipDeleteFont
GdipGetImageWidth
GdipDeletePen
GdipCreatePen1
GdipDrawImageRectRectI

iphlpapi

GetAdaptersAddresses

winmm

timeGetTime

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 948KB - Virtual size: 947KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 278KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2345PinyinCourgette.dll
.dll windows:5 windows x86 arch:x86

b79937b251ead4308dbae1f4cb1bdd3d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

37:1e:23:7c:a7:c6:6c:d1:12:bc:f0:73:f1:24:8b:12:0b:0f:db:ce:60:ec:9a:55:f9:07:a7:d2:d9:d9:71:f2
Signer

Actual PE Digest

37:1e:23:7c:a7:c6:6c:d1:12:bc:f0:73:f1:24:8b:12:0b:0f:db:ce:60:ec:9a:55:f9:07:a7:d2:d9:d9:71:f2

Digest Algorithm

sha256

PE Digest Matches

true

2f:39:f5:ba:4a:a9:ee:7c:e3:95:ec:68:99:6e:52:35:4b:17:fa:31
Signer

Actual PE Digest

2f:39:f5:ba:4a:a9:ee:7c:e3:95:ec:68:99:6e:52:35:4b:17:fa:31

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

I:\workspace\V56_87\src\out\official_release\courgette_dll.dll.pdb

Imports

kernel32

HeapSize
HeapFree
HeapReAlloc
HeapAlloc
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
ReadConsoleW
CloseHandle
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetProcAddress
GetModuleHandleW
ReadFile
SetLastError
GetLongPathNameW
GetCurrentProcess
WriteFile
RemoveDirectoryW
GetTempPathW
CreateFileW
GetFileAttributesW
SetFileAttributesW
GetLastError
GetFileAttributesExW
DeleteFileW
GetCurrentDirectoryW
GetTempFileNameW
GetCurrentThreadId
Sleep
RaiseException
IsDebuggerPresent
GetModuleFileNameW
GetLocalTime
GetCurrentProcessId
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetEnvironmentVariableW
GetEnvironmentVariableW
GetFileSizeEx
SetEndOfFile
SetFilePointerEx
FlushFileBuffers
FindFirstFileW
FindFirstFileExW
FindNextFileW
FindClose
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineW
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
SwitchToThread
DeleteCriticalSection
GetVersionExW
GetNativeSystemInfo
RtlCaptureStackBackTrace
SetUnhandledExceptionFilter
TerminateProcess
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
FreeLibrary
EncodePointer
DecodePointer
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlUnwind
InterlockedFlushSList
LoadLibraryExW
GetProcessHeap
SetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
ExitProcess
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

Exports

Exports

FileApplyPatch
FolderApplyPatch
GetHandleVerifier

Sections

.text
Size: 293KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2345PinyinExtract.dll
.dll windows:5 windows x86 arch:x86

3337f1ea70182ce1944bbaf9e5d2040e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

48:4a:9b:11:5b:01:09:69:1e:2d:e4:1e:77:a4:4f:84
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:a6:23:e4:b0:f0:92:9b:62:02:10:e4:50:e4:0a:1e
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:e2:41:55:0d:40:56:d8:1f:e1:d5:22:a0:fc:d3:f4:e3:c0:5a:8b:e3:a6:72:d3:e0:63:71:51:57:6c:60:52
Signer

Actual PE Digest

0f:e2:41:55:0d:40:56:d8:1f:e1:d5:22:a0:fc:d3:f4:e3:c0:5a:8b:e3:a6:72:d3:e0:63:71:51:57:6c:60:52

Digest Algorithm

sha256

PE Digest Matches

true

90:8e:de:ac:fc:9f:4f:ab:da:ea:da:ec:c2:c3:9a:8e:25:f0:d4:a3
Signer

Actual PE Digest

90:8e:de:ac:fc:9f:4f:ab:da:ea:da:ec:c2:c3:9a:8e:25:f0:d4:a3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\2345Input_VS2017\2345extract\windows\bundles\Extract7z\bin\Win32\release_static\pdb\2345Extract.pdb

Imports

kernel32

ReadFile
SetFilePointer
CloseHandle
LoadLibraryW
GetLastError
FreeLibrary
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetProcAddress
VirtualFree
VirtualAlloc
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedExchangeAdd
WaitForSingleObject
CreateEventW
ResetEvent
FindFirstFileW
FindNextFileW
FindClose
CreateFileW
FormatMessageW
LocalFree
GetFileSize
GetACP
MultiByteToWideChar
WideCharToMultiByte
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetVersionExW
GetSystemInfo
ResumeThread
HeapFree
HeapAlloc
GetProcessHeap
WriteFile
SetFileTime
SetEndOfFile
CreateDirectoryW
GetFullPathNameW
lstrlenW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
MoveFileExW
GetTempFileNameW
MoveFileW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetFileType
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
LCMapStringW
GetStdHandle
SetFilePointerEx
GetConsoleMode
HeapReAlloc
SetStdHandle
GetConsoleCP
GetStringTypeW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
WriteConsoleW
HeapSize
DecodePointer
WaitForMultipleObjects
SetEvent

Exports

Exports

ExtractArchive
ExtractArchive2
FreeArchiveFileList
ListArchive
ListArchive2

Sections

.text
Size: 725KB - Virtual size: 725KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2345PinyinInstall.exe
.exe windows:5 windows x86 arch:x86

28802c92e2195aec95eddac296061185

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:70:a1:7d:75:6f:ec:88:85:9a:29:46:be:d7:69:44
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/05/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:40:74:8d:43:58:a1:47:81:d6:a9:c3:07:b3:aa:9c
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

46:30:b7:18:ac:18:75:73:c6:a7:e4:82:b1:99:c0:33:44:d9:51:16:9a:90:da:bc:31:d9:c8:77:a8:25:21:57
Signer

Actual PE Digest

46:30:b7:18:ac:18:75:73:c6:a7:e4:82:b1:99:c0:33:44:d9:51:16:9a:90:da:bc:31:d9:c8:77:a8:25:21:57

Digest Algorithm

sha256

PE Digest Matches

true

27:9e:d0:91:ba:77:d4:d9:98:05:73:f5:6b:78:c5:f6:f7:ca:a7:39
Signer

Actual PE Digest

27:9e:d0:91:ba:77:d4:d9:98:05:73:f5:6b:78:c5:f6:f7:ca:a7:39

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Work\New\2345input\bin\Win32\Release\pdb\2345PinyinInstall.pdb

Imports

imm32

ImmInstallIMEW
ImmDisableIME

userenv

GetDefaultUserProfileDirectoryW

kernel32

GetFileAttributesW
GetStartupInfoW
GetCurrentThreadId
OpenProcess
GetCurrentProcessId
OpenEventW
GetSystemDirectoryW
WaitForMultipleObjects
CreateEventW
SetEvent
ResetEvent
GlobalMemoryStatusEx
SetFilePointer
SetEndOfFile
GetFileSize
GetModuleHandleW
WriteFile
LocalAlloc
LocalFree
ExpandEnvironmentStringsW
lstrlenW
RemoveDirectoryW
InitializeCriticalSectionAndSpinCount
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetCurrentProcess
SetLastError
InterlockedDecrement
OpenFileMappingW
OpenMutexW
VirtualQuery
MultiByteToWideChar
WideCharToMultiByte
GetLocalTime
LCMapStringW
GetVersionExW
LockResource
GetSystemInfo
LoadResource
FindResourceW
lstrcmpiW
CreateMutexW
ReleaseMutex
GetEnvironmentVariableW
GetLongPathNameW
GetFileAttributesExW
ReadFile
SetFileTime
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
LoadLibraryExW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
QueryDosDeviceW
GetACP
GetVolumeInformationW
GetDiskFreeSpaceW
GetLogicalDriveStringsW
ResumeThread
SystemTimeToFileTime
DosDateTimeToFileTime
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
InterlockedExchangeAdd
InterlockedExchange
CreateDirectoryW
GetFullPathNameW
GetCurrentDirectoryW
GetWindowsDirectoryW
MoveFileW
FormatMessageW
GetFileSizeEx
RaiseException
DecodePointer
DeviceIoControl
QueryPerformanceCounter
WritePrivateProfileStringA
GetModuleFileNameW
Sleep
WriteConsoleW
HeapSize
SetStdHandle
GetTickCount
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetConsoleCP
FlushFileBuffers
GetTimeZoneInformation
EnumSystemLocalesW
CopyFileW
MoveFileExW
DeleteFileW
SetFileAttributesW
GetExitCodeProcess
FreeLibrary
CreateProcessW
GetProcAddress
LoadLibraryW
CloseHandle
CreateFileW
WaitForSingleObject
GetTempFileNameW
FindClose
GetTempPathW
FindNextFileW
FindFirstFileW
GetLastError
GetUserDefaultLCID
IsValidLocale
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetFileType
GetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
InterlockedPushEntrySList
RtlUnwind
OutputDebugStringW
GetStringTypeW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
EncodePointer
CompareStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
HeapReAlloc

user32

GetActiveWindow
LoadStringW
VkKeyScanW
LoadKeyboardLayoutW
UnloadKeyboardLayout
ActivateKeyboardLayout
GetKeyboardLayoutList
SystemParametersInfoW

advapi32

LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryValueExW
RegOpenKeyExW
GetSecurityDescriptorDacl
GetAclInformation
GetAce
EqualSid
SetEntriesInAclW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
GetFileSecurityW
LookupAccountNameW
RegCloseKey
OpenProcessToken
RegUnLoadKeyW
RegLoadKeyW
GetUserNameW
RegDeleteKeyW
RegCreateKeyExW
RegDeleteValueW
RegEnumValueW
RegSetValueExW
RegEnumKeyExW

shell32

SHGetFolderPathW
ShellExecuteExW
ord155
ord190

ole32

CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeSecurity

oleaut32

VariantChangeType
SysAllocString
VarBstrCmp
VariantInit
SysFreeString
VariantClear

dbghelp

MiniDumpWriteDump

iphlpapi

GetAdaptersAddresses

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 561KB - Virtual size: 561KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 93KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2345PinyinInstall64.exe
.exe windows:5 windows x64 arch:x64

2db1cd87f0e2cbda7bc8c7cdceca7d27

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:70:a1:7d:75:6f:ec:88:85:9a:29:46:be:d7:69:44
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/05/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:40:74:8d:43:58:a1:47:81:d6:a9:c3:07:b3:aa:9c
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

8a:63:c4:30:0e:b5:36:68:70:ca:7e:05:5c:1c:a2:c2:fe:31:4b:86:6f:26:cf:bf:60:db:bf:15:1a:68:6d:2e
Signer

Actual PE Digest

8a:63:c4:30:0e:b5:36:68:70:ca:7e:05:5c:1c:a2:c2:fe:31:4b:86:6f:26:cf:bf:60:db:bf:15:1a:68:6d:2e

Digest Algorithm

sha256

PE Digest Matches

true

19:ce:88:b7:80:64:8f:91:2f:92:8e:7c:76:93:f5:71:a8:73:5d:25
Signer

Actual PE Digest

19:ce:88:b7:80:64:8f:91:2f:92:8e:7c:76:93:f5:71:a8:73:5d:25

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Work\New\2345input\bin\x64\Release\pdb\2345PinyinInstall.pdb

Imports

imm32

ImmInstallIMEW
ImmDisableIME

userenv

GetDefaultUserProfileDirectoryW

kernel32

GetStartupInfoW
GetCurrentThreadId
OpenProcess
GetCurrentProcessId
OpenEventW
GetModuleFileNameW
GetSystemDirectoryW
GetSystemWow64DirectoryW
WaitForMultipleObjects
CreateEventW
SetEvent
ResetEvent
GlobalMemoryStatusEx
SetFilePointer
SetEndOfFile
GetFileSize
GetModuleHandleW
WriteFile
LocalAlloc
LocalFree
ExpandEnvironmentStringsW
lstrlenW
RemoveDirectoryW
InitializeCriticalSectionAndSpinCount
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetCurrentProcess
SetLastError
OpenFileMappingW
OpenMutexW
VirtualQuery
MultiByteToWideChar
WideCharToMultiByte
GetLocalTime
LCMapStringW
CreateMutexW
ReleaseMutex
GetLongPathNameW
GetFileAttributesExW
ReadFile
SetFileTime
GetFileTime
HeapFree
GetVersionExW
HeapAlloc
GetProcessHeap
LockResource
GetSystemInfo
LoadResource
FindResourceW
MoveFileExW
LoadLibraryExW
GetEnvironmentVariableW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
QueryDosDeviceW
GetACP
GetVolumeInformationW
GetFileAttributesW
GetLogicalDriveStringsW
ResumeThread
SystemTimeToFileTime
DosDateTimeToFileTime
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
CreateDirectoryW
GetFullPathNameW
GetCurrentDirectoryW
GetWindowsDirectoryW
MoveFileW
FormatMessageW
GetFileSizeEx
RaiseException
DecodePointer
DeviceIoControl
QueryPerformanceCounter
RtlVirtualUnwind
WritePrivateProfileStringA
DeleteFileW
SetFileAttributesW
GetExitCodeProcess
WriteConsoleW
HeapSize
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
RtlUnwind
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetConsoleCP
FlushFileBuffers
GetTimeZoneInformation
EnumSystemLocalesW
FreeLibrary
CreateProcessW
GetProcAddress
LoadLibraryW
CloseHandle
CreateFileW
WaitForSingleObject
GetTempFileNameW
FindClose
GetTempPathW
FindNextFileW
FindFirstFileW
GetLastError
Sleep
GetTickCount
GetDiskFreeSpaceW
CopyFileW
lstrcmpiW
GetUserDefaultLCID
IsValidLocale
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetFileType
GetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
InterlockedPushEntrySList
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
GetStringTypeW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
EncodePointer
CompareStringW
GetLocaleInfoW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
WaitForSingleObjectEx
IsDebuggerPresent
InitializeSListHead
HeapReAlloc

user32

GetActiveWindow
LoadStringW
VkKeyScanW
LoadKeyboardLayoutW
UnloadKeyboardLayout
ActivateKeyboardLayout
GetKeyboardLayoutList
SystemParametersInfoW

advapi32

RegDeleteKeyW
GetFileSecurityW
LookupPrivilegeValueW
OpenProcessToken
GetSecurityDescriptorDacl
GetAclInformation
GetAce
EqualSid
SetEntriesInAclW
SetNamedSecurityInfoW
RegUnLoadKeyW
RegLoadKeyW
GetUserNameW
GetNamedSecurityInfoW
RegCreateKeyExW
RegDeleteValueW
RegEnumValueW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
AdjustTokenPrivileges
LookupAccountNameW

shell32

ShellExecuteExW
SHGetFolderPathW
ord155
ord190

ole32

CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeSecurity

oleaut32

VariantChangeType
SysAllocString
VarBstrCmp
VariantInit
SysFreeString
VariantClear

dbghelp

MiniDumpWriteDump

iphlpapi

GetAdaptersAddresses

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 907KB - Virtual size: 907KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 130KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2345PinyinPicFaceTool.exe
.exe windows:5 windows x86 arch:x86

c071a62b373ed0c61a3dc59c6a78c964

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:70:a1:7d:75:6f:ec:88:85:9a:29:46:be:d7:69:44
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/05/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:40:74:8d:43:58:a1:47:81:d6:a9:c3:07:b3:aa:9c
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

10:e6:1c:85:57:b6:b0:3a:11:98:70:76:22:aa:3b:53:67:8e:ef:fb:13:92:a8:02:11:f2:f4:c3:be:b8:a5:3c
Signer

Actual PE Digest

10:e6:1c:85:57:b6:b0:3a:11:98:70:76:22:aa:3b:53:67:8e:ef:fb:13:92:a8:02:11:f2:f4:c3:be:b8:a5:3c

Digest Algorithm

sha256

PE Digest Matches

true

e6:28:09:8d:db:26:35:03:83:e1:63:3e:16:43:09:11:ad:6e:85:2a
Signer

Actual PE Digest

e6:28:09:8d:db:26:35:03:83:e1:63:3e:16:43:09:11:ad:6e:85:2a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Work\New\2345input\bin\Win32\Release\pdb\2345PinyinPicFaceTool.pdb

Imports

shlwapi

ord12
StrToIntA
PathFindFileNameW

msimg32

AlphaBlend

comctl32

InitCommonControlsEx
_TrackMouseEvent

imm32

ImmGetContext
ImmNotifyIME
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmReleaseContext
ImmAssociateContextEx

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

kernel32

lstrlenW
GetTempFileNameW
FileTimeToSystemTime
SetLastError
ExitProcess
WriteFile
SetFileTime
GetFileTime
GetACP
MultiByteToWideChar
WideCharToMultiByte
ResumeThread
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
FindFirstFileW
GetLongPathNameW
GetFileAttributesExW
CreateMutexW
ReleaseMutex
HeapFree
GetVersionExW
HeapAlloc
GetProcessHeap
lstrcatW
lstrcpyW
lstrcmpiW
QueryDosDeviceW
GetSystemInfo
LoadLibraryExW
GetEnvironmentVariableW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
GetLogicalDriveStringsW
FindNextFileW
FindClose
InterlockedExchangeAdd
CreateDirectoryW
GetFullPathNameW
GetTempPathW
GetCurrentDirectoryW
GetWindowsDirectoryW
MoveFileW
InterlockedExchange
FormatMessageW
GetFileSizeEx
GetSystemDirectoryW
InterlockedPopEntrySList
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
DeviceIoControl
LocalFree
LocalAlloc
GetCurrentProcess
GetModuleHandleW
GetModuleFileNameW
OpenEventW
GetStartupInfoW
GlobalMemoryStatusEx
ResetEvent
SetEvent
CreateEventW
OpenProcess
VirtualQuery
OpenMutexW
OpenFileMappingW
SetEndOfFile
SetFilePointer
GetFileAttributesW
MulDiv
FreeLibrary
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
FlushFileBuffers
ReadConsoleW
GetConsoleMode
GetConsoleCP
SetFilePointerEx
HeapSize
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
CreateProcessW
GetProcAddress
LoadLibraryW
WaitForSingleObject
GetFileSize
FindResourceW
LoadResource
CloseHandle
LockResource
CreateFileW
SizeofResource
ReadFile
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetTickCount
CopyFileW
MoveFileExW
DeleteFileW
SetFileAttributesW
SetErrorMode
GetCurrentProcessId
Sleep
GetCurrentThreadId
InterlockedIncrement
DeleteCriticalSection
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
GetLastError
WaitForMultipleObjects
EncodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
FreeLibraryAndExitThread
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
InitializeSListHead
OutputDebugStringW
lstrcmpW
ExitThread
CreateThread
GetModuleHandleExW
InterlockedPushEntrySList
RtlUnwind
VirtualAlloc
VirtualFree
FlushInstructionCache
HeapReAlloc
QueryPerformanceFrequency
FreeResource
MapViewOfFileEx
CreateWaitableTimerW
SetWaitableTimer
LoadLibraryExA

user32

SetWindowLongW
SetTimer
ShowWindow
SendMessageW
SetWindowPos
IsWindowVisible
GetWindowRect
CallWindowProcW
DefWindowProcW
GetWindowLongW
LoadCursorW
GetAsyncKeyState
PtInRect
CopyRect
GetCursorPos
GetClientRect
ClientToScreen
ScreenToClient
EndDialog
GetActiveWindow
IsIconic
SetForegroundWindow
LoadIconW
GetForegroundWindow
AttachThreadInput
DestroyWindow
GetWindowThreadProcessId
GetDesktopWindow
GetPropW
RemovePropW
SetPropW
GetIconInfo
GetFocus
DestroyAcceleratorTable
GetSysColor
CreateAcceleratorTableW
RegisterWindowMessageW
LoadBitmapW
LoadImageW
GetClipboardData
IsClipboardFormatAvailable
SetCaretPos
MsgWaitForMultipleObjects
FillRect
UpdateLayeredWindow
SetRect
GetClassLongW
DialogBoxParamW
SetRectEmpty
GetCaretBlinkTime
ToAscii
CharNextW
UnionRect
GetWindowTextLengthW
GetWindowDC
ShowWindowAsync
GetWindow
MonitorFromWindow
SetWindowRgn
SetWindowTextW
InvalidateRgn
GetMonitorInfoW
IsChild
MapWindowPoints
ValidateRect
MoveWindow
SetFocus
GetClassNameW
GetDlgItem
KillTimer
BeginPaint
EndPaint
PostMessageW
UnregisterClassW
FindWindowExW
GetSystemMetrics
WindowFromPoint
IsWindow
SystemParametersInfoW
GetParent
DrawIconEx
GetDC
ReleaseDC
RegisterClipboardFormatW
keybd_event
GetKeyboardState
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
SendInput
GetClassInfoExW
IsRectEmpty
RegisterClassExW
CreateWindowExW
GetDCEx
InvalidateRect
IsZoomed
SetCursor
EnableWindow
IntersectRect
RedrawWindow
OffsetRect
EnumChildWindows
EqualRect
PostQuitMessage
TranslateMessage
PeekMessageW
DispatchMessageW
GetMessageW
ReleaseCapture
SetCapture
TrackMouseEvent
GetKeyState
GetWindowTextW
FindWindowW

gdi32

CreateCompatibleBitmap
ExtTextOutW
BitBlt
CreateDCW
CreateDIBSection
SetGraphicsMode
GetBitmapBits
SetTextColor
GetObjectW
SetBkColor
SetWorldTransform
DeleteObject
CreateCompatibleDC
DeleteDC
GetRgnBox
SetViewportOrgEx
PtInRegion
CreateRoundRectRgn
GetDeviceCaps
CreatePolygonRgn
CreateRectRgnIndirect
GetStockObject
CreateFontIndirectW
CreateSolidBrush
EnumFontsW
GetClipBox
GetDIBits
SelectObject

advapi32

GetFileSecurityW
GetAclInformation
GetAce
EqualSid
SetEntriesInAclW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
LookupAccountNameW
RegQueryInfoKeyW
GetSecurityDescriptorDacl
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegDeleteKeyW
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW

shell32

DragQueryFileW
SHGetFolderPathW
DragFinish

ole32

OleInitialize
CLSIDFromString
OleLockRunning
CoTaskMemFree
StringFromGUID2
CreateStreamOnHGlobal
CoCreateInstance
OleUninitialize
CLSIDFromProgID
CoGetClassObject
CoTaskMemAlloc
CoTaskMemRealloc

oleaut32

VariantClear
SysFreeString
SysAllocString
OleCreateFontIndirect
VariantInit
LoadRegTypeLi
LoadTypeLi
SysAllocStringLen
DispCallFunc
VarUI4FromStr
SysStringLen

gdiplus

GdipGetImageGraphicsContext
GdipCloneBrush
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipBitmapLockBits
GdipImageSelectActiveFrame
GdipFree
GdipSetPixelOffsetMode
GdipGetImagePixelFormat
GdipCreateSolidFill
GdipSetInterpolationMode
GdipDisposeImage
GdipAlloc
GdipCreateBitmapFromStream
GdipGetPropertyItem
GdipDeleteBrush
GdipBitmapUnlockBits
GdipCloneImage
GdipDrawImageRectRect
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipMeasureString
GdipCreateFromHDC
GdipDeleteFont
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipCreateHBITMAPFromBitmap
GdiplusShutdown
GdiplusStartup
GdipCloneBitmapAreaI
GdipSetStringFormatFlags
GdipCloneRegion
GdipGetFamilyName
GdipDeleteMatrix
GdipDrawImageRectRectI
GdipSetStringFormatAlign
GdipCreatePen1
GdipDeletePen
GdipTranslateWorldTransform
GdipGetFontSize
GdipDeleteStringFormat
ord1
GdipDeleteRegion
GdipRestoreGraphics
GdipRotateWorldTransform
GdipStringFormatGetGenericTypographic
GdipDeleteGraphics
GdipGetImageWidth
GdipFillRectangleI
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipGetPropertyItemSize
GdipSetCompositingMode
GdipGetCellAscent
GdipSetTextRenderingHint
GdipSetTextureTransform
GdipSetLineTransform
GdipGetBrushType
GdipCombineRegionRegion
GdipAddPathRectangleI
GdipAddPathArcI
GdipAddPathEllipseI
GdipCombineRegionPath
GdipAddPathBezierI
GdipAddPathLineI
GdipCreateRegionPath
GdipGetInterpolationMode
GdipGetLineTransform
GdipSetImageAttributesColorMatrix
GdipSetCompositingQuality
GdipGetFamily
GdipGetTextRenderingHint
GdipAddPathString
GdipGetStringFormatLineAlign
GdipGetEmHeight
GdipSaveGraphics
GdipCreateLineBrushI
GdipSetLineWrapMode
GdipGetLineSpacing
GdipCreateMatrix2
GdipDisposeImageAttributes
GdipDeletePath
GdipGetStringFormatAlign
GdipCreateMatrix
GdipSetSmoothingMode
GdipEndContainer
GdipCreatePath
GdipSetStringFormatLineAlign
GdipSetLinePresetBlend
GdipGetCellDescent
GdipCloneBitmapArea
GdipGetFontStyle
GdipSetStringFormatTrimming
GdipTransformRegion
GdipFillPath
GdipGetPathWorldBounds
GdipMultiplyWorldTransform
GdipGraphicsClear
GdipSetPenDashStyle
GdipDrawLine
GdipDrawRectangle
GdipScaleWorldTransform
GdipSetClipRectI
GdipCloneStringFormat
GdipGetSmoothingMode
GdipDrawArcI
GdipCreateImageAttributes
GdipSetClipRegion
GdipDrawPath
GdipDrawString
GdipSetImageAttributesWrapMode
GdipGetClipBoundsI
GdipFillEllipse
GdipBeginContainer2
GdipCreateTexture
GdipGetTextureTransform
GdipGetMatrixElements
GdipClosePathFigure

winmm

timeGetTime

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 457KB - Virtual size: 457KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2345PinyinScreenshot.dll
.dll windows:6 windows x86 arch:x86

7f83db951fc9619e04163a7b85119d2e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

58:26:f7:64:da:77:05:89:85:cd:1a:88:1b:43:da:b9:72:36:cd:0a:4d:f2:99:c3:bc:84:93:1f:47:21:0d:86
Signer

Actual PE Digest

58:26:f7:64:da:77:05:89:85:cd:1a:88:1b:43:da:b9:72:36:cd:0a:4d:f2:99:c3:bc:84:93:1f:47:21:0d:86

Digest Algorithm

sha256

PE Digest Matches

true

ee:cc:6c:8f:8a:76:94:8f:ad:06:90:63:74:ab:3d:82:02:91:ba:66
Signer

Actual PE Digest

ee:cc:6c:8f:8a:76:94:8f:ad:06:90:63:74:ab:3d:82:02:91:ba:66

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\trunk\dllplugin\Capture\trunk\Bin\Release\Capture.pdb

Imports

kernel32

FlushFileBuffers
WriteConsoleW
SetStdHandle
LCMapStringW
GetStringTypeW
LoadLibraryExW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
GetModuleFileNameW
WriteFile
GetStdHandle
GetCPInfo
DecodePointer
GetACP
IsValidCodePage
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
GetModuleHandleExW
ExitProcess
RtlUnwind
GetCommandLineA
EncodePointer
OutputDebugStringW
IsDebuggerPresent
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetTickCount
lstrcpynW
GetVersionExW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
RaiseException
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
SetLastError
FlushInstructionCache
GetCurrentProcess
CreateDirectoryW
GetProcessHeap
HeapAlloc
CreateMutexW
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
GetLocalTime
CloseHandle
GetLastError
GetOEMCP
CreateFileW

user32

IsWindow
GetActiveWindow
LoadStringW
UnregisterClassW
DialogBoxParamW
SetWindowLongW
IsRectEmpty
SetRect
GetSystemMetrics
EnumDisplayDevicesW
EnumDisplaySettingsW
GetWindowRect
SetWindowPos
GetParent
GetWindowLongW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
FillRect
PtInRect
SetRectEmpty
LoadImageW
LoadCursorW
GetCursorPos
SetCursor
SystemParametersInfoW
GetTopWindow
IsWindowVisible
EndDialog
InvalidateRgn
PostMessageW
EndPaint
BeginPaint
SetForegroundWindow
ShowWindow
CreateWindowExW
GetKeyState
UnionRect
DrawTextW
IntersectRect
EqualRect
CopyRect
CallWindowProcW
DefWindowProcW
SetWindowTextW
DrawTextExW
GetWindowTextW
GetWindowTextLengthW
InvalidateRect
RedrawWindow
GetDlgItem
SetFocus
GetFocus
MoveWindow
EnableWindow
SendMessageW
ReleaseDC
GetDC
EnumChildWindows
ChildWindowFromPointEx
ScreenToClient
GetWindow

gdi32

EnumFontsW
CombineRgn
SelectClipRgn
CreateRectRgn
CreateFontW
GetPixel
SetBkMode
SetTextColor
GetTextMetricsW
CreateFontIndirectW
GetStockObject
GetObjectW
LineTo
MoveToEx
CreatePen
CreateSolidBrush
DeleteObject
DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
Rectangle
StretchBlt

comdlg32

GetSaveFileNameW
GetOpenFileNameW

shell32

SHGetPathFromIDListW
ShellExecuteW
SHGetSpecialFolderLocation

shlwapi

StrCmpW
PathFileExistsW

msimg32

AlphaBlend

gdiplus

GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipFillPolygonI
GdipDrawCurveI
GdipDrawEllipseI
GdipDrawRectangleI
GdipDrawLineI
GdipSetSmoothingMode
GdipGetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetPenDashStyle
GdipSetPenMode
GdipSetPenEndCap
GdipSetPenStartCap
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipDisposeImage

Exports

Exports

ScreenshotRun

Sections

.text
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2345PinyinScreenshot.exe
.exe windows:5 windows x86 arch:x86

65690a8d524597e422e36bf9e3f2977e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:70:a1:7d:75:6f:ec:88:85:9a:29:46:be:d7:69:44
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/05/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:40:74:8d:43:58:a1:47:81:d6:a9:c3:07:b3:aa:9c
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

14:0d:e7:a2:8c:45:f2:b2:8f:34:4d:3c:c0:33:d2:b3:c1:85:37:d4:af:5c:30:41:a7:13:af:5e:72:b5:0b:d4
Signer

Actual PE Digest

14:0d:e7:a2:8c:45:f2:b2:8f:34:4d:3c:c0:33:d2:b3:c1:85:37:d4:af:5c:30:41:a7:13:af:5e:72:b5:0b:d4

Digest Algorithm

sha256

PE Digest Matches

true

97:87:a9:51:5f:cc:75:ee:1c:e6:42:2b:7d:13:bd:fb:ed:7b:68:79
Signer

Actual PE Digest

97:87:a9:51:5f:cc:75:ee:1c:e6:42:2b:7d:13:bd:fb:ed:7b:68:79

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Work\New\2345input\bin\Win32\Release\pdb\2345PinyinScreenshot.pdb

Imports

kernel32

GetStartupInfoW
GetCurrentThreadId
CreateMutexW
ReleaseMutex
Sleep
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapFree
GetVersionExW
HeapAlloc
LocalFree
GetProcessHeap
LockResource
LoadResource
FindResourceW
lstrcmpiW
GetFileAttributesExW
GetCurrentProcess
FindNextFileW
FindClose
ReadFile
WriteFile
SetFilePointer
SetEndOfFile
DeleteFileW
GetFileSizeEx
GetFileSize
CreateDirectoryW
GetFullPathNameW
FormatMessageW
FreeLibrary
GetProcAddress
CloseHandle
GetLastError
CreateFileW
WaitForSingleObject
WriteConsoleW
lstrcpynW
DecodePointer
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapSize
SetStdHandle
LoadLibraryW
GetFileAttributesW
lstrlenW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwind
RaiseException
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
GetStringTypeW
GetFileType
LCMapStringW
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW

user32

GetDesktopWindow
MessageBoxW

Sections

.text
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2345PinyinSkinUtil.exe
.exe windows:5 windows x86 arch:x86

32e7d6bbce783d12fdd92546abacdc78

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:70:a1:7d:75:6f:ec:88:85:9a:29:46:be:d7:69:44
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/05/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:40:74:8d:43:58:a1:47:81:d6:a9:c3:07:b3:aa:9c
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

cf:70:1c:25:78:de:6e:e4:86:04:e2:fc:87:3f:25:59:5c:57:71:92:35:75:22:5b:d2:26:96:b2:3a:3b:10:ef
Signer

Actual PE Digest

cf:70:1c:25:78:de:6e:e4:86:04:e2:fc:87:3f:25:59:5c:57:71:92:35:75:22:5b:d2:26:96:b2:3a:3b:10:ef

Digest Algorithm

sha256

PE Digest Matches

true

03:3f:d2:fc:6a:03:80:b7:63:57:50:4b:a2:52:62:7a:39:cc:d2:5e
Signer

Actual PE Digest

03:3f:d2:fc:6a:03:80:b7:63:57:50:4b:a2:52:62:7a:39:cc:d2:5e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Work\New\2345input\bin\Win32\Release\pdb\2345PinyinSkinUtil.pdb

Imports

shlwapi

SHDeleteKeyW

imm32

ImmDisableIME

kernel32

MultiByteToWideChar
WideCharToMultiByte
GetLocalTime
LCMapStringW
FindFirstFileW
GetFileAttributesExW
HeapFree
GetVersionExW
HeapAlloc
LocalFree
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
OpenEventW
CreateMutexW
ReleaseMutex
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
LockResource
LoadResource
FindResourceW
lstrcmpiW
CreateProcessW
GetACP
ReadFile
WriteFile
GetFileTime
FileTimeToSystemTime
SystemTimeToFileTime
GetSystemTime
FileTimeToDosDateTime
InterlockedExchangeAdd
FindNextFileW
FindClose
CreateDirectoryW
GetFullPathNameW
lstrlenW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
CopyFileW
SetLastError
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
GetEnvironmentVariableW
LoadLibraryExW
GetFileSizeEx
DeviceIoControl
FormatMessageW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetProcAddress
GetFileSize
GetCurrentProcess
GetModuleHandleW
GetCommandLineW
VirtualQuery
SetEndOfFile
GetModuleFileNameW
WaitForSingleObject
OpenProcess
CloseHandle
GetCurrentProcessId
SetFilePointer
GetStringTypeW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
EncodePointer
CompareStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
OutputDebugStringW
RtlUnwind
GetModuleHandleExW
GetStdHandle
ExitProcess
GetTimeZoneInformation
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
HeapReAlloc
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
HeapSize
WriteConsoleW
GetFileInformationByHandle
LoadLibraryW
FreeLibrary
OpenMutexW
GetLastError
OpenFileMappingW
CreateFileW
GetTickCount
ResetEvent
SetEvent
Sleep
CreateEventW
GetCurrentThreadId

user32

MessageBoxW

advapi32

RegDeleteKeyW
RegEnumKeyExW
GetSecurityDescriptorDacl
GetAclInformation
GetAce
EqualSid
SetEntriesInAclW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
GetFileSecurityW
LookupAccountNameW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegCreateKeyW
RegSetValueW

shell32

CommandLineToArgvW
SHGetFolderPathW
SHChangeNotify

iphlpapi

GetAdaptersAddresses

Sections

.text
Size: 723KB - Virtual size: 723KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 341KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2345PinyinSymbol.exe
.exe windows:5 windows x86 arch:x86

a30b11ea7baaf787d6e19a54096efd27

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:70:a1:7d:75:6f:ec:88:85:9a:29:46:be:d7:69:44
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/05/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:40:74:8d:43:58:a1:47:81:d6:a9:c3:07:b3:aa:9c
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

7a:cc:a0:d5:46:82:c1:d4:19:34:60:b8:d9:9c:79:ee:b7:b8:93:12:93:a6:53:d2:9a:4c:7b:0c:e2:b1:d5:36
Signer

Actual PE Digest

7a:cc:a0:d5:46:82:c1:d4:19:34:60:b8:d9:9c:79:ee:b7:b8:93:12:93:a6:53:d2:9a:4c:7b:0c:e2:b1:d5:36

Digest Algorithm

sha256

PE Digest Matches

true

f9:d3:97:d8:c8:75:6d:5f:07:d6:e0:28:9c:f1:fe:ac:d7:06:8a:25
Signer

Actual PE Digest

f9:d3:97:d8:c8:75:6d:5f:07:d6:e0:28:9c:f1:fe:ac:d7:06:8a:25

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Work\New\2345input\bin\Win32\Release\pdb\2345PinyinSymbol.pdb

Imports

gdiplus

GdipSetSolidFillColor
GdiplusStartup
GdiplusShutdown
GdipDeleteFontFamily
GdipDrawRectangleI
GdipCreateFontFamilyFromName
GdipCreatePen1
GdipDeleteGraphics
GdipDrawLineI
GdipDeleteFont
GdipDeletePen
GdipDeleteBrush
GdipAlloc
GdipCreateLineBrushFromRectI
GdipCreateFont
GdipSetLinePresetBlend
GdipCreateSolidFill
GdipGetGenericFontFamilySansSerif
GdipFree
GdipDrawString
GdipCreateFromHDC
GdipCloneBrush
GdipMeasureString
GdipFillRectangleI

kernel32

SetLastError
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetCurrentThreadId
GetLastError
RaiseException
DecodePointer
DeleteCriticalSection
SizeofResource
InterlockedDecrement
GetModuleFileNameW
MultiByteToWideChar
LoadResource
FindResourceW
GetProcAddress
GetModuleHandleW
FreeLibrary
InterlockedIncrement
lstrcmpiW
LoadLibraryExW
CreateMutexW
WaitForSingleObject
ReleaseMutex
CloseHandle
HeapFree
GetVersionExW
OpenProcess
HeapAlloc
LocalFree
GetProcessHeap
LockResource
InitializeCriticalSection
LoadLibraryW
HeapSize
HeapReAlloc
GetFileAttributesW
CreateFileW
CreateEventW
SetEvent
ResetEvent
GetCurrentProcessId
GetCurrentProcess
SetFilePointer
SetEndOfFile
GetFileSize
lstrlenW
ReadFile
GetEnvironmentVariableW
GetFileAttributesExW
WriteConsoleW
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
LCMapStringW
DeleteFileW
GetFileSizeEx
CreateDirectoryW
GetFullPathNameW
InterlockedExchangeAdd
FormatMessageW
GetStringTypeW
GetFileType
GetACP
WriteFile
GetStdHandle
WideCharToMultiByte
GetModuleHandleExW
ExitProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
GetSystemTimeAsFileTime
QueryPerformanceCounter
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
LoadLibraryExA
IsDebuggerPresent
OutputDebugStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStartupInfoW

user32

ShowScrollBar
GetScrollInfo
GetScrollPos
SetScrollRange
SetScrollPos
GetWindow
GetWindowRect
DestroyWindow
MonitorFromWindow
SetWindowRgn
IsWindow
OffsetRect
RedrawWindow
GetMonitorInfoW
MapWindowPoints
LoadIconW
GetDlgItem
PostQuitMessage
GetCursorPos
SendInput
PostMessageW
SendMessageW
CopyRect
ClientToScreen
SetCapture
SetCursor
GetParent
PtInRect
ReleaseCapture
GetMessageW
MessageBoxW
ShowWindow
DispatchMessageW
CharNextW
TranslateMessage
FindWindowW
SetForegroundWindow
GetWindowLongW
DefWindowProcW
CallWindowProcW
SetWindowPos
UnregisterClassW
RegisterClassExW
LoadCursorW
SetWindowLongW
GetClientRect
GetClassInfoExW
UpdateWindow
InvalidateRect
BeginPaint
EndPaint
MoveWindow
CreateWindowExW

gdi32

CreatePolygonRgn
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
DeleteDC
SetViewportOrgEx
DeleteObject

advapi32

RegDeleteKeyW
RegOpenCurrentUser
RegQueryValueExW
RegCloseKey
RegQueryInfoKeyW
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW

ole32

CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree

oleaut32

SysFreeString
SysAllocString
VarUI4FromStr

Sections

.text
Size: 254KB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2345PinyinTool.exe
.exe windows:5 windows x86 arch:x86

da661f162bb97fba405462fad10a354d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:70:a1:7d:75:6f:ec:88:85:9a:29:46:be:d7:69:44
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/05/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:40:74:8d:43:58:a1:47:81:d6:a9:c3:07:b3:aa:9c
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

c5:d8:a2:e2:cb:75:7d:40:65:5a:09:d7:9e:98:a7:6c:2b:6b:8b:34:2e:a7:ab:a9:e2:0f:60:60:3e:9f:f1:db
Signer

Actual PE Digest

c5:d8:a2:e2:cb:75:7d:40:65:5a:09:d7:9e:98:a7:6c:2b:6b:8b:34:2e:a7:ab:a9:e2:0f:60:60:3e:9f:f1:db

Digest Algorithm

sha256

PE Digest Matches

true

95:79:26:64:66:48:55:b0:d0:1e:03:de:4b:55:f1:a2:4f:77:19:3f
Signer

Actual PE Digest

95:79:26:64:66:48:55:b0:d0:1e:03:de:4b:55:f1:a2:4f:77:19:3f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Work\New\2345input\bin\Win32\Release\pdb\2345PinyinTool.pdb

Imports

imm32

ImmDisableIME

kernel32

GetCurrentProcess
GetModuleHandleW
LocalFree
GetModuleFileNameW
CreateFileW
ExpandEnvironmentStringsW
GetSystemDirectoryW
SetFilePointer
SetEndOfFile
GetFileSize
lstrlenW
GetTempFileNameW
InitializeCriticalSectionAndSpinCount
FileTimeToSystemTime
SetLastError
CreateMutexW
ReleaseMutex
QueryDosDeviceW
GetVersionExW
LockResource
GetSystemInfo
LoadResource
FindResourceW
lstrcmpiW
GetEnvironmentVariableW
ResumeThread
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
ReadFile
WriteFile
SetFileTime
GetFileTime
FindFirstFileW
GetLongPathNameW
GetFileAttributesExW
GetACP
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetProcessHeap
CreateProcessW
LoadLibraryExW
GetLogicalDriveStringsW
FindNextFileW
FindClose
DeleteFileW
InterlockedExchangeAdd
CreateDirectoryW
GetFullPathNameW
GetTempPathW
SetFileAttributesW
GetCurrentDirectoryW
CopyFileW
GetFileSizeEx
FormatMessageW
InterlockedExchange
RaiseException
DecodePointer
DeviceIoControl
QueryPerformanceCounter
CreateThread
FreeLibrary
lstrcpynW
GlobalMemoryStatusEx
GetCurrentProcessId
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapSize
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
ResetEvent
SetEvent
CreateEventW
WaitForSingleObject
WaitForMultipleObjects
GetTickCount
GetProcAddress
LoadLibraryW
CloseHandle
OpenProcess
GetCurrentThreadId
GetStartupInfoW
Sleep
ExitThread
FreeLibraryAndExitThread
GetLastError
GetFileAttributesW
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeZoneInformation
RtlUnwind
OutputDebugStringW
ExitProcess
GetStdHandle
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
EncodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
HeapReAlloc
GetModuleHandleExW

user32

GetActiveWindow

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

ShellExecuteExW
SHGetFolderPathW

Sections

.text
Size: 675KB - Virtual size: 674KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2345PinyinUpdate.exe
.exe windows:5 windows x86 arch:x86

d52e6c8343d6b436b8443ef32943404b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:70:a1:7d:75:6f:ec:88:85:9a:29:46:be:d7:69:44
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/05/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:40:74:8d:43:58:a1:47:81:d6:a9:c3:07:b3:aa:9c
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

31:2d:d9:28:9b:5f:ed:fb:c0:a6:23:d0:c9:52:62:60:a8:5c:fc:8f:b9:6d:ff:30:53:2f:8b:21:31:ed:d3:bb
Signer

Actual PE Digest

31:2d:d9:28:9b:5f:ed:fb:c0:a6:23:d0:c9:52:62:60:a8:5c:fc:8f:b9:6d:ff:30:53:2f:8b:21:31:ed:d3:bb

Digest Algorithm

sha256

PE Digest Matches

true

2e:28:8b:7c:94:c9:66:43:bf:42:26:79:a3:22:a3:5c:73:21:d1:64
Signer

Actual PE Digest

2e:28:8b:7c:94:c9:66:43:bf:42:26:79:a3:22:a3:5c:73:21:d1:64

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Work\New\2345input\bin\Win32\Release\pdb\2345PinyinUpdate.pdb

Imports

gdiplus

GdipDrawString
GdipCreateFromHDC
GdipGetGenericFontFamilySansSerif
GdipCreateSolidFill
GdipCreateFont
GdipCloneBrush
GdipDeleteGraphics
GdipDeleteFont
GdipGetImageWidth
GdipDrawImageRectRectI
GdiplusStartup
GdipFree
GdipAlloc
GdipCreateHBITMAPFromBitmap
GdipFillRectangleI
GdipSetCompositingMode
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipCloneImage
GdipCreateBitmapFromStream
GdipDisposeImage
GdipDeleteFontFamily
GdipGetImageHeight
GdipCreateFontFamilyFromName
GdipDeleteBrush
GdiplusShutdown

imm32

ImmDisableIME

kernel32

GetCurrentThreadId
MultiByteToWideChar
Sleep
GetLastError
RaiseException
LoadResource
FindResourceW
DecodePointer
GetProcAddress
DeleteCriticalSection
GetModuleHandleW
FreeLibrary
InterlockedIncrement
lstrcmpiW
GetTickCount
LoadLibraryExW
LockResource
GlobalAlloc
GlobalFree
GetCurrentProcessId
SetFileAttributesW
DeleteFileW
MoveFileExW
CopyFileW
GetFileAttributesW
LoadLibraryW
WaitForSingleObject
CreateFileW
CloseHandle
CreateProcessW
GetExitCodeProcess
ReadFile
GetFileSize
ExpandEnvironmentStringsW
OpenEventW
WaitForMultipleObjects
CreateEventW
SetEvent
ResetEvent
GlobalMemoryStatusEx
GetSystemDirectoryW
GetStartupInfoW
OpenProcess
LocalFree
GetCurrentProcess
lstrlenW
GetTempFileNameW
RemoveDirectoryW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
SetFilePointer
SetEndOfFile
OpenFileMappingW
OpenMutexW
VirtualQuery
SetLastError
DeviceIoControl
WriteFile
WideCharToMultiByte
GetLocalTime
LCMapStringW
HeapFree
GetVersionExW
HeapAlloc
GetProcessHeap
FindFirstFileW
GetLongPathNameW
GetFileAttributesExW
CreateMutexW
ReleaseMutex
QueryDosDeviceW
SearchPathW
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
GetACP
GetSystemInfo
InterlockedExchange
InterlockedExchangeAdd
SystemTimeToFileTime
SetFileTime
GetFileTime
GetVolumeInformationW
GetDiskFreeSpaceW
GetLogicalDriveStringsW
InitializeCriticalSection
lstrcatW
lstrcpyW
FindNextFileW
FindClose
GetSystemTime
DosDateTimeToFileTime
FileTimeToDosDateTime
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
CreateDirectoryW
GetFullPathNameW
GetTempPathW
GetCurrentDirectoryW
GetWindowsDirectoryW
MoveFileW
FormatMessageW
GetFileSizeEx
GetComputerNameW
MulDiv
QueryPerformanceFrequency
QueryPerformanceCounter
DuplicateHandle
GetFileInformationByHandle
GetFileType
GetPrivateProfileStringA
GetStringTypeW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
EncodePointer
CompareStringW
GetLocaleInfoW
GetCPInfo
IsDebuggerPresent
OutputDebugStringW
HeapReAlloc
InitializeSListHead
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
InterlockedPushEntrySList
CreateThread
ExitThread
LeaveCriticalSection
GetEnvironmentVariableW
EnterCriticalSection
SizeofResource
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetModuleFileNameW
ReadConsoleW
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetStdHandle
GetTimeZoneInformation
HeapSize
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
WriteConsoleW
ResumeThread
SwitchToThread

user32

ReleaseDC
EnableWindow
GetWindowThreadProcessId
GetSystemMetrics
WindowFromPoint
IsWindow
GetDesktopWindow
GetParent
IsIconic
FindWindowExW
IsWindowVisible
LoadStringW
MoveWindow
SetTimer
IsRectEmpty
SetRectEmpty
GetWindow
FindWindowW
GetCursorPos
GetActiveWindow
GetMessageW
DispatchMessageW
PeekMessageW
GetForegroundWindow
TranslateMessage
GetWindowLongW
PostMessageW
GetWindowRect
SetWindowPos
CreateWindowExW
SendMessageW
RegisterClassExW
ShowWindow
WindowFromDC
TrackMouseEvent
LoadIconW
LoadCursorW
SetCapture
SetWindowLongW
UpdateLayeredWindow
PostQuitMessage
SystemParametersInfoW
ReleaseCapture
BeginPaint
EndPaint
DefWindowProcW
DestroyWindow
MessageBoxW
UnregisterClassW
CharNextW
GetDC

advapi32

RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
GetSecurityDescriptorDacl
GetAclInformation
GetAce
EqualSid
SetEntriesInAclW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
GetFileSecurityW
LookupAccountNameW
RegCreateKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegOpenCurrentUser
RegCloseKey
RegQueryValueExW
DuplicateTokenEx
AdjustTokenPrivileges
RegEnumValueW
RegOpenKeyExW

ole32

CoTaskMemFree
CoTaskMemAlloc
CoInitializeSecurity
CoInitialize
CoTaskMemRealloc
CoCreateInstance
CoUninitialize

shell32

SHGetFolderPathW
ShellExecuteExW

oleaut32

SysFreeString
VariantInit
SysAllocString
VariantClear
VarUI4FromStr

comctl32

InitCommonControlsEx

gdi32

DeleteObject
DeleteDC
CreateCompatibleDC
SelectObject
CreateDIBSection

iphlpapi

GetAdaptersAddresses

dbghelp

MiniDumpWriteDump

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 595KB - Virtual size: 595KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
2345PinyinWizard.exe
.exe windows:5 windows x86 arch:x86

7541f43e8fd6cd824ba79a73134b2731

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:70:a1:7d:75:6f:ec:88:85:9a:29:46:be:d7:69:44
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/05/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:40:74:8d:43:58:a1:47:81:d6:a9:c3:07:b3:aa:9c
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

49:6a:be:54:2e:ae:fb:24:9c:7f:9b:7a:14:55:66:3f:be:9d:81:70:3a:7a:96:a0:3d:bf:7a:cb:e3:e0:81:5b
Signer

Actual PE Digest

49:6a:be:54:2e:ae:fb:24:9c:7f:9b:7a:14:55:66:3f:be:9d:81:70:3a:7a:96:a0:3d:bf:7a:cb:e3:e0:81:5b

Digest Algorithm

sha256

PE Digest Matches

true

aa:8b:33:fb:17:62:02:e9:4f:e1:72:94:3b:a2:f3:ec:1f:34:9a:f4
Signer

Actual PE Digest

aa:8b:33:fb:17:62:02:e9:4f:e1:72:94:3b:a2:f3:ec:1f:34:9a:f4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Work\New\2345input\bin\Win32\Release\pdb\2345PinyinWizard.pdb

Imports

msimg32

AlphaBlend

kernel32

Sleep
DeleteFileW
CopyFileW
MulDiv
lstrcpyW
GetFileAttributesW
LoadLibraryW
WaitForSingleObject
CreateProcessW
LCMapStringW
WaitForMultipleObjects
CreateEventW
SetEvent
ResetEvent
GlobalMemoryStatusEx
OpenProcess
GetStartupInfoW
OpenEventW
OpenFileMappingW
OpenMutexW
VirtualQuery
SetFilePointer
SetEndOfFile
FileTimeToSystemTime
GetSystemDirectoryW
GetCurrentProcess
LocalFree
DeviceIoControl
ExpandEnvironmentStringsW
GetTempFileNameW
FindNextFileW
WriteFile
UnmapViewOfFile
DuplicateHandle
SystemTimeToFileTime
GetFileType
CreateFileMappingW
MapViewOfFile
CreateDirectoryW
SetFileTime
GetCurrentDirectoryW
DosDateTimeToFileTime
ExitProcess
CreateMutexW
ReleaseMutex
GetVersionExW
lstrcatW
GetFileSize
InterlockedExchangeAdd
GetACP
InitializeCriticalSection
QueryDosDeviceW
GetLongPathNameW
GetFileAttributesExW
GetSystemInfo
GetEnvironmentVariableW
ResumeThread
FindResourceW
GetLogicalDriveStringsW
GetFullPathNameW
GetTempPathW
GetWindowsDirectoryW
FormatMessageW
GetFileSizeEx
GlobalFree
QueryPerformanceCounter
LoadResource
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
OutputDebugStringW
IsDebuggerPresent
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetCPInfo
GetLocaleInfoW
CompareStringW
EncodePointer
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
GetStringTypeW
SetFileAttributesW
GetFileTime
RaiseException
RtlUnwind
GetModuleHandleExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetStdHandle
GetTimeZoneInformation
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetLastError
MultiByteToWideChar
GetCurrentThreadId
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
InterlockedDecrement
SetStdHandle
WriteConsoleW
EnterCriticalSection
SetLastError
SizeofResource
GlobalAlloc
CloseHandle
LockResource
CreateFileW
ReadFile
GetProcessHeap
HeapAlloc
HeapReAlloc
HeapSize
HeapFree
InterlockedExchange
WideCharToMultiByte
FindClose
lstrlenW
FindFirstFileW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetTickCount
GetCurrentProcessId
LoadLibraryExW
lstrcmpiW
InterlockedIncrement
FreeLibrary
GetModuleHandleW
DeleteCriticalSection
GetProcAddress
DecodePointer

user32

FindWindowExW
GetWindowThreadProcessId
GetLastActivePopup
AttachThreadInput
SystemParametersInfoW
IsIconic
GetForegroundWindow
SetScrollInfo
ShowScrollBar
FillRect
GetScrollInfo
SetScrollPos
SetFocus
GetDC
ReleaseDC
DrawTextW
SetRect
IsWindow
MonitorFromPoint
SetWindowPos
MonitorFromWindow
SetWindowRgn
EndDialog
SetWindowTextW
OffsetRect
GetMonitorInfoW
ClientToScreen
MapWindowPoints
LoadIconW
GetParent
GetWindowLongW
DefWindowProcW
CallWindowProcW
PostMessageW
GetWindowRect
ScreenToClient
GetCursor
RegisterClassExW
SetTimer
LoadCursorW
SetCursor
GetClientRect
KillTimer
GetClassInfoExW
PtInRect
UpdateWindow
InvalidateRect
GetCursorPos
BeginPaint
EndPaint
CreateWindowExW
SendMessageW
MoveWindow
MessageBoxW
UnregisterClassW
GetActiveWindow
ShowWindow
CharNextW
FindWindowW
SetWindowLongW
DialogBoxParamW
SetForegroundWindow
GetWindow
GetDlgItem

gdi32

CreateSolidBrush
EnumFontFamiliesW
GetStockObject
GetDeviceCaps
GetTextMetricsW
CreateFontIndirectW
GetBitmapBits
SetTextColor
SetBkMode
SetBkColor
CreateDIBSection
GetObjectW
CreatePolygonRgn
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
DeleteDC
SetViewportOrgEx
DeleteObject

advapi32

RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
SetNamedSecurityInfoW
GetSecurityDescriptorDacl
GetAclInformation
GetAce
EqualSid
SetEntriesInAclW
GetNamedSecurityInfoW
GetFileSecurityW
LookupAccountNameW
RegCreateKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegCloseKey
RegQueryValueExW
RegEnumKeyExW

shell32

SHGetFolderPathW

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree

oleaut32

SysAllocString
SysFreeString
VarUI4FromStr

gdiplus

GdipDisposeImage
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipAlloc
GdipCreateFont
GdipCreateSolidFill
GdipGraphicsClear
GdipGetGenericFontFamilySansSerif
GdipFree
GdipDrawString
GdipCreateFromHDC
GdipSetTextRenderingHint
GdipCloneBrush
GdipMeasureString
GdipDeleteGraphics
GdipDeleteFont
GdipDrawImageI
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromStream
GdipCloneImage
GdipDeleteBrush

iphlpapi

GetAdaptersAddresses

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 577KB - Virtual size: 577KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 99KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pinyin_2345Upgrade.dll
.dll windows:5 windows x86 arch:x86

5f23f623bbbd6b9f7aeb6e9f7bf3f7bc

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ef:5f:29:61:f4:8f:39:39:ea:9e:3e:02:9c:4a:31:02:61:d3:e9:14:36:61:ca:06:90:c9:f5:9f:43:e4:b3:ed
Signer

Actual PE Digest

ef:5f:29:61:f4:8f:39:39:ea:9e:3e:02:9c:4a:31:02:61:d3:e9:14:36:61:ca:06:90:c9:f5:9f:43:e4:b3:ed

Digest Algorithm

sha256

PE Digest Matches

true

60:a1:cd:bc:d1:4d:69:86:0c:5a:9b:e7:a6:af:fa:8f:13:fd:28:e9
Signer

Actual PE Digest

60:a1:cd:bc:d1:4d:69:86:0c:5a:9b:e7:a6:af:fa:8f:13:fd:28:e9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\trunk\CommonPlatform\UpgradeProgram\bin\Win32\Release\pdb\Pinyin_2345Upgrade_Dll.pdb

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
RaiseException
GetLastError
DecodePointer
DeleteCriticalSection
EndUpdateResourceW
GetTempPathW
BeginUpdateResourceW
UpdateResourceW
WideCharToMultiByte
GetACP
MultiByteToWideChar
GetModuleHandleW
GetFileAttributesW
ExpandEnvironmentStringsW
FindFirstFileW
GetLongPathNameW
GetFileAttributesExW
GetCurrentProcessId
GetFileSize
SetFilePointer
SetEndOfFile
SetFileTime
WriteFile
ReadFile
GetFileTime
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateProcessW
WaitForSingleObject
WaitForMultipleObjects
LocalFree
ResumeThread
CreateMutexW
ReleaseMutex
GetCurrentProcess
OpenProcess
QueryDosDeviceW
FindResourceW
LoadResource
GetVersionExW
LockResource
GetSystemInfo
lstrcmpiW
GetCommandLineW
GetFileSizeEx
DeleteFileW
GetFullPathNameW
GetTempFileNameW
CreateDirectoryW
GetSystemDirectoryW
CopyFileW
GetCurrentDirectoryW
MoveFileW
GetWindowsDirectoryW
SetFileAttributesW
FindClose
FindNextFileW
FileTimeToSystemTime
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentThreadId
SetEvent
ResetEvent
CreateEventW
InterlockedExchangeAdd
GetTickCount
FormatMessageW
InterlockedExchange
SetEnvironmentVariableA
GetLogicalDriveStringsW
DeviceIoControl
GlobalMemoryStatusEx
GetEnvironmentVariableW
LoadLibraryExW
SystemTimeToTzSpecificLocalTime
GetPrivateProfileStringW
LocalAlloc
FlushFileBuffers
OutputDebugStringW
CloseHandle
GetProcAddress
CreateFileW
Sleep
LoadLibraryW
MoveFileExW
FreeLibrary
SetStdHandle
WriteConsoleW
ReadConsoleW
lstrlenW
SetLastError
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapReAlloc
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
GetStdHandle
GetOEMCP
IsValidCodePage
HeapSize
GetModuleHandleExW
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
EncodePointer
GetStringTypeW
GetSystemTimeAsFileTime
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
CreateThread
ExitThread
RtlUnwind
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW

advapi32

QueryServiceConfigW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
GetUserNameW
SystemFunction036

shell32

SHGetSpecialFolderPathW
ord680

imagehlp

ImageEnumerateCertificates
ImageRemoveCertificate

netapi32

NetLocalGroupGetMembers

Exports

Exports

StartUpgrade

Sections

.text
Size: 833KB - Virtual size: 833KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Pinyin_2345Upgrade.exe
.exe windows:5 windows x86 arch:x86

5b32795396d07af5723cd50317670808

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e8:01:cf:e5:e9:49:6f:eb:17:24:85:94:d1:95:ab:f9:e2:59:86:e0:03:5c:dc:f5:2f:9f:08:7f:e0:55:61:f8
Signer

Actual PE Digest

e8:01:cf:e5:e9:49:6f:eb:17:24:85:94:d1:95:ab:f9:e2:59:86:e0:03:5c:dc:f5:2f:9f:08:7f:e0:55:61:f8

Digest Algorithm

sha256

PE Digest Matches

true

b0:cf:38:e6:02:b0:56:73:85:6f:97:a2:4d:66:34:20:63:08:be:6b
Signer

Actual PE Digest

b0:cf:38:e6:02:b0:56:73:85:6f:97:a2:4d:66:34:20:63:08:be:6b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\trunk\CommonPlatform\UpgradeProgram\bin\Win32\Release\pdb\Pinyin_2345Upgrade_Exe.pdb

Imports

kernel32

FreeLibrary
LoadLibraryW
GetModuleFileNameW
GetProcAddress
GetModuleHandleW
GetFileAttributesW
CreateMutexW
WaitForSingleObject
Sleep
GetLastError
ReleaseMutex
CloseHandle
CreateFileW
GetFileAttributesExW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetVersionExW
lstrlenW
GetFileSizeEx
SetFilePointer
SetEndOfFile
WriteFile
ReadFile
DeleteFileW
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentThreadId
LocalFree
GetFullPathNameW
CreateDirectoryW
GetFileSize
FormatMessageW
EncodePointer
DecodePointer
GetCommandLineW
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
SetLastError
GetStdHandle
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
LoadLibraryExW
HeapReAlloc
LCMapStringW
OutputDebugStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
WriteConsoleW
FlushFileBuffers

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Protect/2345PinyinMiniPage.exe
.exe windows:5 windows x86 arch:x86

d455f0b2a2c744eed3774218c7b71800

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

44:58:2d:fd:7f:52:40:73:65:c2:8f:19:3b:0d:c6:a9:13:4b:81:a1:7a:c0:0d:ff:4a:dc:7e:fc:5e:70:69:fe
Signer

Actual PE Digest

44:58:2d:fd:7f:52:40:73:65:c2:8f:19:3b:0d:c6:a9:13:4b:81:a1:7a:c0:0d:ff:4a:dc:7e:fc:5e:70:69:fe

Digest Algorithm

sha256

PE Digest Matches

true

72:62:a0:e8:c9:8d:94:e3:36:25:9e:d9:97:07:77:b8:ad:8d:78:63
Signer

Actual PE Digest

72:62:a0:e8:c9:8d:94:e3:36:25:9e:d9:97:07:77:b8:ad:8d:78:63

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\trunk\CommonPlatform\RCMiniPage\bin\Win32\Release\pdb\2345MiniPage.pdb

Imports

kernel32

LoadLibraryW
GetModuleFileNameW
CreateFileW
GetTempPathW
GetProcAddress
GetLocalTime
GetCurrentThreadId
CloseHandle
GetCurrentProcessId
LoadLibraryExW
GetModuleHandleW
GetFileAttributesW
FreeLibrary
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
RaiseException
GetLastError
DecodePointer
lstrcatW
DeleteCriticalSection
CreateProcessW
lstrcmpiW
FindFirstFileW
FileTimeToSystemTime
FindClose
CreateMutexW
WaitForSingleObject
Sleep
ReleaseMutex
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetLongPathNameW
GetFileAttributesExW
HeapAlloc
HeapFree
GetProcessHeap
OpenProcess
GetVersionExW
LocalFree
QueryDosDeviceW
GetFileSize
SetFilePointer
SetEndOfFile
SetFileTime
WriteFile
GetCurrentProcess
GetFileTime
DeleteFileW
FindResourceW
LoadResource
LockResource
GetSystemInfo
GetFullPathNameW
GetTempFileNameW
MoveFileExW
CreateDirectoryW
GetSystemDirectoryW
lstrlenW
GetCurrentDirectoryW
MoveFileW
GetWindowsDirectoryW
SetFileAttributesW
FindNextFileW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetFileSizeEx
GetLogicalDriveStringsW
SetEvent
SetEnvironmentVariableA
FormatMessageW
GetACP
GlobalMemoryStatusEx
ResumeThread
WideCharToMultiByte
MultiByteToWideChar
ResetEvent
CreateEventW
InterlockedExchangeAdd
InterlockedExchange
SetLastError
GetExitCodeProcess
DeviceIoControl
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
OutputDebugStringW
HeapReAlloc
GetTickCount
SetStdHandle
WriteConsoleW
ReadConsoleW
ReadFile
WaitForMultipleObjects
GetTimeZoneInformation
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetFileType
GetStdHandle
EncodePointer
GetStringTypeW
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineW
CreateThread
ExitThread
RtlUnwind
GetCPInfo
UnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
HeapSize

user32

PostMessageW
IsWindow
wsprintfW
MessageBoxW

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation

ole32

CoTaskMemFree

shlwapi

PathRemoveFileSpecW

Sections

.text
Size: 870KB - Virtual size: 869KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Protect/Helper_2345Pinyin.exe
.exe windows:5 windows x86 arch:x86

8c36ca86c7d41caa33bb6f56da5056e6

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

9b:8e:d1:5e:d0:37:b6:52:a0:f9:3e:0b:1f:b9:2b:d7:ea:d2:33:82:d6:34:fe:96:3d:f2:f1:c3:bb:0e:4b:43
Signer

Actual PE Digest

9b:8e:d1:5e:d0:37:b6:52:a0:f9:3e:0b:1f:b9:2b:d7:ea:d2:33:82:d6:34:fe:96:3d:f2:f1:c3:bb:0e:4b:43

Digest Algorithm

sha256

PE Digest Matches

true

48:54:14:d8:34:b7:d9:2c:fb:f3:23:f3:51:e9:66:bc:fb:5e:a8:b7
Signer

Actual PE Digest

48:54:14:d8:34:b7:d9:2c:fb:f3:23:f3:51:e9:66:bc:fb:5e:a8:b7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\trunk\CommonPlatform\Helper2345\bin\Win32\Release\pdb\Helper_2345.pdb

Imports

kernel32

LoadLibraryW
GetModuleFileNameW
GetProcAddress
LocalFree
CreateProcessW
lstrcmpiW
CloseHandle
GetCurrentProcessId
FindFirstFileW
FindClose
GetModuleHandleW
GetFileAttributesW
ExpandEnvironmentStringsW
CreateMutexW
WaitForSingleObject
Sleep
GetLastError
ReleaseMutex
CreateFileW
GetLongPathNameW
GetFileAttributesExW
HeapAlloc
HeapFree
GetProcessHeap
OpenProcess
GetVersionExW
GetCurrentThreadId
GetCurrentProcess
QueryDosDeviceW
GetFileSize
SetFilePointer
SetEndOfFile
WriteFile
ReadFile
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
lstrlenW
GetFileSizeEx
DeleteFileW
GetFullPathNameW
GetTempFileNameW
MoveFileExW
CreateDirectoryW
GetTempPathW
MoveFileW
RemoveDirectoryW
GetWindowsDirectoryW
SetFileAttributesW
FindNextFileW
FindResourceW
LoadResource
LockResource
GetLogicalDriveStringsW
GetTickCount
FormatMessageW
SetEnvironmentVariableA
GlobalMemoryStatusEx
SetEvent
ResetEvent
CreateEventW
InterlockedExchangeAdd
InterlockedExchange
WideCharToMultiByte
MultiByteToWideChar
SetLastError
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
GetExitCodeProcess
WaitForMultipleObjects
GetCommandLineW
SetStdHandle
WriteConsoleW
DeleteCriticalSection
GetACP
FlushFileBuffers
OutputDebugStringW
SetFilePointerEx
GetConsoleMode
EncodePointer
DecodePointer
GetStringTypeW
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
HeapSize
GetStdHandle
GetFileType
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetTimeZoneInformation
HeapReAlloc
GetConsoleCP

shell32

CommandLineToArgvW
SHGetSpecialFolderPathW

Sections

.text
Size: 558KB - Virtual size: 557KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Protect/Pinyin_2345Svc.dll
.dll windows:5 windows x86 arch:x86

e7891eb2796eb6991f23ace6bbba25ac

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

7e:5b:4e:0e:04:b5:1e:25:86:e5:50:e9:f6:e5:c6:fa:01:7d:b8:b6:b8:da:07:0d:85:61:e5:5a:c0:14:27:8f
Signer

Actual PE Digest

7e:5b:4e:0e:04:b5:1e:25:86:e5:50:e9:f6:e5:c6:fa:01:7d:b8:b6:b8:da:07:0d:85:61:e5:5a:c0:14:27:8f

Digest Algorithm

sha256

PE Digest Matches

true

d5:f8:a1:5b:7e:ca:b0:d1:7a:5e:b2:e7:28:2e:b1:0c:db:9f:94:87
Signer

Actual PE Digest

d5:f8:a1:5b:7e:ca:b0:d1:7a:5e:b2:e7:28:2e:b1:0c:db:9f:94:87

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\trunk\CommonPlatform\ServiceProgram\Release\Pinyin_2345Svc_dll.pdb

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

GetTickCount
Sleep
CreateTimerQueueTimer
GetSystemInfo
DeleteTimerQueueTimer
FreeLibrary
GetModuleHandleW
LoadLibraryW
GetProcAddress
EndUpdateResourceW
CreateFileW
BeginUpdateResourceW
UpdateResourceW
CreateTimerQueue
DeleteTimerQueueEx
GetLogicalDriveStringsW
lstrlenW
QueryDosDeviceW
lstrcmpiW
lstrcatW
GetLocalTime
WaitForSingleObject
ResetEvent
CreateEventW
SetFileAttributesW
MoveFileW
GetVersionExW
GetModuleHandleA
GetExitCodeProcess
WaitForMultipleObjects
GetCurrentProcessId
SetEvent
OpenEventW
GetACP
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentThreadId
CreateMutexW
OpenMutexW
ReleaseMutex
GetCurrentProcess
ResumeThread
TerminateThread
OpenThread
LocalFree
SuspendThread
SwitchToThread
FindResourceW
LoadResource
LockResource
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetLongPathNameW
GetFileAttributesExW
GetFileSize
SetFilePointer
SetEndOfFile
SetFileTime
WriteFile
ReadFile
GetFileTime
FindNextFileW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InterlockedExchangeAdd
LoadLibraryExW
GetFullPathNameW
GetTempFileNameW
CreateDirectoryW
GetSystemDirectoryW
CopyFileW
GetFileAttributesW
GetTempPathW
GetCurrentDirectoryW
RemoveDirectoryW
GetWindowsDirectoryW
DeleteFileW
InitializeCriticalSectionAndSpinCount
InterlockedExchange
DeviceIoControl
FormatMessageW
SetLastError
MapViewOfFile
WTSGetActiveConsoleSessionId
GlobalMemoryStatusEx
LocalAlloc
FindClose
GetComputerNameExW
GetLastError
WritePrivateProfileStringW
MultiByteToWideChar
GetModuleFileNameW
FileTimeToSystemTime
WideCharToMultiByte
GetPrivateProfileStringW
SystemTimeToTzSpecificLocalTime
GetFileSizeEx
FindFirstFileW
CloseHandle
OpenProcess
MoveFileExW
UnmapViewOfFile
CreateFileMappingW
GetExitCodeThread
SetEnvironmentVariableA
ReadConsoleW
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
FreeLibraryAndExitThread
GetThreadTimes
OutputDebugStringW
HeapReAlloc
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
GetConsoleMode
GetConsoleCP
GetStdHandle
GetOEMCP
IsValidCodePage
HeapSize
GetModuleHandleExW
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
UnregisterWait
RegisterWaitForSingleObject
DuplicateHandle
GetCurrentThread
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetStringTypeW
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
CreateThread
ExitThread
RaiseException
RtlUnwind
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CreateSemaphoreW
WaitForSingleObjectEx
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
ChangeTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask

advapi32

StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
SetServiceStatus
SystemFunction036
RegCloseKey
QueryServiceConfigW
ConvertSidToStringSidW
RegOpenKeyExW
RevertToSelf
ImpersonateLoggedOnUser
LookupAccountNameW
RegQueryValueExW
OpenServiceW
GetUserNameW
OpenSCManagerW
CloseServiceHandle

shell32

SHGetSpecialFolderPathW

netapi32

NetLocalGroupGetMembers

wininet

HttpAddRequestHeadersA
InternetCloseHandle
InternetOpenA
HttpSendRequestA
HttpQueryInfoA
HttpOpenRequestA
InternetReadFile
InternetCrackUrlA
InternetConnectA

wtsapi32

WTSQueryUserToken

imagehlp

ImageRemoveCertificate
ImageEnumerateCertificates

shlwapi

PathRemoveFileSpecW

ws2_32

closesocket
connect
WSAStartup
inet_addr
WSAGetLastError
send
htons
shutdown
recv
socket

sensapi

IsNetworkAlive

Exports

Exports

UpdateMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Protect/Pinyin_2345Svc.exe
.exe windows:5 windows x86 arch:x86

52da86a3fc191a012b3e8d728d678f5e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

96:c1:4b:f4:e3:7a:f4:04:d1:88:b8:32:b6:14:98:d2:9e:f3:58:9d:5f:f8:d4:54:53:bc:eb:5d:c0:fc:76:4c
Signer

Actual PE Digest

96:c1:4b:f4:e3:7a:f4:04:d1:88:b8:32:b6:14:98:d2:9e:f3:58:9d:5f:f8:d4:54:53:bc:eb:5d:c0:fc:76:4c

Digest Algorithm

sha256

PE Digest Matches

true

ab:5f:3a:d9:bc:31:84:91:55:90:ad:8a:3c:b8:80:a3:0c:4c:08:b5
Signer

Actual PE Digest

ab:5f:3a:d9:bc:31:84:91:55:90:ad:8a:3c:b8:80:a3:0c:4c:08:b5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetPrivateProfileStringW
LoadLibraryW
GetModuleFileNameW
GetLastError
GetProcAddress
GetModuleHandleW
GetFileAttributesW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetVersionExW
GetFileSizeEx
CloseHandle
SetFilePointer
SetEndOfFile
WriteFile
ReadFile
DeleteFileW
CreateFileW
GetFileAttributesExW
CreateMutexW
WaitForSingleObject
Sleep
ReleaseMutex
CreateDirectoryW
GetFileSize
FormatMessageW
LocalFree
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentThreadId
WriteConsoleW
SetStdHandle
EncodePointer
DecodePointer
GetCommandLineW
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
MultiByteToWideChar
ExitProcess
GetModuleHandleExW
WideCharToMultiByte
HeapSize
RaiseException
GetStdHandle
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStringTypeW
LCMapStringW
RtlUnwind
LoadLibraryExW
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
OutputDebugStringW
FlushFileBuffers

Exports

Exports

CheckFile

Sections

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Protect/ServiceManager.exe
.exe windows:5 windows x86 arch:x86

f90594adaaf63b4c071ea8caf1b8882a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

7c:41:b9:5d:65:9b:e5:14:9f:fa:b3:1d:fc:01:59:07:f0:b3:d1:7b:89:a9:fa:2d:aa:3e:d2:a9:aa:57:71:03
Signer

Actual PE Digest

7c:41:b9:5d:65:9b:e5:14:9f:fa:b3:1d:fc:01:59:07:f0:b3:d1:7b:89:a9:fa:2d:aa:3e:d2:a9:aa:57:71:03

Digest Algorithm

sha256

PE Digest Matches

true

85:cc:13:3d:18:15:1e:a9:5a:14:5b:9a:20:95:f2:02:25:06:4e:ae
Signer

Actual PE Digest

85:cc:13:3d:18:15:1e:a9:5a:14:5b:9a:20:95:f2:02:25:06:4e:ae

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesW
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetVersionExW
GetFileSizeEx
SetFilePointer
SetEndOfFile
WriteFile
ReadFile
DeleteFileW
CreateFileW
GetFileAttributesExW
LoadLibraryW
GetModuleHandleW
WaitForSingleObject
ReleaseMutex
CreateDirectoryW
GetFileSize
FormatMessageW
LocalFree
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentThreadId
GetModuleFileNameW
GetCurrentProcessId
CloseHandle
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
GetLastError
TerminateProcess
OpenProcess
GetCurrentProcess
Sleep
CreateMutexW
GetTickCount
SetStdHandle
FlushFileBuffers
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineW
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
HeapSize
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetStdHandle
LoadLibraryExW
GetFileType
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
HeapReAlloc
LCMapStringW
OutputDebugStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW

advapi32

LookupPrivilegeValueW
OpenProcessToken
ControlService
QueryServiceStatusEx
StartServiceW
ChangeServiceConfig2W
OpenServiceW
OpenSCManagerW
DeleteService
CloseServiceHandle
CreateServiceW
AdjustTokenPrivileges

Sections

.text
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Protect/Tool_Uninstall.exe
.exe windows:5 windows x86 arch:x86

e05a72d416d18dddb745b70f2a38d123

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

99:01:d5:ce:0a:7a:9a:89:41:ae:2d:f8:62:b2:a4:b5:56:c1:de:11:dd:84:1b:ac:3b:97:c4:ad:d1:c4:60:27
Signer

Actual PE Digest

99:01:d5:ce:0a:7a:9a:89:41:ae:2d:f8:62:b2:a4:b5:56:c1:de:11:dd:84:1b:ac:3b:97:c4:ad:d1:c4:60:27

Digest Algorithm

sha256

PE Digest Matches

true

4d:cd:36:26:c6:c3:ec:46:d8:2e:a4:ab:6e:ba:6f:98:06:e3:49:25
Signer

Actual PE Digest

4d:cd:36:26:c6:c3:ec:46:d8:2e:a4:ab:6e:ba:6f:98:06:e3:49:25

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\trunk\CommonPlatform\UninstallTool\bin\Win32\Release\Tool_Uninstall.pdb

Imports

kernel32

GetCommandLineW
LocalFree
CreateMutexW
WaitForSingleObject
Sleep
GetLastError
CloseHandle
GetProcAddress
GetCurrentProcessId
FindResourceW
LoadResource
GetModuleHandleW
GetVersionExW
LockResource
lstrcmpiW
GetCurrentProcess
OpenProcess
GetModuleFileNameW
QueryDosDeviceW
TerminateProcess
GetEnvironmentVariableW
FindFirstFileW
CreateFileW
GetLongPathNameW
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentThreadId
LoadLibraryW
WideCharToMultiByte
GetACP
MultiByteToWideChar
FindClose
FindNextFileW
GetLogicalDriveStringsW
LoadLibraryExW
GetFullPathNameW
GetFileAttributesW
lstrlenW
RemoveDirectoryW
DeleteFileW
SetFileAttributesW
WriteFile
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
ExitProcess
GetModuleHandleExW
HeapSize
SetLastError
GetStdHandle
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsValidCodePage
GetOEMCP
GetCPInfo
GetStringTypeW
HeapReAlloc
LCMapStringW
OutputDebugStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
WriteConsoleW

shell32

CommandLineToArgvW

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Protect/coral_extract.dll
.dll windows:4 windows x86 arch:x86

27078d36f37371b0a00fb89ab0cc3581

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

48:4a:9b:11:5b:01:09:69:1e:2d:e4:1e:77:a4:4f:84
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:a6:23:e4:b0:f0:92:9b:62:02:10:e4:50:e4:0a:1e
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

10:59:b3:25:b1:49:34:f1:9c:33:83:5f:44:1c:b2:23:c2:a4:e3:d0:aa:16:d1:d9:19:ec:06:f7:9d:5f:5b:be
Signer

Actual PE Digest

10:59:b3:25:b1:49:34:f1:9c:33:83:5f:44:1c:b2:23:c2:a4:e3:d0:aa:16:d1:d9:19:ec:06:f7:9d:5f:5b:be

Digest Algorithm

sha256

PE Digest Matches

true

ff:2d:ce:b1:52:96:51:96:4b:0a:18:78:fc:25:27:3e:35:07:fd:1b
Signer

Actual PE Digest

ff:2d:ce:b1:52:96:51:96:4b:0a:18:78:fc:25:27:3e:35:07:fd:1b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\rczip.dev\trunk\bin\Win32\release\pdb\Extract7z.pdb

Imports

kernel32

GetProcAddress
VirtualAlloc
GetModuleHandleW
VirtualFree
InterlockedExchangeAdd
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetVersionExW
GetLastError
ReadFile
CreateFileW
SetFilePointer
CloseHandle
LoadLibraryW
FreeLibrary
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
GetSystemTimeAsFileTime
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetFileAttributesW
FormatMessageW
LocalFree
FindFirstFileW
FindClose
FindNextFileW
DeleteFileW
CreateDirectoryW
GetFileSize
GetFullPathNameW
SetFileTime
GetTempFileNameW
SetFileAttributesW
MoveFileW
lstrlenW
SetEndOfFile
FindResourceW
WaitForMultipleObjects
CreateEventW
ResetEvent
WaitForSingleObject
SetEvent
CreateThread
ExitThread
ResumeThread

user32

LoadStringW

Exports

Exports

ExtractArchive

Sections

.text
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Uninstall.exe
.exe windows:5 windows x86 arch:x86

9679f250d91a527cbbb99da9f96997e8

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:70:a1:7d:75:6f:ec:88:85:9a:29:46:be:d7:69:44
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/05/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:40:74:8d:43:58:a1:47:81:d6:a9:c3:07:b3:aa:9c
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2019, 00:00

Not After

08/05/2020, 12:00

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

4f:48:73:ef:2f:94:d3:b1:b0:ee:17:2d:94:d1:e8:75:a4:fb:4b:f9:02:30:1b:90:c2:5d:f0:60:f5:c4:0e:e7
Signer

Actual PE Digest

4f:48:73:ef:2f:94:d3:b1:b0:ee:17:2d:94:d1:e8:75:a4:fb:4b:f9:02:30:1b:90:c2:5d:f0:60:f5:c4:0e:e7

Digest Algorithm

sha256

PE Digest Matches

true

7c:d3:a0:40:7b:e1:88:77:6c:f6:71:50:2a:74:e9:37:a7:a2:74:ee
Signer

Actual PE Digest

7c:d3:a0:40:7b:e1:88:77:6c:f6:71:50:2a:74:e9:37:a7:a2:74:ee

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetPrivateProfileStringW
WritePrivateProfileStringW
MoveFileW
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
GetFileSize
GetTickCount
GetModuleFileNameW
GetProcAddress
GetCommandLineW
SetEnvironmentVariableW
WriteFile
GetTempPathW
SetErrorMode
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentProcess
GetCurrentProcessId
ExitProcess
GetVersion
GetWindowsDirectoryW
LoadLibraryW
CopyFileW
GetDiskFreeSpaceW
CreateThread
GlobalLock
GlobalUnlock
lstrcmpiW
lstrlenW
CreateDirectoryW
GetTempFileNameW
RemoveDirectoryW
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetSystemDirectoryW
GetModuleHandleA
lstrcmpiA
lstrcpyA
lstrcpyW
lstrcatW
MoveFileExW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
VirtualQuery
RtlUnwind
IsProcessorFeaturePresent
lstrcmpW
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalAlloc
LoadLibraryExW
GetModuleHandleW
FreeLibrary
Sleep
GetLastError
CloseHandle
SetFileTime
SetFilePointer
SetFileAttributesW
ReadFile
GetShortPathNameW
GetFullPathNameW
GetFileAttributesW
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CompareFileTime
SearchPathW
SetCurrentDirectoryW
lstrcpynW
ExpandEnvironmentStringsW

user32

GetSysColor
GetWindowLongW
SetClassLongW
LoadBitmapW
LoadCursorW
SystemParametersInfoW
wsprintfA
DispatchMessageW
PeekMessageW
SetDlgItemTextW
GetDlgItemTextW
ScreenToClient
CharPrevW
MessageBoxIndirectW
GetSystemMetrics
IsWindowEnabled
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
CheckDlgButton
EndDialog
DialogBoxParamW
SetCursor
GetWindowRect
TrackPopupMenu
AppendMenuW
EnableMenuItem
CreatePopupMenu
CharNextA
GetSystemMenu
IsWindowVisible
SetWindowPos
CreateWindowExW
GetClassInfoW
RegisterClassW
CallWindowProcW
GetMessagePos
CharNextW
ExitWindowsEx
SetTimer
CreateDialogParamW
DestroyWindow
PostMessageW
LoadImageW
FindWindowExW
SetWindowLongW
InvalidateRect
ReleaseDC
GetDC
DefWindowProcW
DrawTextW
BeginPaint
EndPaint
GetClientRect
SetForegroundWindow
EnableWindow
GetDlgItem
ShowWindow
IsWindow
PostQuitMessage
SendMessageTimeoutW
SendMessageW
wsprintfW
FillRect
SetWindowTextW

gdi32

SetBkColor
GetDeviceCaps
SetTextColor
SetBkMode
SelectObject
DeleteObject
CreateBrushIndirect
CreateFontIndirectW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
SHGetFileInfoW
ShellExecuteExW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumValueW
OpenProcessToken
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
SetFileSecurityW
LookupPrivilegeValueW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
AdjustTokenPrivileges

comctl32

ImageList_Create
ImageList_Destroy
ImageList_AddMasked
ord17

ole32

OleUninitialize
OleInitialize
CoCreateInstance
CoTaskMemFree

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ndata
Size: - Virtual size: 312KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/FileInfo.dll
.dll windows:5 windows x86 arch:x86

243ec4e511d77138c2492469bca8cbf5

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

7c:13:cb:01:06:e2:fc:40:22:75:8e:a1:bc:22:3d:29:76:8b:6d:c6:99:37:6d:45:4a:6e:35:e7:cc:42:22:f1
Signer

Actual PE Digest

7c:13:cb:01:06:e2:fc:40:22:75:8e:a1:bc:22:3d:29:76:8b:6d:c6:99:37:6d:45:4a:6e:35:e7:cc:42:22:f1

Digest Algorithm

sha256

PE Digest Matches

true

3d:5b:56:08:ed:08:08:ee:42:9e:dc:6c:a1:21:12:75:49:45:c5:b0
Signer

Actual PE Digest

3d:5b:56:08:ed:08:08:ee:42:9e:dc:6c:a1:21:12:75:49:45:c5:b0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

Sleep
GetLastError
DeleteFileW
MoveFileExW
TerminateProcess
WaitForSingleObject
OpenProcess
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
CloseHandle
GetCurrentProcessId
MultiByteToWideChar
SetFileAttributesW
GlobalFree
WideCharToMultiByte
lstrcpyW
SetLastError
GetCurrentProcess
CreateProcessW
WriteFile
SetFilePointer
CreateFileW
GetFileSize
GetModuleFileNameW
WriteConsoleW
DecodePointer
FlushFileBuffers
GetFileAttributesW
CreateMutexW
lstrcpynW
GlobalAlloc
EncodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
RaiseException
InterlockedFlushSList
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapAlloc
HeapFree
GetACP
GetStdHandle
GetFileType
GetStringTypeW
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx

user32

wsprintfW

advapi32

AllocateAndInitializeSid
OpenProcessToken
FreeSid
CreateProcessAsUserW
GetLengthSid
DuplicateTokenEx
SetTokenInformation

Exports

Exports

CheckInstallerInstance
CheckUserID_01
CheckUserID_02
CheckUserID_03
CheckUserID_04
CheckUserID_05
CreateLowIntegrityProcess
DeleteInstallFile
FindProcess
GetSpecialBuild
IsValidUserID
KillProcess

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/RCWidgetPlugin.dll
.dll windows:5 windows x86 arch:x86

343d4300d84722efab95fdbbb723d30f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e2:be:8b:fa:03:9c:9d:c9:b5:e4:c8:13:7c:b0:53:e0:34:0a:2e:44:31:2a:38:bd:4f:73:a7:6d:48:9e:2b:dc
Signer

Actual PE Digest

e2:be:8b:fa:03:9c:9d:c9:b5:e4:c8:13:7c:b0:53:e0:34:0a:2e:44:31:2a:38:bd:4f:73:a7:6d:48:9e:2b:dc

Digest Algorithm

sha256

PE Digest Matches

true

1b:40:63:b0:f2:26:51:4b:f3:fb:3a:bf:a6:5b:b1:a5:c6:70:87:26
Signer

Actual PE Digest

1b:40:63:b0:f2:26:51:4b:f3:fb:3a:bf:a6:5b:b1:a5:c6:70:87:26

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

RemoveDirectoryW
FileTimeToSystemTime
SetLastError
InterlockedDecrement
MoveFileExW
GetTempFileNameW
GetSystemDirectoryW
GetCurrentProcess
ExpandEnvironmentStringsW
LocalAlloc
GetFileSize
SetEndOfFile
SetFilePointer
GlobalMemoryStatusEx
ResetEvent
SetEvent
CreateEventW
OpenEventW
WaitForMultipleObjects
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleW
GetCurrentThreadId
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcessId
OpenProcess
FreeLibrary
CreateProcessW
GetProcAddress
LoadLibraryW
WaitForSingleObject
GetTickCount
DeleteFileW
Sleep
SetFileAttributesW
LocalFree
GetCommandLineW
CloseHandle
CreateFileW
SetErrorMode
GetModuleFileNameW
ReadFile
DeleteCriticalSection
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
lstrcatW
GetFileAttributesW
WriteConsoleW
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
FindClose
lstrlenW
FindFirstFileW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemInfo
lstrcpyW
WideCharToMultiByte
GlobalFree
GlobalAlloc
MultiByteToWideChar
lstrcpynW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeZoneInformation
GetFileType
GetStdHandle
FreeLibraryAndExitThread
ExitThread
CreateThread
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RtlUnwind
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
EncodePointer
OutputDebugStringW
MapViewOfFileEx
GlobalUnlock
GlobalLock
FreeResource
SetWaitableTimer
CreateWaitableTimerW
MulDiv
SizeofResource
InterlockedIncrement
lstrcmpW
DeviceIoControl
GetFileSizeEx
FormatMessageW
MoveFileW
GetWindowsDirectoryW
GetCurrentDirectoryW
GetTempPathW
GetFullPathNameW
CreateDirectoryW
InterlockedExchange
InterlockedExchangeAdd
FindNextFileW
GetLogicalDriveStringsW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
OpenFileMappingW
OpenMutexW
ReleaseMutex
CreateMutexW
QueryDosDeviceW
SwitchToThread
GetEnvironmentVariableW
LoadLibraryExW
GetProcessHeap
HeapAlloc
HeapFree
GetFileAttributesExW
GetLongPathNameW
GetFileTime
SetFileTime
WriteFile
ResumeThread
GetACP
lstrcmpiW
FindResourceW
LoadResource
LockResource
GetVersionExW
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

user32

SystemParametersInfoW
LoadStringW
SetWindowPos
ShowWindow
PostMessageW
CreateWindowExW
GetPropW
RemovePropW
SetPropW
GetAsyncKeyState
IsClipboardFormatAvailable
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
GetIconInfo
DrawIconEx
GetSysColor
DestroyAcceleratorTable
CreateAcceleratorTableW
GetFocus
GetClassInfoExW
RegisterClassExW
RegisterWindowMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetSystemMetrics
CallWindowProcW
GetCaretBlinkTime
ToAscii
GetKeyboardState
LoadImageW
LoadBitmapW
MsgWaitForMultipleObjects
SetCaretPos
SetFocus
FillRect
UpdateLayeredWindow
SetRectEmpty
PtInRect
UnionRect
GetClassLongW
GetWindowThreadProcessId
InvalidateRgn
ValidateRect
SetWindowRgn
EndPaint
BeginPaint
EnableWindow
GetActiveWindow
GetForegroundWindow
EndDialog
UnregisterClassW
LoadIconW
SetWindowLongW
CharPrevW
CharNextW
KillTimer
SetTimer
GetWindowLongW
SendMessageW
wsprintfW
SetRect
IsRectEmpty
GetWindowTextW
ReleaseDC
SetForegroundWindow
GetParent
GetDesktopWindow
GetDlgItem
GetClientRect
GetClassNameW
MapWindowPoints
CopyRect
GetMonitorInfoW
IsWindow
SetWindowTextW
MonitorFromWindow
GetDC
GetWindowRect
GetWindow
GetWindowTextLengthW
DefWindowProcW
IsIconic
IsZoomed
GetDCEx
GetWindowDC
InvalidateRect
RedrawWindow
SetCursor
GetCursorPos
ClientToScreen
IntersectRect
OffsetRect
OpenClipboard
EqualRect
EnumChildWindows
LoadCursorW
DialogBoxParamW
TrackMouseEvent
GetKeyState
SetCapture
ReleaseCapture
ScreenToClient
DestroyWindow
IsChild
ShowWindowAsync
MoveWindow
IsWindowVisible

gdi32

CreateFontIndirectW
GetDeviceCaps
GetStockObject
BitBlt
GetDIBits
CreateDCW
GetClipBox
PtInRegion
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
GetRgnBox
SelectObject
SetViewportOrgEx
SetGraphicsMode
SetWorldTransform
CreateRectRgnIndirect
CreatePolygonRgn
CreateSolidBrush
SetBkColor
SetTextColor
EnumFontsW
GetObjectW
CreateDIBSection
CreateRoundRectRgn
ExtTextOutW

advapi32

GetSecurityDescriptorDacl
GetAclInformation
GetAce
EqualSid
SetEntriesInAclW
GetNamedSecurityInfoW
GetFileSecurityW
LookupAccountNameW
RegQueryInfoKeyW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetNamedSecurityInfoW
RegEnumKeyExW
RegEnumValueW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW

shell32

DragQueryFileW
DragFinish
SHGetFolderPathW
SHGetPathFromIDListW
SHBrowseForFolderW
CommandLineToArgvW

ole32

CLSIDFromProgID
StringFromGUID2
CoGetClassObject
OleLockRunning
CreateStreamOnHGlobal
CoTaskMemRealloc
CoTaskMemAlloc
CLSIDFromString
OleUninitialize
CoTaskMemFree
CoCreateInstance
OleInitialize

oleaut32

DispCallFunc
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
SysStringLen
SysAllocStringLen
VarUI4FromStr
SysFreeString
VariantInit
SysAllocString
VariantClear

shlwapi

ord12
StrToIntA
PathFindFileNameW

comctl32

_TrackMouseEvent
InitCommonControlsEx

msimg32

AlphaBlend

imm32

ImmAssociateContextEx
ImmReleaseContext
ImmGetCompositionStringW
ImmNotifyIME
ImmSetCompositionWindow
ImmGetContext

gdiplus

GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipCreateBitmapFromStream
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipCloneBitmapAreaI
GdipCreatePath
GdipDeletePath
GdipClosePathFigure
ord1
GdipAddPathString
GdipGetPathWorldBounds
GdipCreateMatrix
GdipCreateMatrix2
GdipDeleteMatrix
GdipGetMatrixElements
GdipCloneRegion
GdipDeleteRegion
GdipTransformRegion
GdipCloneBrush
GdipDeleteBrush
GdipCreateTexture
GdipGetTextureTransform
GdipCreateSolidFill
GdipCreateLineBrushI
GdipSetLinePresetBlend
GdipSetLineWrapMode
GdipGetLineTransform
GdipCreatePen1
GdipDeletePen
GdipSetPenDashStyle
GdipGetImageGraphicsContext
GdipCloneBitmapArea
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipSetImageAttributesWrapMode
GdipCreateFromHDC
GdiplusStartup
GdipSetCompositingQuality
GdipSetSmoothingMode
GdipGetSmoothingMode
GdipSetPixelOffsetMode
GdipSetTextRenderingHint
GdipGetTextRenderingHint
GdipSetInterpolationMode
GdipGetInterpolationMode
GdipMultiplyWorldTransform
GdipTranslateWorldTransform
GdipScaleWorldTransform
GdipAddPathBezierI
GdipDrawLine
GdipDrawArcI
GdipDrawRectangle
GdipDrawPath
GdipGraphicsClear
GdipFillRectangleI
GdipFillEllipse
GdipFillPath
GdipDrawImageRectRect
GdipDrawImageRectRectI
GdipSetClipRectI
GdipSetClipRegion
GdipGetClipBoundsI
GdipSaveGraphics
GdipRestoreGraphics
GdipBeginContainer2
GdipEndContainer
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipGetFamilyName
GdipGetEmHeight
GdipGetCellAscent
GdipGetCellDescent
GdipGetLineSpacing
GdipCreateFont
GdipDeleteFont
GdipGetFamily
GdipGetFontStyle
GdipGetFontSize
GdipDrawString
GdipMeasureString
GdipStringFormatGetGenericTypographic
GdipDeleteStringFormat
GdipCloneStringFormat
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipGetStringFormatAlign
GdipSetStringFormatLineAlign
GdipGetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipAddPathLineI
GdipAddPathArcI
GdipSetLineTransform
GdipSetTextureTransform
GdipGetBrushType
GdipCombineRegionRegion
GdipCombineRegionPath
GdipCreateRegionPath
GdipAddPathEllipseI
GdipAddPathRectangleI
GdipDeleteGraphics
GdipRotateWorldTransform
GdipSetCompositingMode
GdipCreateHBITMAPFromBitmap

winmm

timeGetTime

Exports

Exports

CheckInstall
GetCheckValue
GetInstDir
Init
OnRepair
OnSetup
OnSetupPost
OnUninstall
PopInt
PopString
PushInt
PushString
RemoveUserData
SetProgress
ShowInstall
ShowUnInstall

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 305KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:6 windows x86 arch:x86

127a02894b36e3dd18bd638b1758f9f7

Code Sign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

59:60:6a:c0:0a:2f:9f:36:80:8c:ab:db:6c:6e:7e:37
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

15/06/2016, 00:00

Not After

15/06/2017, 23:59

Subject

CN=Shanghai 2345 Network Technology Co.\,Ltd,OU=IT,O=Shanghai 2345 Network Technology Co.\,Ltd,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

5e:68:d6:11:71:94:63:50:56:00:68:f3:3e:c9:c5:91
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2039, 01:00

Subject

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

04/03/2014, 00:00

Not After

03/03/2024, 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:c5:da:82:02:5a:f1:97:fa:1b:9d:63:a6:c8:cf:40
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

06/05/2016, 00:00

Not After

06/05/2019, 23:59

Subject

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Network Technology Co.\,Ltd,OU=IT,O=Shanghai 2345 Network Technology Co.\,Ltd,L=Shanghai,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0f:db:e6:78:b3:1e:23:2c:ba:5a:e1:4d:9d:bf:1b
Certificate

Issuer

CN=WoSign Time Stamping Services CA G2,O=WoSign CA Limited,C=CN

Not Before

08/04/2015, 01:00

Not After

08/04/2023, 01:00

Subject

CN=WoSign Time Stamping Signer G2,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5e:68:d6:11:71:94:63:50:56:00:68:f3:3e:c9:c5:91
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2039, 01:00

Subject

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

22:bb:56:f8:17:f2:43:b7:6d:6d:18:d7:a6:ec:64:f5:7d:e8:59:be:a9:d6:be:e6:c2:19:9e:f5:81:cb:b8:56
Signer

Actual PE Digest

22:bb:56:f8:17:f2:43:b7:6d:6d:18:d7:a6:ec:64:f5:7d:e8:59:be:a9:d6:be:e6:c2:19:9e:f5:81:cb:b8:56

Digest Algorithm

sha256

PE Digest Matches

true

97:22:0a:20:93:eb:6a:4c:82:ad:37:63:39:bc:81:74:43:e6:a6:48
Signer

Actual PE Digest

97:22:0a:20:93:eb:6a:4c:82:ad:37:63:39:bc:81:74:43:e6:a6:48

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalSize
GlobalFree
lstrcpynW
lstrcpyW
VirtualAlloc
VirtualFree
VirtualProtect
FreeLibrary
GetModuleHandleW
GetProcAddress
lstrlenW
LoadLibraryW
MultiByteToWideChar
WideCharToMultiByte
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 926B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
config.json
dict/addr.dict.pa
dict/anime.dict.pa
dict/art.dict.pa
dict/basketball.dict.pa
dict/car.dict.pa
dict/chinacollege.dict.pa
dict/email.ini.pa
dict/emoji.dat.pa
dict/english.dat.pa
dict/fixedtop.dat.pa
dict/football.dict.pa
dict/idiom.dict.pa
dict/misread.dat
dict/mixed_core.dat.pa
dict/names.dict.pa
dict/online.dict.pa
dict/popular.dict.pa
dict/pyassist.dat.pa
dict/pybase.dat.pa
dict/pycore.dat.pa
dict/simp2trad.dat.pa
dict/sysmodel.dat.pa
dict/sysphrase.ini.pa
dict/url.ini.pa
dict/zisplit.dat.pa
html/error-2.html
.html
html/error.html
.html
libcurl_x86.dll
.dll windows:6 windows x86 arch:x86

777a724a656a3ef52d6326c2df2c7b55

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

d3:de:6e:38:80:74:11:4c:e7:5a:0b:9c:79:00:66:c1:a6:70:dc:30:01:23:d9:0c:b9:cc:65:1e:e9:bc:b1:4b
Signer

Actual PE Digest

d3:de:6e:38:80:74:11:4c:e7:5a:0b:9c:79:00:66:c1:a6:70:dc:30:01:23:d9:0c:b9:cc:65:1e:e9:bc:b1:4b

Digest Algorithm

sha256

PE Digest Matches

true

4f:c1:c3:80:e3:f6:a4:ec:8c:19:76:a1:df:6c:93:28:b0:da:84:9b
Signer

Actual PE Digest

4f:c1:c3:80:e3:f6:a4:ec:8c:19:76:a1:df:6c:93:28:b0:da:84:9b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\dev\RCFL\vendor\depends\curl\out\bin\Win32\release_static\libcurl_x86.pdb

Imports

ws2_32

WSAIoctl
bind
WSASetLastError
socket
setsockopt
recv
getaddrinfo
htons
getsockopt
getsockname
getpeername
WSAGetLastError
connect
closesocket
ntohs
gethostbyname
sendto
recvfrom
send
select
__WSAFDIsSet
ioctlsocket
listen
accept
WSACleanup
WSAStartup
gethostname
freeaddrinfo
shutdown
htonl
ntohl
getservbyname

wldap32

ord26
ord27
ord32
ord41
ord35
ord30
ord200
ord22
ord50
ord60
ord211
ord46
ord79
ord217
ord33
ord301
ord143

kernel32

GetOEMCP
IsValidCodePage
FindNextFileW
FindNextFileA
FindFirstFileExW
FindFirstFileExA
FindClose
GetTimeZoneInformation
SetEndOfFile
SetFileAttributesW
GetFileAttributesExW
FlushFileBuffers
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SleepEx
WaitForSingleObject
CloseHandle
ExpandEnvironmentStringsA
Sleep
GetLastError
SetLastError
FormatMessageA
VerSetConditionMask
GetCPInfo
LoadLibraryA
GetModuleHandleA
GetSystemDirectoryA
VerifyVersionInfoA
FreeLibrary
WaitForMultipleObjects
GetFileType
SetEnvironmentVariableW
ReadFile
PeekNamedPipe
GetTickCount
MultiByteToWideChar
FlushConsoleInputBuffer
WriteFile
GetCurrentThreadId
WideCharToMultiByte
QueryPerformanceCounter
GetCurrentProcessId
GlobalMemoryStatus
GetSystemTime
SystemTimeToFileTime
SetStdHandle
HeapReAlloc
GetACP
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcAddress
SetEnvironmentVariableA
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapFree
HeapAlloc
GetCurrentThread
GetConsoleCP
ReadConsoleW
GetModuleFileNameW
GetModuleFileNameA
ExitProcess
SetConsoleMode
ReadConsoleInputA
PeekConsoleInputA
GetProcessHeap
FindFirstFileA
WriteConsoleW
HeapSize
OutputDebugStringA
OutputDebugStringW
WaitForSingleObjectEx
DecodePointer
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
RaiseException
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetModuleHandleExW
SetFilePointerEx
CreateFileW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetConsoleCtrlHandler
GetConsoleMode
GetNumberOfConsoleInputEvents

user32

GetProcessWindowStation
MessageBoxA
GetDesktopWindow
GetDC
ReleaseDC
GetUserObjectInformationW

gdi32

GetDIBits
GetDeviceCaps
DeleteObject
CreateCompatibleBitmap
GetObjectA

advapi32

CryptCreateHash
CryptEnumProvidersA
CryptSignHashA
CryptDestroyHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextA
ReportEventA
RegisterEventSourceA
DeregisterEventSource

crypt32

CertFreeCertificateContext
CertDuplicateCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertGetCertificateContextProperty
CertOpenStore

Exports

Exports

curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_easy_upkeep
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_global_sslset
curl_maprintf
curl_mfprintf
curl_mime_addpart
curl_mime_data
curl_mime_data_cb
curl_mime_encoder
curl_mime_filedata
curl_mime_filename
curl_mime_free
curl_mime_headers
curl_mime_init
curl_mime_name
curl_mime_subparts
curl_mime_type
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_multi_wait
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_pushheader_byname
curl_pushheader_bynum
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_url
curl_url_cleanup
curl_url_dup
curl_url_get
curl_url_set
curl_version
curl_version_info

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
skin/小Q-开饭啦.wssf
.zip
小Q-开饭啦/2345Skin.ini
小Q-开饭啦/candidateBar_bgX.png
.png
小Q-开饭啦/candidateBar_bgY.png
.png
小Q-开饭啦/candidateBar_msgIco.png
.png
小Q-开饭啦/candidateBar_pageDown_default.png
.png
小Q-开饭啦/candidateBar_pageDown_disable.png
.png
小Q-开饭啦/candidateBar_pageDown_hover.png
.png
小Q-开饭啦/candidateBar_pageDown_pressed.png
.png
小Q-开饭啦/candidateBar_pageUp_default.png
.png
小Q-开饭啦/candidateBar_pageUp_disable.png
.png
小Q-开饭啦/candidateBar_pageUp_hover.png
.png
小Q-开饭啦/candidateBar_pageUp_pressed.png
.png
小Q-开饭啦/capital_default.png
.png
小Q-开饭啦/capital_hover.png
.png
小Q-开饭啦/capital_pressed.png
.png
小Q-开饭啦/chinese_default.png
.png
小Q-开饭啦/chinese_hover.png
.png
小Q-开饭啦/chinese_pressed.png
.png
小Q-开饭啦/english_default.png
.png
小Q-开饭啦/english_hover.png
.png
小Q-开饭啦/english_pressed.png
.png
小Q-开饭啦/punctuation_chinese_default.png
.png
小Q-开饭啦/punctuation_chinese_disable.png
.png
小Q-开饭啦/punctuation_chinese_hover.png
.png
小Q-开饭啦/punctuation_chinese_pressed.png
.png
小Q-开饭啦/punctuation_english_default.png
.png
小Q-开饭啦/punctuation_english_disable.png
.png
小Q-开饭啦/punctuation_english_hover.png
.png
小Q-开饭啦/punctuation_english_pressed.png
.png
小Q-开饭啦/punctuation_fullAngle_default.png
.png
小Q-开饭啦/punctuation_fullAngle_hover.png
.png
小Q-开饭啦/punctuation_fullAngle_pressed.png
.png
小Q-开饭啦/punctuation_halfAngle_default.png
.png
小Q-开饭啦/punctuation_halfAngle_hover.png
.png
小Q-开饭啦/punctuation_halfAngle_pressed.png
.png
小Q-开饭啦/setting_default.png
.png
小Q-开饭啦/setting_hover.png
.png
小Q-开饭啦/setting_pressed.png
.png
小Q-开饭啦/skinPreview.png
.png
小Q-开饭啦/statusBar_bg.png
.png
skin/星光娃娃.wssf
.zip
星光娃娃_S00438/2345Skin.ini
星光娃娃_S00438/candidateBar_bgX.png
.png
星光娃娃_S00438/candidateBar_bgY.png
.png
星光娃娃_S00438/candidateBar_msgIco.png
.png
星光娃娃_S00438/candidateBar_pageDown_default.png
.png
星光娃娃_S00438/candidateBar_pageDown_disable.png
.png
星光娃娃_S00438/candidateBar_pageDown_hover.png
.png
星光娃娃_S00438/candidateBar_pageDown_pressed.png
.png
星光娃娃_S00438/candidateBar_pageUp_default.png
.png
星光娃娃_S00438/candidateBar_pageUp_disable.png
.png
星光娃娃_S00438/candidateBar_pageUp_hover.png
.png
星光娃娃_S00438/candidateBar_pageUp_pressed.png
.png
星光娃娃_S00438/capital_default.png
.png
星光娃娃_S00438/capital_hover.png
.png
星光娃娃_S00438/capital_pressed.png
.png
星光娃娃_S00438/chinese_default.png
.png
星光娃娃_S00438/chinese_hover.png
.png
星光娃娃_S00438/chinese_pressed.png
.png
星光娃娃_S00438/english_default.png
.png
星光娃娃_S00438/english_hover.png
.png
星光娃娃_S00438/english_pressed.png
.png
星光娃娃_S00438/punctuation_chinese_default.png
.png
星光娃娃_S00438/punctuation_chinese_disable.png
.png
星光娃娃_S00438/punctuation_chinese_hover.png
.png
星光娃娃_S00438/punctuation_chinese_pressed.png
.png
星光娃娃_S00438/punctuation_english_default.png
.png
星光娃娃_S00438/punctuation_english_disable.png
.png
星光娃娃_S00438/punctuation_english_hover.png
.png
星光娃娃_S00438/punctuation_english_pressed.png
.png
星光娃娃_S00438/punctuation_fullAngle_default.png
.png
星光娃娃_S00438/punctuation_fullAngle_hover.png
.png
星光娃娃_S00438/punctuation_fullAngle_pressed.png
.png
星光娃娃_S00438/punctuation_halfAngle_default.png
.png
星光娃娃_S00438/punctuation_halfAngle_hover.png
.png
星光娃娃_S00438/punctuation_halfAngle_pressed.png
.png
星光娃娃_S00438/setting_default.png
.png
星光娃娃_S00438/setting_hover.png
.png
星光娃娃_S00438/setting_pressed.png
.png
星光娃娃_S00438/skinPreview.png
.png
星光娃娃_S00438/statusBar_bg.png
.png
skin/简洁Mac.wssf
.zip
Mac/2345Skin.ini
Mac/candidateBar_bgX.png
.png
Mac/candidateBar_bgY.png
.png
Mac/candidateBar_msgIco.png
.png
Mac/candidateBar_pageDown_default.png
.png
Mac/candidateBar_pageDown_disable.png
.png
Mac/candidateBar_pageDown_hover.png
.png
Mac/candidateBar_pageDown_pressed.png
.png
Mac/candidateBar_pageUp_default.png
.png
Mac/candidateBar_pageUp_disable.png
.png
Mac/candidateBar_pageUp_hover.png
.png
Mac/candidateBar_pageUp_pressed.png
.png
Mac/capital_default.png
.png
Mac/capital_hover.png
.png
Mac/capital_pressed.png
.png
Mac/chinese_default.png
.png
Mac/chinese_hover.png
.png
Mac/chinese_pressed.png
.png
Mac/english_default.png
.png
Mac/english_hover.png
.png
Mac/english_pressed.png
.png
Mac/punctuation_chinese_default.png
.png
Mac/punctuation_chinese_disable.png
.png
Mac/punctuation_chinese_hover.png
.png
Mac/punctuation_chinese_pressed.png
.png
Mac/punctuation_english_default.png
.png
Mac/punctuation_english_disable.png
.png
Mac/punctuation_english_hover.png
.png
Mac/punctuation_english_pressed.png
.png
Mac/punctuation_fullAngle_default.png
.png
Mac/punctuation_fullAngle_hover.png
.png
Mac/punctuation_fullAngle_pressed.png
.png
Mac/punctuation_halfAngle_default.png
.png
Mac/punctuation_halfAngle_hover.png
.png
Mac/punctuation_halfAngle_pressed.png
.png
Mac/setting_default.png
.png
Mac/setting_hover.png
.png
Mac/setting_pressed.png
.png
Mac/skinPreview.png
.png
Mac/statusBar_bg.png
.png
skin/经典皮肤.wssf
.zip
经典皮肤/2345Skin.ini
经典皮肤/candidateBar_bgX.png
.png
经典皮肤/candidateBar_bgY.png
.png
经典皮肤/candidateBar_logo.png
.png
经典皮肤/candidateBar_msgIco.png
.png
经典皮肤/candidateBar_pageDown_default.png
.png
经典皮肤/candidateBar_pageDown_disable.png
.png
经典皮肤/candidateBar_pageDown_hover.png
.png
经典皮肤/candidateBar_pageDown_pressed.png
.png
经典皮肤/candidateBar_pageUp_default.png
.png
经典皮肤/candidateBar_pageUp_disable.png
.png
经典皮肤/candidateBar_pageUp_hover.png
.png
经典皮肤/candidateBar_pageUp_pressed.png
.png
经典皮肤/capital_default.png
.png
经典皮肤/capital_hover.png
.png
经典皮肤/capital_pressed.png
.png
经典皮肤/chinese_default.png
.png
经典皮肤/chinese_hover.png
.png
经典皮肤/chinese_pressed.png
.png
经典皮肤/english_default.png
.png
经典皮肤/english_hover.png
.png
经典皮肤/english_pressed.png
.png
经典皮肤/punctuation_chinese_default.png
.png
经典皮肤/punctuation_chinese_disable.png
.png
经典皮肤/punctuation_chinese_hover.png
.png
经典皮肤/punctuation_chinese_pressed.png
.png
经典皮肤/punctuation_english_default.png
.png
经典皮肤/punctuation_english_disable.png
.png
经典皮肤/punctuation_english_hover.png
.png
经典皮肤/punctuation_english_pressed.png
.png
经典皮肤/punctuation_fullAngle_default.png
.png
经典皮肤/punctuation_fullAngle_hover.png
.png
经典皮肤/punctuation_fullAngle_pressed.png
.png
经典皮肤/punctuation_halfAngle_default.png
.png
经典皮肤/punctuation_halfAngle_hover.png
.png
经典皮肤/punctuation_halfAngle_pressed.png
.png
经典皮肤/setting_default.png
.png
经典皮肤/setting_hover.png
.png
经典皮肤/setting_pressed.png
.png
经典皮肤/skin_default.png
.png
经典皮肤/skin_hover.png
.png
经典皮肤/skin_pressed.png
.png
经典皮肤/statusBar_bg.png
.png
skin/长草的颜文字君.wssf
.zip
长草的颜文字君/2345Skin.ini
长草的颜文字君/candidateBar_bgX.png
.png
长草的颜文字君/candidateBar_bgY.png
.png
长草的颜文字君/candidateBar_msgIco.png
.png
长草的颜文字君/candidateBar_pageDown_default.png
.png
长草的颜文字君/candidateBar_pageDown_disable.png
.png
长草的颜文字君/candidateBar_pageDown_hover.png
.png
长草的颜文字君/candidateBar_pageDown_pressed.png
.png
长草的颜文字君/candidateBar_pageUp_default.png
.png
长草的颜文字君/candidateBar_pageUp_disable.png
.png
长草的颜文字君/candidateBar_pageUp_hover.png
.png
长草的颜文字君/candidateBar_pageUp_pressed.png
.png
长草的颜文字君/capital_default.png
.png
长草的颜文字君/capital_hover.png
.png
长草的颜文字君/capital_pressed.png
.png
长草的颜文字君/chinese_default.png
.png
长草的颜文字君/chinese_hover.png
.png
长草的颜文字君/chinese_pressed.png
.png
长草的颜文字君/english_default.png
.png
长草的颜文字君/english_hover.png
.png
长草的颜文字君/english_pressed.png
.png
长草的颜文字君/punctuation_chinese_default.png
.png
长草的颜文字君/punctuation_chinese_disable.png
.png
长草的颜文字君/punctuation_chinese_hover.png
.png
长草的颜文字君/punctuation_chinese_pressed.png
.png
长草的颜文字君/punctuation_english_default.png
.png
长草的颜文字君/punctuation_english_disable.png
.png
长草的颜文字君/punctuation_english_hover.png
.png
长草的颜文字君/punctuation_english_pressed.png
.png
长草的颜文字君/punctuation_fullAngle_default.png
.png
长草的颜文字君/punctuation_fullAngle_hover.png
.png
长草的颜文字君/punctuation_fullAngle_pressed.png
.png
长草的颜文字君/punctuation_halfAngle_default.png
.png
长草的颜文字君/punctuation_halfAngle_hover.png
.png
长草的颜文字君/punctuation_halfAngle_pressed.png
.png
长草的颜文字君/setting_default.png
.png
长草的颜文字君/setting_hover.png
.png
长草的颜文字君/setting_pressed.png
.png
长草的颜文字君/skinPreview.png
.png
长草的颜文字君/statusBar_bg.png
.png
tool/2345DLAgent.dll
.dll windows:5 windows x86 arch:x86

296a27d87c324a03171bcd47ec1b5e1f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

60:65:7f:1f:af:7a:10:8e:31:8e:4e:54:00:ee:8f:fa:2c:de:48:44:10:3b:c8:32:40:ba:05:7e:30:b0:cf:6e
Signer

Actual PE Digest

60:65:7f:1f:af:7a:10:8e:31:8e:4e:54:00:ee:8f:fa:2c:de:48:44:10:3b:c8:32:40:ba:05:7e:30:b0:cf:6e

Digest Algorithm

sha256

PE Digest Matches

true

e1:2c:66:93:3a:4e:70:58:e5:9b:9e:2d:5d:6b:a9:d8:d3:e5:54:49
Signer

Actual PE Digest

e1:2c:66:93:3a:4e:70:58:e5:9b:9e:2d:5d:6b:a9:d8:d3:e5:54:49

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\dev\CommonPlatform\2345DLAgent\bin\release_static\pdb\2345DLAgent.pdb

Imports

kernel32

PostQueuedCompletionStatus
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TlsGetValue
VerSetConditionMask
CloseHandle
SetLastError
CreateIoCompletionPort
GetQueuedCompletionStatus
SetEvent
WaitForSingleObject
SleepEx
CreateEventW
SetWaitableTimer
WaitForMultipleObjects
QueueUserAPC
TerminateThread
TlsSetValue
VerifyVersionInfoW
CreateDirectoryW
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileInformationByHandle
GetFileSizeEx
ReadFile
RemoveDirectoryW
SetEndOfFile
SetFilePointerEx
WriteFile
DeviceIoControl
TlsFree
GetCurrentProcess
GetProcAddress
LoadLibraryA
CopyFileW
CreateHardLinkW
GetDriveTypeW
ReleaseSemaphore
WaitForSingleObjectEx
CreateSemaphoreW
CreateWaitableTimerW
GetCurrentThreadId
CancelIo
GetSystemTimeAsFileTime
GetModuleHandleA
FreeLibrary
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTime
SystemTimeToFileTime
GetStdHandle
GetFileType
FindNextFileA
QueryPerformanceCounter
GetCurrentProcessId
GetTickCount
GlobalMemoryStatus
FlushConsoleInputBuffer
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
InterlockedIncrement
WideCharToMultiByte
InterlockedExchangeAdd
TlsAlloc
Sleep
GetLastError
MultiByteToWideChar
InterlockedDecrement
GetOverlappedResult
InterlockedExchange
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExA
SetStdHandle
GetConsoleCP
FlushFileBuffers
HeapSize
HeapReAlloc
ReadConsoleW
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetModuleFileNameA
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
SetConsoleCtrlHandler
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RaiseException
InterlockedFlushSList
FormatMessageW
SwitchToThread
GetModuleHandleW
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
HeapAlloc
HeapFree
GetProcessHeap
ResetEvent
CreateEventA
OpenEventA
ResumeThread
FormatMessageA
LocalFree
QueryPerformanceFrequency
InitializeCriticalSection
ExpandEnvironmentStringsW
GetModuleFileNameW
GetFileAttributesW
GetLongPathNameW
GetFileAttributesExW
LoadLibraryW
SetFilePointer
GetFileSize
lstrlenW
GetVersionExW
lstrcmpiW
LockResource
LoadResource
FindResourceW
OpenProcess
FileTimeToSystemTime
GetACP
SetFileTime
GetFileTime
GetFullPathNameW
GetTempPathW
GetSystemDirectoryW
GetCurrentDirectoryW
MoveFileExW
CreateMutexW
ReleaseMutex
GetEnvironmentVariableW
LoadLibraryExW
RtlUnwind

user32

GetProcessWindowStation
MessageBoxA
GetUserObjectInformationW

advapi32

RegisterEventSourceA
DeregisterEventSource
ReportEventA

ws2_32

WSAIoctl
select
connect
accept
__WSAFDIsSet
freeaddrinfo
getaddrinfo
WSASocketW
WSASend
WSARecv
setsockopt
listen
shutdown
WSASendTo
ioctlsocket
closesocket
bind
htons
ntohs
WSACleanup
ntohl
WSASetLastError
WSAStringToAddressW
WSAStartup
WSAAddressToStringW
htonl
WSAGetLastError
WSARecvFrom
getpeername
socket
recv
getsockname
send
getsockopt

mswsock

AcceptEx
GetAcceptExSockaddrs

Exports

Exports

PerformDownload

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 620KB - Virtual size: 620KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tool/2345GameHall.exe
.exe windows:5 windows x86 arch:x86

8869276eb0e2a3f0de7742daa57a3c5b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

6d:ed:b1:f5:09:7a:b9:85:19:b8:c5:29:bd:42:77:2d:05:b2:20:d2:20:29:8e:a0:38:63:38:8c:47:a0:64:b1
Signer

Actual PE Digest

6d:ed:b1:f5:09:7a:b9:85:19:b8:c5:29:bd:42:77:2d:05:b2:20:d2:20:29:8e:a0:38:63:38:8c:47:a0:64:b1

Digest Algorithm

sha256

PE Digest Matches

true

4f:a7:dc:f4:39:4d:aa:d8:2a:16:b1:c3:bf:30:a4:97:e1:aa:85:73
Signer

Actual PE Digest

4f:a7:dc:f4:39:4d:aa:d8:2a:16:b1:c3:bf:30:a4:97:e1:aa:85:73

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\gamehall\GameHall\out\Release\2345GameHall.pdb

Imports

kernel32

GetProcAddress
CloseHandle
HeapAlloc
GetCurrentProcess
HeapFree
GetModuleHandleW
GetProcessHeap
GetModuleFileNameW
GetFileSize
SetFilePointer
OpenMutexW
CreateFileW
RemoveDirectoryW
CreateProcessW
lstrcmpiW
GetCurrentProcessId
FindFirstFileW
FileTimeToSystemTime
FindClose
WritePrivateProfileStringW
LoadLibraryW
GetPrivateProfileStringW
FreeLibrary
WriteFile
SetErrorMode
SetEnvironmentVariableA
FlushFileBuffers
ReadConsoleW
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetFileAttributesW
ExpandEnvironmentStringsW
CreateMutexW
WaitForSingleObject
Sleep
GetLastError
ReleaseMutex
GetLongPathNameW
GetFileAttributesExW
FindResourceW
LoadResource
GetVersionExW
LockResource
GetSystemInfo
OpenProcess
QueryDosDeviceW
WideCharToMultiByte
GetACP
MultiByteToWideChar
FindNextFileW
GetEnvironmentVariableW
GetCurrentThreadId
LocalFree
SetEndOfFile
SetFileTime
ReadFile
GetFileTime
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
lstrlenW
GetFileSizeEx
DeleteFileW
GetFullPathNameW
GetTempFileNameW
MoveFileExW
CreateDirectoryW
GetSystemDirectoryW
CopyFileW
GetTempPathW
GetCurrentDirectoryW
MoveFileW
GetWindowsDirectoryW
SetFileAttributesW
GetLogicalDriveStringsW
LoadLibraryExW
GetTickCount
FormatMessageW
GlobalMemoryStatusEx
SetEvent
WaitForMultipleObjects
ResetEvent
CreateEventW
InterlockedExchangeAdd
InterlockedExchange
SetLastError
InitializeCriticalSectionAndSpinCount
ResumeThread
GetExitCodeProcess
DeviceIoControl
EncodePointer
DecodePointer
GetCommandLineW
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
CreateThread
ExitThread
ExitProcess
GetModuleHandleExW
HeapSize
GetStdHandle
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsValidCodePage
GetOEMCP
GetCPInfo
GetStringTypeW
GetTimeZoneInformation
HeapReAlloc
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
OutputDebugStringW

shlwapi

SHGetValueW

Sections

.text
Size: 884KB - Virtual size: 883KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tool/2345InstDLL.dll
.dll windows:5 windows x86 arch:x86

6fff1f67d6e5b212d2286b14de104d86

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

41:73:7f:42:d1:1d:a4:26:3a:90:b6:2d:18:ad:f7:ca:15:ae:07:55:0d:45:07:0f:9b:0a:de:5f:4e:aa:b2:88
Signer

Actual PE Digest

41:73:7f:42:d1:1d:a4:26:3a:90:b6:2d:18:ad:f7:ca:15:ae:07:55:0d:45:07:0f:9b:0a:de:5f:4e:aa:b2:88

Digest Algorithm

sha256

PE Digest Matches

true

e3:a6:0f:7c:4a:c2:c3:93:72:5b:f8:88:f6:f2:a1:eb:d3:d2:76:73
Signer

Actual PE Digest

e3:a6:0f:7c:4a:c2:c3:93:72:5b:f8:88:f6:f2:a1:eb:d3:d2:76:73

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

FreeLibrary
LoadLibraryW
GetProcAddress
LocalAlloc
GetCurrentProcessId
LocalFree
GetTickCount
lstrcpynW
WaitForSingleObject
GetExitCodeProcess
GetLastError
CloseHandle
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
FlushInstructionCache
RaiseException
SetLastError
EnterCriticalSection
DecodePointer
DeleteCriticalSection
GetCurrentThreadId
VirtualFree
VirtualAlloc
LoadLibraryA
GetModuleHandleA
Sleep
GetModuleHandleW
GetFileAttributesW
ExpandEnvironmentStringsW
CreateProcessW
WaitForMultipleObjects
HeapAlloc
HeapFree
GetProcessHeap
OpenProcess
GetVersionExW
QueryDosDeviceW
FindResourceW
LoadResource
LockResource
GetSystemInfo
lstrcmpiW
InitializeCriticalSection
SetEvent
ResetEvent
CreateEventW
FindFirstFileW
CreateFileW
GetLongPathNameW
GetFileAttributesExW
ResumeThread
GetEnvironmentVariableW
LoadLibraryExW
GetFileSize
SetFilePointer
SetEndOfFile
SetFileTime
WriteFile
ReadFile
GetFileTime
WideCharToMultiByte
GetACP
MultiByteToWideChar
lstrlenW
GetFileSizeEx
GetModuleFileNameW
FindClose
FindNextFileW
GetLogicalDriveStringsW
FileTimeToSystemTime
GetFullPathNameW
MoveFileExW
CreateDirectoryW
GetSystemDirectoryW
GetTempPathW
GetCurrentDirectoryW
MoveFileW
RemoveDirectoryW
SetFileAttributesW
InterlockedExchangeAdd
FormatMessageW
InterlockedExchange
CreateMutexW
ReleaseMutex
InterlockedPushEntrySList
GlobalMemoryStatusEx
ReadConsoleW
WriteConsoleW
SetStdHandle
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
OutputDebugStringW
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
HeapReAlloc
GetOEMCP
IsValidCodePage
GetStdHandle
HeapSize
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
RtlUnwind
TerminateProcess
GetCurrentProcess
SetEnvironmentVariableA
InitializeSListHead
InterlockedPopEntrySList
DeleteFileW
DeviceIoControl
ExitThread
CreateThread
GetCommandLineA
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
IsDebuggerPresent
GetModuleHandleExW
ExitProcess
EncodePointer
GetStringTypeW
VirtualQuery
GetSystemTimeAsFileTime
GetModuleHandleA
CreateEventA
GetModuleFileNameW
LoadLibraryA
FreeLibrary
TerminateProcess
GetCurrentProcess
GetSystemInfo
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
GetTickCount
GlobalFree
GetProcAddress
LocalAlloc
LocalFree
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
LoadResource
MultiByteToWideChar
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetCommandLineA
RaiseException
RtlUnwind
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapReAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

wsprintfW
DestroyIcon
CallWindowProcW
DefWindowProcW
IsMenu
TrackPopupMenu
RegisterWindowMessageW
KillTimer
GetSubMenu
SetForegroundWindow
GetMenuDefaultItem
LoadMenuW
GetCursorPos
SetMenuDefaultItem
CreateWindowExW
SendMessageW
DestroyMenu
DestroyWindow
GetMessageW
PostQuitMessage
LoadImageW
UnregisterClassW
PostMessageW
LoadCursorW
GetClassInfoExW
TranslateMessage
RegisterClassExW
GetWindowLongW
EnableMenuItem
SetWindowLongW
IsWindow
DispatchMessageW
GetUserObjectInformationW
CharUpperBuffW
MessageBoxW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW

shell32

Shell_NotifyIconW

wtsapi32

WTSSendMessageW

Exports

Exports

��W�z'�Λ��ܗ��Te��Z�,�Խ�qҷaY�6�}��289�Nc��ő��'R#��ɖZ�rF [Kz@<�.H(+f(3n|X��|`�6n�+|��J�ݑo��5tu>��P�֠��?Յ*�g��f=�z>��(~t�V��w�3D��1��]4��PCV��zyM֑]$1"� ��A|Q��R��oB >��`��$v��&_�uA �FXZ�=k��XS�Fac�SA�U@�\��OĎ4^(Oyۖ�h��i(K�_A��F��F�T�nw��,sqA`�I��8h�+޽�"�ſm�.�Oa�/��'j��њ.1�*72��F�2^�겞��fL8�2��jh8U��Vr�'�Z3x�f�fCb��O])gd'�F�<|�!��t>]�� :A�!0�y��eM�Fd �R��쀗��m<�/�_ )��tf�j��bw��M_l<[;j�n$��o@!��C��Ik��bw��(��3�P �/8��0�(��$?��,��۟K-��p�&��(wdj��#��X�.��J��"8��a��!�襧�*A�&MWD~%��U�pRB��2EϪ� ~+ o�c�dAC<��gˀ�(EI��h��ֲ��o��k�:'��8UT �2��zl��}2�υ;�^)&mP�S�C�}WE� �� ]_�۫��Ӛ��`�,��ްy��#/�f~��h �"�4<S� Mh��FF,P�*:��#/�@j�Z��je��y��Γ-��L��k��c�S��Gv��p�IB[�:C�gՄz��V�c�:[�іqG�W L�t� �/�&O��̬<�i�1�# ��IiΗb��.O�ˠ;��P�R��[@0*Cr��-4ֶ�Z:�~U��#�C�t<�nP�Ѽ\�+�ZFU��Sk�JGN�� [�眣��,~��2t*Dl<*��hLZ^b�B��z>�D��;��-��c=t��o< O;#�&�%��a#Q��:�X��b��)c�լ6�-�n� ��F��x2;M� \ �jβ��`�A��>�H�Z��3[��~��2��a 4�/�r#��Bȟ@��.A�+8��V�MEDpE��yBg�� S��)�ܘ̵麙��`ۙ��olg�L�b ��TϜ��o1b�f�JuK�]��8≝�/��b�H�</n�t?�&��e��ML-x��ͪㆼ�n^��+Bh��R��j��;(�N8E��&��-�:Eʲ��7/�� D��=��ie�a� B��ћKO*Ӗ��"��`�|w�s��/��l�D��0�@��G_2�v�`ɱ��lo^:��p��g��F!�s�T�a0O��V��ʞ@f��{��H[n�#��0�3�So�7��|��X��4�j��D�/��X#T�0^CБ�-��R��5��lH�]��~ |ۤEM�[�=)�<�Un/��F�Z�^�,��L�K��i-��/+;��f��2�$ސ��3l��Bܘ�<G�J�[3Q��.�bl� h|�r�� !{��k+͛�+��W"��e�L�;q��m�\��5�rx� s�G!�r9㔩�FT��(6��捚C-}��\R;��Rs88/�M#��;�~��v�c��$_9T��K�X7��;~��R��C(�o�?��xyI��9�Vg}�<��[��8��^i��*�>=o��,��k"��1� ��)Brl.0�*m7N�mB/{O�$��?[�>�I�n��;*��y�VlS`H��`Y& n�6�ӓ��-ϝOvgǛ��ch9�( ®_��I��8E� ^�~��9P�.�_�6o�4cB0��t� :.�֕�Ϲ��m��H��|�AW,ԫ�}�e��6��N-�w��,��0�Y��`5�0��c�k��!�ژ��i�̩��`l��#�Ǘ3�=��\�=�D�� ώg��Y˸Ы�v�4�<ܨ��S4y��Ï��ۙ�8y;�?�� IVp�^rr��xYU�<�#��ZR��{�T��K��u{.��K:�(x�1��$F<E��\��l<�[��='O�#}��*��7p��kTq]$�m0��CRdnLR�Ǯ�[%�v�;1$�8k��xG�lk>�/��z.`�͞��j��D�ҫ��`B6��6�:��:+�v�`�6X]�SW�[�O��hI��p�X��_��pZ�g1bW��Y/�xG��S�� (��P�,+8g(��x��U1.��p��ֳ\�na��7}�!��c�g��X4�� -�$�/zr��U�# x��,��|G��B-}!Yk�S�}��C��W�|�t��!�D��1��"�e�"ĺ��،f��[��$Z�?Şh�� x��#�0L(z��ϬZ��Bg�X-�7��vg�s6ՙ�9V*��_�?zzY��췐R&�;�� ?= xr+l��n3h�xW�A]��=�k�Ԗ�[MQY`��l��5I�"��J�ׁ��}��~��Z��8��q�%��x�<з��k>�� Z��>��LՋ7v� 6.S3�5|��(SXҵ� &�'��Iv+�&WL�&/.��(.լ|�Jl6w ��E�o�V�v��8)�aÔ`�q��?��:u��A�*�h�`��w?�z��΃�-��v�4��z-&�:A�C^|c�{�:# �q0P+�o�3bRlz��,�?K;�%�MZ\EG�'��H&w��7 ɽmڔ5-2�MBWӀp��"�&��E�DmL��`|:��O��C��DI��m�ه΋Ŏ3݋�yy �^ޜ�� Eµ�]�_|��xА�I0jTY�
CanInstallBrowser
CanInstallCustomProduct
CanInstallHaoZip
CanInstallIME
CanInstallPic
CanInstallSafe
FixSoftware
GetActionType
Initialize
InstallBrowser
InstallCustomProduct
InstallHaoZip
InstallIme
InstallPic
InstallSafe
ProtectInstallBrowser
ProtectInstallCustomProduct
ProtectInstallHaoZip
ProtectInstallIME
ProtectInstallPic
ProtectInstallSafe
SetDllInternalData
SetProductVersion
UnInitialize

Sections

.text
Size: - Virtual size: 941KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bin0
Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bin1
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
tool/2345InstUI.dll
.dll windows:5 windows x86 arch:x86

fe1b4baca00455634206faf12c9b7713

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

48:df:1a:30:9a:7d:a9:a4:9a:0b:0e:98:a0:9b:55:67:52:d0:2f:8f:d3:8b:40:35:34:0f:d6:7e:26:3e:8d:5d
Signer

Actual PE Digest

48:df:1a:30:9a:7d:a9:a4:9a:0b:0e:98:a0:9b:55:67:52:d0:2f:8f:d3:8b:40:35:34:0f:d6:7e:26:3e:8d:5d

Digest Algorithm

sha256

PE Digest Matches

true

21:c2:8b:e8:c7:54:1c:27:71:a9:34:93:44:e0:2b:d6:c1:cd:69:16
Signer

Actual PE Digest

21:c2:8b:e8:c7:54:1c:27:71:a9:34:93:44:e0:2b:d6:c1:cd:69:16

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\trunk\CommonPlatform\2345InstAgent\bin\Release\2345InstUI.pdb

Imports

sensapi

IsNetworkAlive

kernel32

FindResourceW
LoadResource
GetVersionExW
LockResource
GetSystemInfo
lstrlenW
lstrcatW
lstrcpyW
OpenProcess
QueryDosDeviceW
FindFirstFileW
GetLongPathNameW
GetFileAttributesExW
FindClose
FindNextFileW
SetEvent
ResetEvent
CreateEventW
InterlockedExchangeAdd
GetFileSizeEx
DeleteFileW
HeapAlloc
HeapFree
GetProcessHeap
GlobalFree
LocalFree
GetLogicalDriveStringsW
GetFullPathNameW
CreateDirectoryW
GetSystemDirectoryW
GetTempPathW
GetCurrentDirectoryW
GetTickCount
WaitForMultipleObjects
FormatMessageW
InterlockedExchange
GlobalMemoryStatusEx
GetEnvironmentVariableW
GetCurrentProcessId
LoadLibraryExW
FileTimeToSystemTime
DeviceIoControl
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
ReleaseSemaphore
VirtualProtect
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
WaitForSingleObjectEx
CreateTimerQueue
DuplicateHandle
InitializeCriticalSectionAndSpinCount
lstrcpynW
lstrcmpW
RaiseException
ReleaseMutex
CreateMutexW
ExpandEnvironmentStringsW
GetFileAttributesW
GetModuleHandleW
ResumeThread
WaitForSingleObject
CloseHandle
GetFileTime
CreateFileW
ReadFile
WriteFile
SetFileTime
SetEndOfFile
SetFilePointer
GetFileSize
InitializeCriticalSection
MultiByteToWideChar
GetACP
WideCharToMultiByte
GetCurrentThreadId
VirtualFree
VirtualAlloc
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EnterCriticalSection
SetLastError
FlushInstructionCache
GlobalUnlock
GetModuleFileNameW
MulDiv
LeaveCriticalSection
Sleep
GlobalAlloc
GlobalLock
GetCurrentProcess
SetErrorMode
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
GetProcAddress
LoadLibraryW
GetLastError
EncodePointer
GetSystemTimeAsFileTime
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
CreateThread
ExitThread
LocalAlloc
MapViewOfFileEx
CreateFileMappingW
UnmapViewOfFile
QueryPerformanceFrequency
FreeResource
SetWaitableTimer
CreateWaitableTimerW
SizeofResource
SetEnvironmentVariableA
ReadConsoleW
WriteConsoleW
SetStdHandle
FlushFileBuffers
OutputDebugStringW
SetFilePointerEx
RtlUnwind
ExitProcess
GetModuleHandleExW
HeapSize
GetStdHandle
HeapReAlloc
GetCurrentThread
GetFileType
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
FreeLibrary
DeleteCriticalSection
DecodePointer
TlsAlloc
TlsGetValue
GetConsoleMode
GetConsoleCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeZoneInformation
GetStringTypeW
GetCPInfo
GetOEMCP
IsValidCodePage
CreateSemaphoreW
TlsFree
TlsSetValue

user32

GetKeyState
CreateWindowExW
IsWindow
EnumChildWindows
SetWindowPos
GetSysColor
GetDesktopWindow
RedrawWindow
GetDlgItem
MonitorFromWindow
ReleaseDC
GetSystemMetrics
GetClassNameW
GetWindowTextW
GetAncestor
GetWindowLongW
InvalidateRect
RegisterClassExW
GetForegroundWindow
GetDC
SetPropW
GetClassInfoExW
PtInRect
BeginPaint
SetFocus
CreateAcceleratorTableW
GetClientRect
LoadCursorW
InvalidateRgn
GetParent
GetFocus
IsZoomed
PostMessageW
SetCapture
IsChild
FillRect
RegisterWindowMessageW
CharNextW
GetWindowRect
ScreenToClient
DestroyAcceleratorTable
RemovePropW
GetAsyncKeyState
IsClipboardFormatAvailable
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
GetIconInfo
DrawIconEx
SetForegroundWindow
GetCaretBlinkTime
ToAscii
GetKeyboardState
LoadImageW
LoadBitmapW
MsgWaitForMultipleObjects
SetCaretPos
SetRect
UpdateLayeredWindow
SetRectEmpty
UnionRect
IntersectRect
SystemParametersInfoW
PostQuitMessage
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
MapWindowPoints
ValidateRect
SetWindowRgn
EnableWindow
OpenClipboard
MessageBoxW
UnregisterClassW
GetActiveWindow
EndDialog
SetWindowLongW
LoadIconW
MoveWindow
GetShellWindow
GetWindow
GetWindowThreadProcessId
DefWindowProcW
CallWindowProcW
GetMonitorInfoW
GetPropW
SetWindowTextW
SendMessageW
EndPaint
ClientToScreen
DestroyWindow
GetWindowTextLengthW
IsIconic
GetWindowDC
SetCursor
GetCursorPos
CopyRect
OffsetRect
IsRectEmpty
EqualRect
SetTimer
KillTimer
GetClassLongW
DialogBoxParamW
TrackMouseEvent
ShowWindow
ShowWindowAsync
IsWindowVisible
ReleaseCapture

gdi32

BitBlt
GetDeviceCaps
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectW
GetStockObject
CreateSolidBrush
SelectObject
CreateRectRgn
SelectClipRgn
SetViewportOrgEx
SetGraphicsMode
SetWorldTransform
CreateRectRgnIndirect
CreatePolygonRgn
CreateFontIndirectW
SetBkColor
SetTextColor
EnumFontsW
GetClipBox
CreateDIBSection
CreateRoundRectRgn
PtInRegion
CreateDCW
GetDIBits
ExtTextOutW
DeleteDC

advapi32

RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegQueryInfoKeyW

shell32

DragFinish
DragQueryFileW
SHGetSpecialFolderPathW
ord680

ole32

CoCreateInstance
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
StringFromGUID2
OleInitialize
OleUninitialize
CoTaskMemFree
CoGetClassObject
CoTaskMemAlloc
CoTaskMemRealloc

oleaut32

SysFreeString
VarUI4FromStr
DispCallFunc
SysAllocString
SysStringLen
LoadRegTypeLi
OleCreateFontIndirect
SysAllocStringLen
VariantInit
LoadTypeLi
VariantClear

shlwapi

ord12
StrToIntA
PathFindFileNameW

comctl32

InitCommonControlsEx
_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipCloneBitmapAreaI
GdipCreatePath
GdipDeletePath
GdipClosePathFigure
ord1
GdipImageGetFrameDimensionsCount
GdipGetPathWorldBounds
GdipCreateMatrix
GdipFree
GdipDeleteMatrix
GdipGetMatrixElements
GdipCloneRegion
GdipDeleteRegion
GdipTransformRegion
GdipCloneBrush
GdipDeleteBrush
GdipCreateTexture
GdipGetTextureTransform
GdipCreateSolidFill
GdipCreateLineBrushI
GdipSetLinePresetBlend
GdipSetLineWrapMode
GdipGetLineTransform
GdipCreatePen1
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipAddPathString
GdipCloneImage
GdipDeletePen
GdipSetPenDashStyle
GdipGetImageGraphicsContext
GdipCloneBitmapArea
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipAlloc
GdiplusStartup
GdiplusShutdown
GdipCreateMatrix2
GdipSetLineTransform
GdipSetTextureTransform
GdipGetBrushType
GdipCombineRegionRegion
GdipCombineRegionPath
GdipCreateRegionPath
GdipAddPathEllipseI
GdipAddPathRectangleI
GdipAddPathBezierI
GdipAddPathArcI
GdipAddPathLineI
GdipSetStringFormatTrimming
GdipGetStringFormatLineAlign
GdipSetStringFormatLineAlign
GdipGetStringFormatAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipMeasureString
GdipDrawString
GdipGetFontSize
GdipGetFontStyle
GdipGetFamily
GdipDeleteFont
GdipCreateFont
GdipGetLineSpacing
GdipGetCellDescent
GdipGetCellAscent
GdipGetEmHeight
GdipGetFamilyName
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipEndContainer
GdipBeginContainer2
GdipRestoreGraphics
GdipSaveGraphics
GdipGetClipBoundsI
GdipSetClipRegion
GdipSetClipRectI
GdipDrawImageRectRectI
GdipDrawImageRectRect
GdipFillPath
GdipFillEllipse
GdipFillRectangleI
GdipGraphicsClear
GdipDrawPath
GdipDrawRectangle
GdipSetImageAttributesWrapMode
GdipDrawLine
GdipRotateWorldTransform
GdipScaleWorldTransform
GdipTranslateWorldTransform
GdipMultiplyWorldTransform
GdipSetCompositingMode
GdipCreateHBITMAPFromBitmap
GdipGetInterpolationMode
GdipSetInterpolationMode
GdipGetTextRenderingHint
GdipSetTextRenderingHint
GdipSetPixelOffsetMode
GdipGetSmoothingMode
GdipSetSmoothingMode
GdipSetCompositingQuality
GdipDeleteGraphics
GdipCreateFromHDC
GdipDrawArcI

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

imm32

ImmNotifyIME
ImmGetCompositionStringW
ImmAssociateContextEx
ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

winmm

timeGetTime

Exports

Exports

CanInstall
FixSoftware
GetHistoryData
GetUserOperation
Initialize
InstallProduct
InstallSoftware
ProtectInstall
Uninitialize

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 299KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tool/2345PinyinMgr.dll
.dll windows:5 windows x86 arch:x86

6d07bca3df9de5f58a2b112d5be997f4

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

d6:7c:64:d9:ce:b3:c9:2c:c1:54:6c:f7:13:c2:15:95:6b:1d:3c:fb:bf:b4:cf:85:40:b0:e1:cc:b0:5c:07:63
Signer

Actual PE Digest

d6:7c:64:d9:ce:b3:c9:2c:c1:54:6c:f7:13:c2:15:95:6b:1d:3c:fb:bf:b4:cf:85:40:b0:e1:cc:b0:5c:07:63

Digest Algorithm

sha256

PE Digest Matches

true

b8:4f:17:ac:f0:62:70:22:6e:75:27:5d:17:93:26:c1:84:f7:33:52
Signer

Actual PE Digest

b8:4f:17:ac:f0:62:70:22:6e:75:27:5d:17:93:26:c1:84:f7:33:52

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\git_project_drv_2311\Desktop\Project\GFPlatform\GFSafeGuard\GFSafeMonitor\bin\Win32\release_static\pdb\RCMangeMonitor.pdb

Imports

shlwapi

PathRemoveFileSpecW
PathFileExistsW
StrStrIW
PathFindFileNameW
PathMatchSpecW
PathAppendW

crypt32

CryptMsgClose
CryptQueryObject
CertGetNameStringW
CertFreeCertificateContext
CertFindCertificateInStore
CertCloseStore
CryptMsgGetParam

kernel32

Sleep
CreateThread
CreateDirectoryW
CopyFileW
InterlockedExchange
FreeResource
FindResourceW
LoadResource
WriteFile
SizeofResource
CreateFileW
FlushFileBuffers
CloseHandle
GetWindowsDirectoryW
GetLocalTime
GetFileSize
lstrlenA
FileTimeToSystemTime
ReadFile
FileTimeToLocalFileTime
GetEnvironmentVariableW
GetCurrentProcessId
SetFilePointer
GetCurrentThreadId
GetUserDefaultLangID
GetLogicalDriveStringsW
QueryDosDeviceW
DeleteFileW
DisableThreadLibraryCalls
GetLastError
GetTempPathW
GetModuleFileNameW
IsBadReadPtr
IsBadStringPtrW
GetTempFileNameW
TerminateThread
WaitForSingleObject
GetProcAddress
LoadLibraryW
DeviceIoControl
OpenProcess
ReleaseSemaphore
CreateSemaphoreW
ResumeThread
WideCharToMultiByte
GetACP
MultiByteToWideChar
TryEnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
CreateEventW
OpenEventW
SearchPathW
GetModuleHandleW
GetFileAttributesW
LoadLibraryA
ExpandEnvironmentStringsW
FindFirstFileW
GetLongPathNameW
GetFileAttributesExW
GetShortPathNameW
GetDriveTypeW
GetVersionExW
FreeLibrary
GetSystemInfo
lstrcmpiW
GetCurrentProcess
CreateMutexW
OpenMutexW
ReleaseMutex
SetEndOfFile
SetFileTime
GetFileTime
MoveFileW
GetTickCount
HeapAlloc
HeapFree
GetProcessHeap
GlobalAlloc
GlobalFree
LocalFree
InterlockedExchangeAdd
LoadLibraryExW
GetDiskFreeSpaceW
GetVolumeInformationW
lstrlenW
SetLastError
CreateProcessW
GetExitCodeProcess
WaitForMultipleObjects
lstrcatW
lstrcpyW
GetFileSizeEx
GetFullPathNameW
GetSystemDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
FormatMessageW
FileTimeToDosDateTime
DosDateTimeToFileTime
SystemTimeToFileTime
GetSystemTime
LocalFileTimeToFileTime
GlobalMemoryStatusEx
InitializeCriticalSectionAndSpinCount
GetStringTypeW
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
ExitThread
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
GetCPInfo
FatalAppExitA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetOEMCP
GetCurrentThread
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetStdHandle
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetTimeZoneInformation
SetConsoleCtrlHandler
OutputDebugStringW
SetStdHandle
WriteConsoleW
SetEnvironmentVariableA
QueryPerformanceFrequency
FindNextFileW
MoveFileExW
LockResource
FindClose

user32

wsprintfW

advapi32

OpenSCManagerW
RegFlushKey
AdjustTokenPrivileges
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
LookupPrivilegeValueW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegSetValueExW
CreateServiceW
OpenServiceW
StartServiceW
ChangeServiceConfigW
CloseServiceHandle
LookupPrivilegeNameW
OpenProcessToken
RegCloseKey
RegOpenCurrentUser
GetTokenInformation
SetNamedSecurityInfoW

shell32

SHGetFolderPathW
SHGetSpecialFolderPathW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

psapi

GetProcessImageFileNameW

Exports

Exports

ExportFunc1
ExportFunc10
ExportFunc11
ExportFunc12
ExportFunc13
ExportFunc2
ExportFunc3
ExportFunc4
ExportFunc5
ExportFunc6
ExportFunc7
ExportFunc8
ExportFunc9

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 527KB - Virtual size: 526KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 975KB - Virtual size: 988KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 552KB - Virtual size: 551KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tool/2345PinyinMgr64.dll
.dll windows:5 windows x64 arch:x64

6ddf8c0412d0a22bc77552cb57b69c17

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ef:ae:3c:69:fe:11:38:f9:96:47:56:cd:b0:79:c4:1b:1f:67:24:9b:a9:56:3c:10:e6:1f:20:ad:c1:d5:d8:a8
Signer

Actual PE Digest

ef:ae:3c:69:fe:11:38:f9:96:47:56:cd:b0:79:c4:1b:1f:67:24:9b:a9:56:3c:10:e6:1f:20:ad:c1:d5:d8:a8

Digest Algorithm

sha256

PE Digest Matches

true

a8:38:ef:5c:a0:76:b1:b5:a9:3f:82:55:6c:2e:1b:ef:0a:85:c9:93
Signer

Actual PE Digest

a8:38:ef:5c:a0:76:b1:b5:a9:3f:82:55:6c:2e:1b:ef:0a:85:c9:93

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\git_project_drv_2311\Desktop\Project\GFPlatform\GFSafeGuard\GFSafeMonitor\bin\x64\release_static\pdb\RCMangeMonitor64.pdb

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

shlwapi

PathFindFileNameW
StrStrIW
PathMatchSpecW
PathAppendW
PathRemoveFileSpecW
PathFileExistsW

kernel32

FreeResource
FindResourceW
LoadResource
WriteFile
SizeofResource
CreateFileW
FlushFileBuffers
CloseHandle
GetWindowsDirectoryW
GetLocalTime
GetFileSize
lstrlenA
FileTimeToSystemTime
ReadFile
FileTimeToLocalFileTime
CopyFileW
GetCurrentProcessId
SetFilePointer
GetCurrentThreadId
GetUserDefaultLangID
GetLogicalDriveStringsW
QueryDosDeviceW
FreeLibrary
MoveFileW
GetTickCount
MoveFileExW
DeleteFileW
DisableThreadLibraryCalls
GetLastError
GetTempPathW
CreateDirectoryW
CreateThread
Sleep
TerminateThread
WaitForSingleObject
GetProcAddress
GetEnvironmentVariableW
LoadLibraryW
DeviceIoControl
OpenProcess
ReleaseSemaphore
CreateSemaphoreW
ResumeThread
WideCharToMultiByte
GetACP
MultiByteToWideChar
TryEnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
CreateEventW
OpenEventW
SearchPathW
GetModuleHandleW
GetFileAttributesW
LoadLibraryA
ExpandEnvironmentStringsW
FindFirstFileW
GetLongPathNameW
GetFileAttributesExW
GetShortPathNameW
GetDriveTypeW
GetVersionExW
LockResource
GetSystemInfo
GetModuleFileNameW
GetCurrentProcess
CreateMutexW
OpenMutexW
ReleaseMutex
SetEndOfFile
SetFileTime
GetFileTime
FindClose
FindNextFileW
IsBadReadPtr
HeapFree
GetProcessHeap
GlobalAlloc
GlobalFree
LocalFree
LoadLibraryExW
GetDiskFreeSpaceW
GetVolumeInformationW
CreateProcessW
GetExitCodeProcess
WaitForMultipleObjects
lstrlenW
SetLastError
lstrcatW
lstrcpyW
GetFileSizeEx
GetFullPathNameW
GetSystemDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
FormatMessageW
FileTimeToDosDateTime
DosDateTimeToFileTime
SystemTimeToFileTime
GetSystemTime
LocalFileTimeToFileTime
GlobalMemoryStatusEx
InitializeCriticalSectionAndSpinCount
GetStringTypeW
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
ExitThread
GetSystemTimeAsFileTime
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
GetCPInfo
FatalAppExitA
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetOEMCP
GetCurrentThread
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetStdHandle
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetTimeZoneInformation
SetConsoleCtrlHandler
OutputDebugStringW
SetStdHandle
WriteConsoleW
SetEnvironmentVariableA
QueryPerformanceFrequency
IsBadStringPtrW
GetTempFileNameW
lstrcmpiW
HeapAlloc

user32

wsprintfW

advapi32

OpenSCManagerW
RegFlushKey
AdjustTokenPrivileges
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
LookupPrivilegeValueW
SetNamedSecurityInfoW
GetTokenInformation
OpenProcessToken
LookupPrivilegeNameW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegSetValueExW
CreateServiceW
OpenServiceW
StartServiceW
RegCloseKey
RegOpenCurrentUser
ChangeServiceConfigW
CloseServiceHandle

shell32

SHGetFolderPathW
SHGetSpecialFolderPathW

crypt32

CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetNameStringW
CryptQueryObject
CryptMsgClose
CryptMsgGetParam

psapi

GetProcessImageFileNameW

Exports

Exports

ExportFunc1
ExportFunc10
ExportFunc11
ExportFunc12
ExportFunc13
ExportFunc2
ExportFunc3
ExportFunc4
ExportFunc5
ExportFunc6
ExportFunc7
ExportFunc8
ExportFunc9

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 989KB - Virtual size: 989KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 552KB - Virtual size: 551KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tool/Pinyin_2345DLAgent.exe
.exe windows:5 windows x86 arch:x86

74437a5c470ae66e6809c4bf10288987

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

a7:b0:7f:de:0c:e5:e1:85:96:de:30:6a:00:cb:08:13:05:fd:64:4e:48:cd:12:0b:e6:c2:76:e5:10:88:21:11
Signer

Actual PE Digest

a7:b0:7f:de:0c:e5:e1:85:96:de:30:6a:00:cb:08:13:05:fd:64:4e:48:cd:12:0b:e6:c2:76:e5:10:88:21:11

Digest Algorithm

sha256

PE Digest Matches

true

39:c9:df:2b:82:89:39:79:21:09:4f:c0:4c:6a:ed:52:ac:ee:c2:a2
Signer

Actual PE Digest

39:c9:df:2b:82:89:39:79:21:09:4f:c0:4c:6a:ed:52:ac:ee:c2:a2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\dev\CommonPlatform\2345DLAgent\bin\release_static\pdb\2345DLAgentEntry.pdb

Imports

kernel32

LoadLibraryA
GetProcAddress
FreeLibrary
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
RaiseException
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapAlloc
GetFileType
CloseHandle
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
CompareStringW
LCMapStringW
SetStdHandle
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
DecodePointer
CreateFileW

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tool/Update_2345Pinyin.exe
.exe windows:5 windows x86 arch:x86

f0a94ac7cc3f7f74f8e067fe2bcba342

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:09:99:06:2d:4b:a8:96:09:39:ee:34:87:3b:e9:28:7e:a7:bf:87:6f:80:3d:38:1e:ac:62:16:f8:31:d6:d4
Signer

Actual PE Digest

25:09:99:06:2d:4b:a8:96:09:39:ee:34:87:3b:e9:28:7e:a7:bf:87:6f:80:3d:38:1e:ac:62:16:f8:31:d6:d4

Digest Algorithm

sha256

PE Digest Matches

true

d0:6b:82:cd:14:bf:a5:63:da:b3:eb:07:a3:55:a7:3b:52:66:f8:55
Signer

Actual PE Digest

d0:6b:82:cd:14:bf:a5:63:da:b3:eb:07:a3:55:a7:3b:52:66:f8:55

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\trunk\CommonPlatform\UpdateProgram\bin\Win32\Release\pdb\Update_2345Pinyin.pdb

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

InitializeCriticalSectionAndSpinCount
RaiseException
GetLastError
GetPrivateProfileStringA
WritePrivateProfileStringA
DecodePointer
DeleteCriticalSection
FreeLibrary
LoadLibraryW
GetProcAddress
EndUpdateResourceW
CreateFileW
GetTempPathW
BeginUpdateResourceW
UpdateResourceW
CreateProcessW
GetModuleHandleW
GetExitCodeProcess
WaitForMultipleObjects
GetCurrentProcessId
LocalFree
ResumeThread
GetCurrentProcess
TerminateThread
Sleep
OpenThread
GetExitCodeThread
GetCurrentThreadId
SuspendThread
GetFileAttributesW
GetModuleFileNameW
ExpandEnvironmentStringsW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
OpenProcess
QueryDosDeviceW
WideCharToMultiByte
GetACP
MultiByteToWideChar
FindResourceW
LoadResource
GetVersionExW
LockResource
GetSystemInfo
lstrcmpiW
GetFileSize
SetFilePointer
SetEndOfFile
SetFileTime
WriteFile
ReadFile
GetFileTime
CreateMutexW
ReleaseMutex
GetCommandLineW
GetLongPathNameW
GetFileAttributesExW
HeapAlloc
HeapFree
GetProcessHeap
ResetEvent
InterlockedExchangeAdd
lstrlenW
GetFileSizeEx
DeleteFileW
FindClose
FindNextFileW
GetLogicalDriveStringsW
GetTickCount
InterlockedExchange
SetLastError
FileTimeToSystemTime
GetFullPathNameW
GetTempFileNameW
CreateDirectoryW
GetSystemDirectoryW
CopyFileW
GetCurrentDirectoryW
SetEnvironmentVariableA
SetFileAttributesW
FormatMessageW
DeviceIoControl
GlobalMemoryStatusEx
GetEnvironmentVariableW
LoadLibraryExW
SystemTimeToTzSpecificLocalTime
LocalAlloc
FlushFileBuffers
OutputDebugStringW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapReAlloc
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
CloseHandle
DeleteTimerQueueTimer
OpenEventW
CreateEventW
CreateTimerQueueTimer
GetPrivateProfileStringW
SetEvent
WaitForSingleObject
MoveFileExW
SetStdHandle
WriteConsoleW
ReadConsoleW
FindFirstFileW
GetWindowsDirectoryW
GetFileType
GetStdHandle
GetOEMCP
IsValidCodePage
HeapSize
GetModuleHandleExW
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
EncodePointer
GetStringTypeW
IsDebuggerPresent
IsProcessorFeaturePresent
CreateThread
ExitThread
GetSystemTimeAsFileTime
RtlUnwind
GetCPInfo

user32

LoadIconW
TranslateMessage
LoadCursorW
CreateWindowExW
RegisterClassW
DefWindowProcW
DispatchMessageW
PostQuitMessage
GetMessageW

gdi32

GetStockObject

advapi32

OpenServiceW
OpenSCManagerW
CloseServiceHandle
GetUserNameW
AdjustTokenPrivileges
DuplicateTokenEx
SystemFunction036
QueryServiceConfigW

shell32

SHGetSpecialFolderPathW
ord680

imagehlp

ImageEnumerateCertificates
ImageRemoveCertificate

netapi32

NetLocalGroupGetMembers

Sections

.text
Size: 794KB - Virtual size: 793KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tool/guide.dat
.exe windows:5 windows x86 arch:x86

66af6de2f904aca40308a487184d0386

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/07/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

22/06/2017, 00:00

Not After

22/06/2019, 23:59

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

61:f7:3e:c0:78:82:79:e9:8f:d4:13:4b:f9:41:cc:db:41:0f:7e:ba:e7:98:23:2a:1b:67:4a:24:b3:bf:46:a0
Signer

Actual PE Digest

61:f7:3e:c0:78:82:79:e9:8f:d4:13:4b:f9:41:cc:db:41:0f:7e:ba:e7:98:23:2a:1b:67:4a:24:b3:bf:46:a0

Digest Algorithm

sha256

PE Digest Matches

true

a5:3a:1c:ee:ff:24:35:1d:13:c2:6e:11:05:dc:06:6a:bc:c2:ff:ea
Signer

Actual PE Digest

a5:3a:1c:ee:ff:24:35:1d:13:c2:6e:11:05:dc:06:6a:bc:c2:ff:ea

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\trunk\2345pic\tools\RCHomePage\bin\Win32\Release\pdb\2345PicHomePage.pdb

Imports

kernel32

GetProcAddress
LocalFree
ExpandEnvironmentStringsW
CreateProcessW
WaitForSingleObject
GetModuleHandleW
GetLastError
CloseHandle
GetCurrentProcessId
LoadLibraryExW
LoadLibraryW
GetModuleFileNameW
GetFileAttributesW
CreateMutexW
Sleep
ReleaseMutex
FindFirstFileW
CreateFileW
GetLongPathNameW
GetFileAttributesExW
GetVersionExW
lstrlenW
lstrcmpiW
lstrcatW
lstrcpyW
GetCurrentProcess
OpenProcess
QueryDosDeviceW
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentThreadId
FindResourceW
LoadResource
LockResource
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetFileSizeEx
SetFilePointer
SetEndOfFile
WriteFile
ReadFile
DeleteFileW
InitializeCriticalSectionAndSpinCount
GetFullPathNameW
CreateDirectoryW
SetFileAttributesW
FindClose
GetFileSize
WideCharToMultiByte
GetACP
MultiByteToWideChar
GetLogicalDriveStringsW
FormatMessageW
EncodePointer
DecodePointer
GetCommandLineW
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
ExitProcess
GetModuleHandleExW
HeapSize
SetLastError
GetStdHandle
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsValidCodePage
GetOEMCP
GetCPInfo
GetStringTypeW
HeapReAlloc
LCMapStringW
OutputDebugStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
SetStdHandle
WriteConsoleW
FlushFileBuffers

shell32

CommandLineToArgvW

Sections

.text
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ui/Default.skn.pa
ui/SettingUI.dui.pa
ui/SettingUI.xml.pa

Sharing

General

Malware Config

Signatures

Files

4f605fc1883b799ccf4134d15c973513

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78Certificate

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:dfCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78Certificate

Key Usages

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6Certificate

Extended Key Usages

Key Usages

0b:1a:2f:16:b6:55:b0:0d:fc:1f:43:02:63:0a:ae:b9:ae:d7:1d:f9:3f:e7:bb:4c:cc:db:63:99:41:0d:02:96Signer

97:4a:aa:b6:c8:dd:fd:4c:ab:66:19:02:3f:83:ee:c3:27:b2:85:b6Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

msimg32

gdiplus

rpcrt4

Exports

Exports

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 253KB - Virtual size: 253KB

.data Size: 70KB - Virtual size: 74KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 90KB - Virtual size: 90KB

a2a2b472a151fe2846f87cde12f6b649

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

0d:70:a1:7d:75:6f:ec:88:85:9a:29:46:be:d7:69:44Certificate

Extended Key Usages

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

01:40:74:8d:43:58:a1:47:81:d6:a9:c3:07:b3:aa:9cCertificate

Extended Key Usages

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

75:07:30:67:30:94:f3:8c:a9:f0:7e:06:e5:74:fb:df
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

67:1d:31:6b:f6:0f:35:75:5f:07:23:72:de:ef:8f:e5
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

0b:1a:2f:16:b6:55:b0:0d:fc:1f:43:02:63:0a:ae:b9:ae:d7:1d:f9:3f:e7:bb:4c:cc:db:63:99:41:0d:02:96
Signer

97:4a:aa:b6:c8:dd:fd:4c:ab:66:19:02:3f:83:ee:c3:27:b2:85:b6
Signer

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 253KB - Virtual size: 253KB

.data
Size: 70KB - Virtual size: 74KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 90KB - Virtual size: 90KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

0d:70:a1:7d:75:6f:ec:88:85:9a:29:46:be:d7:69:44
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

01:40:74:8d:43:58:a1:47:81:d6:a9:c3:07:b3:aa:9c
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

a9:21:7a:23:9e:60:8d:45:44:0a:8c:63:c7:4f:4c:6e:68:81:e8:77:cd:1f:9a:a4:40:70:0a:cf:13:38:08:4d
Signer

32:e6:7d:7b:54:2f:bd:d4:65:68:ef:aa:d3:87:aa:e5:f7:bb:dc:15
Signer

.text
Size: 2.9MB - Virtual size: 2.9MB

.rdata
Size: 784KB - Virtual size: 784KB

.data
Size: 105KB - Virtual size: 118KB

.rsrc
Size: 539KB - Virtual size: 538KB

.reloc
Size: 178KB - Virtual size: 178KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

0d:70:a1:7d:75:6f:ec:88:85:9a:29:46:be:d7:69:44
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

01:40:74:8d:43:58:a1:47:81:d6:a9:c3:07:b3:aa:9c
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

b3:66:d6:3b:59:82:d0:7c:d0:e0:fc:03:ef:82:fd:d4:f6:65:91:9c:84:44:d6:dc:c8:30:e3:35:ad:9b:ed:13
Signer

9e:0a:f6:21:77:3b:60:ac:ce:de:e3:d4:d9:3b:a2:3f:a0:e8:24:f8
Signer