ebfff9269d209d6575512fd64730202962153d7a8a2801d1e548fdacb451dbe8

resource	yara_rule
static1/unpack001/uninstx.exe	upx

resource
ebfff9269d209d6575512fd64730202962153d7a8a2801d1e548fdacb451dbe8
unpack002/out.upx

SHA256 ebfff9269d209d6575512fd64730202962153d7a8a2801d1e548fdacb451dbe8
MD5 c7f00dc753050039aca4ce9a91429514
SHA1 f70dd032eba1500eb716fc4bc14a1a464986ee70
SHA512 ab343b277393823d597e24c478aaa6c6965b871fb4802a02105089cd08010988255cb1bf11b81ef70f4c3f4f6b1d281230ff3b17bcec785df8102bb01aeade09
SSDEEP 98304:LruBm1eteLH+nroUdSiCwwV8F6THKVtQbN1oH/s7ePFj29hn2wW/Y8vmvZNg:LreCe8UdqwwIabrq/uK2fn2wEpmZNg
TLSH
T183763380D990A174DD4A1BB02AAFE6B79B61BF285D71C39C7A3C366337374E156B7200
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13925

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

$PLUGINSDIR/AccessControl.dll

IMPHASH 50c8f5ff7efcfab29d0d699e5f7a53fe
SHA256 89ae5e9ed94c71972ddb25aeb508ee6fb8c7a39e39e775182bcdba02762e6dce
MD5 03cc5115234c4868cc8e2116ed949ca1
SHA1 9cb86d1d2c41da77fd486a128ac43afcd6b8c129
SHA512 57b1a63316192bd76f65168f07d1797f4d04b98b4a99d0e543ebee3ab4b65b8562ac3f83100c25a207c385956025c10c298ff68a17770bbf0e8b82c7b89d0c58
SSDEEP 384:udGZ2ESnTqkddTm43saIvybNyb8E9VF6IYiTPxIZHMMZknCC:uMANdTHpIvy3EpYiTPxIKMC
TLSH
T145B22C624FB80BFEF9B21A303AF8547747B6B50125A0C18F5316C95A6D217876EB8337
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

c4:68:93:90:fe:f6:7c:0f:a4:a8:35:7e:06:5a:a2:83:a0:ff:12:9e:93:70:b2:9b:eb:b9:ff:84:91:0a:47:cf

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Jul 25, 2023

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0a:3e:42:04:89:e9:95:0f:ae:01:50:30:62:54:54:c0

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2023 - Feb 7, 2026

Minor OS version

0

Major OS version

4

Entry point

14105

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/FindProcDLL.dll

IMPHASH 897a635a465959387658f10a9e5c1197
SHA256 acabf187f608858363ce88fcf64e78c09738860ce4a84952c114cf53fa81ade5
MD5 5a177de1f2e0a85e3fe15e9821747a79
SHA1 e339619f777fc21ecb731559799b7189c2a324c1
SHA512 0e8456b5b480c18300515af33a1ca665c20da4c07fa66baa7ccde9dc83dfc9fdde7e4d0ea05a3fd030e67dc96e0619c236410ed59985de9bc95654eac2b36103
SSDEEP 6144:A+WFR2dU22mRXAtS40ZxdjYHXQohL7cRJ5:Av2dmmRXAIDzxzotQRJ5
TLSH
T107548D117DC18432C2BB38346678E2B64DBCA8311D749A8F539C0A795F74582FB36A6F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

2e:0d:da:e5:63:17:6e:e9:49:cb:38:8a:5f:13:29:13:36:72:2c:11:57:03:c1:ce:39:83:54:42:d9:89:40:09

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Jul 25, 2023

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0a:3e:42:04:89:e9:95:0f:ae:01:50:30:62:54:54:c0

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2023 - Feb 7, 2026

Minor OS version

1

Major OS version

5

Entry point

6326

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\VC++个人工程\jx\pack\plugin_my\FindProc\FindProc Unicode\Release\FindProcDLL.pdb

kernel32

FreeLibrary GetProcAddress GlobalFree OpenProcess CloseHandle lstrcpyW LoadLibraryW CreateThread UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedPushEntrySList InterlockedFlushSList RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException ExitProcess GetModuleHandleExW GetModuleFileNameA GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte GetCurrentThread GetACP HeapFree HeapAlloc GetStdHandle GetFileType GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FindClose FindFirstFileExA FindFirstFileExW FindNextFileA FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetEnvironmentVariableW GetProcessHeap SetConsoleCtrlHandler GetStringTypeW SetStdHandle HeapSize HeapReAlloc WriteFile GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers DecodePointer WriteConsoleW OutputDebugStringA OutputDebugStringW WaitForSingleObjectEx CreateFileW

$PLUGINSDIR/JxNsis.dll

IMPHASH b4ce414ffbead7120795d2a84e5878d9
SHA256 6a3b8e3b628b49cbb27d399a6f78cb7dedeee171357df2d4343cd86a1b5b602e
MD5 8e6ed29b3e4e96287fbaa44fa4bfee40
SHA1 16bd961ae71e4a536d3538a6aea35613746d7bfb
SHA512 e337564c67a1b536760122534626c0e92b6f59ee56d2a4430d6c3ebc3eb750931306f93daa242d41031eed068ddbede3c6dcfea1ddc7932c27310653073170c4
SSDEEP 49152:UR9wPpoE4+deyU2fo3Yp8VXcnRdNQN09k298MQFP+AtD4wjGlpxaXJkw4wDR1TAd:UR9wBoE4+deyU2fo3Yp8VXcnRdNQN09v
TLSH
T1BBC5BF12FF4280B2E59F0234A1BB577F4D3EAA244738C9D397E519A99D301D1623E39E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

02:ea:43:a9:90:f2:bc:d8:52:b2:d4:ca:71:86:b7:60:80:e0:04:46:87:73:e6:7e:59:ad:29:62:b7:54:e6:ef

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Oct 21, 2025

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 13, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0a:3e:42:04:89:e9:95:0f:ae:01:50:30:62:54:54:c0

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2023 - Feb 7, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

155344

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

CreateSemaphoreW WaitForSingleObject GetPrivateProfileStringW WritePrivateProfileStringW GetFullPathNameW GetModuleFileNameW GetSystemDirectoryW GetTempPathW GetLongPathNameW CreateToolhelp32Snapshot Process32FirstW Process32NextW Module32FirstW Module32NextW OpenProcess QueryFullProcessImageNameW K32GetModuleFileNameExW lstrcpynW TerminateProcess DuplicateHandle GlobalAlloc GlobalFree SetThreadPriority GetExitCodeThread GetThreadPriority OutputDebugStringW GetSystemDirectoryA CreateFileA DeviceIoControl GetSystemInfo GetNativeSystemInfo SetFileAttributesW GetTickCount64 TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection SetLastError ReleaseSemaphore GetCurrentThreadId Sleep GetDriveTypeW GetDiskFreeSpaceExW GetLastError FindClose FindNextFileW UnregisterWaitEx QueryDepthSList InterlockedPopEntrySList VirtualFree VirtualProtect VirtualAlloc GetVersionExW GetModuleHandleA GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer FindFirstFileW GetCurrentProcess GetModuleHandleW GetProcAddress GetTickCount GetLocalTime FileTimeToSystemTime GetFileInformationByHandle WideCharToMultiByte SystemTimeToFileTime GetCurrentDirectoryW CloseHandle LocalFileTimeToFileTime MultiByteToWideChar CreateTimerQueueTimer GetLogicalProcessorInformation SignalObjectAndWait CreateTimerQueue WriteConsoleW HeapSize HeapReAlloc GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindFirstFileExW FlushFileBuffers GetFileSizeEx GetConsoleCP SetStdHandle GetTimeZoneInformation EnumSystemLocalesW IsValidLocale GetFileAttributesW CreateFileW SetFilePointer SetFileTime WriteFile ReadFile DisableThreadLibraryCalls CreateDirectoryW HeapFree HeapAlloc SetConsoleCtrlHandler ExitProcess FreeLibraryAndExitThread ExitThread CreateThread SystemTimeToTzSpecificLocalTime LoadLibraryExW InterlockedFlushSList InterlockedPushEntrySList RtlUnwind GetSystemTime GetModuleHandleExW ReadConsoleW ReadConsoleA SetConsoleMode GetConsoleMode PeekNamedPipe GetStdHandle GetFileType WaitForMultipleObjects ExpandEnvironmentStringsA VerifyVersionInfoW LoadLibraryW VerSetConditionMask SleepEx FormatMessageA GetStringTypeExA GetUserDefaultLCID LCMapStringA LoadLibraryA FreeLibrary SetFilePointerEx SetEndOfFile GetFileAttributesExW GetEnvironmentVariableW LocalFree GetCPInfo GetLocaleInfoW LCMapStringW CompareStringW TlsFree TlsSetValue TlsGetValue UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent InitializeCriticalSectionAndSpinCount SetEvent ResetEvent WaitForSingleObjectEx CreateEventW IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead SwitchToThread GetCurrentThread FormatMessageW EncodePointer DecodePointer RaiseException QueryPerformanceFrequency GetStringTypeW TlsAlloc

user32

SendMessageW wsprintfW GetUserObjectInformationW GetProcessWindowStation LoadStringA SendMessageTimeoutW MessageBoxW GetSystemMetrics IsWindow IsWindowVisible FindWindowExW SetDlgItemTextW InvalidateRect GetDlgItem CharLowerW

advapi32

GetLengthSid CryptSignHashW CryptDestroyHash CryptCreateHash CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam RegCloseKey RegQueryValueExW AdjustTokenPrivileges LookupPrivilegeValueW IsTextUnicode RegOpenKeyExW FreeSid CreateProcessAsUserW CryptEnumProvidersW SetTokenInformation AllocateAndInitializeSid DuplicateTokenEx OpenProcessToken DeregisterEventSource RegisterEventSourceW ReportEventW CryptAcquireContextW CryptReleaseContext CryptGenRandom CryptDestroyKey CryptSetHashParam

shell32

SHCreateDirectoryExW SHFileOperationW ShellExecuteExW ShellExecuteW

shlwapi

PathStripPathW PathIsDirectoryW PathRemoveFileSpecW PathFileExistsW

crypt32

CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertGetCertificateContextProperty CertOpenStore

ws2_32

WSASetLastError recv select bind closesocket connect getpeername getsockopt htons ntohs setsockopt WSAIoctl WSAStartup WSACleanup getaddrinfo freeaddrinfo accept listen recvfrom sendto ioctlsocket gethostname getnameinfo shutdown __WSAFDIsSet socket WSAGetLastError getsockname send

wldap32

ord167 ord127 ord208 ord46 ord27 ord145 ord216 ord142 ord79 ord133 ord147 ord301 ord14 ord26 ord118 ord219 ord41

generic

count=24, id=259, version=26213,

count=207, id=261, version=26213,

count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=577, id=260, productName=VS2017 v15.9.7 build 27027, version=27027,

count=94, id=260, version=27032,

count=3, id=261, version=27051,

count=11, id=261, productName=VS2017 v15.9.7 build 27027, version=27027,

count=6, id=199, version=41118,

count=115, id=261, version=26706,

count=36, id=260, version=26706,

count=25, id=259, version=26706,

count=26, id=260, version=26213,

count=1, id=262, version=26213,

count=25, id=257, version=26213,

count=360, id=1, productName=Unmarked objects,

count=65, id=265, version=27051,

count=1, id=256, version=27051,

count=1, id=255, version=27051,

count=1, id=151,

count=1, id=258, version=27051,

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 d4c3a23eff386c311129d582650abce1ca1e15adcef9482a303306fd3a958058
MD5 5b11192faeb214d966ae26b4bd47cc9d
SHA1 be5ef8b780d51b85aaac5932f1587e74ca05c705
SHA512 714eb5c2352637bd218b889c3ed2c564227568e9c01f0046fd096b500923f5d805e372a2a7633d5662e584b5860aad3b546fddb967fb77057d3539b6d80d1d8a
SSDEEP 384:I8PJlt70esj0Mt9vn6ay6mNyb8E9VF6IYiTPxIZHiW39bU:I+qesjRL6HEpYiTPxIL39bU
TLSH
T119A29E6386604CF2F9524D3430D4AA36AF79B6851FE081D3A39BC1416F943C77BF92A6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

e1:db:42:38:65:9a:d3:e6:f0:69:0c:6c:93:d2:ce:7b:24:c5:ee:54:02:31:49:e6:e9:27:81:dd:a3:3a:d8:7a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Jul 25, 2023

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0a:3e:42:04:89:e9:95:0f:ae:01:50:30:62:54:54:c0

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2023 - Feb 7, 2026

Minor OS version

0

Major OS version

4

Entry point

10643

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsFolderIcon.dll

IMPHASH 10c2f7d6de51319533339f369863ab0d
SHA256 8adb71b8f8dd87adeb44c873b2e75a61d4deab1637f10ae33d48454bcc641786
MD5 2f06a36c102fb5165a9260651f827d3f
SHA1 88c696026eff26bab7b89a34331b35e0269590b8
SHA512 62d23bb45825737f5e48e203606913f492dd16efcc66cd442a5b126b254ce0283edbef3915636a99b1fff6551656bb96c8984ba029be0ca4a09b3e1856d84888
SSDEEP 1536:KHjCVzTw4NQZmTynGpQmpdqfPwlUZr+HXanAOyE4gRwG9WVmg7TPxID1:qjCrNQZZCQmpY+3E14gSG8VmgfxS1
TLSH
T1FDD38C1132A0C071E09A5A395979D7729B7E74719AB488CB7BB8037E8FB03D09F7435A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

db:b7:0b:07:b6:d5:a6:37:6b:6a:fb:49:db:21:88:a6:5f:0d:ba:97:29:18:50:dd:47:84:94:cd:f7:8e:cc:1f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Jul 25, 2023

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0a:3e:42:04:89:e9:95:0f:ae:01:50:30:62:54:54:c0

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2023 - Feb 7, 2026

Minor OS version

1

Major OS version

5

Entry point

23532

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\VC++个人工程\jx\pack\plugin_my\nsFolderIcon\nsFolderIcon\Release Unicode\nsFolderIcon.pdb

kernel32

GetVersionExW GetLocalTime MultiByteToWideChar GetLastError WideCharToMultiByte Sleep GetCurrentThreadId InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection CreateFileW WriteFile CloseHandle GetModuleFileNameW TerminateThread GetCurrentProcess SuspendThread ResumeThread GlobalAlloc lstrcpynW GetWindowsDirectoryW CreateProcessW OpenProcess TerminateProcess lstrcpyW GlobalFree DisableThreadLibraryCalls SetStdHandle WriteConsoleW GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA FlushFileBuffers SetFilePointer GetConsoleMode GetConsoleCP GetStartupInfoW GetFileType SetHandleCount GetStdHandle GetModuleHandleW GetProcAddress WaitForSingleObject SetThreadPriority GetTickCount ExitProcess HeapCreate IsProcessorFeaturePresent SetLastError TlsFree TlsSetValue TlsGetValue TlsAlloc IsValidCodePage GetOEMCP GetACP IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter RaiseException InitializeCriticalSectionAndSpinCount HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap InterlockedIncrement InterlockedDecrement InterlockedExchange GetStringTypeW EncodePointer DecodePointer FormatMessageW LocalFree GetSystemTimeAsFileTime FreeLibrary LoadLibraryW GetCPInfo ExitThread CreateThread GetCommandLineA RtlUnwind LCMapStringW

user32

EnumWindows PostMessageW MessageBoxW WaitForInputIdle GetWindowThreadProcessId FindWindowW

advapi32

RegCreateKeyExW GetTokenInformation OpenProcessToken RegCloseKey

shell32

ord709

$PLUGINSDIR/setupdll.dll

IMPHASH ce1fb68b0f21dbd41c5ba20b55167d14
SHA256 e30f2d1583462e6556fcb71112adc533f7c004262e2cecf48a6921625a6f4c10
MD5 7e469cadf8f403fd07c0a29ec0b2a2da
SHA1 f95ae76a7fb8cc55540be7193e5bca2f9b17ae49
SHA512 d7ff11594a633171afe44758abe2dae229a8d88f72b1a086f28c3deb3871acf9c49bad44147ed923af00dc74c6a2595e47d1ed48bda0597666649d54201c4b6e
SSDEEP 49152:AiY1Wf/vu0J9E7od0yMHacx967Tgp9XJ23:w1au0J9UOMPx7C
TLSH
T113B5BF1275E2C035C27E03305D18B28B56BEBEB409B4D76BBBAC151CAF74C819A577A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

5c:ad:aa:c2:20:ab:33:bb:ea:91:a9:8a:ad:9b:bc:9f:42:3d:fd:5d:9f:ff:47:eb:2d:c4:d6:b1:0a:46:bd:7d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Aug 30, 2024

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0a:3e:42:04:89:e9:95:0f:ae:01:50:30:62:54:54:c0

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2023 - Feb 7, 2026

Minor OS version

0

Major OS version

6

Entry point

514549

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\NSIS\Plugins\x86-unicode\setupdll.pdb

kernel32

LoadLibraryA GetModuleHandleA GetModuleFileNameW GetModuleHandleW GetVersionExA GetLocalTime GetVersionExW MulDiv FindResourceW SizeofResource LockResource LoadResource FreeResource SetLastError lstrlenA UnmapViewOfFile MapViewOfFile CreateFileMappingW GetFileSizeEx GetFileInformationByHandle GetLastError GetStringTypeW EncodePointer DecodePointer InitializeCriticalSectionAndSpinCount GetFullPathNameW FindFirstFileW FindClose FlushInstructionCache GetCurrentProcess DeleteCriticalSection SetEndOfFile HeapSize WriteConsoleW FlushFileBuffers CreateFileW GetProcessHeap SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExA HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetTimeZoneInformation GetConsoleCP WriteFile SetFilePointerEx SetStdHandle ReadConsoleW GetConsoleMode GetFileType GetStdHandle GetACP GetModuleFileNameA GetModuleHandleExW ExitProcess ReadFile LoadLibraryExW InterlockedFlushSList RaiseException RtlUnwind InitializeSListHead GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter WaitForSingleObjectEx ResetEvent SetEvent CloseHandle GlobalUnlock GlobalLock LocalFree GetCPInfo GetLocaleInfoW LCMapStringW CompareStringW GetSystemTimeAsFileTime TlsFree TlsSetValue LeaveCriticalSection EnterCriticalSection InitializeCriticalSection HeapFree HeapAlloc HeapDestroy HeapCreate GetTickCount Sleep GetCurrentThreadId SetDllDirectoryW SetCurrentDirectoryW lstrcpyW GlobalFree GlobalAlloc MultiByteToWideChar lstrcpynW OutputDebugStringA WideCharToMultiByte LoadLibraryW GetProcAddress FreeLibrary GetDiskFreeSpaceExW TlsGetValue CreateEventW TlsAlloc SwitchToThread

user32

IsWindow CharNextW DestroyIcon GetIconInfoExW IntersectRect IsRectEmpty GetCursorPos ScreenToClient PtInRect PostMessageW SendMessageW ReleaseDC GetDC MonitorFromRect GetWindowRect SetWindowPos wsprintfW ShowWindow SystemParametersInfoW CallWindowProcW SetWindowLongW FindWindowExW IsIconic SetForegroundWindow GetForegroundWindow SetWindowTextW MoveWindow GetParent DestroyWindow SetTimer KillTimer SetCursor SetRect CopyRect InflateRect UnionRect CallMsgFilterW WaitMessage SetMenuContextHelpId GetMenuItemInfoW SetMenuInfo GetMenuInfo TrackPopupMenu AppendMenuW GetMenuItemCount DestroyMenu CreatePopupMenu IsMenu UpdateLayeredWindow MapVirtualKeyA CharLowerBuffW SystemParametersInfoA DrawTextW IsWindowVisible GetSystemMetrics GetSysColor EnableMenuItem PeekMessageW DispatchMessageW TranslateMessage GetMessageW GetDesktopWindow SetActiveWindow IsWindowEnabled EnableWindow LoadImageW CreateIconFromResource LoadBitmapW GetCaretBlinkTime GetClassNameW SetCaretPos HideCaret GetFocus CreateCaret InvalidateRect EndPaint BeginPaint UpdateWindow ReleaseCapture SetCapture GetCapture SetFocus IsZoomed SetLayeredWindowAttributes AnimateWindow PostQuitMessage TrackMouseEvent GetMonitorInfoW MonitorFromWindow GetWindow GetWindowLongW MapWindowPoints GetClientRect GetActiveWindow GetDlgItem CreateWindowExW RegisterClassExW UnregisterClassW DefWindowProcW DrawIconEx GetKeyState ClientToScreen GetIconInfo DestroyCursor LoadCursorW EqualRect OffsetRect

gdi32

GdiFlush GetViewportOrgEx GetCurrentObject SetViewportOrgEx StretchBlt SetBkMode Rectangle GetStockObject CreateSolidBrush CreateFontIndirectW SetGraphicsMode CreateRoundRectRgn EnumFontsW SelectObject DeleteDC CreateCompatibleDC CreateBitmap BitBlt GetDeviceCaps CreatePolygonRgn DeleteObject GetObjectW ExtTextOutW ExtCreateRegion GetRegionData IntersectClipRect SelectClipRgn CreateDIBSection EnumFontFamiliesExW GetCharABCWidthsW GetFontData GetGlyphOutlineW GetOutlineTextMetricsW GetFontUnicodeRanges GetGlyphIndicesW GetTextExtentPointI AddFontMemResourceEx RemoveFontMemResourceEx SetTextColor SetTextAlign GetTextMetricsW SetWorldTransform GetTextFaceW

shell32

ShellExecuteW

ole32

CreateBindCtx CLSIDFromProgID CLSIDFromString CoCreateGuid OleLockRunning OleInitialize CoCreateInstance CoTaskMemFree CreateStreamOnHGlobal IIDFromString

oleaut32

SysAllocString SysFreeString

shlwapi

StrCmpW StrToIntExW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

imm32

ImmAssociateContext ImmGetVirtualKey ImmGetContext ImmReleaseContext

gdiplus

GdipAlloc GdipFree GdiplusStartup GdiplusShutdown GdipGetImageEncoders GdipGetImageEncodersSize GdipDrawImageRectI GdipGraphicsClear GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromFile GdipCreateBitmapFromStream GdipGetPropertyItem GdipGetPropertyItemSize GdipImageSelectActiveFrame GdipImageGetFrameCount GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipSaveImageToFile GdipDisposeImage GdipCloneImage

usp10

ScriptItemize ScriptShape ScriptFreeCache

$PLUGINSDIR/uires/Translator/lang_cn.xml

SHA256 4e08f4161f5da4daf7de3b758de619e8000c0355ca865cde5782c3c0b4079634
MD5 ebcfecfa200c06c43b12c8b78948bec3
SHA1 6daf681682349af2ff98b8ab96df677d3706c56c
SHA512 c3332a98d41c4c17fb988c980518989a3926c8094b33dec83e1df8261919ec94fe7d9849dae4084107e7c3d09892c76282c9f0e40edcdedc55035e3ef785168c
SSDEEP 96:/W+M9hNKM1M1i1s1ayGygyH1a1M1Y1A1G0IF0Ip1aW01Ze1v5FY1k1Y1pC1g1Vqr:/Jih/Kg6ITF5KeeI0IF0IpIlLep5FYS/
TLSH
T124A15B8984E18C68593381037BA07585FEAC8663DA73799EF39C6A331F7082D436BF15
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/uires/Translator/lang_en.xml

SHA256 616a711cd653e580e81b4f35015325670e5b3811b196390ae27f7977ddb85b6d
MD5 592db2cf13790e6cd386e973bb26626c
SHA1 9d9c3d970ca22357329b4b7709c46e08ee4305c2
SHA512 9e07222de66fac2003e1cd6447b4f647558e85e4908e98eefc9aea52b674b66525274168ffcd647f2a51871d08e42888743498cfccdcfe5b51deb64997210c03
SSDEEP 96:/Y+M9hNKW1Q1Q1Q1b1TpytLyHyHE1C1P1F1G0Ig1TpWMT1C1v5P1v161pP1W1V9W:/nihtCyy9ZpwLkDMRbI0IgZp34p5PlAZ
TLSH
T1C6C14B8EC4E199686833820376947585FE6C8563DA33389EF29D6A330F75C2D43ABF15
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/uires/image/ani_loading.png

SHA256 8d7b60a5fdfb4e67ce5ad7bc63e0e35892c980433742a49e2fa21698513e8428
MD5 4923b4e7ffed835052cf4b031116e273
SHA1 e56707b389f49f741fba04c114c967a2ca540864
SHA512 bdbbbd48e181cdf2748402bcadb8d959b1a1f85345e441efd3972e662029b9aa47cf7ae22e104543c6c904cedbfc75668e2eebe30ae2c96dd1d7ecc285fdfbc9
SSDEEP 96:ASLNnGQ5ir1nobJm883fus6ChgI3fWxvpHW9uEXMhe+8M0BI:ASLgQu1oVm883Hx53fINW9jMM+8Mt
TLSH
T1E2A15D725F0782C2E2547EB9018992129C61B36E03AB61EF77D6803A781B885AFF430D
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/uires/image/bg_shaowBorder.png

SHA256 5f9bbdee17123c825d2f1e7551ec241dd5281978a0cbb8b5ccabeb73ef1be494
MD5 a04c04bfe16693b5ccff4b14fe5b6b6b
SHA1 a5a59df38212063b7350bc59ab580198563e492a
SHA512 d2e8723388ce433e5fedaf4aed7ff0e275c3b8ae996e68fdf908b13a2deaf25181cb882e94cbd7cb1eb3538f7c4e6a78aedc7a566dc1e34cbe8e410e8fa08c91
TLSH
T11D2160C50C0A07BE9EAD49731889F5008084DA2D3A036AE64C29B512F806B45CE7B25C
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/image/bkg_finish.png

SHA256 b1020f9fc9b9d69c2d6923c4bdc23e863214e62b66b913325a788be0d41c4fb9
MD5 97bb8b33ad1177700168b64c18aafef6
SHA1 307982969940042d8f27e0e37c3f887ce48f53a6
SHA512 47aaa825e71eead55254e89cab53be7f49f29b8fc3b01785569e24a938041651e14dd95fef42989e116b39a31311f44e0d0aed801bb6e14198864c6890fc53e7
SSDEEP 768:o1kO60Juhipl35YgnfHa5iUDgi/NVVvQhH3HVOpCfbOvM:oCO60chS5YgfH8giXVqVtfCU
TLSH
T15CF2E197FD2343D1F6778AFA06954F66BA6C01AE8C0C70BA18EC5C749C6903DC662B90
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/uires/image/bkg_install.png

SHA256 864e2557d90cfda58285ea9a738936f2fbbd01971f3850be7d8a5ba0b3d9b606
MD5 d8d1b65a374cad8bdcfd9b6724db5bea
SHA1 cb3a062e9bd08aca1410a2224998ab983d861215
SHA512 6c9a09448d0ecb324e1ef9783d71e4164793aec89cd343df903b47ba4d6f6575cd4047f87e1056b0895b556e0de66bbb9a7345cfb7024fafacd35adfa1f9e3cf
SSDEEP 3072:JIO9Pym4liiWb/+WH+WvxVR5zFIOCTNTOeUvoTOSH6p4AVNXUlycxcLgvA/9a1pv:J7P1xiwFf5zDCTNTaVfp44Xasg69a1pv
TLSH
T103041308316F809E9490E0DBF71EA620D07F187A095ABD69853FD9C5947F0E5BA0EAD3
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/uires/image/btn_browse.png

SHA256 a1eeca1097852ecd1d659b061645a2dd7862acd6c99d0081aa3b693bedd20cc5
MD5 9f3e1e9d716e4925556053fe4473760a
SHA1 aced75e00d9d164e57478c629316f595118112d7
SHA512 f808480c33acc23eed1c707107f3b7035238d1617dcc429f347f0852e5c328a31b59f4df90443f55edfcd6536649490fe009519cd0f0a92dde2053d022ed194c
TLSH
T12E216086C4060D4874AE1A74CED013FF42D536023528768DE8773B01EDB53A8AA48BDA
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/image/btn_cancel.png

SHA256 15a8ddfb6c63bb360589fc977592c0545c8a8f4baa8454dbccaddcdc1b0af700
MD5 8c16d2f2d86c49454389de60799a02c6
SHA1 5087b203a968614aaacf6dca6d9b673caf2b6121
SHA512 0e5438690a8ca3f4f8b587258205ca1bbd4c3ee904621e77e70518dbfd607507f22e23824c017e1485ca2c4557ac84f56e51e456b37b018a9f3e99ddf95c4ffa
TLSH
T14621E7F137CDA567CF4A145ED2029EF68477403549AA230C043D3B8E06C16CF7C61322
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/image/btn_close.png

SHA256 e8279e607cb84b22e13ceb5ea4ccd3794e8f97b3c6d69ec3c74e1e7e3a2487f5
MD5 889a2631c1ce1a42079dab6390387eb8
SHA1 8f5adddfbbfd059b831fee969c1cc5589325332c
SHA512 b028df27dd2ce2868f2fc1be8531b07cad92168a0d0dd1aad06715d33a8ec00ebf676c3555385940ae4a9b4c25912be7b3c174f5abc1d27d5650666ba61b2bda
TLSH
T18F01968DADF0D8A6912809F48851C17A94E3CB865001405478999628A139A94C54A967
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/image/btn_custominstall.png

SHA256 80b1233aba082938d7b6de33e4ba5aa247c3faecf47cb5e69a09937e7c77e340
MD5 2e2cf1398dfc7e0b62fc9ff17b5f2618
SHA1 14a5c26b243a6dacf2b72af333ac5d208eb1622b
SHA512 80217a01fa1df6fa23deb0bb6301cd470d05427c2a95ebd0588aef5f18cbc52b45d2b6e93b72b2bedd2dd3ab36cf053c80f9e447ccd0686b889efa9b66557a9e
TLSH
T1A821087130C8CE72EA0F42B8105585C82D13D139BE61B00B0C2DF72AC9910B7C654B70
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/image/btn_install.png

SHA256 d27f0360f543ba71555b10846196a7f6b01bdc6541337bafff373b0999a0071c
MD5 b933486b250f44822dfea24883fb7e4d
SHA1 5f1c25863b80d873c037bbc3337a8e6efc0066db
SHA512 fc256730353bb4b307a8d7efad104767e671fae24b0f3a75c5bab8f89c2258600aec2eea6686b7fa7519c20b5a137a718a551858e5e8cfd05a92d5fe918cdbc5
SSDEEP 384:iGc7Xoe75GdBpUxhZZYD3daqvaT4pZ7QLJPO3DRshXj4G+1xdz+o+sJbOedbtin:k7o85GaUD3dad4pR93twH+1zz+oLJFMn
TLSH
T1F2A2E1D8D3BCAE368070170B45B7B579DA289E8EF530CEAF815E92458F76261094D22D
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/uires/image/btn_min.png

SHA256 ae94d37ee1c572b0e1d8304e920cb28d983076bcd4448d4b5a2dbc17674dddb9
MD5 234635982b4bc205323b45b61f62347d
SHA1 19d842989705823fc73182e2e9084ffc1d00dbff
SHA512 f74cf48a24d4ef784c899b1822f417c16d92001bb66fefb9fe0d1c775d1edf88faa298e03adbf0f98131a57647e565853fc18290358b9ecabaf42892310246d7
TLSH
T1C7E0F1DAA5CE20AFCDA955A241DB275139770F0800C3BC04BD0110435949861D239233
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/image/btn_tip_close.png

SHA256 e8279e607cb84b22e13ceb5ea4ccd3794e8f97b3c6d69ec3c74e1e7e3a2487f5
MD5 889a2631c1ce1a42079dab6390387eb8
SHA1 8f5adddfbbfd059b831fee969c1cc5589325332c
SHA512 b028df27dd2ce2868f2fc1be8531b07cad92168a0d0dd1aad06715d33a8ec00ebf676c3555385940ae4a9b4c25912be7b3c174f5abc1d27d5650666ba61b2bda
TLSH
T18F01968DADF0D8A6912809F48851C17A94E3CB865001405478999628A139A94C54A967
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/image/btn_tip_normal.png

SHA256 63344069599ba08a8e8e5ae121ba3f29e28fdd2171ee10ff010eaa4c2898604a
MD5 b820d53988b35efd7042f17c279a8660
SHA1 fe33f076d1ee3f709cbeb71b01cbf75db3ece3e0
SHA512 a2033a0bf22cf3268997656dd73269d7f148d5b3e93c393954222b7694b2facaebc1cdb0e63519a9b4d11db0b1cc342254cefbb5ca12cdcbee59eaa117f9d31e
TLSH
T1800189D1FEF4F6A8C5AF1172212A6F3002330D1FD640D58AAE4BD6DA3851449AA34DD9
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/image/btn_tip_strong.png

SHA256 01e1a0e2b8a6f5412cb3245afe2d5651760de05df6bb15c6392ce2c6565a0489
MD5 8882511c666ac9c6891ab61277935841
SHA1 fe8a160297735cee4597da9106ec4adb38e00240
SHA512 c920aa1b5a352272a9123107582080e9b02632aed0109a402f8139bdcc04f623f4c0051d23f2e5a4ec4ccd85c638316fb84c6e4712f9cea7161abd1b54b983b6
SSDEEP 192:5SelChlUG7dJhVe0LzapD4YiTut8BYVZZAou1mtt3XIpUnxOcWrFgm9s32liUOh2:gelChl9X7Lex4Y6CUW3OUV+TFlpH
TLSH
T1EB62D0A718C892281267577429B23C26D7FFCBEE03FCE508B45D33D6C49034B32554A9
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/uires/image/check_box.png

SHA256 1d534102566ce1ad36b031032c83dc20c21ce417da3c062b40fae39c8b8ee4a4
MD5 64241fecdb5e9ae9d7b4ae6c93d23c6d
SHA1 62797d2bbfe4b27dd4cf393112d7ab16c98434dc
SHA512 f0a60c56c6662cfb3c538017d615ad7fdea5862294292275b3280f6e822474b8ba250c78da2d4e359bc7afc65a61dae09b52dd6185c7ea8e103e44f3740e34a9
TLSH
T12221A7EA7C0C082B945ADD29121746930A7ECA0AD58C99427E242597154D1CDE676867
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/image/logo.ico

SHA256 901bbb47f8831fb164e4e4f91590820efd7cf63cbfd1a1f77f7998617071195b
MD5 09711f9c5e3821cf474cfcf98f3ba382
SHA1 ac08c88e7f1621dceb585436a9c16fa7831f354f
SHA512 a8af1b6d80ae8fd3cbeeee3d4d59a0e630f29d54ff7d1ed6bb5c8e1d405c2bec3ed0d2bb0c985f9891120244e9302eed702e66148b850c01e56f53da303e8ec5
SSDEEP 6144:1vzLTdchv5PN2dD0IxnlC3QCvVEIzPyAW42HLReIa/u7fPtFCDahxGGyU/:1qhxF2dDjELyrB4ktqahxGGyy
TLSH
T16CA4F09661085A56C7EA2B71EB26C8B987B95F1D3D7CC21D20F47C633BBB3C75800916
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/uires/image/logo_install.ico

SHA256 dfd1231e899aece1de958042e0180aef329ab13731782b02dd85a60b8fba0207
MD5 84f92af8880b77f1c511e8814598a18c
SHA1 fb9e9e56044883968957fc9127d12f8ec533f3cb
SHA512 d035208fb49618516e8059fec12d78c33dcb0fbb2720e43faef0af58b22c1db8362666c76a61a8f1e4525df160fe59a6e9b4bccc86a6b5d26f9d32d947bd359b
SSDEEP 12288:N4cfN3a9vFmDm5rw9WlQ7u3djvWNDOcLQk2o7uFek13wexnqNtr6:N4Y5alFqmRw9WlQ7u3sxl6LpgMnqNtr6
TLSH
T172F40186E648F025CC1A2BB05CDBD5760325AE1D2E72C39D3A7D326B3773AE16673601
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/uires/image/scroll_bar2.png

SHA256 33fd455cd0c1d293f730994dcc314f5949ef7bf9fb19b6d3aa999ef490d35e2f
MD5 9c25a7906249d28622337d124aaf06e2
SHA1 24bd089da53d2028a8d33c6315b95e47ae3fda87
SHA512 935938cfc03229257a4f06d67f13f24f2d6fdde35b3c5253b58a437108ebe2ffc3bc3ff00baaab22a16c4c283e614d04d5a0ce6b441f371c553d74c2bc1142ae
TLSH
T1470188EB239CDC71A93A9761C72F40F0B95F2D2EA1A035495C110DC987A46C44169671
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/image/un_progress1.png

SHA256 6b1b1d5398f552f67bedd413fcb75ae5095efe17460bc86fdc596419ab5d0738
MD5 d926aa2426b6a53ef5d9898024b67746
SHA1 76058fce1b1e3cbf1f3ef84e5ce7ec639e2096e2
SHA512 7894f299a6206b60f61143c31f93a327e7890cc00ba8b7558d633010a2211f19a631a3afff0ba49cd48c3b8a5ed94d1257697f86d46105ccd443e0c351de5dca
TLSH
T197D023DFE155576A41EC237B00754199753B3727010634111C58A82845364D453193A6
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/image/un_progress2.png

SHA256 642ca009e784430d79d35599d990edc7a7b56b58862b4854dfe3a02f7ad45e6a
MD5 b20a03a63ec8e463515d32935d2339c0
SHA1 75b9cf07d78da4227d8c897a3c998419adcfe0d7
SHA512 90abdb52cd91253377d508b4861b6e71c1eb3b236e5dd8e115e5eb881a86227acb02ff957b3e972f78b07aa55b686f32a0328cb5c577f1afbb6fc758e8c2c04c
TLSH
T142C022C6972C383CC60E15AF13E604404A2E285C0210419968647434652B8640A0A7A2
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/image/un_progress_bg.png

SHA256 67c5ce2bae84dce1564e439dbd3c0be0fc66d29da1169a2593e2902cdf217553
MD5 c85082781b3f6fa65cd86313efc5f0ec
SHA1 5c4f86e714ec55601fa865dfa76a69c142f7a122
SHA512 61cfd649bc7e2c736ade38126787109945ab60a19888ea43db848bda9ce7129e118093058b27137470dd23c5fc9ff17691d5cf63d7b052d7ab49063df9a41edc
SSDEEP 3072:AH32imQtPsdqVsvlwc6+7RHlTP//mohBY0:AGPQtkdITmRHlj3Lh+0
TLSH
T1D8A312DEE06F4F3DB76FA61027AD9209D71399246C9466C6FE1020DCBB434D24F6A872
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/uires/rtf/agreement.rtf

SHA256 c7c26aa990d1c6468fc5dcf89909f2d08383f076c7f59c61c9ac8642d2be6bb8
MD5 3cec216107e91c76fe64934dcccc81cc
SHA1 75e6a4510ec6334b5fb7852c58a355c649042d05
SHA512 5665096c0aa55c2f2712ee5fcf91a640fc33d157d42eccacf908293ed16ce551b14154316151dcb165beb56afdd780176f9f374d893d778a68b3f5ec14e7be4b
SSDEEP 384:Q1MZCpjZ6W6TeJYQWFqhGjjNjVrtIR9CL9Ty9TAH9T2js9TwWLbVP2YQZvX57Js6:QGDzBpBOOcQkoao8yHLbbV9LKT2efv
TLSH
T153E3DE9480113789C7B3C7FAB925F0E8FD68A90AF5B814216E3F816BC46FE3DD695142
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/uires/uires.idx

SHA256 1b8981bccdb6da19d3df117c5380756c23605cbe8c814a54d7fc00d42443cdd1
MD5 0728d63cbbfec78d34dec91dbe60679a
SHA1 313bf2bbb4bb0568dd78f6e18f65e7e13078e5ba
SHA512 18c2bc4468263fdbdf2594a5eb911df5df68f4dc3fad281a12cde20b50439ae09bfff500e0f0941252a214a18658259883a0e4f196d89386c2c9bf08980abf5a
TLSH
T174417F2521903F628C8CA7EC2A2F2D673413C2AB8A6D667293CF7D3CC54744292B71C7
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/values/skin.xml

SHA256 2cdf43b8ea4f74ade5c99d98a1ed60d52fec8cc8c2a7914e5e20931105ecd7aa
MD5 196a53939a3b4051a9132ecbb6bea128
SHA1 8e316cacccff45fabf2d66316b0bdf1eb53609c6
SHA512 dd0648a3042ed3914f88c976b7c529798fd4032dc149a80a25f13472df4bed6a57aedb454a9f557fdb207d2c66afa1232df07ff63e8645e967401e90674bd2a0
TLSH
T107412502E1C7BD31473E59EC389C385976F9D1E3202C2F40B5EC7E66E22365A4867716
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/values/string.xml

SHA256 e73799644c3b72bdbee7850e43c2b1c3a163bcdcb5c71c145515cbe70cd5692a
MD5 13574f2e2be5fbca4b3b115354840dd3
SHA1 2acc392061cb0659c5a95f9e4735b8c8cd4f4499
SHA512 19be299ba7fbf87beca58fd6510e2d9da70ce0ce34e6f68fcde856ff2d04aa07df2be5c558d40d86e2dd6a42f2f1090b450b196b18acb2c0164102b87d1ea014
TLSH
T17CD017483A549C2A5FB60D846E900CCA232CA249E0980CE4E4A95D520EEA80951B381E
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/values/style.xml

SHA256 3f1e6ecb42ae90e0558c8af59d127a4e2ded635742c52068549447a00ba0b79c
MD5 cadfed8b629cfdc360939cf9f1a4a0e8
SHA1 d2b126f48236442edebbb245ad001e97cfa9b599
SHA512 a514c8094ba75468310d0554cbf6e895d5226ad5a11f3f332262a9f09a25357a77472a661808eb9c604de665ae43cc5fcbdb1e1116f419dfd390d2c57257efb6
TLSH
T1B6210646D7495E235E33AC293362ED1E9334A1E7869C1F0CFDD5740DB8D6863814B532
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/xml/dlg_main.xml

SHA256 b445b3ab7e30586fdae562e54864a6c09ced2745a562660f01f3ebdddd6eda2a
MD5 a9606047fc2363cda2e73e7934ca58b7
SHA1 8104043a1b2981a124d89c47253a523b49ad97e2
SHA512 73c5b3f3cbe5d917276bcac97a968dd28727f5927534b705c8a48f01690f8d2bcb12687f7c7de6cde539afb75b14c1f59e938b8a528a3575860bcfa15917c6d2
TLSH
T13221CC4096ACEE384C210EFD32F98288465F1E731BB4A1D1F0771341D7049EAF94BABA
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/xml/dlg_tip.xml

SHA256 2ea58163c3335b74949b9771befdc6348528e92716bd1a1994339c38ceec03f2
MD5 9c66cbc3748dc4bc39fe6ce0b6b33b2e
SHA1 c2cf897fadc9402693494cdf03a7887886d299e8
SHA512 b7278768d7973ae0a73e42035a46cc2490e7adde030aad3589d66344eb0c6f8649b5f80a7b78027c4f5f5a01da4325ffbad833b86a4908bd8e71553ef6a0d1cf
TLSH
T17451DA02AA943E324573A4647BCEAD8A7F9090D7972C194CF6EDBD582F85D23440A3A9
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/xml/init.xml

SHA256 f6ffda64cc4695d2077ff00d6083923f3760f4a0b6398f947e31abea76561d3f
MD5 802ce33f69e1921ea3890de54d8f7798
SHA1 436e47a963ff5c699bf28fc2df7944212947318a
SHA512 90faf20f9d2969eb5297130fbbd90c4fd01b8952da9eb24689179d8a958f3a6d036c1e146f7aad58a1afc41ce76a2392014052a773456cf9ba4a2079f07df5c6
TLSH
T194F04610F3D86433C906E58129D0EE18BAA0FACF63908050A8BB8DE48F45CA900471E1
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/xml/page_agreement.xml

SHA256 bfe32b51869577146a0314308c4726aa822228c30ecc8e584b97b2550cf790b9
MD5 1ab6e2e4504f88d87bc4a3a60e53889e
SHA1 8aa8769544db71f53719ee47ea104ba6e95946c0
SHA512 19f5860c0436e6311bd4c38d4e758eb44cb49bd91d6902861ca772920ff696ff8e9ca6425a2589eca1ebd9bdb17a267beec15f0934cc19b619ccaa454d215272
TLSH
T1C711442114983D3506BB22E40B45A6C002FAF7A72105104895F79E940A14EE3D916271
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/xml/page_choose.xml

SHA256 396cf41c24614161dda460e2fa2b693aed8268a26bad8d9d35b464118b14b8d7
MD5 3a1be361cbd8689a05deb5efad45ac61
SHA1 38f80d98c8da776bf7419c2f431254920c25791a
SHA512 c48e592345676c9ae736188cfc12fb118dd2bec108137dd98859cf501fa3c5e3c30fc8112c2a16fb66e5c030b49cd097e066ce0fb5a7a87969b9731f68215416
TLSH
T1E34110139664EE368A3358A40351EDD40BB4B3DB4B46AA58FCEFA4083F45DB3430F169
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/xml/page_finish.xml

SHA256 dd57c5b787e5c3a917dc9bb0e29b9404273405e353a4684504487815ff044c6f
MD5 1be5b89a8642c0ab949060ee27e5e7ea
SHA1 00352af57eb9b31a81cba91df801b91310d7f503
SHA512 ee11020de531b7aba9eb67f2d72098cbd254223be6309c3004dce04aec09ba973f8b56dd763ff9ba44c912741fe97e106295ea22e5e8c49dbccb4cfa19a4940d
TLSH
T1A7F0680131593E314D9730D00394B5C001FAF3BA1209B0D460FB69854F06ED1C627132
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/xml/page_installing.xml

SHA256 bdef78e1dad28ece5c23e8b4c781e41f2802d38d24baac4487cac847132d02f4
MD5 4f56242e8c8d3165044c31ae88565cbf
SHA1 510982b8fd7de5130dc708939d5a14e242e00834
SHA512 71eb612c143272d72f1a05b589a4b1a2bb591bdf47bdbe9a0006cf57e0dd334fe60b4c8820e927a99e6799d34b80107ec68e4322dba31d09f2d2d7e19c048fe3
TLSH
T13E4123010D58BD3A6A1269F406F6DCC00AFF7CDA1A25A6D4F9DB2C56EF444A2CE0E176
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/xml/page_unstalling.xml

SHA256 3e3683ef98e4275795f8f418b5240df677997154349283d170676a530c959c98
MD5 0ad950257a554ed2908a975321a59a59
SHA1 7b4813c99c22ee4ad6a4a322ddcab28088905323
SHA512 1087d63d5f2e3f4f301784c0e8a160672087f01e1bc44b02fd48b2928ffd9f5e9ecaaf8334e8515230b819afd72942475129c09119427af1b43ca6d0fc3b8c01
TLSH
T16DF05C02C6B46D71B0638D5C53A1E6450BB8604B832BE208FF9A1646EF02E135F5BFCC
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/uires/xml/page_welcome.xml

SHA256 834785bac208f32740258e73dba62ba5762dd20aaa7569327ab942b6bd5289a2
MD5 a7eeaddb1dde16b8caceb41f47f04662
SHA1 b327fcb79a1412e25ea2cfd62e71d498bd609bf2
SHA512 9403a8bb7a9c224c8ffcf3e76a7e1909ba09542d2f577ad36313f9758175d4e4e7435d2df170793d58eef20ee08ea5d5ff5c46967346a26bd8865c9e4ccbed25
TLSH
T10C21DD1221103F361E5765980746EEC005FB63BA434DE584A6FAA94E0F0AE93972F127
MD5 SHA1 SHA512 TLSH

config.ini

SHA256 464e9f901054182e4bdef1a74dd6f5400c4f90e0f91e2f2cef238b173a2fe054
MD5 88c4df1e80d0014f50fe681c872a76f8
SHA1 73b315e64a7a753638d20c7fd169eba230ecfa3b
SHA512 46fb5b90943403287213c9a4c4d8d2b965f5bb84aff6f622954b7d263b7a27fd86919b38e1f913762a26b92ddef83a1bb8bdf81c2ecf93aa5eae502c7ec6a97c
TLSH
T1E9C09267B3C80005F2F60E67E8F000B12B097993082E842C89C483942CEAF05D9230CB
MD5 SHA1 SHA512 TLSH

uninstx.exe

SHA256 920a92aed5b0f19e14151760f3d46ac3913bab5816460c505b6e406962fd62af
MD5 514cc49e0f90b91eb93ee00b75871ec4
SHA1 70061f7d626d3de28b9f60676e86133d942f40e1
SHA512 b07a7adbe0d58356fbe3a0ba5492a6bd125757b54e7b9d01f93185d2c3fe00a7ff0409d6bde3dfb5a6ac26c2cb7e4ac5ec7436f75db38c17ac578350881fca96
SSDEEP 98304:xbuBmgQc5Ox4rYHHzSQM0WmQwi02h1GU+nYJ6lEckz/8:xbvwS4rYHHzSQ1DQKQJ2EcV
TLSH
T126163316E758F420C89F66B06CEBC1395265EE182DB2C26CF67C352B3F739E156B2502
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx

Digest

a8:e2:bf:90:c6:a2:6a:64:a6:45:83:22:15:99:99:d0:9f:41:ef:ec:f5:98:a5:c6:36:1b:a7:4e:e8:ba:f8:29

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Nov 6, 2025

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0a:3e:42:04:89:e9:95:0f:ae:01:50:30:62:54:54:c0

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2023 - Feb 7, 2026

Minor OS version

0

Major OS version

4

Entry point

2281728

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

$PLUGINSDIR/AccessControl.dll

IMPHASH 50c8f5ff7efcfab29d0d699e5f7a53fe
SHA256 89ae5e9ed94c71972ddb25aeb508ee6fb8c7a39e39e775182bcdba02762e6dce
MD5 03cc5115234c4868cc8e2116ed949ca1
SHA1 9cb86d1d2c41da77fd486a128ac43afcd6b8c129
SHA512 57b1a63316192bd76f65168f07d1797f4d04b98b4a99d0e543ebee3ab4b65b8562ac3f83100c25a207c385956025c10c298ff68a17770bbf0e8b82c7b89d0c58
SSDEEP 384:udGZ2ESnTqkddTm43saIvybNyb8E9VF6IYiTPxIZHMMZknCC:uMANdTHpIvy3EpYiTPxIKMC
TLSH
T145B22C624FB80BFEF9B21A303AF8547747B6B50125A0C18F5316C95A6D217876EB8337
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Digest

c4:68:93:90:fe:f6:7c:0f:a4:a8:35:7e:06:5a:a2:83:a0:ff:12:9e:93:70:b2:9b:eb:b9:ff:84:91:0a:47:cf

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Jul 25, 2023

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0a:3e:42:04:89:e9:95:0f:ae:01:50:30:62:54:54:c0

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2023 - Feb 7, 2026

Minor OS version

0

Major OS version

4

Entry point

14105

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/FindProcDLL.dll

IMPHASH 897a635a465959387658f10a9e5c1197
SHA256 acabf187f608858363ce88fcf64e78c09738860ce4a84952c114cf53fa81ade5
MD5 5a177de1f2e0a85e3fe15e9821747a79
SHA1 e339619f777fc21ecb731559799b7189c2a324c1
SHA512 0e8456b5b480c18300515af33a1ca665c20da4c07fa66baa7ccde9dc83dfc9fdde7e4d0ea05a3fd030e67dc96e0619c236410ed59985de9bc95654eac2b36103
SSDEEP 6144:A+WFR2dU22mRXAtS40ZxdjYHXQohL7cRJ5:Av2dmmRXAIDzxzotQRJ5
TLSH
T107548D117DC18432C2BB38346678E2B64DBCA8311D749A8F539C0A795F74582FB36A6F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

2e:0d:da:e5:63:17:6e:e9:49:cb:38:8a:5f:13:29:13:36:72:2c:11:57:03:c1:ce:39:83:54:42:d9:89:40:09

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Jul 25, 2023

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

SERIALNUMBER=91441302MA4X2E1MX8,CN=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,O=Jiangxia Information Technology (Huizhou) Co.\, Ltd.,L=Huizhou,ST=Guangdong Province,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074875697a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Serial Number

0a:3e:42:04:89:e9:95:0f:ae:01:50:30:62:54:54:c0

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2023 - Feb 7, 2026

Minor OS version

1

Major OS version

5

Entry point

6326

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\VC++个人工程\jx\pack\plugin_my\FindProc\FindProc Unicode\Release\FindProcDLL.pdb

kernel32

FreeLibrary GetProcAddress GlobalFree OpenProcess CloseHandle lstrcpyW LoadLibraryW CreateThread UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedPushEntrySList InterlockedFlushSList RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException ExitProcess GetModuleHandleExW GetModuleFileNameA GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte GetCurrentThread GetACP HeapFree HeapAlloc GetStdHandle GetFileType GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FindClose FindFirstFileExA FindFirstFileExW FindNextFileA FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetEnvironmentVariableW GetProcessHeap SetConsoleCtrlHandler GetStringTypeW SetStdHandle HeapSize HeapReAlloc WriteFile GetConsoleCP GetConsoleMode SetFilePointerEx FlushFileBuffers DecodePointer WriteConsoleW OutputDebugStringA OutputDebugStringW WaitForSingleObjectEx CreateFileW

$PLUGINSDIR/JxNsis.dll

IMPHASH b4ce414ffbead7120795d2a84e5878d9
SHA256 6a3b8e3b628b49cbb27d399a6f78cb7dedeee171357df2d4343cd86a1b5b602e
MD5 8e6ed29b3e4e96287fbaa44fa4bfee40
SHA1 16bd961ae71e4a536d3538a6aea35613746d7bfb
SHA512 e337564c67a1b536760122534626c0e92b6f59ee56d2a4430d6c3ebc3eb750931306f93daa242d41031eed068ddbede3c6dcfea1ddc7932c27310653073170c4
SSDEEP 49152:UR9wPpoE4+deyU2fo3Yp8VXcnRdNQN09k298MQFP+AtD4wjGlpxaXJkw4wDR1TAd:UR9wBoE4+deyU2fo3Yp8VXcnRdNQN09v
TLSH
T1BBC5BF12FF4280B2E59F0234A1BB577F4D3EAA244738C9D397E519A99D301D1623E39E
MD5 SHA1 SHA512 SSDEEP TLSH