d493b523efdc78f31e0f85d987e12f7734046dc2212923bbd6d766d4542b73d3
- SHA256 d493b523efdc78f31e0f85d987e12f7734046dc2212923bbd6d766d4542b73d3
Overview
overview
8Static
static
36e22a8ca94...06.exe
windows10-2004-x64
36e22a8ca94...06.exe
windows11-ltsc_2024-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...in.dll
windows10-2004-x64
3$PLUGINSDI...in.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...86.dll
windows10-2004-x64
8$PLUGINSDI...86.dll
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6e22a8ca94ad43e4c455d45ddda32106.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
6e22a8ca94ad43e4c455d45ddda32106.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FileInfo.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FileInfo.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/RCWidgetPlugin.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/RCWidgetPlugin.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
$PLUGINSDIR/libcurl_x86.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
13 signatures
150 seconds
Behavioral task
behavioral10
Sample
$PLUGINSDIR/libcurl_x86.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target d493b523efdc78f31e0f85d987e12f7734046dc2212923bbd6d766d4542b73d3
- Size 2.0MB
- Sample260803-txbleavxdv
- SHA256 d493b523efdc78f31e0f85d987e12f7734046dc2212923bbd6d766d4542b73d3
- MD5 ed958eccfc5900d7b945de67b5a89f1f
- SHA1 1dcfebd1606c5dcc04628603a3621e2e40c3f872
- SHA512 78d4ec5228d403fb7bbc0afd4763edbdc85f4cb239e1b2604d94a341ab0e53854af587f45c641759865cb521ed0294ac27a03abdf7aeca11b94661105f26320b
- SSDEEP 49152:A6AmPlsFVl8LTLtTgQd/CtJQNcs/rq+N6g4z40Q:A8lq8JkQda3ps/rTy+
- TLSH T141A53305C511DCC61D607C03F08EE9D942A6D8A2F7AE314DF19EFA839BE677688D16B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/6e22a8ca94ad43e4c455d45ddda32106 unpack002/$PLUGINSDIR/libcurl_x86.dll
File Explorer
-
d493b523efdc78f31e0f85d987e12f7734046dc2212923bbd6d766d4542b73d3.zip 2.0MB
-
6e22a8ca94ad43e4c455d45ddda32106.exe 2.0MB
-
$PLUGINSDIR/FileInfo.dll.dll 623KB
-
$PLUGINSDIR/RCWidgetPlugin.dll.dll 1.7MB
-
$PLUGINSDIR/System.dll.dll 28KB
-
$PLUGINSDIR/libcurl_x86.dll.dll 2.4MB
6e22a8ca94ad43e4c455d45ddda32106
- IMPHASH c552a31531df962b2298e689961d15c2
- SHA256 52f508609094e6d6ef6b8be1f78a7fec1ef5d4cf62e6675f87d0a9eb37a8d289
- MD5 6e22a8ca94ad43e4c455d45ddda32106
- SHA1 50f21a80daba3e9026e0a1acc3d30ce0be8a0763
- SHA512 d68a60723bd8f3dc81d353906fc1f37576cc3eab10b5ebbf100580357ae9542403e00a32d72d5991807cfb3f602d754ebd86ef4cb8130e233a30d9c356557bdf
- SSDEEP 49152:k9v0Aax3sthlQZtL9JgSldetJIjoudVSoBmywlSAW:623kQpuSloLzudVbMY
- TLSH T175A53300D501C8C7DE916832B09EA6D746769C62B75935CFE399BB83AEE17F188B1370
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
20368
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
lstrlenA
GetPrivateProfileStringW
WritePrivateProfileStringW
MoveFileW
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
GetFileSize
GetTickCount
GetModuleFileNameW
GetProcAddress
GetCommandLineW
SetEnvironmentVariableW
WriteFile
GetTempPathW
SetErrorMode
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentProcess
GetCurrentProcessId
ExitProcess
GetVersion
GetWindowsDirectoryW
LoadLibraryW
CopyFileW
GetDiskFreeSpaceW
CreateThread
GlobalLock
GlobalUnlock
lstrcmpiW
lstrlenW
CreateDirectoryW
GetTempFileNameW
RemoveDirectoryW
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetSystemDirectoryW
GetModuleHandleA
lstrcmpiA
lstrcpyA
lstrcatW
MoveFileExW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
VirtualQuery
RtlUnwind
IsProcessorFeaturePresent
lstrcmpW
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalAlloc
LoadLibraryExW
GetModuleHandleW
FreeLibrary
Sleep
GetLastError
CloseHandle
SetFileTime
SetFilePointer
SetFileAttributesW
ReadFile
GetShortPathNameW
GetFullPathNameW
GetFileAttributesW
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CompareFileTime
SearchPathW
SetCurrentDirectoryW
lstrcpynW
ExpandEnvironmentStringsW
user32
ScreenToClient
GetSysColor
GetWindowLongW
SetClassLongW
LoadCursorW
SystemParametersInfoW
wsprintfA
DispatchMessageW
PeekMessageW
SetDlgItemTextW
GetDlgItemTextW
SetCursor
CharPrevW
MessageBoxIndirectW
GetSystemMetrics
IsWindowEnabled
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
CheckDlgButton
EndDialog
DialogBoxParamW
GetWindowRect
TrackPopupMenu
AppendMenuW
EnableMenuItem
CreatePopupMenu
CharNextA
GetSystemMenu
IsWindowVisible
SetWindowPos
CreateWindowExW
GetClassInfoW
RegisterClassW
CallWindowProcW
GetMessagePos
CharNextW
ExitWindowsEx
SetWindowTextW
CreateDialogParamW
DestroyWindow
PostMessageW
LoadImageW
FindWindowExW
SetWindowLongW
InvalidateRect
ReleaseDC
GetDC
DefWindowProcW
DrawTextW
BeginPaint
EndPaint
GetClientRect
SetForegroundWindow
EnableWindow
GetDlgItem
ShowWindow
IsWindow
PostQuitMessage
SendMessageTimeoutW
SendMessageW
wsprintfW
FillRect
SetTimer
gdi32
SetBkColor
GetDeviceCaps
SetTextColor
SetBkMode
SelectObject
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
shell32
ShellExecuteExW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
SHFileOperationW
SHGetSpecialFolderLocation
advapi32
RegQueryValueExW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegSetValueExW
RegCreateKeyExW
SetFileSecurityW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegEnumValueW
RegOpenKeyExW
comctl32
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
ord17
ole32
OleUninitialize
OleInitialize
CoCreateInstance
CoTaskMemFree
Name
.text
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
173KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.ndata
Size
Virtual Size
360KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=6, id=223, productName=VS2013 build 21005, version=21005,
count=12, id=224, productName=VS2013 build 21005, version=21005,
count=2, id=206, version=65501,
count=1, id=208, version=65501,
count=15, id=203, version=65501,
count=188, id=1, productName=Unmarked objects,
count=14, id=224, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=222, productName=VS2013 UPD4 build 31101, version=31101,
$PLUGINSDIR/FileInfo.dll
- IMPHASH 2dae5ddc8cc4a16bd04573e3e7a46430
- SHA256 0ba8001ff04afdeabadfb52bc89db4f6585313c0a1311406b309ef2e02428a3a
- MD5 4f4f37a97c346570a24f0000fa072692
- SHA1 59a4ddf64b6dfd4ee80d7c30ad21cdc72974a869
- SHA512 9ee83596f5275aaf3c534b4ef87cd989c94b35a2a088409de3603ea13e1daad8714d4391de2c91b53ec46fb103666b14a8755959f39b5e535bfb9bb641223b04
- SSDEEP 12288:Jl4FHzoI6o/x/yBmNik1mFs6DBleiimZFlmOdvnz1OOtezWTQiEAE7NjOpA:JaNou/ty5m2VicvnzIJSTQiEAENz
- TLSH T121D48D1171C2C6B7E66E01702A6DADBA047D35700B7448D7F3C85B3E69B49D2A239F2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
94:40:47:95:d7:77:fc:8c:ff:7d:84:14:cb:22:bb:92:0a:c3:22:ec:90:62:e3:8b:3b:75:a7:d9:72:43:04:e6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Jun 5, 2023
SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
85:c8:f7:08:64:1a:3e:03:74:fc:aa:e0:5c:ba:4f:69:84:46:00:85
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Jun 5, 2023
SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Serial Number
0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 28, 2023 - Jul 7, 2026
Minor OS version
1
Major OS version
5
Entry point
315068
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
kernel32
TerminateProcess
WaitForSingleObject
OpenProcess
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
CloseHandle
GetCurrentProcessId
MultiByteToWideChar
GlobalAlloc
GlobalFree
WideCharToMultiByte
lstrcpyW
SetLastError
GetCurrentProcess
CreateProcessW
GetModuleFileNameW
WriteFile
SetFilePointer
CreateFileW
GetFileSize
GetTickCount
MoveFileW
FreeLibrary
GetProcAddress
LoadLibraryW
GetVersionExW
LockResource
LoadResource
FindResourceW
GetModuleHandleW
lstrcmpiW
ResumeThread
GetACP
QueryDosDeviceW
FindFirstFileW
FindNextFileW
FindClose
MoveFileExW
GetFileAttributesExW
ReleaseMutex
GetEnvironmentVariableW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CreateEventW
SetEvent
ResetEvent
InterlockedExchangeAdd
HeapFree
GetCurrentThreadId
HeapAlloc
LocalFree
GetProcessHeap
GetLogicalDriveStringsW
ReadFile
SetEndOfFile
CreateDirectoryW
GetFullPathNameW
lstrlenW
RemoveDirectoryW
GetTempPathW
GetWindowsDirectoryW
GetTempFileNameW
LoadLibraryExW
InterlockedExchange
GetFileSizeEx
DeleteFileW
GetLastError
Sleep
SetFileAttributesW
GetFileAttributesW
CreateMutexW
lstrcpynW
GetLongPathNameW
FormatMessageW
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
GetStdHandle
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
GetTimeZoneInformation
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
SetFilePointerEx
WriteConsoleW
OutputDebugStringW
user32
wsprintfW
advapi32
SetTokenInformation
AllocateAndInitializeSid
OpenProcessToken
FreeSid
CreateProcessAsUserW
GetLengthSid
DuplicateTokenEx
CheckInstallerInstance
CheckUserID_01
CheckUserID_02
CheckUserID_03
CheckUserID_04
CheckUserID_05
CheckUserID_06
CreateLowIntegrityProcess
DeleteInstallFile
EndSafeCenterConfigRequest
FindProcess
GetSafeCenterCloseReason
GetSafeCenterConfig
GetSpecialBuild
IsSafeCenterExist
IsSafeCenterOpen
IsValidUserID
KillProcess
UninstallToolFile
UninstallToolProcess
Name
.text
Size
457KB
Virtual Size
456KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
119KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, productName=Unmarked objects (old),
count=3, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,
count=16, id=241, version=40116,
count=151, id=243, version=40116,
count=30, id=242, version=40116,
count=24, id=259, version=26706,
count=60, id=261, version=26706,
count=33, id=260, version=26706,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=189, id=1, productName=Unmarked objects,
count=9, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=261, version=27032,
count=100, id=265, version=27026,
count=1, id=256, productName=VS2017 v15.9.5 build 27026, version=27026,
count=1, id=255, productName=VS2017 v15.9.5 build 27026, version=27026,
count=1, id=258, productName=VS2017 v15.9.5 build 27026, version=27026,
$PLUGINSDIR/RCWidgetPlugin.dll
- IMPHASH 56fc84f373ffcbbfb2ce78347960c82d
- SHA256 636d03c8c1d5bae2ea32ee015fe03e343573de60acbe77a3a1f1dde79e62447a
- MD5 a66ad9a302aaad22800c7c59af19ffa8
- SHA1 1356d3fe82da99ede694bc498bd20e052a856833
- SHA512 1d85952f7be198118d9b16585ed1b9cadf8c91f1cd823a6054a6209ac591f4e196e853afebeb57488cee488fd12be54a5dfa20388a03de66cee656920a2cffb3
- SSDEEP 24576:jsEQZz4Zj/3RvAUIKqNfnPTVEnTTfKXaF5zKB9DNsoU793Aos9P9qLGe/44:jsu9945n7VEnTLKXaF5zKPDaoOcre/44
- TLSH T12285AE21BA8AC137C55E02B05A3CEAAF506D26550F7004DBF7D86F6E59701D31B33AAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c2:ad:96:a8:fb:d4:5e:62:0e:60:de:f9:b2:f6:d0:d4:e9:c2:cf:d9:a4:68:d2:63:01:83:82:05:29:0a:13:20
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Jun 2, 2026
SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
3e:00:c9:3c:1b:20:5a:88:5f:cc:51:46:98:b1:49:bb:26:9a:dd:c4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Jun 2, 2026
SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Serial Number
0d:7e:f8:80:11:79:bf:12:a7:46:6f:7d:a5:b3:27:7a
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 28, 2023 - Jul 7, 2026
Minor OS version
1
Major OS version
5
Entry point
785373
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetCurrentThreadId
GlobalMemoryStatusEx
GetACP
LoadLibraryW
GetTickCount
InterlockedExchangeAdd
SetLastError
InterlockedExchange
GetPrivateProfileStringW
GetEnvironmentVariableW
LocalFree
GetCommandLineW
CreateFileW
SetErrorMode
GetModuleFileNameW
ReadFile
lstrcatW
GetFileAttributesW
FindClose
lstrlenW
FindFirstFileW
CloseHandle
WaitForSingleObject
GetCurrentProcessId
DeleteCriticalSection
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
WriteConsoleW
lstrcpyW
WideCharToMultiByte
GlobalFree
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
HeapSize
SetEnvironmentVariableA
FreeEnvironmentStringsW
GlobalAlloc
MultiByteToWideChar
lstrcpynW
GetModuleHandleW
GetProcAddress
GetVersionExW
GetCurrentProcess
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetTimeZoneInformation
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetModuleFileNameA
ExitProcess
FreeLibraryAndExitThread
ExitThread
TlsFree
InterlockedFlushSList
RtlUnwind
GetFileType
GetStdHandle
VirtualQuery
OpenThread
SetThreadContext
GetThreadContext
HeapReAlloc
CreateToolhelp32Snapshot
SuspendThread
Thread32First
Thread32Next
InterlockedCompareExchange
LoadLibraryExA
VirtualFree
VirtualAlloc
InterlockedPushEntrySList
InterlockedPopEntrySList
EncodePointer
OutputDebugStringW
FlushInstructionCache
HeapDestroy
HeapCreate
OutputDebugStringA
GetModuleHandleExW
VirtualProtect
TlsGetValue
CreateThread
TlsAlloc
DisableThreadLibraryCalls
GetModuleHandleA
TlsSetValue
MapViewOfFileEx
CreateFileMappingW
UnmapViewOfFile
QueryPerformanceFrequency
GlobalUnlock
GlobalLock
FreeResource
LocalAlloc
CreateWaitableTimerW
SetWaitableTimer
InterlockedIncrement
InterlockedDecrement
SizeofResource
lstrcmpW
MulDiv
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileSizeEx
FormatMessageW
GetLogicalDriveStringsW
ReleaseMutex
CreateMutexW
GetTempFileNameW
GetWindowsDirectoryW
DeleteFileW
SetFileAttributesW
GetTempPathW
GetFullPathNameW
CreateDirectoryW
GetFileSize
SetEndOfFile
SetFilePointer
WriteFile
ResetEvent
SetEvent
CreateEventW
LockResource
LoadResource
FindResourceW
lstrcmpiW
HeapFree
OpenProcess
HeapAlloc
GetProcessHeap
ExpandEnvironmentStringsW
ResumeThread
GetLongPathNameW
GetFileAttributesExW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
Sleep
FreeLibrary
LoadLibraryExW
FindNextFileW
QueryDosDeviceW
SwitchToThread
user32
GetWindowLongW
CreateWindowExW
IsWindow
SetFocus
EnableWindow
GetActiveWindow
LoadIconW
CharPrevW
CharNextW
PostMessageW
EndDialog
SetWindowLongW
SendMessageW
UnregisterClassW
GetPropW
RemovePropW
GetForegroundWindow
SetPropW
GetAsyncKeyState
GetFocus
LoadStringW
DestroyAcceleratorTable
CreateAcceleratorTableW
EnumThreadWindows
PostQuitMessage
RegisterWindowMessageW
GetAncestor
EmptyClipboard
SetClipboardData
GetClassInfoExW
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
GetSysColor
GetIconInfo
DrawIconEx
wsprintfW
GetKeyboardState
GetCaretBlinkTime
ToAscii
GetMessageW
CallWindowProcW
DispatchMessageW
TranslateMessage
RegisterClassExW
LoadBitmapW
LoadImageW
SetCaretPos
AttachThreadInput
SetRectEmpty
MsgWaitForMultipleObjects
FillRect
UpdateLayeredWindow
UnionRect
PtInRect
SetRect
GetWindowThreadProcessId
AdjustWindowRectEx
ShowWindowAsync
IsWindowVisible
MessageBoxW
SetWindowRgn
InvalidateRgn
OpenClipboard
IsChild
ValidateRect
SetWindowPos
GetSystemMetrics
GetWindowTextW
ReleaseDC
SetForegroundWindow
GetParent
SystemParametersInfoW
GetDesktopWindow
GetDlgItem
GetClientRect
GetClassNameW
MapWindowPoints
CopyRect
GetMonitorInfoW
ShowWindow
SetWindowTextW
MonitorFromWindow
GetDC
GetWindowRect
GetWindow
GetWindowTextLengthW
GetCursorPos
IsIconic
GetDCEx
InvalidateRect
IsZoomed
SetCursor
GetWindowDC
LoadCursorW
IntersectRect
IsRectEmpty
ClientToScreen
RedrawWindow
OffsetRect
EnumChildWindows
EqualRect
DefWindowProcW
DialogBoxParamW
KillTimer
GetClassLongW
SetTimer
ReleaseCapture
SetCapture
TrackMouseEvent
ScreenToClient
DestroyWindow
EndPaint
BeginPaint
GetKeyState
SetParent
MoveWindow
gdi32
SetViewportOrgEx
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
BitBlt
CreatePolygonRgn
CreateRectRgnIndirect
SetWorldTransform
SetGraphicsMode
CreateSolidBrush
CreateFontIndirectW
GetRgnBox
GetObjectW
EnumFontsW
PtInRegion
SetBkColor
DeleteDC
CreateRoundRectRgn
CreateDIBSection
GetClipBox
GetDIBits
CreateDCW
ExtTextOutW
GetStockObject
DeleteObject
SetTextColor
GetDeviceCaps
shell32
ShellExecuteExW
SHGetSpecialFolderPathW
DragFinish
DragQueryFileW
CommandLineToArgvW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathW
ord155
ord190
ole32
CoGetClassObject
OleUninitialize
StringFromGUID2
CLSIDFromProgID
CreateStreamOnHGlobal
OleLockRunning
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
CoCreateInstance
CLSIDFromString
CoTaskMemRealloc
oleaut32
LoadTypeLi
OleCreateFontIndirect
DispCallFunc
SysStringLen
SysAllocStringLen
VariantInit
VarUI4FromStr
LoadRegTypeLi
SysFreeString
VarBstrCmp
SysAllocString
VariantClear
shlwapi
ord12
PathFindFileNameW
StrDupW
StrToIntA
PathAppendW
comctl32
InitCommonControlsEx
_TrackMouseEvent
msimg32
AlphaBlend
urlmon
CoInternetCreateSecurityManager
CoInternetCreateZoneManager
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
imm32
ImmAssociateContextEx
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmNotifyIME
gdiplus
GdipCreateRegionPath
GdipCreateHBITMAPFromBitmap
GdipGetInterpolationMode
GdiplusStartup
GdipGetPropertyItemSize
GdipGetImageWidth
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipBitmapLockBits
GdipImageSelectActiveFrame
GdipFree
GdipDisposeImage
GdipAlloc
GdipCreateBitmapFromStream
GdipGetPropertyItem
GdipBitmapUnlockBits
GdipCloneImage
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipCloneBitmapAreaI
GdipGetImagePixelFormat
GdipSetStringFormatFlags
GdipCloneRegion
GdipGetFamilyName
GdipDeleteMatrix
GdipDrawImageRectRectI
GdipSetStringFormatAlign
GdipCreatePen1
GdipDeletePen
GdipTranslateWorldTransform
GdipGetFontSize
GdipDeleteFont
GdipDeleteStringFormat
GdipDeleteGraphics
ord1
GdipFillRectangleI
GdipGetImageGraphicsContext
GdipDeleteRegion
GdipMeasureString
GdipCloneBrush
GdipRestoreGraphics
GdipRotateWorldTransform
GdipStringFormatGetGenericTypographic
GdipGetCellAscent
GdipSetTextRenderingHint
GdipCloneStringFormat
GdipGetMatrixElements
GdipGetTextureTransform
GdipCreateTexture
GdipBeginContainer2
GdipFillEllipse
GdipCreateFromHDC
GdipGetClipBoundsI
GdipSetImageAttributesWrapMode
GdipDrawString
GdipDrawPath
GdipSetClipRegion
GdipCreateImageAttributes
GdipDrawArcI
GdipGetSmoothingMode
GdipClosePathFigure
GdipSetClipRectI
GdipScaleWorldTransform
GdipSetPixelOffsetMode
GdipDrawRectangle
GdipDrawLine
GdipSetPenDashStyle
GdipGraphicsClear
GdipMultiplyWorldTransform
GdipGetPathWorldBounds
GdipFillPath
GdipTransformRegion
GdipSetStringFormatTrimming
GdipGetFontStyle
GdipCreateSolidFill
GdipAddPathBezierI
GdipCombineRegionPath
GdipAddPathEllipseI
GdipAddPathArcI
GdipSetCompositingMode
GdipSetTextureTransform
GdipSetLineTransform
GdipCloneBitmapArea
GdipGetCellDescent
GdipSetInterpolationMode
GdipSetLinePresetBlend
GdipCreateFont
GdipSetStringFormatLineAlign
GdipCreatePath
GdipEndContainer
GdipSetSmoothingMode
GdipAddPathLineI
GdipCreateMatrix
GdipGetStringFormatAlign
GdipDeletePath
GdipDisposeImageAttributes
GdipCreateMatrix2
GdipDeleteBrush
GdipGetLineSpacing
GdipSetLineWrapMode
GdipCreateLineBrushI
GdipDrawImageRectRect
GdipSaveGraphics
GdipCreateFontFamilyFromName
GdipGetEmHeight
GdipGetStringFormatLineAlign
GdipAddPathString
GdipGetTextRenderingHint
GdipAddPathRectangleI
GdipGetFamily
GdipSetCompositingQuality
GdipSetImageAttributesColorMatrix
GdipGetLineTransform
GdipGetBrushType
GdipCombineRegionRegion
GdipDeleteFontFamily
winmm
timeGetTime
psapi
GetMappedFileNameW
advapi32
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegCloseKey
RegSetValueExW
RegDeleteValueW
RegEnumKeyExW
AddFirewallNetworkRule
BindSoftware
CheckInstall
DeleteFirewallNetworkRule
ExtractDll
GetCheckValue
GetInstDir
GetInstallVersion
Init
IsSetDefaultPdfSoftware
IsSetupSafeCenter
NeedChangDlgText
OnRepair
OnSetup
OnSetupPost
OnUninstall
PopInt
PopString
PushInt
PushString
ShowInstall
ShowUnInstall
Name
.text
Size
1000KB
Virtual Size
1000KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
254KB
Virtual Size
253KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
428KB
Virtual Size
428KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
63KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=24, id=241, version=40116,
count=165, id=243, version=40116,
count=34, id=242, version=40116,
count=2, productName=Unmarked objects (old),
count=3, id=260, productName=VS2017 v15.9.5 build 27026, version=27026,
count=29, id=259, version=26706,
count=68, id=261, version=26706,
count=33, id=260, version=26706,
count=14, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=33, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=605, id=1, productName=Unmarked objects,
count=298, id=265, version=27053,
count=1, id=256, version=27053,
count=1, id=255, version=27053,
count=1, id=151,
count=1, id=258, version=27053,
$PLUGINSDIR/System.dll
- IMPHASH 216ff05c01e38b13fee53b7ace6b1894
- SHA256 1edb0cf663ce51f11aa17dc2d8f7b7329910e7801a21e686f95bb1b8354eba78
- MD5 736012eaad895766d1a73ad1ab4ce105
- SHA1 bf0eb541bbcf097a059c4feac7da59a848288595
- SHA512 69cbc31c1392beccf0f520c1c6ab98377b5b1ad9b3d2c9c49bbf71e06bd560882a764fe2f77aa6e3600a72e7b4c48cf08a080a002dbe23b1fcb1dff2c606e933
- SSDEEP 384:RxoXlBT3SaMINWf52+4kb1V92jh1MeK6jAiDGaOcXhDgf2hMx:RypSvIWb3JjkMeKgJDGx2Uf2hMx
- TLSH T133D22A51DB901CF1FEE68A3430F4E5276E30BB916BE5C5E7D656C000AB913C3687C2AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e2:2a:29:61:3d:2e:db:f3:c1:d8:06:ab:50:62:3e:3c:ce:8a:52:6d:8c:a2:53:79:ce:9c:25:cb:c3:dd:a4:98
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN
Chains
May 11, 2020
CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
01:ff:77:6e:f8:da:13:72:ac:88:d1:3e:ed:4e:11:10:e9:9f:01:22
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN
Chains
May 11, 2020
CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN
Subject
CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN
Serial Number
0b:d8:a6:92:ce:d9:a1:8c:53:0f:a8:5d:55:72:c0:d4
Issuer
CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 7, 2020 - Jun 12, 2023
Subject
CN=DigiCert Timestamp Responder,O=DigiCert,C=US
Serial Number
03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Issuer
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 22, 2014 - Oct 22, 2024
Subject
CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 11, 2011 - Feb 10, 2026
Subject
CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2021
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=Shanghai,C=CN
Serial Number
09:eb:8e:00:26:88:42:f0:dc:0c:60:43:a6:d5:61:91
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 2, 2020 - Jun 12, 2023
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
6
Entry point
7584
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalSize
GlobalFree
lstrcpynW
lstrcpyW
GetLastError
VirtualAlloc
VirtualFree
VirtualProtect
FreeLibrary
GetModuleHandleW
GetProcAddress
lstrlenW
LoadLibraryW
MultiByteToWideChar
WideCharToMultiByte
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
926B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
68B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
700B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=223, productName=VS2013 build 21005, version=21005,
count=7, id=203, version=65501,
count=20, id=1, productName=Unmarked objects,
count=4, id=224, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=223, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=220, productName=VS2013 UPD4 build 31101, version=31101,
count=1, id=222, productName=VS2013 UPD4 build 31101, version=31101,
$PLUGINSDIR/libcurl_x86.dll
- SHA256 fe225527853d9493dfd3cf0d9169943189675951454e14c7ea69076e614b7f8e
- MD5 6a9db52369d1af61832ca0e016844a55
- SHA1 92375c66f61c43095385ad5082f62f91640e4844
- SHA512 272bf9caeca2bc68bd8977e4b37dc6ac705d9753a41c9ac53cb7f3c7336d0193922c73439be7429840ed0b651e19b3f5933bb785d318036a6f220a15ca3a8956
- SSDEEP 49152:d6SJyHTXvDYvlKVa0EuqPOX8vYwUZDeAhBFSPlm6:d6SkHTXrY2adGMvQSAhr2m6
- TLSH T1C8C59D12FF8284B2E9DB057962BB477F4E3A56245328C9D387A128B59E301D1773F389
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1890072
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
469KB
Virtual Size
469KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
79KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ