22082026_0258_19082026_Number[.]20260818092725[.]exe[.]iso

Sharing

Copy URL Twitter E-mail

General

Target
22082026_0258_19082026_Number.20260818092725.exe.iso
Size 6.7MB
Sample260822-dgbcpszgrf
SHA256 74e9bf3979174de7c9dda57f6c490bc7b528438eb160d46a38b7cb5a6f1d03ed
MD5 a91eca88d13f7c8d182d26e5f202f0fd
SHA1 45784baacce92829261d6790a5ff32b0137da89e
SHA512 60e06ab065d8fd97887cd6ad38d2217d6a2b2556bc23b1ac9c9214b8144ae713a727b93cd3458b444af473af56b4f22b77038046bb1b807afa384e00443f8750
SSDEEP 196608:A5sY2vCKrJajD6ivatCZ4O7NADtV6v+zZR3ro20aule:AsvvuDtN7kbV
TLSH
T10466C012BD9D4437E0AB02318EA9B2BD25BDBD602B2420D767C4BB19ED703D16E3561F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/HDPgms.dLL

File Explorer

22082026_0258_19082026_Number.20260818092725.exe.iso

.iso 6.7MB
out.iso

.iso 6.7MB
HDPgms.dLL

.dll 5.5MB
Number.20260818092725.exe

.exe 1.2MB

22082026_0258_19082026_Number.20260818092725.exe.iso

SHA256 74e9bf3979174de7c9dda57f6c490bc7b528438eb160d46a38b7cb5a6f1d03ed
MD5 a91eca88d13f7c8d182d26e5f202f0fd
SHA1 45784baacce92829261d6790a5ff32b0137da89e
SHA512 60e06ab065d8fd97887cd6ad38d2217d6a2b2556bc23b1ac9c9214b8144ae713a727b93cd3458b444af473af56b4f22b77038046bb1b807afa384e00443f8750
SSDEEP 196608:A5sY2vCKrJajD6ivatCZ4O7NADtV6v+zZR3ro20aule:AsvvuDtN7kbV
TLSH
T10466C012BD9D4437E0AB02318EA9B2BD25BDBD602B2420D767C4BB19ED703D16E3561F
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

HDPgms.dLL

IMPHASH 058daf5b860153b07612b3007115771c
SHA256 7e78d45368bc3914cc4486d9e0b23e2bbd67131ba466468d7cf1afb7665cd893
MD5 82d7a8507fd74143b39a05b68a362e9a
SHA1 2bbcc4d3f33bb92e3594e5e6fdccdcddb16c6395
SHA512 8b1f0ecf655a6dbea333b4bcac371e5f6cec4a2edfdef0bc678058aaa052a5e4a8a3023daf859f0d3236c7fef5082e2c5eede592db0456f827c66affdf1a4851
SSDEEP 98304:n+592Sc6kY2bI6bD5E6RGxKrJajDwdivZJyJtCZ4OiZrq1DfPHNADtV6v+zM+rwy:+5sY2vCKrJajD6ivatCZ4O7NADtV6v+d
TLSH
T18F46C0127DEC0467D0AB13318EAAF2BC31BEBDB43A25612B2684BB1AFD317515E0551F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

Major OS version

Entry point

1548214

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

F:\iProject\NvPluginWatchdog\Release\NvPluginWatchdog.pdb

kernel32

GetTimeZoneInformation SetFilePointerEx GetConsoleMode GetConsoleOutputCP EnumSystemLocalesW IsValidLocale GetStdHandle GetFileType SetStdHandle HeapQueryInformation ReadConsoleW GetCommandLineA QueryPerformanceFrequency VirtualQuery GetSystemInfo FreeLibraryAndExitThread ExitThread InterlockedFlushSList RtlUnwind GetCPInfo LCMapStringW GetStringTypeW OutputDebugStringW FindFirstFileExW FindNextFileW GetACP IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW WriteConsoleW InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter WaitForSingleObjectEx FindResourceExW SystemTimeToTzSpecificLocalTime LocalFileTimeToFileTime GetFileSizeEx GetFileAttributesExW FileTimeToLocalFileTime GetStringTypeExW MoveFileW DuplicateHandle UnlockFile SetEndOfFile ReadFile LockFile GetVolumeInformationW GetShortPathNameW FlushFileBuffers FindFirstFileW FindClose SearchPathW GetProfileIntW SetFilePointer GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW CompareStringW LocalReAlloc LocalAlloc GlobalHandle TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection GetThreadLocale WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW CompareStringA GetVersionExW GetCurrentThread GlobalGetAtomNameW lstrcmpA lstrcmpiW GetWindowsDirectoryW GetUserDefaultLCID ReplaceFileW SetFileTime GetTempFileNameW GetFullPathNameW GetFileTime GetDiskFreeSpaceW GetCurrentDirectoryW ResumeThread SetThreadPriority GlobalReAlloc VerifyVersionInfoW VerSetConditionMask GetCurrentProcessId FileTimeToSystemTime GlobalFindAtomW GlobalAddAtomW LoadLibraryA lstrcmpW GlobalDeleteAtom LoadLibraryExW GetModuleHandleA FreeResource FreeLibrary EncodePointer OutputDebugStringA MulDiv GlobalFree GlobalUnlock GlobalLock GlobalSize GlobalAlloc GetProcessHeap DecodePointer RaiseException HeapReAlloc HeapSize InitializeCriticalSectionEx GetTempPathW CreateMutexW SystemTimeToFileTime CreateThread GetLocalTime DeviceIoControl Process32NextW Process32FirstW CreateToolhelp32Snapshot ExitProcess CreateDirectoryW GetTickCount VirtualProtect GetSystemDirectoryW GetModuleHandleW WriteProcessMemory lstrcpyW CreateProcessW MultiByteToWideChar CopyFileW GetModuleFileNameW GetFileAttributesW lstrcatW LocalFree GetCurrentProcess DeleteFileW WriteFile UnmapViewOfFile MapViewOfFile CreateFileMappingW GetFileSize CreateFileW GetModuleHandleExW FindResourceW LoadResource LockResource SizeofResource TryEnterCriticalSection GetProcAddress LoadLibraryW SetWaitableTimer CreateWaitableTimerW lstrlenW VirtualFree WideCharToMultiByte ResetEvent CancelIo CreateEventW SetLastError SwitchToThread GetCurrentThreadId GetLastError FormatMessageW SetEvent Sleep WaitForSingleObject CloseHandle CreateEventA HeapDestroy HeapCreate LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection HeapFree HeapAlloc VirtualAlloc GetCommandLineW

user32

WindowFromPoint GetCursorPos SetCursor MessageBeep DeleteMenu GetSystemMenu ReleaseCapture SetCapture GetAsyncKeyState CharUpperW IsZoomed TrackMouseEvent IntersectRect DrawIconEx IsRectEmpty OffsetRect DrawFocusRect SetWindowRgn DrawStateW DrawFrameControl DrawEdge EnumDisplayMonitors SystemParametersInfoW LoadCursorW GetSysColorBrush SetLayeredWindowAttributes GetWindowThreadProcessId GetWindowDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW ReleaseDC GetDC MapVirtualKeyW GetKeyNameTextW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem IsDialogMessageW SetWindowTextW IsWindowEnabled CheckDlgButton SetDlgItemTextW MoveWindow ShowWindow GetMonitorInfoW MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo LoadIconW CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW NotifyWinEvent GetLastActivePopup GetTopWindow GetClassNameW GetClassLongW SetWindowLongW GetWindowLongW PtInRect EqualRect CopyRect MapWindowPoints AdjustWindowRectEx GetWindowTextLengthW GetWindowTextW RemovePropW GetPropW SetPropW SendNotifyMessageW GetScrollRange SetScrollRange GetScrollPos MonitorFromPoint InSendMessage IsClipboardFormatAvailable SetCursorPos DestroyCursor PeekMessageW TranslateMessage DispatchMessageW SetScrollPos ScrollWindow ValidateRect EndPaint BeginPaint SetForegroundWindow GetForegroundWindow SetActiveWindow TrackPopupMenu SetMenu GetMenu GetCapture GetKeyState SetFocus GetDlgCtrlID GetDlgItem IsIconic IsWindowVisible EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement SetWindowPos DestroyWindow IsMenu GetClassInfoExW GetClassInfoW CallWindowProcW GetMessageTime GetMessagePos CreatePopupMenu DestroyMenu GetMenuDefaultItem SetMenuDefaultItem OpenClipboard CloseClipboard SetClipboardData EmptyClipboard DestroyIcon CopyImage BringWindowToTop GetUpdateRect LockWindowUpdate SetRect UnionRect RegisterWindowMessageW RemoveMenu AppendMenuW InsertMenuW GetDesktopWindow GetMenuItemInfoW RegisterClipboardFormatW SetClassLongW GetActiveWindow DestroyAcceleratorTable SetParent UpdateLayeredWindow GetWindow EnableScrollBar MsgWaitForMultipleObjects EnableWindow LoadBitmapW GetClientRect FillRect InflateRect GetParent SetRectEmpty LoadMenuW GetSubMenu SendMessageW GetKeyboardState ScreenToClient InvalidateRect UpdateWindow GetWindowRect GetSysColor IsChild GetFocus LoadImageW GetSystemMetrics RedrawWindow CharUpperBuffW PostMessageW SetTimer KillTimer PostQuitMessage DefWindowProcW RegisterClassW CreateWindowExW UnregisterClassW GetMessageW IsWindow MessageBoxW ClientToScreen GetMenuStringW GetMenuState GetMenuItemID GetMenuItemCount GetIconInfo ModifyMenuW LoadAcceleratorsW TranslateAcceleratorW CopyAcceleratorTableW CreateMenu InsertMenuItemW UnpackDDElParam ReuseDDElParam WaitMessage SetWindowContextHelpId MapDialogRect CreateDialogIndirectParamW EndDialog GetNextDlgTabItem PostThreadMessageW ShowOwnedPopups FrameRect HideCaret InvertRect SendDlgItemMessageA RealChildWindowFromPoint ToUnicodeEx GetKeyboardLayout GetWindowRgn MapVirtualKeyExW IsCharLowerW InvalidateRgn CharNextW GetNextDlgGroupItem GetComboBoxInfo DrawIcon EnumChildWindows TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar SubtractRect CopyIcon GetDoubleClickTime CreateAcceleratorTableW ShowScrollBar

gdi32

RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectObject SelectPalette SetBkMode SetMapMode SetLayout GetLayout SetPolyFillMode SetROP2 SetTextAlign StartDocW MoveToEx TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateCompatibleBitmap CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo GetTextMetricsW CombineRgn CreateEllipticRgn Ellipse GetBkColor RectVisible CreatePolygonRgn Polygon Polyline GetMapMode SetRectRgn DPtoLP CreateRoundRectRgn GetDIBits RealizePalette SetPixel StretchBlt CreateDIBSection SetDIBColorTable GetWindowOrgEx Rectangle RoundRect EndDoc StartPage EndPage AbortDoc SetAbortProc GetRgnBox OffsetRgn LPtoDP CreatePalette GetPaletteEntries ExtFloodFill SetPaletteEntries EnumFontFamiliesExW FillRgn FrameRgn GetBoundsRect PtInRegion GetViewportOrgEx GetNearestPaletteIndex GetSystemPaletteEntries GetTextFaceW SetPixelV PtVisible LineTo IntersectClipRect GetWindowExtEx GetViewportExtEx GetPixel GetClipBox ExcludeClipRect Escape CreateSolidBrush CreateRectRgn CreatePatternBrush CreatePen CreateHatchBrush CreateCompatibleDC BitBlt PatBlt CreateRectRgnIndirect CreateBitmap SetTextColor SetBkColor GetDeviceCaps CreateDCW CopyMetaFileW DeleteDC CreateFontIndirectW DeleteObject GetTextExtentPoint32W GetStockObject GetTextColor GetObjectType GetObjectW

msimg32

AlphaBlend TransparentBlt

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter GetJobW

advapi32

CloseServiceHandle GetTokenInformation ConvertSidToStringSidW RegEnumValueW RegEnumKeyExW RegQueryValueW RegEnumKeyW RegDeleteKeyW RegCreateKeyExW SetFileSecurityW GetFileSecurityW RegSetValueW DeleteService ControlService StartServiceW OpenServiceW OpenProcessToken CreateServiceW OpenSCManagerW RegDeleteTreeW AdjustTokenPrivileges LookupPrivilegeValueW FreeSid CheckTokenMembership AllocateAndInitializeSid RegCreateKeyW RegQueryValueExW RegCloseKey RegSetValueExW RegDeleteValueW RegOpenKeyExW

shell32

SHGetMalloc ShellExecuteExW ExtractIconW SHGetFileInfoW SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetDesktopFolder SHAppBarMessage DragQueryFileW SHAddToRecentDocs SHBrowseForFolderW SHGetFolderPathW ShellExecuteW DragFinish

comctl32

ImageList_Draw ImageList_AddMasked InitCommonControlsEx

shlwapi

PathStripPathW PathFileExistsW PathFindExtensionW PathFindFileNameW PathIsUNCW PathStripToRootW StrFormatKBSizeW PathRemoveFileSpecW

uxtheme

IsThemeBackgroundPartiallyTransparent GetThemePartSize IsAppThemed DrawThemeText GetWindowTheme DrawThemeParentBackground OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName GetThemeSysColor

ole32

GetClassFile RevokeDragDrop RegisterDragDrop CoLockObjectExternal OleCreateFromFile OleLoad OleSave OleSaveToStream OleSetContainedObject OleLockRunning OleGetIconOfClass GetHGlobalFromILockBytes CreateILockBytesOnHGlobal OleSetMenuDescriptor StgCreateDocfile StgOpenStorage StgIsStorageFile CreateFileMoniker CoFreeUnusedLibraries OleInitialize OleUninitialize CLSIDFromProgID CoDisconnectObject OleFlushClipboard OleIsCurrentClipboard DoDragDrop OleGetClipboard CoGetClassObject OleCreateLinkToFile OleCreateStaticFromData OleCreate WriteClassStm CreateItemMoniker CreateGenericComposite StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CreateStreamOnHGlobal SetConvertStg OleRegGetUserType ReleaseStgMedium OleDuplicateData ReadFmtUserTypeStg WriteFmtUserTypeStg WriteClassStg ReadClassStg CreateBindCtx CoTreatAsClass CoTaskMemFree CoTaskMemAlloc StringFromCLSID CoCreateInstance CoUninitialize CLSIDFromString CoInitialize StringFromGUID2 CoCreateGuid CoRevokeClassObject CoRegisterMessageFilter CoInitializeEx OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator IsAccelerator

oleaut32

SysFreeString SysStringLen SafeArrayDestroy VariantTimeToSystemTime SysAllocStringLen VariantCopy VarBstrFromDate LoadTypeLi OleCreateFontIndirect SystemTimeToVariantTime VariantChangeType VariantInit SysAllocString VariantClear

oledlg

OleUIAddVerbMenuW OleUIInsertObjectW OleUIEditLinksW OleUIConvertW OleUIBusyW

gdiplus

GdipGetImagePaletteSize GdipDrawImageRectI GdipSetInterpolationMode GdiplusShutdown GdipAlloc GdipFree GdiplusStartup GdipCloneImage GdipDisposeImage GdipGetImageGraphicsContext GdipGetImageWidth GdipGetImageHeight GdipGetImagePixelFormat GdipGetImagePalette GdipCreateBitmapFromStream GdipCreateBitmapFromScan0 GdipBitmapLockBits GdipBitmapUnlockBits GdipDeleteGraphics GdipDrawImageI GdipCreateBitmapFromHBITMAP GdipCreateFromHDC

ws2_32

WSASetLastError shutdown WSACloseEvent WSAResetEvent WSAEnumNetworkEvents WSAWaitForMultipleEvents WSAEventSelect WSACreateEvent WSAGetLastError send recv select WSAIoctl connect htons gethostbyname socket closesocket setsockopt WSACleanup WSAStartup

winmm

PlaySoundW timeGetTime

oleacc

AccessibleObjectFromWindow LresultFromObject CreateStdAccessibleObject

imm32

ImmGetContext ImmGetOpenStatus ImmReleaseContext

Name

.text

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

425KB

Virtual Size

424KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

32KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

116KB

Virtual Size

116KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.giats

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.Session

Size

1001KB

Virtual Size

1001KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

148KB

Virtual Size

147KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Number.20260818092725.exe

IMPHASH 228516dd2bae8c2c904a4abc2a4b6850
SHA256 233a7de23438d09cbb277a0ebb11f71a2af9c53d2cf5ac9e4af368de0bf20a3f
MD5 0eb29371e8a79d9d88d4b38e14e7fede
SHA1 011ace7a722fde86968304ad2e1adff3857cf203
SHA512 729e5381747479c5d9d06a2868398858be6370ab0b72ec468707fed0b9c1525e828d658f280ee786c3d2353ecca3617d61e5c189c5c1ebb8ce7b978df454a94b
SSDEEP 24576:cxcrYVkxc3bY9uB6TfuiBNNSuuOqF5Cb7KhU2k8V9TsfTlYN:cxc3cf6Tfu+YlfF8XL2bV9ToYN
TLSH
T14E457E21F501D132F8A704B286FD9B6E992CEA20071450D3E3D85CAA9EF15E27B3775B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Password

infected

Digest

c3:d8:b1:36:dc:11:5b:3b:4b:bb:94:33:f6:5c:81:a2:7f:c7:43:ce:6d:ac:dd:dc:9d:b0:45:32:6b:6d:b9:6c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=9133000070337747XE,CN=Hithink RoyalFlush Information Network Co.\,Ltd.,O=Hithink RoyalFlush Information Network Co.\,Ltd.,L=杭州市,ST=浙江省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b599e6b19fe79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Feb 6, 2025

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

cd:c8:fc:d5:86:15:e8:1d:b1:3b:cf:60:0b:df:d7:c9:e4:bd:2f:26

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

Chains

Feb 6, 2025

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Jul 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

Serial Number

01:fe:bc:8a:77:43:53:3e:07:0a:2a:48:0b:f5:10:b5

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 1, 2023 - Aug 2, 2026

Minor OS version

Major OS version

Entry point

784933

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\HDP_Future\sre\hxdaemonprocess.pdb

ws2_32

gethostname ioctlsocket getpeername sendto recvfrom freeaddrinfo getaddrinfo recv listen htonl getsockname connect bind accept select __WSAFDIsSet WSAIoctl setsockopt socket htons WSACleanup WSAStartup WSASetLastError ntohs WSAGetLastError closesocket WSAWaitForMultipleEvents WSAResetEvent WSAEventSelect WSAEnumNetworkEvents WSACreateEvent WSACloseEvent send getsockopt

wldap32

ord301 ord147 ord133 ord79 ord142 ord167 ord127 ord27 ord26 ord117 ord41 ord208 ord73 ord216 ord14 ord46 ord219 ord145

crypt32

CertGetCertificateChain CertFreeCertificateChainEngine CertCreateCertificateChainEngine CryptQueryObject CertFindExtension CertAddCertificateContextToStore CryptDecodeObjectEx PFXImportCertStore CryptStringToBinaryW CertFreeCertificateContext CertFindCertificateInStore CertEnumCertificatesInStore CertCloseStore CertOpenStore CertFreeCertificateChain

kernel32

GetTimeFormatW GetDateFormatW GetConsoleCP ReadConsoleW GetConsoleMode GetACP WriteFile ExitProcess HeapReAlloc HeapFree HeapAlloc SetFilePointerEx IsValidLocale FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetDriveTypeW GetModuleHandleExW FreeLibraryAndExitThread ExitThread GetTimeZoneInformation LoadLibraryExW RtlUnwind RaiseException InitializeSListHead GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers DeleteFileW GetCurrentDirectoryW GetFullPathNameW SetStdHandle SetEndOfFile GetProcessHeap FindFirstFileExA GetFileAttributesExW GetPrivateProfileStringA WritePrivateProfileStringA SetLastError CreateDirectoryA GetTickCount OpenProcess TerminateProcess CloseHandle GetLongPathNameA GetCurrentProcessId GetLastError WaitForSingleObject FindClose IsValidCodePage DeleteFileA FindFirstFileA FindNextFileA GetCurrentProcess SetUnhandledExceptionFilter CreateThread GetCurrentThreadId InitializeCriticalSection EnterCriticalSection LeaveCriticalSection ResetEvent WaitForMultipleObjects MapViewOfFile CreateEventW CreateFileMappingW LoadLibraryW GetModuleFileNameW CreateProcessW GetFileAttributesW MultiByteToWideChar GetProcAddress GetLocalTime GetModuleHandleW SetCurrentDirectoryA GetCurrentDirectoryA GetDiskFreeSpaceExA WideCharToMultiByte DeleteCriticalSection FreeLibrary Sleep LoadLibraryExA GetModuleFileNameA GetModuleHandleA QueryPerformanceCounter QueryPerformanceFrequency CreateToolhelp32Snapshot Process32First Process32Next Module32First GetSystemTimeAsFileTime GetFileAttributesA GetSystemDirectoryW FormatMessageW MoveFileExW GetEnvironmentVariableA GetFileType GetStdHandle ReadFile HeapSize SleepEx VerSetConditionMask VerifyVersionInfoW GetFileSizeEx CreateFileW GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent UnhandledExceptionFilter WaitForSingleObjectEx SetEvent GetCPInfo GetStringTypeW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount GetLocaleInfoW LCMapStringW CompareStringW DecodePointer EncodePointer GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA WriteConsoleW RemoveDirectoryA PeekNamedPipe

user32

LoadIconA IsDialogMessageA SetWindowPos SetDlgItemTextA GetSystemMetrics LoadImageA SetTimer GetWindowThreadProcessId MessageBoxA GetPropA GetWindowRect EnumWindows LoadCursorA GetDesktopWindow SetWindowLongA GetWindowLongA RemovePropA SetPropA CreateDialogParamA ShowWindow DestroyWindow IsWindow CreateWindowExA RegisterClassA PostQuitMessage DefWindowProcA SendMessageA DispatchMessageA TranslateMessage GetMessageA PostMessageA

advapi32

CryptAcquireContextW CryptGenRandom CryptGetHashParam CryptCreateHash CryptHashData CryptDestroyHash CryptDestroyKey CryptImportKey CryptEncrypt CryptReleaseContext

shell32

ShellExecuteA SHFileOperationA SHCreateDirectoryExA ShellExecuteExA

shlwapi

StrStrIA PathCanonicalizeA PathFileExistsA StrStrA StrToInt64ExA PathAppendA

Name

.text

Size

947KB

Virtual Size

947KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

207KB

Virtual Size

206KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

15KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

444B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

39KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

22082026_0258_19082026_Number.20260818092725.exe.iso

out.iso

HDPgms.dLL

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

ws2_32

winmm

oleacc

imm32

generic

Number.20260818092725.exe

ws2_32

wldap32

crypt32

kernel32

user32

advapi32

shell32

shlwapi

generic