2026-07-05_2575e16c3870586458b38ec4a2bc3b06_elex_maze_rhadamanthys

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-05_2575e16c3870586458b38ec4a2bc3b06_elex_maze_rhadamanthys
Size 7.5MB
Sample260705-vtghxset7w
SHA256 86037a557b381a26acae7495564ad87ea897ab71324bd35de68d7ab6b2c3e2fb
MD5 2575e16c3870586458b38ec4a2bc3b06
SHA1 02c24fb772e703fce3595928b292d89c7b4a59b2
SHA512 7dbf0660fdecd08820a0959fae3109f9e0a23c86444baef45518ad784d5aee421485205e6e282b9a04f83fdff44ec96104e818fbcb13e6b8b6cd56ab57ef53f7
SSDEEP 196608:sf9VSw12FuRRfPI/KWaqbongMyGSDiV7LYrxSF:lw12FuT3qCgLo7LWO
TLSH
T1AE8633C2B558386BD8F6113B882A69F501515C3E6E08C6FBA5B47F5B3EB11E2CB16703
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Signatures

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
static1/unpack001/2345OCRConverter.dll	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
2026-07-05_2575e16c3870586458b38ec4a2bc3b06_elex_maze_rhadamanthys
unpack001/node.dll

File Explorer

2026-07-05_2575e16c3870586458b38ec4a2bc3b06_elex_maze_rhadamanthys

.exe 7.5MB
$PLUGINSDIR/FileInfo.dll

.dll 598KB
$PLUGINSDIR/RCWidgetPlugin.dll

.dll 2.5MB
$PLUGINSDIR/System.dll

.dll 27KB
$PLUGINSDIR/libcurl_x86.dll

.dll 2.1MB
2345OCRConverter.dll

.dll 2.5MB
2345OCRDumper.exe

.exe 735KB
2345OCRLoader.exe

.exe 1.2MB
2345OCRMain.exe

.exe 272KB
2345OCRUpdate.exe

.exe 1.6MB
2345PdfInfo.dll

.dll 57KB
node.dll

.dll 14.4MB

2026-07-05_2575e16c3870586458b38ec4a2bc3b06_elex_maze_rhadamanthys

IMPHASH c552a31531df962b2298e689961d15c2
SHA256 86037a557b381a26acae7495564ad87ea897ab71324bd35de68d7ab6b2c3e2fb
MD5 2575e16c3870586458b38ec4a2bc3b06
SHA1 02c24fb772e703fce3595928b292d89c7b4a59b2
SHA512 7dbf0660fdecd08820a0959fae3109f9e0a23c86444baef45518ad784d5aee421485205e6e282b9a04f83fdff44ec96104e818fbcb13e6b8b6cd56ab57ef53f7
SSDEEP 196608:sf9VSw12FuRRfPI/KWaqbongMyGSDiV7LYrxSF:lw12FuT3qCgLo7LWO
TLSH
T1AE8633C2B558386BD8F6113B882A69F501515C3E6E08C6FBA5B47F5B3EB11E2CB16703
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20368

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrlenA GetPrivateProfileStringW WritePrivateProfileStringW MoveFileW MultiByteToWideChar WideCharToMultiByte CreateFileW GetFileSize GetTickCount GetModuleFileNameW GetProcAddress GetCommandLineW SetEnvironmentVariableW WriteFile GetTempPathW SetErrorMode HeapAlloc HeapFree GetProcessHeap GetCurrentProcess GetCurrentProcessId ExitProcess GetVersion GetWindowsDirectoryW LoadLibraryW CopyFileW GetDiskFreeSpaceW CreateThread GlobalLock GlobalUnlock lstrcmpiW lstrlenW CreateDirectoryW GetTempFileNameW RemoveDirectoryW WaitForSingleObject GetExitCodeProcess CreateProcessW GetSystemDirectoryW GetModuleHandleA lstrcmpiA lstrcpyA lstrcatW MoveFileExW TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent VirtualQuery RtlUnwind IsProcessorFeaturePresent lstrcmpW FormatMessageW MulDiv LocalFree GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep GetLastError CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW lstrcpynW ExpandEnvironmentStringsW

user32

ScreenToClient GetSysColor GetWindowLongW SetClassLongW LoadCursorW SystemParametersInfoW wsprintfA DispatchMessageW PeekMessageW SetDlgItemTextW GetDlgItemTextW SetCursor CharPrevW MessageBoxIndirectW GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu CharNextA GetSystemMenu IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW RegisterClassW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW CreateDialogParamW DestroyWindow PostMessageW LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC DefWindowProcW DrawTextW BeginPaint EndPaint GetClientRect SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect SetTimer

gdi32

SetBkColor GetDeviceCaps SetTextColor SetBkMode SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW

shell32

ShellExecuteExW SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegQueryValueExW LookupPrivilegeValueW AdjustTokenPrivileges OpenProcessToken RegSetValueExW RegCreateKeyExW SetFileSecurityW RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegOpenKeyExW

comctl32

ImageList_Create ImageList_Destroy ImageList_AddMasked ord17

ole32

OleUninitialize OleInitialize CoCreateInstance CoTaskMemFree

$PLUGINSDIR/FileInfo.dll

IMPHASH d1d0851e29e04e553130ee237930c418
SHA256 b3358c218f64338e3202817d2746bd614ab677824b5a1d8ac0eb9524ee0aee9e
MD5 671d25a4169682f15e6f401700ca4842
SHA1 ff33126c5c4d49eb37b4aa164c6f96abce8aa886
SHA512 e01e2dd06f2f4214692482d1d973b31d37e07c628d79d591acc1e86b650e3334ebac0c477c03ed01e770642a45fa0880d071307d2fc34343bddec0c3075eb1cf
SSDEEP 12288:h3V/PlX393ibiQQYq7u3daLacmghCH7bg7mMRvlh4HSaMdTwUqMV7h:hlHTSk7uxcmA7JR0cTwJMV7h
TLSH
T11ED47D2071C2813AE37E06B0667DAE7A157E39601B7448C7F3C85B3E69F49D29731A27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

0c:6b:1c:3c:fd:7f:2d:e6:18:49:ed:8d:45:ec:0b:80:b2:1e:45:a1:76:c3:5a:83:52:15:d0:8d:7d:0e:ea:7c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

May 6, 2023

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

cd:2b:a8:3e:f8:38:58:ff:71:4c:c0:be:9c:37:d5:03:29:1b:44:55

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

Chains

May 6, 2023

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

Major OS version

Entry point

290081

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

kernel32

TerminateProcess WaitForSingleObject OpenProcess CreateToolhelp32Snapshot Process32NextW Process32FirstW CloseHandle GetCurrentProcessId MultiByteToWideChar GlobalAlloc GlobalFree WideCharToMultiByte lstrcpyW SetLastError GetCurrentProcess MoveFileExW WriteFile SetFilePointer CreateFileW GetFileSize GetExitCodeProcess GetProcAddress GetModuleHandleW LoadLibraryExW GetModuleFileNameW InterlockedExchange InterlockedExchangeAdd GetTickCount lstrlenW LoadLibraryW FreeLibrary OutputDebugStringW DeleteFileW GetLastError Sleep SetFileAttributesW GetFileAttributesW CreateMutexW lstrcpynW CreateProcessW WriteConsoleW SetFilePointerEx HeapSize GetConsoleMode GetConsoleCP FlushFileBuffers SetStdHandle GetTimeZoneInformation HeapReAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead FormatMessageW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount CreateEventW SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer DecodePointer CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo InitializeCriticalSection GetVersionExW LockResource LoadResource FindResourceW lstrcmpiW ResumeThread GetACP FindFirstFileW FindClose QueryDosDeviceW GetEnvironmentVariableW RaiseException GetLongPathNameW GetFileAttributesExW ReadFile SetEndOfFile GetFileSizeEx SetEvent ResetEvent HeapFree HeapAlloc LocalFree GetProcessHeap GetLogicalDriveStringsW CreateDirectoryW GetFullPathNameW GetTempPathW GetWindowsDirectoryW GetTempFileNameW ReleaseMutex RtlUnwind InterlockedFlushSList ExitProcess GetModuleHandleExW GetModuleFileNameA CreateThread ExitThread FreeLibraryAndExitThread GetStdHandle GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA

user32

wsprintfW

advapi32

SetTokenInformation AllocateAndInitializeSid OpenProcessToken FreeSid CreateProcessAsUserW GetLengthSid DuplicateTokenEx

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoTaskMemFree

$PLUGINSDIR/RCWidgetPlugin.dll

IMPHASH d5a3ce328040ba83021c44841623bca0
SHA256 295dacec4b8352402e9d25dbd1de49e429e07b9caa188b8576aa19ae25752aaa
MD5 bfedb03713c97d96eef5776bb9ad80d9
SHA1 bc80241f14cb96bb471d3ce8fe646a0e440545c9
SHA512 1afb7997a3840edb18494bd80d640846565ffd3abed84b5c6eff1bb1b2ce49c535c3e247a77bd997b58df7fda21f1f017533a531b7e0c43bf300e95a9fd1801c
SSDEEP 49152:dm+BxDiLlplWc5+TTe/yfiSvJkWYIBf9PfNC76F9pTM:dmUiLdkfiSveWYIFhN+t
TLSH
T1BAC58D10B296863BD95D02706A3D9F7F10197E350B6148D7F3D83F2E69B18D39A32A27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

08:b5:8a:29:19:0a:f3:d6:2f:c4:87:63:c6:a6:ab:08:f1:74:5c:ae:09:8d:4e:96:ba:1e:a7:2f:40:23:37:4c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91310115591679552Q,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Apr 23, 2023

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

7a:36:85:7a:50:58:06:55:55:b9:6f:94:c2:17:10:86:b8:41:63:d2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

Chains

Apr 23, 2023

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

Serial Number

06:ea:0d:de:d5:5e:c1:e1:a2:9f:c5:fb:5d:ab:4f:b2

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2020 - May 18, 2023

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

Serial Number

05:aa:43:30:0d:17:67:ac:12:49:43:54:21:65:bb:9e

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2020 - May 18, 2023

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

Major OS version

Entry point

1100591

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetModuleHandleW ExpandEnvironmentStringsW GetVersionExW InterlockedExchangeAdd GetCurrentThreadId SetLastError InterlockedExchange GlobalMemoryStatusEx GetACP GetTickCount SetEvent WaitForMultipleObjects GetFileSize DeleteFileW Sleep SetEndOfFile SetFilePointer WriteFile LocalFree GetCommandLineW CreateFileW SetErrorMode GetModuleFileNameW ReadFile lstrcatW GetFileAttributesW FindClose lstrlenW FindFirstFileW FreeLibrary GetProcAddress LoadLibraryW FindResourceW LoadResource LockResource FreeResource SizeofResource GetExitCodeProcess CreateProcessW GetCurrentProcessId CloseHandle WaitForSingleObject GetSystemInfo DeleteCriticalSection DecodePointer RaiseException GetLastError InitializeCriticalSectionAndSpinCount VirtualQuery SetThreadContext GetThreadContext lstrcpyW WideCharToMultiByte GlobalFree GlobalAlloc MultiByteToWideChar GetCurrentProcess lstrcpynW CreateToolhelp32Snapshot Thread32First Thread32Next InterlockedCompareExchange WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers SetStdHandle HeapReAlloc HeapSize GetTimeZoneInformation SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExA EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetFileType GetStdHandle GetStringTypeW FreeLibraryAndExitThread ExitThread GetModuleFileNameA ExitProcess TlsFree InterlockedFlushSList RtlUnwind LoadLibraryExA VirtualFree VirtualAlloc InterlockedPushEntrySList InterlockedPopEntrySList EncodePointer OutputDebugStringW FlushInstructionCache HeapDestroy HeapCreate OutputDebugStringA GetModuleHandleExW VirtualProtect TlsGetValue CreateThread TlsAlloc DisableThreadLibraryCalls GetModuleHandleA TlsSetValue MapViewOfFileEx CreateFileMappingW UnmapViewOfFile QueryPerformanceFrequency CreateWaitableTimerW SetWaitableTimer LocalAlloc GlobalUnlock GlobalLock MulDiv InterlockedIncrement InterlockedDecrement lstrcmpW GetFileSizeEx DeviceIoControl FormatMessageW GetLogicalDriveStringsW ReleaseMutex CreateMutexW GetTempFileNameW GetWindowsDirectoryW GetCurrentDirectoryW SetFileAttributesW GetTempPathW GetFullPathNameW CreateDirectoryW ResetEvent CreateEventW FileTimeToSystemTime QueryDosDeviceW FindNextFileW GetEnvironmentVariableW LoadLibraryExW InitializeCriticalSection LeaveCriticalSection EnterCriticalSection OpenThread SwitchToThread SuspendThread UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead lstrcmpiW GetLongPathNameW GetFileAttributesExW HeapFree OpenProcess HeapAlloc GetProcessHeap ResumeThread SetFileTime GetFileTime

user32

GetWindowLongW SetWindowPos LoadIconW CharPrevW CharNextW EndDialog SetWindowLongW SendMessageW PostMessageW UnregisterClassW wsprintfW GetActiveWindow GetClassNameW GetPropW RemovePropW GetForegroundWindow SetPropW GetAsyncKeyState GetFocus LoadStringW DestroyAcceleratorTable CreateAcceleratorTableW EnumThreadWindows PostQuitMessage RegisterWindowMessageW GetAncestor GetSysColor GetIconInfo DrawIconEx GetSystemMetrics GetDesktopWindow RegisterClassExW GetClassInfoExW LoadBitmapW LoadImageW MsgWaitForMultipleObjects FillRect UpdateLayeredWindow SetRect SetCaretPos GetMessageW CallWindowProcW DispatchMessageW TranslateMessage SetForegroundWindow AttachThreadInput SystemParametersInfoW SetRectEmpty CloseClipboard EmptyClipboard GetClipboardData SetClipboardData IsClipboardFormatAvailable UnionRect PtInRect GetClassLongW GetWindowThreadProcessId GetWindowTextLengthW AdjustWindowRectEx ShowWindowAsync GetWindow GetDC IsWindowVisible MessageBoxW MonitorFromWindow SetWindowRgn ShowWindow InvalidateRgn OpenClipboard SetTimer ToAscii GetCursorPos GetCaretBlinkTime LoadCursorW IsRectEmpty CopyRect OffsetRect IsWindow GetKeyboardState GetKeyState ReleaseDC IsIconic GetDCEx InvalidateRect GetParent IsZoomed GetClientRect SetCursor GetWindowDC IntersectRect ClientToScreen RedrawWindow CreateWindowExW EnumChildWindows EqualRect GetWindowRect DefWindowProcW DialogBoxParamW SetWindowTextW ReleaseCapture SetCapture TrackMouseEvent ScreenToClient DestroyWindow GetWindowTextW EnableWindow EndPaint BeginPaint KillTimer GetMonitorInfoW GetDlgItem SetParent SetFocus MoveWindow ValidateRect MapWindowPoints IsChild

gdi32

BitBlt CreatePolygonRgn CreateRectRgnIndirect SetWorldTransform GetStockObject SetGraphicsMode SelectObject CreateFontIndirectW CreateSolidBrush SetBkColor SetTextColor GetObjectW EnumFontsW CreateDIBSection PtInRegion CreateRoundRectRgn CreateCompatibleBitmap CreateCompatibleDC SetViewportOrgEx DeleteDC GetClipBox GetDIBits CreateDCW ExtTextOutW DeleteObject GetRgnBox GetDeviceCaps

advapi32

RegCloseKey RegQueryInfoKeyW RegDeleteKeyW RegOpenKeyExW RegDeleteValueW RegEnumKeyExW RegCreateKeyExW RegSetValueExW

shell32

ShellExecuteExW SHGetSpecialFolderPathW DragFinish DragQueryFileW CommandLineToArgvW SHBrowseForFolderW SHGetFolderPathW SHGetPathFromIDListW

ole32

CoGetClassObject OleUninitialize StringFromGUID2 CLSIDFromProgID CreateStreamOnHGlobal OleLockRunning CoTaskMemFree CoCreateInstance CoTaskMemAlloc OleInitialize CLSIDFromString CoTaskMemRealloc

oleaut32

LoadTypeLi OleCreateFontIndirect DispCallFunc VariantInit SysAllocStringLen VariantClear VarUI4FromStr SysAllocString SysStringLen SysFreeString LoadRegTypeLi

shlwapi

PathFindFileNameW PathAppendW ord12 StrToIntA StrDupW

comctl32

_TrackMouseEvent InitCommonControlsEx

msimg32

AlphaBlend

urlmon

CoInternetCreateZoneManager CoInternetCreateSecurityManager

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

imm32

ImmAssociateContextEx ImmGetCompositionStringW ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmNotifyIME

gdiplus

GdipImageGetFrameCount GdipImageGetFrameDimensionsList GdipBitmapLockBits GdipImageSelectActiveFrame GdipFree GdipDisposeImage GdipAlloc GdipCreateBitmapFromStream GdipGetPropertyItem GdipBitmapUnlockBits GdipCloneImage GdipImageGetFrameDimensionsCount GdipGetImageHeight GdipCreateBitmapFromScan0 GdipCreateBitmapFromFile GdipCloneBitmapAreaI GdipGetImagePixelFormat GdipSetStringFormatFlags GdipCloneRegion GdipGetFamilyName GdipDeleteMatrix GdipDrawImageRectRectI GdipSetStringFormatAlign GdipCreatePen1 GdipDeletePen GdipTranslateWorldTransform GdipGetFontSize GdipDeleteFont GdipDeleteStringFormat GdipDeleteGraphics ord1 GdipFillRectangleI GdipGetImageGraphicsContext GdipDeleteRegion GdipGetPropertyItemSize GdipCloneBrush GdipRestoreGraphics GdipRotateWorldTransform GdipStringFormatGetGenericTypographic GdipGetCellAscent GdipSetTextRenderingHint GdipCloneStringFormat GdipGetMatrixElements GdipGetTextureTransform GdipCreateTexture GdipBeginContainer2 GdipFillEllipse GdipCreateFromHDC GdipGetClipBoundsI GdipSetImageAttributesWrapMode GdipDrawString GdipDrawPath GdipSetClipRegion GdipCreateImageAttributes GdipDrawArcI GdipGetSmoothingMode GdipClosePathFigure GdipSetClipRectI GdipScaleWorldTransform GdipSetPixelOffsetMode GdipDrawRectangle GdipDrawLine GdipSetPenDashStyle GdipGraphicsClear GdipMultiplyWorldTransform GdipGetPathWorldBounds GdipFillPath GdipTransformRegion GdipSetStringFormatTrimming GdipGetFontStyle GdipCreateSolidFill GdipCloneBitmapArea GdipGetCellDescent GdipSetInterpolationMode GdiplusStartup GdipGetImageWidth GdipMeasureString GdipCreateHBITMAPFromBitmap GdipAddPathBezierI GdipCombineRegionPath GdipSetLinePresetBlend GdipCreateFont GdipSetStringFormatLineAlign GdipCreatePath GdipEndContainer GdipSetSmoothingMode GdipAddPathEllipseI GdipAddPathArcI GdipSetCompositingMode GdipSetTextureTransform GdipCreateMatrix GdipGetStringFormatAlign GdipDeletePath GdipDisposeImageAttributes GdipCreateMatrix2 GdipDeleteBrush GdipAddPathLineI GdipGetLineSpacing GdipSetLineWrapMode GdipCreateLineBrushI GdipDrawImageRectRect GdipSaveGraphics GdipCreateFontFamilyFromName GdipGetEmHeight GdipGetStringFormatLineAlign GdipAddPathString GdipGetTextRenderingHint GdipGetFamily GdipSetCompositingQuality GdipAddPathRectangleI GdipSetImageAttributesColorMatrix GdipGetLineTransform GdipDeleteFontFamily GdipGetInterpolationMode GdipSetLineTransform GdipGetBrushType GdipCombineRegionRegion GdipCreateRegionPath

winmm

timeGetTime

psapi

GetMappedFileNameW

$PLUGINSDIR/System.dll

IMPHASH 216ff05c01e38b13fee53b7ace6b1894
SHA256 57947a15ad3215185c7e15a5f0da393570845a13ab7b184a07fcefbf97537e48
MD5 a568feaa357f44dd50c5e447fa8ee1b2
SHA1 5c765fad342b756d5ea522087c6f7567b5f3ed57
SHA512 7c8c36c0123de839e677beeba65c1af56c5e85d8f1ff2c94950aed33e026dff3fbda8c49859012862110117977c928b814c0d91c477583a2b8f83d73f3cdf174
SSDEEP 384:ixoXlBT3SaMINWf52+4kb1VunYPLb2O1MnnDGaO5C8JN77hh+uA:iypSvIWb3Jko/MnDGxP3hoF
TLSH
T111C23B819B252CF2EAC6893931E4F5276E30F7E057D6C4E78AA984407EC17D3297C19E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

e2:2a:29:61:3d:2e:db:f3:c1:d8:06:ab:50:62:3e:3c:ce:8a:52:6d:8c:a2:53:79:ce:9c:25:cb:c3:dd:a4:98

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN

Chains

May 11, 2020

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

01:ff:77:6e:f8:da:13:72:ac:88:d1:3e:ed:4e:11:10:e9:9f:01:22

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN

Chains

May 11, 2020

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN

Serial Number

0b:d8:a6:92:ce:d9:a1:8c:53:0f:a8:5d:55:72:c0:d4

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 7, 2020 - Jun 12, 2023

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN

Serial Number

09:eb:8e:00:26:88:42:f0:dc:0c:60:43:a6:d5:61:91

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 2, 2020 - Jun 12, 2023

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

Major OS version

Entry point

7584

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/libcurl_x86.dll

IMPHASH 64d8089c328d441f097db6a50d840bc2
SHA256 635f988beb849c6510f54f681387bf810c2266bd27834c5a9c160cbfe6df44d4
MD5 a26e75c0407c87786eea42febdb32532
SHA1 27e52fdca023cb8f031cd55ac37965d93f7f7da7
SHA512 fdd9760442579ad2a3df4f31464f9e66bc19a4390fa1c81afb516cce817097b5324024f712d9c1bf1a11ad30324f5a8aa83c72a732e1197e8804ab806d3859e6
SSDEEP 49152:nGUR9r6hl8IXBPZ68L20v/SU8Y7NriOPquwgtJIpT:nGUR9r6b8IbBLjv/SUp7NriSg
TLSH
T1F0A5AE02FB8185B2E6DB427862FA677F8E3A55205328C9D3C79138749D201D2773E79E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

e2:4a:00:44:60:0c:ad:d4:00:29:36:d8:9c:d0:cf:f5:f9:10:04:90:56:4a:4e:3e:db:e4:d1:67:0b:12:3b:45

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

Aug 26, 2021

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

77:59:7e:f8:fc:5f:0d:2f:b5:62:1d:bf:3b:0f:de:14:9b:43:3f:64

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

Chains

Aug 26, 2021

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

Serial Number

06:ea:0d:de:d5:5e:c1:e1:a2:9f:c5:fb:5d:ab:4f:b2

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2020 - May 18, 2023

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Subject

Serial Number

05:aa:43:30:0d:17:67:ac:12:49:43:54:21:65:bb:9e

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 19, 2020 - May 18, 2023

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 18, 2012 - Apr 18, 2027

Minor OS version

Major OS version

Entry point

1403272

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\dev\lib.vs2017\vendor\depends\curl\out\bin\Win32\release_static\pdb\libcurl_x86.pdb

ws2_32

closesocket getpeername getsockname getsockopt htons ntohs recv setsockopt socket WSASetLastError WSAIoctl getaddrinfo WSAGetLastError freeaddrinfo gethostname accept listen ioctlsocket __WSAFDIsSet select send WSAStartup WSACleanup recvfrom sendto gethostbyname bind connect shutdown htonl ntohl getservbyname

wldap32

ord145 ord301 ord147 ord133 ord79 ord142 ord167 ord127 ord27 ord26 ord118 ord41 ord208 ord216 ord14 ord46 ord219

crypt32

CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertGetCertificateContextProperty CertOpenStore

kernel32

GetCurrentDirectoryW SetCurrentDirectoryW HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW HeapFree HeapAlloc GetACP GetStringTypeW DecodePointer GetCurrentThread WaitForSingleObjectEx OutputDebugStringW OutputDebugStringA HeapSize WriteConsoleW GetProcessHeap SetEnvironmentVariableW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SleepEx MultiByteToWideChar WideCharToMultiByte WaitForSingleObject CloseHandle ExpandEnvironmentStringsA Sleep GetLastError SetLastError FormatMessageA VerSetConditionMask FreeLibrary GetProcAddress LoadLibraryW GetModuleHandleW GetSystemDirectoryW QueryPerformanceFrequency VerifyVersionInfoW WaitForMultipleObjects GetFileType GetStdHandle ReadFile PeekNamedPipe GetTickCount QueryPerformanceCounter FlushConsoleInputBuffer WriteFile GetCurrentThreadId GetModuleHandleA GetCurrentProcessId LoadLibraryA GlobalMemoryStatus GetSystemTime SystemTimeToFileTime GetConsoleCP ReadConsoleW GetModuleFileNameW GetModuleFileNameA ExitProcess SetConsoleMode ReadConsoleInputA PeekConsoleInputA SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA FindFirstFileA GetCPInfo GetOEMCP IsValidCodePage FindNextFileW FindNextFileA FindFirstFileExW FindFirstFileExA FindClose GetTimeZoneInformation SetEndOfFile SetFileAttributesW GetFileAttributesExW FlushFileBuffers GetNumberOfConsoleInputEvents SetStdHandle GetFullPathNameA UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW InterlockedPushEntrySList InterlockedFlushSList RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException CreateThread ExitThread ResumeThread FreeLibraryAndExitThread GetModuleHandleExW CreateFileW GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SetFilePointerEx SetConsoleCtrlHandler GetConsoleMode GetFullPathNameW

user32

GetDC GetDesktopWindow MessageBoxA GetUserObjectInformationW GetProcessWindowStation ReleaseDC

gdi32

GetDeviceCaps GetDIBits GetObjectA DeleteObject CreateCompatibleBitmap

advapi32

RegisterEventSourceA DeregisterEventSource CryptEnumProvidersA CryptSignHashA CryptDestroyHash CryptCreateHash CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey CryptReleaseContext CryptAcquireContextA ReportEventA

curl_easy_cleanup curl_easy_duphandle curl_easy_escape curl_easy_getinfo curl_easy_init curl_easy_pause curl_easy_perform curl_easy_recv curl_easy_reset curl_easy_send curl_easy_setopt curl_easy_strerror curl_easy_unescape curl_easy_upkeep curl_escape curl_formadd curl_formfree curl_formget curl_free curl_getdate curl_getenv curl_global_cleanup curl_global_init curl_global_init_mem curl_global_sslset curl_maprintf curl_mfprintf curl_mime_addpart curl_mime_data curl_mime_data_cb curl_mime_encoder curl_mime_filedata curl_mime_filename curl_mime_free curl_mime_headers curl_mime_init curl_mime_name curl_mime_subparts curl_mime_type curl_mprintf curl_msnprintf curl_msprintf curl_multi_add_handle curl_multi_assign curl_multi_cleanup curl_multi_fdset curl_multi_info_read curl_multi_init curl_multi_perform curl_multi_remove_handle curl_multi_setopt curl_multi_socket curl_multi_socket_action curl_multi_socket_all curl_multi_strerror curl_multi_timeout curl_multi_wait curl_mvaprintf curl_mvfprintf curl_mvprintf curl_mvsnprintf curl_mvsprintf curl_pushheader_byname curl_pushheader_bynum curl_share_cleanup curl_share_init curl_share_setopt curl_share_strerror curl_slist_append curl_slist_free_all curl_strequal curl_strnequal curl_unescape curl_url curl_url_cleanup curl_url_dup curl_url_get curl_url_set curl_version curl_version_info

2345OCRConverter.dll

IMPHASH 01fcee89d88ebdeee02031a94d5c0558
SHA256 a7f76abf93c108899430bcbe46636d0755dd5a55c4ab7d8e05aaab2a3bbbba25
MD5 fc64fd24b47de06c888ee841e58f53a9
SHA1 7d73881f3eaec7f28929caf9453701113786a3b2
SHA512 a1df5a6918fde57b4ab7b6e0fc3f5d020d84b19593c26033798c4fbb3fd52f79a37c81ec7c6f89fe170d4da87284aa6af769bb9757e8551e550c6be45e08e57e
SSDEEP 49152:6nndQVUp9Vec9fPruD9fNDL1E6FBHqd/Tvvg6Jp6W++rGI64sr3DTw5tH7lYCyrM:6ndxwc9fPruR1DL1E6FBHqBTvY6L6W+O
TLSH
T129C55C21B656C23BD6AF01B1163D5E6E80187E75076004C7B3CC6F7A66B58E36A33E1B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Detects Windows executables referencing non-Windows User-Agents

Digest

77:77:aa:18:8f:53:03:e6:5e:ac:42:58:23:22:0f:a1:ce:9a:44:9a:5e:45:52:67:67:46:c0:6d:0b:3b:26:f1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

May 29, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

ec:aa:08:b9:aa:62:45:75:70:fe:d7:d7:dd:1a:bc:ac:f9:34:b3:f2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

Chains

May 29, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

Major OS version

Entry point

1676279

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\zhanlue\ocrconverter\bin\Win32\Release\pdb\2345OCRConverter.pdb

opencv_world451_x86

?resize@cv@@YAXABV_InputArray@1@ABV_OutputArray@1@V?$Size_@H@1@NNH@Z ?copyMakeBorder@cv@@YAXABV_InputArray@1@ABV_OutputArray@1@HHHHHABV?$Scalar_@N@1@@Z ?imread@cv@@YA?AVMat@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z ??0Mat@cv@@QAE@ABV01@ABV?$Rect_@H@1@@Z ??0Mat@cv@@QAE@HHHPAXI@Z ??0Mat@cv@@QAE@XZ ??1Mat@cv@@QAE@XZ ??4Mat@cv@@QAEAAV01@ABV01@@Z ?copyTo@Mat@cv@@QBEXABV_OutputArray@2@@Z ?warpAffine@cv@@YAXABV_InputArray@1@ABV_OutputArray@1@0V?$Size_@H@1@HHABV?$Scalar_@N@1@@Z ?release@Mat@cv@@QAEXXZ ?imwrite@cv@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV_InputArray@1@ABV?$vector@HV?$allocator@H@std@@@3@@Z ?getRotationMatrix2D_@cv@@YA?AV?$Matx@N$01$02@1@V?$Point_@M@1@NN@Z

kernel32

TerminateProcess OpenProcess GetCurrentProcessId GetVersionExW LockResource LoadResource FindResourceW GetModuleHandleW lstrcmpiW OpenFileMappingW UnmapViewOfFile CreateFileMappingW MapViewOfFile GetExitCodeProcess GetFileAttributesW lstrcatW FindNextFileW FindClose GetModuleFileNameW LoadLibraryW ReadFile WriteFile SetFileTime SetFilePointer SetEndOfFile GetFileSize GetFileTime CreateDirectoryW GetFullPathNameW RemoveDirectoryW GetTempPathW SetFileAttributesW DeleteFileW GetCurrentDirectoryW GetWindowsDirectoryW SearchPathW CopyFileW GetTempFileNameW MoveFileW HeapFree GetCurrentThreadId HeapAlloc GetProcessHeap InterlockedExchangeAdd QueryDosDeviceW GetVolumeInformationW GetDiskFreeSpaceW GetLogicalDriveStringsW FormatMessageW GetFileSizeEx InterlockedExchange SystemTimeToFileTime SetLastError GlobalMemoryStatusEx GetLocalTime GetModuleFileNameA GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle ReleaseSemaphore CreateSemaphoreW GetCurrentProcess CreateDirectoryA MulDiv VerSetConditionMask VerifyVersionInfoW FreeResource SizeofResource ExitProcess LocalFileTimeToFileTime GetFileAttributesExW ResumeThread ReleaseMutex IsDebuggerPresent UnhandledExceptionFilter IsProcessorFeaturePresent InitializeSListHead WaitForSingleObjectEx QueryPerformanceCounter FileTimeToSystemTime CreateFileW FindFirstFileW MultiByteToWideChar GetACP WritePrivateProfileStringW OpenMutexW GetPrivateProfileStringW GlobalUnlock lstrcpyW GlobalLock GlobalAlloc GetTickCount64 lstrcpynW lstrlenW CreateProcessW OutputDebugStringW ResetEvent CreateThread WaitForSingleObject GetSystemInfo InitializeCriticalSection LeaveCriticalSection EnterCriticalSection WaitForMultipleObjects GetTickCount CloseHandle SetEvent CreateEventW Sleep SetUnhandledExceptionFilter FreeLibrary LocalFree SetErrorMode GetPrivateProfileIntW GetLongPathNameW GetCommandLineW LoadLibraryExW GetProcAddress WideCharToMultiByte DeleteCriticalSection GetLastError InitializeCriticalSectionAndSpinCount CreateMutexW DeviceIoControl GetEnvironmentVariableW GetSystemTimeAsFileTime ExpandEnvironmentStringsW MoveFileExW

user32

InvalidateRgn CreateAcceleratorTableW DrawTextA wsprintfA EqualRect SetRect DrawTextW CharPrevW GetWindowRgn UpdateLayeredWindow SetWindowRgn GetCaretPos SetCaretPos ShowCaret HideCaret GetCaretBlinkTime CreateCaret TrackPopupMenu AppendMenuW EnableMenuItem DestroyMenu CreatePopupMenu MonitorFromPoint MessageBoxW InflateRect GetPropW SetPropW GetSystemMetrics GetClassInfoExW RegisterClassExW RegisterClassW CallWindowProcW DefWindowProcW GetGUIThreadInfo UnionRect GetSysColor GetUpdateRect GetFocus CharNextW IsWindowVisible CreateWindowExW DispatchMessageW TranslateMessage GetMessageW UnregisterHotKey RegisterHotKey GetMonitorInfoW MonitorFromWindow SystemParametersInfoW GetWindow GetLastActivePopup GetWindowThreadProcessId MapWindowPoints GetWindowTextLengthW GetWindowTextW SetForegroundWindow GetForegroundWindow EnableWindow AttachThreadInput wsprintfW GetActiveWindow SetActiveWindow FillRect OffsetRect CopyRect IsRectEmpty IsWindow SetWindowTextW SendMessageW OpenClipboard CloseClipboard EmptyClipboard SetClipboardData GetDesktopWindow GetParent TrackMouseEvent MoveWindow GetWindowLongW SetWindowLongW GetKeyState DestroyWindow ClientToScreen IsWindowEnabled FlashWindow IsZoomed PostQuitMessage UpdateWindow IsIconic GetWindowRect SetWindowPos ScreenToClient GetKeyboardLayout GetKeyNameTextW MapVirtualKeyExW ShowWindow LoadImageW SetTimer MessageBoxA IntersectRect SetFocus LoadCursorW SetCapture SetCursor KillTimer PtInRect ReleaseCapture InvalidateRect GetCursorPos BeginPaint EndPaint GetDC GetClientRect ReleaseDC PostMessageW

gdi32

SelectObject BitBlt SetBitmapBits GetClipBox CreateSolidBrush MoveToEx SetViewportOrgEx Rectangle CreatePen LineTo CreateDIBitmap StretchBlt CreateCompatibleBitmap CreateFontIndirectW GetDeviceCaps GetStockObject AddFontMemResourceEx CreateDIBSection RestoreDC SaveDC CloseEnhMetaFile CreateEnhMetaFileW GetEnhMetaFileHeader PlayEnhMetaFile GetTextMetricsW SetWindowOrgEx CreatePatternBrush SetBkMode SetTextColor CreateRoundRectRgn CreateRectRgn PtInRegion CombineRgn CreatePenIndirect CreateRectRgnIndirect GetCharABCWidthsW GetTextExtentPoint32W SelectClipRgn ExtSelectClipRgn SetBkColor SetStretchBltMode GetObjectA TextOutW CreateCompatibleDC DeleteDC RemoveFontMemResourceEx GetObjectW GdiFlush GetTextExtentPointA GetBitmapBits DeleteObject

comdlg32

GetOpenFileNameW

advapi32

GetUserNameW RegCreateKeyExW

shell32

ShellExecuteW CommandLineToArgvW SHBrowseForFolderW ShellExecuteExW DragQueryFileW SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetFolderPathW SHGetSpecialFolderPathW DragFinish DragAcceptFiles

ole32

OleLockRunning CLSIDFromProgID CLSIDFromString CreateStreamOnHGlobal ReleaseStgMedium OleDuplicateData DoDragDrop CoTaskMemFree CoFreeUnusedLibraries CoCreateInstance CoUninitialize CoInitialize

oleaut32

VariantClear VariantInit SysAllocString SysFreeString

msvcp140

?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z ?id@?$ctype@D@std@@2V0locale@2@A ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z ?_Xinvalid_argument@std@@YAXPBD@Z _Cnd_destroy_in_situ _Mtx_destroy_in_situ ?_Xbad_function_call@std@@YAXXZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z ??Bid@locale@std@@QAEIXZ ?always_noconv@codecvt_base@std@@QBE_NXZ ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ ?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z _Cnd_signal _Mtx_current_owns _Cnd_init_in_situ _Query_perf_frequency ?_Throw_Cpp_error@std@@YAXH@Z ?_Throw_C_error@std@@YAXH@Z _Cnd_timedwait _Mtx_lock _Mtx_init_in_situ _Cnd_do_broadcast_at_thread_exit _Cnd_destroy _Cnd_wait _Mtx_init _Thrd_start _Thrd_id _Query_perf_counter _Thrd_detach _Xtime_get_ticks _Mtx_destroy _Cnd_init _Thrd_join _Mtx_unlock ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ ?getloc@ios_base@std@@QBE?AVlocale@2@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?_Xbad_alloc@std@@YAXXZ ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Xlength_error@std@@YAXPBD@Z ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?uncaught_exception@std@@YA_NXZ ?_Xout_of_range@std@@YAXPBD@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z

shlwapi

PathIsDirectoryA StrFormatByteSizeW StrCmpLogicalW PathFileExistsW

comctl32

_TrackMouseEvent ord17 InitCommonControlsEx

msimg32

AlphaBlend

gdiplus

GdipDrawRectangleI GdipSetInterpolationMode GdipDrawPath GdipFillRectangleI GdipFillPath GdipSetTextRenderingHint GdipSetSmoothingMode GdipCreateFontFromDC GdipCreateFontFromLogfontA GdipDeleteFont GdipDrawString GdipMeasureString GdipStringFormatGetGenericTypographic GdipDeleteStringFormat GdipCloneStringFormat GdipSetStringFormatFlags GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdipDeleteGraphics GdipSetStringFormatTrimming GdipGetImageWidth GdipCreateFromHDC GdipGetImageHeight GdipImageGetFrameDimensionsCount GdipDisposeImage GdipImageGetFrameDimensionsList GdipCloneImage GdipImageGetFrameCount GdipLoadImageFromStreamICM GdipImageSelectActiveFrame GdipGetPropertyItemSize GdipLoadImageFromStream GdipGetPropertyItem GdipSetPenMode GdipDrawImageRectI GdipTranslateWorldTransform GdipRotateWorldTransform GdipDeletePen GdipCreatePen1 GdipCreateSolidFill GdipDeleteBrush GdipCloneBrush ord1 GdipAddPathLine GdipDeletePath GdipCreatePath GdipFree GdipAlloc GdiplusShutdown GdiplusStartup

imm32

ImmGetContext ImmSetCandidateWindow ImmReleaseContext ImmSetCompositionWindow

dbghelp

MiniDumpWriteDump

ws2_32

gethostname WSAStartup gethostbyname

vcruntime140

strchr strstr wcschr wcsstr __std_type_info_compare __std_exception_copy __std_exception_destroy _purecall __CxxFrameHandler3 _CxxThrowException memcpy memchr wcsrchr memmove memset __std_type_info_name __RTtypeid memcmp __RTDynamicCast _except_handler4_common __std_type_info_destroy_list

api-ms-win-crt-heap-l1-1-0

realloc _callnewh malloc free calloc

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _beginthreadex _register_onexit_function _execute_onexit_table _crt_atexit _invalid_parameter_noinfo_noreturn _cexit _initterm terminate _initterm_e _errno

api-ms-win-crt-stdio-l1-1-0

setvbuf ungetc fsetpos fread _fseeki64 _get_stream_buffer_pointers __acrt_iob_func fwrite fopen fgetc __stdio_common_vswscanf __stdio_common_vswprintf_s fclose __stdio_common_vswprintf fflush ftell ferror fputc fseek fgetpos fopen_s __stdio_common_vsprintf feof __stdio_common_vsprintf_s __stdio_common_vfprintf

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file remove _splitpath_s

api-ms-win-crt-string-l1-1-0

_wcsicmp strncmp wcslen wcscpy wcscat towupper towlower iswalnum wcsncat _wcslwr toupper tolower _stricmp _wcsupr isalnum strlen _wcsnicmp wcsncpy wcscmp strcpy strcmp wcsncmp isdigit

api-ms-win-crt-convert-l1-1-0

wcstol wcstod _wtoi strtol atoi wcstoul _itow

api-ms-win-crt-math-l1-1-0

ceil _libm_sse2_cos_precise _except1 _dtest modf _libm_sse2_pow_precise _libm_sse2_sin_precise ldexp round sqrt

api-ms-win-crt-utility-l1-1-0

abs rand srand

api-ms-win-crt-time-l1-1-0

_mktime64 _time64 _localtime64 _localtime64_s

generic

count=2, productName=Unmarked objects (old),

count=3, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=10, id=260, version=26706,

count=14, id=259, version=26706,

count=33, id=261, version=26706,

count=4, id=257, version=26706,

count=18, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=50, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=52, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,

count=12, id=261, version=27045,

count=3, id=257, version=27045,

count=736, id=1, productName=Unmarked objects,

count=227, id=265, version=27045,

count=1, id=256, version=27045,

count=1, id=255, version=27045,

count=2, id=151,

count=1, id=258, version=27045,

2345OCRDumper.exe

IMPHASH 38f4d9d45ec369bd4d669f775de3030f
SHA256 2b468c0a97c262ecdef0266392ddcc7eeea65b50b01f7e1c85c6adcad913f50e
MD5 d0e3598003e8b89d874b884fbacc65a6
SHA1 6e2b2f0eaea9f0b2b6495bdbecc48bb4bb8d4b7b
SHA512 e0466321d4a86bff3c36cb86fda52cb39aa2d9085ab18b68d34cd360f086e9e5be8331c29349ba8f8ac873589bc9c22229c523f0a3c29cc3a3593f2e87475a77
SSDEEP 12288:Wm/7WqdQI+uGGQehkJ2S1b7TBJbeD0l1iBNwkMuaVRyO8F1HuTfn4X9DRhpm:WmzWl/uGGQeaSD0lPVRE3OTfn2917m
TLSH
T176F48C207682C13BD5B215B119ACDA7B006ABD250F6508CBE3D82F6E59B85D31F32E77
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

5a:eb:15:5d:b1:6d:ab:08:6b:62:0b:f0:6c:c2:8d:35:4c:e6:04:ab:c1:54:80:91:46:f1:49:62:04:8c:c2:62

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

May 29, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

9c:28:d4:80:0d:23:bc:0c:ea:55:a5:cc:bc:2f:b3:fa:61:0a:86:ab

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

Chains

May 29, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

Major OS version

Entry point

349391

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\zhanlue\ocrconverter\bin\Win32\release_static\pdb\2345OCRDumper.pdb

kernel32

GetFileAttributesExW GetACP MultiByteToWideChar WideCharToMultiByte GetProcAddress HeapFree HeapAlloc GetProcessHeap CreateMutexW WaitForSingleObject ReleaseMutex CloseHandle OpenMutexW ReadFile WriteFile SetFilePointer SetEndOfFile GetFileSize CreateDirectoryW lstrlenW RemoveDirectoryW GetFileAttributesW SetFileAttributesW DeleteFileW MoveFileExW GetTempFileNameW MoveFileW FormatMessageW LocalFree GetLastError FreeLibrary GetCurrentThreadId GetVersionExW OpenProcess EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection LockResource LoadResource FindResourceW GetModuleHandleW lstrcmpiW GetCurrentProcess GetModuleFileNameW InterlockedExchange SetLastError InterlockedExchangeAdd GetTickCount GetCurrentProcessId LoadLibraryExW CreateFileW LoadLibraryW FindClose SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime EncodePointer DecodePointer CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter InitializeSListHead IsDebuggerPresent GetStartupInfoW UnmapViewOfFile GetFileInformationByHandle FileTimeToSystemTime GetLocalTime SystemTimeToFileTime GetFileType GetSystemTime CreateFileMappingW MapViewOfFile FileTimeToDosDateTime RtlUnwind RaiseException GetStdHandle ExitProcess GetModuleHandleExW FlushFileBuffers GetConsoleCP GetConsoleMode IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadConsoleW SetFilePointerEx GetTimeZoneInformation HeapReAlloc OutputDebugStringW FindFirstFileExW IsValidCodePage GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetStdHandle WriteConsoleW HeapSize ExpandEnvironmentStringsW LoadLibraryA lstrcatW lstrcpyW GetFileSizeEx FindNextFileW FindFirstFileW InitializeCriticalSectionAndSpinCount SetErrorMode

shell32

SHGetPathFromIDListW SHGetSpecialFolderLocation

ole32

CoTaskMemFree

imm32

ImmDisableIME

advapi32

GetUserNameW

2345OCRLoader.exe

IMPHASH cb0b2b00d44fc4338586184e9a2d54d2
SHA256 4a8799ab7eef725efdd55599a5ede698c0d41f89ccbeca53ad701802b32f5ef2
MD5 6e8d64c6eaf6f59cf1f4bfaa5db4b091
SHA1 a644a77e0873ed151198ac329d98003cea36ad9f
SHA512 9ec435f80f8f2338d9b0577c972fd852ab1f75124d26ed676ead66d4177683bbe4553c81dfb312e5e561b58704806d677ce76bfd227dae8d209c98d6e5c9e063
SSDEEP 24576:Y2/oQCQrb3m0KLoJ+9G8lkjCbfIS/TDextT+wttFB:oDQrb2TLo4AjCb/TKxtqwttFB
TLSH
T17C456B20B682C737D56640B0176CCE6E1018B9742B6248C7F3D85F6A39F1ED25B36EA7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

e1:dc:6f:4a:91:f3:76:af:c3:cd:52:1f:e7:8f:8b:f3:f4:81:91:30:6d:ed:fb:85:f1:72:9d:52:94:73:21:e1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

May 29, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

0d:29:93:8f:43:b8:0a:a6:de:4a:c8:b5:ac:77:b9:e6:44:fa:20:a9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

Chains

May 29, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

Major OS version

Entry point

693554

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\zhanlue\ocrconverter\bin\Win32\release_static\pdb\2345OCRLoader.pdb

kernel32

GetModuleFileNameW GetFileAttributesW GetTickCount EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection FindFirstFileW FindNextFileW FindClose GetLongPathNameW CreateFileW GetFileAttributesExW HeapFree GetCurrentThreadId GetVersionExW OpenProcess HeapAlloc LocalFree GetProcessHeap ReadFile WriteFile SetFileTime SetFilePointer SetEndOfFile GetFileSize GetFileTime FormatMessageW ExpandEnvironmentStringsW LoadLibraryA GetModuleHandleW InitializeCriticalSectionAndSpinCount RaiseException DecodePointer CreateEventW SetEvent ResetEvent InterlockedExchangeAdd CreateDirectoryW GetFullPathNameW lstrlenW RemoveDirectoryW GetTempPathW SetFileAttributesW DeleteFileW GetCurrentDirectoryW MoveFileExW GetTempFileNameW MoveFileW LockResource GetSystemInfo LoadResource FindResourceW lstrcmpiW QueryDosDeviceW WideCharToMultiByte lstrcatW lstrcpyW GetFileSizeEx GetLogicalDriveStringsW WaitForMultipleObjects GetCurrentProcessId InterlockedExchange SetLastError GetPrivateProfileStringW GlobalMemoryStatusEx LoadLibraryExW FreeLibraryAndExitThread ExitThread SwitchToThread MultiByteToWideChar GetACP CloseHandle GetLastError Sleep ReleaseMutex DeviceIoControl ResumeThread GetEnvironmentVariableW FileTimeToSystemTime WriteConsoleW WaitForSingleObject CreateMutexW FreeLibrary GetProcAddress LoadLibraryW SetErrorMode SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize SetStdHandle SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage GetCurrentProcess WritePrivateProfileStringW FindFirstFileExW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW OutputDebugStringW RtlUnwind EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetStdHandle ExitProcess GetModuleHandleExW GetFileType GetStringTypeW GetTimeZoneInformation CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CreateThread

user32

EnumWindows GetClassNameW SendMessageTimeoutW

advapi32

RegCloseKey RegQueryValueExW GetUserNameW RegCreateKeyExW RegOpenKeyExW RegEnumKeyExW RegDeleteKeyW RegSetValueExW RegOpenCurrentUser

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetSpecialFolderPathW SHGetFolderPathW

ole32

CoTaskMemFree CoCreateInstance

imm32

ImmDisableIME

shlwapi

SHDeleteKeyW

2345OCRMain.exe

IMPHASH 8250602237af10e69c9badea8030abf1
SHA256 864ae37bbfe6ea2b7daef8695fca4ed814135ff1fe2e6bf9e0feeb1caec24599
MD5 ab2e8402bd3a36daf7c416addd88842e
SHA1 a3c521c98c52110ab770ca0b5a252577e8d44038
SHA512 a57d67ab77c8211044059a645776ba7312c8a861e2143070233e7fc34e0343076ab37987abcaa81457b09b1c37ed21de9eb88416a6a2a708759a0b3d4add916b
SSDEEP 6144:SIIIIZlbKdjgq0vh0LDaCIMTBjHgLyCJYC4WYY5S+MwCIVBMb5lUC3cM:Emdjwvh0CCIMTdHKyNWNswCyUXUCsM
TLSH
T11854AE107659C333D76212B086EC9F7E8666BE184F7000CB63987F3A3A752D366359A7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

63:4f:1c:17:d5:3a:95:d0:6d:42:46:dd:1d:03:51:a4:b3:03:0a:74:47:78:f3:1f:8a:ef:95:83:89:ef:bb:c4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

May 29, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

3d:80:02:a3:43:d3:b0:57:bb:23:62:a8:0d:06:6b:7e:0e:bc:c2:1b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

Chains

May 29, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

Major OS version

Entry point

104172

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\zhanlue\ocrconverter\bin\Win32\Release\pdb\2345OCRMain.pdb

kernel32

ExpandEnvironmentStringsW GetPrivateProfileStringW CreateFileW GetVersionExW GetCurrentThreadId LoadLibraryW GetCurrentProcess WritePrivateProfileStringW OutputDebugStringW GetLastError GetFileAttributesW GetModuleHandleW LoadLibraryExW FormatMessageW CloseHandle WaitForSingleObject InitializeCriticalSectionAndSpinCount GetProcAddress SetFileAttributesW GetFullPathNameW CreateDirectoryW GetFileSize GetFileSizeEx DeleteFileW SetEndOfFile SetFilePointer WriteFile ReadFile lstrcpyW lstrcatW lstrlenW ReleaseMutex CreateMutexW lstrcmpiW GetProcessHeap LocalFree HeapAlloc OpenProcess HeapFree GetEnvironmentVariableW GetFileAttributesExW DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryA GetModuleFileNameW GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoTaskMemFree

msvcp140

?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z

vcruntime140

__std_exception_copy _purecall _except_handler4_common wcsstr wcschr __CxxFrameHandler3 memset _CxxThrowException memcpy memmove __std_exception_destroy

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback _c_exit _cexit _exit exit _controlfp_s terminate _invalid_parameter_noinfo_noreturn _crt_atexit _register_onexit_function _seh_filter_exe _set_app_type _configure_wide_argv _initialize_wide_environment _get_wide_winmain_command_line _initterm _initterm_e _initialize_onexit_table

api-ms-win-crt-string-l1-1-0

_stricmp wcsncpy towlower towupper _wcsicmp

api-ms-win-crt-math-l1-1-0

__setusermatherr _except1

api-ms-win-crt-heap-l1-1-0

_callnewh malloc _set_new_mode free

api-ms-win-crt-stdio-l1-1-0

_set_fmode __stdio_common_vswprintf __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-filesystem-l1-1-0

_splitpath_s

2345OCRUpdate.exe

IMPHASH bf80530d1b0734daaca957506958618c
SHA256 3aa99c2cf044b58f3227e5b011594d2a5126b7dd5be968ba14936aa134ae86da
MD5 2db2c6700ffc39eb480e75728079f5ee
SHA1 8847710dd9a9d3e0304b3ab11e70c59440301e6f
SHA512 59a01166e3d510b202b47a7d0abfccf23a1f535a7f036d7c6c1e5bff08e2510d89edb1eb45ab7487a8c4993b5f314c6ca3a8751a9ce0d4c2abe7d858dae8cee6
SSDEEP 49152:OWKAdYoJZlu/wD/zsjK1pTPIcfoHq2IM4K8:xdlHD/PFP
TLSH
T1CC756B31B657C637D5A201B15A2C8E6A805879342BA18CC7F3C40F2E69F1DD39636F6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

74:c2:f4:03:5e:b1:9d:51:1d:d8:df:8d:74:e4:6f:e5:6d:b0:af:32:2a:d6:1e:1f:55:db:0f:92:77:86:97:d1

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

May 29, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

29:2f:16:78:e6:a9:e1:4a:d7:64:7c:ea:d8:14:b0:bb:b2:16:c4:5f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

Chains

May 29, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

Major OS version

Entry point

872986

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\zhanlue\ocrconverter\bin\Win32\release_static\pdb\2345OCRUpdate.pdb

kernel32

CloseHandle QueryDosDeviceW GetCurrentProcess OpenProcess ResumeThread WaitForMultipleObjects LocalFree GetCurrentProcessId CreateProcessW GetExitCodeProcess GetFileAttributesW InitializeCriticalSection FindNextFileW FindClose ReadFile WriteFile SetFileTime SetFilePointer SetEndOfFile GetFileSize GetFileTime CreateDirectoryW GetFullPathNameW lstrlenW RemoveDirectoryW GetTempPathW SetFileAttributesW DeleteFileW GetCurrentDirectoryW GetWindowsDirectoryW MoveFileExW CopyFileW GetTempFileNameW MoveFileW HeapFree GetVersionExW GetComputerNameExW HeapAlloc GetProcessHeap GetSystemInfo GetLogicalDriveStringsW CreateEventW SetEvent ResetEvent InterlockedExchangeAdd ExpandEnvironmentStringsW LoadLibraryA lstrcatW lstrcpyW GetFileSizeEx FormatMessageW GetComputerNameW GetTickCount GetACP GlobalMemoryStatusEx InterlockedExchange DeviceIoControl GetEnvironmentVariableW GetFileAttributesExW FileTimeToSystemTime WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers SetStdHandle SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW ReleaseMutex GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage FindFirstFileExW GetTimeZoneInformation EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetStringTypeW HeapReAlloc HeapSize GetFileType GetStdHandle WideCharToMultiByte ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread TlsFree TlsSetValue TlsGetValue TlsAlloc RtlUnwind OutputDebugStringW LoadLibraryExA VirtualFree VirtualAlloc FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList CreateFileW GetLongPathNameW FindFirstFileW SetErrorMode Sleep GlobalUnlock GlobalLock GlobalFree LoadLibraryW GlobalAlloc LockResource LoadLibraryExW lstrcmpiW InterlockedIncrement GetModuleHandleW DeleteCriticalSection DecodePointer FindResourceW LoadResource RaiseException GetLastError GetPrivateProfileStringW WaitForSingleObject MultiByteToWideChar GetCurrentThreadId LeaveCriticalSection InitializeCriticalSectionAndSpinCount GetModuleFileNameW InterlockedDecrement EnterCriticalSection SetLastError WritePrivateProfileStringW SizeofResource MulDiv FreeLibrary EncodePointer InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter WaitForSingleObjectEx GetCommandLineW CreateMutexW GetProcAddress SwitchToThread

user32

RegisterClassExW CreateWindowExW SetWindowPos IsWindowVisible GetDC DestroyWindow GetWindowRect GetWindow DefWindowProcW GetWindowLongW DialogBoxParamW GetClassInfoExW TranslateMessage CharNextW PeekMessageW DispatchMessageW GetActiveWindow UnregisterClassW GetMessageW EndPaint BeginPaint IsWindow GetDlgItem GetClientRect MapWindowPoints GetMonitorInfoW SetWindowTextW EndDialog SendMessageW MonitorFromWindow PtInRect SystemParametersInfoW OffsetRect PostQuitMessage PostMessageW CallWindowProcW ReleaseDC CopyRect SetTimer FillRect AttachThreadInput IsIconic GetParent SetWindowLongW ShowWindow InvalidateRect GetLastActivePopup LoadCursorW IsRectEmpty GetForegroundWindow GetWindowThreadProcessId GetClassNameW SetForegroundWindow IsWindowEnabled

gdi32

CreateSolidBrush GetDeviceCaps BitBlt CreateCompatibleBitmap SetViewportOrgEx SelectObject CreateCompatibleDC DeleteDC DeleteObject

advapi32

RegQueryInfoKeyW RegOpenKeyExW RegSetValueExW GetUserNameW RegQueryValueExW RegOpenCurrentUser RegCloseKey RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegEnumKeyExW

shell32

SHGetFolderPathW SHGetSpecialFolderLocation SHGetSpecialFolderPathW SHGetPathFromIDListW ShellExecuteW ShellExecuteExW

ole32

CoCreateInstance CoTaskMemAlloc CoTaskMemFree CoTaskMemRealloc CreateStreamOnHGlobal

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

gdiplus

GdipDrawImageRectRectI GdipCreateBitmapFromScan0 GdipGetImageWidth GdipSetCompositingMode GdipDeleteGraphics GdipDrawImageRectRect GdiplusStartup GdiplusShutdown GdipCreateBitmapFromStream GdipCreateStringFormat GdipSetStringFormatLineAlign GdipCreateFontFromLogfontW GdipDrawString GdipSetTextRenderingHint GdipDeleteStringFormat GdipDeleteFont GdipSetStringFormatAlign GdipDrawImageRectI GdipCreateFromHDC GdipGetImageHeight GdipCloneImage GdipDeleteBrush GdipAlloc GdipDisposeImage GdipCreateSolidFill GdipCreateHBITMAPFromBitmap GdipFree GdipGetImageGraphicsContext GdipFillRectangleI

imm32

ImmDisableIME

2345PdfInfo.dll

IMPHASH 14ace861229adb270ba413fd065e71f8
SHA256 846e16de4a30c57625fe73be59da2275b8c74d63f5ae3087965589bf756cb045
MD5 fc77825e8ed64e4e212c5a3b86da694a
SHA1 251f731a7a3c3b85e88f451769da2667fa797eab
SHA512 d6b198bf14b809bb6dac43e4b4f3aa05a280fcccd63486bbf8ae870cc54b4c5dfc5e9a1e1a68de306c193910a4afb7d4c7bb89f175369f215ac40678b306d2f0
SSDEEP 1536:R0BKHUSCn712qOS3onPbtR1AbJA6Rz7HxSl97AlfIxA:R0nn71c8onPbD1AbJA6Rzgl9El1
TLSH
T1CD438E61F90014B2E95947B035DD6A3B8AB676186FD0C5C353FAC22D9F103C27A7A1EA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

f1:ed:3f:89:95:ce:e0:79:1d:70:c7:4f:b5:10:3a:7b:1d:e2:82:8a:1d:93:d0:73:4a:b8:58:cf:2c:1a:4c:92

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

May 29, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

4e:fe:d9:73:58:3d:41:05:96:b3:5f:a4:ba:32:3f:22:b0:1a:7a:e9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

Chains

May 29, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

Serial Number

0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 28, 2023 - Jul 7, 2026

Minor OS version

Major OS version

Entry point

26674

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\zhanlue\ocrconverter\bin\Win32\Release\pdb\2345PdfInfo.pdb

pdfium

FPDF_GetFileVersion FPDF_DestroyLibrary FPDF_InitLibrary FPDF_GetPageSizeByIndexF FPDF_GetPageBoundingBox FPDF_GetMetaText FPDF_GetLastError FPDFPage_GetObject FPDF_ClosePage FPDF_LoadDocument FPDF_GetPageCount FPDF_LoadPage FPDFPageObj_GetBounds FPDFFormObj_CountObjects FPDF_CloseDocument FPDFPageObj_GetType FPDFFormObj_GetObject FPDFPage_CountObjects

kernel32

FileTimeToDosDateTime MapViewOfFile CreateFileMappingW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetSystemTime GetFileType WideCharToMultiByte GetFileAttributesExA ReadFile GetCurrentProcess WriteFile SetFilePointer CreateFileW UnmapViewOfFile SystemTimeToFileTime GetFileInformationByHandle FileTimeToSystemTime CloseHandle GetLocalTime GetFileSize

msvcp140

?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z

vcruntime140

memset _except_handler4_common __std_type_info_destroy_list _CxxThrowException memmove memcpy wcsstr __CxxFrameHandler3 __std_type_info_compare __std_exception_destroy __std_terminate __std_exception_copy

api-ms-win-crt-string-l1-1-0

wcscpy_s _stricmp

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn _cexit _execute_onexit_table _initterm _initterm_e _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table

api-ms-win-crt-time-l1-1-0

_mktime64 _tzset

api-ms-win-crt-heap-l1-1-0

free malloc _callnewh

api-ms-win-crt-math-l1-1-0

ceil

node.dll

SHA256 94a19e8d17ef43e36880731a623f6ca726db49295820408b556a8a4e2e19396f
MD5 8d96459a90e0af13ea56f9d6dc15911b
SHA1 06ff7ce35ced301f2d60571481aa36c6dcc97007
SHA512 30489041a069890daba6e7e3f7809e21159a0106183a757e496417c68024f25c6f3246c5eadc5179613719633fa86a8fa09ee4bf0242989e5debf7c63a679e93
SSDEEP 196608:v3e60GAU93bPO8O5Dl6yu93A6ZOi3kK2uLk0+qp3hH5RNdPo8:v3qG79y95DW9Q6ZOi3+uhz
TLSH
T1E9E68D23E89180B9D69202F2CE7C7B7959EDAA25433955FB5F9C0C015BA0CE3773E252
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22588207

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths