6127385ced83cdbb6ac210d07d2e984b171faf32651f815e6397b066bd05ff24

resource
6127385ced83cdbb6ac210d07d2e984b171faf32651f815e6397b066bd05ff24
unpack001/$PLUGINSDIR/System.dll
unpack001/2345Login.exe

IMPHASH c4b59213b5e11b9bf15279940b27df18
SHA256 6127385ced83cdbb6ac210d07d2e984b171faf32651f815e6397b066bd05ff24
MD5 02992155fa3d7a46826c8ce4e685ee99
SHA1 6472d2f05ab8eedb75ccb036cebca4bb1663bfdc
SHA512 2ef91135b9fabd22ef358d7d097ff53a56914956ca2154a19ee9a787f3916a3ff261efcff78f57aa1fe87b657e5f9ae7a432a064a4d8bd706df0804b60b4b15b
SSDEEP 196608:m+fsRTNHxk5Lkb3ipeZwz6UDcxkzAtM1K5HJ7LHHuTz:xgfcLkb3ipe26X4AtMg5HNjOn
TLSH
T1118633D7215D286BCDD875B859F7E75CBBD40C00006D03E6E391398A2C376F7686EA8A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

14467

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW RegCreateKeyExW RegOpenKeyExW

shell32

SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteExW

ole32

OleInitialize OleUninitialize CoTaskMemFree IIDFromString CoCreateInstance

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

PeekMessageW DispatchMessageW wsprintfA LoadCursorW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW SetDlgItemTextW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW GetDlgItemTextW CharNextA CharPrevW RegisterClassW MessageBoxIndirectW SystemParametersInfoW

gdi32

GetDeviceCaps SetBkColor CreateBrushIndirect SetTextColor SetBkMode SelectObject DeleteObject CreateFontIndirectW

kernel32

WriteFile WaitForSingleObject GetExitCodeProcess GetTempFileNameW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceW CopyFileW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess SetErrorMode GetTempPathW CreateProcessW GetCommandLineW GetModuleFileNameW GetTickCount GetLastError GetFileSize CreateFileW MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW RemoveDirectoryW GetSystemDirectoryW MoveFileExW GetModuleHandleA GetProcAddress lstrcmpiA lstrcpyA lstrcatW SetEnvironmentVariableW

$APPDATA/2345Pic/PicExt/libcurl_x86.dll

IMPHASH 64d8089c328d441f097db6a50d840bc2
SHA256 635f988beb849c6510f54f681387bf810c2266bd27834c5a9c160cbfe6df44d4
MD5 a26e75c0407c87786eea42febdb32532
SHA1 27e52fdca023cb8f031cd55ac37965d93f7f7da7
SHA512 fdd9760442579ad2a3df4f31464f9e66bc19a4390fa1c81afb516cce817097b5324024f712d9c1bf1a11ad30324f5a8aa83c72a732e1197e8804ab806d3859e6
SSDEEP 49152:nGUR9r6hl8IXBPZ68L20v/SU8Y7NriOPquwgtJIpT:nGUR9r6b8IbBLjv/SUp7NriSg
TLSH
T1F0A5AE02FB8185B2E6DB427862FA677F8E3A55205328C9D3C79138749D201D2773E79E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

e2:4a:00:44:60:0c:ad:d4:00:29:36:d8:9c:d0:cf:f5:f9:10:04:90:56:4a:4e:3e:db:e4:d1:67:0b:12:3b:45

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Aug 26, 2021

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

77:59:7e:f8:fc:5f:0d:2f:b5:62:1d:bf:3b:0f:de:14:9b:43:3f:64

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Aug 26, 2021

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

06:ea:0d:de:d5:5e:c1:e1:a2:9f:c5:fb:5d:ab:4f:b2

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2020 - May 18, 2023

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

05:aa:43:30:0d:17:67:ac:12:49:43:54:21:65:bb:9e

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2020 - May 18, 2023

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

0

Major OS version

6

Entry point

1403272

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\dev\lib.vs2017\vendor\depends\curl\out\bin\Win32\release_static\pdb\libcurl_x86.pdb

ws2_32

closesocket getpeername getsockname getsockopt htons ntohs recv setsockopt socket WSASetLastError WSAIoctl getaddrinfo WSAGetLastError freeaddrinfo gethostname accept listen ioctlsocket __WSAFDIsSet select send WSAStartup WSACleanup recvfrom sendto gethostbyname bind connect shutdown htonl ntohl getservbyname

wldap32

ord145 ord301 ord147 ord133 ord79 ord142 ord167 ord127 ord27 ord26 ord118 ord41 ord208 ord216 ord14 ord46 ord219

crypt32

CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertGetCertificateContextProperty CertOpenStore

kernel32

GetCurrentDirectoryW SetCurrentDirectoryW HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW HeapFree HeapAlloc GetACP GetStringTypeW DecodePointer GetCurrentThread WaitForSingleObjectEx OutputDebugStringW OutputDebugStringA HeapSize WriteConsoleW GetProcessHeap SetEnvironmentVariableW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SleepEx MultiByteToWideChar WideCharToMultiByte WaitForSingleObject CloseHandle ExpandEnvironmentStringsA Sleep GetLastError SetLastError FormatMessageA VerSetConditionMask FreeLibrary GetProcAddress LoadLibraryW GetModuleHandleW GetSystemDirectoryW QueryPerformanceFrequency VerifyVersionInfoW WaitForMultipleObjects GetFileType GetStdHandle ReadFile PeekNamedPipe GetTickCount QueryPerformanceCounter FlushConsoleInputBuffer WriteFile GetCurrentThreadId GetModuleHandleA GetCurrentProcessId LoadLibraryA GlobalMemoryStatus GetSystemTime SystemTimeToFileTime GetConsoleCP ReadConsoleW GetModuleFileNameW GetModuleFileNameA ExitProcess SetConsoleMode ReadConsoleInputA PeekConsoleInputA SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA FindFirstFileA GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindNextFileA FindFirstFileExW FindFirstFileExA FindClose GetTimeZoneInformation SetEndOfFile SetFileAttributesW GetFileAttributesExW FlushFileBuffers GetNumberOfConsoleInputEvents SetStdHandle GetFullPathNameA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW InterlockedPushEntrySList InterlockedFlushSList RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException CreateThread ExitThread ResumeThread FreeLibraryAndExitThread GetModuleHandleExW CreateFileW GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SetFilePointerEx SetConsoleCtrlHandler GetConsoleMode GetFullPathNameW

user32

GetDC GetDesktopWindow MessageBoxA GetUserObjectInformationW GetProcessWindowStation ReleaseDC

gdi32

GetDeviceCaps GetDIBits GetObjectA DeleteObject CreateCompatibleBitmap

advapi32

RegisterEventSourceA DeregisterEventSource CryptEnumProvidersA CryptSignHashA CryptDestroyHash CryptCreateHash CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey CryptReleaseContext CryptAcquireContextA ReportEventA

curl_easy_cleanup curl_easy_duphandle curl_easy_escape curl_easy_getinfo curl_easy_init curl_easy_pause curl_easy_perform curl_easy_recv curl_easy_reset curl_easy_send curl_easy_setopt curl_easy_strerror curl_easy_unescape curl_easy_upkeep curl_escape curl_formadd curl_formfree curl_formget curl_free curl_getdate curl_getenv curl_global_cleanup curl_global_init curl_global_init_mem curl_global_sslset curl_maprintf curl_mfprintf curl_mime_addpart curl_mime_data curl_mime_data_cb curl_mime_encoder curl_mime_filedata curl_mime_filename curl_mime_free curl_mime_headers curl_mime_init curl_mime_name curl_mime_subparts curl_mime_type curl_mprintf curl_msnprintf curl_msprintf curl_multi_add_handle curl_multi_assign curl_multi_cleanup curl_multi_fdset curl_multi_info_read curl_multi_init curl_multi_perform curl_multi_remove_handle curl_multi_setopt curl_multi_socket curl_multi_socket_action curl_multi_socket_all curl_multi_strerror curl_multi_timeout curl_multi_wait curl_mvaprintf curl_mvfprintf curl_mvprintf curl_mvsnprintf curl_mvsprintf curl_pushheader_byname curl_pushheader_bynum curl_share_cleanup curl_share_init curl_share_setopt curl_share_strerror curl_slist_append curl_slist_free_all curl_strequal curl_strnequal curl_unescape curl_url curl_url_cleanup curl_url_dup curl_url_get curl_url_set curl_version curl_version_info

$PLUGINSDIR/FileInfo.dll

IMPHASH 2fdbf825906fc57df3de0ccbe0c11e17
SHA256 f566929a00891d1d600504cda8d56a4005211e07f85aa0ae4740e232f4a1b724
MD5 b9cd369cb60c5a03181e7118a2a93944
SHA1 d07772dd8768ab609e04b158e50be99b2af1ef16
SHA512 99fb28320d8f4ca280422c6e2ee6535fbc989cb13cb095a73d11da0509aed0d0584541adca500e799ace99069f9d53c3c1b1fc5887a3f9eb00c0bd4c9c6b68e6
SSDEEP 12288:8fJaJPY/1zyk0vA+719NikuHzzuDdeLj1ln3NKw0bwr81Kyi/NTkXInxC5YT5A:XJEE19NyeZEKLbF0BFTkXInxC5YT5A
TLSH
T110D48C1171C286B7E27E01702A6C9E7E107D35600B708CD7F7C86F3E99B49D29635AAB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

14:61:9d:1f:b3:09:0b:63:a6:26:7a:2f:ae:b7:da:5b:ae:3f:ae:61:54:e8:5c:50:df:1d:7a:c2:ab:83:7c:33

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Apr 10, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

94:78:66:e9:e3:3c:43:11:e1:8c:b9:61:69:7c:af:af:da:78:ce:89

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Apr 10, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

312876

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

kernel32

MoveFileExW TerminateProcess WaitForSingleObject OpenProcess CreateToolhelp32Snapshot Process32NextW Process32FirstW CloseHandle GetCurrentProcessId QueryFullProcessImageNameW MultiByteToWideChar GlobalAlloc GlobalFree WideCharToMultiByte lstrcpyW SetLastError GetCurrentProcess DeleteFileW WriteFile SetFilePointer CreateFileW GetFileSize GetExitCodeProcess GetProcAddress GetModuleHandleW LoadLibraryExW GetModuleFileNameW GetTickCount MoveFileW InterlockedExchange InterlockedExchangeAdd lstrlenW LoadLibraryW FreeLibrary WriteConsoleW GetLastError Sleep SetFileAttributesW GetFileAttributesW CreateMutexW RemoveDirectoryW lstrcpynW CreateProcessW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers SetStdHandle HeapSize SetEnvironmentVariableA FreeEnvironmentStringsW FormatMessageW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount CreateEventW SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime EncodePointer DecodePointer CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo GetVersionExW LockResource LoadResource FindResourceW lstrcmpiW InitializeCriticalSection ResumeThread GetACP QueryDosDeviceW FindFirstFileW FindNextFileW FindClose GetLongPathNameW GetFileAttributesExW ReleaseMutex GetEnvironmentVariableW RaiseException ReadFile SetEndOfFile GetFileSizeEx SetEvent ResetEvent HeapFree GetCurrentThreadId HeapAlloc LocalFree GetProcessHeap GetLogicalDriveStringsW CreateDirectoryW GetFullPathNameW GetTempPathW GetWindowsDirectoryW GetTempFileNameW UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead OutputDebugStringW GetStdHandle GetFileType RtlUnwind InterlockedFlushSList CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameA IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc GetTimeZoneInformation FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW

user32

wsprintfW

advapi32

SetTokenInformation AllocateAndInitializeSid OpenProcessToken FreeSid CreateProcessAsUserW GetLengthSid DuplicateTokenEx

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoTaskMemFree

$PLUGINSDIR/RCWidgetPlugin.dll

IMPHASH 168b9f40a0b2fec1b049bc6fc7c1ecfd
SHA256 779fd21a8bbb421300f680261be23bbdf61e9312ec186057d1815b7956a5a69c
MD5 9014b1461ffd3da9a80d186febd644c2
SHA1 0d411526b1778cd1a8a3ab8f03f4de9245c44d0e
SHA512 5a8185b811ae7c40192d591f1d695bda4286e4b57366662ff73bdf37399ec4d5303012119a31688f0529b38b7945b1a72bfe4d2076df856df739b4b6b8c2257e
SSDEEP 49152:dA3J5T7jes9IEQ1W0cx8xaTu5TslsWv1ucXG/4VFgSR1D4uJXG289:dQ37aREQ1W0vkskJen
TLSH
T113C58D217746CA37D95D01B06A2DAE6F545CB5E50BA04CC3F3D82F6E69B08C31A32E5B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

2f:2d:e8:b3:55:4d:90:4e:82:6b:31:d3:92:b0:68:cd:b2:9a:e6:09:d6:ee:39:e0:7e:32:e8:5f:34:3d:39:f7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 4, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

6c:c3:7e:5c:84:4b:c5:87:e9:80:29:b1:cc:49:49:d6:b3:82:86:9c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 4, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

1271715

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentThreadId FreeLibrary ExpandEnvironmentStringsW GlobalMemoryStatusEx GetACP SetEvent WaitForMultipleObjects LoadLibraryW GetFileSize DeleteFileW SetEndOfFile SetFilePointer WriteFile GetTickCount InterlockedExchangeAdd SetLastError InterlockedExchange GetPrivateProfileStringW GetEnvironmentVariableW Sleep LocalFree GetCommandLineW SetErrorMode GetModuleFileNameW ReadFile lstrcatW GetFileAttributesW FindClose lstrlenW FindFirstFileW WaitForSingleObject GetCurrentProcessId CloseHandle CreateFileW GetSystemInfo DeleteCriticalSection DecodePointer RaiseException GetLastError InitializeCriticalSectionAndSpinCount WriteConsoleW SetFilePointerEx GetConsoleMode lstrcpyW WideCharToMultiByte GlobalFree GetConsoleCP FlushFileBuffers SetStdHandle HeapSize SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage GlobalAlloc MultiByteToWideChar lstrcpynW GetModuleHandleW GetProcAddress GetVersionExW GetCurrentProcess FindNextFileA FindFirstFileExA GetTimeZoneInformation EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetStringTypeW GetModuleFileNameA ExitProcess FreeLibraryAndExitThread ExitThread TlsFree InterlockedFlushSList RtlUnwind GetFileType GetStdHandle VirtualQuery OpenThread SetThreadContext GetThreadContext HeapReAlloc CreateToolhelp32Snapshot SuspendThread Thread32First Thread32Next InterlockedCompareExchange LoadLibraryExA VirtualFree VirtualAlloc InterlockedPushEntrySList InterlockedPopEntrySList EncodePointer OutputDebugStringW FlushInstructionCache HeapDestroy HeapCreate OutputDebugStringA GetModuleHandleExW VirtualProtect TlsGetValue CreateThread TlsAlloc DisableThreadLibraryCalls GetModuleHandleA TlsSetValue MapViewOfFileEx CreateFileMappingW UnmapViewOfFile QueryPerformanceFrequency FreeResource CreateWaitableTimerW SetWaitableTimer LocalAlloc GlobalUnlock GlobalLock MulDiv InterlockedIncrement InterlockedDecrement SizeofResource lstrcmpW InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter DeviceIoControl GetFileSizeEx GetLogicalDriveStringsW FormatMessageW ReleaseMutex CreateMutexW GetExitCodeProcess CreateProcessW MoveFileW GetTempFileNameW CopyFileW MoveFileExW GetWindowsDirectoryW GetCurrentDirectoryW SetFileAttributesW GetTempPathW RemoveDirectoryW GetFullPathNameW CreateDirectoryW ResetEvent CreateEventW FileTimeToSystemTime QueryDosDeviceW FindNextFileW LoadLibraryExW InitializeCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess ResumeThread SearchPathW GetFileTime SetFileTime LockResource LoadResource FindResourceW lstrcmpiW GetLongPathNameW GetFileAttributesExW HeapFree GetComputerNameExW OpenProcess HeapAlloc GetProcessHeap SwitchToThread

user32

MessageBoxW SetWindowPos OffsetRect CopyRect GetActiveWindow LoadIconW CharPrevW CharNextW EndDialog SetTimer SetWindowLongW KillTimer SendMessageW GetPropW RemovePropW GetForegroundWindow SetPropW GetAsyncKeyState GetFocus LoadStringW DestroyAcceleratorTable CreateAcceleratorTableW EnumThreadWindows PostQuitMessage RegisterWindowMessageW GetAncestor GetSysColor GetIconInfo DrawIconEx GetSystemMetrics GetDesktopWindow RegisterClassExW GetClassInfoExW LoadBitmapW LoadImageW MsgWaitForMultipleObjects FillRect UpdateLayeredWindow SetRect PostMessageW GetMessageW CallWindowProcW DispatchMessageW TranslateMessage SetForegroundWindow AttachThreadInput SystemParametersInfoW SetRectEmpty CloseClipboard EmptyClipboard GetClipboardData SetClipboardData IsClipboardFormatAvailable UnionRect PtInRect GetClassLongW GetWindowThreadProcessId GetWindowTextLengthW AdjustWindowRectEx ShowWindowAsync GetWindow GetDC IsWindowVisible MonitorFromWindow SetWindowRgn ShowWindow InvalidateRgn OpenClipboard GetMonitorInfoW IsChild MapWindowPoints GetWindowLongW UnregisterClassW wsprintfW SetCaretPos ToAscii GetCursorPos GetCaretBlinkTime LoadCursorW IsRectEmpty IsWindow GetKeyboardState GetKeyState ReleaseDC IsIconic GetDCEx InvalidateRect GetParent IsZoomed GetClientRect SetCursor GetWindowDC IntersectRect ClientToScreen RedrawWindow CreateWindowExW EnumChildWindows EqualRect GetWindowRect DefWindowProcW DialogBoxParamW SetWindowTextW ReleaseCapture SetCapture TrackMouseEvent ScreenToClient DestroyWindow GetWindowTextW EnableWindow EndPaint BeginPaint GetDlgItem SetParent GetClassNameW SetFocus MoveWindow ValidateRect

gdi32

BitBlt CreatePolygonRgn CreateRectRgnIndirect SetWorldTransform GetStockObject SetGraphicsMode GetDeviceCaps CreateFontIndirectW CreateSolidBrush DeleteObject SetTextColor SelectObject GetRgnBox CreateCompatibleDC CreateCompatibleBitmap DeleteDC GetObjectW EnumFontsW CreateDIBSection PtInRegion CreateRoundRectRgn GetClipBox GetDIBits CreateDCW ExtTextOutW SetViewportOrgEx SetBkColor

advapi32

RegOpenKeyExW RegCloseKey RegQueryInfoKeyW RegDeleteKeyW RegEnumKeyExW RegSetValueExW RegDeleteValueW SystemFunction036 RegCreateKeyExW

shell32

ShellExecuteExW DragFinish DragQueryFileW SHGetFolderPathW CommandLineToArgvW SHBrowseForFolderW SHGetPathFromIDListW ord190 SHGetSpecialFolderPathW ord155

ole32

OleUninitialize StringFromGUID2 CLSIDFromProgID CreateStreamOnHGlobal OleLockRunning OleInitialize CoCreateInstance CoTaskMemRealloc CoGetClassObject CoTaskMemFree CLSIDFromString CoTaskMemAlloc

oleaut32

LoadTypeLi OleCreateFontIndirect DispCallFunc SysStringLen SysAllocStringLen VariantInit VarUI4FromStr SysAllocString LoadRegTypeLi SysFreeString VariantClear

shlwapi

StrToIntA PathFindFileNameW StrDupW PathAppendW ord12

comctl32

InitCommonControlsEx _TrackMouseEvent

msimg32

AlphaBlend

urlmon

CoInternetCreateSecurityManager CoInternetCreateZoneManager

imagehlp

ImageEnumerateCertificates ImageRemoveCertificate

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

imm32

ImmNotifyIME ImmAssociateContextEx ImmGetCompositionStringW ImmSetCompositionWindow ImmReleaseContext ImmGetContext

gdiplus

GdipSetLineTransform GdipSetTextureTransform GdipCreateRegionPath GdipAddPathLineI GdipSetCompositingMode GdipCreateHBITMAPFromBitmap GdiplusStartup GdipGetPropertyItemSize GdipGetImageWidth GdipImageGetFrameCount GdipImageGetFrameDimensionsList GdipBitmapLockBits GdipImageSelectActiveFrame GdipFree GdipDisposeImage GdipAlloc GdipCreateBitmapFromStream GdipGetPropertyItem GdipBitmapUnlockBits GdipCloneImage GdipImageGetFrameDimensionsCount GdipGetImageHeight GdipCreateBitmapFromScan0 GdipCreateBitmapFromFile GdipCloneBitmapAreaI GdipGetImagePixelFormat GdipSetStringFormatFlags GdipCloneRegion GdipGetFamilyName GdipDeleteMatrix GdipDrawImageRectRectI GdipSetStringFormatAlign GdipCreatePen1 GdipDeletePen GdipTranslateWorldTransform GdipGetFontSize GdipDeleteFont GdipDeleteStringFormat GdipDeleteGraphics ord1 GdipFillRectangleI GdipGetImageGraphicsContext GdipDeleteRegion GdipMeasureString GdipCloneBrush GdipRestoreGraphics GdipRotateWorldTransform GdipStringFormatGetGenericTypographic GdipGetCellAscent GdipSetTextRenderingHint GdipCloneStringFormat GdipGetMatrixElements GdipGetTextureTransform GdipCreateTexture GdipBeginContainer2 GdipFillEllipse GdipCreateFromHDC GdipGetClipBoundsI GdipSetImageAttributesWrapMode GdipDrawString GdipDrawPath GdipSetClipRegion GdipCreateImageAttributes GdipDrawArcI GdipGetSmoothingMode GdipClosePathFigure GdipSetClipRectI GdipScaleWorldTransform GdipSetPixelOffsetMode GdipDrawRectangle GdipDrawLine GdipSetPenDashStyle GdipGraphicsClear GdipMultiplyWorldTransform GdipGetPathWorldBounds GdipFillPath GdipTransformRegion GdipSetStringFormatTrimming GdipGetFontStyle GdipCreateSolidFill GdipCombineRegionPath GdipAddPathEllipseI GdipGetBrushType GdipCombineRegionRegion GdipAddPathRectangleI GdipCloneBitmapArea GdipGetCellDescent GdipSetInterpolationMode GdipSetLinePresetBlend GdipCreateFont GdipSetStringFormatLineAlign GdipCreatePath GdipEndContainer GdipSetSmoothingMode GdipCreateMatrix GdipAddPathBezierI GdipGetStringFormatAlign GdipDeletePath GdipDisposeImageAttributes GdipCreateMatrix2 GdipDeleteBrush GdipGetLineSpacing GdipSetLineWrapMode GdipCreateLineBrushI GdipDrawImageRectRect GdipSaveGraphics GdipCreateFontFamilyFromName GdipGetEmHeight GdipGetStringFormatLineAlign GdipAddPathString GdipGetTextRenderingHint GdipGetFamily GdipSetCompositingQuality GdipAddPathArcI GdipSetImageAttributesColorMatrix GdipGetLineTransform GdipDeleteFontFamily GdipGetInterpolationMode

winmm

timeGetTime

psapi

GetMappedFileNameW

$PLUGINSDIR/System.dll

IMPHASH 4f33ea844b96a31c8f4690530ba63854
SHA256 e4e216b61f8c6b73e9c49024fc0a41b75edca4da59021c0fdcb2a3a3ba609540
MD5 1637d6d2b88b6dc86f26810ad4bbe99c
SHA1 6e175dea88d613e27a6d0b7f4987f0f814c64373
SHA512 1c6353247346060f42c88c6e648d9a05b800acdc4964660ea95c610fd45503132595c953984f02d3e8b4cb5a7a332821399c55caa0370747b5a24b7729ccaf5c
SSDEEP 192:r8lcBiSt3+u6sDbDoEVhF4ZZOLnvUkZR8epSPv0ygMzT8A:XiUmsf8ahF4Inv7ZR8qsAE8A
TLSH
T11A423A427B619EF2FA65463215677F174B3CEE0807E846AB8FD79880E4A11D7103ABD3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

6768

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/libcurl_x86.dll

IMPHASH 64d8089c328d441f097db6a50d840bc2
SHA256 635f988beb849c6510f54f681387bf810c2266bd27834c5a9c160cbfe6df44d4
MD5 a26e75c0407c87786eea42febdb32532
SHA1 27e52fdca023cb8f031cd55ac37965d93f7f7da7
SHA512 fdd9760442579ad2a3df4f31464f9e66bc19a4390fa1c81afb516cce817097b5324024f712d9c1bf1a11ad30324f5a8aa83c72a732e1197e8804ab806d3859e6
SSDEEP 49152:nGUR9r6hl8IXBPZ68L20v/SU8Y7NriOPquwgtJIpT:nGUR9r6b8IbBLjv/SUp7NriSg
TLSH
T1F0A5AE02FB8185B2E6DB427862FA677F8E3A55205328C9D3C79138749D201D2773E79E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

e2:4a:00:44:60:0c:ad:d4:00:29:36:d8:9c:d0:cf:f5:f9:10:04:90:56:4a:4e:3e:db:e4:d1:67:0b:12:3b:45

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Aug 26, 2021

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

77:59:7e:f8:fc:5f:0d:2f:b5:62:1d:bf:3b:0f:de:14:9b:43:3f:64

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Aug 26, 2021

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

06:ea:0d:de:d5:5e:c1:e1:a2:9f:c5:fb:5d:ab:4f:b2

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2020 - May 18, 2023

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

05:aa:43:30:0d:17:67:ac:12:49:43:54:21:65:bb:9e

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2020 - May 18, 2023

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

0

Major OS version

6

Entry point

1403272

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\dev\lib.vs2017\vendor\depends\curl\out\bin\Win32\release_static\pdb\libcurl_x86.pdb

ws2_32

closesocket getpeername getsockname getsockopt htons ntohs recv setsockopt socket WSASetLastError WSAIoctl getaddrinfo WSAGetLastError freeaddrinfo gethostname accept listen ioctlsocket __WSAFDIsSet select send WSAStartup WSACleanup recvfrom sendto gethostbyname bind connect shutdown htonl ntohl getservbyname

wldap32

ord145 ord301 ord147 ord133 ord79 ord142 ord167 ord127 ord27 ord26 ord118 ord41 ord208 ord216 ord14 ord46 ord219

crypt32

CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertGetCertificateContextProperty CertOpenStore

kernel32

GetCurrentDirectoryW SetCurrentDirectoryW HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW HeapFree HeapAlloc GetACP GetStringTypeW DecodePointer GetCurrentThread WaitForSingleObjectEx OutputDebugStringW OutputDebugStringA HeapSize WriteConsoleW GetProcessHeap SetEnvironmentVariableW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SleepEx MultiByteToWideChar WideCharToMultiByte WaitForSingleObject CloseHandle ExpandEnvironmentStringsA Sleep GetLastError SetLastError FormatMessageA VerSetConditionMask FreeLibrary GetProcAddress LoadLibraryW GetModuleHandleW GetSystemDirectoryW QueryPerformanceFrequency VerifyVersionInfoW WaitForMultipleObjects GetFileType GetStdHandle ReadFile PeekNamedPipe GetTickCount QueryPerformanceCounter FlushConsoleInputBuffer WriteFile GetCurrentThreadId GetModuleHandleA GetCurrentProcessId LoadLibraryA GlobalMemoryStatus GetSystemTime SystemTimeToFileTime GetConsoleCP ReadConsoleW GetModuleFileNameW GetModuleFileNameA ExitProcess SetConsoleMode ReadConsoleInputA PeekConsoleInputA SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA FindFirstFileA GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindNextFileA FindFirstFileExW FindFirstFileExA FindClose GetTimeZoneInformation SetEndOfFile SetFileAttributesW GetFileAttributesExW FlushFileBuffers GetNumberOfConsoleInputEvents SetStdHandle GetFullPathNameA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW InterlockedPushEntrySList InterlockedFlushSList RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException CreateThread ExitThread ResumeThread FreeLibraryAndExitThread GetModuleHandleExW CreateFileW GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SetFilePointerEx SetConsoleCtrlHandler GetConsoleMode GetFullPathNameW

user32

GetDC GetDesktopWindow MessageBoxA GetUserObjectInformationW GetProcessWindowStation ReleaseDC

gdi32

GetDeviceCaps GetDIBits GetObjectA DeleteObject CreateCompatibleBitmap

advapi32

RegisterEventSourceA DeregisterEventSource CryptEnumProvidersA CryptSignHashA CryptDestroyHash CryptCreateHash CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey CryptReleaseContext CryptAcquireContextA ReportEventA

curl_easy_cleanup curl_easy_duphandle curl_easy_escape curl_easy_getinfo curl_easy_init curl_easy_pause curl_easy_perform curl_easy_recv curl_easy_reset curl_easy_send curl_easy_setopt curl_easy_strerror curl_easy_unescape curl_easy_upkeep curl_escape curl_formadd curl_formfree curl_formget curl_free curl_getdate curl_getenv curl_global_cleanup curl_global_init curl_global_init_mem curl_global_sslset curl_maprintf curl_mfprintf curl_mime_addpart curl_mime_data curl_mime_data_cb curl_mime_encoder curl_mime_filedata curl_mime_filename curl_mime_free curl_mime_headers curl_mime_init curl_mime_name curl_mime_subparts curl_mime_type curl_mprintf curl_msnprintf curl_msprintf curl_multi_add_handle curl_multi_assign curl_multi_cleanup curl_multi_fdset curl_multi_info_read curl_multi_init curl_multi_perform curl_multi_remove_handle curl_multi_setopt curl_multi_socket curl_multi_socket_action curl_multi_socket_all curl_multi_strerror curl_multi_timeout curl_multi_wait curl_mvaprintf curl_mvfprintf curl_mvprintf curl_mvsnprintf curl_mvsprintf curl_pushheader_byname curl_pushheader_bynum curl_share_cleanup curl_share_init curl_share_setopt curl_share_strerror curl_slist_append curl_slist_free_all curl_strequal curl_strnequal curl_unescape curl_url curl_url_cleanup curl_url_dup curl_url_get curl_url_set curl_version curl_version_info

$PROGRAMFILES64/2345Soft/2345Preview/Application/$R1/libcurl_x86.dll

IMPHASH 64d8089c328d441f097db6a50d840bc2
SHA256 635f988beb849c6510f54f681387bf810c2266bd27834c5a9c160cbfe6df44d4
MD5 a26e75c0407c87786eea42febdb32532
SHA1 27e52fdca023cb8f031cd55ac37965d93f7f7da7
SHA512 fdd9760442579ad2a3df4f31464f9e66bc19a4390fa1c81afb516cce817097b5324024f712d9c1bf1a11ad30324f5a8aa83c72a732e1197e8804ab806d3859e6
SSDEEP 49152:nGUR9r6hl8IXBPZ68L20v/SU8Y7NriOPquwgtJIpT:nGUR9r6b8IbBLjv/SUp7NriSg
TLSH
T1F0A5AE02FB8185B2E6DB427862FA677F8E3A55205328C9D3C79138749D201D2773E79E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

e2:4a:00:44:60:0c:ad:d4:00:29:36:d8:9c:d0:cf:f5:f9:10:04:90:56:4a:4e:3e:db:e4:d1:67:0b:12:3b:45

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Aug 26, 2021

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

77:59:7e:f8:fc:5f:0d:2f:b5:62:1d:bf:3b:0f:de:14:9b:43:3f:64

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Aug 26, 2021

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

06:ea:0d:de:d5:5e:c1:e1:a2:9f:c5:fb:5d:ab:4f:b2

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2020 - May 18, 2023

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

05:aa:43:30:0d:17:67:ac:12:49:43:54:21:65:bb:9e

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2020 - May 18, 2023

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

0

Major OS version

6

Entry point

1403272

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\dev\lib.vs2017\vendor\depends\curl\out\bin\Win32\release_static\pdb\libcurl_x86.pdb

ws2_32

closesocket getpeername getsockname getsockopt htons ntohs recv setsockopt socket WSASetLastError WSAIoctl getaddrinfo WSAGetLastError freeaddrinfo gethostname accept listen ioctlsocket __WSAFDIsSet select send WSAStartup WSACleanup recvfrom sendto gethostbyname bind connect shutdown htonl ntohl getservbyname

wldap32

ord145 ord301 ord147 ord133 ord79 ord142 ord167 ord127 ord27 ord26 ord118 ord41 ord208 ord216 ord14 ord46 ord219

crypt32

CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertGetCertificateContextProperty CertOpenStore

kernel32

GetCurrentDirectoryW SetCurrentDirectoryW HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW HeapFree HeapAlloc GetACP GetStringTypeW DecodePointer GetCurrentThread WaitForSingleObjectEx OutputDebugStringW OutputDebugStringA HeapSize WriteConsoleW GetProcessHeap SetEnvironmentVariableW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SleepEx MultiByteToWideChar WideCharToMultiByte WaitForSingleObject CloseHandle ExpandEnvironmentStringsA Sleep GetLastError SetLastError FormatMessageA VerSetConditionMask FreeLibrary GetProcAddress LoadLibraryW GetModuleHandleW GetSystemDirectoryW QueryPerformanceFrequency VerifyVersionInfoW WaitForMultipleObjects GetFileType GetStdHandle ReadFile PeekNamedPipe GetTickCount QueryPerformanceCounter FlushConsoleInputBuffer WriteFile GetCurrentThreadId GetModuleHandleA GetCurrentProcessId LoadLibraryA GlobalMemoryStatus GetSystemTime SystemTimeToFileTime GetConsoleCP ReadConsoleW GetModuleFileNameW GetModuleFileNameA ExitProcess SetConsoleMode ReadConsoleInputA PeekConsoleInputA SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA FindFirstFileA GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindNextFileA FindFirstFileExW FindFirstFileExA FindClose GetTimeZoneInformation SetEndOfFile SetFileAttributesW GetFileAttributesExW FlushFileBuffers GetNumberOfConsoleInputEvents SetStdHandle GetFullPathNameA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW InterlockedPushEntrySList InterlockedFlushSList RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException CreateThread ExitThread ResumeThread FreeLibraryAndExitThread GetModuleHandleExW CreateFileW GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SetFilePointerEx SetConsoleCtrlHandler GetConsoleMode GetFullPathNameW

user32

GetDC GetDesktopWindow MessageBoxA GetUserObjectInformationW GetProcessWindowStation ReleaseDC

gdi32

GetDeviceCaps GetDIBits GetObjectA DeleteObject CreateCompatibleBitmap

advapi32

RegisterEventSourceA DeregisterEventSource CryptEnumProvidersA CryptSignHashA CryptDestroyHash CryptCreateHash CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey CryptReleaseContext CryptAcquireContextA ReportEventA

curl_easy_cleanup curl_easy_duphandle curl_easy_escape curl_easy_getinfo curl_easy_init curl_easy_pause curl_easy_perform curl_easy_recv curl_easy_reset curl_easy_send curl_easy_setopt curl_easy_strerror curl_easy_unescape curl_easy_upkeep curl_escape curl_formadd curl_formfree curl_formget curl_free curl_getdate curl_getenv curl_global_cleanup curl_global_init curl_global_init_mem curl_global_sslset curl_maprintf curl_mfprintf curl_mime_addpart curl_mime_data curl_mime_data_cb curl_mime_encoder curl_mime_filedata curl_mime_filename curl_mime_free curl_mime_headers curl_mime_init curl_mime_name curl_mime_subparts curl_mime_type curl_mprintf curl_msnprintf curl_msprintf curl_multi_add_handle curl_multi_assign curl_multi_cleanup curl_multi_fdset curl_multi_info_read curl_multi_init curl_multi_perform curl_multi_remove_handle curl_multi_setopt curl_multi_socket curl_multi_socket_action curl_multi_socket_all curl_multi_strerror curl_multi_timeout curl_multi_wait curl_mvaprintf curl_mvfprintf curl_mvprintf curl_mvsnprintf curl_mvsprintf curl_pushheader_byname curl_pushheader_bynum curl_share_cleanup curl_share_init curl_share_setopt curl_share_strerror curl_slist_append curl_slist_free_all curl_strequal curl_strnequal curl_unescape curl_url curl_url_cleanup curl_url_dup curl_url_get curl_url_set curl_version curl_version_info

$_49_/2345PicDumper.exe

IMPHASH cdd69eb14296c3d1fe9abd5992150b76
SHA256 501edef3bd9b7d7bd3d4fa591d9db292e32e982add36667ed155df23c038cbc3
MD5 7930dcd8c89a72a464e52eb8708755c5
SHA1 6b40e8b91b2b359430dfc7c1d2079eca6856b4bd
SHA512 1e405b7e0b86dce688e3c9f1418b31f23fc4b1660c80581922b40d9bbf3434099f10ab9a248e2202c41d11e8895c923b5180fbf1982a5aef4988b72765ceed93
SSDEEP 12288:oczY9Jn212dNyR0RaaSOmu8yz2Yh+adxE3ObrWKRGmOHSdZN65G6eT3XnTs:of9seN20RaaD+adS3swSdZNbBT3XnTs
TLSH
T127E47D207992C57BD67201B119ACCA6B006ABE250F6558DBB3C81F3E5A781D21F32F77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

00:a6:e5:02:74:eb:26:7b:f5:e5:74:03:84:f0:40:98:6a:88:42:32:6c:ec:cd:0f:b4:3d:80:45:eb:f9:4a:98

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

1b:d6:e1:9a:77:69:61:c6:02:f2:28:c1:73:4f:9b:b3:d0:88:e4:a6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

352334

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\dbgsym\2345PicDumper.pdb

kernel32

GetFileAttributesExW GetACP MultiByteToWideChar WideCharToMultiByte GetProcAddress HeapFree HeapAlloc GetProcessHeap CreateMutexW WaitForSingleObject ReleaseMutex CloseHandle OpenMutexW ReadFile WriteFile SetFilePointer SetEndOfFile GetFileSize CreateDirectoryW lstrlenW RemoveDirectoryW GetFileAttributesW SetFileAttributesW DeleteFileW MoveFileExW GetLastError MoveFileW FormatMessageW LocalFree LoadLibraryW FreeLibrary GetCurrentThreadId GetVersionExW OpenProcess EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection LockResource LoadResource FindResourceW GetModuleHandleW lstrcmpiW GetCurrentProcess GetModuleFileNameW InterlockedExchange SetLastError InterlockedExchangeAdd GetTickCount GetCurrentProcessId CreateFileW GetTempFileNameW InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsFree GetSystemTimeAsFileTime EncodePointer DecodePointer CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo LoadLibraryExW ExpandEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter InitializeSListHead IsDebuggerPresent GetStartupInfoW UnmapViewOfFile DuplicateHandle GetFileInformationByHandle FileTimeToSystemTime GetLocalTime SystemTimeToFileTime GetFileType GetSystemTime CreateFileMappingW MapViewOfFile FileTimeToDosDateTime RtlUnwind RaiseException GetStdHandle ExitProcess GetModuleHandleExW FlushFileBuffers GetConsoleCP GetConsoleMode IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW SetFilePointerEx GetTimeZoneInformation HeapReAlloc OutputDebugStringW FindFirstFileExW IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetStdHandle WriteConsoleW HeapSize LoadLibraryA lstrcatW lstrcpyW GetFileSizeEx FindClose FindNextFileW FindFirstFileW TlsSetValue SetErrorMode

imm32

ImmDisableIME

advapi32

GetUserNameW

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoTaskMemFree

generic

count=16, id=241, version=40116,

count=165, id=243, version=40116,

count=30, id=242, version=40116,

count=2, id=199, version=41118,

count=24, id=259, version=26706,

count=70, id=261, version=26706,

count=35, id=260, version=26706,

count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=232, id=1, productName=Unmarked objects,

count=17, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, productName=Unmarked objects (old),

count=1, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=134, id=265, version=27026,

count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,

count=2, id=151,

count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,

$_49_/2345PicHelper.exe

IMPHASH fe21b64d4798748ccfbfed945b398501
SHA256 74ee755c1c6451f30cc9b61b1120b45b07e6c45fcaecf9b3382d7fb04d900539
MD5 a68ee2ba1263c9712a86edacd4de2d18
SHA1 96757914d9b0fb36a753f2d042edbbdbf8224ad0
SHA512 fbda9ab5b83954b39e8e6d1f749d91ca598e23c60057235f6bec3384da2f5bd604582a9074131b4a682afc37566420ba37b1fc6262a3bf7bdd2d292d8e26560b
SSDEEP 6144:Iw9t1981PL7yA0I8vN7gMCtJrTi/6MYWl9eDZ05fFHYs/AOckTBXEfMEqUdGU:XfaD7T0tBqtJ/i/6K9eUtHYSmkTBEUOn
TLSH
T178D40720759AC23AD67195F00A7E8E5A90ADBD2C5F710DCBA7C00F3A5474ED31A36E72
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

59:db:6e:02:a0:d6:e2:ae:82:25:2c:78:3b:76:79:f5:75:39:a9:37:c3:41:ec:64:bc:cd:5a:4c:5c:c1:1e:09

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

6b:54:20:1a:0a:9a:23:27:2f:8c:88:f2:2d:e0:9e:d8:fe:49:4c:c3

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

322758

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\dbgsym\2345PicHelper.pdb

kernel32

lstrlenW GetFileAttributesW SetFileAttributesW DeleteFileW MoveFileExW GetTempFileNameW MoveFileW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection DecodePointer RaiseException InitializeCriticalSectionAndSpinCount GetTickCount OpenProcess GetCurrentProcess GetCurrentProcessId TerminateProcess GetFullPathNameW Sleep MultiByteToWideChar FileTimeToSystemTime LocalFree GlobalAlloc GlobalFree SystemTimeToFileTime IsBadStringPtrW CreateDirectoryW GetFileSize CloseHandle SetEndOfFile SetFilePointer WriteFile ReadFile FindClose FindNextFileW GetLastError CreateFileW LoadLibraryExW FreeLibrary GetModuleHandleW GetProcAddress LoadLibraryW SetErrorMode WaitForSingleObject GetModuleFileNameW LocalAlloc GetVersionExW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW OutputDebugStringW RtlUnwind SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetStdHandle WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP GetStringTypeW HeapFree HeapAlloc GetFileType LCMapStringW FindFirstFileExW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap HeapSize HeapReAlloc GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers WriteConsoleW LockResource LoadResource FindResourceW lstrcmpiW GetEnvironmentVariableW CreateMutexW ReleaseMutex InterlockedExchangeAdd

advapi32

RegQueryValueExW GetUserNameW CloseServiceHandle OpenSCManagerW OpenServiceW QueryServiceStatus BuildExplicitAccessWithNameW SetNamedSecurityInfoW GetNamedSecurityInfoW SetEntriesInAclW RegCreateKeyW RegSetValueExW RegCloseKey RegOpenKeyExW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegOpenCurrentUser

shell32

SHChangeNotify SHGetPathFromIDListW SHGetSpecialFolderLocation

ole32

CoTaskMemFree CoSetProxyBlanket CoInitializeEx CoInitializeSecurity CoUninitialize CoCreateInstance

oleaut32

SysAllocString VariantInit VariantClear VariantChangeType

imm32

ImmDisableIME

shlwapi

SHDeleteKeyW

wtsapi32

WTSQuerySessionInformationW

$_49_/2345PicLoader.exe

IMPHASH 0baf96cba2f94e1cae479db2cfcabc6c
SHA256 1dc4dcd53061601a420d72cfdfabe923dc218216ab46840dabf0cd2b532cb5ea
MD5 fb73ccb17f7e2712e73cc3b6ffbb9bce
SHA1 a00efa0ee76a83b66b2527c077526963d4c67ecd
SHA512 5bedb7324295268d3a1fd5bbdf027b302db6ed03a45cd893c239e111f2b5f881d36097c1446709cb33a67eba268ca8be111d3b1208a626208116234d8bb5d1b4
SSDEEP 24576:QyReKzIOkFgKdMTvpBXnf9Ui1p/Farw4sjRHTzksvf3mJEblTBcBnJnRdnwAQ:QWzIhndMXf9Ui//FcwFX3mJITeB5RdI
TLSH
T15C957D21B342C32BE6A641B1166CCF6F4059B9311BA498C7F3C45F2E69E0DD39632E67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

f2:61:d7:fd:83:c8:bb:c6:0c:18:09:8a:d3:ce:3e:d0:6a:43:44:d3:e7:58:90:90:c4:68:39:e8:c6:b1:fb:76

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

e1:64:b7:a9:13:5a:0c:4f:a2:bb:df:fd:c7:7f:f5:33:a1:5a:4a:0f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

1198932

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\dbgsym\2345PicLoader.pdb

kernel32

InitializeCriticalSection FindFirstFileW FindNextFileW FindClose GetLongPathNameW CreateFileW GetFileAttributesExW HeapFree GlobalAlloc GlobalFree HeapAlloc GetProcessHeap GetLogicalDriveStringsW ReadFile WriteFile SetFileTime SetFilePointer SetEndOfFile GetFileSize GetFileTime FormatMessageW lstrlenW lstrcatW lstrcpyW DeleteFileW GetFileSizeEx OpenEventW CreateEventW SetEvent ResetEvent InterlockedExchangeAdd CreateDirectoryW GetFullPathNameW RemoveDirectoryW GetTempPathW SetFileAttributesW GetCurrentDirectoryW GetWindowsDirectoryW MoveFileExW CopyFileW GetTempFileNameW MoveFileW GetExitCodeProcess SystemTimeToFileTime GlobalMemoryStatusEx GlobalLock GlobalUnlock SizeofResource OutputDebugStringW TerminateProcess InterlockedDecrement DuplicateHandle LoadLibraryExA VirtualFree VirtualAlloc FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter LoadLibraryExW GetCPInfo CreateProcessW GetCurrentProcessId LocalFree WaitForMultipleObjects LoadLibraryA ExpandEnvironmentStringsW WideCharToMultiByte LocalAlloc MultiByteToWideChar GetACP lstrcmpiW FindResourceW LoadResource GetSystemInfo LockResource GetVersionExW GetFileAttributesW SearchPathW MapViewOfFile CreateFileMappingW UnmapViewOfFile OpenFileMappingW GetModuleHandleW OpenProcess GetModuleFileNameW GetCurrentProcess QueryDosDeviceW OpenMutexW CloseHandle Sleep IsBadStringPtrW DeviceIoControl ResumeThread ReleaseMutex WaitForSingleObject CreateMutexW GetTickCount DeleteCriticalSection DecodePointer RaiseException GetLastError GetCurrentThreadId SetErrorMode LeaveCriticalSection InitializeCriticalSectionAndSpinCount EnterCriticalSection SetLastError MulDiv FreeLibrary GetProcAddress LoadLibraryW GetPrivateProfileStringW WritePrivateProfileStringW ExitThread GetStringTypeW GetLocaleInfoW LCMapStringW CompareStringW EncodePointer GetEnvironmentVariableW WriteConsoleW HeapSize SetStdHandle GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc SwitchToThread QueryPerformanceCounter FreeLibraryAndExitThread InterlockedExchange CreateThread SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindFirstFileExW HeapReAlloc FlushFileBuffers GetConsoleCP SetFilePointerEx ReadConsoleW GetConsoleMode EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetStdHandle GetModuleHandleExW ExitProcess GetTimeZoneInformation RtlUnwind DosDateTimeToFileTime GetFileType FileTimeToSystemTime

user32

BeginPaint ReleaseDC GetParent SetWindowLongW LoadCursorW IsRectEmpty IsWindowEnabled CopyRect IsWindow ShowWindow RegisterClassExW CreateWindowExW SetWindowPos IsWindowVisible GetDC DestroyWindow GetWindowRect GetWindow DefWindowProcW GetWindowLongW DialogBoxParamW GetClassNameW EnumWindows GetActiveWindow UnregisterClassW SendMessageTimeoutW PostMessageW SendMessageW MoveWindow EndDialog GetDlgItem SetTimer SetWindowRgn InvalidateRect GetSystemMetrics GetForegroundWindow WindowFromPoint GetDesktopWindow GetWindowThreadProcessId SystemParametersInfoW OffsetRect PtInRect GetClientRect SetWindowTextW MonitorFromWindow GetMonitorInfoW EndPaint

gdi32

DeleteObject DeleteDC CreateCompatibleDC SelectObject CreateRoundRectRgn BitBlt CreateCompatibleBitmap SetViewportOrgEx

advapi32

RegDeleteKeyW RegCreateKeyW RegSetValueExW GetUserNameW RegCloseKey SetNamedSecurityInfoW GetNamedSecurityInfoW SetEntriesInAclW LookupAccountNameW GetFileSecurityW GetSecurityDescriptorDacl GetAce GetAclInformation EqualSid RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegEnumKeyExW RegDeleteValueW RegOpenCurrentUser QueryServiceStatus OpenServiceW OpenSCManagerW CloseServiceHandle BuildExplicitAccessWithNameW

shell32

SHGetFolderPathW SHChangeNotify SHGetDesktopFolder ShellExecuteExW SHGetSpecialFolderPathW SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoSetProxyBlanket CoInitializeEx CoTaskMemFree CreateStreamOnHGlobal CoUninitialize CoInitialize CoInitializeSecurity CoCreateInstance

oleaut32

VariantClear VariantInit SysAllocString SysFreeString VariantChangeType

shlwapi

SHDeleteKeyW

imm32

ImmDisableIME

gdiplus

GdipMeasureString GdipDrawImageRectRectI GdipCreateBitmapFromScan0 GdipGetImageWidth GdipSetCompositingMode GdipDeleteGraphics GdipFillRectangleI GdipGetImageGraphicsContext GdipCloneBrush GdipFree GdipCreateHBITMAPFromBitmap GdipCreateSolidFill GdipDisposeImage GdipAlloc GdipDeleteBrush GdipCloneImage GdipGetImageHeight GdipCreateFromHDC GdipDrawImageRectI GdiplusStartup GdiplusShutdown GdipCreateBitmapFromStream GdipSetTextRenderingHint GdipCreateFontFromLogfontW GdipDrawString GdipCreateStringFormat GdipDeleteStringFormat GdipSetStringFormatFlags GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdipSetStringFormatTrimming GdipDeleteFont

wtsapi32

WTSQuerySessionInformationW

generic

count=23, id=241, version=40116,

count=167, id=243, version=40116,

count=32, id=242, version=40116,

count=2, id=199, version=41118,

count=25, id=259, version=26706,

count=75, id=261, version=26706,

count=36, id=260, version=26706,

count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=398, id=1, productName=Unmarked objects,

count=29, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=72, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, productName=Unmarked objects (old),

count=1, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=155, id=265, version=27026,

count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,

count=2, id=151,

count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,

$_49_/2345PicTool.exe

IMPHASH 687b6b929af51c62606e06ea257fad14
SHA256 2e1494a93ee1f1ab4ef6cddac5f6abe44011c4cb74f998f57d6eb4b7570236d6
MD5 a5cc9a347e71f755cc589664d9e53267
SHA1 f37e79178db50d3e18b11885eb2fd8556d0fb4c8
SHA512 a8210aeacdc78b7a2211122fa288e0fd7dbaffe41e6d6fc5afb319456ebe0037e323e35977e349da1bde1155a7265fe267ca4621149d8f9fe4dce8012a3f697d
SSDEEP 12288:zN93kklFpoiDCyEuSwgqnMxeG/Xw0Zh6eU6JvKqxYZN2D3vyaWuTcsFb0+J:J93DroiCy3nSwe6pqxYeVpTcsfJ
TLSH
T130155B217646C53BD57205B05A2CCA7A506DBE250FA18CCBB3C81F3E5AB09D35A36E37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

cf:43:92:3f:b9:09:bb:c9:c5:4d:8e:c3:82:4e:ed:fd:28:35:e0:16:14:61:73:d0:84:07:bb:e4:bd:12:7a:51

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

37:70:b8:bb:d0:9f:3e:62:81:25:b2:bb:1d:a5:db:87:9b:ce:32:d6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

502529

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\dbgsym\2345PicTool.pdb

imm32

ImmDisableIME

kernel32

LoadLibraryW FreeLibrary EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection FindNextFileW FindClose ReadFile WriteFile SetFileTime SetFilePointer SetEndOfFile GetFileSize CreateDirectoryW GetFullPathNameW lstrlenW RemoveDirectoryW GetTempPathW SetFileAttributesW DeleteFileW GetWindowsDirectoryW GetTempFileNameW MoveFileW HeapFree GetCurrentThreadId OpenProcess HeapAlloc LocalFree GetProcessHeap FormatMessageW ExpandEnvironmentStringsW SearchPathW InitializeCriticalSectionAndSpinCount RaiseException DecodePointer CreateEventW SetEvent ResetEvent InterlockedExchangeAdd GetCurrentProcess lstrcatW lstrcpyW GetFileSizeEx GetACP MultiByteToWideChar WideCharToMultiByte GetCurrentProcessId CreateProcessW GetExitCodeProcess InterlockedExchange GetPrivateProfileStringW TerminateProcess WritePrivateProfileStringW SwitchToThread DeviceIoControl CloseHandle Sleep ReleaseMutex WaitForSingleObject CreateMutexW GetFileAttributesExW GetLastError CreateFileW GetLongPathNameW FindFirstFileW lstrcmpiW GetModuleHandleW GetProcAddress FindResourceW LoadResource LockResource GetVersionExW GetTickCount CopyFileW MoveFileExW GetFileAttributesW SetErrorMode GetModuleFileNameW LoadLibraryA WriteConsoleW FlushFileBuffers SetFilePointerEx LoadLibraryExW UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead OutputDebugStringW GetStdHandle GetEnvironmentVariableW GetFileType RtlUnwind SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW GetStringTypeW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetTimeZoneInformation FindFirstFileExW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetStdHandle HeapSize HeapReAlloc GetConsoleCP GetConsoleMode

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoTaskMemFree

$_49_/2345PicUpdate.exe

IMPHASH de444d90f242c60aed7261d065f4d95a
SHA256 53d20125ba9d72519144f0f290931c1ec76775ab92aa3d4949cb04d73d74b088
MD5 11d728223698b26721219cb654d6c56e
SHA1 df8a71044d79a87b90248883ab4cbe827cdb8661
SHA512 14db8107222e00f04e3899efc0ec3366b26e9eb0e717b58ceb421d8f0afaed0faaccdeb656be31727b6d879020a1cac1afd8ac0ee694b6adc5c211deceea9f68
SSDEEP 24576:VMSTNFUNBZc9kxRYHWr/ErkvBrlrCD8f4j9+V5pTlbedOO5PORwbhTZJ/soL3:3UNBZPxRqWN5tfE+XO52ubhTD/soT
TLSH
T1CB752A217586C337D56111F05A6D9E5A90A87D386FB019CBF3C40F3AA4B0ED36A36E27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

d2:4a:3e:6a:9b:2a:ca:8d:e2:54:4e:3f:29:70:e7:ac:ef:34:bd:6e:b5:51:4f:8a:6e:e0:b8:7e:7d:d7:3b:36

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

89:a5:7a:4b:47:91:53:f3:7d:82:19:e6:c3:de:0f:87:93:f9:10:61

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

1095268

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\dbgsym\2345PicUpdate.pdb

kernel32

Sleep LockResource GlobalAlloc GlobalLock GlobalUnlock GlobalFree LocalFree WaitForSingleObject CloseHandle CopyFileW OpenProcess GlobalMemoryStatusEx GetCurrentProcessId CreateFileW GetTickCount SwitchToThread DeviceIoControl FileTimeToSystemTime GetTimeZoneInformation FreeLibraryAndExitThread ExitThread MultiByteToWideChar WritePrivateProfileStringW GetPrivateProfileStringW FindResourceW GetComputerNameW InterlockedExchange GetFileSizeEx lstrcpyW lstrcatW FormatMessageW MoveFileW GetTempFileNameW GetModuleHandleW GetWindowsDirectoryW GetCurrentDirectoryW DeleteFileW SetFileAttributesW GetTempPathW RemoveDirectoryW lstrlenW GetFullPathNameW CreateDirectoryW InterlockedExchangeAdd ResetEvent SetEvent CreateEventW LoadLibraryA GetComputerNameExW GetEnvironmentVariableW GetFileTime GetFileSize SetEndOfFile SetFileTime GetLogicalDriveStringsW InitializeCriticalSection GetModuleFileNameW LoadLibraryExW lstrcmpiW SizeofResource LoadResource LeaveCriticalSection EnterCriticalSection SetLastError GetCurrentThreadId InterlockedDecrement InterlockedIncrement DeleteCriticalSection DecodePointer RaiseException GetLastError SetErrorMode InitializeCriticalSectionAndSpinCount OutputDebugStringA MulDiv GetSystemInfo QueryDosDeviceW WaitForMultipleObjects GetFileAttributesExW GetLongPathNameW ReleaseMutex CreateMutexW ResumeThread WriteConsoleW FlushFileBuffers SetFilePointerEx GetConsoleMode FreeLibrary GetProcAddress MoveFileExW LoadLibraryW GetConsoleCP GetStringTypeW SetStdHandle CreateThread SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindFirstFileExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW HeapReAlloc HeapSize GetFileType GetACP WriteFile GetStdHandle WideCharToMultiByte GetModuleHandleExW ExitProcess TlsFree ReadFile SetFilePointer GetCurrentProcess GetVersionExW GetFileAttributesW GetExitCodeProcess FindClose CreateProcessW ExpandEnvironmentStringsW FindFirstFileW FindNextFileW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead OutputDebugStringW EncodePointer HeapAlloc HeapFree GetProcessHeap InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache VirtualAlloc VirtualFree LoadLibraryExA RtlUnwind TlsAlloc TlsGetValue TlsSetValue

user32

SetForegroundWindow GetForegroundWindow IsWindowVisible AttachThreadInput GetLastActivePopup GetWindowRect GetWindow DefWindowProcW GetWindowLongW UnregisterClassW GetMessageW TranslateMessage DispatchMessageW PeekMessageW DestroyWindow SetWindowPos CreateWindowExW RegisterClassExW SetWindowLongW LoadCursorW IsRectEmpty IsWindowEnabled CopyRect IsWindow GetDC GetParent ReleaseDC IsIconic EndDialog GetClassInfoExW GetWindowThreadProcessId GetClassNameW SystemParametersInfoW PtInRect OffsetRect SetTimer GetDlgItem DialogBoxParamW GetMonitorInfoW MonitorFromWindow FillRect MapWindowPoints GetClientRect SetWindowTextW InvalidateRect EndPaint BeginPaint CallWindowProcW PostQuitMessage PostMessageW SendMessageW MessageBoxW GetActiveWindow CharNextW ShowWindow

gdi32

SetViewportOrgEx CreateSolidBrush CreateCompatibleBitmap BitBlt SelectObject CreateCompatibleDC DeleteDC DeleteObject

advapi32

GetUserNameW RegCloseKey RegCreateKeyExW RegDeleteKeyW SystemFunction036 RegSetValueExW RegQueryInfoKeyW RegOpenKeyExW RegEnumKeyExW RegDeleteValueW

shell32

ShellExecuteExW SHGetFolderPathW SHGetSpecialFolderPathW SHGetSpecialFolderLocation SHGetPathFromIDListW ShellExecuteW

ole32

CoCreateInstance CoTaskMemRealloc CoTaskMemAlloc CreateStreamOnHGlobal CoTaskMemFree

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

imm32

ImmDisableIME

gdiplus

GdipDrawImageRectRectI GdipCreateBitmapFromScan0 GdipGetImageWidth GdipSetCompositingMode GdipDeleteGraphics GdipFillRectangleI GdipGetImageGraphicsContext GdipCloneBrush GdipFree GdipCreateHBITMAPFromBitmap GdipCreateSolidFill GdipDisposeImage GdipAlloc GdipDeleteBrush GdipCloneImage GdipGetImageHeight GdipCreateFromHDC GdipDrawImageRectI GdipSetTextRenderingHint GdipCreateFontFromLogfontW GdipDeleteFont GdipDrawString GdipCreateStringFormat GdipDeleteStringFormat GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdiplusStartup GdiplusShutdown GdipCreateBitmapFromStream GdipSetStringFormatFlags GdipSetStringFormatTrimming

imagehlp

ImageRemoveCertificate ImageEnumerateCertificates

generic

count=15, id=241, version=40116,

count=153, id=243, version=40116,

count=30, id=242, version=40116,

count=25, id=259, version=26706,

count=70, id=261, version=26706,

count=35, id=260, version=26706,

count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=25, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=324, id=1, productName=Unmarked objects,

count=32, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, productName=Unmarked objects (old),

count=1, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=144, id=265, version=27026,

count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,

count=2, id=151,

count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,

$_49_/2345PicWorker.exe

IMPHASH 14bf0341bad70c04f1d9e0e33bb879ae
SHA256 6acf30362c96ae478bf51b3cbf458ad6d02b569fcc427d1aba40bc0588ca77ee
MD5 77e6b9f41b924a822cd036d26d86ae46
SHA1 7128af9cbb9b14dce60e8a006e2a2715e6a88129
SHA512 3a8bebfc5cb2e38930ad8877ad396bbe83177736c0b536b1347113f789a61d00ca4d03745d9e01773f214866b8c861a03c4793e0c3c4adbee0b0faa50a1f87e6
SSDEEP 24576:+4IlZmPClIbEqtaufDYVnx0VegdSQSiNTIheeg6X:ogAlDUegoQSiNT+j
TLSH
T1A8753B20B646C73BE56201705A2C8EAB941479311B6158D7F3C44F2A29F4DE3AB36F7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

bf:f9:07:8d:7c:7f:32:e6:94:ca:43:dc:e6:d4:00:7a:3b:f4:94:1d:7b:b5:28:b4:cf:66:f2:dd:5d:aa:27:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

b9:1b:8a:86:e3:37:c1:99:ba:fe:e5:b6:8f:4f:9b:4b:f5:50:ad:5b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

975233

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\dbgsym\2345PicWorker.pdb

kernel32

InitializeCriticalSection GetACP WideCharToMultiByte FindFirstFileW FindNextFileW FindClose GetLongPathNameW CreateFileW GetFileAttributesExW HeapFree GetVersionExW OpenProcess GlobalAlloc GlobalFree HeapAlloc LocalFree GetProcessHeap ResetEvent InterlockedExchangeAdd ReadFile WriteFile SetFileTime SetFilePointer SetEndOfFile GetFileSize GetFileTime LoadLibraryW CreateDirectoryW GetFullPathNameW lstrlenW GetTempPathW GetFileAttributesW SetFileAttributesW DeleteFileW GetCurrentDirectoryW GetWindowsDirectoryW MoveFileExW GetTempFileNameW MoveFileW LockResource GetSystemInfo QueryDosDeviceW GetCurrentProcess GetVolumeInformationW GetDiskFreeSpaceW GetLogicalDriveStringsW GetCurrentProcessId SystemTimeToFileTime FileTimeToSystemTime IsBadStringPtrW GlobalLock GlobalUnlock GlobalMemoryStatusEx GetLocalTime GetPrivateProfileStringW WriteConsoleW SetFilePointerEx Sleep GetConsoleCP FlushFileBuffers SetStdHandle SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetTimeZoneInformation HeapReAlloc HeapSize GetFileType GetStdHandle ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread RtlUnwind OutputDebugStringW LoadLibraryExA VirtualFree VirtualAlloc FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList ReleaseMutex CreateMutexW LoadLibraryExW lstrcmpiW InterlockedIncrement FreeLibrary ResumeThread GetModuleHandleW DeleteCriticalSection GetProcAddress DecodePointer FindResourceW LoadResource RaiseException GetLastError MultiByteToWideChar GetCurrentThreadId SetErrorMode LeaveCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW InterlockedDecrement EnterCriticalSection SetLastError SizeofResource GetTickCount CloseHandle SetEvent CreateEventW WaitForSingleObject WaitForMultipleObjects QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter WaitForSingleObjectEx ExpandEnvironmentStringsW CreateProcessW GetExitCodeProcess GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW CompareStringW GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue FindFirstFileExW OpenMutexW TlsAlloc SwitchToThread EncodePointer FormatMessageW GetConsoleMode GetEnvironmentVariableW LoadLibraryA LocalAlloc lstrcatW lstrcpyW GetFileSizeEx DeviceIoControl InterlockedExchange

user32

GetMonitorInfoW MonitorFromWindow CopyRect IsWindow GetClientRect SetWindowTextW EndPaint BeginPaint PtInRect OffsetRect GetWindowThreadProcessId GetParent GetDesktopWindow IsRectEmpty WindowFromPoint InvalidateRect GetForegroundWindow GetSystemMetrics SetTimer GetDlgItem EndDialog SetWindowPos MoveWindow SendMessageW SystemParametersInfoW ReleaseDC GetDC GetWindowLongW DefWindowProcW CallWindowProcW GetActiveWindow PostQuitMessage DialogBoxParamW GetMessageW DestroyWindow CreateWindowExW UnregisterClassW RegisterClassExW ShowWindow DispatchMessageW PeekMessageW CharNextW TranslateMessage LoadCursorW SetWindowLongW GetClassInfoExW PostMessageW

gdi32

SetViewportOrgEx SelectObject DeleteObject CreateCompatibleDC CreateCompatibleBitmap BitBlt DeleteDC

advapi32

RegSetValueExW RegCloseKey RegNotifyChangeKeyValue GetUserNameW RegDeleteValueW BuildExplicitAccessWithNameW SetNamedSecurityInfoW GetNamedSecurityInfoW SetEntriesInAclW RegCreateKeyW QueryServiceStatus OpenServiceW OpenSCManagerW CloseServiceHandle RegQueryValueExW RegOpenCurrentUser RegQueryInfoKeyW RegDeleteKeyW RegCreateKeyExW RegEnumKeyExW RegOpenKeyExW

shell32

SHGetFolderPathW SHGetSpecialFolderPathW SHChangeNotify SHGetPathFromIDListW SHGetSpecialFolderLocation

ole32

CreateStreamOnHGlobal CoSetProxyBlanket CoInitializeSecurity CoInitializeEx CoUninitialize CoTaskMemRealloc CoCreateInstance CoTaskMemAlloc CoTaskMemFree

oleaut32

VarUI4FromStr VariantClear VariantInit SysAllocString VariantChangeType

shlwapi

SHDeleteKeyW

imm32

ImmDisableIME

wtsapi32

WTSQuerySessionInformationW

gdiplus

GdipAlloc GdipDrawImageRectI GdipDrawImageRectRectI GdipGetImageHeight GdipGetImageWidth GdipDeleteGraphics GdipCreateFromHDC GdipSetStringFormatTrimming GdipSetStringFormatLineAlign GdipSetStringFormatAlign GdipSetStringFormatFlags GdipDeleteStringFormat GdipCreateStringFormat GdipDrawString GdipDeleteFont GdipCreateFontFromLogfontW GdipSetTextRenderingHint GdipFree GdipCreateBitmapFromFile GdipCreateBitmapFromStream GdipDisposeImage GdipCloneImage GdipCreateSolidFill GdipDeleteBrush GdipCloneBrush GdiplusShutdown GdiplusStartup

dbghelp

MiniDumpWriteDump

generic

count=16, id=241, version=40116,

count=153, id=243, version=40116,

count=31, id=242, version=40116,

count=26, id=259, version=26706,

count=78, id=261, version=26706,

count=35, id=260, version=26706,

count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=359, id=1, productName=Unmarked objects,

count=33, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=43, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, productName=Unmarked objects (old),

count=1, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=149, id=265, version=27026,

count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,

count=2, id=151,

count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,

$_49_/libcurl_x86.dll

IMPHASH 64d8089c328d441f097db6a50d840bc2
SHA256 635f988beb849c6510f54f681387bf810c2266bd27834c5a9c160cbfe6df44d4
MD5 a26e75c0407c87786eea42febdb32532
SHA1 27e52fdca023cb8f031cd55ac37965d93f7f7da7
SHA512 fdd9760442579ad2a3df4f31464f9e66bc19a4390fa1c81afb516cce817097b5324024f712d9c1bf1a11ad30324f5a8aa83c72a732e1197e8804ab806d3859e6
SSDEEP 49152:nGUR9r6hl8IXBPZ68L20v/SU8Y7NriOPquwgtJIpT:nGUR9r6b8IbBLjv/SUp7NriSg
TLSH
T1F0A5AE02FB8185B2E6DB427862FA677F8E3A55205328C9D3C79138749D201D2773E79E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

e2:4a:00:44:60:0c:ad:d4:00:29:36:d8:9c:d0:cf:f5:f9:10:04:90:56:4a:4e:3e:db:e4:d1:67:0b:12:3b:45

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Aug 26, 2021

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

77:59:7e:f8:fc:5f:0d:2f:b5:62:1d:bf:3b:0f:de:14:9b:43:3f:64

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Aug 26, 2021

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

06:ea:0d:de:d5:5e:c1:e1:a2:9f:c5:fb:5d:ab:4f:b2

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2020 - May 18, 2023

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

05:aa:43:30:0d:17:67:ac:12:49:43:54:21:65:bb:9e

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2020 - May 18, 2023

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

0

Major OS version

6

Entry point

1403272

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\dev\lib.vs2017\vendor\depends\curl\out\bin\Win32\release_static\pdb\libcurl_x86.pdb

ws2_32

closesocket getpeername getsockname getsockopt htons ntohs recv setsockopt socket WSASetLastError WSAIoctl getaddrinfo WSAGetLastError freeaddrinfo gethostname accept listen ioctlsocket __WSAFDIsSet select send WSAStartup WSACleanup recvfrom sendto gethostbyname bind connect shutdown htonl ntohl getservbyname

wldap32

ord145 ord301 ord147 ord133 ord79 ord142 ord167 ord127 ord27 ord26 ord118 ord41 ord208 ord216 ord14 ord46 ord219

crypt32

CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertGetCertificateContextProperty CertOpenStore

kernel32

GetCurrentDirectoryW SetCurrentDirectoryW HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW HeapFree HeapAlloc GetACP GetStringTypeW DecodePointer GetCurrentThread WaitForSingleObjectEx OutputDebugStringW OutputDebugStringA HeapSize WriteConsoleW GetProcessHeap SetEnvironmentVariableW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SleepEx MultiByteToWideChar WideCharToMultiByte WaitForSingleObject CloseHandle ExpandEnvironmentStringsA Sleep GetLastError SetLastError FormatMessageA VerSetConditionMask FreeLibrary GetProcAddress LoadLibraryW GetModuleHandleW GetSystemDirectoryW QueryPerformanceFrequency VerifyVersionInfoW WaitForMultipleObjects GetFileType GetStdHandle ReadFile PeekNamedPipe GetTickCount QueryPerformanceCounter FlushConsoleInputBuffer WriteFile GetCurrentThreadId GetModuleHandleA GetCurrentProcessId LoadLibraryA GlobalMemoryStatus GetSystemTime SystemTimeToFileTime GetConsoleCP ReadConsoleW GetModuleFileNameW GetModuleFileNameA ExitProcess SetConsoleMode ReadConsoleInputA PeekConsoleInputA SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA FindFirstFileA GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindNextFileA FindFirstFileExW FindFirstFileExA FindClose GetTimeZoneInformation SetEndOfFile SetFileAttributesW GetFileAttributesExW FlushFileBuffers GetNumberOfConsoleInputEvents SetStdHandle GetFullPathNameA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW InterlockedPushEntrySList InterlockedFlushSList RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException CreateThread ExitThread ResumeThread FreeLibraryAndExitThread GetModuleHandleExW CreateFileW GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SetFilePointerEx SetConsoleCtrlHandler GetConsoleMode GetFullPathNameW

user32

GetDC GetDesktopWindow MessageBoxA GetUserObjectInformationW GetProcessWindowStation ReleaseDC

gdi32

GetDeviceCaps GetDIBits GetObjectA DeleteObject CreateCompatibleBitmap

advapi32

RegisterEventSourceA DeregisterEventSource CryptEnumProvidersA CryptSignHashA CryptDestroyHash CryptCreateHash CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey CryptReleaseContext CryptAcquireContextA ReportEventA

curl_easy_cleanup curl_easy_duphandle curl_easy_escape curl_easy_getinfo curl_easy_init curl_easy_pause curl_easy_perform curl_easy_recv curl_easy_reset curl_easy_send curl_easy_setopt curl_easy_strerror curl_easy_unescape curl_easy_upkeep curl_escape curl_formadd curl_formfree curl_formget curl_free curl_getdate curl_getenv curl_global_cleanup curl_global_init curl_global_init_mem curl_global_sslset curl_maprintf curl_mfprintf curl_mime_addpart curl_mime_data curl_mime_data_cb curl_mime_encoder curl_mime_filedata curl_mime_filename curl_mime_free curl_mime_headers curl_mime_init curl_mime_name curl_mime_subparts curl_mime_type curl_mprintf curl_msnprintf curl_msprintf curl_multi_add_handle curl_multi_assign curl_multi_cleanup curl_multi_fdset curl_multi_info_read curl_multi_init curl_multi_perform curl_multi_remove_handle curl_multi_setopt curl_multi_socket curl_multi_socket_action curl_multi_socket_all curl_multi_strerror curl_multi_timeout curl_multi_wait curl_mvaprintf curl_mvfprintf curl_mvprintf curl_mvsnprintf curl_mvsprintf curl_pushheader_byname curl_pushheader_bynum curl_share_cleanup curl_share_init curl_share_setopt curl_share_strerror curl_slist_append curl_slist_free_all curl_strequal curl_strnequal curl_unescape curl_url curl_url_cleanup curl_url_dup curl_url_get curl_url_set curl_version curl_version_info

2345Login.exe

IMPHASH 973deec393003363c3a7c6df65405ae4
SHA256 6c4931b8288f50eac3ed767888d99080c67eb5f7cb78a409a4b84835fe644447
MD5 d5c54cd0bec232b978c1fa110c8794d4
SHA1 b0bde8044eab0d6f6304872310f9b4b637e4bbb8
SHA512 b74c5af1918f63025825fabab0070b06957a64a319d12d76f0451e465d10d1939b96836f5aad008f47c8eca469f35b18ff67c85a7808444a8e51d90cf41f6905
SSDEEP 98304:L7pSBlEYHTwDquCWNJt2Plg3KMV8adVVqciIrQD6zIkJsZVbCPnN5ood:8fzHTwZ6POEoqetmGDood
TLSH
T1A156D010FA41C237E56200B05A6E5E6AD0547D352B2498C7B3C83F6E6A75FE3AD32E17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

1529885

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\dbgsym\2345Login.pdb

kernel32

GetFileTime CreateDirectoryW GetFullPathNameW RemoveDirectoryW GetTempPathW SetFileAttributesW DeleteFileW GetCurrentDirectoryW GetWindowsDirectoryW MoveFileExW CopyFileW GetTempFileNameW MoveFileW FormatMessageW WaitForMultipleObjects GetCurrentProcessId GetModuleHandleW GetExitCodeProcess LoadLibraryW FreeLibrary LockResource GetSystemInfo LoadResource FindResourceW QueryDosDeviceW InitializeCriticalSectionAndSpinCount RaiseException DecodePointer CreateEventW SetEvent ResetEvent InterlockedExchangeAdd GetLogicalDriveStringsW LoadLibraryA GetFileSizeEx InterlockedExchange SystemTimeToFileTime SetLastError GlobalMemoryStatusEx ReleaseSemaphore GetStdHandle GetSystemTimeAsFileTime CreateSemaphoreW GetModuleFileNameA CreateDirectoryA GetConsoleScreenBufferInfo SetConsoleTextAttribute GlobalLock GlobalUnlock VerSetConditionMask MulDiv VerifyVersionInfoW ExitProcess LocalFileTimeToFileTime FreeResource SizeofResource GetLocalTime lstrcpynW InterlockedIncrement InterlockedDecrement GetCommandLineW SetEndOfFile GetModuleFileNameW LocalFree GetTickCount DeviceIoControl GetEnvironmentVariableW FileTimeToSystemTime WriteConsoleW HeapSize SetStdHandle SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage FindFirstFileExW HeapReAlloc SetFilePointerEx ReadConsoleW GetConsoleMode GetConsoleCP FlushFileBuffers GetTimeZoneInformation GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetModuleHandleExW FreeLibraryAndExitThread ResumeThread ExitThread CreateThread RtlUnwind InitializeSListHead QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent WaitForSingleObjectEx IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo GetLocaleInfoW LCMapStringW CompareStringW EncodePointer TlsFree TlsSetValue TlsGetValue TlsAlloc SwitchToThread GetStringTypeW GetFileSize SetFilePointer SetFileTime WriteFile GetPrivateProfileIntW GetProcessHeap HeapAlloc GlobalAlloc WideCharToMultiByte GetPrivateProfileStringW GetTickCount64 GetProcAddress OpenProcess ReadFile GetCurrentThreadId HeapFree FindClose FindNextFileW lstrcmpiW lstrcpyW lstrcatW GetVersionExW GetFileAttributesW ExpandEnvironmentStringsW lstrlenW GetFileAttributesExW CreateFileW GetLongPathNameW FindFirstFileW DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection MapViewOfFile LoadLibraryExW CreateFileMappingW UnmapViewOfFile OpenFileMappingW GetLastError Sleep ReleaseMutex WaitForSingleObject CreateMutexW MultiByteToWideChar GetACP SetErrorMode GetCurrentProcess CreateProcessW CloseHandle OutputDebugStringW WritePrivateProfileStringW

user32

EnableMenuItem DestroyMenu AppendMenuW TrackPopupMenu CreateCaret GetCaretBlinkTime HideCaret ShowCaret SetCaretPos SetWindowLongW GetWindowLongW IsWindow GetCaretPos ClientToScreen UpdateWindow EqualRect SetWindowTextW GetWindowTextW GetWindowTextLengthW IsWindowEnabled CreatePopupMenu SetRect FillRect DrawTextW wsprintfA CharPrevW GetWindowRgn MoveWindow UpdateLayeredWindow PostMessageW DrawTextA GetClassNameW FindWindowW EnumWindows MessageBoxA EnumChildWindows ReleaseDC GetClientRect GetDC EndPaint BeginPaint GetCursorPos InvalidateRect ReleaseCapture PtInRect KillTimer SetCursor SetCapture LoadCursorW SetFocus IntersectRect SetTimer ShowWindow ScreenToClient SetWindowPos GetWindowRect SetForegroundWindow DestroyWindow PostQuitMessage SendMessageW GetMessageW TranslateMessage DispatchMessageW CreateWindowExW IsWindowVisible IsIconic IsZoomed CharNextW GetActiveWindow GetFocus SetWindowRgn MonitorFromPoint MessageBoxW InflateRect CreateAcceleratorTableW InvalidateRgn GetGUIThreadInfo GetKeyboardLayout GetKeyNameTextW MapVirtualKeyExW GetKeyState GetUpdateRect MapWindowPoints GetSysColor GetPropW SetPropW GetSystemMetrics EnableWindow GetClassInfoExW RegisterClassExW RegisterClassW CallWindowProcW DefWindowProcW wsprintfW GetMonitorInfoW MonitorFromWindow LoadImageW GetWindow GetParent IsRectEmpty OffsetRect UnionRect

gdi32

GetEnhMetaFileHeader CreateEnhMetaFileW CloseEnhMetaFile SaveDC RestoreDC Rectangle RemoveFontMemResourceEx AddFontMemResourceEx GetStockObject GetDeviceCaps CreatePen CreateFontIndirectW CreateDIBitmap CreateCompatibleBitmap GetClipBox BitBlt SelectObject CreateDIBSection CreateCompatibleDC DeleteDC DeleteObject PlayEnhMetaFile CreatePenIndirect CreateRectRgnIndirect CreateSolidBrush GetCharABCWidthsW GetTextExtentPoint32W LineTo SelectClipRgn ExtSelectClipRgn SetBkColor SetBkMode StretchBlt SetStretchBltMode SetTextColor GetObjectA MoveToEx TextOutW GdiFlush CreatePatternBrush GetTextExtentPointA GetBitmapBits SetBitmapBits GetTextMetricsW GetObjectW SetWindowOrgEx CreateRoundRectRgn CreateRectRgn CombineRgn PtInRegion

advapi32

RegCreateKeyExW GetUserNameW

shell32

SHGetSpecialFolderPathW ShellExecuteW SHGetFolderPathW ShellExecuteExW SHGetPathFromIDListW SHGetSpecialFolderLocation CommandLineToArgvW DragQueryFileW

ole32

OleLockRunning CLSIDFromProgID CLSIDFromString CreateStreamOnHGlobal ReleaseStgMedium CoCreateInstance DoDragDrop CoTaskMemFree OleDuplicateData

oleaut32

VariantInit SysAllocString VariantClear SysFreeString

comctl32

ord17 _TrackMouseEvent InitCommonControlsEx

gdiplus

GdipRotateWorldTransform GdipTranslateWorldTransform GdipDrawImageRectI GdipGetPropertyItem GdipGetPropertyItemSize GdipImageSelectActiveFrame GdipImageGetFrameCount GdipImageGetFrameDimensionsList GdipImageGetFrameDimensionsCount GdipGetImageHeight GdipGetImageWidth GdipSetStringFormatTrimming GdipSetStringFormatLineAlign GdipSetStringFormatAlign GdipSetStringFormatFlags GdipCloneStringFormat GdipDeleteStringFormat GdipStringFormatGetGenericTypographic GdipMeasureString GdipDrawString GdipDeleteFont GdipCreateFontFromLogfontA GdipCreateFontFromDC GdipFillPath GdipFillRectangleI GdipDrawPath GdipDrawRectangleI GdipSetInterpolationMode GdipSetTextRenderingHint GdiplusStartup GdipDeleteGraphics GdipCreateFromHDC GdipDisposeImage GdipCloneImage GdipLoadImageFromStreamICM GdipLoadImageFromStream GdipSetPenMode GdipDeletePen GdipCreatePen1 GdipCreateSolidFill GdipDeleteBrush GdipCloneBrush ord1 GdipAddPathLine GdipDeletePath GdipCreatePath GdipFree GdipAlloc GdiplusShutdown GdipSetSmoothingMode

imm32

ImmReleaseContext ImmGetContext ImmSetCompositionWindow ImmSetCandidateWindow

psapi

GetProcessMemoryInfo

shlwapi

PathIsDirectoryA PathFileExistsW

ws2_32

gethostname gethostbyname WSAStartup

generic

count=19, id=241, version=40116,

count=176, id=243, version=40116,

count=30, id=242, version=40116,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=26, id=259, version=26706,

count=74, id=261, version=26706,

count=35, id=260, version=26706,

count=17, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=27, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=457, id=1, productName=Unmarked objects,

count=1, productName=Unmarked objects (old),

count=1, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=65, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,

count=138, id=265, version=27026,

count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,

count=2, id=151,

count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,

2345PdfEditor.exe

IMPHASH 7c50123ca4dd68197177c651e0adeac1
SHA256 2b5edc2b1a9333b20647aee2bd02bd8d3127043b5f9f102d966ef80fecc5b9e2
MD5 9f1567adf1a526efbf3c3e29d2bb9b8c
SHA1 7d6fa2627cfed618c90d41848adcf2e3fc94d629
SHA512 0d5b2482dded5d960caf32194839964e6bf24dc1dc0cbc356a8754bd1c91c07f54283dc6ad3a0c24f838f501fbd92c564004bf96ebdd33c754648b7b133cce03
SSDEEP 12288:pbBW3KsKSR/9lBJpM7uq1cdNgPAS5ixTCIej:JBWgSR/TBJqubg4iUHej
TLSH
T1F5E4AE21B891A3B1C9A94930E56ADFB1492B2C2B477007C767D5BF213FF05E35A3A871
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

b8:76:4d:38:60:8b:31:44:3d:2b:3c:a2:62:a1:bd:b4:0d:82:e7:d0:18:c1:88:93:a8:2d:3e:9c:af:75:86:3b

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

3e:d3:22:af:d0:e5:26:91:14:41:0d:67:3a:fd:95:e7:f0:94:84:e0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

93640

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\dbgsym\2345PdfEditor.pdb

kernel32

GetVersionExW lstrcatW lstrcpyW lstrcmpiW LockResource LoadResource FindResourceW GetModuleHandleW WaitForSingleObject GetLastError CloseHandle LocalFree GetCurrentProcessId LoadLibraryW FreeLibrary HeapFree GetCurrentThreadId OpenProcess HeapAlloc GetProcessHeap CreateFileW GetFileAttributesExW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetCurrentProcess FindNextFileW FindClose ReadFile WriteFile SetFilePointer SetEndOfFile GetFileSize CreateDirectoryW GetFullPathNameW SetFileAttributesW DeleteFileW WritePrivateProfileStringW GetPrivateProfileStringW GetNativeSystemInfo LoadLibraryExW InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter ExpandEnvironmentStringsW TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetStdHandle MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP GetStringTypeW GetFileType LCMapStringW DecodePointer FindFirstFileExW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle HeapSize HeapReAlloc GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers WriteConsoleW CreateMutexW ReleaseMutex UnmapViewOfFile LoadLibraryA GetEnvironmentVariableW GetFileSizeEx FormatMessageW lstrlenW GetProcAddress GetFileAttributesW SetCurrentDirectoryW SetUnhandledExceptionFilter GetModuleFileNameW

user32

MessageBoxW

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoTaskMemFree

generic

count=10, id=241, version=40116,

count=143, id=243, version=40116,

count=25, id=242, version=40116,

count=19, id=260, version=26706,

count=22, id=259, version=26706,

count=5, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,

count=43, id=261, version=26706,

count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=216, id=1, productName=Unmarked objects,

count=1, productName=Unmarked objects (old),

count=1, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=64, id=265, version=27026,

count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,

count=2, id=151,

count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,

2345PdfReader.exe

IMPHASH cec2a5b6b564959032cfdaeb879b1783
SHA256 f3aab1404300f83e1ba5cb8ccfddb8b751ef1f1109fb7fa72d361549feaf5691
MD5 8e0418d26e59782f4920ba5e6ab8fc65
SHA1 2913f7ac92e3066b38c99a29ee9beceabc20a9fa
SHA512 deb3cf522dba81ee1c475068ceeaef39799d6d55dd13ead88efc7bc0880f6fd515d59e0ffdb4d5908cda13fcb4cdfc5fed75f92ae68edab8ef82189ded5ad497
SSDEEP 6144:hp6NcuWWBVeZbAIEfU+b/ddYJ5uJWuilJtAfrkZ9H:h7jWPeDY/bS5RHYkZ9H
TLSH
T19C949D20B952C232C6620574C9BDAEFA596A6D294F7005CB73C43F2A7FB02E36535972
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

dc:bc:0a:9e:72:18:e0:25:36:85:6d:22:a2:51:c8:87:bd:8f:41:4a:22:dc:26:4c:54:0c:d6:e4:ff:42:a6:95

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

15:95:eb:32:d1:df:8c:8a:bc:e8:8f:a2:a4:2b:75:8c:ad:1f:78:75

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

93210

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\pdb\2345PdfReader.pdb

kernel32

lstrcpyW lstrcmpiW LockResource LoadResource FindResourceW GetModuleHandleW WaitForSingleObject GetLastError CloseHandle LocalFree GetCurrentProcessId LoadLibraryW FreeLibrary HeapFree GetCurrentThreadId OpenProcess HeapAlloc GetProcessHeap CreateFileW GetFileAttributesExW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection GetCurrentProcess GetModuleFileNameW FindNextFileW FindClose ReadFile WriteFile SetFilePointer SetEndOfFile GetFileSize CreateDirectoryW GetFullPathNameW SetFileAttributesW DeleteFileW WritePrivateProfileStringW GetPrivateProfileStringW GetNativeSystemInfo LoadLibraryExW InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter GetVersionExW TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetStdHandle MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP GetStringTypeW GetFileType LCMapStringW DecodePointer FindFirstFileExW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle HeapSize HeapReAlloc GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers WriteConsoleW CreateMutexW ReleaseMutex UnmapViewOfFile LoadLibraryA GetEnvironmentVariableW GetFileSizeEx FormatMessageW GetFileAttributesW ExpandEnvironmentStringsW lstrcatW lstrlenW SetUnhandledExceptionFilter GetProcAddress

user32

MessageBoxW

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoTaskMemFree

generic

count=10, id=241, version=40116,

count=143, id=243, version=40116,

count=25, id=242, version=40116,

count=19, id=260, version=26706,

count=22, id=259, version=26706,

count=5, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,

count=43, id=261, version=26706,

count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=216, id=1, productName=Unmarked objects,

count=1, productName=Unmarked objects (old),

count=1, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=64, id=265, version=27026,

count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,

count=2, id=151,

count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,

2345Pic.exe

IMPHASH 0b86cac71d721c76aa0d50e2599b225b
SHA256 92c02f9616852b22775e6554af87601a146343a1ad8afeafa79fca2b612333c6
MD5 6a44e823a69a571acccdb4b273280a9c
SHA1 6acfe01c6c22996011287f16e2e277abc1cde55d
SHA512 0aa258f2860f3f257f56b4b70b9de909e28eceecb138df406ba77a2b19aac541a6bc2e992efa0358d0a2fc83eb65160c6f2aafc304e4650d9e7a6157aa04b519
SSDEEP 6144:xIQrsLPJE7ImnC4xpgPG/r7VFYG6U8iSjrKYobgyrrqtQGnfmGsUzxzbrs:xIMstE7NCupjr7VFY13ZtnnfmGJrs
TLSH
T14BC44CA2B95C82F1C4560D70C1699EFE45E66C1A3BA007C767C43F2AFAB01D26536B73
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

2f:01:7b:c8:b5:f3:2d:e7:25:6f:42:63:db:6e:15:ce:45:21:0e:ba:04:cb:38:d7:47:9a:c3:7f:fc:55:0e:21

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

6e:a0:bf:e3:57:bb:ca:e1:dd:64:b8:19:17:2a:8d:25:4d:85:cc:67

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

93224

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\pdb\2345Pic.pdb

kernel32

GetNativeSystemInfo GetModuleHandleW FreeLibrary LoadLibraryExW GetFileAttributesW GetLastError InitializeCriticalSectionAndSpinCount WaitForSingleObject FindClose CloseHandle ExpandEnvironmentStringsW CreateFileW FindNextFileW GetVersionExW GetCurrentThreadId ReadFile SetFilePointer GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP GetStringTypeW HeapFree HeapAlloc GetFileType LCMapStringW DecodePointer FindFirstFileExW WritePrivateProfileStringW GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap HeapSize HeapReAlloc GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers WriteConsoleW CreateMutexW ReleaseMutex InitializeCriticalSection UnmapViewOfFile LoadLibraryA GetFileAttributesExW GetEnvironmentVariableW OpenProcess LocalFree lstrcmpiW lstrlenW lstrcatW lstrcpyW SetEndOfFile DeleteFileW GetFileSizeEx GetFileSize CreateDirectoryW GetFullPathNameW SetFileAttributesW FormatMessageW GetProcAddress GetPrivateProfileStringW LoadLibraryW IsValidCodePage GetSystemDirectoryW

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoTaskMemFree

generic

count=10, id=241, version=40116,

count=143, id=243, version=40116,

count=25, id=242, version=40116,

count=19, id=260, version=26706,

count=22, id=259, version=26706,

count=5, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,

count=43, id=261, version=26706,

count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=215, id=1, productName=Unmarked objects,

count=1, productName=Unmarked objects (old),

count=1, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=64, id=265, version=27026,

count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,

count=2, id=151,

count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,

2345PicCapture.exe

IMPHASH 2f091d51cc122a3ac6199f802de517fe
SHA256 bc781a7d3f890345238287b8d3260432287658684b11ed840ac3cfc5508e903d
MD5 ebb8b97f58343a15eafb9280e9805ccf
SHA1 105f3f61ca62bcad1b50623d57dd6d3072733c87
SHA512 c925ceea618184fb526b50df83f198fb7d45ffcbcc6663af6ece08e64eb4c05f1892038d1fb1cd9ed8e8ceb4bba7e8adf46e99ff86dc5cb01dc8fe38beed51fc
SSDEEP 6144:J2N7p3/g912cC/cRMCKFbhipsDdxFIDpmyXyFfz4ay+:Un349AcHMCKFNipkKpmyXy54ay+
TLSH
T11384AE207941C636C663067489B89FFA95BE6E191F7045CB63C83F2EBD306E32535972
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

bc:94:fe:b2:95:03:d6:4f:69:b6:e5:c4:50:f5:90:fd:9b:20:9f:74:8a:e5:1d:22:fb:ec:a7:0c:fc:61:48:38

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

99:7c:3e:ac:0f:58:40:f0:84:45:42:99:42:53:78:22:68:33:db:c7

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

92826

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\pdb\2345PicCapture.pdb

kernel32

FreeLibrary LoadLibraryExW GetFileAttributesW GetLastError InitializeCriticalSectionAndSpinCount WaitForSingleObject FindClose CloseHandle ExpandEnvironmentStringsW CreateFileW FindNextFileW GetVersionExW GetCurrentThreadId ReadFile SetFilePointer GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP LCMapStringW DecodePointer HeapAlloc HeapFree FindFirstFileExW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA LoadLibraryW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW CreateMutexW ReleaseMutex InitializeCriticalSection UnmapViewOfFile LoadLibraryA GetFileAttributesExW GetEnvironmentVariableW OpenProcess LocalFree lstrcmpiW lstrlenW lstrcatW lstrcpyW SetEndOfFile DeleteFileW GetFileSizeEx GetFileSize CreateDirectoryW GetFullPathNameW SetFileAttributesW FormatMessageW GetNativeSystemInfo GetPrivateProfileStringW GetModuleHandleW WritePrivateProfileStringW GetCommandLineW GetProcAddress

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoTaskMemFree

generic

count=10, id=241, version=40116,

count=143, id=243, version=40116,

count=25, id=242, version=40116,

count=19, id=260, version=26706,

count=22, id=259, version=26706,

count=5, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,

count=43, id=261, version=26706,

count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=215, id=1, productName=Unmarked objects,

count=1, productName=Unmarked objects (old),

count=1, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=64, id=265, version=27026,

count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,

count=2, id=151,

count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,

2345PicDumper.exe

IMPHASH cdd69eb14296c3d1fe9abd5992150b76
SHA256 501edef3bd9b7d7bd3d4fa591d9db292e32e982add36667ed155df23c038cbc3
MD5 7930dcd8c89a72a464e52eb8708755c5
SHA1 6b40e8b91b2b359430dfc7c1d2079eca6856b4bd
SHA512 1e405b7e0b86dce688e3c9f1418b31f23fc4b1660c80581922b40d9bbf3434099f10ab9a248e2202c41d11e8895c923b5180fbf1982a5aef4988b72765ceed93
SSDEEP 12288:oczY9Jn212dNyR0RaaSOmu8yz2Yh+adxE3ObrWKRGmOHSdZN65G6eT3XnTs:of9seN20RaaD+adS3swSdZNbBT3XnTs
TLSH
T127E47D207992C57BD67201B119ACCA6B006ABE250F6558DBB3C81F3E5A781D21F32F77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

00:a6:e5:02:74:eb:26:7b:f5:e5:74:03:84:f0:40:98:6a:88:42:32:6c:ec:cd:0f:b4:3d:80:45:eb:f9:4a:98

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

1b:d6:e1:9a:77:69:61:c6:02:f2:28:c1:73:4f:9b:b3:d0:88:e4:a6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

352334

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\dbgsym\2345PicDumper.pdb

kernel32

GetFileAttributesExW GetACP MultiByteToWideChar WideCharToMultiByte GetProcAddress HeapFree HeapAlloc GetProcessHeap CreateMutexW WaitForSingleObject ReleaseMutex CloseHandle OpenMutexW ReadFile WriteFile SetFilePointer SetEndOfFile GetFileSize CreateDirectoryW lstrlenW RemoveDirectoryW GetFileAttributesW SetFileAttributesW DeleteFileW MoveFileExW GetLastError MoveFileW FormatMessageW LocalFree LoadLibraryW FreeLibrary GetCurrentThreadId GetVersionExW OpenProcess EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection LockResource LoadResource FindResourceW GetModuleHandleW lstrcmpiW GetCurrentProcess GetModuleFileNameW InterlockedExchange SetLastError InterlockedExchangeAdd GetTickCount GetCurrentProcessId CreateFileW GetTempFileNameW InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsFree GetSystemTimeAsFileTime EncodePointer DecodePointer CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo LoadLibraryExW ExpandEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter InitializeSListHead IsDebuggerPresent GetStartupInfoW UnmapViewOfFile DuplicateHandle GetFileInformationByHandle FileTimeToSystemTime GetLocalTime SystemTimeToFileTime GetFileType GetSystemTime CreateFileMappingW MapViewOfFile FileTimeToDosDateTime RtlUnwind RaiseException GetStdHandle ExitProcess GetModuleHandleExW FlushFileBuffers GetConsoleCP GetConsoleMode IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW SetFilePointerEx GetTimeZoneInformation HeapReAlloc OutputDebugStringW FindFirstFileExW IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetStdHandle WriteConsoleW HeapSize LoadLibraryA lstrcatW lstrcpyW GetFileSizeEx FindClose FindNextFileW FindFirstFileW TlsSetValue SetErrorMode

imm32

ImmDisableIME

advapi32

GetUserNameW

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoTaskMemFree

generic

count=16, id=241, version=40116,

count=165, id=243, version=40116,

count=30, id=242, version=40116,

count=2, id=199, version=41118,

count=24, id=259, version=26706,

count=70, id=261, version=26706,

count=35, id=260, version=26706,

count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=232, id=1, productName=Unmarked objects,

count=17, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, productName=Unmarked objects (old),

count=1, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=134, id=265, version=27026,

count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,

count=2, id=151,

count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,

2345PicFeedback.exe

IMPHASH 2f091d51cc122a3ac6199f802de517fe
SHA256 ba52c828896326b8fcafc459978cae18c78c81fd9e7c90356994c392e6f69913
MD5 6ba1ed02b971616fefa3bf216350ed06
SHA1 c71070eaad421c243bfcc0c1458c57b5d7ef5d83
SHA512 5b22a667d925ec78df69f4f60d3fb52be84ef1d390cad9b30cbd7b2260742e8cdb20298aad7d03dd2716058eea8695a20ad0424e6408f51f0c562805f00b24bd
SSDEEP 12288:DP3INAcnESNlRipkKpmyXyohmwgkG6TSHnBkHoz4aIt:r3IvnESNlIkKxXk1HnBkw4a+
TLSH
T121B4BF20B981C376CA770130D9B8AFFA54AE6D295B7005C763C83F2A7D706D32635976
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

25:86:5c:3d:ef:22:94:18:45:d2:57:ad:1d:18:31:4b:42:27:27:49:d6:b1:c6:28:36:77:ed:37:e2:65:14:93

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

f2:d2:c5:ce:ae:9e:e1:a7:4a:87:fd:3a:13:86:5c:c5:32:5f:9b:10

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

92826

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\dbgsym\2345PicFeedback.pdb

kernel32

FreeLibrary LoadLibraryExW GetFileAttributesW GetLastError InitializeCriticalSectionAndSpinCount WaitForSingleObject FindClose CloseHandle ExpandEnvironmentStringsW CreateFileW FindNextFileW GetVersionExW GetCurrentThreadId ReadFile SetFilePointer GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP LCMapStringW DecodePointer HeapAlloc HeapFree FindFirstFileExW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA LoadLibraryW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW CreateMutexW ReleaseMutex InitializeCriticalSection UnmapViewOfFile LoadLibraryA GetFileAttributesExW GetEnvironmentVariableW OpenProcess LocalFree lstrcmpiW lstrlenW lstrcatW lstrcpyW SetEndOfFile DeleteFileW GetFileSizeEx GetFileSize CreateDirectoryW GetFullPathNameW SetFileAttributesW FormatMessageW GetNativeSystemInfo GetPrivateProfileStringW GetModuleHandleW WritePrivateProfileStringW GetCommandLineW GetProcAddress

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoTaskMemFree

generic

count=10, id=241, version=40116,

count=143, id=243, version=40116,

count=25, id=242, version=40116,

count=19, id=260, version=26706,

count=22, id=259, version=26706,

count=5, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,

count=43, id=261, version=26706,

count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=215, id=1, productName=Unmarked objects,

count=1, productName=Unmarked objects (old),

count=1, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=64, id=265, version=27026,

count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,

count=2, id=151,

count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,

2345PicHelper.exe

IMPHASH fe21b64d4798748ccfbfed945b398501
SHA256 74ee755c1c6451f30cc9b61b1120b45b07e6c45fcaecf9b3382d7fb04d900539
MD5 a68ee2ba1263c9712a86edacd4de2d18
SHA1 96757914d9b0fb36a753f2d042edbbdbf8224ad0
SHA512 fbda9ab5b83954b39e8e6d1f749d91ca598e23c60057235f6bec3384da2f5bd604582a9074131b4a682afc37566420ba37b1fc6262a3bf7bdd2d292d8e26560b
SSDEEP 6144:Iw9t1981PL7yA0I8vN7gMCtJrTi/6MYWl9eDZ05fFHYs/AOckTBXEfMEqUdGU:XfaD7T0tBqtJ/i/6K9eUtHYSmkTBEUOn
TLSH
T178D40720759AC23AD67195F00A7E8E5A90ADBD2C5F710DCBA7C00F3A5474ED31A36E72
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

59:db:6e:02:a0:d6:e2:ae:82:25:2c:78:3b:76:79:f5:75:39:a9:37:c3:41:ec:64:bc:cd:5a:4c:5c:c1:1e:09

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

6b:54:20:1a:0a:9a:23:27:2f:8c:88:f2:2d:e0:9e:d8:fe:49:4c:c3

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

322758

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\dbgsym\2345PicHelper.pdb

kernel32

lstrlenW GetFileAttributesW SetFileAttributesW DeleteFileW MoveFileExW GetTempFileNameW MoveFileW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection DecodePointer RaiseException InitializeCriticalSectionAndSpinCount GetTickCount OpenProcess GetCurrentProcess GetCurrentProcessId TerminateProcess GetFullPathNameW Sleep MultiByteToWideChar FileTimeToSystemTime LocalFree GlobalAlloc GlobalFree SystemTimeToFileTime IsBadStringPtrW CreateDirectoryW GetFileSize CloseHandle SetEndOfFile SetFilePointer WriteFile ReadFile FindClose FindNextFileW GetLastError CreateFileW LoadLibraryExW FreeLibrary GetModuleHandleW GetProcAddress LoadLibraryW SetErrorMode WaitForSingleObject GetModuleFileNameW LocalAlloc GetVersionExW GetCurrentThreadId UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW OutputDebugStringW RtlUnwind SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetStdHandle WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP GetStringTypeW HeapFree HeapAlloc GetFileType LCMapStringW FindFirstFileExW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap HeapSize HeapReAlloc GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers WriteConsoleW LockResource LoadResource FindResourceW lstrcmpiW GetEnvironmentVariableW CreateMutexW ReleaseMutex InterlockedExchangeAdd

advapi32

RegQueryValueExW GetUserNameW CloseServiceHandle OpenSCManagerW OpenServiceW QueryServiceStatus BuildExplicitAccessWithNameW SetNamedSecurityInfoW GetNamedSecurityInfoW SetEntriesInAclW RegCreateKeyW RegSetValueExW RegCloseKey RegOpenKeyExW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegOpenCurrentUser

shell32

SHChangeNotify SHGetPathFromIDListW SHGetSpecialFolderLocation

ole32

CoTaskMemFree CoSetProxyBlanket CoInitializeEx CoInitializeSecurity CoUninitialize CoCreateInstance

oleaut32

SysAllocString VariantInit VariantClear VariantChangeType

imm32

ImmDisableIME

shlwapi

SHDeleteKeyW

wtsapi32

WTSQuerySessionInformationW

2345PicLoader.exe

IMPHASH 0baf96cba2f94e1cae479db2cfcabc6c
SHA256 1dc4dcd53061601a420d72cfdfabe923dc218216ab46840dabf0cd2b532cb5ea
MD5 fb73ccb17f7e2712e73cc3b6ffbb9bce
SHA1 a00efa0ee76a83b66b2527c077526963d4c67ecd
SHA512 5bedb7324295268d3a1fd5bbdf027b302db6ed03a45cd893c239e111f2b5f881d36097c1446709cb33a67eba268ca8be111d3b1208a626208116234d8bb5d1b4
SSDEEP 24576:QyReKzIOkFgKdMTvpBXnf9Ui1p/Farw4sjRHTzksvf3mJEblTBcBnJnRdnwAQ:QWzIhndMXf9Ui//FcwFX3mJITeB5RdI
TLSH
T15C957D21B342C32BE6A641B1166CCF6F4059B9311BA498C7F3C45F2E69E0DD39632E67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

f2:61:d7:fd:83:c8:bb:c6:0c:18:09:8a:d3:ce:3e:d0:6a:43:44:d3:e7:58:90:90:c4:68:39:e8:c6:b1:fb:76

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

e1:64:b7:a9:13:5a:0c:4f:a2:bb:df:fd:c7:7f:f5:33:a1:5a:4a:0f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

1198932

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\dbgsym\2345PicLoader.pdb

kernel32

InitializeCriticalSection FindFirstFileW FindNextFileW FindClose GetLongPathNameW CreateFileW GetFileAttributesExW HeapFree GlobalAlloc GlobalFree HeapAlloc GetProcessHeap GetLogicalDriveStringsW ReadFile WriteFile SetFileTime SetFilePointer SetEndOfFile GetFileSize GetFileTime FormatMessageW lstrlenW lstrcatW lstrcpyW DeleteFileW GetFileSizeEx OpenEventW CreateEventW SetEvent ResetEvent InterlockedExchangeAdd CreateDirectoryW GetFullPathNameW RemoveDirectoryW GetTempPathW SetFileAttributesW GetCurrentDirectoryW GetWindowsDirectoryW MoveFileExW CopyFileW GetTempFileNameW MoveFileW GetExitCodeProcess SystemTimeToFileTime GlobalMemoryStatusEx GlobalLock GlobalUnlock SizeofResource OutputDebugStringW TerminateProcess InterlockedDecrement DuplicateHandle LoadLibraryExA VirtualFree VirtualAlloc FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter LoadLibraryExW GetCPInfo CreateProcessW GetCurrentProcessId LocalFree WaitForMultipleObjects LoadLibraryA ExpandEnvironmentStringsW WideCharToMultiByte LocalAlloc MultiByteToWideChar GetACP lstrcmpiW FindResourceW LoadResource GetSystemInfo LockResource GetVersionExW GetFileAttributesW SearchPathW MapViewOfFile CreateFileMappingW UnmapViewOfFile OpenFileMappingW GetModuleHandleW OpenProcess GetModuleFileNameW GetCurrentProcess QueryDosDeviceW OpenMutexW CloseHandle Sleep IsBadStringPtrW DeviceIoControl ResumeThread ReleaseMutex WaitForSingleObject CreateMutexW GetTickCount DeleteCriticalSection DecodePointer RaiseException GetLastError GetCurrentThreadId SetErrorMode LeaveCriticalSection InitializeCriticalSectionAndSpinCount EnterCriticalSection SetLastError MulDiv FreeLibrary GetProcAddress LoadLibraryW GetPrivateProfileStringW WritePrivateProfileStringW ExitThread GetStringTypeW GetLocaleInfoW LCMapStringW CompareStringW EncodePointer GetEnvironmentVariableW WriteConsoleW HeapSize SetStdHandle GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc SwitchToThread QueryPerformanceCounter FreeLibraryAndExitThread InterlockedExchange CreateThread SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindFirstFileExW HeapReAlloc FlushFileBuffers GetConsoleCP SetFilePointerEx ReadConsoleW GetConsoleMode EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetStdHandle GetModuleHandleExW ExitProcess GetTimeZoneInformation RtlUnwind DosDateTimeToFileTime GetFileType FileTimeToSystemTime

user32

BeginPaint ReleaseDC GetParent SetWindowLongW LoadCursorW IsRectEmpty IsWindowEnabled CopyRect IsWindow ShowWindow RegisterClassExW CreateWindowExW SetWindowPos IsWindowVisible GetDC DestroyWindow GetWindowRect GetWindow DefWindowProcW GetWindowLongW DialogBoxParamW GetClassNameW EnumWindows GetActiveWindow UnregisterClassW SendMessageTimeoutW PostMessageW SendMessageW MoveWindow EndDialog GetDlgItem SetTimer SetWindowRgn InvalidateRect GetSystemMetrics GetForegroundWindow WindowFromPoint GetDesktopWindow GetWindowThreadProcessId SystemParametersInfoW OffsetRect PtInRect GetClientRect SetWindowTextW MonitorFromWindow GetMonitorInfoW EndPaint

gdi32

DeleteObject DeleteDC CreateCompatibleDC SelectObject CreateRoundRectRgn BitBlt CreateCompatibleBitmap SetViewportOrgEx

advapi32

RegDeleteKeyW RegCreateKeyW RegSetValueExW GetUserNameW RegCloseKey SetNamedSecurityInfoW GetNamedSecurityInfoW SetEntriesInAclW LookupAccountNameW GetFileSecurityW GetSecurityDescriptorDacl GetAce GetAclInformation EqualSid RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegEnumKeyExW RegDeleteValueW RegOpenCurrentUser QueryServiceStatus OpenServiceW OpenSCManagerW CloseServiceHandle BuildExplicitAccessWithNameW

shell32

SHGetFolderPathW SHChangeNotify SHGetDesktopFolder ShellExecuteExW SHGetSpecialFolderPathW SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoSetProxyBlanket CoInitializeEx CoTaskMemFree CreateStreamOnHGlobal CoUninitialize CoInitialize CoInitializeSecurity CoCreateInstance

oleaut32

VariantClear VariantInit SysAllocString SysFreeString VariantChangeType

shlwapi

SHDeleteKeyW

imm32

ImmDisableIME

gdiplus

GdipMeasureString GdipDrawImageRectRectI GdipCreateBitmapFromScan0 GdipGetImageWidth GdipSetCompositingMode GdipDeleteGraphics GdipFillRectangleI GdipGetImageGraphicsContext GdipCloneBrush GdipFree GdipCreateHBITMAPFromBitmap GdipCreateSolidFill GdipDisposeImage GdipAlloc GdipDeleteBrush GdipCloneImage GdipGetImageHeight GdipCreateFromHDC GdipDrawImageRectI GdiplusStartup GdiplusShutdown GdipCreateBitmapFromStream GdipSetTextRenderingHint GdipCreateFontFromLogfontW GdipDrawString GdipCreateStringFormat GdipDeleteStringFormat GdipSetStringFormatFlags GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdipSetStringFormatTrimming GdipDeleteFont

wtsapi32

WTSQuerySessionInformationW

generic

count=23, id=241, version=40116,

count=167, id=243, version=40116,

count=32, id=242, version=40116,

count=2, id=199, version=41118,

count=25, id=259, version=26706,

count=75, id=261, version=26706,

count=36, id=260, version=26706,

count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=398, id=1, productName=Unmarked objects,

count=29, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=72, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, productName=Unmarked objects (old),

count=1, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=155, id=265, version=27026,

count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,

count=2, id=151,

count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,

2345PicPrinter.exe

IMPHASH 2f091d51cc122a3ac6199f802de517fe
SHA256 e53b7b8d07bfe5587bbd98d468c0d9087999fb2468447cc9298bde14a6a03234
MD5 4abba09875ecc57b9b072efaa4091d87
SHA1 cd0729f1dcdb95f6eeb96ac281206677b005b948
SHA512 fd3dbed2e7e20160beab36dd0c7f9f1d73a8faea1c1c6d8020bd57dc0e731e94d6d2845356ec02297ffc74288f591d0a621591c3fa0c5c2f73c22d9c50023e38
SSDEEP 12288:fX3o9AcHMC5luipkKpmyXy8JiK5/aVwayu:v3oPHMC5l1kKxXYK5/Ewan
TLSH
T173B4BE20B991C371C6660574C9B9DFFA596E6D1A0B6006C763D43F2E7FB02E32A35932
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

69:c5:7f:a0:8d:f8:4a:72:53:ff:59:87:f6:37:b9:8e:97:71:dc:0c:d9:48:fe:b0:72:42:fe:20:6c:e8:88:f2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

7c:95:9a:19:f5:63:17:dd:de:2f:ca:d0:a5:d9:15:d0:22:9c:e0:9d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

92826

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\pdb\2345PicPrinter.pdb

kernel32

FreeLibrary LoadLibraryExW GetFileAttributesW GetLastError InitializeCriticalSectionAndSpinCount WaitForSingleObject FindClose CloseHandle ExpandEnvironmentStringsW CreateFileW FindNextFileW GetVersionExW GetCurrentThreadId ReadFile SetFilePointer GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP LCMapStringW DecodePointer HeapAlloc HeapFree FindFirstFileExW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA LoadLibraryW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW CreateMutexW ReleaseMutex InitializeCriticalSection UnmapViewOfFile LoadLibraryA GetFileAttributesExW GetEnvironmentVariableW OpenProcess LocalFree lstrcmpiW lstrlenW lstrcatW lstrcpyW SetEndOfFile DeleteFileW GetFileSizeEx GetFileSize CreateDirectoryW GetFullPathNameW SetFileAttributesW FormatMessageW GetNativeSystemInfo GetPrivateProfileStringW GetModuleHandleW WritePrivateProfileStringW GetCommandLineW GetProcAddress

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoTaskMemFree

generic

count=10, id=241, version=40116,

count=143, id=243, version=40116,

count=25, id=242, version=40116,

count=19, id=260, version=26706,

count=22, id=259, version=26706,

count=5, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,

count=43, id=261, version=26706,

count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=215, id=1, productName=Unmarked objects,

count=1, productName=Unmarked objects (old),

count=1, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=64, id=265, version=27026,

count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,

count=2, id=151,

count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,

2345PicTool.exe

IMPHASH 687b6b929af51c62606e06ea257fad14
SHA256 2e1494a93ee1f1ab4ef6cddac5f6abe44011c4cb74f998f57d6eb4b7570236d6
MD5 a5cc9a347e71f755cc589664d9e53267
SHA1 f37e79178db50d3e18b11885eb2fd8556d0fb4c8
SHA512 a8210aeacdc78b7a2211122fa288e0fd7dbaffe41e6d6fc5afb319456ebe0037e323e35977e349da1bde1155a7265fe267ca4621149d8f9fe4dce8012a3f697d
SSDEEP 12288:zN93kklFpoiDCyEuSwgqnMxeG/Xw0Zh6eU6JvKqxYZN2D3vyaWuTcsFb0+J:J93DroiCy3nSwe6pqxYeVpTcsfJ
TLSH
T130155B217646C53BD57205B05A2CCA7A506DBE250FA18CCBB3C81F3E5AB09D35A36E37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

cf:43:92:3f:b9:09:bb:c9:c5:4d:8e:c3:82:4e:ed:fd:28:35:e0:16:14:61:73:d0:84:07:bb:e4:bd:12:7a:51

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

37:70:b8:bb:d0:9f:3e:62:81:25:b2:bb:1d:a5:db:87:9b:ce:32:d6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

502529

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\dbgsym\2345PicTool.pdb

imm32

ImmDisableIME

kernel32

LoadLibraryW FreeLibrary EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection FindNextFileW FindClose ReadFile WriteFile SetFileTime SetFilePointer SetEndOfFile GetFileSize CreateDirectoryW GetFullPathNameW lstrlenW RemoveDirectoryW GetTempPathW SetFileAttributesW DeleteFileW GetWindowsDirectoryW GetTempFileNameW MoveFileW HeapFree GetCurrentThreadId OpenProcess HeapAlloc LocalFree GetProcessHeap FormatMessageW ExpandEnvironmentStringsW SearchPathW InitializeCriticalSectionAndSpinCount RaiseException DecodePointer CreateEventW SetEvent ResetEvent InterlockedExchangeAdd GetCurrentProcess lstrcatW lstrcpyW GetFileSizeEx GetACP MultiByteToWideChar WideCharToMultiByte GetCurrentProcessId CreateProcessW GetExitCodeProcess InterlockedExchange GetPrivateProfileStringW TerminateProcess WritePrivateProfileStringW SwitchToThread DeviceIoControl CloseHandle Sleep ReleaseMutex WaitForSingleObject CreateMutexW GetFileAttributesExW GetLastError CreateFileW GetLongPathNameW FindFirstFileW lstrcmpiW GetModuleHandleW GetProcAddress FindResourceW LoadResource LockResource GetVersionExW GetTickCount CopyFileW MoveFileExW GetFileAttributesW SetErrorMode GetModuleFileNameW LoadLibraryA WriteConsoleW FlushFileBuffers SetFilePointerEx LoadLibraryExW UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead OutputDebugStringW GetStdHandle GetEnvironmentVariableW GetFileType RtlUnwind SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree ExitProcess GetModuleHandleExW GetStringTypeW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetTimeZoneInformation FindFirstFileExW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetStdHandle HeapSize HeapReAlloc GetConsoleCP GetConsoleMode

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoTaskMemFree

2345PicUpdate.exe

IMPHASH de444d90f242c60aed7261d065f4d95a
SHA256 53d20125ba9d72519144f0f290931c1ec76775ab92aa3d4949cb04d73d74b088
MD5 11d728223698b26721219cb654d6c56e
SHA1 df8a71044d79a87b90248883ab4cbe827cdb8661
SHA512 14db8107222e00f04e3899efc0ec3366b26e9eb0e717b58ceb421d8f0afaed0faaccdeb656be31727b6d879020a1cac1afd8ac0ee694b6adc5c211deceea9f68
SSDEEP 24576:VMSTNFUNBZc9kxRYHWr/ErkvBrlrCD8f4j9+V5pTlbedOO5PORwbhTZJ/soL3:3UNBZPxRqWN5tfE+XO52ubhTD/soT
TLSH
T1CB752A217586C337D56111F05A6D9E5A90A87D386FB019CBF3C40F3AA4B0ED36A36E27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

d2:4a:3e:6a:9b:2a:ca:8d:e2:54:4e:3f:29:70:e7:ac:ef:34:bd:6e:b5:51:4f:8a:6e:e0:b8:7e:7d:d7:3b:36

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

89:a5:7a:4b:47:91:53:f3:7d:82:19:e6:c3:de:0f:87:93:f9:10:61

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

1095268

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\dbgsym\2345PicUpdate.pdb

kernel32

Sleep LockResource GlobalAlloc GlobalLock GlobalUnlock GlobalFree LocalFree WaitForSingleObject CloseHandle CopyFileW OpenProcess GlobalMemoryStatusEx GetCurrentProcessId CreateFileW GetTickCount SwitchToThread DeviceIoControl FileTimeToSystemTime GetTimeZoneInformation FreeLibraryAndExitThread ExitThread MultiByteToWideChar WritePrivateProfileStringW GetPrivateProfileStringW FindResourceW GetComputerNameW InterlockedExchange GetFileSizeEx lstrcpyW lstrcatW FormatMessageW MoveFileW GetTempFileNameW GetModuleHandleW GetWindowsDirectoryW GetCurrentDirectoryW DeleteFileW SetFileAttributesW GetTempPathW RemoveDirectoryW lstrlenW GetFullPathNameW CreateDirectoryW InterlockedExchangeAdd ResetEvent SetEvent CreateEventW LoadLibraryA GetComputerNameExW GetEnvironmentVariableW GetFileTime GetFileSize SetEndOfFile SetFileTime GetLogicalDriveStringsW InitializeCriticalSection GetModuleFileNameW LoadLibraryExW lstrcmpiW SizeofResource LoadResource LeaveCriticalSection EnterCriticalSection SetLastError GetCurrentThreadId InterlockedDecrement InterlockedIncrement DeleteCriticalSection DecodePointer RaiseException GetLastError SetErrorMode InitializeCriticalSectionAndSpinCount OutputDebugStringA MulDiv GetSystemInfo QueryDosDeviceW WaitForMultipleObjects GetFileAttributesExW GetLongPathNameW ReleaseMutex CreateMutexW ResumeThread WriteConsoleW FlushFileBuffers SetFilePointerEx GetConsoleMode FreeLibrary GetProcAddress MoveFileExW LoadLibraryW GetConsoleCP GetStringTypeW SetStdHandle CreateThread SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindFirstFileExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW HeapReAlloc HeapSize GetFileType GetACP WriteFile GetStdHandle WideCharToMultiByte GetModuleHandleExW ExitProcess TlsFree ReadFile SetFilePointer GetCurrentProcess GetVersionExW GetFileAttributesW GetExitCodeProcess FindClose CreateProcessW ExpandEnvironmentStringsW FindFirstFileW FindNextFileW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead OutputDebugStringW EncodePointer HeapAlloc HeapFree GetProcessHeap InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache VirtualAlloc VirtualFree LoadLibraryExA RtlUnwind TlsAlloc TlsGetValue TlsSetValue

user32

SetForegroundWindow GetForegroundWindow IsWindowVisible AttachThreadInput GetLastActivePopup GetWindowRect GetWindow DefWindowProcW GetWindowLongW UnregisterClassW GetMessageW TranslateMessage DispatchMessageW PeekMessageW DestroyWindow SetWindowPos CreateWindowExW RegisterClassExW SetWindowLongW LoadCursorW IsRectEmpty IsWindowEnabled CopyRect IsWindow GetDC GetParent ReleaseDC IsIconic EndDialog GetClassInfoExW GetWindowThreadProcessId GetClassNameW SystemParametersInfoW PtInRect OffsetRect SetTimer GetDlgItem DialogBoxParamW GetMonitorInfoW MonitorFromWindow FillRect MapWindowPoints GetClientRect SetWindowTextW InvalidateRect EndPaint BeginPaint CallWindowProcW PostQuitMessage PostMessageW SendMessageW MessageBoxW GetActiveWindow CharNextW ShowWindow

gdi32

SetViewportOrgEx CreateSolidBrush CreateCompatibleBitmap BitBlt SelectObject CreateCompatibleDC DeleteDC DeleteObject

advapi32

GetUserNameW RegCloseKey RegCreateKeyExW RegDeleteKeyW SystemFunction036 RegSetValueExW RegQueryInfoKeyW RegOpenKeyExW RegEnumKeyExW RegDeleteValueW

shell32

ShellExecuteExW SHGetFolderPathW SHGetSpecialFolderPathW SHGetSpecialFolderLocation SHGetPathFromIDListW ShellExecuteW

ole32

CoCreateInstance CoTaskMemRealloc CoTaskMemAlloc CreateStreamOnHGlobal CoTaskMemFree

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

imm32

ImmDisableIME

gdiplus

GdipDrawImageRectRectI GdipCreateBitmapFromScan0 GdipGetImageWidth GdipSetCompositingMode GdipDeleteGraphics GdipFillRectangleI GdipGetImageGraphicsContext GdipCloneBrush GdipFree GdipCreateHBITMAPFromBitmap GdipCreateSolidFill GdipDisposeImage GdipAlloc GdipDeleteBrush GdipCloneImage GdipGetImageHeight GdipCreateFromHDC GdipDrawImageRectI GdipSetTextRenderingHint GdipCreateFontFromLogfontW GdipDeleteFont GdipDrawString GdipCreateStringFormat GdipDeleteStringFormat GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdiplusStartup GdiplusShutdown GdipCreateBitmapFromStream GdipSetStringFormatFlags GdipSetStringFormatTrimming

imagehlp

ImageRemoveCertificate ImageEnumerateCertificates

generic

count=15, id=241, version=40116,

count=153, id=243, version=40116,

count=30, id=242, version=40116,

count=25, id=259, version=26706,

count=70, id=261, version=26706,

count=35, id=260, version=26706,

count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=25, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=324, id=1, productName=Unmarked objects,

count=32, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, productName=Unmarked objects (old),

count=1, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=144, id=265, version=27026,

count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,

count=2, id=151,

count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,

2345PicViewer.exe

IMPHASH 2f091d51cc122a3ac6199f802de517fe
SHA256 e9524046e0c31fae17a5af0434eac081bbf1b7c01f3d8d440bfefd44802a0662
MD5 ddd0ddee6d326c622e73a5dd463992c1
SHA1 4ab0c2fd2ad9e4468d9b5553cca65953aefd2bdb
SHA512 cc510ee797a99bc71ccce04be75b60ae8f10bf92394e53578c85c3d38d1f819bdfc86cfdf36d8b712f34b1e583cc0321caec443bec9618808558cc72f38551ba
SSDEEP 6144:2SgTvv44d12cCP8hceQlxwipsDdxFIDpmyXyFfY4ak:JAvhdAcnceQlaipkKpmyXyK4ak
TLSH
T19284AE207981C636CA63067499B89FFA95BE6E191F7005CB63C83F2E7D306E32535972
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

65:ac:ac:bf:ac:de:53:e1:2c:7c:45:ac:7c:c5:45:ad:e8:6f:91:2d:71:0b:c5:66:72:10:cf:1e:19:12:9c:ef

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

d0:04:b5:10:fb:53:1d:1e:11:9a:fd:f1:98:e6:4c:69:af:c5:4f:a5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

92826

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\pdb\2345PicViewer.pdb

kernel32

FreeLibrary LoadLibraryExW GetFileAttributesW GetLastError InitializeCriticalSectionAndSpinCount WaitForSingleObject FindClose CloseHandle ExpandEnvironmentStringsW CreateFileW FindNextFileW GetVersionExW GetCurrentThreadId ReadFile SetFilePointer GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP LCMapStringW DecodePointer HeapAlloc HeapFree FindFirstFileExW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA LoadLibraryW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW CreateMutexW ReleaseMutex InitializeCriticalSection UnmapViewOfFile LoadLibraryA GetFileAttributesExW GetEnvironmentVariableW OpenProcess LocalFree lstrcmpiW lstrlenW lstrcatW lstrcpyW SetEndOfFile DeleteFileW GetFileSizeEx GetFileSize CreateDirectoryW GetFullPathNameW SetFileAttributesW FormatMessageW GetNativeSystemInfo GetPrivateProfileStringW GetModuleHandleW WritePrivateProfileStringW GetCommandLineW GetProcAddress

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoTaskMemFree

generic

count=10, id=241, version=40116,

count=143, id=243, version=40116,

count=25, id=242, version=40116,

count=19, id=260, version=26706,

count=22, id=259, version=26706,

count=5, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,

count=43, id=261, version=26706,

count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=15, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=215, id=1, productName=Unmarked objects,

count=1, productName=Unmarked objects (old),

count=1, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=64, id=265, version=27026,

count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,

count=2, id=151,

count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,

2345PicWorker.exe

IMPHASH 14bf0341bad70c04f1d9e0e33bb879ae
SHA256 6acf30362c96ae478bf51b3cbf458ad6d02b569fcc427d1aba40bc0588ca77ee
MD5 77e6b9f41b924a822cd036d26d86ae46
SHA1 7128af9cbb9b14dce60e8a006e2a2715e6a88129
SHA512 3a8bebfc5cb2e38930ad8877ad396bbe83177736c0b536b1347113f789a61d00ca4d03745d9e01773f214866b8c861a03c4793e0c3c4adbee0b0faa50a1f87e6
SSDEEP 24576:+4IlZmPClIbEqtaufDYVnx0VegdSQSiNTIheeg6X:ogAlDUegoQSiNT+j
TLSH
T1A8753B20B646C73BE56201705A2C8EAB941479311B6158D7F3C44F2A29F4DE3AB36F7B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

bf:f9:07:8d:7c:7f:32:e6:94:ca:43:dc:e6:d4:00:7a:3b:f4:94:1d:7b:b5:28:b4:cf:66:f2:dd:5d:aa:27:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

b9:1b:8a:86:e3:37:c1:99:ba:fe:e5:b6:8f:4f:9b:4b:f5:50:ad:5b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Dec 9, 2025

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

1

Major OS version

5

Entry point

975233

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\zhanlue\rcimage\bin\Win32\Release\dbgsym\2345PicWorker.pdb

kernel32

InitializeCriticalSection GetACP WideCharToMultiByte FindFirstFileW FindNextFileW FindClose GetLongPathNameW CreateFileW GetFileAttributesExW HeapFree GetVersionExW OpenProcess GlobalAlloc GlobalFree HeapAlloc LocalFree GetProcessHeap ResetEvent InterlockedExchangeAdd ReadFile WriteFile SetFileTime SetFilePointer SetEndOfFile GetFileSize GetFileTime LoadLibraryW CreateDirectoryW GetFullPathNameW lstrlenW GetTempPathW GetFileAttributesW SetFileAttributesW DeleteFileW GetCurrentDirectoryW GetWindowsDirectoryW MoveFileExW GetTempFileNameW MoveFileW LockResource GetSystemInfo QueryDosDeviceW GetCurrentProcess GetVolumeInformationW GetDiskFreeSpaceW GetLogicalDriveStringsW GetCurrentProcessId SystemTimeToFileTime FileTimeToSystemTime IsBadStringPtrW GlobalLock GlobalUnlock GlobalMemoryStatusEx GetLocalTime GetPrivateProfileStringW WriteConsoleW SetFilePointerEx Sleep GetConsoleCP FlushFileBuffers SetStdHandle SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetTimeZoneInformation HeapReAlloc HeapSize GetFileType GetStdHandle ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread RtlUnwind OutputDebugStringW LoadLibraryExA VirtualFree VirtualAlloc FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList ReleaseMutex CreateMutexW LoadLibraryExW lstrcmpiW InterlockedIncrement FreeLibrary ResumeThread GetModuleHandleW DeleteCriticalSection GetProcAddress DecodePointer FindResourceW LoadResource RaiseException GetLastError MultiByteToWideChar GetCurrentThreadId SetErrorMode LeaveCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW InterlockedDecrement EnterCriticalSection SetLastError SizeofResource GetTickCount CloseHandle SetEvent CreateEventW WaitForSingleObject WaitForMultipleObjects QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter WaitForSingleObjectEx ExpandEnvironmentStringsW CreateProcessW GetExitCodeProcess GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW CompareStringW GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue FindFirstFileExW OpenMutexW TlsAlloc SwitchToThread EncodePointer FormatMessageW GetConsoleMode GetEnvironmentVariableW LoadLibraryA LocalAlloc lstrcatW lstrcpyW GetFileSizeEx DeviceIoControl InterlockedExchange

user32

GetMonitorInfoW MonitorFromWindow CopyRect IsWindow GetClientRect SetWindowTextW EndPaint BeginPaint PtInRect OffsetRect GetWindowThreadProcessId GetParent GetDesktopWindow IsRectEmpty WindowFromPoint InvalidateRect GetForegroundWindow GetSystemMetrics SetTimer GetDlgItem EndDialog SetWindowPos MoveWindow SendMessageW SystemParametersInfoW ReleaseDC GetDC GetWindowLongW DefWindowProcW CallWindowProcW GetActiveWindow PostQuitMessage DialogBoxParamW GetMessageW DestroyWindow CreateWindowExW UnregisterClassW RegisterClassExW ShowWindow DispatchMessageW PeekMessageW CharNextW TranslateMessage LoadCursorW SetWindowLongW GetClassInfoExW PostMessageW

gdi32

SetViewportOrgEx SelectObject DeleteObject CreateCompatibleDC CreateCompatibleBitmap BitBlt DeleteDC

advapi32

RegSetValueExW RegCloseKey RegNotifyChangeKeyValue GetUserNameW RegDeleteValueW BuildExplicitAccessWithNameW SetNamedSecurityInfoW GetNamedSecurityInfoW SetEntriesInAclW RegCreateKeyW QueryServiceStatus OpenServiceW OpenSCManagerW CloseServiceHandle RegQueryValueExW RegOpenCurrentUser RegQueryInfoKeyW RegDeleteKeyW RegCreateKeyExW RegEnumKeyExW RegOpenKeyExW

shell32

SHGetFolderPathW SHGetSpecialFolderPathW SHChangeNotify SHGetPathFromIDListW SHGetSpecialFolderLocation

ole32

CreateStreamOnHGlobal CoSetProxyBlanket CoInitializeSecurity CoInitializeEx CoUninitialize CoTaskMemRealloc CoCreateInstance CoTaskMemAlloc CoTaskMemFree

oleaut32

VarUI4FromStr VariantClear VariantInit SysAllocString VariantChangeType

shlwapi

SHDeleteKeyW

imm32

ImmDisableIME

wtsapi32

WTSQuerySessionInformationW

gdiplus

GdipAlloc GdipDrawImageRectI GdipDrawImageRectRectI GdipGetImageHeight GdipGetImageWidth GdipDeleteGraphics GdipCreateFromHDC GdipSetStringFormatTrimming GdipSetStringFormatLineAlign GdipSetStringFormatAlign GdipSetStringFormatFlags GdipDeleteStringFormat GdipCreateStringFormat GdipDrawString GdipDeleteFont GdipCreateFontFromLogfontW GdipSetTextRenderingHint GdipFree GdipCreateBitmapFromFile GdipCreateBitmapFromStream GdipDisposeImage GdipCloneImage GdipCreateSolidFill GdipDeleteBrush GdipCloneBrush GdiplusShutdown GdiplusStartup

dbghelp

MiniDumpWriteDump

generic

count=16, id=241, version=40116,

count=153, id=243, version=40116,

count=31, id=242, version=40116,

count=26, id=259, version=26706,

count=78, id=261, version=26706,

count=35, id=260, version=26706,

count=5, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=359, id=1, productName=Unmarked objects,

count=33, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=43, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, productName=Unmarked objects (old),

count=1, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=149, id=265, version=27026,

count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,

count=2, id=151,

count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,

libcurl_x86.dll

IMPHASH 64d8089c328d441f097db6a50d840bc2
SHA256 635f988beb849c6510f54f681387bf810c2266bd27834c5a9c160cbfe6df44d4
MD5 a26e75c0407c87786eea42febdb32532
SHA1 27e52fdca023cb8f031cd55ac37965d93f7f7da7
SHA512 fdd9760442579ad2a3df4f31464f9e66bc19a4390fa1c81afb516cce817097b5324024f712d9c1bf1a11ad30324f5a8aa83c72a732e1197e8804ab806d3859e6
SSDEEP 49152:nGUR9r6hl8IXBPZ68L20v/SU8Y7NriOPquwgtJIpT:nGUR9r6b8IbBLjv/SUp7NriSg
TLSH
T1F0A5AE02FB8185B2E6DB427862FA677F8E3A55205328C9D3C79138749D201D2773E79E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

e2:4a:00:44:60:0c:ad:d4:00:29:36:d8:9c:d0:cf:f5:f9:10:04:90:56:4a:4e:3e:db:e4:d1:67:0b:12:3b:45

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Aug 26, 2021

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

77:59:7e:f8:fc:5f:0d:2f:b5:62:1d:bf:3b:0f:de:14:9b:43:3f:64

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Aug 26, 2021

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

06:ea:0d:de:d5:5e:c1:e1:a2:9f:c5:fb:5d:ab:4f:b2

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2020 - May 18, 2023

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

05:aa:43:30:0d:17:67:ac:12:49:43:54:21:65:bb:9e

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2020 - May 18, 2023

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

0

Major OS version

6

Entry point

1403272

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\dev\lib.vs2017\vendor\depends\curl\out\bin\Win32\release_static\pdb\libcurl_x86.pdb

ws2_32

closesocket getpeername getsockname getsockopt htons ntohs recv setsockopt socket WSASetLastError WSAIoctl getaddrinfo WSAGetLastError freeaddrinfo gethostname accept listen ioctlsocket __WSAFDIsSet select send WSAStartup WSACleanup recvfrom sendto gethostbyname bind connect shutdown htonl ntohl getservbyname

wldap32

ord145 ord301 ord147 ord133 ord79 ord142 ord167 ord127 ord27 ord26 ord118 ord41 ord208 ord216 ord14 ord46 ord219

crypt32

CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertGetCertificateContextProperty CertOpenStore

kernel32

GetCurrentDirectoryW SetCurrentDirectoryW HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW HeapFree HeapAlloc GetACP GetStringTypeW DecodePointer GetCurrentThread WaitForSingleObjectEx OutputDebugStringW OutputDebugStringA HeapSize WriteConsoleW GetProcessHeap SetEnvironmentVariableW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SleepEx MultiByteToWideChar WideCharToMultiByte WaitForSingleObject CloseHandle ExpandEnvironmentStringsA Sleep GetLastError SetLastError FormatMessageA VerSetConditionMask FreeLibrary GetProcAddress LoadLibraryW GetModuleHandleW GetSystemDirectoryW QueryPerformanceFrequency VerifyVersionInfoW WaitForMultipleObjects GetFileType GetStdHandle ReadFile PeekNamedPipe GetTickCount QueryPerformanceCounter FlushConsoleInputBuffer WriteFile GetCurrentThreadId GetModuleHandleA GetCurrentProcessId LoadLibraryA GlobalMemoryStatus GetSystemTime SystemTimeToFileTime GetConsoleCP ReadConsoleW GetModuleFileNameW GetModuleFileNameA ExitProcess SetConsoleMode ReadConsoleInputA PeekConsoleInputA SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA FindFirstFileA GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindNextFileA FindFirstFileExW FindFirstFileExA FindClose GetTimeZoneInformation SetEndOfFile SetFileAttributesW GetFileAttributesExW FlushFileBuffers GetNumberOfConsoleInputEvents SetStdHandle GetFullPathNameA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW InterlockedPushEntrySList InterlockedFlushSList RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException CreateThread ExitThread ResumeThread FreeLibraryAndExitThread GetModuleHandleExW CreateFileW GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SetFilePointerEx SetConsoleCtrlHandler GetConsoleMode GetFullPathNameW

user32

GetDC GetDesktopWindow MessageBoxA GetUserObjectInformationW GetProcessWindowStation ReleaseDC

gdi32

GetDeviceCaps GetDIBits GetObjectA DeleteObject CreateCompatibleBitmap

advapi32

RegisterEventSourceA DeregisterEventSource CryptEnumProvidersA CryptSignHashA CryptDestroyHash CryptCreateHash CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey CryptReleaseContext CryptAcquireContextA ReportEventA

curl_easy_cleanup curl_easy_duphandle curl_easy_escape curl_easy_getinfo curl_easy_init curl_easy_pause curl_easy_perform curl_easy_recv curl_easy_reset curl_easy_send curl_easy_setopt curl_easy_strerror curl_easy_unescape curl_easy_upkeep curl_escape curl_formadd curl_formfree curl_formget curl_free curl_getdate curl_getenv curl_global_cleanup curl_global_init curl_global_init_mem curl_global_sslset curl_maprintf curl_mfprintf curl_mime_addpart curl_mime_data curl_mime_data_cb curl_mime_encoder curl_mime_filedata curl_mime_filename curl_mime_free curl_mime_headers curl_mime_init curl_mime_name curl_mime_subparts curl_mime_type curl_mprintf curl_msnprintf curl_msprintf curl_multi_add_handle curl_multi_assign curl_multi_cleanup curl_multi_fdset curl_multi_info_read curl_multi_init curl_multi_perform curl_multi_remove_handle curl_multi_setopt curl_multi_socket curl_multi_socket_action curl_multi_socket_all curl_multi_strerror curl_multi_timeout curl_multi_wait curl_mvaprintf curl_mvfprintf curl_mvprintf curl_mvsnprintf curl_mvsprintf curl_pushheader_byname curl_pushheader_bynum curl_share_cleanup curl_share_init curl_share_setopt curl_share_strerror curl_slist_append curl_slist_free_all curl_strequal curl_strnequal curl_unescape curl_url curl_url_cleanup curl_url_dup curl_url_get curl_url_set curl_version curl_version_info

Sharing

General

Malware Config

Signatures

File Explorer