HSBC_UKToolv1[.]0[.]0[.]6[.]exe

resource
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/KillProcDLL.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$SYSDIR/CFCA_HSBC_scsp.dll
unpack002/$PLUGINSDIR/System.dll

HSBC_UKToolv1.0.0.6.exe

IMPHASH 24f4223e271413c25abad52fd456a9bc
SHA256 55453f794fbc569bf4afdf593aa27ff863bf1e1c67c7ccb5eb7bf48f29ff0de4
MD5 7b7702067e951bd5efd6930025432c64
SHA1 dc9130c769472eeadeac380c0fc40029d2e8e295
SHA512 7c107885607c73121f1dfc6ab3f7f6c3e2c21264229eb9b3551fc9bb5e6bf830d4fd072ba900ab039715e99afc50d79ce6812c646ca4531f88fdbfe07e3930f7
SSDEEP 98304:8XBnHfsvIWrreL4Zld+oyjgCCPMBHyiciqK8DWoYoA2e:SnEbe0MjgCCPMBSictGQe
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

4c:58:1d:91:e1:2f:06:b3:b1:06:7a:db:61:b5:d4:e0:e2:40:9b:0c:06:d0:c3:ea:64:00:28:b0:ae:f7:1c:d6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

Chains

Nov 1, 2023

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

Serial Number

0d:04:89:90:cc:7e:95:47:5f:56:a1:5c:95:ed:b7:38

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 20, 2022 - Apr 18, 2025

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

13581

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess SetFileAttributesW Sleep GetTickCount CreateFileW GetFileSize GetModuleFileNameW GetCurrentProcess SetCurrentDirectoryW GetFileAttributesW SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW CopyFileW MoveFileW GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW lstrcmpW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalUnlock GetDiskFreeSpaceW GlobalAlloc DeleteFileW FindFirstFileW FindNextFileW FindClose SetFilePointer ReadFile MulDiv lstrlenA WideCharToMultiByte MultiByteToWideChar WritePrivateProfileStringW FreeLibrary GetPrivateProfileStringW GetModuleHandleW LoadLibraryExW

user32

GetWindowRect GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu ScreenToClient EnableMenuItem GetDlgItem SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect SystemParametersInfoW EndDialog RegisterClassW DialogBoxParamW CreateWindowExW GetClassInfoW DestroyWindow CharNextW ExitWindowsEx SetWindowTextW LoadImageW SetTimer ShowWindow PostQuitMessage wsprintfW SetWindowLongW FindWindowExW IsWindow CreatePopupMenu AppendMenuW GetSystemMetrics DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetTextColor SetBkMode CreateFontIndirectW CreateBrushIndirect DeleteObject GetDeviceCaps SetBkColor

shell32

ShellExecuteExW SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetFileInfoW SHFileOperationW SHBrowseForFolderW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ord17 ImageList_Destroy

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/InstallOptions.dll

IMPHASH 4b45b7e00344a87332fbd12653854d1a
SHA256 caf64a4e9449220ba618a9aa2ae4ed3774c5d0f193bda44be22676c27ae0ec95
MD5 09d8971beefefffd710030dd167a99e0
SHA1 a0117786ad77213f3eb48cfdc3819786cb796b7d
SHA512 3956f0c6bcdf033e4a10ab33872a66e0668da28ec31cb7a2c67ef7266d7c0845998a2a85a6cc25aba1df73909df8104119cf5f1f86c1e91f8fd201765aea49f0
SSDEEP 384:EhC43tPegZ3eBaRwCPOYY7nNYXC8/Yosa:EoTgZ3eBTCmrnNAI
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

11022

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentDirectoryW GlobalUnlock GlobalLock GetModuleHandleW CloseHandle SetEndOfFile SetCurrentDirectoryW GetPrivateProfileStringW GetPrivateProfileIntW MultiByteToWideChar ReadFile GetFileSize CreateFileW lstrcmpiW lstrcatW lstrcpynW WritePrivateProfileStringW lstrlenW lstrcpyW GlobalFree GlobalAlloc WriteFile SetFilePointer

user32

LoadCursorW SetWindowRgn GetDlgCtrlID CloseClipboard DrawFocusRect OpenClipboard DrawTextW SetCursor LoadIconW LoadImageW SetWindowLongW CreateWindowExW MapDialogRect SetWindowPos GetWindowRect CreateDialogParamW GetClientRect ShowWindow GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageW TranslateMessage GetMessageW IsDialogMessageW CallWindowProcW PostMessageW MessageBoxW GetSysColor CharNextW wsprintfW GetWindowTextW SetWindowTextW SendMessageW GetWindowLongW EnableMenuItem PtInRect MapWindowPoints GetClipboardData

gdi32

SetTextColor DeleteObject CombineRgn CreateRectRgn GetDIBits SelectObject CreateCompatibleDC GetObjectW

shell32

SHGetDesktopFolder SHGetPathFromIDListW ShellExecuteW SHBrowseForFolderW

comdlg32

GetOpenFileNameW GetSaveFileNameW CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/KillProcDLL.dll

IMPHASH 97c84efb92e9e74c911abc996572ac5e
SHA256 e594544cc4b4a0a5439a2b9a79db14e580d815c87e353781c47d4eab5e313b8e
MD5 c1e153f9fa1001eb9fb34bbc4a3f3927
SHA1 dfca2dcce9b0486114692a23776191627b0c9839
SHA512 d2a7c2853b56f60f710dcea27c346dbd22593c98e5c000c22650613851f26e505b12260bcfc050473e97c2796a91c94a3c201785dad4d95de0b4e2de35c3a41f
SSDEEP 48:C4ojqpOxUcbslAR1k5eKv8rbvHMgiqCmZuwJQ7TLSMXaIYatzbgAa4l5YAZ:SEeFslARoeK8rDHMgTCmj/MqoRb+4l
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 6950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
MD5 8cf2ac271d7679b1d68eefc1ae0c5618
SHA1 7cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA512 ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
SSDEEP 192:BenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XB9IwL:B8+Qlt70Fj/lQRY/9VjjlL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10719

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

$SYSDIR/CFCA_HSBC_CSP.dll

IMPHASH 0a95aabda91ab79be30a88b1d78d17da
SHA256 d9ecbdc7e2e31764549f5b7a5e8dce46cdfd6dd0664d491ec7203ba5253f610c
MD5 3381efa4d0deaf0722439c0abd15f35f
SHA1 46bbc73777b4954749055c6c7a534cf8f0422556
SHA512 eb560a40f589aec56cf2acb8229ba12c4a41dd5b835b0f79c5b583d28e6939751d544cb99bf7aa733cca269097123f05072a6eadadee0e490e4cb98de0a486d5
SSDEEP 3072:1rWstMq2tqGBM2I24tZGFruup43qWWbuPcRvYwgUBF+0:lWstN2S2p4tIFrmqWWbbRv3k0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

d1:7d:77:56:3c:33:54:90:32:ca:6b:2c:54:40:1a:41:53:df:d6:e9:08:e5:81:60:50:8a:14:f7:19:63:33:f0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

Chains

Nov 1, 2023

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

Serial Number

0d:04:89:90:cc:7e:95:47:5f:56:a1:5c:95:ed:b7:38

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 20, 2022 - Apr 18, 2025

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

1

Major OS version

5

Entry point

82905

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\UKEY-SVN\0120_汇丰银行\02_项目源码\02_MW源码\trunk\src\JinkeCSP\Release\JinkeCSP.pdb

crypt32

CertSetCertificateContextProperty CertCloseStore CertAddCertificateContextToStore CertOpenStore CertGetNameStringA CertFreeCertificateContext CertCreateCertificateContext

kernel32

GlobalAlloc SizeofResource lstrlenW GlobalUnlock InterlockedExchange GlobalFree lstrcpyA SystemTimeToFileTime MulDiv GetSystemTime CreateFileA SetFilePointer WriteFile GetLocalTime OutputDebugStringA lstrcmpA lstrlenA InterlockedIncrement InterlockedDecrement WaitForSingleObject CreateEventA ResetEvent LocalFree FlushFileBuffers CreateFileW WriteConsoleW SetStdHandle GetStringTypeW LCMapStringW GetConsoleMode GetConsoleCP RtlUnwind GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA GetStartupInfoW GetFileType SetHandleCount HeapSize IsValidCodePage GetOEMCP GetACP GetCPInfo TlsFree TlsSetValue TlsGetValue TlsAlloc GetModuleFileNameW GetStdHandle ExitProcess HeapDestroy HeapCreate IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess HeapReAlloc GetCommandLineA DecodePointer EncodePointer VirtualQuery GetSystemInfo VirtualProtect InitializeCriticalSectionAndSpinCount InterlockedPopEntrySList VirtualAlloc VirtualFree IsProcessorFeaturePresent InterlockedPushEntrySList InterlockedCompareExchange FreeLibrary GetCurrentProcess LoadLibraryW Sleep LeaveCriticalSection FlushInstructionCache RaiseException GlobalLock LoadResource FindResourceW FreeResource GetLastError MultiByteToWideChar DeleteCriticalSection InitializeCriticalSection GetProcessHeap HeapFree HeapAlloc GetUserDefaultLangID GetModuleHandleW WideCharToMultiByte CreateThread lstrcpyW CloseHandle GetCurrentThreadId EnterCriticalSection GetProcAddress SetLastError

user32

UnregisterClassA wsprintfW MessageBoxW TranslateAcceleratorW GetMessageW TranslateMessage RegisterDeviceNotificationW MoveWindow DefWindowProcW CallWindowProcW GetDlgCtrlID UpdateWindow SendMessageW GetSystemMetrics ReleaseCapture AdjustWindowRectEx CreateWindowExW IsWindow SetLayeredWindowAttributes SetWindowPos EndDialog SetWindowLongW SystemParametersInfoW GetWindowLongW InvalidateRect GetMenu InflateRect DispatchMessageW wsprintfA GetDC ReleaseDC GetWindowTextW MonitorFromWindow GetDlgItem ShowWindow CreateDialogParamW IsWindowVisible MapWindowPoints EnableWindow SetWindowTextW GetMonitorInfoW GetWindow GetWindowTextLengthW GetKeyState CallNextHookEx SetWindowsHookExW UnhookWindowsHookEx FindWindowW EndPaint ClientToScreen DestroyWindow SetTimer GetWindowRect FillRect SetCapture PostMessageW KillTimer DialogBoxParamW GetParent IsWindowEnabled GetClientRect SetFocus DrawEdge BeginPaint PtInRect GetCapture DrawFocusRect

gdi32

CreateFontIndirectW GetDeviceCaps DPtoLP CreateDIBSection SetDIBColorTable SelectObject CreateCompatibleDC GetObjectW DeleteDC DeleteObject CreateSolidBrush

advapi32

RegQueryValueExA InitializeSecurityDescriptor SetSecurityDescriptorDacl RegOpenKeyExA RegCloseKey

ole32

OleRun CoCreateInstance CreateStreamOnHGlobal CoInitialize CoUninitialize

oleaut32

GetErrorInfo SysFreeString SysAllocString VariantClear

comctl32

ImageList_Add ImageList_GetIconSize _TrackMouseEvent ImageList_Destroy ImageList_Draw ImageList_Create

gdiplus

GdiplusStartup GdipGetImageWidth GdipCloneImage GdipBitmapLockBits GdipGetImagePaletteSize GdipDisposeImage GdipAlloc GdipDrawImageI GdipBitmapUnlockBits GdipGetImageGraphicsContext GdipDeleteGraphics GdipCreateBitmapFromScan0 GdipGetImagePixelFormat GdipCreateBitmapFromStream GdipGetImagePalette GdipGetImageHeight GdipFree GdiplusShutdown

$SYSDIR/CFCA_HSBC_GMAPI.dll

IMPHASH 318cd12a944d584b3879e1c00efda621
SHA256 5ba4585be6c8c895d9a66f21693682dd3b58279ef0cdf1479b841a12f96114f3
MD5 c29ac30451c9ebfdd175db086c8d82e2
SHA1 cbb269459f244425fd6ec1db8088a267446433af
SHA512 9c5ed13dacfea957bdbe7473af071394d0c98daec0012027ba5c779f4577923ed76a0b3b0a57432be4e8102cf9d344a03cc4bd933d04bd281a4f22e4d0014406
SSDEEP 3072:dViHRlJrLeFRKMdHtpBVwMKeyIQXYMAqHROUPUYYEFuUCiWiHxzi:eHRlJriFHdHtpBVwMKeyIQXYKHROM3RW
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

4b:07:94:7a:7d:30:30:eb:db:54:e9:66:7a:f6:43:c4:0d:c4:41:9a:1d:45:2d:60:91:d7:a5:87:7d:d3:32:88

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

Chains

Nov 1, 2023

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

Serial Number

0d:04:89:90:cc:7e:95:47:5f:56:a1:5c:95:ed:b7:38

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 20, 2022 - Apr 18, 2025

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

1

Major OS version

5

Entry point

86526

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\UKEY-SVN\0120_汇丰银行\02_项目源码\02_MW源码\trunk\src\JinKeSKF\Release\JinKeSKF.pdb

kernel32

GetProcAddress LoadLibraryA OpenMutexA ReleaseMutex SetEvent WideCharToMultiByte CreateEventW WaitForMultipleObjects OutputDebugStringA CloseHandle CreateThread GetLastError GetPrivateProfileIntA LeaveCriticalSection EnterCriticalSection GetModuleFileNameA DeleteCriticalSection HeapAlloc HeapFree GetProcessHeap GetLocalTime GetCurrentThreadId WaitForSingleObject FreeLibrary InitializeCriticalSection ReadFile SetEndOfFile CreateFileW HeapSize DecodePointer GetCommandLineA GetSystemTimeAsFileTime HeapReAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer HeapCreate HeapDestroy GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount RtlUnwind SetHandleCount GetFileType GetStartupInfoW TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement Sleep FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId SetFilePointer GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryW WriteConsoleW MultiByteToWideChar SetStdHandle CreateFileA LCMapStringW GetStringTypeW IsProcessorFeaturePresent lstrlenA

user32

wsprintfA DestroyWindow TranslateAcceleratorW GetMessageW TranslateMessage RegisterDeviceNotificationW ShowWindow CreateDialogParamW SendMessageW DispatchMessageW

advapi32

CryptReleaseContext CryptGenRandom CryptAcquireContextW

GetAuthCode SKF_CancelWaitForDevEvent SKF_ChangeDevAuthKey SKF_ChangePIN SKF_ClearSecureState SKF_CloseApplication SKF_CloseContainer SKF_CloseHandle SKF_ConnectDev SKF_CreateApplication SKF_CreateContainer SKF_CreateFile SKF_Decrypt SKF_DecryptFinal SKF_DecryptInit SKF_DecryptUpdate SKF_DeleteApplication SKF_DeleteContainer SKF_DeleteFile SKF_DevAuth SKF_Digest SKF_DigestFinal SKF_DigestInit SKF_DigestUpdate SKF_DisConnectDev SKF_ECCExportSessionKey SKF_ECCSignData SKF_ECCVerify SKF_Encrypt SKF_EncryptFinal SKF_EncryptInit SKF_EncryptUpdate SKF_EnumApplication SKF_EnumContainer SKF_EnumDev SKF_EnumFiles SKF_ExportCertificate SKF_ExportPublicKey SKF_ExtECCDecrypt SKF_ExtECCEncrypt SKF_ExtECCSign SKF_ExtECCVerify SKF_ExtRSAPriKeyOperation SKF_ExtRSAPubKeyOperation SKF_GenECCKeyPair SKF_GenExtRSAKey SKF_GenRSAKeyPair SKF_GenRandom SKF_GenerateAgreementDataAndKeyWithECC SKF_GenerateAgreementDataWithECC SKF_GenerateKeyWithECC SKF_GetContainerType SKF_GetDevInfo SKF_GetDevState SKF_GetFileInfo SKF_GetPINInfo SKF_ImportCertificate SKF_ImportECCKeyPair SKF_ImportRSAKeyPair SKF_ImportSessionKey SKF_LockDev SKF_Mac SKF_MacFinal SKF_MacInit SKF_MacUpdate SKF_OpenApplication SKF_OpenContainer SKF_RSAExportSessionKey SKF_RSASignData SKF_RSAVerify SKF_ReadFile SKF_SetLabel SKF_SetSymmKey SKF_Transmit SKF_UnblockPIN SKF_UnlockDev SKF_VerifyPIN SKF_WaitForDevEvent SKF_WriteFile

$SYSDIR/CFCA_HSBC_LIB.dll

IMPHASH e58b78dddb52fb6a929123483497ad15
SHA256 58fa342fb8aa5b4dd6c70e7ac6be69fd892fbfb6dff7dc499fec9b0fad8fe00e
MD5 562ec71ced3842116f7addb2d78cdc4e
SHA1 e34b01795e025d6e83a82a805e5d2ab6d0022c2d
SHA512 354ab59d0eda6fbbc05989f4eb114f2877a3f27ac7f72a614ae3d2a06b2368d244528e71f376862e6ecf6f0b272a454cc9228c74c81dd2108a30ba993c144508
SSDEEP 6144:91mvTKTVTFHqt0XsjSeSt9wYlFvDeKW1FdI5MZ:91YGxJ7cBSvDejFdr
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

bc:7e:ec:ab:32:7c:07:62:c8:40:9c:3d:90:48:c1:d8:11:da:fa:41:bd:1b:b3:4e:60:d7:b1:8f:7e:eb:f4:84

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

Chains

Nov 1, 2023

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

Serial Number

0d:04:89:90:cc:7e:95:47:5f:56:a1:5c:95:ed:b7:38

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 20, 2022 - Apr 18, 2025

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

1

Major OS version

5

Entry point

130547

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\UKEY-SVN\0120_汇丰银行\02_项目源码\02_MW源码\trunk\src\JK_HD_ESafe2000\Release\JK_HD_ESafe2000.pdb

hid

HidD_GetPreparsedData HidD_FreePreparsedData HidP_GetCaps HidD_FlushQueue

setupapi

SetupDiGetDeviceInterfaceDetailW SetupDiEnumDeviceInterfaces CM_Get_Device_IDA SetupDiDestroyDeviceInfoList CM_Get_Device_ID_ListW CM_Get_Device_ID_List_SizeW CM_Get_Parent CM_Locate_DevNodeA SetupDiGetClassDevsW SetupDiOpenDeviceInfoW

kernel32

CloseHandle InterlockedIncrement InterlockedDecrement GetUserDefaultLangID InitializeCriticalSection LeaveCriticalSection MultiByteToWideChar GetLastError EnterCriticalSection CreateThread WaitForSingleObject WideCharToMultiByte OpenMutexA CreateMutexA ReleaseMutex GetVersion LocalFree lstrcpyW MapViewOfFile UnmapViewOfFile GetCurrentProcess SetEvent OpenMutexW OpenFileMappingW OpenEventW DeviceIoControl ReadFile GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount SetLastError FlushFileBuffers CreateFileW WriteConsoleW SetStdHandle IsProcessorFeaturePresent GetConsoleMode GetConsoleCP GetStringTypeW OutputDebugStringA GetCurrentThreadId GetLocalTime WriteFile SetFilePointer CreateFileA Sleep RtlUnwind LoadLibraryW HeapSize LCMapStringW GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA DeleteCriticalSection TlsFree TlsSetValue TlsGetValue TlsAlloc IsValidCodePage GetOEMCP DecodePointer EncodePointer HeapFree HeapAlloc GetCommandLineA GetSystemTimeAsFileTime HeapReAlloc TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy GetProcAddress GetModuleHandleW ExitProcess GetCPInfo GetACP GetStartupInfoW

user32

wsprintfA SendMessageW DestroyWindow TranslateAcceleratorW GetWindowRect GetMessageW PostQuitMessage wsprintfW TranslateMessage IsDialogMessageW GetDlgItem SetWindowPos ShowWindow CreateDialogParamW GetSystemMetrics SetWindowTextW DispatchMessageW

advapi32

InitializeSecurityDescriptor SetSecurityDescriptorDacl InitializeAcl AddAccessAllowedAce CryptGenRandom CryptReleaseContext CryptAcquireContextW LookupAccountNameA GetSecurityDescriptorSacl SetSecurityInfo ConvertStringSecurityDescriptorToSecurityDescriptorW

ole32

OleRun CoCreateInstance

oleaut32

SysFreeString VariantClear SysAllocString GetErrorInfo

JK305_ActivateToken JK305_AppendRecord JK305_AsymKeyFinal JK305_AsymKeyInit JK305_CloseToken JK305_CreateCOSFile JK305_CreateContainer JK305_CreateDataObj JK305_CreatePIN JK305_CreateSymObj JK305_DelFile JK305_DeleteCert JK305_DeleteContainer JK305_DeleteDataObj JK305_DeleteMF JK305_DeleteRecord JK305_DeleteSymObj JK305_DisplayStr JK305_EnumAlg JK305_EnumContainer JK305_EnumDataObj JK305_EnumSymObj JK305_EnumToken JK305_ExportPrivateKey JK305_ExportPublicKey JK305_ExportSecretKey JK305_ExterAuth JK305_FinalEnv JK305_GenRandom JK305_GenerateKeyPair JK305_GenerateSecretKey JK305_GetAlgInfo JK305_GetDevInfo JK305_GetDevLabel JK305_GetFileList JK305_GetFileStatus JK305_GetRetryTimes JK305_HashFinal JK305_HashInit JK305_HashUpdate JK305_ImportPrivateKey JK305_ImportPublicKey JK305_ImportSecretKey JK305_InitEnv JK305_InitTokenFile JK305_InterAuth JK305_IsSelfToken JK305_Login JK305_Logout JK305_ModifyPIN JK305_OpenToken JK305_PrikeyDec JK305_PrikeySign JK305_PubkeyEnc JK305_PubkeyVerify JK305_ReadCert JK305_ReadContainer JK305_ReadDataObj JK305_ReadFile JK305_ReadRecord JK305_ReadSymObj JK305_ResetPIN JK305_SelectAppDF JK305_SelectFile JK305_SendAPDUCmd JK305_SendMsgWithCertRefresh JK305_SetDevLabel JK305_SetFileStatus JK305_SetTransKey JK305_SymKeyDecFinal JK305_SymKeyDecInit JK305_SymKeyDecUpdate JK305_SymKeyEncFinal JK305_SymKeyEncInit JK305_SymKeyEncUpdate JK305_UnlockPIN JK305_UpdateRecord JK305_WriteCert JK305_WriteContainer JK305_WriteDataObj JK305_WriteFile JK305_WriteSymObj ukGetFunctionList

$SYSDIR/CFCA_HSBC_P11.dll

IMPHASH c2ec3d5326c898b18e50fa6f898a290f
SHA256 61c93b350f48896aca966524a7196db119fd188a107796221a4f54f723df7a22
MD5 7cda3a6e91e46cf2b04e60a72590b452
SHA1 ee82fb11e5c1b2c6df2e03452e699188175c0af1
SHA512 828b321b86dd42e5e96279c0418ed78b59f7405e26600fb0b1ef4cad2cbce1efea185e004de724e6f21b24ee98c0e79e0978987f9c048e28dd29fab3678a0030
SSDEEP 3072:6n2X+D4hYEyWf+e+kd8jPW/imWrb0fVJVRDHJUvUldz:3YEyvyAPW/ArCVRdfz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

3d:2f:c0:ff:30:eb:15:bc:25:48:4b:a0:8d:b2:98:94:be:e4:89:e8:7f:58:03:3e:34:4f:3c:98:31:e0:f6:d6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

Chains

Nov 1, 2023

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

Serial Number

0d:04:89:90:cc:7e:95:47:5f:56:a1:5c:95:ed:b7:38

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 20, 2022 - Apr 18, 2025

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

1

Major OS version

5

Entry point

102730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\UKEY-SVN\0120_汇丰银行\02_项目源码\02_MW源码\trunk\src\JinkeP11\Release\JinkeP11.pdb

crypt32

CertFreeCertificateContext CertCreateCertificateContext

kernel32

LeaveCriticalSection EnterCriticalSection DeleteCriticalSection FreeLibrary InitializeCriticalSection GetProcAddress LoadLibraryA FileTimeToSystemTime CreateFileW GetCurrentProcessId GetCurrentThreadId GetLastError HeapFree HeapAlloc GetSystemTimeAsFileTime DecodePointer EncodePointer GetCommandLineA HeapReAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent WideCharToMultiByte HeapCreate HeapDestroy GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW Sleep GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError RtlUnwind CloseHandle RaiseException HeapSize GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount SetFilePointer GetConsoleCP GetConsoleMode LoadLibraryW FlushFileBuffers LCMapStringW MultiByteToWideChar GetStringTypeW CreateFileA IsProcessorFeaturePresent SetStdHandle WriteConsoleW SetEndOfFile GetProcessHeap ReadFile

user32

wsprintfA

advapi32

CryptAcquireContextW CryptReleaseContext CryptGenRandom

$SYSDIR/CFCA_HSBC_SRV.exe

IMPHASH 86fb0d0839de9f0af7b836ea9d276007
SHA256 07d989855f4dd8bfd5e4e1d2a3cdea3696957fbe0f202ab699c9ea7294cffbfc
MD5 eb168e545f4f09125c9b2537141b2131
SHA1 224a30956a26b35395f238d7c3692032d00e023e
SHA512 a10bc667b69f0dde67da8cc2277688cd36cc659b0ceeb26c9c24934a8cc5454044ba0a2c07b593ce4428b6ce1fafe5b37e20c6577451f657810e6372f7dbc530
SSDEEP 1536:h6vawbAZwTqawgKCMw4XeXgLmquIT2lCHoR4M70V3hFw:hxwcGT18LeYuITACH+oxw
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

b8:40:5a:10:2e:28:c8:87:22:9d:a4:67:3a:2f:1b:10:10:12:26:5f:e4:50:9a:85:90:47:4e:26:78:ee:4c:35

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

Chains

Nov 1, 2023

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

Serial Number

0d:04:89:90:cc:7e:95:47:5f:56:a1:5c:95:ed:b7:38

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 20, 2022 - Apr 18, 2025

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

1

Major OS version

5

Entry point

11212

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\UKEY-SVN\0120_汇丰银行\02_项目源码\02_MW源码\trunk\src\JinKeSerivce\Release\JinKeSerivce.pdb

crypt32

CertEnumCertificatesInStore CertGetCertificateContextProperty CertCloseStore CertOpenStore CertDuplicateCertificateContext CertDeleteCertificateFromStore

setupapi

CM_Get_Device_IDW CM_Locate_DevNodeW CM_Get_Parent

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock

kernel32

CreateFileMappingW CreateEventW Process32NextW lstrcmpiW lstrcatW CreateToolhelp32Snapshot Process32FirstW LocalFree lstrcpyW CreateFileA DeviceIoControl HeapSize HeapReAlloc IsProcessorFeaturePresent RtlUnwind LoadLibraryW GetLastError GetModuleFileNameW Sleep OpenProcess OutputDebugStringW SetEvent WaitForSingleObject UnmapViewOfFile MapViewOfFile CreateMutexW GetCommandLineW ReadFile SetFilePointer SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers WriteConsoleW CloseHandle HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue DecodePointer TlsFree GetModuleHandleW SetLastError GetCurrentThreadId GetProcAddress HeapFree HeapAlloc LCMapStringW ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WideCharToMultiByte MultiByteToWideChar GetStringTypeW LeaveCriticalSection EnterCriticalSection CreateFileW

user32

RegisterDeviceNotificationW MessageBoxW SendMessageW wsprintfW CharNextW FindWindowW

advapi32

CloseServiceHandle OpenProcessToken DeleteService OpenSCManagerW StartServiceCtrlDispatcherW OpenServiceW ControlService GetSecurityDescriptorSacl SetSecurityInfo ConvertStringSecurityDescriptorToSecurityDescriptorW SetServiceStatus QueryServiceStatus StartServiceW SetSecurityDescriptorDacl InitializeSecurityDescriptor CreateProcessAsUserW RegisterServiceCtrlHandlerExW CreateServiceW

shell32

SHGetFolderLocation SHGetPathFromIDListW

ole32

CoTaskMemFree

$SYSDIR/CFCA_HSBC_scsp.dll

IMPHASH 4d3d95036cbeabad4c69b418a37ee2ee
SHA256 011523f383fe08bcd5a07307fc76cb644d6d7e955a88fdea02473a7591858386
MD5 59671bf95699f5fd4ad23e6da2bd6284
SHA1 d50f9d1cdbaacabb86fb6106e98fff084e9ca9f5
SHA512 b7abb03eb4c2b395fc48679421668cf9ddd164c3b23d641b8631a97df0031133b5d8ea2102efdc0e07b881ebfe1668c0c4a3102ab6897e56ba734306ab01ecbc
SSDEEP 768:3Ai/JwobqOtAHbhgSFmXEI1iogdq0S01/2o+6JKKFx:wK+mLBJ1iDduaJp
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7585

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\Work\JinkeToken\release\Jinkescsp.pdb

kernel32

ReadFile GetModuleFileNameW CreateFileW GetLastError GetVersionExW lstrcatW CloseHandle lstrcpyW SetLastError LoadLibraryW FreeLibrary FindResourceW GetProcAddress GetFileSize GetCurrentThreadId GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement HeapFree Sleep ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc VirtualAlloc HeapReAlloc WriteFile LoadLibraryA InitializeCriticalSectionAndSpinCount RtlUnwind GetLocaleInfoA GetStringTypeA MultiByteToWideChar GetStringTypeW LCMapStringA LCMapStringW HeapSize

advapi32

RegCloseKey RegDeleteKeyW RegCreateKeyExW RegSetValueExW

$SYSDIR/CFCA_HSBC_scsp.sig

SHA256 81994e5295f30965a669078a3ff371e848f3d51eb788d7ede8c0d0db10051d19
MD5 4f9b21ed006ad3eb4963bdaf16fee87f
SHA1 a38a0ab75845a1fcef9692d3a8e746613bdca9c9
SHA512 2d37303d0fbb80962f5e62924d8460ed6c2c13ad753b119653734ddcf4d130f6946acce64ae2de5f812f4e1e91d71d60b0b051ba0d02c6c215ee9583a6bb7ed9
MD5 SHA1 SHA512

$SYSDIR/CryptoKit.HSBC.exe

IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
SHA256 ab6068524bed05e25cfb24987d3c29f833ebe684e3072458ea25a0c826441314
MD5 88b6ed048456d41f4f9bdcebc69fdc04
SHA1 05a0347a4abc84ec871932d6e9f8c59c4e206cc3
SHA512 9cd9e45f73427da24297a19aa4a4d5e4b7b928868879babd1e3b9a424ce0ff4cb23201e777b142d651c5a044364bb625badd546c55973ecc7c7a4538a0cabe08
SSDEEP 98304:2Kr0mQVOjfSxgHtQBFZdG/Cgem9fy2vUIBjSj3btptYSSxIaGN:2Kr0mqHgHD7eYfy2vUcE3bt0InN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

c0:0e:33:53:f5:35:67:3f:b0:55:5c:db:cb:95:71:7e:49:ad:98:72

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

Chains

Aug 1, 2023

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

Serial Number

0f:d6:db:25:2a:af:e3:c3:a6:80:a7:73:92:f0:70:4c

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 2, 2023 - Feb 12, 2026

Minor OS version

0

Major OS version

5

Entry point

13333

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte MulDiv lstrlenA WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx FindWindowExW GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint IsWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

$PLUGINSDIR/System.dll

IMPHASH 039bcbc605477e8e87ec550c2e60e748
SHA256 03cd57ab00236c753e7ddeee8ee1c10839ace7c426769982365531042e1f6f8b
MD5 959ea64598b9a3e494c00e8fa793be7e
SHA1 40f284a3b92c2f04b1038def79579d4b3d066ee0
SHA512 5e765e090f712beffce40c5264674f430b08719940d66e3a4d4a516fd4ade859f7853f614d9d6bbb602780de54e11110d66dbb0f9ca20ef6096ede531f9f6d64
SSDEEP 192:sRer7uivwq1XpKs4FVWSjMd8tIg2cREbyCsZ8q2R4Sy+Xe:s67Xws4FVWig86/5eCBqSy+Xe
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10085

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$SYSDIR/CryptoKit.HSBC.x64.dll

IMPHASH 25caddb1d4d67979deb136bc46bbfeb1
SHA256 e00eba22c4ca5e9fadcd2ddd561b0cf9f9eb8ae7bac619777fc527354b10e016
MD5 510f6561ce51936a460d7ccc2c04010c
SHA1 a1078a52039a14dbe476f67dfcae77c09f9339b4
SHA512 e700651aa50a9b00ef38ad2c5f74e220aa39f91708163844f94a109d0d4a7194ef7c093da416412c1b54fa7d22a3cf0cb97dd41f0002ca29005945a55d5d0bfc
SSDEEP 24576:IcdjuFD3DgfGCNSi4Q/HFFlCzqpD2iUl6ZBXi:Ic1uFbDgfGCN5V5VUl6Di
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x64 arch:x64

Digest

e2:c5:62:ee:75:61:53:b8:be:ce:83:f6:39:9b:f2:f0:fe:da:7a:0e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

Chains

Aug 1, 2023

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

Serial Number

0f:d6:db:25:2a:af:e3:c3:a6:80:a7:73:92:f0:70:4c

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 2, 2023 - Feb 12, 2026

Minor OS version

2

Major OS version

5

Entry point

699316

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\BuildAgent\_work\111\s\SADK\Private\Src\CryptoKits\HSBC\CryptoKit\x64\Release\CryptoKit.HSBC.x64.pdb

kernel32

InterlockedPushEntrySList VirtualFree VirtualAlloc InterlockedPopEntrySList SystemTimeToTzSpecificLocalTime LoadLibraryExW MultiByteToWideChar GetModuleFileNameW LeaveCriticalSection EnterCriticalSection lstrcmpiW GetModuleHandleW FormatMessageW FindResourceExW FindResourceW LoadResource LockResource SizeofResource DeleteCriticalSection InitializeCriticalSection RaiseException lstrlenW GetLastError SetLastError HeapDestroy HeapAlloc LoadLibraryW HeapReAlloc HeapSize GetProcessHeap WideCharToMultiByte CreateFileW ReadFile CloseHandle FileTimeToSystemTime FreeResource WriteFile GetVersionExW DeactivateActCtx ActivateActCtx FindActCtxSectionStringW CreateActCtxW GetModuleHandleExW QueryActCtxW OutputDebugStringA GetCurrentThreadId GetCurrentProcess FlushInstructionCache GlobalAlloc GlobalLock GlobalUnlock GlobalFree GetVersion GetFileType GetStdHandle GetTickCount QueryPerformanceCounter GetCurrentProcessId GlobalMemoryStatus LoadLibraryA FlushConsoleInputBuffer RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext FlsSetValue GetCommandLineA Sleep ExitProcess SetConsoleCtrlHandler GetSystemTimeAsFileTime ReadConsoleInputA SetConsoleMode GetConsoleMode GetModuleFileNameA HeapSetInformation HeapCreate EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage GetTimeZoneInformation GetDateFormatA GetTimeFormatA SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetConsoleCP SetFilePointer LCMapStringW InitializeCriticalSectionAndSpinCount FlushFileBuffers SetStdHandle LCMapStringA CreateFileA GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringA CompareStringW SetEnvironmentVariableA SetEndOfFile GetProcAddress FreeLibrary LocalAlloc HeapFree LocalFree

user32

PtInRect TrackMouseEvent InvalidateRect CreateWindowExW GetWindowLongPtrW CallWindowProcW GetDC ReleaseDC GetSystemMetrics DrawTextW GetUserObjectInformationW GetProcessWindowStation BeginPaint GetCursorPos GetWindowRect ScreenToClient SetWindowLongPtrW DialogBoxParamW DefWindowProcW LoadStringW CharNextW GetActiveWindow GetForegroundWindow DestroyWindow UnregisterClassA ShowWindow BringWindowToTop EndDialog EndPaint MessageBoxW FillRect SendMessageW LoadImageW GetWindow GetWindowLongW MonitorFromWindow GetMonitorInfoW GetParent GetClientRect MapWindowPoints GetDlgItem GetDesktopWindow SetWindowPos

advapi32

GetTraceEnableFlags CryptGetKeyParam CryptDestroyKey CryptGetProvParam CryptCreateHash CryptHashData CryptSignHashW CryptDestroyHash CryptGetHashParam CryptEnumProvidersW DeregisterEventSource ReportEventW RegisterEventSourceW UnregisterTraceGuids RegisterTraceGuidsW GetTraceLoggerHandle CryptAcquireContextW GetTraceEnableLevel RegQueryValueExW ControlTraceW CryptReleaseContext RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW TraceEvent CryptGetUserKey

ole32

CoCreateInstance CoTaskMemAlloc CreateStreamOnHGlobal CoTaskMemRealloc CoTaskMemFree StringFromGUID2

oleaut32

SysFreeString SysStringLen VarUI4FromStr LoadRegTypeLi SysAllocString UnRegisterTypeLi RegisterTypeLi SysAllocStringLen LoadTypeLi SysAllocStringByteLen SysStringByteLen

crypt32

CertCreateCertificateContext CertAddCertificateContextToStore CryptEncodeObject CertGetNameStringW CertOpenStore CertCloseStore CertNameToStrW CertFindExtension CryptDecodeObjectEx CertVerifyTimeValidity CertGetCertificateContextProperty CertEnumCertificatesInStore CertDuplicateCertificateContext CertFreeCertificateContext CryptAcquireCertificatePrivateKey

gdiplus

GdipDeleteGraphics GdipCloneImage GdipLoadImageFromStream GdipDisposeImage GdipAlloc GdipGetImageHeight GdipGetImageWidth GdiplusStartup GdiplusShutdown GdipCreateFromHDC GdipFree GdipDrawImageRectRectI

gdi32

SetBkMode SetTextColor CreateFontIndirectW GetObjectW GetDeviceCaps BitBlt RoundRect CreatePen GetStockObject DeleteObject SelectObject CreateCompatibleBitmap CreateCompatibleDC CreateSolidBrush

shlwapi

StrStrIW

msimg32

GradientFill

cryptui

CryptUIDlgViewCertificateW

$SYSDIR/CryptoKit.HSBC.x86.dll

IMPHASH 68b6a8e7fcedd1a40e82c378c61c6c12
SHA256 fa69867c017873a36f500ff84dddde62439e3960dfae7d30b4038a4b56e834b2
MD5 d6093ec468e383c616154ec1c92e3f53
SHA1 9dd2406105c67f86085c9a82475c1e903690dc81
SHA512 10ab0650d7e8e294cb6d4b7a7ff3e6e2ea4f1893be32eb00bd5db4bee0b2e6b51dab50e0f66500bf5602f1eec3abc236b3492cec97afa67470928d6260676e89
SSDEEP 24576:59imEEBDlFxRvhxB3srzAzj2ByAEmXsa+:59ijgfHBGzs2oAEosj
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Digest

05:68:10:1c:81:71:40:1f:c6:fd:52:ad:8f:c7:6b:8a:af:2c:b9:4d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

Chains

Aug 1, 2023

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

Serial Number

0f:d6:db:25:2a:af:e3:c3:a6:80:a7:73:92:f0:70:4c

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 2, 2023 - Feb 12, 2026

Minor OS version

0

Major OS version

5

Entry point

580485

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\BuildAgent\_work\111\s\SADK\Private\Src\CryptoKits\HSBC\CryptoKit\x86\Release\CryptoKit.HSBC.x86.pdb

kernel32

InterlockedCompareExchange IsProcessorFeaturePresent SystemTimeToTzSpecificLocalTime LoadLibraryExW MultiByteToWideChar GetModuleFileNameW LeaveCriticalSection EnterCriticalSection InterlockedDecrement InterlockedIncrement lstrcmpiW GetModuleHandleW FormatMessageW FindResourceExW FindResourceW LoadResource LockResource SizeofResource DeleteCriticalSection InitializeCriticalSection RaiseException lstrlenW GetLastError SetLastError LoadLibraryW HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap WideCharToMultiByte CreateFileW GetFileSizeEx ReadFile CloseHandle FileTimeToSystemTime FreeResource WriteFile GetVersionExW GetModuleHandleA GetVersion GetFileAttributesW OutputDebugStringA GetCurrentThreadId GetCurrentProcess FlushInstructionCache GlobalAlloc GlobalLock GlobalUnlock GlobalFree GetFileType GetStdHandle GetTickCount QueryPerformanceCounter GetCurrentProcessId GlobalMemoryStatus LoadLibraryA GetVersionExA FlushConsoleInputBuffer RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA Sleep ExitProcess SetConsoleCtrlHandler GetSystemTimeAsFileTime ReadConsoleInputA SetConsoleMode GetConsoleMode VirtualFree VirtualAlloc HeapCreate GetModuleFileNameA GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetTimeZoneInformation GetTimeFormatA GetDateFormatA SetHandleCount GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetConsoleCP SetFilePointer LCMapStringW InitializeCriticalSectionAndSpinCount FlushFileBuffers SetStdHandle LCMapStringA CreateFileA GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringA CompareStringW SetEnvironmentVariableA SetEndOfFile GetProcAddress FreeLibrary LocalAlloc LocalFree

user32

GetCursorPos PtInRect TrackMouseEvent InvalidateRect CreateWindowExW CallWindowProcW GetDC ReleaseDC GetSystemMetrics DrawTextW GetUserObjectInformationW ShowWindow EndDialog MessageBoxA ScreenToClient SetWindowLongW DialogBoxParamW DefWindowProcW LoadStringW CharNextW GetActiveWindow GetForegroundWindow DestroyWindow BringWindowToTop UnregisterClassA SendMessageW EndPaint FillRect GetDesktopWindow BeginPaint LoadImageW GetWindow GetWindowLongW MonitorFromWindow GetMonitorInfoW GetParent GetClientRect MapWindowPoints GetDlgItem SetWindowPos GetProcessWindowStation GetWindowRect

advapi32

ControlTraceW CryptGetUserKey CryptGetKeyParam CryptDestroyKey CryptGetProvParam CryptCreateHash CryptHashData CryptSignHashW CryptDestroyHash CryptGetHashParam CryptEnumProvidersW DeregisterEventSource ReportEventA UnregisterTraceGuids RegisterTraceGuidsW GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags RegQueryValueExW CryptReleaseContext RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW TraceEvent RegisterEventSourceA CryptAcquireContextW

ole32

CreateStreamOnHGlobal CoCreateInstance CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree StringFromGUID2

oleaut32

SysStringLen VarUI4FromStr LoadRegTypeLi LoadTypeLi SysFreeString RegisterTypeLi SysStringByteLen SysAllocStringLen UnRegisterTypeLi SysAllocStringByteLen SysAllocString

crypt32

CertGetNameStringW CertDuplicateCertificateContext CertAddCertificateContextToStore CertEnumCertificatesInStore CertCreateCertificateContext CryptEncodeObject CertOpenStore CertCloseStore CertNameToStrW CertFindExtension CryptDecodeObjectEx CertVerifyTimeValidity CertGetCertificateContextProperty CryptAcquireCertificatePrivateKey CertFreeCertificateContext

gdiplus

GdipCreateFromHDC GdipCloneImage GdipLoadImageFromStream GdipDisposeImage GdipAlloc GdipGetImageHeight GdipGetImageWidth GdipDrawImageRectRectI GdiplusStartup GdiplusShutdown GdipFree GdipDeleteGraphics

gdi32

SetBkMode SetTextColor CreateFontIndirectW GetObjectW GetDeviceCaps BitBlt RoundRect CreateSolidBrush GetStockObject SelectObject CreateCompatibleBitmap CreateCompatibleDC DeleteObject CreatePen

shlwapi

StrStrIW

msimg32

GradientFill

cryptui

CryptUIDlgViewCertificateW

$SYSDIR/npCryptoKit.HSBC.x86.dll

IMPHASH 013833e4780fce2f4121a37a72e7b76c
SHA256 5a52680b20a7b2ca26383f83ad4285b9f236f765cfcdcdb0f11a8ee14696d3a9
MD5 48eb627ddb83642dd4848e2c08d68d80
SHA1 1f9ec3811f68f65c17719cf5ccb2a81a38672fc1
SHA512 a1a8fc58c7633f7d868863827e34d1d15bf04e62cd166f91c89e23db463b90c3264474d57cac28b387113505c1925e8d5d3ed51bada307bedb4b3a107790d07e
SSDEEP 24576:ggIUf+v7BrAPaOLnc5xaVlanYJofo2XLk:UISO4mlRJmoYLk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

ae:90:ad:fe:a6:74:fa:c3:b8:65:7f:4e:fa:a7:ec:c6:68:95:83:10

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

Chains

Aug 1, 2023

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

Serial Number

0f:d6:db:25:2a:af:e3:c3:a6:80:a7:73:92:f0:70:4c

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 2, 2023 - Feb 12, 2026

Minor OS version

0

Major OS version

5

Entry point

615812

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\BuildAgent\_work\111\s\SADK\Private\Src\CryptoKits\HSBC\CryptoKit\x86\Release\npCryptoKit.HSBC.x86.pdb

kernel32

GetFileAttributesW OutputDebugStringA lstrlenW lstrcmpiW LoadLibraryExW InterlockedDecrement InterlockedIncrement GetCurrentThreadId GetCurrentProcess FlushInstructionCache GlobalAlloc GlobalLock GlobalUnlock GlobalFree GetFileType GetStdHandle GetTickCount QueryPerformanceCounter GetCurrentProcessId GlobalMemoryStatus LoadLibraryA GetVersionExA GetVersion TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RtlUnwind Sleep ExitProcess SetConsoleCtrlHandler GetSystemTimeAsFileTime ReadConsoleInputA SetConsoleMode GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetTimeZoneInformation GetTimeFormatA GetDateFormatA SetHandleCount GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate VirtualFree VirtualAlloc GetConsoleCP SetFilePointer LCMapStringW InitializeCriticalSectionAndSpinCount FlushFileBuffers SetStdHandle LCMapStringA CreateFileA GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringA CompareStringW SetEnvironmentVariableA SetEndOfFile GetModuleHandleW GetModuleHandleA TzSpecificLocalTimeToSystemTime GetLocalTime CompareFileTime SystemTimeToFileTime GetModuleFileNameW GetFileSizeEx MultiByteToWideChar GetVersionExW WriteFile CloseHandle ReadFile CreateFileW WideCharToMultiByte FreeResource FileTimeToSystemTime SetLastError GetProcessHeap HeapSize HeapReAlloc HeapFree HeapAlloc HeapDestroy DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection RaiseException InterlockedCompareExchange IsProcessorFeaturePresent FormatMessageW FindResourceExW FindResourceW LoadResource LockResource SizeofResource SystemTimeToTzSpecificLocalTime GetLastError FreeLibrary GetProcAddress LoadLibraryW LocalFree FlushConsoleInputBuffer LocalAlloc

user32

GetCursorPos EndDialog EndPaint FillRect BeginPaint ShowWindow BringWindowToTop SendMessageW PtInRect GetWindow GetWindowLongW MonitorFromWindow GetForegroundWindow GetActiveWindow LoadStringW TrackMouseEvent InvalidateRect CreateWindowExW CallWindowProcW GetDC CharNextW ReleaseDC GetSystemMetrics DrawTextW GetUserObjectInformationW MessageBoxA GetProcessWindowStation GetDesktopWindow LoadImageW GetMonitorInfoW GetParent GetClientRect MapWindowPoints GetDlgItem SetWindowPos GetWindowRect ScreenToClient SetWindowLongW DialogBoxParamW DefWindowProcW UnregisterClassA

advapi32

CryptSignHashW CryptCreateHash CryptEnumProvidersW RegDeleteKeyW RegSetValueExW RegCreateKeyExW CryptGetProvParam CryptDestroyKey CryptGetKeyParam CryptGetUserKey CryptAcquireContextW CryptDestroyHash RegisterEventSourceA ReportEventA DeregisterEventSource RegDeleteValueW RegEnumKeyExW RegQueryInfoKeyW TraceEvent CryptReleaseContext ControlTraceW RegOpenKeyExW RegQueryValueExW RegCloseKey GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags RegisterTraceGuidsW UnregisterTraceGuids CryptGetHashParam CryptHashData

oleaut32

VarUI4FromStr SysAllocStringLen SysStringByteLen SysAllocString SysFreeString SysAllocStringByteLen

crypt32

CertDuplicateCertificateContext CertGetNameStringW CryptAcquireCertificatePrivateKey CryptEncodeObject CertDeleteCertificateFromStore CertCreateCertificateContext CertCloseStore CertNameToStrW CertFindExtension CryptDecodeObjectEx CertVerifyTimeValidity CertGetCertificateContextProperty CertOpenStore CertEnumCertificatesInStore CertAddCertificateContextToStore CertFreeCertificateContext

msimg32

GradientFill

gdiplus

GdipCloneImage GdipLoadImageFromStream GdipDisposeImage GdipAlloc GdipFree GdipGetImageHeight GdipGetImageWidth GdipDrawImageRectRectI GdipDeleteGraphics GdipCreateFromHDC GdiplusShutdown GdiplusStartup

gdi32

CreateSolidBrush DeleteObject CreateCompatibleDC CreateCompatibleBitmap SelectObject GetStockObject CreatePen RoundRect BitBlt GetDeviceCaps GetObjectW CreateFontIndirectW SetTextColor SetBkMode

ole32

CreateStreamOnHGlobal CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree CoCreateInstance

shlwapi

StrStrIW

cryptui

CryptUIDlgViewCertificateW

CryptoKitHost.HSBC.x86.exe

IMPHASH 56aabd9e03740bc5966323dca57bbe21
SHA256 5c7b30e459b57ed325a35fd23389d1086390efe7dbc5cd7b009d6ce287f9f2c5
MD5 9df83d1d074bcc9461f8d59d906a4e1e
SHA1 d539a8831218654d5cf409d04954d3add6bd029b
SHA512 8e276526d7be9ec13a0445a5ef4a30ad66c687664eaf9265d0ccfa1f7b28550530c2c5e6b604a7e00356c0adda575131890bcf21c7dc150b952783204369ece8
SSDEEP 24576:OgctMhz7gC5nbgVaMhxWbPXqh0iL5XTLbvtO:+t0EugfHWTXqnLxLbI
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

26:71:34:ba:1e:67:d1:d2:90:09:81:56:25:e1:fc:b4:7a:32:a0:d0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

Chains

Aug 1, 2023

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=beijing,C=CN

Serial Number

0f:d6:db:25:2a:af:e3:c3:a6:80:a7:73:92:f0:70:4c

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 2, 2023 - Feb 12, 2026

Minor OS version

0

Major OS version

5

Entry point

597103

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\BuildAgent\_work\111\s\SADK\Private\Src\CryptoKits\HSBC\CryptoKit\x86\Release\CryptoKitHost.HSBC.x86.pdb

kernel32

GetVersionExW GetFileSizeEx GetModuleFileNameW GetFileAttributesW OutputDebugStringA lstrlenW lstrcmpiW LoadLibraryExW InterlockedDecrement InterlockedIncrement GetCurrentProcess FlushInstructionCache GlobalAlloc GlobalLock WriteFile GlobalFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind Sleep ExitProcess SetConsoleCtrlHandler GetSystemTimeAsFileTime ReadConsoleInputA SetConsoleMode GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetTimeZoneInformation GetTimeFormatA GetDateFormatA SetHandleCount GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree VirtualAlloc InitializeCriticalSectionAndSpinCount GetConsoleCP FlushFileBuffers SetStdHandle SetFilePointer LCMapStringA LCMapStringW CreateFileA GetStringTypeA GetStringTypeW GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringA CompareStringW SetEnvironmentVariableA SetEndOfFile ReadFile CreateFileW WideCharToMultiByte FreeResource FileTimeToSystemTime SetLastError FlushConsoleInputBuffer GetVersionExA LoadLibraryA CloseHandle GlobalMemoryStatus GetCurrentProcessId QueryPerformanceCounter GetTickCount MultiByteToWideChar GetStdHandle GetFileType GetVersion GetModuleHandleA GetCurrentThreadId GetProcessHeap HeapSize HeapReAlloc HeapFree HeapAlloc HeapDestroy DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection RaiseException InterlockedCompareExchange IsProcessorFeaturePresent GetModuleHandleW FormatMessageW FindResourceExW FindResourceW LoadResource LockResource SizeofResource SystemTimeToTzSpecificLocalTime GetLastError FreeLibrary GetProcAddress LoadLibraryW LocalFree GlobalUnlock LocalAlloc

user32

BeginPaint ShowWindow BringWindowToTop SendMessageW LoadImageW GetWindow GetWindowLongW MonitorFromWindow GetMonitorInfoW FillRect GetClientRect MapWindowPoints GetDlgItem GetForegroundWindow GetActiveWindow LoadStringW EndPaint EndDialog GetCursorPos PtInRect TrackMouseEvent GetUserObjectInformationW InvalidateRect CreateWindowExW CallWindowProcW DrawTextW GetDC ReleaseDC GetSystemMetrics GetParent SetWindowPos GetWindowRect ScreenToClient SetWindowLongW DialogBoxParamW DefWindowProcW CharNextW MessageBoxA GetDesktopWindow GetProcessWindowStation UnregisterClassA

advapi32

RegDeleteKeyW RegCreateKeyExW CryptGetProvParam CryptDestroyKey CryptGetKeyParam CryptGetUserKey CryptAcquireContextW RegisterEventSourceA ReportEventA DeregisterEventSource CryptEnumProvidersW RegDeleteValueW RegEnumKeyExW RegQueryInfoKeyW CryptGetHashParam CryptDestroyHash CryptSignHashW CryptHashData TraceEvent CryptReleaseContext ControlTraceW RegOpenKeyExW RegQueryValueExW RegCloseKey GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags RegisterTraceGuidsW UnregisterTraceGuids CryptCreateHash RegSetValueExW

oleaut32

SysAllocStringLen SysStringByteLen SysAllocStringByteLen SysFreeString VarUI4FromStr SysAllocString

crypt32

CertFreeCertificateContext CertDuplicateCertificateContext CertGetNameStringW CryptAcquireCertificatePrivateKey CryptEncodeObject CertAddCertificateContextToStore CertCreateCertificateContext CertCloseStore CertNameToStrW CertFindExtension CryptDecodeObjectEx CertVerifyTimeValidity CertGetCertificateContextProperty CertOpenStore CertEnumCertificatesInStore

msimg32

GradientFill

gdiplus

GdipCloneImage GdipLoadImageFromStream GdipDisposeImage GdipAlloc GdipFree GdipGetImageHeight GdipGetImageWidth GdipDrawImageRectRectI GdipDeleteGraphics GdipCreateFromHDC GdiplusShutdown GdiplusStartup

gdi32

SetBkMode SetTextColor CreateFontIndirectW GetObjectW DeleteObject BitBlt SelectObject CreateCompatibleBitmap GetDeviceCaps CreateCompatibleDC CreateSolidBrush GetStockObject RoundRect CreatePen

ole32

CreateStreamOnHGlobal CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree CoCreateInstance

shlwapi

StrStrIW

cryptui

CryptUIDlgViewCertificateW

com.cfca.CryptoKitHost.HSBC-firefox.json

SHA256 bb97f8e717d4d93e179c21e95adfe4246961484b278b306bba39552857027c80
MD5 23717c4721cfbb1eea7bf90f4e6d6e8d
SHA1 24d950a53f38324491ebb2af8ed6e154120f97c4
SHA512 7da2dbe9cc35968e7aed16a7efcd4bf6b7a7ecdd7af2af8c0c4a9951bb4caeada6646096178d29f22eaf3ff5fa0ae442e15b5a05930dadd3c178de943d3b51ac
MD5 SHA1 SHA512

com.cfca.CryptoKitHost.HSBC-win.json

SHA256 fb33588577ea06e32629840caa9af95cc281856a16e585c1cc4b7b6a14b978a2
MD5 54a783d9904e7f3ddfd20d694df0f59e
SHA1 f50e8217d7e1b5929d0be9340485292de965b1f6
SHA512 a4ffa8a56c0e1e6be27d259370e1e9dcc012ea0443fcdfda57986e918c729f7b97863eb8d8e1069b59270d8464bc09adf55637ae56d2cc690dd30d75f641b90e
MD5 SHA1 SHA512

uninst.exe.nsis

SHA256 964e23a72da9c5f2ad32fb6e31517e7bb5ceab4b2e7ea711d98362aecec306e0
MD5 cffa0d5e57c4dfb318c75df221a2a0d8
SHA1 753e6952ee9022316b0ef34e8e9cb8ae930a8501
SHA512 c4ec1acf8702ddf02fc8c4925e2fc46788419ee3d22f2039d17e5003e3532b322879b9334134ac592bee12281d0d87a0aa17311d2b6e74413f0d519f2225604d
SSDEEP 49152:MQEtu40mQVZEbhqqFXF5SxgH/FQBFKedvOVFCgeT6QXkS:Wr0mQVOjfSxgHtQBFZdG/Cgem9S
MD5 SHA1 SHA512 SSDEEP

HSBC_UKeyTool.exe

IMPHASH fe0b2c78ce8b2d51ed2863fbe21c537a
SHA256 24f2211816c726dec4a5b8809b7455bd34a00f4391746f7b3b7b55d13452a043
MD5 ba8cca1bb7a11644bd700452e4a92ddd
SHA1 b8cd8668bafd14eff7abfea72a8f32dd85c8259b
SHA512 768e24bdcf90c4f7118154c823a1cd680a822c2fabb7b978747fedb4805f24bef46a3576b7b64d63b60c5167e9adfc4adede216d25ad64ee92e3696750412d98
SSDEEP 6144:g1vHJZpDQ3hXEy8ER8B6yvlYGkO/eHa6BR:gjD86O8B683/36b
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

25:21:a9:9d:db:8f:29:4b:1e:71:e4:be:2e:8c:28:62:c0:ae:5d:fe:b1:37:83:43:71:22:1a:b7:0e:db:87:d1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

Chains

Nov 1, 2023

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=BeiJing JinKeLianXin Data Technology co.\,Ltd.,O=BeiJing JinKeLianXin Data Technology co.\,Ltd.,ST=北京市,C=CN

Serial Number

0d:04:89:90:cc:7e:95:47:5f:56:a1:5c:95:ed:b7:38

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 20, 2022 - Apr 18, 2025

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

1

Major OS version

5

Entry point

74718

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEvent OpenEventA SystemTimeToFileTime GetSystemTime GetLocalTime LocalFree ReadFile SetEndOfFile CreateFileW CreateFileA WriteConsoleW SetStdHandle GetStringTypeW LCMapStringW SetFilePointer GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetFileType SetHandleCount FlushFileBuffers GetConsoleMode GetConsoleCP IsValidCodePage GetOEMCP TryEnterCriticalSection GetCPInfo TlsFree TlsSetValue TlsGetValue TlsAlloc ExitProcess HeapSize HeapReAlloc HeapCreate IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetStdHandle WriteFile GetStartupInfoW HeapSetInformation GetCommandLineW VirtualQuery GetSystemInfo VirtualProtect RtlUnwind EncodePointer DecodePointer InterlockedPopEntrySList VirtualAlloc VirtualFree IsProcessorFeaturePresent HeapAlloc GetProcessHeap HeapFree InterlockedPushEntrySList InterlockedCompareExchange InitializeCriticalSection GlobalAlloc GlobalLock GlobalUnlock GlobalFree FreeResource OutputDebugStringA SetThreadUILanguage SetThreadLocale MulDiv lstrcatW CreateProcessW InterlockedExchange CreateThread lstrcpyW LoadLibraryW LoadLibraryA GetModuleFileNameW LoadLibraryExW FindResourceW LoadResource SizeofResource FreeLibrary CreateMutexA CloseHandle GetModuleFileNameA GetPrivateProfileIntA Sleep SetLastError lstrcmpiW InterlockedDecrement InterlockedIncrement GetModuleHandleW GetProcAddress MultiByteToWideChar lstrlenW GetCurrentThreadId GetCurrentProcess FlushInstructionCache DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection RaiseException FileTimeToSystemTime WideCharToMultiByte GetLastError GetACP

user32

UnregisterClassA LoadMenuW SendMessageW SetWindowsHookExW UnhookWindowsHookEx CallNextHookEx GetKeyState InflateRect EndPaint BeginPaint wsprintfA SetWindowLongW DispatchMessageW TranslateMessage GetMessageW PeekMessageW CharNextW DestroyWindow CreateDialogParamW RegisterClassW GetClassInfoW DefWindowProcW wsprintfW EndDialog GetWindowLongW PostMessageW MoveWindow SetWindowPos GetClientRect SetFocus PtInRect ReleaseCapture DrawEdge DrawFocusRect CallWindowProcW GetCapture SystemParametersInfoW GetDlgCtrlID SetCapture IsWindowEnabled KillTimer SetTimer InvalidateRect IsWindow SetForegroundWindow SetLayeredWindowAttributes UpdateWindow ClientToScreen AdjustWindowRectEx GetMenu GetWindowTextLengthW GetSystemMetrics GetWindowTextW ScreenToClient GetActiveWindow GetCursorPos FindWindowW FindWindowExW DrawAnimatedRects CreateWindowExW TrackPopupMenu SetMenuDefaultItem IsWindowVisible ShowWindow BringWindowToTop IsIconic MonitorFromPoint DestroyMenu GetDC ReleaseDC PostQuitMessage LoadImageW GetParent GetWindow GetWindowRect MonitorFromWindow GetMonitorInfoW MapWindowPoints IsDialogMessageW GetDlgItem EnableWindow RegisterWindowMessageW ModifyMenuW GetSubMenu RegisterDeviceNotificationW SetWindowTextW LoadStringW DialogBoxParamW FillRect

gdi32

CreateCompatibleDC DeleteDC SelectObject SetDIBColorTable GetObjectW CreateFontIndirectW DeleteObject DPtoLP GetDeviceCaps CreateDIBSection CreateSolidBrush

advapi32

RegQueryInfoKeyW RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegEnumKeyExW RegOpenKeyExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW RegCreateKeyExW

shell32

SHAppBarMessage Shell_NotifyIconW SHGetFolderLocation SHGetPathFromIDListW

ole32

CoInitialize CreateStreamOnHGlobal CoUninitialize CoTaskMemFree CoCreateInstance CoTaskMemRealloc CoTaskMemAlloc

oleaut32

VarUI4FromStr VariantClear

shlwapi

StrCatW

comctl32

InitCommonControlsEx _TrackMouseEvent ImageList_Draw ImageList_Add ImageList_Destroy ImageList_GetIconSize ImageList_ReplaceIcon ImageList_Create

gdiplus

GdipGetImagePaletteSize GdipCloneImage GdipDrawImageI GdipGetImageGraphicsContext GdiplusShutdown GdiplusStartup GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePalette GdipAlloc GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipDisposeImage GdipDeleteGraphics GdipFree

crypt32

CertOpenStore CertCreateCertificateContext CertAddCertificateContextToStore CertDeleteCertificateFromStore CertFindCertificateInStore CertGetNameStringW CertDuplicateCertificateContext CertEnumCertificatesInStore CertCloseStore CertGetCertificateContextProperty CertFreeCertificateContext CertSetCertificateContextProperty

version

GetFileVersionInfoW VerQueryValueW

cryptui

CryptUIDlgViewCertificateW

Sharing

General

Malware Config

Signatures

File Explorer