setup_2[.]exe[.]vir

resource	yara_rule
static1/unpack001/sogou_pinyin.exe	upx

resource
setup_2.exe.vir
unpack001/$PLUGINSDIR/INetC.dll
unpack002/$PLUGINSDIR/InstallOptions.dll
unpack002/$PLUGINSDIR/System.dll
unpack002/out.upx

setup_2.exe.vir

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 9cb372f91aacf03b1c8f6210d59cc76edb2b9df4d6151430720e798aa8db7bc4
MD5 ac727ab7ec322f9864262b4d04449450
SHA1 dca460d6eb9daecd26f0d784d2a1a21501f057c3
SHA512 02c14ab026adc505e668d8c4e2db976ad836a40180db56669b12130a68b36065b20a0437c7fea51f07f7cae408aba5c638e6c33dff8660d6817ac031981586c5
SSDEEP 3145728:1/3Y6om/lbztZbI5hPMBrYuLU0ctbJdbLMoMDLn6Qp:dtomdbztPY90ct5sOQp
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13596

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

$PLUGINSDIR/INetC.dll

IMPHASH 163fdad7b5f915e3a0ca7ad1d08b4ff8
SHA256 85e03805f90f72257dd41bfdaa186237218bbb0ec410ad3b6576a88ea11dccb9
MD5 40d7eca32b2f4d29db98715dd45bfac5
SHA1 124df3f617f562e46095776454e1c0c7bb791cc7
SHA512 5fd4f516ce23fb7e705e150d5c1c93fc7133694ba495fb73101674a528883a013a34ab258083aa7ce6072973b067a605158316a4c9159c1b4d765761f91c513d
SSDEEP 384:pjj9e9dE95XD+iTx58Y5oMM3O9MEoLr1VcQZ/ZwcSyekMRlZ4L4:dAvE90GuY2tO93oLrJRM7Z4E
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

17841

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

lstrcpyW CreateThread LocalAlloc lstrcpynW SleepEx MulDiv GetModuleHandleW GetTickCount ReadFile CreateFileA CreateFileW GetFileSize lstrcmpiW lstrcatW LoadLibraryA lstrcmpW lstrlenA MultiByteToWideChar WriteFile lstrlenW CloseHandle GetLastError DeleteFileW GetProcAddress WideCharToMultiByte LocalFree TerminateThread GlobalAlloc GlobalFree SetFilePointer WaitForSingleObject

user32

wsprintfA FindWindowExW GetWindowLongW IsWindow CreateDialogParamW ShowWindow GetParent DispatchMessageW LoadIconW KillTimer PostMessageW IsDialogMessageW SetWindowPos SetWindowTextW GetMessageW SendDlgItemMessageW TranslateMessage EnableWindow RedrawWindow UpdateWindow GetWindowRect SendMessageW SetTimer SetWindowLongW wsprintfW SetDlgItemTextW GetDlgItem IsWindowVisible MessageBoxW GetClientRect DestroyWindow SystemParametersInfoW GetWindowTextW

comctl32

ord17

wininet

HttpSendRequestExW InternetErrorDlg InternetWriteFile HttpSendRequestW InternetSetFilePointer HttpAddRequestHeadersA FtpCreateDirectoryW InternetCrackUrlW FtpOpenFileW InternetSetOptionW InternetOpenW InternetGetLastResponseInfoW HttpEndRequestW InternetReadFile HttpAddRequestHeadersW HttpQueryInfoW InternetCloseHandle InternetConnectW InternetQueryOptionW HttpOpenRequestW

sogou_pinyin.exe

SHA256 409d28d2d4a55153dbcfb7ebaac1429803361c58c0e3ed8d3213dadc31f4ae4f
MD5 912402d4acd15fd39f3e957a0ec078e0
SHA1 8922242bcc13dd5eaa282172156e021642fb684f
SHA512 c06a614cc5e1acbf6b1d076dee9190140d92d23dcf3ec948a9857419f8d193a6f84606d80b1b0749061f7e244d8aabce25fbad816cc1d5a4266f8fc930552ff0
SSDEEP 3145728:j3Y6om/lbztZbI5hPMBrYuLU0ctbJdbLMoMDLn6QP:jtomdbztPY90ct5sOQP
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

Digest

44:83:7a:5e:01:5f:c3:e3:f2:32:8f:f8:ed:f7:0a:54:13:b4:d5:09:18:71:e6:54:38:dc:a6:4d:70:14:f2:9c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Chains

Jul 19, 2024

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Serial Number

08:90:b9:34:84:e6:f1:8e:fe:9f:43:68:3a:5f:49:d8

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 25, 2021 - Aug 21, 2024

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

5

Entry point

2861312

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

$PLUGINSDIR/HWSignature.dll

IMPHASH cdd42c264bacf432f4003380d6c8ce27
SHA256 8030f81ec2f19722b6b7a67d5f7bb668de3b8ac09f66de6a8a8bbc7ab5ca1390
MD5 12b02fb9cf05343406a4cd690e1ca70b
SHA1 2857b7184c692a14c9a4066693a761e839623a64
SHA512 9ac6ff85e46d0dc0052f52bc3960fb8b50cc096194f56212c77e7131aa6da1920233cab77a5e99ed1ce0b6b9f1af4f74cf4dc4ed4683a4c5b29fe1789e9055e6
SSDEEP 3072:TRFaHlycZOgiTptaQihWc2lSpRHPdmRRSwj33zMd:tFwllOJTbaDhulS/43Ad
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Digest

28:d0:5a:4b:9d:1b:e8:89:8e:a0:1b:ac:c5:59:3b:f1:76:3b:4c:a1:af:a5:b7:09:5f:33:0e:9d:33:a1:ab:2a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Chains

Jul 17, 2024

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Serial Number

01:ba:be:96:e5:0e:a2:5f:3f:0e:88:42:9a:74:a4:62

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 17, 2024 - Jun 19, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

16956

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\landun\pinyin_agent\workspace\p-f93f0d74ed8a49278e11882bf2562c5a\src\bin\Release_Win32\HWSignature.pdb

ws2_32

WSAStartup

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

kernel32

EnterCriticalSection CreateFileW DecodePointer GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte HeapFree DeviceIoControl lstrcatA CopyFileA CreateFileA GetSystemDirectoryA CloseHandle HeapAlloc GetProcessHeap lstrcpyA lstrlenA GlobalAlloc LocalAlloc GetLastError LoadLibraryA GetVersionExA GetProcAddress LocalFree FreeLibrary HeapReAlloc SetLastError GlobalFree GetTickCount GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedFlushSList RtlUnwind WriteConsoleW LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException ExitProcess GetModuleHandleExW GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetFilePointerEx GetStringTypeW SetStdHandle HeapSize

user32

IsCharAlphaNumericA wsprintfA

$PLUGINSDIR/ImageMagik.dll

IMPHASH f204f2299a0324f196a8576faef59e72
SHA256 1cc49c7e63a141a2639082e95e313ced13975208d1e426dd1dfd205da52eeabd
MD5 b7a772dace39e78425214e501527410f
SHA1 139e5e5bef9ad012d2a9c9e45733923228ab753f
SHA512 e0ff9398bfcfe466d32385510c5898da88a7382ea1f39bbb68c970ac11b0a793fe4da5901f60b49db5665e7d81f7e746390d4c25a3142151d2fff47dea2501d6
SSDEEP 98304:g8TehrnxKNDXEAOhBWlgPqdeP/pkzLLh6FRyv+yJkzBZhhhhhhhd+0B:g8Te7KNDX1OhBWlgPqdewLLh8RakPhhx
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Digest

59:ab:59:bb:f3:13:fc:85:33:e2:9c:a6:b7:5d:4c:d1:84:0c:a2:7d:67:cc:d8:6a:a1:17:d2:68:42:62:57:e3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Chains

Jul 17, 2024

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Serial Number

01:ba:be:96:e5:0e:a2:5f:3f:0e:88:42:9a:74:a4:62

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 17, 2024 - Jun 19, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

57231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\data\landun\workspace\p-a6b81373d56245738becf19644b9638b\src\third_party_build\imagemagick\tmp\x86\RelWithDebInfo\ImageMagik.pdb

kernel32

QueryPerformanceCounter QueryPerformanceFrequency GetExitCodeProcess GetSystemTimeAsFileTime GetConsoleOutputCP LoadLibraryA MultiByteToWideChar IsValidCodePage GetACP GetCPInfo IsDBCSLeadByteEx ReadFile WriteFile PeekNamedPipe SetEvent ResetEvent ReadConsoleInputA DeviceIoControl DuplicateHandle GetConsoleWindow WaitForSingleObjectEx WaitForMultipleObjectsEx CreateEventW WaitForMultipleObjects GetExitCodeThread GetTimeZoneInformation GetDateFormatW GetTimeFormatW GetLocaleInfoW MapViewOfFile UnmapViewOfFile CreateFileMappingA CreateMutexA GetCurrentThreadId ExitProcess MoveFileExW GetFileInformationByHandle AttachConsole GetThreadLocale GetLocaleInfoA WideCharToMultiByte GetModuleHandleW FreeLibrary GetVersion CreateProcessA CreateEventA RemoveVectoredExceptionHandler AddVectoredExceptionHandler GetShortPathNameW GetCommandLineW GetStdHandle GetFileAttributesW GetCurrentDirectoryW TerminateProcess GetSystemInfo SetConsoleMode GetConsoleMode GetFileInformationByHandleEx IsDebuggerPresent GetFileType ExpandEnvironmentStringsW SetEnvironmentVariableW GetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetProcessAffinityMask GetNativeSystemInfo GetCurrentProcess TlsSetValue TlsGetValue TlsAlloc ResumeThread GetThreadPriority SetThreadPriority GetCurrentThread CloseHandle Sleep SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable TryEnterCriticalSection TryAcquireSRWLockShared TryAcquireSRWLockExclusive AcquireSRWLockShared AllocConsole AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive InitializeSRWLock RaiseException GetComputerNameW GetModuleHandleA GetModuleFileNameW VirtualQuery GetWindowsDirectoryW GetSystemDirectoryW DebugBreak LoadLibraryW GetProcAddress FormatMessageW GetVersionExA DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetTempPathW GetTempFileNameW DeleteFileW CreateFileW LocalFree GetCurrentProcessId OpenMutexW CreateMutexW WaitForSingleObject ReleaseMutex GetLastError PeekConsoleInputA UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent InitializeSListHead GetStartupInfoW InterlockedPushEntrySList InterlockedFlushSList RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsFree LoadLibraryExW EncodePointer SetStdHandle CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW SetEndOfFile GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SetCurrentDirectoryW CreateDirectoryW RemoveDirectoryW GetFileAttributesExW SetFileAttributesW FlushFileBuffers SetFileTime TzSpecificLocalTimeToSystemTime SystemTimeToFileTime GetConsoleCP CreatePipe CreateProcessW GetFullPathNameW FindClose FindFirstFileExW FindNextFileW SetFilePointerEx ReadConsoleW HeapFree HeapAlloc HeapReAlloc DecodePointer GetFileSizeEx CompareStringW LCMapStringW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW SetConsoleCtrlHandler GetStringTypeW GetNumberOfConsoleInputEvents ReadConsoleInputW GetOEMCP GetCommandLineA GetProcessHeap OutputDebugStringW HeapSize WriteConsoleW GetTickCount GetDiskFreeSpaceExW GetVolumeInformationW GetVolumePathNameW GetModuleHandleExA GetLogicalDrives GetSystemDirectoryA GetLongPathNameW ReadDirectoryChangesW GetDriveTypeA GetFileSize

user32

PeekMessageA MessageBoxA FillRect IsWindow MsgWaitForMultipleObjectsEx ReleaseDC GetDC SystemParametersInfoA PostMessageA LoadStringW

gdi32

Polyline StretchDIBits CreateSolidBrush GetDeviceCaps GdiFlush CreateDIBSection GetWorldTransform Rectangle SelectClipRgn IntersectClipRect GetClipRgn GetClipBox ExtCreateRegion CreateRectRgn CreateCompatibleBitmap BitBlt ExtTextOutW GetObjectW ModifyWorldTransform SetWorldTransform GetTextMetricsA SetTextAlign SetTextColor SetMapMode SetGraphicsMode SetBkMode SelectObject SaveDC RestoreDC GetGlyphIndicesW GetFontUnicodeRanges GetOutlineTextMetricsA GetGlyphOutlineW GetFontData GetCharWidth32A DeleteObject DeleteDC CreateFontIndirectW CreateCompatibleDC GetStockObject GetGlyphOutlineA CreatePen CreateDCA EnumFontFamiliesExW ExtSelectClipRgn GetGraphicsMode CreateFontIndirectA

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetFileInfoW SHFileOperationW CommandLineToArgvW

ole32

CoTaskMemFree

advapi32

RegOpenKeyExW RegCreateKeyExW RegGetValueW RegQueryValueExA RegOpenKeyExA RegSetValueExW LookupAccountSidW RegNotifyChangeKeyValue RegEnumKeyExW RegEnumValueW RegQueryInfoKeyW GetFileSecurityW GetSecurityDescriptorOwner RegLoadMUIStringW RegQueryValueExW RegDeleteValueW RegCloseKey GetUserNameW BuildExplicitAccessWithNameW SetSecurityInfo GetSecurityInfo SetEntriesInAclW ConvertStringSecurityDescriptorToSecurityDescriptorW SetSecurityDescriptorDacl InitializeSecurityDescriptor GetSecurityDescriptorSacl GetSecurityDescriptorGroup

ws2_32

ioctlsocket closesocket WSAStartup getsockopt recv send WSAGetLastError WSACloseEvent WSACreateEvent WSAEnumNetworkEvents WSAEventSelect WSASetEvent getservbyport getservbyname inet_pton inet_ntop htonl htons inet_addr inet_ntoa ntohs gethostbyaddr gethostbyname WSASetLastError

dnsapi

DnsFree DnsQuery_A

iphlpapi

NotifyRouteChange2 CancelMibChangeNotify2 GetIpForwardTable2

Name

.text

Size

4.4MB

Virtual Size

4.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

14KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

270B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

138KB

Virtual Size

138KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/InstallOptions.dll

IMPHASH cd90e33ffbc335413a25300c682c83df
SHA256 734d6299964cab87eeeb5f8c7e5bdf6aa8c3e29d938fdd1ada6addcd5006de28
MD5 34d24e6ecdfb6859096816436c5875da
SHA1 a4504b5eccc48ce867623dd1d081a760ab70a12f
SHA512 cf163ef71ed297259371d5bb352f8b0ef5e8bab9ad2168a26714e2d9f9037af87ec48b7e983b9fa9dc3f478c02cc0775583d52aca7604f3ac1e4a8882b3ecad9
SSDEEP 192:VsIZHdT9uwYX94kYd2iCzHR+yK7imphLAykycpKPd5mD8ozxGUWumle:VsUHd9GN2d2iwl0impATIPdAD8Ov6
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7419

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

lstrcmpiW GetModuleHandleW GlobalLock GlobalUnlock GetCurrentDirectoryW SetCurrentDirectoryW GetPrivateProfileIntW GetPrivateProfileStringW lstrcatW WritePrivateProfileStringW lstrcpynW lstrlenW lstrcpyW GlobalFree GlobalAlloc

user32

OpenClipboard DestroyIcon LoadCursorW DispatchMessageW TranslateMessage GetMessageW IsDialogMessageW ShowWindow SetWindowLongW GetClientRect SetWindowRgn LoadIconW LoadImageW CreateWindowExW MapDialogRect GetClipboardData GetWindowRect CreateDialogParamW EnableMenuItem GetSystemMenu EnableWindow GetDlgItem SetCursor DrawTextW GetWindowLongW DrawFocusRect CallWindowProcW PostMessageW wsprintfW CharNextW MessageBoxW CloseClipboard GetDlgCtrlID MapWindowPoints SetWindowPos PtInRect GetWindowTextW SetWindowTextW SendMessageW DestroyWindow

gdi32

SelectObject CreateRectRgn GetObjectW CombineRgn DeleteObject CreateCompatibleDC GetDIBits SetTextColor

shell32

SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteW SHGetDesktopFolder

comdlg32

GetOpenFileNameW CommDlgExtendedError GetSaveFileNameW

ole32

CoTaskMemFree

$PLUGINSDIR/SetupFlash.swf

SHA256 32c0aea5887f264929e78c098eb38f36b674db2d1b0dd30d48b7df0e898489c4
MD5 2154273d835dbec4d774033b7d2d8448
SHA1 486c6544e8385e7af03a248d8906f7d50ea3d58d
SHA512 9fc0d6c26e3a61a8f0ce3a3c850aeb284928e24065234f5e50d27d19e48996c7aeb93fea2b09b0365e09c99088e073869db101918ddf62fa42747aad1de2c999
SSDEEP 384:XJM+xPZyay4VDaYXXDUYtbzdP8/EAVlGRs3/H8M4DRulqB/HTzC/5e+L6nt+Ob5X:XJ5GaHXVtfm/EAVksPH8JDsi7zu5e+07
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/SetupLib.dll

IMPHASH b7d3cc98eeef23680dc67f5bf5f2b60f
SHA256 fa0ff19eb36efad5bdb4d63118a7e6ed4a42f69b60f89675520c394e32b69ea7
MD5 cc80e0bb20afc6c5b626375f0c59eb00
SHA1 cf64d2c096bab85f264932f69c93496deb686e03
SHA512 0fd69e0e6f4a62a0cd4de88d6d5e087c80688648022f3290ec7892265a376fdbd6b63b2bcf8b26d9ae96be3e987891cbc0a88b26361d70a5f23203965659e356
SSDEEP 98304:9fP6JW3hI/ELryT+A/Gp9/Ix2eSLysWvS2YLnd1NmOu++zfz2hwm0:9MWq/E3yT+A/32eSusIWn/PutfzD
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Digest

aa:72:fc:16:78:46:98:c3:51:4a:88:e7:fc:03:e2:04:79:37:b3:1c:2b:04:ce:6d:05:2a:5a:e4:07:64:c9:9d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Chains

Jul 17, 2024

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Serial Number

01:ba:be:96:e5:0e:a2:5f:3f:0e:88:42:9a:74:a4:62

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 17, 2024 - Jun 19, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

1653809

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\landun\pinyin_agent\workspace\p-f93f0d74ed8a49278e11882bf2562c5a\src\bin\Release_Win32\SetupLib.pdb

wtsapi32

WTSFreeMemory WTSQuerySessionInformationW

wininet

InternetSetOptionW HttpAddRequestHeadersA InternetErrorDlg InternetQueryOptionW HttpOpenRequestA InternetWriteFile HttpAddRequestHeadersW InternetReadFile InternetConnectA InternetCloseHandle HttpSendRequestExW HttpEndRequestW InternetOpenW InternetCrackUrlA

shlwapi

StrRetToBufW SHDeleteKeyW PathFileExistsW StrToIntW PathMatchSpecW

shell32

SHGetFolderPathW SHGetSpecialFolderPathW SHGetFileInfoW SHGetDesktopFolder CommandLineToArgvW SHGetKnownFolderPath ShellExecuteW SHFileOperationW ShellExecuteExW SHBrowseForFolderW SHGetPathFromIDListW

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

advapi32

CryptEncrypt CryptAcquireContextW ReportEventW RegisterEventSourceW DeregisterEventSource CryptSetKeyParam GetTokenInformation CryptImportKey SystemFunction036 CryptEnumProvidersW CryptSignHashW CryptDestroyHash CryptCreateHash CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey RegDeleteValueW LookupAccountSidW RegEnumKeyW LookupAccountNameW AddAccessAllowedAce GetUserNameW GetLengthSid AddAccessAllowedAceEx ConvertStringSecurityDescriptorToSecurityDescriptorW SetSecurityInfo InitializeAcl InitializeSecurityDescriptor GetFileSecurityW FreeSid OpenProcessToken AddAce SetSecurityDescriptorSacl GetNamedSecurityInfoW SetNamedSecurityInfoW SetEntriesInAclW AllocateAndInitializeSid BuildExplicitAccessWithNameW EqualSid GetAce GetAclInformation SetFileSecurityW GetSecurityDescriptorDacl AdjustTokenPrivileges SetSecurityDescriptorDacl GetSecurityDescriptorSacl LookupPrivilegeValueW RegOpenKeyExW RegSetValueExW RegCreateKeyExW RegDeleteKeyW RegCloseKey RegQueryValueExW RegEnumValueW RegOpenKeyW ConvertSidToStringSidW RegCreateKeyW RegLoadKeyW RegUnLoadKeyW RegEnumKeyExW RegSaveKeyW RegFlushKey RegQueryInfoKeyW CryptReleaseContext

kernel32

CreateProcessW WideCharToMultiByte CreateFileMappingW MapViewOfFile GetTickCount GetExitCodeProcess Sleep DeleteFileW LockResource Process32NextW MultiByteToWideChar CreateToolhelp32Snapshot OpenProcess UnmapViewOfFile GetSystemDirectoryW GetCurrentThreadId CreateFileW WaitForSingleObject VirtualProtect VirtualQuery OutputDebugStringA SystemTimeToTzSpecificLocalTime GetFileInformationByHandle GetLongPathNameW GetNativeSystemInfo RtlCaptureStackBackTrace LeaveCriticalSection TerminateProcess EnterCriticalSection SizeofResource ReadFile HeapDestroy MoveFileExW HeapSize InitializeCriticalSectionEx FindResourceW GetModuleFileNameW GetTempPathW LoadLibraryExW GetEnvironmentVariableW DebugBreak GetQueuedCompletionStatus PostQueuedCompletionStatus CreateIoCompletionPort LoadResource FindResourceExW RaiseException SuspendThread GetCurrentProcessId FreeLibrary GetModuleHandleW GetProcessHeap DeleteCriticalSection LocalFree GetProcAddress DecodePointer HeapAlloc LoadLibraryW CloseHandle GetThreadContext SetThreadContext OutputDebugStringW CreateFileA CreateFileMappingA GetLastError LocalAlloc FindClose lstrlenA InitializeCriticalSectionAndSpinCount lstrlenW GetCurrentProcess FindNextFileW GetFullPathNameW SetLastError HeapFree FindFirstFileW TransactNamedPipe SetNamedPipeHandleState WaitNamedPipeW InitOnceBeginInitialize InitOnceComplete GetDriveTypeW GlobalHandle GlobalFree Process32FirstW HeapReAlloc lstrcatW lstrcpyW GetCommandLineW TerminateThread TlsSetValue TlsGetValue TlsAlloc TlsFree QueryDosDeviceW RemoveDirectoryW GetFileAttributesW SetFileAttributesW GetLogicalDriveStringsW FileTimeToSystemTime GlobalLock GetTempFileNameW GlobalUnlock CreateDirectoryW GetProcessId GetFileAttributesExW SystemTimeToFileTime CopyFileW GetFileTime WriteFile SetFilePointer DuplicateHandle ExitThread CreateEventW FormatMessageW CreateThread GetFileSize OpenMutexW CreateMutexW ReleaseMutex GetVersionExW OpenFileMappingW GetWindowsDirectoryW FlushFileBuffers SetEvent QueryPerformanceFrequency QueryPerformanceCounter InitializeCriticalSection VirtualFree VirtualAlloc GetCurrentThread GetExitCodeThread SetThreadPriority lstrcmpiW GetDiskFreeSpaceExW OpenEventW InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive FormatMessageA EncodePointer LCMapStringEx GetSystemTimeAsFileTime GetStringTypeW GetCPInfo IsDebuggerPresent InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache IsProcessorFeaturePresent LoadLibraryExA ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW RtlUnwind InterlockedFlushSList GlobalAlloc FreeLibraryAndExitThread GetModuleHandleExW GetTimeZoneInformation ExitProcess GetStdHandle GetFileType SetFilePointerEx GetConsoleMode ReadConsoleW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW IsValidCodePage GetACP GetOEMCP GetFileSizeEx GetConsoleOutputCP SetConsoleCtrlHandler FindFirstFileExW GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle SetEndOfFile WriteConsoleW GetSystemDirectoryA GetModuleHandleA LoadLibraryA MoveFileExA CompareFileTime GetEnvironmentVariableA PeekNamedPipe WaitForMultipleObjects SleepEx VerSetConditionMask VerifyVersionInfoW SetConsoleMode ReadConsoleA SwitchToFiber DeleteFiber CreateFiber ConvertFiberToThread ConvertThreadToFiber GetSystemTime GetLocalTime GetSystemInfo GetCurrentDirectoryW ResumeThread

user32

ClientToScreen PtInRect OffsetRect ExitWindowsEx SetCursor GetProcessWindowStation GetUserObjectInformationW wvsprintfW InsertMenuItemW GetKeyState ScreenToClient GetWindowThreadProcessId DrawTextW UpdateLayeredWindow GetFocus MonitorFromPoint GetDC IsWindowVisible CreatePopupMenu GetWindowPlacement IsWindowEnabled GetMessageW SetWindowPos TrackPopupMenu SetMenuItemInfoW TrackMouseEvent DestroyMenu SetPropW SetCapture AppendMenuW ReleaseCapture GetCursorPos WaitMessage CallMsgFilterW GetQueueStatus GetMessagePos SubtractRect RegisterWindowMessageW SetFocus FindWindowW MessageBoxIndirectW LoadIconW SetParent SetActiveWindow MonitorFromWindow DispatchMessageW ShowWindow SetRect GetMonitorInfoW AttachThreadInput GetForegroundWindow GetMenuItemInfoW GetSystemMenu PostMessageW SendMessageTimeoutW GetMenuItemCount DeleteMenu wsprintfW GetDlgItem GetWindowTextLengthW SetWindowTextW KillTimer EnableWindow GetWindowTextW FindWindowExW MessageBoxW CreateWindowExW SendMessageW RegisterClassExW IsWindow GetKeyboardLayoutList LoadKeyboardLayoutW LoadCursorW GetClientRect PeekMessageW UnloadKeyboardLayout GetClassInfoExW GetWindowLongW DefWindowProcW CallWindowProcW GetWindowRect FillRect SetTimer CopyRect SetWindowLongW LoadImageW InvalidateRect BeginPaint EndPaint DestroyIcon UnregisterClassW LoadStringW CharNextW DestroyWindow MsgWaitForMultipleObjectsEx TranslateMessage WindowFromPoint SetRectEmpty PostQuitMessage GetPropW NotifyWinEvent MoveWindow GetDesktopWindow SystemParametersInfoW GetParent SetForegroundWindow IsIconic GetSystemMetrics IntersectRect ReleaseDC

gdi32

CreateFontIndirectW GetFontData BitBlt CreateCompatibleBitmap SelectObject CreateCompatibleDC StretchBlt DeleteDC SetViewportOrgEx DeleteObject GetStockObject GetObjectW SetTextColor SetBkMode SetTextCharacterExtra GetTextExtentExPointW CreateDIBSection

ole32

OleCreate OleSetContainedObject CoTaskMemFree CoUninitialize CoCreateGuid CoInitialize CoCreateInstance

oleaut32

SysAllocStringByteLen SysStringLen SysAllocString VariantInit SysFreeString SysStringByteLen VariantClear

imm32

ImmDisableIME ImmGetIMEFileNameW ImmInstallIMEW ImmGetContext ImmSetOpenStatus ImmNotifyIME

psapi

GetModuleFileNameExW GetProcessMemoryInfo

msimg32

AlphaBlend

crypt32

CertFindCertificateInStore CertDuplicateCertificateContext CertGetCertificateContextProperty CertOpenSystemStoreA CertGetIntendedKeyUsage CertGetEnhancedKeyUsage CertFreeCertificateContext CertEnumCertificatesInStore CertCloseStore CertOpenStore

wldap32

ord143 ord46 ord211 ord60 ord50 ord41 ord22 ord26 ord27 ord32 ord33 ord35 ord79 ord30 ord200 ord301 ord217

bcrypt

BCryptGenRandom

winhttp

WinHttpOpenRequest WinHttpConnect WinHttpSetTimeouts WinHttpOpen WinHttpQueryOption WinHttpReadData WinHttpQueryDataAvailable WinHttpQueryHeaders WinHttpSetOption WinHttpGetProxyForUrl WinHttpAddRequestHeaders WinHttpSendRequest WinHttpReceiveResponse WinHttpWriteData WinHttpGetIEProxyConfigForCurrentUser WinHttpCloseHandle WinHttpCrackUrl

ws2_32

WSAIoctl __WSAFDIsSet select gethostname socket htons setsockopt WSACleanup WSAStartup WSASetLastError ntohs WSAGetLastError closesocket WSAWaitForMultipleEvents WSAResetEvent WSAEventSelect WSAEnumNetworkEvents WSACreateEvent WSACloseEvent send getsockopt accept bind connect getsockname htonl listen recv getaddrinfo freeaddrinfo recvfrom sendto ioctlsocket getpeername

oleacc

AccessibleObjectFromWindow LresultFromObject

winmm

timeGetTime

AddAccess AddAccessExec AddAccessOnReg AddAccess_RX AddIE7ElevationPolicy AddSogouImeMgrSchTasks AttachProgressBar BackupExe BackupOtherFile BackupSysDict CancelDelayDelDir CancleDelayDelDirWrap CheckAccess CheckInDelayDir CheckRegKeyIsVolatile CmpFile CopyRegToArm32 CorrectSmartInfoUsed CreateSmartInfoUid CreateSogouInputUid DefaultBrowserIsIE DelBackupExe DelayDelFile DelayDelReg DelayDeleteSogouImeFile DeleteShortcut DeleteShortcutWithPath DeleteVolatileRegKey DownloadQuiet ExecWait FilterSid GetAppDataPath GetArm32SysPath GetBDInfo GetCheckBoxState GetFeedBackContact GetFeedBackReason GetFinishIds GetFinishStats GetHWID GetHandleVerifier GetHwndImage GetHwndMain GetImeInstallMutex GetInstallPath GetOSVersionTime GetPPName GetQQStatistics GetRealOsVersion GetSmartInfoOption GetVerifyText GuiInitAndAttach HideChildWindows ImageInstallingStart InitResource InstSuccessUserNetSchedule InstallIME InstalledIMEIsPre30b1 IsArmArch IsFinishCheckBoxShow IsFinishCloseBtnClicked IsFullScreenActivated IsInWin8 IsInX64 IsInXP IsReadScreenEnable IsRecommendTimeout IsShowOpenMedal IsSmartInfoEnable IsSogouExplorerInstalled IsSogouMobileInstalled KillProcess MonitorUninstallCompleted MonitorVerifyUninstallSelect MoveImeDir MoveUrlGuideIcon OnAbort OnPageLeave OnPagePre OnPageShow OpenPage Ping PluginToComp QQMgrSetIESP ReadIniStr ReadSmartInfoOption RemoveAppDataDir RemoveCommonDir RemoveDir RemoveFireWall RemoveIE7ElevationPolicy RemoveSogouImeMgrSchTasks RepairComponentRights SECheckOSInstalled SaveInstallTime SetAccessRights SetCheckBoxState SetGuideQQUrl SetLowLabel SetMutex SetPathAccessRightsRecursive SetQQShowType SetReboot SetRecommendTime SetShowQQ SetSmartInfoOption SetUrlInvite SetWithType ShowQQOrNot SwitchIme UnGuiInitAndAttach UninstallInstPath UninstallReg UninstallUsrReg UpdateFireWall WaitAccountThread

Name

.text

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

124KB

Virtual Size

298KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourd

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

736B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

232KB

Virtual Size

232KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/SetupLibNew.dll

IMPHASH 67f9b2c634636449e612e5569d89aff9
SHA256 0f116090d6466bdf79081eb1327f6201af093e0ad3fedfac001720699f4f5153
MD5 3feae95b7fedbe38019a4166c9fe6e9e
SHA1 73d65c7e5c507ac612aa9ec5555c38e3d37ad060
SHA512 6fbd5405de6c321ef63edcf2448d51cb8ae14a5d0f3e9c2f1aa03109ac4eb75070c808c952280cc4e13e025ae49b73fc78cdbd09ec57e6fd5b141372e72c71f3
SSDEEP 49152:OlXbkR+atgBIz9VnkqaZXiLcA2gi/AsNnrTiHzT4tP3hNW05/1aDuDQYjuAnTx:OlXg+asIzv5GXiLdTTsNrmHv4phN1
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Digest

71:f8:03:e4:f9:22:7a:d1:a8:c4:5a:66:ce:b4:29:4c:62:60:53:1a:cf:46:9b:65:39:6a:91:e1:79:43:30:5e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Chains

Jul 17, 2024

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Serial Number

01:ba:be:96:e5:0e:a2:5f:3f:0e:88:42:9a:74:a4:62

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 17, 2024 - Jun 19, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

1234724

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\landun\pinyin_agent\workspace\p-f93f0d74ed8a49278e11882bf2562c5a\src\bin\Release_Win32\SetupLibNew.pdb

wtsapi32

WTSFreeMemory WTSQuerySessionInformationW

wininet

InternetConnectA InternetCloseHandle HttpSendRequestExW InternetErrorDlg InternetSetOptionW HttpAddRequestHeadersA InternetQueryOptionW HttpEndRequestW InternetOpenW InternetCrackUrlA InternetWriteFile HttpOpenRequestA InternetReadFile HttpAddRequestHeadersW

shlwapi

StrRetToBufW SHDeleteKeyW StrToIntW PathFileExistsW

shell32

SHFileOperationW ShellExecuteExW SHBrowseForFolderW SHGetPathFromIDListW DragQueryFileW ShellExecuteW SHGetDesktopFolder SHGetFileInfoW SHGetSpecialFolderPathW SHGetFolderPathW

kernel32

MoveFileExW FindResourceW LoadResource FindResourceExW RaiseException GlobalFree Process32FirstW GlobalAlloc LockResource Process32NextW MultiByteToWideChar CreateToolhelp32Snapshot OpenProcess UnmapViewOfFile GetSystemDirectoryW GetCurrentThreadId CreateFileW WaitForSingleObject LeaveCriticalSection TerminateProcess EnterCriticalSection SizeofResource ReadFile HeapDestroy HeapReAlloc HeapSize InitializeCriticalSectionEx GetModuleFileNameW GetTempPathW LoadLibraryExW GetEnvironmentVariableW DebugBreak FreeLibrary GetModuleHandleW GetProcessHeap DeleteCriticalSection LocalFree GetProcAddress DecodePointer ConvertFiberToThread DeleteFiber lstrcpyW lstrcpynW lstrcmpiW FreeResource GetCurrentDirectoryW HeapAlloc GetModuleHandleA MapViewOfFile VerifyVersionInfoW GetTickCount MoveFileW VerSetConditionMask CreateProcessW LocalFileTimeToFileTime CreateIoCompletionPort PostQueuedCompletionStatus GetQueuedCompletionStatus SetThreadPriority GetExitCodeProcess Sleep DeleteFileW WriteConsoleA SetConsoleTextAttribute GetConsoleScreenBufferInfo VirtualQuery SetThreadContext GetThreadContext GetCommandLineW TerminateThread TlsSetValue TlsGetValue TlsAlloc TlsFree QueryDosDeviceW RemoveDirectoryW GetFileAttributesW SetFileAttributesW GetLogicalDriveStringsW FileTimeToSystemTime GlobalLock GlobalUnlock CreateDirectoryW SetFileTime SystemTimeToFileTime CopyFileW GetFileTime WriteFile SetFilePointer ExitThread CreateEventW FormatMessageW CreateThread GetFileSize OpenMutexW CreateMutexW WideCharToMultiByte LoadLibraryA OpenFileMappingW GetWindowsDirectoryW FlushFileBuffers SetEvent QueryPerformanceFrequency QueryPerformanceCounter InitializeCriticalSection VirtualFree VirtualAlloc GetTickCount64 GetLocalTime IsProcessorFeaturePresent PeekNamedPipe GetCurrentThread MulDiv GetDiskFreeSpaceExW InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WaitForSingleObjectEx GetExitCodeThread GetStringTypeW EncodePointer LCMapStringEx GetSystemTimeAsFileTime GetCPInfo IsDebuggerPresent InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache LoadLibraryExA ResetEvent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW RtlUnwind InterlockedFlushSList ResumeThread FreeLibraryAndExitThread GetModuleHandleExW GetTimeZoneInformation ExitProcess SystemTimeToTzSpecificLocalTime GetFileType SetFilePointerEx GetConsoleMode ReadConsoleW GetConsoleOutputCP GetFileSizeEx GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW IsValidCodePage GetACP GetOEMCP SetConsoleCtrlHandler FindFirstFileExW GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle SetEndOfFile WriteConsoleW SuspendThread VirtualProtect GetCurrentProcessId ReleaseMutex CreateFileMappingW LoadLibraryW CloseHandle OutputDebugStringW GetLastError LocalAlloc FindClose lstrlenA InitializeCriticalSectionAndSpinCount ReadConsoleA GetVersionExW SetConsoleMode lstrlenW GetCurrentProcess FindNextFileW GetFullPathNameW SetLastError HeapFree FindFirstFileW GetSystemInfo GetDriveTypeW GetFileInformationByHandle GetStdHandle

user32

LoadIconW GetClassInfoW RemovePropW DestroyWindow SetWindowPos GetDC MonitorFromWindow GetSystemMetrics ShowWindow GetMonitorInfoW MonitorFromPoint GetWindowThreadProcessId GetGUIThreadInfo RegisterClassW GetPropW CharNextW LoadStringW UnregisterClassW SetRectEmpty ReplyMessage BeginPaint InvalidateRect SetFocus SetWindowLongW CopyRect SetTimer FillRect GetWindowRect CallWindowProcW DefWindowProcW GetWindowLongW GetClassInfoExW UnloadKeyboardLayout GetClientRect LoadCursorW LoadKeyboardLayoutW SetPropW MsgWaitForMultipleObjects IsWindowVisible GetUserObjectInformationW GetDesktopWindow SystemParametersInfoW GetParent SetForegroundWindow IsIconic ReleaseDC GetProcessWindowStation ClientToScreen IsWindowEnabled IntersectRect SetCursor DestroyIcon GetKeyboardLayoutList DispatchMessageW PeekMessageW IsWindow RegisterClassExW SendMessageW CreateWindowExW PtInRect MessageBoxW MessageBoxIndirectW LoadImageW FindWindowExW GetWindowTextW EnableWindow SetParent MsgWaitForMultipleObjectsEx TranslateMessage EndPaint WindowFromPoint KillTimer SetWindowTextW GetWindowTextLengthW GetDlgItem wsprintfW DeleteMenu GetMenuItemInfoW GetSystemMenu PostQuitMessage GetQueueStatus CallMsgFilterW WaitMessage GetMessageW IsZoomed GetActiveWindow GetFocus GetKeyState SetCapture ReleaseCapture GetUpdateRect GetCursorPos ScreenToClient MapWindowPoints GetSysColor UnionRect OffsetRect IsRectEmpty GetWindow NotifyWinEvent GetWindowPlacement CreatePopupMenu AppendMenuW TrackPopupMenu InsertMenuItemW SetMenuItemInfoW SetWindowRgn EqualRect GetMenu AdjustWindowRectEx InflateRect CharPrevW DrawTextW SetRect UpdateLayeredWindow MoveWindow GetWindowRgn DestroyMenu EnableMenuItem CreateCaret GetCaretBlinkTime HideCaret ShowCaret SetCaretPos GetCaretPos UpdateWindow wsprintfA DrawTextA CreateAcceleratorTableW InvalidateRgn GetKeyboardLayout GetKeyNameTextW MapVirtualKeyExW PostMessageW SendMessageTimeoutW GetMenuItemCount

gdi32

PtInRegion CreateDCW GetTextExtentPointA GetBitmapBits SetBitmapBits GetDeviceCaps CreateDIBSection BitBlt CreateCompatibleBitmap SelectObject CreateRectRgn CreatePatternBrush GdiFlush TextOutW MoveToEx SetTextColor SetStretchBltMode SetBkMode SetBkColor ExtSelectClipRgn SelectClipRgn LineTo GetTextExtentPoint32W GetDIBits GetClipBox GetCharABCWidthsW CreateSolidBrush CreateRectRgnIndirect CreatePenIndirect CombineRgn CreateRoundRectRgn SetWindowOrgEx GetObjectW GetTextMetricsW PlayEnhMetaFile GetEnhMetaFileHeader CreateEnhMetaFileW CloseEnhMetaFile SaveDC RestoreDC Rectangle RemoveFontMemResourceEx AddFontMemResourceEx GetStockObject GetFontData CreatePen CreateFontIndirectW CreateDIBitmap CreateCompatibleDC StretchBlt DeleteDC DeleteObject SetViewportOrgEx

advapi32

RegFlushKey GetTokenInformation RegDeleteValueW LookupAccountSidW CryptEnumProvidersW CryptSignHashW CryptDestroyHash CryptCreateHash CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptAcquireContextW CryptDecrypt CryptSetKeyParam CryptDestroyKey CryptEncrypt CryptImportKey CryptReleaseContext GetLengthSid AddAccessAllowedAceEx ConvertStringSecurityDescriptorToSecurityDescriptorW DeregisterEventSource RegisterEventSourceW ReportEventW SetSecurityInfo InitializeAcl InitializeSecurityDescriptor OpenProcessToken SetSecurityDescriptorSacl GetNamedSecurityInfoW SetNamedSecurityInfoW SetEntriesInAclW BuildExplicitAccessWithNameW RegEnumKeyW RegQueryInfoKeyW LookupAccountNameW RegSaveKeyW RegEnumKeyExW RegUnLoadKeyW RegLoadKeyW RegCreateKeyW ConvertSidToStringSidW RegOpenKeyW RegEnumValueW RegQueryValueExW RegCloseKey RegDeleteKeyW RegCreateKeyExW RegSetValueExW RegOpenKeyExW LookupPrivilegeValueW GetSecurityDescriptorSacl SetSecurityDescriptorDacl AdjustTokenPrivileges

ole32

CoInitializeEx CoTaskMemFree OleLockRunning CLSIDFromProgID CLSIDFromString CoSetProxyBlanket CreateStreamOnHGlobal OleDuplicateData DoDragDrop CoUninitialize CoCreateInstance CoCreateGuid CoInitialize ReleaseStgMedium CoInitializeSecurity

oleaut32

SysAllocString SysStringLen SysFreeString VariantInit VariantClear

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

imm32

ImmSetCompositionWindow ImmGetContext ImmSetOpenStatus ImmNotifyIME ImmSetCandidateWindow ImmReleaseContext ImmDisableIME ImmGetIMEFileNameW ImmInstallIMEW

psapi

GetModuleFileNameExW

msimg32

AlphaBlend

comctl32

_TrackMouseEvent InitCommonControlsEx ord17

winmm

timeKillEvent timeSetEvent timeGetTime

winhttp

WinHttpGetProxyForUrl WinHttpGetIEProxyConfigForCurrentUser WinHttpCloseHandle WinHttpQueryHeaders WinHttpSetOption WinHttpQueryDataAvailable WinHttpReadData WinHttpWriteData WinHttpOpen WinHttpSetTimeouts WinHttpConnect WinHttpOpenRequest WinHttpQueryOption WinHttpCrackUrl WinHttpAddRequestHeaders WinHttpReceiveResponse WinHttpSendRequest

ws2_32

gethostbyname gethostname WSAStartup closesocket WSASetLastError send recv WSAGetLastError WSACleanup

oleacc

LresultFromObject

crypt32

CertFindCertificateInStore CertEnumCertificatesInStore CertCloseStore CertOpenStore CertFreeCertificateContext CertGetCertificateContextProperty CertDuplicateCertificateContext

imagemagik

ImageMagickEx_FreePNGBuffer ImageMagickEx_SVGToPNGBufferByDpi

bcrypt

BCryptGenRandom

AddAccess AddAccessExec AddAccessOnReg AddAccess_RX AddIE7ElevationPolicy AddSogouImeMgrSchTasks AttachProgressBar CancelDelayDelDir CancleDelayDelDirWrap CheckAccess CheckInDelayDir CheckProcessIsRunning CheckRegKeyIsVolatile CmpFile CopyRegToArm32 CorrectSmartInfoUsed CreateSmartInfoUid CreateSogouInputUid DefaultBrowserIsIE DelayDelFile DelayDelReg DelayDeleteSogouImeFile DelayTakeEffectDark DeleteShortcut DeleteShortcutWithPath DeleteVolatileRegKey ExecWait FilterSid GetAppDataPath GetArm32SysPath GetBDInfo GetCheckBoxState GetFeedBackContact GetFeedBackReason GetFinishIds GetFinishStats GetHWID GetHwndImage GetHwndMain GetImeInstallMutex GetInstallPath GetOSVersionTime GetPPName GetQQStatistics GetSmartInfoOption GetVerifyText GuiInitAndAttach HideChildWindows ImageInstallingStart InitResource InstSuccessUserNetSchedule InstallIME InstalledIMEIsPre30b1 IsArmArch IsBeforeWin10 IsFinishCheckBoxShow IsFinishCloseBtnClicked IsFullScreenActivated IsInWin8 IsInX64 IsInXP IsReadScreenEnable IsRecommendTimeout IsShowOpenMedal IsSmartInfoEnable IsSogouExplorerInstalled IsSogouMobileInstalled KillProcess MonitorUninstallCompleted MonitorVerifyUninstallSelect MoveImeDir MoveUrlGuideIcon OnAbort OnPageLeave OnPagePre OnPageShow OpenPage Ping PluginToComp QQMgrSetIESP ReadIniStr ReadSmartInfoOption RegisterPluginUnloadCallback RemoveAppDataDir RemoveCommonDir RemoveDir RemoveFireWall RemoveIE7ElevationPolicy RemoveSogouImeMgrSchTasks SECheckOSInstalled SaveInstallTime SendInstallInfo2Beacon SetCheckBoxState SetGuideQQUrl SetLowLabel SetMutex SetPingbackCommonParam SetQQShowType SetReboot SetRecommendTime SetShowQQ SetSmartInfoOption SetUrlInvite SetWithType ShowQQOrNot SwitchIme UnGuiInitAndAttach UninstallInstPath UninstallReg UninstallUsrReg UpdateFireWall WaitAccountThread

Name

.text

Size

2.7MB

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

740KB

Virtual Size

739KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

63KB

Virtual Size

139KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.detourc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourd

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

736B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

174KB

Virtual Size

174KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/SetupUi.cupf

SHA256 eda6d0eb05cdcc1941f67f8df5c63a91adeb073cf64c80a0276385a04a4d13ec
MD5 817cbf611cff0deb62a614aca93f1b31
SHA1 9682983820f262a1b937433c6239151199f76d0d
SHA512 a7ea84fb6d686f7dc0e9177b7a9510a699a247f24d8a8f167338e5b52ab538521e38a1ab4ed24f20a8468ff9071fa08e0650a0d60d3da8faf505e961beab3fc7
SSDEEP 12288:d6GsrKHKfkZKszHQ9WA1Ydk7/VS8F8Pb39djdlZw6tA3HXMGH0ZagGiHad1xUbk1:d4rVkZ1a1z/Vn8j37r63MGUZat1umBl
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/SogouPY.ime

IMPHASH 71178e1c78bcd4cde4b4c9633d1227c5
SHA256 a5829b06630e21f40c7063ab33651aaa3f29e65dd49d9b1c67197d033c5b1b2a
MD5 0f259af22d9c826a7bcf82e44a95ab6c
SHA1 d93b28d1efeaf9a7d7d8ac7ae89dcb61fff06c04
SHA512 e055662c77924fe3a28e7f18a643a36a6c78ba33caae166b2d28336d244f9ca393db542436ca82a0d2ee229d550fbb0040a3e8bc5d2bc1dd85af4c87c766fbac
SSDEEP 196608:YIwmH0YZkYELwMzbBPHkJ2W7uQFDmQ7r+3AqAK00AF:YHMDEM0q7V7rpKuF
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Digest

35:6e:9d:56:63:3d:78:b4:7d:d2:97:de:b6:86:db:68:4f:ba:c2:36:86:29:e2:d8:d8:4d:c2:19:a1:a2:19:bb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Chains

Jul 17, 2024

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Serial Number

01:ba:be:96:e5:0e:a2:5f:3f:0e:88:42:9a:74:a4:62

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 17, 2024 - Jun 19, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

5963215

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\landun\pinyin_agent\workspace\p-f93f0d74ed8a49278e11882bf2562c5a\src\bin\Release_Win32\SogouPy.pdb

kernel32

OpenThread SetEvent CreateEventW OpenMutexW CreateFileMappingW CreateThread ReleaseMutex WaitForSingleObject GetProcAddress DecodePointer WaitNamedPipeW GetSystemTimeAsFileTime CreateFileW WriteFile SetNamedPipeHandleState ReadFile GetACP MapViewOfFile UnmapViewOfFile OpenFileMappingW GlobalUnlock TlsGetValue DeleteCriticalSection QueryPerformanceFrequency LCMapStringW QueryPerformanceCounter GetTickCount64 SetFileAttributesW OpenWaitableTimerW SetWaitableTimer CreateWaitableTimerW GetLocalTime SwitchToThread CreateSemaphoreW LoadLibraryW FreeLibrary DeleteFileW GetCurrentProcess HeapWalk GlobalLock GlobalFree GlobalAlloc InitializeCriticalSection LeaveCriticalSection GetCommandLineW EnterCriticalSection TlsSetValue GetModuleFileNameA GlobalAddAtomW GlobalGetAtomNameW OpenEventW DebugBreak GetTickCount ResumeThread VirtualFreeEx GetModuleHandleW GetCurrentProcessId ReadProcessMemory VirtualAllocEx CloseHandle OpenProcess GetCurrentThreadId DuplicateHandle HeapValidate GetProcessHeaps VirtualQuery InitializeCriticalSectionEx SetThreadPriority ReleaseSemaphore OutputDebugStringW GetCurrentThread GetSystemWow64DirectoryW AttachConsole GetConsoleDisplayMode FreeConsole SetLastError GetCurrentDirectoryW GetSystemInfo LocalFree LocalAlloc CreateMutexW GetStartupInfoW MoveFileExW CopyFileW GetSystemTime SetFilePointer GetTempFileNameW GetFileSize GetFileAttributesW GetDiskFreeSpaceExW FlushFileBuffers FindNextFileW FindFirstFileW FindClose GlobalHandle LoadLibraryA ReadConsoleA SetConsoleMode ConvertFiberToThread DeleteFiber WriteConsoleW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage HeapSize SetConsoleCtrlHandler GetStdHandle InitializeCriticalSectionAndSpinCount GetSystemDirectoryW GetTempPathW GetLastError Sleep WideCharToMultiByte MultiByteToWideChar GetModuleHandleA RaiseException VirtualProtect LoadLibraryExA ExitThread FormatMessageW CreateToolhelp32Snapshot Process32NextW Process32FirstW QueryDosDeviceW RemoveDirectoryW GetLogicalDriveStringsW FileTimeToSystemTime CreateDirectoryW GetProcessId GetFileAttributesExW CreateProcessW GetFileTime GetExitCodeProcess lstrlenW LoadLibraryExW TlsAlloc TlsFree SizeofResource LockResource LoadResource FindResourceW HeapFree GetFullPathNameW lstrlenA HeapAlloc GetProcessHeap GetVersionExW GetWindowsDirectoryW VirtualFree VirtualAlloc VerSetConditionMask VerifyVersionInfoW TerminateProcess IsProcessorFeaturePresent PeekNamedPipe ExpandEnvironmentStringsW WaitForSingleObjectEx GetQueuedCompletionStatus TransactNamedPipe CreateIoCompletionPort OutputDebugStringA MulDiv ReleaseSRWLockExclusive GetUserDefaultLangID FormatMessageA QueryThreadCycleTime GetThreadPriority SystemTimeToTzSpecificLocalTime FindFirstFileExW TryAcquireSRWLockExclusive AcquireSRWLockExclusive GetThreadId IsDebuggerPresent GetFileSizeEx SetEndOfFile GetFileInformationByHandle SetFilePointerEx SetEnvironmentVariableW GetEnvironmentVariableW GetNativeSystemInfo GetProcessTimes RtlCaptureStackBackTrace SetUnhandledExceptionFilter ResetEvent PostQueuedCompletionStatus WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable SleepConditionVariableSRW lstrcatW lstrcpyW GlobalReAlloc GetWindowsDirectoryA CreateFileA CreateFileMappingA OpenFileMappingA InitializeSRWLock InitOnceComplete InitOnceBeginInitialize GetExitCodeThread GetStringTypeW EncodePointer GetLocaleInfoEx LCMapStringEx CompareStringEx GetCPInfo UnhandledExceptionFilter InitializeSListHead RtlUnwind InterlockedPushEntrySList InterlockedFlushSList FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetDriveTypeW GetFileType GetConsoleMode ReadConsoleW GetConsoleOutputCP GetTimeZoneInformation SetStdHandle HeapReAlloc GetDateFormatW GetTimeFormatW CompareStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetModuleFileNameW

user32

GetMenuItemID GetWindowRect GetWindow GetWindowTextLengthW GetGUIThreadInfo SetRectEmpty ReleaseDC IsIconic SetClipboardData EmptyClipboard CloseClipboard GetMonitorInfoW OpenClipboard MonitorFromWindow MonitorFromRect SetWindowPos GetDC MonitorFromPoint CharNextW LoadStringW WindowFromPoint wsprintfW MsgWaitForMultipleObjectsEx SetPropW ReplyMessage LoadCursorW RegisterClassW GetClassInfoW RemovePropW CreateWindowExW DefWindowProcW EnableWindow EndPaint BeginPaint ReleaseCapture AppendMenuW GetClientRect SetCursor SetCapture IsWindowEnabled TrackMouseEvent SetMenuItemInfoW TrackPopupMenu GetWindowPlacement RegisterClassExW CreatePopupMenu ScreenToClient InsertMenuItemW CallWindowProcW DrawTextW UpdateLayeredWindow IntersectRect SubtractRect SetCaretPos GetQueueStatus wvsprintfW FillRect OffsetRect DestroyIcon GetKeyboardLayoutList GetProcessWindowStation GetUserObjectInformationW GetClassLongW RedrawWindow SetClassLongW GetCursor SetWindowRgn SetCursorPos InflateRect CopyRect DialogBoxParamW CreateDialogParamW IsWindowVisible SetScrollInfo EqualRect IsRectEmpty DrawIconEx PostQuitMessage GetWindowThreadProcessId GetWindowLongW GetDesktopWindow GetTopWindow GetKeyState SendInput mouse_event SetWindowsHookExW UnhookWindowsHookEx GetForegroundWindow GetAsyncKeyState GetSystemMetrics CallNextHookEx keybd_event GetWindowTextW GetAncestor UnhookWinEvent PtInRect RegisterWindowMessageW GetParent SetWinEventHook SetRect GetClassNameW FindWindowW IsWindow GetClassInfoExW NotifyWinEvent SendMessageW GetFocus LoadImageW SystemParametersInfoW EndDialog LoadIconW SetForegroundWindow FindWindowExW GetCaretPos GetPropW ClientToScreen SendMessageTimeoutW EnumWindows DispatchMessageW TranslateMessage DestroyMenu GetCursorPos UnregisterClassW GetMessageW SetTimer PeekMessageW PostThreadMessageW MessageBoxW GetKeyboardState SetWindowLongW UnregisterHotKey RegisterHotKey KillTimer DestroyWindow InvalidateRect ShowWindow MoveWindow GetMessageExtraInfo PostMessageW

gdi32

GetObjectW GetDeviceCaps StretchBlt BitBlt CreateDCW SetTextCharacterExtra SetBkMode SetTextColor CreateFontIndirectW GetFontData GetTextMetricsW GetTextExtentPointW CreateSolidBrush MoveToEx LineTo GetStockObject SelectClipRgn CreatePen CreateRectRgn GetClipRgn GetTextExtentExPointW GetFontUnicodeRanges CreateCompatibleBitmap Rectangle SelectObject CreateDIBSection CreateCompatibleDC GetPixel DeleteDC SetBkColor DeleteObject CombineRgn OffsetRgn ExtCreateRegion GetCharABCWidthsFloatW GetTextExtentPoint32W StretchDIBits SetMapMode CreateFontW

advapi32

CryptSignHashW CryptDestroyHash CryptCreateHash CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam ReportEventW ConvertStringSecurityDescriptorToSecurityDescriptorW BuildExplicitAccessWithNameW SetSecurityInfo SetNamedSecurityInfoW GetNamedSecurityInfoW SetEntriesInAclW SetSecurityDescriptorSacl SetSecurityDescriptorDacl InitializeSecurityDescriptor InitializeAcl GetSecurityDescriptorSacl GetLengthSid AddAccessAllowedAceEx EqualSid AllocateAndInitializeSid OpenProcessToken FreeSid GetTokenInformation RegCreateKeyExW RegCloseKey RegOpenKeyExW RegQueryValueExW RegOpenKeyW RegDeleteKeyW RegEnumValueW RegSetValueExW RegQueryInfoKeyW RegEnumKeyW CryptReleaseContext CryptImportKey CryptEncrypt CryptDestroyKey CryptSetKeyParam CryptDecrypt CryptAcquireContextW LookupAccountSidW SystemFunction036 RegisterEventSourceW EventUnregister EventRegister EventWrite RegQueryValueW DeregisterEventSource CryptEnumProvidersW

imm32

ImmLockIMC ImmUnlockIMC ImmAssociateContextEx ImmUnlockIMCC ImmDisableIME ImmLockIMCC ImmGetHotKey ImmNotifyIME ImmGetIMCCSize ImmReSizeIMCC ImmGenerateMessage ImmCreateIMCC

msimg32

TransparentBlt AlphaBlend GradientFill

ws2_32

WSACleanup WSAGetLastError recv send WSASetLastError closesocket

oleacc

LresultFromObject AccessibleObjectFromPoint AccessibleObjectFromEvent AccessibleObjectFromWindow

winhttp

WinHttpReadData WinHttpCloseHandle WinHttpGetIEProxyConfigForCurrentUser WinHttpGetProxyForUrl WinHttpSetOption WinHttpQueryHeaders WinHttpQueryDataAvailable WinHttpWriteData WinHttpOpen WinHttpSetTimeouts WinHttpConnect WinHttpOpenRequest WinHttpQueryOption WinHttpAddRequestHeaders WinHttpSendRequest WinHttpReceiveResponse WinHttpCrackUrl

winmm

timeEndPeriod timeGetTime timeBeginPeriod

crypt32

CertOpenStore CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertGetCertificateContextProperty

bcrypt

BCryptGenRandom

$PLUGINSDIR/SogouPY64.ime

IMPHASH 36f69c31821e031700c418fe9577cb11
SHA256 6fcd9b9a32793c5b82d1a9ab74ae89aab6b546271044467f7201f697d5175bee
MD5 5edfb67182e2effec64b6008ec374c76
SHA1 789d3e289cb6bd6b9de34a064069f893f585ac88
SHA512 7bd97a8831e0a6a92fbc3368ccb4ae989b51f8690035a7e59569d42087d9ef626f71c58c1360a54cdba0ca9c7da1b84c86072779c399f7210eb8e1381a36f979
SSDEEP 196608:a0tIY/he1z1TsCaTLFYWanfGXLfQ4ZmzoGX/x:a0tB/he1z1ICaTV++XLfQ4EzTXZ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

d8:4f:d1:1b:ff:61:72:ae:ea:e5:dd:59:6b:ae:ff:fe:99:55:ae:b6:d9:16:bf:12:61:8c:c1:b7:23:f1:97:6e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Chains

Jul 17, 2024

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Serial Number

01:ba:be:96:e5:0e:a2:5f:3f:0e:88:42:9a:74:a4:62

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 17, 2024 - Jun 19, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

7830796

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\landun\pinyin_agent\workspace\p-f93f0d74ed8a49278e11882bf2562c5a\src\bin\Release_x64\SogouPy64.pdb

kernel32

OpenMutexW CreateFileMappingW CreateThread ReleaseMutex WaitForSingleObject GetProcAddress DecodePointer WaitNamedPipeW GetSystemTimeAsFileTime CreateFileW WriteFile SetNamedPipeHandleState ReadFile GetACP MapViewOfFile UnmapViewOfFile OpenFileMappingW GlobalUnlock TlsGetValue DeleteCriticalSection QueryPerformanceFrequency LCMapStringW QueryPerformanceCounter GetTickCount64 SetFileAttributesW OutputDebugStringW OpenWaitableTimerW SetWaitableTimer SetEvent GetLocalTime SwitchToThread GetModuleHandleA FindClose FindFirstFileW OpenThread ReleaseSemaphore CreateSemaphoreW GlobalLock GlobalFree GlobalAlloc InitializeCriticalSection LeaveCriticalSection GetCommandLineW EnterCriticalSection TlsSetValue GetModuleFileNameA GlobalAddAtomW GlobalGetAtomNameW OpenEventW DebugBreak GetTickCount ResumeThread VirtualFreeEx GetModuleHandleW GetCurrentProcessId ReadProcessMemory VirtualAllocEx CloseHandle OpenProcess GetCurrentThreadId LoadLibraryW FreeLibrary DeleteFileW GetCurrentProcess DuplicateHandle VirtualQuery CreateEventW InitializeCriticalSectionEx SetThreadPriority CreateWaitableTimerW GetCurrentThread GetSystemWow64DirectoryW AttachConsole GetConsoleDisplayMode FreeConsole SetLastError GetCurrentDirectoryW GetSystemInfo LocalFree LocalAlloc CreateMutexW GetStartupInfoW MoveFileExW CopyFileW GetSystemTime SetFilePointer GetTempFileNameW GetFileSize GetFileAttributesW GetDiskFreeSpaceExW FlushFileBuffers GlobalHandle LoadLibraryA ReadConsoleA SetConsoleMode ConvertFiberToThread DeleteFiber WriteConsoleW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage HeapSize SetConsoleCtrlHandler InitializeCriticalSectionAndSpinCount GetSystemDirectoryW GetTempPathW GetLastError Sleep WideCharToMultiByte MultiByteToWideChar FindNextFileW RaiseException VirtualProtect LoadLibraryExA ExitThread FormatMessageW CreateToolhelp32Snapshot Process32NextW Process32FirstW QueryDosDeviceW RemoveDirectoryW GetLogicalDriveStringsW FileTimeToSystemTime CreateDirectoryW GetProcessId GetFileAttributesExW CreateProcessW GetFileTime GetExitCodeProcess lstrlenW LoadLibraryExW TlsAlloc TlsFree SizeofResource LockResource LoadResource FindResourceW HeapFree GetFullPathNameW lstrlenA HeapAlloc GetProcessHeap GetVersionExW GetWindowsDirectoryW VerSetConditionMask VerifyVersionInfoW TerminateProcess IsProcessorFeaturePresent PeekNamedPipe ExpandEnvironmentStringsW WaitForSingleObjectEx GetQueuedCompletionStatus TransactNamedPipe CreateIoCompletionPort OutputDebugStringA MulDiv ReleaseSRWLockExclusive GetUserDefaultLangID FormatMessageA QueryThreadCycleTime GetThreadPriority SystemTimeToTzSpecificLocalTime FindFirstFileExW TryAcquireSRWLockExclusive AcquireSRWLockExclusive GetThreadId IsDebuggerPresent GetFileSizeEx SetEndOfFile GetFileInformationByHandle SetFilePointerEx GetNativeSystemInfo GetProcessTimes RtlCaptureStackBackTrace SetUnhandledExceptionFilter ResetEvent PostQueuedCompletionStatus WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlVirtualUnwind RtlLookupFunctionEntry lstrcatW lstrcpyW GetEnvironmentVariableW GlobalReAlloc GetWindowsDirectoryA CreateFileA CreateFileMappingA OpenFileMappingA InitializeSRWLock InitOnceComplete InitOnceBeginInitialize GetExitCodeThread GetStringTypeW EncodePointer GetLocaleInfoEx LCMapStringEx CompareStringEx GetCPInfo FlsAlloc FlsGetValue FlsSetValue FlsFree UnhandledExceptionFilter InitializeSListHead RtlUnwindEx RtlPcToFileHeader InterlockedPushEntrySList InterlockedFlushSList RtlUnwind FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetDriveTypeW SetEnvironmentVariableW GetFileType GetConsoleMode ReadConsoleW GetConsoleOutputCP GetTimeZoneInformation SetStdHandle HeapReAlloc GetDateFormatW GetTimeFormatW CompareStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStdHandle GetModuleFileNameW

user32

GetClassNameW FindWindowW IsWindow GetGUIThreadInfo SetRectEmpty ReleaseDC IsIconic SetClipboardData EmptyClipboard CloseClipboard GetMonitorInfoW OpenClipboard MonitorFromWindow MonitorFromRect SetWindowPos GetDC MonitorFromPoint CharNextW LoadStringW WindowFromPoint wsprintfW MsgWaitForMultipleObjectsEx SetPropW ReplyMessage LoadCursorW RegisterClassW GetClassInfoW RemovePropW CreateWindowExW DefWindowProcW EnableWindow EndPaint BeginPaint ReleaseCapture AppendMenuW GetClientRect SetCursor SetCapture IsWindowEnabled TrackMouseEvent SetMenuItemInfoW TrackPopupMenu GetWindowPlacement RegisterClassExW CreatePopupMenu ScreenToClient InsertMenuItemW CallWindowProcW DrawTextW SetWinEventHook IntersectRect SubtractRect SetCaretPos GetQueueStatus wvsprintfW FillRect OffsetRect DestroyIcon GetKeyboardLayoutList GetProcessWindowStation GetUserObjectInformationW RedrawWindow GetCursor SetWindowRgn SetCursorPos InflateRect CopyRect DialogBoxParamW CreateDialogParamW GetClassInfoExW SetScrollInfo EqualRect IsRectEmpty DrawIconEx PostQuitMessage NotifyWinEvent SendMessageW IsWindowVisible GetWindowRect GetWindow GetWindowTextLengthW GetWindowThreadProcessId GetWindowLongW GetDesktopWindow GetTopWindow GetKeyState SendInput SetWindowsHookExW UnhookWindowsHookEx GetForegroundWindow GetParent RegisterWindowMessageW PtInRect UnhookWinEvent GetAncestor GetWindowTextW mouse_event GetClassLongPtrW SetClassLongPtrW SetRect GetMenuItemID UpdateLayeredWindow GetAsyncKeyState LoadImageW SystemParametersInfoW EndDialog LoadIconW SetForegroundWindow FindWindowExW GetCaretPos GetPropW ClientToScreen SendMessageTimeoutW EnumWindows DispatchMessageW TranslateMessage DestroyMenu GetCursorPos UnregisterClassW GetMessageW SetTimer PeekMessageW PostThreadMessageW MessageBoxW GetKeyboardState GetWindowLongPtrW SetWindowLongPtrW UnregisterHotKey RegisterHotKey KillTimer DestroyWindow InvalidateRect ShowWindow MoveWindow GetMessageExtraInfo PostMessageW GetFocus keybd_event CallNextHookEx GetSystemMetrics

gdi32

GetObjectW GetDeviceCaps StretchBlt BitBlt CreateDCW SetTextCharacterExtra SetBkMode SetTextColor CreateFontIndirectW GetFontData GetTextMetricsW GetTextExtentPointW CreateSolidBrush MoveToEx LineTo GetStockObject SelectClipRgn CreatePen CreateRectRgn GetClipRgn GetTextExtentExPointW GetFontUnicodeRanges CreateCompatibleBitmap SelectObject CreateDIBSection CreateCompatibleDC GetPixel DeleteDC SetBkColor DeleteObject Rectangle CombineRgn OffsetRgn ExtCreateRegion GetCharABCWidthsFloatW GetTextExtentPoint32W StretchDIBits SetMapMode CreateFontW

advapi32

CryptSignHashW CryptDestroyHash CryptCreateHash CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam ReportEventW ConvertStringSecurityDescriptorToSecurityDescriptorW BuildExplicitAccessWithNameW SetSecurityInfo SetNamedSecurityInfoW GetNamedSecurityInfoW SetEntriesInAclW SetSecurityDescriptorSacl SetSecurityDescriptorDacl InitializeSecurityDescriptor InitializeAcl GetSecurityDescriptorSacl GetLengthSid AddAccessAllowedAceEx EqualSid AllocateAndInitializeSid OpenProcessToken FreeSid GetTokenInformation RegCreateKeyExW RegCloseKey RegOpenKeyExW RegQueryValueExW RegOpenKeyW RegDeleteKeyW RegEnumValueW RegSetValueExW RegQueryInfoKeyW RegEnumKeyW CryptReleaseContext CryptImportKey CryptEncrypt CryptDestroyKey CryptSetKeyParam CryptDecrypt CryptAcquireContextW LookupAccountSidW SystemFunction036 RegisterEventSourceW EventUnregister EventRegister EventWrite RegQueryValueW DeregisterEventSource CryptEnumProvidersW

imm32

ImmNotifyIME ImmGetIMCCSize ImmLockIMCC ImmLockIMC ImmUnlockIMC ImmAssociateContextEx ImmUnlockIMCC ImmDisableIME ImmGetHotKey ImmReSizeIMCC ImmGenerateMessage ImmCreateIMCC

msimg32

AlphaBlend TransparentBlt GradientFill

oleacc

AccessibleObjectFromPoint AccessibleObjectFromEvent AccessibleObjectFromWindow LresultFromObject

winhttp

WinHttpCrackUrl WinHttpCloseHandle WinHttpGetIEProxyConfigForCurrentUser WinHttpGetProxyForUrl WinHttpSetOption WinHttpQueryHeaders WinHttpQueryDataAvailable WinHttpReadData WinHttpWriteData WinHttpOpen WinHttpSetTimeouts WinHttpConnect WinHttpOpenRequest WinHttpQueryOption WinHttpAddRequestHeaders WinHttpSendRequest WinHttpReceiveResponse

winmm

timeGetTime timeEndPeriod timeBeginPeriod

crypt32

CertOpenStore CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertGetCertificateContextProperty

bcrypt

BCryptGenRandom

Name

.text

Size

10.5MB

Virtual Size

10.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

320KB

Virtual Size

572KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

442KB

Virtual Size

441KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

634KB

Virtual Size

633KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

92KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/System.dll

IMPHASH 039bcbc605477e8e87ec550c2e60e748
SHA256 93a8e95708882e56250ae55aef93417333b2dbe7ea99590abed34cdca2227e61
MD5 c51fc979c1c3e17bece7bd194aeb6ea2
SHA1 9a5d000d6393f2980062b4cc6e8f543493b1be8f
SHA512 716cdeb890307ff42901464dd24aa94e29415ef20d4e975c2733e34330fdf85edfd4ad9e00878edbe98921deebe44153279cb95acb309c5e1812026716dcdc4e
SSDEEP 192:sfer7uivwq1XpKs4FVWSjMd8tIg2cREbyCsZ8q2R4SyYXe:sw7Xws4FVWig86/5eCBqSyYXe
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10085

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 689a67b30946cbe12dce92d17207ec0488e850a806be608e6fb174f853f86b57
MD5 6f98fcda445825382121e480a64ae24c
SHA1 d5071f4928fc8c38fc8d015501bfc1f4229b1799
SHA512 68cb5b4ec06e4955ea8b5208f5f8569a37120c185dc9a10966c89ab5fd2bb0c6038d901d7b0fd15b1db8409a2b1ede18451f3d09cb17156a14fe4940095a7d0d
MD5 SHA1 SHA512

$PLUGINSDIR/modern-header.bmp

SHA256 3276c748d277d635b570e367d37f2608713e23c30b5c9823109ba8513b92c0d1
MD5 df4699852a66052a9202b0b91e7c71d2
SHA1 e89f2147d4875d401900a7b6c99daa4a8da89eea
SHA512 afee4d9e3da7461e2f4a5e43b9ce599a06e18e91f4fd7069ee74043e1442f91ab43d8be140042f9a92b40a0d4f92488c5131dbad5a03549f56d9b6b2a5bbfdae
SSDEEP 192:73lTJs0O+pOFt+g/DQUGO2+FJQMvFbVmw4UclSg0phAQJAUbxOxGHnvDKlIf6yP/:73P4+pPgDQw6MvFbowZcq+G6Fg
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/modern-wizard.bmp

SHA256 def16f9cb85d9da758071659be0ff7a51a24e53b72fca0316e6258c6754b7fa6
MD5 0d479fe7a43a151511ce61b4264e1ffc
SHA1 1f1dd58b766deb34ce2998219b98790525bd23b5
SHA512 191bb1fb282e49429840ba0ffd1102688f80472f5e722b80ca656995c0669af0e82c87788c9264c8029d60e93fc283b73a339b5870501b931efbdcc7da0faf86
SSDEEP 3072:cDnYu83SU/z2tlY888888888888888888888888888888888888888888J88888B:cLv8f2k888888888888888888888888K
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/setuppage.zip

SHA256 e9b7d3d5b8c07f3afd441d4662add558b0aa82b918b1887e22cef5480c8fe030
MD5 7c7c056290cbad5ada4d86d1636e73a9
SHA1 6915dd41ac2c7673ae311f8fdb1fce8873d69010
SHA512 0d6549ebb00683c8c3bde6a446d1cf51bbb06d518fdd074ae6fcc3f91fd0544a23f05865bdf59dae85c0394bb1fe178fefd40c823b17bddb8d3ed5f351cb2a3f
SSDEEP 24576:Sl/VZp9yV1XRZpgiSkdFsCN/pnPPiv7xypdRi8NkxRmCwxdLwNbGkJudIn7SM0i1:+3qV1NgYFd9PKvL3GepGJJ1iSQ
MD5 SHA1 SHA512 SSDEEP

font.xml

SHA256 5149cb56a792479c3191f33d278e8e5e760f2e9db32f7e6ffbe51bf2c041b6e4
MD5 0d8efedb3624edda3a7f1a0fbb350f28
SHA1 d67984c0d7a10ba1f5c0dcc9b486a61ebe665a9a
SHA512 cfe400e39fe55decb038cde5b48df9c758911cb678ef452ca1741524168de72260c47ef5bebbda3b16cb0176bdfbf0cf87a5c25363a365ea534c06689c1b3f1e
MD5 SHA1 SHA512

img/bg_hole.png

SHA256 93f9f8b1e01928c42224ac4c03859cb17176a86193e28aeab2064889a6611098
MD5 78dbcc05c62cbb0631b897ad7a5bf7a4
SHA1 0f6a1b5b2c949d7faf139e72fa39ddfcae31d9b6
SHA512 db08d5c23f7246b6e2908de47dc9d2c2cd383166fc44629cf236f22fffb5dbf6da4adc907f91cda91ddeb51b8631bb0bccedeb9ecb94d35b8a4c4dfdd0862866
MD5 SHA1 SHA512

img/browseclick.svg

SHA256 185bc4f6f2976a3de871aaad46ed79c3a649976424915afffbe2f6a980be1360
MD5 1b74c21ba647eef0e7c2bab23b23cec4
SHA1 78cc7e5a661f3f87cf8ec925a55f9497471b370e
SHA512 da702c13b9fa5c8364c3d8ff18d5674d661c3d2aed2fb677c48dca69cd0065ae60e41eb85bf7aa30037c54bed751ee77cf39eb5aff2e85f25540d98c7f1b06c6
MD5 SHA1 SHA512

img/browsedisable.svg

SHA256 4099db70bd5bbb812ea0b470e20a1af6aa72177431dca3cad0e90ca97eb7a380
MD5 912f839858959b9a00ee938a709b4281
SHA1 d24afa2f5c2521bf3abe7b0bab28f53512f7b554
SHA512 a1a7bb3a01587d3a17736c7262a8b16b2a95c604624f4b47875861d4def3e384109a49a1f8af240e483d8d2cf69ae9e1fe55e11ef673cc055d4a1cecfd850282
MD5 SHA1 SHA512

img/browsehover.svg

SHA256 8460348889efcf5386f49cae8281d05509c25673b572867aaf443907a7bd419f
MD5 5cfb1f99c7dfa7150e5e794248e84949
SHA1 53066926b6d4d08aeb4448ce5269d895a30f8d86
SHA512 4d9b716ef88c419b7a6625790c34cc5ccab3eb5e1f092180954429c5e5ac44bd3e9fb8afdb0eb0c68af7dc1a2ff1d09f3da7f5341cf40307030635f3acccf2cd
MD5 SHA1 SHA512

img/browsenormal.svg

SHA256 0561b34333849b5a30320f685ec9dd412d7e348dab26a1f2c572bff8138cbbb0
MD5 9d0032c71f09557a0e9b75fcf30a954f
SHA1 a2750da2052077097994ff22f76847f8612897cc
SHA512 f71ed25dbb88f350e15a3ca42eccac96361c0393c530b8a314bd332f6b1ca54bf12b5021c583551c352de6373972c79ef75af1de9ea53c1b55a80d8537322649
MD5 SHA1 SHA512

img/buttoninstallclick.svg

SHA256 7fffc91bd6f71490122830fbe9ccaf6f4a99c8b2484be019ac47f74e560c53db
MD5 b545cae646beca296124575148b508b0
SHA1 9cf81acd8b911637392a01c8160d3425fe8af887
SHA512 15156b908ba5fc8ec710da83fc8c67e8599f743d82a9b90d5d5ed03c61a3854e9685bbe7ddcc11d363eaf2b55e519af8f168fffb947972176af98482ac5eaf51
MD5 SHA1 SHA512

img/buttoninstalldisable.svg

SHA256 50a2710af2c58f35b154375c842e3ba357b8eff76d3b11f323d6dad07138e417
MD5 201e12f4cd6a87c9d4c1118f27b136e9
SHA1 0c4bbb53550a5d1f97010f92ca319be3170e2e6f
SHA512 9b675105f39cc7c30862d93563b232fd0e1fcde47c980d0937f12529a0e40518fbdd2a2df4c08f0ffcc24d97790d571debeded2320e0f3fcf5cdb11c48a24f73
MD5 SHA1 SHA512

img/buttoninstallhover.svg

SHA256 a872214b2db0857d55cfe4148795f67fe150dba7c2ea64215b73fd1d32b9fad4
MD5 50a622f100c941525761d8a7d77b2aff
SHA1 aaa815a729ddd77e3fe1c2f5ef36b74dcc33b853
SHA512 0bdd6c45c5f80feb21b4114c8eddf49b044d0da942d3c18694f40cc6464cd9bea5676d50e7e263516b40d7540639db245da31a6f1e0e2a02ea83cd8e6d642e68
MD5 SHA1 SHA512

img/buttoninstallnormal.svg

SHA256 b2cb99c580b58578821439888a686bcb0d8329e6f377bb2faf00d4bde1235cc1
MD5 67a7e6c26e1d303d798cb5f15194f2a0
SHA1 41f7d152a16085e5a62c25b0b1a37e90b67f621a
SHA512 c6455ad0789714031f52de6ce9262e9c189e29c5a6aab3991ad91e7bb1ce145d6562725bc3ef8bd070deb706203d298ebc92a2609fa94352daf9722a124c62fd
MD5 SHA1 SHA512

img/closeclick.svg

SHA256 71d29f953eef0679834c8525bd4a5803e28e0de24a4faf3dd5bde8331440b7de
MD5 0a16f2abb3330a55cf9d1ef5d3d93128
SHA1 d4b8f6ce022fe57264ea81ca54f8ad3e472db2a9
SHA512 e3181a34853a557c60caaddb1734a7bbe3a53173f9f4abbee2ad3d8838aec84a3eab2a365e147c736db532c1a0e8f16d5e60ce71f4dae399f657f085bdb924ad
MD5 SHA1 SHA512

img/closedisable.svg

SHA256 30f9db540462350c5a4dd827912001534046b9d741c8c08708d92c386e8ab5e1
MD5 9a0b3a9de31d76eea02939fb9d943cde
SHA1 e4f4041c60cec3493a7c7c809bdb693bbe3884f2
SHA512 d06477c19adf7e01cc2fca026ef35ff9fb3d7f550b0ce1e824fe61ad8835421379b6535f889612dc6e17b9905611392018f82356b04ec3d9f730269d419e5b9e
MD5 SHA1 SHA512

img/closehover.svg

SHA256 d32f60abfe6f707a0c52ecaf07b82e05195a68815415a9778547de693f38f417
MD5 73d0a5b766ef8f441bbc92cdafeb4482
SHA1 ef43eea8b1730dd4323652c21ef369477408d09b
SHA512 49f9bf969b2d5384813085e2eda271fbcea0970af2119634343cb72ca29e5d26d7f420e8c58160503cdc6f53176d8f950b8972ddf9cffa23c2510360c4c6d1b2
MD5 SHA1 SHA512

img/closenormal.svg

SHA256 93299bcd6de9b80096e63758b5f0bc55b240dc6ced3e6c29e850c636a2bc9809
MD5 1a506e31595db49717116e8ec44961d2
SHA1 f320e9e715f01af184b62c2aebd5b29aee9c97ef
SHA512 23e01fcf415735ca7b60de6148aa781d696b1f9fb3fea8741cee78ba278e405059746cf93fb457fa4063997075c36b616d49c77d48ed442f96b2b71b94a1fa29
MD5 SHA1 SHA512

img/closenormalclick.svg

SHA256 e3b862fe58240832dc6a0398dc78a52196e148ba8787b74e2256f87e12bea7fe
MD5 08d261603dea908508c83c2300449207
SHA1 3409195ac2240f2701d1b07ff5b56760f3f5095b
SHA512 65e47715ce804d3a5548aba61d50e12c7482b673c0e6926ae2433075f8deab39424a85fc0dcc73c3c6e16697ea319ad80e6a360fe126caae298a752805ed6eb3
MD5 SHA1 SHA512

img/closenormaldisable.svg

SHA256 c6bc15d71796e4440e3399f1e04d8061a8609223f4e45f3ec2f986776246cce6
MD5 0a7aa300ba33091fb35bd2ec0e975700
SHA1 e2fe68b6b70be42f3240a9439b9a4064fd6d8723
SHA512 04c3f6417a88036667ff7d97d93539c1a08088f053c4bf65b1d77e5b99ce525fffad2b9de583966f079d2efa9dbfb58bcc941a8794e0ec185fd22af351292e0e
MD5 SHA1 SHA512

img/closenormalhover.svg

SHA256 e701670c311b5706e4086f3bbf09f571d91e9a1fddef3cdaf3c8e56d1e53bc30
MD5 24ce2c905876b5641f0e68eae6d645c2
SHA1 2cca9b8ca32199ccd1a3ef8711428f9c6c94aa20
SHA512 5235d912b5d308e6ed3e19fff3eb2fd167f2dffd0bf89739c691c76de04f42b60df5f3e600d0e9d3a0d3c97b309fc2de0ba097f2ae5d88db458775ef91e2aabf
MD5 SHA1 SHA512

img/closenormalnormal.svg

SHA256 8e8dcc82acc108bc9c4865a42b038a74e8ac6773afe12525c6623b186bf4a89c
MD5 7361d217cd5f8aba0df31b2465abd53a
SHA1 23721af1b3e43566c512aca02da9a96d6a42ab03
SHA512 6a67a8388164008dafccb20d1571340a8f4b3ca18ca74a490066893a86ed16f7e5cc1412b53e54a1450112f0652488946848af9285393105260ffe8b6d12227f
MD5 SHA1 SHA512

img/customizebuttonclick.svg

SHA256 5c0d5cb7a22238b041b5b7a70f5be3bb7a9a49780d33880ef5d8953a20aa03f2
MD5 7806d01e09fbf7067fae9e916e09e28f
SHA1 d203b2db8112c680fd8625d3098f50b61b0052c4
SHA512 03a5289ec70f99663ab51473b563312a6292854741baac242e9b0de01cfb60f3dc85b6a9d623ad645eac57b75d7173ba44ca9611ac35fe77a19b001708b9048e
MD5 SHA1 SHA512

img/customizebuttondisable.svg

SHA256 7e283d42d3ab5336f0844239d8aada6a494c996513b70d7f9a2380b00bc7d818
MD5 85524674e20fba12a40432b4a08d3048
SHA1 905bfdf9cdeab4f144fa2b323cff935613b1e4f2
SHA512 862023552add6b223f458e4c79c6d2eb23bf757d1ac0b659144457505a3a44a117eae629de6217771169dc523a6def0db4c3e8f7c9446109e1305e2072a068f7
MD5 SHA1 SHA512

img/customizebuttonhover.svg

SHA256 81a83a522a17ef910cc57a34505f42a5e59707e2e32a5ee3fce4f32d0ece6e09
MD5 ee1168a1fd4770cc6fdd94a4c437bd87
SHA1 3347bd2e06a258ca32805fe55c6fd1582a1008f8
SHA512 f237dced1eb0db0950f86a08464ea0755bc4df9740a02bdccc3e18c6c67a4387af0331f96501b05034416a908687ad6e4dedce2f8cfca97dbf307f9354415958
MD5 SHA1 SHA512

img/customizebuttonnormal.svg

SHA256 c989c3717b7791062587452138da9ed74e21cdd90f0544ad124fca40cdeb2fcd
MD5 78874b3b9adc3c530aa9876bb54ec145
SHA1 b418a9ad689414964f658b53cfc1f126a97c3cbc
SHA512 44a1218b3f1ba4112f7082101f2d582fd354a7c7333756ce13141e08a0b8cc030639ca2f69bdd0fd7f6fb44dc7d4ddf7652d03db3deec5840992252cf6877e41
MD5 SHA1 SHA512

img/filebg.svg

SHA256 ae82888a8ec4c800cd8f6ebcd6ae1f7d3d89ad1045ccff278911d3076de0bb5a
MD5 ae13ab62d86165b12e2da2bf3aa3fd0a
SHA1 a96e756fa40401ba6a4c97e62640f7f6c7f42875
SHA512 0664e579d8df53d0ef176e281163fd9ca142bba529e6ea3d1374f526b474009b9c1b01d53b86d20110ebef677de3b859b8165cee7e0d92b7cfbd2a4ebb776038
MD5 SHA1 SHA512

img/gouxuanselected.svg

SHA256 b46e5c0d32ae713809889fb9b0de15168265c827a0ef0824ae7c261b46588e67
MD5 31e02949802d821982a01d40f18ff919
SHA1 51af48c718f787b7ae841f1d59246a3032d3962e
SHA512 8a75ab6ed154cfa92b4bd38d27577841689d534e8f54f9edca2428b44a31874596143ac2c62fec3f8f052bc71253e45e015e8fa95fd0a03ccde67d5e60a1d4b7
MD5 SHA1 SHA512

img/icon.svg

SHA256 0772b0d29d8f9f0f7a105991d839e239e8fa26408b183752b778924571ffddae
MD5 744d3f46ec288a5dfccbb95a6110ea7c
SHA1 2624168be2488b7167b2e8969a503065a5ae5e83
SHA512 6874b6c1ebb98316a8f47785e0a81ce0a7706983e8f9fdfa92d5f5d2dd5f10e25183810a6e7b56f0a3a1def892199c5e671d6703388ea0d7f1e1db3fb6c856ac
MD5 SHA1 SHA512

img/installbg1.svg

SHA256 ce4f1d530939af5d5deb68e86d86c460fc3e2beabc584085dfd68de385cf9198
MD5 fbd3c55332a6177e19114e99efc5b4b7
SHA1 7a5ed51f857f017fcc2d0a5919406da2d46af6a4
SHA512 67fdf8d623fc08fb12d931996b63501af3d6c634e873157e7dc8ff8f784b99b7543667ec5c42547b30ae196b9c5052b2d855dc31ed9e28707d15074884250b3d
MD5 SHA1 SHA512

img/installbg2.svg

SHA256 66478c81e9f2f815cf603fd5bd6f7867e5ecc6f694a4af3c58fd85cd082d65e1
MD5 ba06691025894e29ff4a512489d656c4
SHA1 a3f506552fe613f7e404e140f2d6d8ef7b14ca40
SHA512 da7d4ef99805cbd16e436c5289319fb1cc2b4e70c193bc2e7d31368c75c1ac483e4975c16fa60918f3372082a941add220de90b414240540c7054d43b5ae9355
MD5 SHA1 SHA512

img/installfinish.svg

SHA256 0e2666c34963d3978baacbd4a5af83a9e3628f9c6d3a56a837a1a2851d8c3ab2
MD5 c91e4bf20ad467a15244b55a6269b58d
SHA1 0f11fa6320c0cf3104b1e439e7681624f8a3c808
SHA512 6778378c6352b76b2b07b276b719a1296b4dc5af3c03a01e05666090be86782d118f7f4f60b089ebfae68ac5c7fb397578fe5fae894f94e8bf3d9258b7d57df8
SSDEEP 192:OUMnYcvI2PWgGpYfpG/nHrJ7cs+d4pSh5hzhylWqJ:CYcnDGepGvLhy4ch5hzhDy
MD5 SHA1 SHA512 SSDEEP

img/installfinish_no_yyb.svg

SHA256 8e122f4ed8b7e4d69474c0b0401d57e2e8729de48a074bce5210a467b1f50109
MD5 69fbe54a82d5e6dc4be5d7cd73f73401
SHA1 afbfc9629e693d385515e45ff201bcc7d732e362
SHA512 1e0d74bbfcfbe4e3a607ab8f5e2031e47beba23bbf50b9c668a1484413f8103f428c10de227507d00b0d65c58cd42e3d2f746104c4519717d8580c0a49c35352
SSDEEP 192:OxUc/6+b/4eSzWUJzuDJQw0H420kBBN4VdW5:4UDzWYuz0YMnN4S
MD5 SHA1 SHA512 SSDEEP

img/itemuse_hover.svg

SHA256 8e8d5ca382c8ced93646c23cfeb1483cb3d33d6f1c5073e295887e0007ce8251
MD5 9a6a810d128b2a9315421698d44e53c6
SHA1 045036402fc10dedb9c8c0d7f5300ef7c3cdf13f
SHA512 886f6e3a11440417a9862b44e9f211f20175d50e07590dd9dc1e19a5ebbf99a8e5e8229233595ee745126b520c13eabc809e394b2c66089f8b1a1295ac959777
MD5 SHA1 SHA512

img/itemuse_normal.svg

SHA256 d843aa6907ac289c5c8ae3889e3ee18e639b7f036a296f085d65e1db96a9c3ce
MD5 d7311b154382e2cef0b52b8be5a84f92
SHA1 6b68137007e85621f4aefe590e82c19cc5174360
SHA512 ea48f7f35a5c7c6aee99c3d7556716e1282b9f0792ee2f558b9957c00445d0d802ac6effeedaf1d01dda51a253e3de313f37b9c5f421adb9ffa3338806e3bb6e
MD5 SHA1 SHA512

img/itemuse_push.svg

SHA256 6e73c4a226b2e4fea6a1bd794b496e231a8d6b56e3d1b0e63eba165cdade5b15
MD5 b877aa62e43e7892571fd4f6fc98055a
SHA1 1841704909ba9df889012cc6f9bb6cef25c4cab5
SHA512 56270aa7bc5e7051dc8c194813c5acdd367deaf472e9dde9d6512d828c313674449c114c31e2a889685bee72e75f45f784d16f89d1282d4ef1adcf1c823e918d
MD5 SHA1 SHA512

img/logo_bg_1.png

SHA256 acd27091f5806f8ce9bd56d089a4a47b3a29a91726afb752857038c1c02d7c42
MD5 5c5911b0f2322c7dd08eb934ad5de52f
SHA1 95bf859770280ba7be810912ef03f198e358f634
SHA512 da357ece410c06a801ca58ff7ad90e74af0f5eceba40d5707bb39f86ec8a42b3addc7631bd51894379d3189b9e32366f353eac3aad5640f4f245d3c59cedb893
SSDEEP 24576:fLJNVZ7h1pWOQdPxCk1sQNdp5TPAvoz4kGVY1SKLkKQ6OCOJ1rwNJGI3sduaDbx:33V1mPx91zhT4v5KQ6wurGGGuOx
MD5 SHA1 SHA512 SSDEEP

img/logo_bg_1.svg

SHA256 623a0f9bd3b02542ff3a89bf70b9c63c230b98213492160f0534471908ae96e1
MD5 3efd50513586d7c23096cbb02845a7b9
SHA1 cb60d56cd777ff5c2445fadbacaa968fe21c6458
SHA512 830d4c7968330103301b7edf9adbc0c9a5ba97fa342b78e89b0de1cd75ff268870dcceaadc98cd1c90970f25528c512f8cf0113b10b4576455c58ff7ee35d3cc
MD5 SHA1 SHA512

img/miniclick.svg

SHA256 18c554d7453eb49de21a5951930affda935eb44d59df226ece009fa5586b8d2e
MD5 6cec3cf13d10c41430ccc37bae8b2e56
SHA1 3f22cff3185275e9a1fd9332f12f568667b76062
SHA512 86800b2a88de8058d9f97b24827178ded1447d75b9e47accc6e30d8da05031963cc32671da786bd282e06379d547b292a2b67a82a12d239076065c44da0f800e
MD5 SHA1 SHA512

img/minidisable.svg

SHA256 3f10851e691b07bd01d7fd621334aa550e6484c6ab5bd77fababb01da688b5d5
MD5 59b183babc7c5f15e1b5c8471f12fd29
SHA1 9d9cb661550d27bcac5da9451c1fe768df4ec064
SHA512 33f583a4e6f359910c5f6b89e979cb90e3eb70aa3e9561485a3ebdfa86d89a24f89b12e978df832efb82c53937d78bdfcd6caa8f0aa44b45dde3d8bccaacee10
MD5 SHA1 SHA512

img/minihover.svg

SHA256 bd4a717f7d4a8d56420087ee276535ad069e5a75fdc4308e11fd6a52da2ba5a8
MD5 b064219ccd8fdb5f6aae48232f1e69b0
SHA1 094101e538776f05f47f680517f0f1893de6cef6
SHA512 7921e0dc63e13bf232bfa276ed183be3f3596f9e92d2668050f0b8dbf2195931eb319b64335e018baa79867be925717ee75d0aeeea3708fd75eceaf9d1d97f56
MD5 SHA1 SHA512

img/mininormal.svg

SHA256 2a7bbbf04c73d932d78ed8599e24b131a395cb010621858129cc7481096cba67
MD5 97c5d90daf62dae816be82a1eec9e91f
SHA1 05f3bab3287a4deab9e3893433c18f41772fdcd3
SHA512 f2d0185606fbf8c9878fd43f3e456655074071dae00966f3146ef5b179e8122a6b9f7c7824a2a6771e767d25b31ca4183b65d7305cff87514eb18d3eaaa57b49
MD5 SHA1 SHA512

img/miniprogressclick.svg

SHA256 c12d56c55de22dde1fa70b7fe9bfcaa096215841f5abf8f1831c977410dc7cd7
MD5 f3989b6e8aed02c7e47ca63d39cd3cc7
SHA1 16e810b011e87f128c9210b657e12235c20bc6a7
SHA512 7d89c20ea699e9fad4312ac0c2809ea1822a5ffdffe481a6a2c2f15f2120fe23462c11929803f8207bb781985853f5410b3b7a0899ea6bb1d37a0cdacf661836
MD5 SHA1 SHA512

img/miniprogressdisable.svg

SHA256 972820fac54343d7be9af817300c2cc4ab853b64a1bbf1059972c1891af34493
MD5 9de819d14870f4915a890002a28af243
SHA1 9b1c61e3038855af2f35435100478180b6ebd07e
SHA512 a1d63cce2e8b610e85024ddd15a1009dede664dd2d570a59094201dbb3b315cb20b112692a43c457debea0c2dd960d6977aebe436b84b29b7a8d8554ef0d9c65
MD5 SHA1 SHA512

img/miniprogresshover.svg

SHA256 416e62d31de00b9b512e1021c7bbb20e449988c142570bbab0bad74bf054ec11
MD5 b3d419747e00898bea74512264b84e55
SHA1 12847e21efbf480d2d6597b31c95a92344d2917e
SHA512 910aca6a27a03add44b3385ab2dbe6efc12c06fcf2efa077c87f5ed9d3221ede7b2ec4d29769e7222b2c7f9a540627e34a0ed5fa183067489ed77eef91c247b2
MD5 SHA1 SHA512

img/miniprogressnormal.svg

SHA256 0f6412c8121d552f5b05865754c5343a6ccc71e61a94543e56feb32a931ffc64
MD5 3dcec30135f0d50516193b3d765fd824
SHA1 631e36238d4346b0003f3fe0f1facccb204aa114
SHA512 47554e988fb65a4c93510a49048cd605e30fe816d5d2353ec9bc89de5db552c83722aa2f69f13c2037a43059aeef81ebb019deb845264d0efeabcbc6afe32bed
MD5 SHA1 SHA512

img/packupclick.svg

SHA256 efca9d21807c811471789ee53c2a33af10ee09fe90b787f9edc79e223d523ba1
MD5 b8039f20536d8501eaae33bc56ea2e64
SHA1 0f669da9053fca89b83347fb613476115bcbc14c
SHA512 a24a85c935582171df6b82dd034c9a3abb2c368cdcd16321de6ea4473564518a803f15a3a575196aa84acc806e848f59a238fad6cbfc394c1accffe1398fe49f
MD5 SHA1 SHA512

img/packupdisable.svg

SHA256 e56a70a5a98303de06649071a8fa7287aa48d6e00cdbe61d84700360a61adb5c
MD5 a92cc262a23a2b905886a595800504d9
SHA1 642bde6cd70960f3a90a214980e4895eb56d1cec
SHA512 11e8005540f3c1eb6c9a6c71787600e58b87e931948e6ee0d6de6e37bec998d2fcf3678b2c45001778c138c2d6e56133cdcc806713df4c4ddf624cda092d0e98
MD5 SHA1 SHA512

img/packuphover.svg

SHA256 dbee53cdc2581d6586cdf4f863fca3aa1214c9410aa5eda4c9837ca42ff3bc47
MD5 8f16820baa3d138f18d80e9480848c33
SHA1 38320805379e235ee46293708a7b6d4bce010274
SHA512 fa2b92048ee8d70e45f18e4247fd1d51ef628b476b31aa381ed9ae7907c777de6ee7dc7a49c01071397432378fb2d0e7c06a42b0cb683d5808ef8305bfc0b239
MD5 SHA1 SHA512

img/packupnormal.svg

SHA256 fe3543436038b4cd6af6e887abc10be3ba4c1f736bd005f174ca3ea66a3920c4
MD5 4f9a835703dcce99bd874771db2a3506
SHA1 0fd18b90d6b4d9898103b87848984cced6541577
SHA512 66cae8d43636009a0202c489d2885b74c69d1d1f0cdeafa9bf8d32d75e96304cf653d6c0c2a132a3689f63db13ed14813480409c29a6b39fdecfd2db4f32af0a
MD5 SHA1 SHA512

img/pathinputactive.svg

SHA256 10d53f846e36da9cd989befd0630f09f0686f90989bb1f7303011a6f4d2b8985
MD5 0737435765e3a7149be9ae3779c5d805
SHA1 a80563f8801cb12ef1e312a2fe47c26c665e6e0c
SHA512 0a6133f109d6eb31f8069742dc49c512b144f094672544520f4f3814ff0ef54243db81d5212bafe6fa2cabf21ba6becccdb8c5ff3a7539232870c55aafdadf62
MD5 SHA1 SHA512

img/pathinputdisable.svg

SHA256 13afeeb4bfb4f0bcb838045340d9acd96405890d7eac964c799f058fc1205764
MD5 4224e67996703f68af5694413e6e4318
SHA1 ca4eb28ac978e0060d427e3c5d386324cf59fbca
SHA512 9e696b763a35b3a1551a5aca9ae73da65634672440a4ec154275a1f492854605357d7baa71c2970e1d8cb127da9c8daaf5c9b4ee5016513d0d830cbcf3d846e3
MD5 SHA1 SHA512

img/pathinputhover.svg

SHA256 10d53f846e36da9cd989befd0630f09f0686f90989bb1f7303011a6f4d2b8985
MD5 0737435765e3a7149be9ae3779c5d805
SHA1 a80563f8801cb12ef1e312a2fe47c26c665e6e0c
SHA512 0a6133f109d6eb31f8069742dc49c512b144f094672544520f4f3814ff0ef54243db81d5212bafe6fa2cabf21ba6becccdb8c5ff3a7539232870c55aafdadf62
MD5 SHA1 SHA512

img/pathinputnormal.svg

SHA256 d393c4ec45de8e99d67c040bc2698f90d8751feabfdc600171d8fc374f56d33f
MD5 ef108c0cdc10101dd60e804c496fff64
SHA1 562e3a615b3235a6ceba95ee53219349e83e8692
SHA512 3bfe234c23e5e72a00921edc4ec37fa01f0e4af045fbdb64176a8dc4f6a3865829c5aff1c4847002499a0994ebd208eafe3fbf81ec205d4376f94724c406257d
MD5 SHA1 SHA512

img/popup_close_disable.svg

SHA256 259e304230c79a1a11f930a3e4f5567b0e3f45d6f3dd14f2a3dce9e90437240a
MD5 cf0aef37543765328d5f53b1efd916dd
SHA1 fab24f69ac5d09c1194e22e83e569c9e876d1540
SHA512 12e8249542b45eff9be5ca68e2ed93de064af11b398e8d4ab8db7cac8d7dd4cc953871a5d3f73ed0f9e630e4817b5970c4ff547a42aaf20b7881fb6659605ad4
MD5 SHA1 SHA512

img/popup_close_hover.svg

SHA256 be6120d60d7f6eea7ef72d6197ff8c8c042fedf497fb1e4f477ed9ec4a6001f0
MD5 e5330e4add538c045f05e41fb7205652
SHA1 9f8f51d92b979114af2b4be4cf7e866584e75622
SHA512 638bbf063823c216f8e10bb50cad2aca1c8dfd7f9a8e97039d292dd746afcc8ae52b8f92459a6cbace0c4c375e6890d7e87001b6f524605d9f7a4292de1da1a7
MD5 SHA1 SHA512

img/popup_close_normal.svg

SHA256 8ea2dcf10719a7a862875c8a0d00dfd475aca2fcafe53c169e5b1d52b142c2aa
MD5 c070e3df7034277633750cb94d3aa799
SHA1 7bf961d889dbbcbce48a567fcddd7c5aa02b8806
SHA512 6cb72a72e9ad90739f30eb646f6890477802eba7dfc6d962198f03a839c6194ddfea305f69f9d11b4dfa4cf87004114f5780cc9950d47c3af3e0af8a8a573cb5
MD5 SHA1 SHA512

img/popup_close_push.svg

SHA256 e6884a3860b6d65fea195d87390a333d0bbada4257e0cc341a516962caf74e79
MD5 f1eb23a99e563a155fc102add7e9e742
SHA1 764bd0e3ca32a0f2393ba69fb487c61d5202682f
SHA512 932d4eb2d1b8015101870c031bc13989a17f43ffd945879694b8cadf7d5c57de7d1af1a1386069a6756eb4ce858ee2d20f88c1781e90e7b014e2ededddf1aea5
MD5 SHA1 SHA512

img/popup_ok_hover.svg

SHA256 1f084fb7f98b19eb6c45f86190e06a77d42045b1ce4379b607bddee63bc3e22e
MD5 2e1f57f4c3bd4c8a2a377d05f9bf8fde
SHA1 49e2bccf5685faae4cbc16841e27f51e48955a84
SHA512 7cb215589ea503ff99d305837ca3ebe141cddb9aa75fedb9cf7a8f910ba1c19835018dfbaab1d819f2e55f68503ae825f83c67d6f2be79c151c14d9b71ffaba2
MD5 SHA1 SHA512

img/popup_ok_normal.svg

SHA256 06e3c2ed41064d3131596831631a068f1a30f8375fc02acbb47b8fcd53cc48e7
MD5 53ea35d14c65b205fdd1aa2a6ee0db72
SHA1 e81ff96bfdf57ac9b21759e8f6326f335f998c9f
SHA512 aa3f4636eaca4ae07bd24d056b7ee660dcb673589dfbc0837d9e9153680461c18d6e9443f043f6934911f4843c1a4d7531b54ec01a9c11e8a684f97d51aa701f
MD5 SHA1 SHA512

img/popup_ok_push.svg

SHA256 530c90c297e9603f319139beabf18b49fa007f6a739f0476815fdea66b467061
MD5 cdacf4e7227daab088ab0a8a29b921a3
SHA1 08d8d8ad502f75187cb7897b0d4a172fe41b8917
SHA512 2e7e40b2eab1bdaf45326d73ce035f69d3053983d751a33aa5bcd589ace5bf350d197ca79e13bf3843739ae7dcc47dd20d5947865cb6f1ade0df6a5b42f3248c
MD5 SHA1 SHA512

img/process.svg

SHA256 3d83053ab2813303ebe4cfc42f1251d17eca2027a5cba778cedf47924824b592
MD5 cca17de92509e8a0695a567ceca4470d
SHA1 034901e6251a802528e188e66e267af7632ed23e
SHA512 a4ac66808a8608a23af37b060d9ff2dc9a08cca543bee0191bad8c0dc4dd82756a175e8c6e2791488a4c6f2318fdfb8a93a459217d2cea90b1ad538710662a86
MD5 SHA1 SHA512

img/progressbar.svg

SHA256 473179b7c3fc09d26400e993b254b85cf0fe5f8543dfe03b44a2f8aee08e072e
MD5 ae6e96cfd57188c578a7e613cb5a86e7
SHA1 65b8135df839dc9d8679b67caeb194d2da386f20
SHA512 cba03c2d79d71966dc339996df7e699cee425e59bb8ab7e05afd963c8da7ce67c3aae67cc319f81e47f198a029996eaec5d9656e29acaa3721ecf0d6be173c08
MD5 SHA1 SHA512

img/search_suggest_tip_hover.svg

SHA256 9203d8a34c06bf3f11a0fab4f1985b9f9049ba8f00f2f869eef0ef9ffa3cebf3
MD5 6535d4af69b85d7477f9472d0c48ca20
SHA1 55443272d56cb3a8220d98ad5e7356e2629d4b90
SHA512 a0dcc2164851b65a2918f04e9bdf7b19628473ab83c228ae4534bf8816b17f5d7603915bd7276dce61eb263842a3259ad800f92a08673a0e6065b8b6574f7c5c
MD5 SHA1 SHA512

img/search_suggest_tip_normal.svg

SHA256 850c0199a9e56f9b82b826291eb780dd5ece9278266073af9eee516a8a31b20f
MD5 fade41453450b4b6753cecbc573325b9
SHA1 b11449e96a6cb5d5a2db0b42f4b3d7b161107147
SHA512 bdddd2399d5aa8975c76dc5b9ae098297a8cc0ac584cc700ad63f63a894476766f3960f214a15f8c2f7d18b63ed0eecf1c4877c8b40a635f33e0c54c75c92587
MD5 SHA1 SHA512

img/search_suggest_tips_bak.svg

SHA256 b36cb05de434e91a04d39399b0480b0c5c3cdd3e257777bad291d016ed50b128
MD5 a56b3da8d1b35e23965bf69d459db8ab
SHA1 bba4f1de9c22757f24c5b3e4c157c2d451e328fa
SHA512 0a245edd5ac9e974a06f35004a0e65f6ff48a144f1ba7e4812f6761a2bb526a47dee9c7d0d428acf84a5f8a85735b07951a7c89a1eb848ca982491dac26eb4b5
SSDEEP 6144:afi4tWk5GvT2e9r6lV7jqT0bnI8Kwf9G+l:UikWk54rWV7GYI8Kwc+l
MD5 SHA1 SHA512 SSDEEP

img/slideshow/1.svg

SHA256 e60024c79481e3ecbb6ca8f5b14227cffe9f65c5291a080f50701b4ec849c287
MD5 c7799ed9b5ef17cd08a09b0c0c532d8e
SHA1 b4ece66665b4faf17310f5059c95bf60c5c3e8ff
SHA512 43989b867a72aaa7fd4ea09f1971fae6c738dfc1f513608e7ab089ad259970f8b7e45e972c3f92323da5459eb3886e86bd1ca9a0d5c751b5c06501c3333f364f
SSDEEP 768:BdgqFCzwSmytXP7Nf5tNE9OEdVhdByD6jk:8ECzwdyVPhBk99dHA6jk
MD5 SHA1 SHA512 SSDEEP

img/slideshow/2.svg

SHA256 038239b516c22560aa89fb12bbb8697842e22b9ccf6ea631c5731b7aebc762dc
MD5 666d9c9dde4bcbf70b01177b10007fc0
SHA1 a34b9ccfda879f43eebae4f3da29381a1f949be1
SHA512 3bcbc1781968bba47804b5d3426d461284c3855e1a973881c6abec26a5e218b1a8d11b28acc094114cea1f97df66734490dab71530b54e2ba04acc570555c2f2
SSDEEP 384:5XeLD3JCtbGBBQzNdLiKaDqZ8TxARclBv228XSKdtEzRkhMwMslMyQ0qM4h:5OLbybGBBQzNdss4AGXsttwh
MD5 SHA1 SHA512 SSDEEP

img/slideshow/3.svg

SHA256 b0164a72fa8953a48e0b33736bba525638999e4074a85eec6f71f1dda77a5d35
MD5 78894b83f48ae5fb049b7ff4dc09bffe
SHA1 e86c41150679b88e1bd75afce82355a639f2a3e9
SHA512 193c508fba583b9bfd40b79585e042e4656ca18eb189227ded739fece25e5eefdb71064180b8e4bae41d81d29ac080dcf81694f097eab23996684f6db25fba8a
SSDEEP 768:4IZ6EQggV2Fd1/yTFiX3EiWkfbz2a8OncEFyH0RJ0fc:4xENdhqCnc2Ufc
MD5 SHA1 SHA512 SSDEEP

img/slideshow/4.svg

SHA256 6b1c3e8f7b6245e20490003889270bf6e26b61fc87a008a085996b40367b2483
MD5 dcee4b69fa5931586f3e38154fd5b0b0
SHA1 c87f7d195d409dc7b7e7e2257fe71f0e572c594e
SHA512 87d84c672003a7e27f3b5de56c0e5d7f6843a598a05a776a57ac0dcf23345970196155e1143381c79da095b57c3be13c451ea1580b7cc641ad767b4ff5a7b3c1
SSDEEP 384:W8p4qDpktbyuRwWEnclyc8c9SexL7aozNaspWnNxAXOrdcz9zrzMzhH5:W8p4qDpjrWxlAc97apssNuXyB
MD5 SHA1 SHA512 SSDEEP

img/slideshow/5.svg

SHA256 af80ac9f042b02f2acafd322e35d6bb737f066ee98dcc689949c6353e7d589f2
MD5 a0b7f1cda7e6a4b724d24a7bae00bdf5
SHA1 7ed792c1d00ed6eb47095b58080f26ccbf414429
SHA512 a453444b95c3001cef64b2cd3c4f6a525aa5094316a4b4c690294e33081ed1c4ed897088d1658c4bb16c2773912742c0047b8ab77e93a3b3556dccfc6c33dc41
SSDEEP 768:NGtMQFmQqoZD8uixsFe1kzJPlt9xlDmW0fXbh6qzxUcSTRgAE499SAnRdS/UW+D:NLhs01uPhGEL5jEofrS/UW+D
MD5 SHA1 SHA512 SSDEEP

img/slideshow/6.svg

SHA256 841b3b3e3ed640d51176e60aacca773ce7ab270d46046512ed22b8f6c661c453
MD5 878a8bd372825456db6a9de370a4a6ac
SHA1 d968da78fcdcdd369e24695d1a9b0bf6432396b7
SHA512 ebe4a4e1971af26267833bf5234739fc8c1179e609cb1c61345368d6ec0b02a9e9808457cd0b4959ebf75f60dc3aaae2e4ebbb204db2012c4030c2db5cd20ce8
SSDEEP 384:x4Ewd7pU5+0HccnzihUXh+HfYfyWV6OwCoBS+U/Eg9DFYtk7h+fAj:xYU5+08KWh//8B6lCoW/DMI
MD5 SHA1 SHA512 SSDEEP

img/slideshow/7.svg

SHA256 45d4fd149c002377afdeafe9f083dc28dee4dad251c64f6f06cbb21e9a5d7cfc
MD5 7f3c70622e33690179134cfb54e4d5bc
SHA1 9d3090ee34893c010839f53fbada84a29dca2f2b
SHA512 93473a99f83ecb476cbaa536c60c313d2155553c84ce35eb4870052f8b1d2e8469a7ecdc2a5323c64127bd979936ee48e0b8f5afb3fb5c25fbcb66bfbfbddf24
SSDEEP 384:MDj1+6Jc62AsA7lFxXvyOwvGkn8ewbmJQUWQ0ExEXhKU5yBVZuFnSXLQYFYt5QJV:Ij1+6Jc62B+vA8ew7Q0SoAvZuFgLQ8
MD5 SHA1 SHA512 SSDEEP

img/tipsbg.svg

SHA256 0d98afec243adcd1fb39858176388b725d6cb0227760ac0c99043ed594d1219d
MD5 b2beb6b19d85597ff63811076207d4ea
SHA1 e8d3674e3df1024e9ef447e7cfb2c5420185eff2
SHA512 995132317f5e85d3a8e44346738df3bbeba0814b14c45cf1bf8b1ed60d742f2dd549a423930bff2175988d08b96a5bc5468901f3d8af8afcf453f42990ecf003
MD5 SHA1 SHA512

img/ungouxuanclick.svg

SHA256 6d8618d141a093bedde2397633cb32ae2eab3f34845b86f32e479a60106d2ceb
MD5 0083bed1d8bb77f0a983b63a94f8e1c5
SHA1 d1fe6124e7bea3882db89ecee33d5722af2c1dcc
SHA512 2ef673897e4c1c16ad64035bb7899bc4649d6717401539492255500bd2753962cf047cdc60610a65e7b65e5113c83da81b4a958588d5ac73c69bafc4aa6a3939
MD5 SHA1 SHA512

img/ungouxuanhover.svg

SHA256 6d8618d141a093bedde2397633cb32ae2eab3f34845b86f32e479a60106d2ceb
MD5 0083bed1d8bb77f0a983b63a94f8e1c5
SHA1 d1fe6124e7bea3882db89ecee33d5722af2c1dcc
SHA512 2ef673897e4c1c16ad64035bb7899bc4649d6717401539492255500bd2753962cf047cdc60610a65e7b65e5113c83da81b4a958588d5ac73c69bafc4aa6a3939
MD5 SHA1 SHA512

img/ungouxuannormal.svg

SHA256 d81252e3c02cbe7b2d839c992653a332585ac88329e95e78f92984623b9d8a43
MD5 b336f556bb1664620a01411126ce6d0c
SHA1 f1ac415a792fea7e6679ddd838bf2325f40fb467
SHA512 817ce27efae9f04cf6476fa248dd3d9e71450d63bbd94c3c059cea1dbb507b165061cce6498b03e656ea73f3a6e444937835810dae98632eb53b79b6cc48a517
MD5 SHA1 SHA512

img/warning_popup_icon.svg

SHA256 9e83d55ff616baf0bc11c7391fd9ae77adbb77325ed1820b4a57d157d6527823
MD5 b65d6ed2cbdd062cd86d4afb9e76a947
SHA1 7f58424005cdf428953d8167657b73edf87ea184
SHA512 79b07b953870d03900c8a4c80aea4033921f6d8346c6a08e2162f05b52c9e1b05d22907a3a7427acb5d2256606d4c70399feb5045cca61b696c353bdf3638ba4
MD5 SHA1 SHA512

searchsuggesttips.xml

SHA256 83b9c45d1fba782e48f2a6dcc4a0d6a150382d9c5f6e2fbda68c279ed4e623b1
MD5 30e890219b371ce2ecd1236bc80e1ff4
SHA1 53318cf209cbd71366c2c2c7801627847b8bdad3
SHA512 9e8eee1ab632cc2ac4081ef2aff6ac0bf86d8ef0109819161fb7c45baf10fa3058559af7ed52dff48d29b1247f24f8a519c0858bbd177e150fe0e280012a6fbd
MD5 SHA1 SHA512

setuppage.xml

SHA256 83e7e519b8990bd917042d3f390ece86714840907936bc9bc0c8f7be2e69a6a3
MD5 6a1d8180816bd39aae7de37e6773b867
SHA1 ab06ea545b8c1278eb949d4fa261239f5dfd9c95
SHA512 8e2627815cdc44b5bcaa3b9da164cab9182a77c7b5366c5c723ea5d4a8fa154f985594906cb6bb1d471912d2b57b373e54d1637ffc32fd217ab2094b1aadb4b6
SSDEEP 384:nI22eIPIzdIWdHIiI9hIIOMFInIbdIOdYInIbdIOdIm0YY0b3FNhE5nIN0Ekj+hb:neeOqVHpmIUFOqVYOqVVfYgFDsnIiXhk
MD5 SHA1 SHA512 SSDEEP

slideshow.xml

SHA256 9499730ab9580f128240fcb51447b766b1dbb3af48e8d54b6033c2668b1f4f7c
MD5 849ee6c032413a3a5836c39cb0cd3cd2
SHA1 1d4f420eac35c620ed20515e71cda2babfc72678
SHA512 81bd1dbf02a8902a325805e0334f6defc42f1632e99bc43e30b17f918a50da1ffe495780bd2974d990abb7852f53ac9237f7cec6932faf4261b40251fc962b65
MD5 SHA1 SHA512

sogoumessage.xml

SHA256 9b7d308fbf56efb81af69aadea0a7d8560abbeed52e18157ebd551faa3276f7f
MD5 d6c2a02307ec7d6dcfa055c260b16f26
SHA1 fa4dc2c8affa935fcd81569a67b9ee680dcf0129
SHA512 e22b71d2aa866f389ce646fcc2150a8bc6ec19ffecd15c694f12d988e5623b3040ec0332c88f1f2debf421794740928e0e6c46f3cdea9a7918b0a69543d5e810
MD5 SHA1 SHA512

style.xml

SHA256 f3dc3a6ac4932da76ba4d7e13b0a12b2f4cbc10e1c389ed4a598a27c8fb192a6
MD5 f0c1865850317ec60dc4f3609bd34d03
SHA1 4581e79617444a2b484c484c3a691d86f16fa414
SHA512 0102b63a3327a0fdb8c4f00d789f368042ba4dbb7207f5d520557d9f83efe3e6e47b5acadaee754e05e3f450f9d69c453571a66f32688b37cccb6178f380f519
MD5 SHA1 SHA512

$SYSDIR/SogouPY.ime

IMPHASH 71178e1c78bcd4cde4b4c9633d1227c5
SHA256 a5829b06630e21f40c7063ab33651aaa3f29e65dd49d9b1c67197d033c5b1b2a
MD5 0f259af22d9c826a7bcf82e44a95ab6c
SHA1 d93b28d1efeaf9a7d7d8ac7ae89dcb61fff06c04
SHA512 e055662c77924fe3a28e7f18a643a36a6c78ba33caae166b2d28336d244f9ca393db542436ca82a0d2ee229d550fbb0040a3e8bc5d2bc1dd85af4c87c766fbac
SSDEEP 196608:YIwmH0YZkYELwMzbBPHkJ2W7uQFDmQ7r+3AqAK00AF:YHMDEM0q7V7rpKuF
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Digest

35:6e:9d:56:63:3d:78:b4:7d:d2:97:de:b6:86:db:68:4f:ba:c2:36:86:29:e2:d8:d8:4d:c2:19:a1:a2:19:bb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Chains

Jul 17, 2024

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Serial Number

01:ba:be:96:e5:0e:a2:5f:3f:0e:88:42:9a:74:a4:62

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 17, 2024 - Jun 19, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

5963215

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\landun\pinyin_agent\workspace\p-f93f0d74ed8a49278e11882bf2562c5a\src\bin\Release_Win32\SogouPy.pdb

kernel32

OpenThread SetEvent CreateEventW OpenMutexW CreateFileMappingW CreateThread ReleaseMutex WaitForSingleObject GetProcAddress DecodePointer WaitNamedPipeW GetSystemTimeAsFileTime CreateFileW WriteFile SetNamedPipeHandleState ReadFile GetACP MapViewOfFile UnmapViewOfFile OpenFileMappingW GlobalUnlock TlsGetValue DeleteCriticalSection QueryPerformanceFrequency LCMapStringW QueryPerformanceCounter GetTickCount64 SetFileAttributesW OpenWaitableTimerW SetWaitableTimer CreateWaitableTimerW GetLocalTime SwitchToThread CreateSemaphoreW LoadLibraryW FreeLibrary DeleteFileW GetCurrentProcess HeapWalk GlobalLock GlobalFree GlobalAlloc InitializeCriticalSection LeaveCriticalSection GetCommandLineW EnterCriticalSection TlsSetValue GetModuleFileNameA GlobalAddAtomW GlobalGetAtomNameW OpenEventW DebugBreak GetTickCount ResumeThread VirtualFreeEx GetModuleHandleW GetCurrentProcessId ReadProcessMemory VirtualAllocEx CloseHandle OpenProcess GetCurrentThreadId DuplicateHandle HeapValidate GetProcessHeaps VirtualQuery InitializeCriticalSectionEx SetThreadPriority ReleaseSemaphore OutputDebugStringW GetCurrentThread GetSystemWow64DirectoryW AttachConsole GetConsoleDisplayMode FreeConsole SetLastError GetCurrentDirectoryW GetSystemInfo LocalFree LocalAlloc CreateMutexW GetStartupInfoW MoveFileExW CopyFileW GetSystemTime SetFilePointer GetTempFileNameW GetFileSize GetFileAttributesW GetDiskFreeSpaceExW FlushFileBuffers FindNextFileW FindFirstFileW FindClose GlobalHandle LoadLibraryA ReadConsoleA SetConsoleMode ConvertFiberToThread DeleteFiber WriteConsoleW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage HeapSize SetConsoleCtrlHandler GetStdHandle InitializeCriticalSectionAndSpinCount GetSystemDirectoryW GetTempPathW GetLastError Sleep WideCharToMultiByte MultiByteToWideChar GetModuleHandleA RaiseException VirtualProtect LoadLibraryExA ExitThread FormatMessageW CreateToolhelp32Snapshot Process32NextW Process32FirstW QueryDosDeviceW RemoveDirectoryW GetLogicalDriveStringsW FileTimeToSystemTime CreateDirectoryW GetProcessId GetFileAttributesExW CreateProcessW GetFileTime GetExitCodeProcess lstrlenW LoadLibraryExW TlsAlloc TlsFree SizeofResource LockResource LoadResource FindResourceW HeapFree GetFullPathNameW lstrlenA HeapAlloc GetProcessHeap GetVersionExW GetWindowsDirectoryW VirtualFree VirtualAlloc VerSetConditionMask VerifyVersionInfoW TerminateProcess IsProcessorFeaturePresent PeekNamedPipe ExpandEnvironmentStringsW WaitForSingleObjectEx GetQueuedCompletionStatus TransactNamedPipe CreateIoCompletionPort OutputDebugStringA MulDiv ReleaseSRWLockExclusive GetUserDefaultLangID FormatMessageA QueryThreadCycleTime GetThreadPriority SystemTimeToTzSpecificLocalTime FindFirstFileExW TryAcquireSRWLockExclusive AcquireSRWLockExclusive GetThreadId IsDebuggerPresent GetFileSizeEx SetEndOfFile GetFileInformationByHandle SetFilePointerEx SetEnvironmentVariableW GetEnvironmentVariableW GetNativeSystemInfo GetProcessTimes RtlCaptureStackBackTrace SetUnhandledExceptionFilter ResetEvent PostQueuedCompletionStatus WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable SleepConditionVariableSRW lstrcatW lstrcpyW GlobalReAlloc GetWindowsDirectoryA CreateFileA CreateFileMappingA OpenFileMappingA InitializeSRWLock InitOnceComplete InitOnceBeginInitialize GetExitCodeThread GetStringTypeW EncodePointer GetLocaleInfoEx LCMapStringEx CompareStringEx GetCPInfo UnhandledExceptionFilter InitializeSListHead RtlUnwind InterlockedPushEntrySList InterlockedFlushSList FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetDriveTypeW GetFileType GetConsoleMode ReadConsoleW GetConsoleOutputCP GetTimeZoneInformation SetStdHandle HeapReAlloc GetDateFormatW GetTimeFormatW CompareStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetModuleFileNameW

user32

GetMenuItemID GetWindowRect GetWindow GetWindowTextLengthW GetGUIThreadInfo SetRectEmpty ReleaseDC IsIconic SetClipboardData EmptyClipboard CloseClipboard GetMonitorInfoW OpenClipboard MonitorFromWindow MonitorFromRect SetWindowPos GetDC MonitorFromPoint CharNextW LoadStringW WindowFromPoint wsprintfW MsgWaitForMultipleObjectsEx SetPropW ReplyMessage LoadCursorW RegisterClassW GetClassInfoW RemovePropW CreateWindowExW DefWindowProcW EnableWindow EndPaint BeginPaint ReleaseCapture AppendMenuW GetClientRect SetCursor SetCapture IsWindowEnabled TrackMouseEvent SetMenuItemInfoW TrackPopupMenu GetWindowPlacement RegisterClassExW CreatePopupMenu ScreenToClient InsertMenuItemW CallWindowProcW DrawTextW UpdateLayeredWindow IntersectRect SubtractRect SetCaretPos GetQueueStatus wvsprintfW FillRect OffsetRect DestroyIcon GetKeyboardLayoutList GetProcessWindowStation GetUserObjectInformationW GetClassLongW RedrawWindow SetClassLongW GetCursor SetWindowRgn SetCursorPos InflateRect CopyRect DialogBoxParamW CreateDialogParamW IsWindowVisible SetScrollInfo EqualRect IsRectEmpty DrawIconEx PostQuitMessage GetWindowThreadProcessId GetWindowLongW GetDesktopWindow GetTopWindow GetKeyState SendInput mouse_event SetWindowsHookExW UnhookWindowsHookEx GetForegroundWindow GetAsyncKeyState GetSystemMetrics CallNextHookEx keybd_event GetWindowTextW GetAncestor UnhookWinEvent PtInRect RegisterWindowMessageW GetParent SetWinEventHook SetRect GetClassNameW FindWindowW IsWindow GetClassInfoExW NotifyWinEvent SendMessageW GetFocus LoadImageW SystemParametersInfoW EndDialog LoadIconW SetForegroundWindow FindWindowExW GetCaretPos GetPropW ClientToScreen SendMessageTimeoutW EnumWindows DispatchMessageW TranslateMessage DestroyMenu GetCursorPos UnregisterClassW GetMessageW SetTimer PeekMessageW PostThreadMessageW MessageBoxW GetKeyboardState SetWindowLongW UnregisterHotKey RegisterHotKey KillTimer DestroyWindow InvalidateRect ShowWindow MoveWindow GetMessageExtraInfo PostMessageW

gdi32

GetObjectW GetDeviceCaps StretchBlt BitBlt CreateDCW SetTextCharacterExtra SetBkMode SetTextColor CreateFontIndirectW GetFontData GetTextMetricsW GetTextExtentPointW CreateSolidBrush MoveToEx LineTo GetStockObject SelectClipRgn CreatePen CreateRectRgn GetClipRgn GetTextExtentExPointW GetFontUnicodeRanges CreateCompatibleBitmap Rectangle SelectObject CreateDIBSection CreateCompatibleDC GetPixel DeleteDC SetBkColor DeleteObject CombineRgn OffsetRgn ExtCreateRegion GetCharABCWidthsFloatW GetTextExtentPoint32W StretchDIBits SetMapMode CreateFontW

advapi32

CryptSignHashW CryptDestroyHash CryptCreateHash CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam ReportEventW ConvertStringSecurityDescriptorToSecurityDescriptorW BuildExplicitAccessWithNameW SetSecurityInfo SetNamedSecurityInfoW GetNamedSecurityInfoW SetEntriesInAclW SetSecurityDescriptorSacl SetSecurityDescriptorDacl InitializeSecurityDescriptor InitializeAcl GetSecurityDescriptorSacl GetLengthSid AddAccessAllowedAceEx EqualSid AllocateAndInitializeSid OpenProcessToken FreeSid GetTokenInformation RegCreateKeyExW RegCloseKey RegOpenKeyExW RegQueryValueExW RegOpenKeyW RegDeleteKeyW RegEnumValueW RegSetValueExW RegQueryInfoKeyW RegEnumKeyW CryptReleaseContext CryptImportKey CryptEncrypt CryptDestroyKey CryptSetKeyParam CryptDecrypt CryptAcquireContextW LookupAccountSidW SystemFunction036 RegisterEventSourceW EventUnregister EventRegister EventWrite RegQueryValueW DeregisterEventSource CryptEnumProvidersW

imm32

ImmLockIMC ImmUnlockIMC ImmAssociateContextEx ImmUnlockIMCC ImmDisableIME ImmLockIMCC ImmGetHotKey ImmNotifyIME ImmGetIMCCSize ImmReSizeIMCC ImmGenerateMessage ImmCreateIMCC

msimg32

TransparentBlt AlphaBlend GradientFill

ws2_32

WSACleanup WSAGetLastError recv send WSASetLastError closesocket

oleacc

LresultFromObject AccessibleObjectFromPoint AccessibleObjectFromEvent AccessibleObjectFromWindow

winhttp

WinHttpReadData WinHttpCloseHandle WinHttpGetIEProxyConfigForCurrentUser WinHttpGetProxyForUrl WinHttpSetOption WinHttpQueryHeaders WinHttpQueryDataAvailable WinHttpWriteData WinHttpOpen WinHttpSetTimeouts WinHttpConnect WinHttpOpenRequest WinHttpQueryOption WinHttpAddRequestHeaders WinHttpSendRequest WinHttpReceiveResponse WinHttpCrackUrl

winmm

timeEndPeriod timeGetTime timeBeginPeriod

crypt32

CertOpenStore CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertGetCertificateContextProperty

bcrypt

BCryptGenRandom

$SYSDIR/SogouPY.ime~

IMPHASH 71178e1c78bcd4cde4b4c9633d1227c5
SHA256 a5829b06630e21f40c7063ab33651aaa3f29e65dd49d9b1c67197d033c5b1b2a
MD5 0f259af22d9c826a7bcf82e44a95ab6c
SHA1 d93b28d1efeaf9a7d7d8ac7ae89dcb61fff06c04
SHA512 e055662c77924fe3a28e7f18a643a36a6c78ba33caae166b2d28336d244f9ca393db542436ca82a0d2ee229d550fbb0040a3e8bc5d2bc1dd85af4c87c766fbac
SSDEEP 196608:YIwmH0YZkYELwMzbBPHkJ2W7uQFDmQ7r+3AqAK00AF:YHMDEM0q7V7rpKuF
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Digest

35:6e:9d:56:63:3d:78:b4:7d:d2:97:de:b6:86:db:68:4f:ba:c2:36:86:29:e2:d8:d8:4d:c2:19:a1:a2:19:bb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Chains

Jul 17, 2024

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Serial Number

01:ba:be:96:e5:0e:a2:5f:3f:0e:88:42:9a:74:a4:62

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 17, 2024 - Jun 19, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

5963215

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\landun\pinyin_agent\workspace\p-f93f0d74ed8a49278e11882bf2562c5a\src\bin\Release_Win32\SogouPy.pdb

kernel32

OpenThread SetEvent CreateEventW OpenMutexW CreateFileMappingW CreateThread ReleaseMutex WaitForSingleObject GetProcAddress DecodePointer WaitNamedPipeW GetSystemTimeAsFileTime CreateFileW WriteFile SetNamedPipeHandleState ReadFile GetACP MapViewOfFile UnmapViewOfFile OpenFileMappingW GlobalUnlock TlsGetValue DeleteCriticalSection QueryPerformanceFrequency LCMapStringW QueryPerformanceCounter GetTickCount64 SetFileAttributesW OpenWaitableTimerW SetWaitableTimer CreateWaitableTimerW GetLocalTime SwitchToThread CreateSemaphoreW LoadLibraryW FreeLibrary DeleteFileW GetCurrentProcess HeapWalk GlobalLock GlobalFree GlobalAlloc InitializeCriticalSection LeaveCriticalSection GetCommandLineW EnterCriticalSection TlsSetValue GetModuleFileNameA GlobalAddAtomW GlobalGetAtomNameW OpenEventW DebugBreak GetTickCount ResumeThread VirtualFreeEx GetModuleHandleW GetCurrentProcessId ReadProcessMemory VirtualAllocEx CloseHandle OpenProcess GetCurrentThreadId DuplicateHandle HeapValidate GetProcessHeaps VirtualQuery InitializeCriticalSectionEx SetThreadPriority ReleaseSemaphore OutputDebugStringW GetCurrentThread GetSystemWow64DirectoryW AttachConsole GetConsoleDisplayMode FreeConsole SetLastError GetCurrentDirectoryW GetSystemInfo LocalFree LocalAlloc CreateMutexW GetStartupInfoW MoveFileExW CopyFileW GetSystemTime SetFilePointer GetTempFileNameW GetFileSize GetFileAttributesW GetDiskFreeSpaceExW FlushFileBuffers FindNextFileW FindFirstFileW FindClose GlobalHandle LoadLibraryA ReadConsoleA SetConsoleMode ConvertFiberToThread DeleteFiber WriteConsoleW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage HeapSize SetConsoleCtrlHandler GetStdHandle InitializeCriticalSectionAndSpinCount GetSystemDirectoryW GetTempPathW GetLastError Sleep WideCharToMultiByte MultiByteToWideChar GetModuleHandleA RaiseException VirtualProtect LoadLibraryExA ExitThread FormatMessageW CreateToolhelp32Snapshot Process32NextW Process32FirstW QueryDosDeviceW RemoveDirectoryW GetLogicalDriveStringsW FileTimeToSystemTime CreateDirectoryW GetProcessId GetFileAttributesExW CreateProcessW GetFileTime GetExitCodeProcess lstrlenW LoadLibraryExW TlsAlloc TlsFree SizeofResource LockResource LoadResource FindResourceW HeapFree GetFullPathNameW lstrlenA HeapAlloc GetProcessHeap GetVersionExW GetWindowsDirectoryW VirtualFree VirtualAlloc VerSetConditionMask VerifyVersionInfoW TerminateProcess IsProcessorFeaturePresent PeekNamedPipe ExpandEnvironmentStringsW WaitForSingleObjectEx GetQueuedCompletionStatus TransactNamedPipe CreateIoCompletionPort OutputDebugStringA MulDiv ReleaseSRWLockExclusive GetUserDefaultLangID FormatMessageA QueryThreadCycleTime GetThreadPriority SystemTimeToTzSpecificLocalTime FindFirstFileExW TryAcquireSRWLockExclusive AcquireSRWLockExclusive GetThreadId IsDebuggerPresent GetFileSizeEx SetEndOfFile GetFileInformationByHandle SetFilePointerEx SetEnvironmentVariableW GetEnvironmentVariableW GetNativeSystemInfo GetProcessTimes RtlCaptureStackBackTrace SetUnhandledExceptionFilter ResetEvent PostQueuedCompletionStatus WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable SleepConditionVariableSRW lstrcatW lstrcpyW GlobalReAlloc GetWindowsDirectoryA CreateFileA CreateFileMappingA OpenFileMappingA InitializeSRWLock InitOnceComplete InitOnceBeginInitialize GetExitCodeThread GetStringTypeW EncodePointer GetLocaleInfoEx LCMapStringEx CompareStringEx GetCPInfo UnhandledExceptionFilter InitializeSListHead RtlUnwind InterlockedPushEntrySList InterlockedFlushSList FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetDriveTypeW GetFileType GetConsoleMode ReadConsoleW GetConsoleOutputCP GetTimeZoneInformation SetStdHandle HeapReAlloc GetDateFormatW GetTimeFormatW CompareStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetModuleFileNameW

user32

GetMenuItemID GetWindowRect GetWindow GetWindowTextLengthW GetGUIThreadInfo SetRectEmpty ReleaseDC IsIconic SetClipboardData EmptyClipboard CloseClipboard GetMonitorInfoW OpenClipboard MonitorFromWindow MonitorFromRect SetWindowPos GetDC MonitorFromPoint CharNextW LoadStringW WindowFromPoint wsprintfW MsgWaitForMultipleObjectsEx SetPropW ReplyMessage LoadCursorW RegisterClassW GetClassInfoW RemovePropW CreateWindowExW DefWindowProcW EnableWindow EndPaint BeginPaint ReleaseCapture AppendMenuW GetClientRect SetCursor SetCapture IsWindowEnabled TrackMouseEvent SetMenuItemInfoW TrackPopupMenu GetWindowPlacement RegisterClassExW CreatePopupMenu ScreenToClient InsertMenuItemW CallWindowProcW DrawTextW UpdateLayeredWindow IntersectRect SubtractRect SetCaretPos GetQueueStatus wvsprintfW FillRect OffsetRect DestroyIcon GetKeyboardLayoutList GetProcessWindowStation GetUserObjectInformationW GetClassLongW RedrawWindow SetClassLongW GetCursor SetWindowRgn SetCursorPos InflateRect CopyRect DialogBoxParamW CreateDialogParamW IsWindowVisible SetScrollInfo EqualRect IsRectEmpty DrawIconEx PostQuitMessage GetWindowThreadProcessId GetWindowLongW GetDesktopWindow GetTopWindow GetKeyState SendInput mouse_event SetWindowsHookExW UnhookWindowsHookEx GetForegroundWindow GetAsyncKeyState GetSystemMetrics CallNextHookEx keybd_event GetWindowTextW GetAncestor UnhookWinEvent PtInRect RegisterWindowMessageW GetParent SetWinEventHook SetRect GetClassNameW FindWindowW IsWindow GetClassInfoExW NotifyWinEvent SendMessageW GetFocus LoadImageW SystemParametersInfoW EndDialog LoadIconW SetForegroundWindow FindWindowExW GetCaretPos GetPropW ClientToScreen SendMessageTimeoutW EnumWindows DispatchMessageW TranslateMessage DestroyMenu GetCursorPos UnregisterClassW GetMessageW SetTimer PeekMessageW PostThreadMessageW MessageBoxW GetKeyboardState SetWindowLongW UnregisterHotKey RegisterHotKey KillTimer DestroyWindow InvalidateRect ShowWindow MoveWindow GetMessageExtraInfo PostMessageW

gdi32

GetObjectW GetDeviceCaps StretchBlt BitBlt CreateDCW SetTextCharacterExtra SetBkMode SetTextColor CreateFontIndirectW GetFontData GetTextMetricsW GetTextExtentPointW CreateSolidBrush MoveToEx LineTo GetStockObject SelectClipRgn CreatePen CreateRectRgn GetClipRgn GetTextExtentExPointW GetFontUnicodeRanges CreateCompatibleBitmap Rectangle SelectObject CreateDIBSection CreateCompatibleDC GetPixel DeleteDC SetBkColor DeleteObject CombineRgn OffsetRgn ExtCreateRegion GetCharABCWidthsFloatW GetTextExtentPoint32W StretchDIBits SetMapMode CreateFontW

advapi32

CryptSignHashW CryptDestroyHash CryptCreateHash CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam ReportEventW ConvertStringSecurityDescriptorToSecurityDescriptorW BuildExplicitAccessWithNameW SetSecurityInfo SetNamedSecurityInfoW GetNamedSecurityInfoW SetEntriesInAclW SetSecurityDescriptorSacl SetSecurityDescriptorDacl InitializeSecurityDescriptor InitializeAcl GetSecurityDescriptorSacl GetLengthSid AddAccessAllowedAceEx EqualSid AllocateAndInitializeSid OpenProcessToken FreeSid GetTokenInformation RegCreateKeyExW RegCloseKey RegOpenKeyExW RegQueryValueExW RegOpenKeyW RegDeleteKeyW RegEnumValueW RegSetValueExW RegQueryInfoKeyW RegEnumKeyW CryptReleaseContext CryptImportKey CryptEncrypt CryptDestroyKey CryptSetKeyParam CryptDecrypt CryptAcquireContextW LookupAccountSidW SystemFunction036 RegisterEventSourceW EventUnregister EventRegister EventWrite RegQueryValueW DeregisterEventSource CryptEnumProvidersW

imm32

ImmLockIMC ImmUnlockIMC ImmAssociateContextEx ImmUnlockIMCC ImmDisableIME ImmLockIMCC ImmGetHotKey ImmNotifyIME ImmGetIMCCSize ImmReSizeIMCC ImmGenerateMessage ImmCreateIMCC

msimg32

TransparentBlt AlphaBlend GradientFill

ws2_32

WSACleanup WSAGetLastError recv send WSASetLastError closesocket

oleacc

LresultFromObject AccessibleObjectFromPoint AccessibleObjectFromEvent AccessibleObjectFromWindow

winhttp

WinHttpReadData WinHttpCloseHandle WinHttpGetIEProxyConfigForCurrentUser WinHttpGetProxyForUrl WinHttpSetOption WinHttpQueryHeaders WinHttpQueryDataAvailable WinHttpWriteData WinHttpOpen WinHttpSetTimeouts WinHttpConnect WinHttpOpenRequest WinHttpQueryOption WinHttpAddRequestHeaders WinHttpSendRequest WinHttpReceiveResponse WinHttpCrackUrl

winmm

timeEndPeriod timeGetTime timeBeginPeriod

crypt32

CertOpenStore CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertGetCertificateContextProperty

bcrypt

BCryptGenRandom

$_15_/HWSignature.dll

IMPHASH cdd42c264bacf432f4003380d6c8ce27
SHA256 8030f81ec2f19722b6b7a67d5f7bb668de3b8ac09f66de6a8a8bbc7ab5ca1390
MD5 12b02fb9cf05343406a4cd690e1ca70b
SHA1 2857b7184c692a14c9a4066693a761e839623a64
SHA512 9ac6ff85e46d0dc0052f52bc3960fb8b50cc096194f56212c77e7131aa6da1920233cab77a5e99ed1ce0b6b9f1af4f74cf4dc4ed4683a4c5b29fe1789e9055e6
SSDEEP 3072:TRFaHlycZOgiTptaQihWc2lSpRHPdmRRSwj33zMd:tFwllOJTbaDhulS/43Ad
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Digest

28:d0:5a:4b:9d:1b:e8:89:8e:a0:1b:ac:c5:59:3b:f1:76:3b:4c:a1:af:a5:b7:09:5f:33:0e:9d:33:a1:ab:2a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Chains

Jul 17, 2024

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Serial Number

01:ba:be:96:e5:0e:a2:5f:3f:0e:88:42:9a:74:a4:62

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 17, 2024 - Jun 19, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

16956

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\landun\pinyin_agent\workspace\p-f93f0d74ed8a49278e11882bf2562c5a\src\bin\Release_Win32\HWSignature.pdb

ws2_32

WSAStartup

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

kernel32

EnterCriticalSection CreateFileW DecodePointer GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte HeapFree DeviceIoControl lstrcatA CopyFileA CreateFileA GetSystemDirectoryA CloseHandle HeapAlloc GetProcessHeap lstrcpyA lstrlenA GlobalAlloc LocalAlloc GetLastError LoadLibraryA GetVersionExA GetProcAddress LocalFree FreeLibrary HeapReAlloc SetLastError GlobalFree GetTickCount GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedFlushSList RtlUnwind WriteConsoleW LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException ExitProcess GetModuleHandleExW GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetFilePointerEx GetStringTypeW SetStdHandle HeapSize

user32

IsCharAlphaNumericA wsprintfA

14.7.0.9739/HWSignature.dll

IMPHASH cdd42c264bacf432f4003380d6c8ce27
SHA256 8030f81ec2f19722b6b7a67d5f7bb668de3b8ac09f66de6a8a8bbc7ab5ca1390
MD5 12b02fb9cf05343406a4cd690e1ca70b
SHA1 2857b7184c692a14c9a4066693a761e839623a64
SHA512 9ac6ff85e46d0dc0052f52bc3960fb8b50cc096194f56212c77e7131aa6da1920233cab77a5e99ed1ce0b6b9f1af4f74cf4dc4ed4683a4c5b29fe1789e9055e6
SSDEEP 3072:TRFaHlycZOgiTptaQihWc2lSpRHPdmRRSwj33zMd:tFwllOJTbaDhulS/43Ad
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Digest

28:d0:5a:4b:9d:1b:e8:89:8e:a0:1b:ac:c5:59:3b:f1:76:3b:4c:a1:af:a5:b7:09:5f:33:0e:9d:33:a1:ab:2a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Chains

Jul 17, 2024

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Serial Number

01:ba:be:96:e5:0e:a2:5f:3f:0e:88:42:9a:74:a4:62

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 17, 2024 - Jun 19, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

16956

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\landun\pinyin_agent\workspace\p-f93f0d74ed8a49278e11882bf2562c5a\src\bin\Release_Win32\HWSignature.pdb

ws2_32

WSAStartup

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

kernel32

EnterCriticalSection CreateFileW DecodePointer GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte HeapFree DeviceIoControl lstrcatA CopyFileA CreateFileA GetSystemDirectoryA CloseHandle HeapAlloc GetProcessHeap lstrcpyA lstrlenA GlobalAlloc LocalAlloc GetLastError LoadLibraryA GetVersionExA GetProcAddress LocalFree FreeLibrary HeapReAlloc SetLastError GlobalFree GetTickCount GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedFlushSList RtlUnwind WriteConsoleW LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException ExitProcess GetModuleHandleExW GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetFilePointerEx GetStringTypeW SetStdHandle HeapSize

user32

IsCharAlphaNumericA wsprintfA

14.7.0.9739/ImageMagik.dll

IMPHASH f204f2299a0324f196a8576faef59e72
SHA256 1cc49c7e63a141a2639082e95e313ced13975208d1e426dd1dfd205da52eeabd
MD5 b7a772dace39e78425214e501527410f
SHA1 139e5e5bef9ad012d2a9c9e45733923228ab753f
SHA512 e0ff9398bfcfe466d32385510c5898da88a7382ea1f39bbb68c970ac11b0a793fe4da5901f60b49db5665e7d81f7e746390d4c25a3142151d2fff47dea2501d6
SSDEEP 98304:g8TehrnxKNDXEAOhBWlgPqdeP/pkzLLh6FRyv+yJkzBZhhhhhhhd+0B:g8Te7KNDX1OhBWlgPqdewLLh8RakPhhx
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Digest

59:ab:59:bb:f3:13:fc:85:33:e2:9c:a6:b7:5d:4c:d1:84:0c:a2:7d:67:cc:d8:6a:a1:17:d2:68:42:62:57:e3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Chains

Jul 17, 2024

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Serial Number

01:ba:be:96:e5:0e:a2:5f:3f:0e:88:42:9a:74:a4:62

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 17, 2024 - Jun 19, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

57231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\data\landun\workspace\p-a6b81373d56245738becf19644b9638b\src\third_party_build\imagemagick\tmp\x86\RelWithDebInfo\ImageMagik.pdb

kernel32

QueryPerformanceCounter QueryPerformanceFrequency GetExitCodeProcess GetSystemTimeAsFileTime GetConsoleOutputCP LoadLibraryA MultiByteToWideChar IsValidCodePage GetACP GetCPInfo IsDBCSLeadByteEx ReadFile WriteFile PeekNamedPipe SetEvent ResetEvent ReadConsoleInputA DeviceIoControl DuplicateHandle GetConsoleWindow WaitForSingleObjectEx WaitForMultipleObjectsEx CreateEventW WaitForMultipleObjects GetExitCodeThread GetTimeZoneInformation GetDateFormatW GetTimeFormatW GetLocaleInfoW MapViewOfFile UnmapViewOfFile CreateFileMappingA CreateMutexA GetCurrentThreadId ExitProcess MoveFileExW GetFileInformationByHandle AttachConsole GetThreadLocale GetLocaleInfoA WideCharToMultiByte GetModuleHandleW FreeLibrary GetVersion CreateProcessA CreateEventA RemoveVectoredExceptionHandler AddVectoredExceptionHandler GetShortPathNameW GetCommandLineW GetStdHandle GetFileAttributesW GetCurrentDirectoryW TerminateProcess GetSystemInfo SetConsoleMode GetConsoleMode GetFileInformationByHandleEx IsDebuggerPresent GetFileType ExpandEnvironmentStringsW SetEnvironmentVariableW GetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetProcessAffinityMask GetNativeSystemInfo GetCurrentProcess TlsSetValue TlsGetValue TlsAlloc ResumeThread GetThreadPriority SetThreadPriority GetCurrentThread CloseHandle Sleep SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable TryEnterCriticalSection TryAcquireSRWLockShared TryAcquireSRWLockExclusive AcquireSRWLockShared AllocConsole AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive InitializeSRWLock RaiseException GetComputerNameW GetModuleHandleA GetModuleFileNameW VirtualQuery GetWindowsDirectoryW GetSystemDirectoryW DebugBreak LoadLibraryW GetProcAddress FormatMessageW GetVersionExA DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetTempPathW GetTempFileNameW DeleteFileW CreateFileW LocalFree GetCurrentProcessId OpenMutexW CreateMutexW WaitForSingleObject ReleaseMutex GetLastError PeekConsoleInputA UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent InitializeSListHead GetStartupInfoW InterlockedPushEntrySList InterlockedFlushSList RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsFree LoadLibraryExW EncodePointer SetStdHandle CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW SetEndOfFile GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SetCurrentDirectoryW CreateDirectoryW RemoveDirectoryW GetFileAttributesExW SetFileAttributesW FlushFileBuffers SetFileTime TzSpecificLocalTimeToSystemTime SystemTimeToFileTime GetConsoleCP CreatePipe CreateProcessW GetFullPathNameW FindClose FindFirstFileExW FindNextFileW SetFilePointerEx ReadConsoleW HeapFree HeapAlloc HeapReAlloc DecodePointer GetFileSizeEx CompareStringW LCMapStringW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW SetConsoleCtrlHandler GetStringTypeW GetNumberOfConsoleInputEvents ReadConsoleInputW GetOEMCP GetCommandLineA GetProcessHeap OutputDebugStringW HeapSize WriteConsoleW GetTickCount GetDiskFreeSpaceExW GetVolumeInformationW GetVolumePathNameW GetModuleHandleExA GetLogicalDrives GetSystemDirectoryA GetLongPathNameW ReadDirectoryChangesW GetDriveTypeA GetFileSize

user32

PeekMessageA MessageBoxA FillRect IsWindow MsgWaitForMultipleObjectsEx ReleaseDC GetDC SystemParametersInfoA PostMessageA LoadStringW

gdi32

Polyline StretchDIBits CreateSolidBrush GetDeviceCaps GdiFlush CreateDIBSection GetWorldTransform Rectangle SelectClipRgn IntersectClipRect GetClipRgn GetClipBox ExtCreateRegion CreateRectRgn CreateCompatibleBitmap BitBlt ExtTextOutW GetObjectW ModifyWorldTransform SetWorldTransform GetTextMetricsA SetTextAlign SetTextColor SetMapMode SetGraphicsMode SetBkMode SelectObject SaveDC RestoreDC GetGlyphIndicesW GetFontUnicodeRanges GetOutlineTextMetricsA GetGlyphOutlineW GetFontData GetCharWidth32A DeleteObject DeleteDC CreateFontIndirectW CreateCompatibleDC GetStockObject GetGlyphOutlineA CreatePen CreateDCA EnumFontFamiliesExW ExtSelectClipRgn GetGraphicsMode CreateFontIndirectA

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetFileInfoW SHFileOperationW CommandLineToArgvW

ole32

CoTaskMemFree

advapi32

RegOpenKeyExW RegCreateKeyExW RegGetValueW RegQueryValueExA RegOpenKeyExA RegSetValueExW LookupAccountSidW RegNotifyChangeKeyValue RegEnumKeyExW RegEnumValueW RegQueryInfoKeyW GetFileSecurityW GetSecurityDescriptorOwner RegLoadMUIStringW RegQueryValueExW RegDeleteValueW RegCloseKey GetUserNameW BuildExplicitAccessWithNameW SetSecurityInfo GetSecurityInfo SetEntriesInAclW ConvertStringSecurityDescriptorToSecurityDescriptorW SetSecurityDescriptorDacl InitializeSecurityDescriptor GetSecurityDescriptorSacl GetSecurityDescriptorGroup

ws2_32

ioctlsocket closesocket WSAStartup getsockopt recv send WSAGetLastError WSACloseEvent WSACreateEvent WSAEnumNetworkEvents WSAEventSelect WSASetEvent getservbyport getservbyname inet_pton inet_ntop htonl htons inet_addr inet_ntoa ntohs gethostbyaddr gethostbyname WSASetLastError

dnsapi

DnsFree DnsQuery_A

iphlpapi

NotifyRouteChange2 CancelMibChangeNotify2 GetIpForwardTable2

Name

.text

Size

4.4MB

Virtual Size

4.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

14KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

270B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

138KB

Virtual Size

138KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

14.7.0.9739/SetupUi.cupf

SHA256 eda6d0eb05cdcc1941f67f8df5c63a91adeb073cf64c80a0276385a04a4d13ec
MD5 817cbf611cff0deb62a614aca93f1b31
SHA1 9682983820f262a1b937433c6239151199f76d0d
SHA512 a7ea84fb6d686f7dc0e9177b7a9510a699a247f24d8a8f167338e5b52ab538521e38a1ab4ed24f20a8468ff9071fa08e0650a0d60d3da8faf505e961beab3fc7
SSDEEP 12288:d6GsrKHKfkZKszHQ9WA1Ydk7/VS8F8Pb39djdlZw6tA3HXMGH0ZagGiHad1xUbk1:d4rVkZ1a1z/Vn8j37r63MGUZat1umBl
MD5 SHA1 SHA512 SSDEEP

SogouExe/HWSignatureEx.dll

IMPHASH cdd42c264bacf432f4003380d6c8ce27
SHA256 8030f81ec2f19722b6b7a67d5f7bb668de3b8ac09f66de6a8a8bbc7ab5ca1390
MD5 12b02fb9cf05343406a4cd690e1ca70b
SHA1 2857b7184c692a14c9a4066693a761e839623a64
SHA512 9ac6ff85e46d0dc0052f52bc3960fb8b50cc096194f56212c77e7131aa6da1920233cab77a5e99ed1ce0b6b9f1af4f74cf4dc4ed4683a4c5b29fe1789e9055e6
SSDEEP 3072:TRFaHlycZOgiTptaQihWc2lSpRHPdmRRSwj33zMd:tFwllOJTbaDhulS/43Ad
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Digest

28:d0:5a:4b:9d:1b:e8:89:8e:a0:1b:ac:c5:59:3b:f1:76:3b:4c:a1:af:a5:b7:09:5f:33:0e:9d:33:a1:ab:2a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Chains

Jul 17, 2024

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,O=Beijing Sogou Technology Development Co.\, Ltd.,ST=Beijing,C=CN

Serial Number

01:ba:be:96:e5:0e:a2:5f:3f:0e:88:42:9a:74:a4:62

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 17, 2024 - Jun 19, 2027

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

16956

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\landun\pinyin_agent\workspace\p-f93f0d74ed8a49278e11882bf2562c5a\src\bin\Release_Win32\HWSignature.pdb

ws2_32

WSAStartup

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

kernel32

EnterCriticalSection CreateFileW DecodePointer GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte HeapFree DeviceIoControl lstrcatA CopyFileA CreateFileA GetSystemDirectoryA CloseHandle HeapAlloc GetProcessHeap lstrcpyA lstrlenA GlobalAlloc LocalAlloc GetLastError LoadLibraryA GetVersionExA GetProcAddress LocalFree FreeLibrary HeapReAlloc SetLastError GlobalFree GetTickCount GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedFlushSList RtlUnwind WriteConsoleW LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException ExitProcess GetModuleHandleExW GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetFilePointerEx GetStringTypeW SetStdHandle HeapSize

user32

IsCharAlphaNumericA wsprintfA

out.upx

SHA256 e5ae5741af5490fb4c10a870ce8e80da1d84d017afb64775c0f93c9ace7db1a3
MD5 38081740d5d1e53e9dff35ea23b2668e
SHA1 794e6ac16be4aa8e52364323e647f591bf09b51c
SHA512 f4c2bf79dbc4bb3c97fb274d42a025d05c15151d214783e83801ca0f83aed3f305709ac81a291f645380e5fa699fd251fd4b60daa5ad23af374ba02b17610305
SSDEEP 3072:CZf1c+yc3Vn+qo3HgR4ISEb4kGdnqfPQSiNfdWpRN2I5l:+0q6AR4qQvEpfZ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

14901

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

setup_2.exe.vir

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/INetC.dll

kernel32

user32

comctl32

wininet

generic

sogou_pinyin.exe

generic

$PLUGINSDIR/HWSignature.dll

ws2_32

version

kernel32

user32

generic

$PLUGINSDIR/ImageMagik.dll

kernel32

user32

gdi32

shell32

ole32

advapi32

ws2_32

dnsapi

iphlpapi

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/SetupFlash.swf

$PLUGINSDIR/SetupLib.dll

wtsapi32

wininet

shlwapi

shell32

version

advapi32

kernel32

user32

gdi32

ole32

oleaut32

imm32

psapi

msimg32

crypt32

wldap32

bcrypt

winhttp

ws2_32

oleacc

winmm

generic

$PLUGINSDIR/SetupLibNew.dll

wtsapi32

wininet

shlwapi

shell32

kernel32

user32

gdi32

advapi32