CryptoKit[.]UnionPay[.]exe

resource
CryptoKit.UnionPay.exe
unpack001/$PLUGINSDIR/CrxInstaller.dll
unpack001/$SYSDIR/CryptoKit.CertEnrollment.UnionPay.x64.dll
unpack001/$SYSDIR/CryptoKit.CertEnrollment.UnionPay.x86.dll
unpack001/$SYSDIR/CryptoKit.UnionPay.x64.dll
unpack001/$SYSDIR/CryptoKit.UnionPay.x86.dll
unpack001/$SYSDIR/npCryptoKit.CertEnrollment.UnionPay.x86.dll
unpack001/$SYSDIR/npCryptoKit.UnionPay.x86.dll
unpack001/CertEnrollmentHost.UnionPay.x86.exe
unpack001/CryptoKitHost.UnionPay.x86.exe

resource
unpack001/$PLUGINSDIR/FindProcDLL.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsExec.dll

CryptoKit.UnionPay.exe

IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
SHA256 1fcee9cd4a4c1080d6acee16d6b7b1a9593971283da2a02f56406218d557ecb4
MD5 9f11ad646047260e2fbdc8f756f0cf59
SHA1 70884d4f4da741a6a0030d00247182de7a177946
SHA512 364bd07c64f66d0f7f0a11d6d4a34449738385ed3a93ce8c3aada01bf93db8f84051b269647a9b18bfa3f55f7fed38dbd2d1e304451ef5f25eecf00d38421c16
SSDEEP 98304:eAix9A3Dv05fTksg0AaitYpDbdyC0EVfvhZiuDHw:eAR0lFdz0Cdn0E5Z8uDHw
TLSH
T14E1633D373C582AACCC90BB38A57FF6393B3AF906AC81201B697321D1C73985559774A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

a8:26:e5:50:d2:f1:6a:73:b5:e6:ae:fc:77:15:d3:65:d4:6e:a0:d6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Chains

Oct 9, 2021

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Serial Number

0f:7a:91:1e:ff:5e:e2:7c:6c:d9:2a:85:ed:a3:a0:40

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 7, 2020 - Feb 10, 2023

Minor OS version

0

Major OS version

5

Entry point

13333

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte MulDiv lstrlenA WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx FindWindowExW GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint IsWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

$PLUGINSDIR/CrxInstaller.dll

IMPHASH 7ecd1a46bc9cfe9b900e46593b9ce593
SHA256 8e92441227f30d715dd9e39569e057f0bde5344e14f978e12f93cb6c6bea8eea
MD5 12b3f1078692738533a3042abbc76144
SHA1 8b504f9336e4ea434d6d3f3ef9f3a57323fe73c9
SHA512 25c102e9ead20b929e5ab585a7021b840cf57835258cda7871a685af93e6a8b5a8296ee14203811a94b0282dfc5fc7b40f57f1d9b18f340a4c30a4d6d4ca377d
SSDEEP 12288:VjGgsyxGOF1ShY5//kGqFL2UXiH8IEFQsavTsWqIsr59:VqgsyxGs//kGqFLzychFQtTOn59
TLSH
T146F4AE17F6C5C8B2F49E0179617366BF8A36EB2143EAC5C387A079558D313E0663D38A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

ee:47:27:a5:80:b6:81:3d:4d:d6:ba:b8:58:78:e5:54:12:63:6e:7c

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Chains

Nov 27, 2020

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Serial Number

0f:7a:91:1e:ff:5e:e2:7c:6c:d9:2a:85:ed:a3:a0:40

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 7, 2020 - Feb 10, 2023

Minor OS version

0

Major OS version

5

Entry point

433160

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Builds\8\SADK\CryptoTools_CrxInstaller\Binaries\x86\Release\CrxInstaller.pdb

shlwapi

PathFileExistsW

kernel32

lstrcpyW MultiByteToWideChar GetCurrentThreadId GetModuleHandleA GetVersion GetFileType GetStdHandle GetTickCount QueryPerformanceCounter GlobalFree GlobalMemoryStatus LoadLibraryA GetVersionExA FlushConsoleInputBuffer CompareStringW CompareStringA WriteConsoleW GetConsoleOutputCP WriteConsoleA CreateDirectoryA CreateDirectoryW CreateFileA GetVolumeInformationW GetSystemDirectoryW GetComputerNameW SetFileAttributesW GetFileInformationByHandle DeleteFileW Sleep RemoveDirectoryW SetEndOfFile GetFileSize FindNextFileW FindClose WideCharToMultiByte FindFirstFileW LocalFree LocalAlloc GetProcAddress LoadLibraryW FreeLibrary CloseHandle GetLastError CreateFileW GetProcessHeap ReadFile WriteFile SetFilePointer SetEnvironmentVariableA GetCurrentProcessId HeapFree HeapAlloc TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA EnterCriticalSection LeaveCriticalSection GetModuleHandleW ExitProcess SetConsoleCtrlHandler HeapReAlloc GetSystemTimeAsFileTime ReadConsoleInputA SetConsoleMode GetConsoleMode HeapCreate HeapDestroy VirtualFree DeleteCriticalSection VirtualAlloc GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError LCMapStringA LCMapStringW RtlUnwind GetConsoleCP SetHandleCount GetStartupInfoA RaiseException HeapSize FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW InitializeCriticalSectionAndSpinCount FlushFileBuffers SetStdHandle GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

MessageBoxA GetUserObjectInformationW wsprintfW GetProcessWindowStation GetDesktopWindow

advapi32

ConvertSidToStringSidW RegisterEventSourceA ReportEventA DeregisterEventSource CryptHashData CryptCreateHash LookupAccountNameW CryptAcquireContextW CryptGetHashParam RegisterTraceGuidsW RegCloseKey GetTraceEnableLevel RegOpenKeyExW UnregisterTraceGuids GetTraceLoggerHandle RegQueryValueExW GetTraceEnableFlags ControlTraceW TraceEvent

shell32

SHGetFolderPathW

$PLUGINSDIR/FindProcDLL.dll

IMPHASH 0cd94af3a016a5de4ab9a5a9a02d4173
SHA256 337781f4d7524150600ad958aaf3d78b5bcbd30e921759bc7d12e7488687348c
MD5 c764de9b88eeec6a17da10d523eebe5b
SHA1 7d15fcbc34f5d0a970e303dd1c39ad981377fdcb
SHA512 647339f01443614dd60e048942abc0ec2dbc13200162d072dce4dd07d55661c2f1a9051a6096c614f934a3c4d33342266d70fa6a7ed9f4bb042f804fe5fb170c
TLSH
T1C48185BA56E54FF9E1581D3030CE7013EBDD74B116AB625AC93F151A7BD0190D43C632
MD5 SHA1 SHA512 TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

%!f(<nil>)

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 039bcbc605477e8e87ec550c2e60e748
SHA256 03cd57ab00236c753e7ddeee8ee1c10839ace7c426769982365531042e1f6f8b
MD5 959ea64598b9a3e494c00e8fa793be7e
SHA1 40f284a3b92c2f04b1038def79579d4b3d066ee0
SHA512 5e765e090f712beffce40c5264674f430b08719940d66e3a4d4a516fd4ade859f7853f614d9d6bbb602780de54e11110d66dbb0f9ca20ef6096ede531f9f6d64
SSDEEP 192:sRer7uivwq1XpKs4FVWSjMd8tIg2cREbyCsZ8q2R4Sy+Xe:s67Xws4FVWig86/5eCBqSy+Xe
TLSH
T1B3322A2657B0D2F2E6A1827408A639336BBA762412B50D1BDFF74481FC15BC67E39327
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10085

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsExec.dll

IMPHASH 8700d0ebbb41c81ea52718af1ab70a93
SHA256 8165c7aef7de3d3e0549776535bedc380ad9be7bb85e60ad6436f71528d092af
MD5 08e9796ca20c5fc5076e3ac05fb5709a
SHA1 07971d52dcbaa1054060073571ced046347177f7
SHA512 02618317d6ab0302324aae4d3c5fca56b21e68c899e211cfa9412cf73820a1f931e56753c904fd7e510c638b4463aedbfe9536790279e096ea0387b67013e0c4
SSDEEP 96:/Uspq2y5jOEEQrhySvUgfj74/vvrTBzfYZA4YF3Telac1nIq/2:/erjOELhySv5f2vvBjiAflaB1nIq
TLSH
T116C1F7B656C005F3E40D04B93E31280F87FEE426073242769E9B1ECA19D2AA6FD68751
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$SYSDIR/CryptoKit.CertEnrollment.UnionPay.x64.dll

IMPHASH aa8e7b659e18bee695121b398b4339bb
SHA256 87b7124d061fbf699316fd23f7992a1043c7f3a4a403f755c1201b10bc5fd423
MD5 8a45f5ca118b7b095bfd24b08820947c
SHA1 ed09e13d4e334fdf0f69059d9ad2d7f358c4fb60
SHA512 24d5b5cf2cd0ed6a31dbae6af21ca9d27f14dbcb60c16dbf44b543bd6e6ed76ccc5cc0b7dc3bffd786e4416d76101c27c832dba2b5a453aad408a611ea9450ee
SSDEEP 12288:PXxQAe8HsCXtbnCEcU+JXtTzBetU7DxlGaSwADpol+1uRz2zLFcaL9iscNWty7FF:GAe8HsCXtbnCEcU+JXtTzBetU7DxlGaT
TLSH
T1A0A46C19E79000A5E0B2E579CBF69276FF31745D8B7586DF2B680A1E2F32BD08835319
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:5 windows x64 arch:x64

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

d6:f9:51:4d:4a:12:9d:5a:3d:82:6d:de:5c:e1:74:6a:bb:e3:4d:de

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Chains

Oct 8, 2021

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Serial Number

0f:7a:91:1e:ff:5e:e2:7c:6c:d9:2a:85:ed:a3:a0:40

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 7, 2020 - Feb 10, 2023

Minor OS version

2

Major OS version

5

Entry point

220632

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\agent\_work\259\s\Toolkits\Private\Src\CryptoKits\UnionPay\CertEnrollment\x64\Release\CryptoKit.CertEnrollment.UnionPay.x64.pdb

kernel32

GetThreadLocale SetThreadLocale lstrlenA LoadLibraryExW FindResourceW LoadResource SizeofResource GetModuleFileNameW LeaveCriticalSection EnterCriticalSection lstrcmpiW GetModuleHandleW FormatMessageW DeleteCriticalSection InitializeCriticalSection RaiseException lstrlenW MultiByteToWideChar GetLastError SetLastError LoadLibraryW GetProcAddress FreeLibrary LocalAlloc SystemTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime SystemTimeToTzSpecificLocalTime CompareFileTime GetLocalTime TzSpecificLocalTimeToSystemTime FreeResource WideCharToMultiByte CreateFileW ReadFile CloseHandle DeleteFileW WriteFile GetTempPathW GetVersionExW VerSetConditionMask VerifyVersionInfoW HeapAlloc HeapFree RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry GetCurrentThreadId FlsSetValue GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext Sleep ExitProcess GetStdHandle GetModuleFileNameA HeapSetInformation HeapCreate HeapDestroy EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc HeapReAlloc HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW GetConsoleCP GetConsoleMode LoadLibraryA InitializeCriticalSectionAndSpinCount SetFilePointer GetLocaleInfoA LCMapStringA GetStringTypeA GetStringTypeW CreateFileA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle FlushFileBuffers LocalFree

user32

CharNextW LoadStringW

advapi32

CryptGetUserKey CryptGetProvParam CryptCreateHash CryptHashData CryptSignHashW CryptDestroyHash CryptDestroyKey CryptSetKeyParam CryptImportKey CryptDecrypt CryptGenKey CryptExportKey UnregisterTraceGuids RegisterTraceGuidsW GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags RegQueryValueExW ControlTraceW CryptReleaseContext CryptAcquireContextW RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW CryptGenRandom CryptGetKeyParam TraceEvent RegDeleteKeyW RegDeleteValueW RegCloseKey RegCreateKeyExW RegOpenKeyExW CryptEnumProvidersW

ole32

CoCreateGuid CoTaskMemRealloc CoTaskMemFree CoUninitialize CoCreateInstance StringFromGUID2 CoTaskMemAlloc CoInitialize

oleaut32

RegisterTypeLi UnRegisterTypeLi LoadTypeLi LoadRegTypeLi SysStringLen VarUI4FromStr SysStringByteLen SysAllocStringByteLen SysFreeString SysAllocString

crypt32

CertVerifyTimeValidity CertDuplicateCertificateContext CertDeleteCertificateFromStore CryptEncodeObject CertAddEncodedCertificateToStore CertSetCertificateContextProperty CryptExportPublicKeyInfo CryptAcquireCertificatePrivateKey CryptDecodeObjectEx CertFindExtension CertNameToStrW CertCloseStore CertOpenStore CertGetCertificateContextProperty CertEnumCertificatesInStore CertFreeCertificateContext CertFindCertificateInStore CertAddCertificateContextToStore CertCreateCertificateContext

shlwapi

PathFileExistsW StrStrIW

$SYSDIR/CryptoKit.CertEnrollment.UnionPay.x86.dll

IMPHASH 6996cc813273eb3b4aa7ff74a203e674
SHA256 0940e9492cb5d7e98e71bb0825afcc6d6ea8d1117a6eccc7304b606558a52911
MD5 50d58ca4e3b4763840927bed33d59d32
SHA1 86388f02e92b3e55fcb480fbdbf97c8786bf6487
SHA512 deb9322a900c2041534c9cc6086c7599332b62cc85d4fe49b0fc543cd3428bbbd8957364feefb5031299428e695dc2d5ef8e8c40b27e56e40bb6cef961489b04
SSDEEP 6144:mwRXz5ntPoKqvu9D0w2waw99+Mz1hEGH0+UlKSNLeap:mwRXz5nOzu9gw2waw99+MzkbL
TLSH
T127944A71A6D5C031E4E6207056BC46B72C7ABA325BA1C8CB7385185D8AF67D2DB3432F
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:5 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

c6:ba:fe:97:82:c8:a3:79:df:c6:d3:7a:3c:cb:aa:5b:b1:b0:da:20

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Chains

Oct 8, 2021

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Serial Number

0f:7a:91:1e:ff:5e:e2:7c:6c:d9:2a:85:ed:a3:a0:40

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 7, 2020 - Feb 10, 2023

Minor OS version

0

Major OS version

5

Entry point

187777

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\agent\_work\259\s\Toolkits\Private\Src\CryptoKits\UnionPay\CertEnrollment\x86\Release\CryptoKit.CertEnrollment.UnionPay.x86.pdb

kernel32

GetThreadLocale SetThreadLocale lstrlenA LoadLibraryExW FindResourceW LoadResource SizeofResource GetModuleFileNameW LeaveCriticalSection EnterCriticalSection InterlockedDecrement InterlockedIncrement lstrcmpiW GetModuleHandleW FormatMessageW DeleteCriticalSection InitializeCriticalSection RaiseException lstrlenW MultiByteToWideChar GetLastError SetLastError LoadLibraryW GetProcAddress FreeLibrary LocalAlloc SystemTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime SystemTimeToTzSpecificLocalTime CompareFileTime GetLocalTime TzSpecificLocalTimeToSystemTime FreeResource WideCharToMultiByte CreateFileW ReadFile CloseHandle DeleteFileW WriteFile GetTempPathW GetVersionExW VerSetConditionMask VerifyVersionInfoW HeapAlloc HeapFree RtlUnwind GetCurrentThreadId GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree VirtualAlloc HeapReAlloc HeapCreate HeapDestroy Sleep ExitProcess GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer GetLocaleInfoA LCMapStringA GetStringTypeA GetStringTypeW CreateFileA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle FlushFileBuffers LocalFree

user32

CharNextW LoadStringW

advapi32

CryptSetKeyParam CryptGetProvParam CryptCreateHash CryptHashData CryptSignHashW CryptDestroyHash CryptDestroyKey CryptGetUserKey CryptImportKey CryptDecrypt CryptGenKey CryptExportKey UnregisterTraceGuids RegisterTraceGuidsW GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags RegQueryValueExW ControlTraceW CryptReleaseContext CryptAcquireContextW RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW CryptGenRandom CryptGetKeyParam TraceEvent RegDeleteKeyW RegDeleteValueW RegCloseKey CryptEnumProvidersW

ole32

CoCreateGuid CoTaskMemRealloc CoTaskMemFree CoUninitialize CoCreateInstance StringFromGUID2 CoTaskMemAlloc CoInitialize

oleaut32

RegisterTypeLi UnRegisterTypeLi LoadTypeLi LoadRegTypeLi SysStringLen VarUI4FromStr SysStringByteLen SysAllocStringByteLen SysFreeString SysAllocString

crypt32

CryptDecodeObjectEx CryptAcquireCertificatePrivateKey CertVerifyTimeValidity CertDuplicateCertificateContext CertDeleteCertificateFromStore CryptEncodeObject CertAddEncodedCertificateToStore CertSetCertificateContextProperty CryptExportPublicKeyInfo CertFindExtension CertNameToStrW CertGetNameStringW CertCreateCertificateContext CertAddCertificateContextToStore CertCloseStore CertOpenStore CertGetCertificateContextProperty CertEnumCertificatesInStore CertFreeCertificateContext CertFindCertificateInStore

shlwapi

PathFileExistsW StrStrIW

$SYSDIR/CryptoKit.UnionPay.x64.dll

IMPHASH a6cae033182565ac8b721d852ad9cbd3
SHA256 5878fad5492408132a674921bd3eb587014465641ab553c38859e59f2210ce08
MD5 7a2320cc011345097b5c090a2f3447d2
SHA1 f3f7df6f59190aabc49f0e8630d01c0e880940c1
SHA512 72b92aa0f68445d5e6843888d4d900bf09da32fed95e830b31d73c0cd525d751909fc573219d70d9faece43a519d6e4879cf9440c25672f653d05e88a39ce6e0
SSDEEP 12288:7quDf5qPUL6u0bHi/rt7PgXvvlwQfQWr8KpG/w1OYRpEMkY3NtEwCsxgtsSjggXE:7q85cUL6u0bHi/rt7IXvvlwQfQWr8Kpj
TLSH
T165946B1AE79408A9E063C179CBE79226FBB274599B7086DF27644B1E3F33BD08835315
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:5 windows x64 arch:x64

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

db:3c:58:bf:7a:c7:1b:37:11:52:24:d4:49:ca:7b:59:35:77:30:e6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Chains

Oct 8, 2021

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Serial Number

0f:7a:91:1e:ff:5e:e2:7c:6c:d9:2a:85:ed:a3:a0:40

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 7, 2020 - Feb 10, 2023

Minor OS version

2

Major OS version

5

Entry point

190444

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\agent\_work\114\s\Toolkits\Private\Src\CryptoKits\UnionPay\CryptoKit\x64\Release\CryptoKit.UnionPay.x64.pdb

kernel32

InterlockedPushEntrySList VirtualFree VirtualAlloc InterlockedPopEntrySList LeaveCriticalSection EnterCriticalSection CreateFileW GetFileSizeEx CloseHandle GetModuleFileNameW LoadLibraryExW FindResourceW LoadResource SizeofResource MultiByteToWideChar lstrcmpiW GetModuleHandleW FormatMessageW SystemTimeToTzSpecificLocalTime DeleteCriticalSection InitializeCriticalSection RaiseException lstrlenW GetLastError SetLastError LoadLibraryW GetProcAddress FreeLibrary LocalAlloc LocalFree GetProcessHeap FileTimeToSystemTime FreeResource WideCharToMultiByte ReadFile DeleteFileW WriteFile GetVersionExW GetFullPathNameW SystemTimeToFileTime CompareFileTime GetLocalTime TzSpecificLocalTimeToSystemTime DeactivateActCtx ActivateActCtx FindActCtxSectionStringW CreateActCtxW GetModuleHandleExW QueryActCtxW OutputDebugStringA GetCurrentThreadId GetCurrentProcess FlushInstructionCache GlobalAlloc GlobalLock GlobalUnlock GlobalFree HeapAlloc HeapFree RtlPcToFileHeader RtlUnwindEx TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext FlsSetValue GetCommandLineA Sleep ExitProcess GetStdHandle GetModuleFileNameA HeapSetInformation HeapCreate HeapDestroy EncodePointer DecodePointer FlsGetValue FlsFree FlsAlloc HeapReAlloc HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode LCMapStringW LoadLibraryA InitializeCriticalSectionAndSpinCount SetFilePointer GetLocaleInfoA LCMapStringA GetStringTypeA GetStringTypeW CreateFileA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle FlushFileBuffers

user32

SendMessageW BringWindowToTop ShowWindow BeginPaint FillRect EndPaint EndDialog LoadImageW PtInRect TrackMouseEvent InvalidateRect CreateWindowExW GetWindowLongPtrW CallWindowProcW DrawTextW UnregisterClassA GetWindow GetWindowLongW MonitorFromWindow GetMonitorInfoW GetParent DestroyWindow GetForegroundWindow GetClientRect MapWindowPoints SetWindowPos GetDlgItem GetWindowRect GetSystemMetrics ScreenToClient SetWindowLongPtrW DialogBoxParamW DefWindowProcW GetCursorPos wsprintfW LoadStringW CharNextW GetActiveWindow

advapi32

CryptHashData CryptReleaseContext CryptAcquireContextW CryptGetUserKey CryptGetKeyParam CryptDestroyKey CryptGetProvParam CryptCreateHash CryptSignHashW CryptDestroyHash CryptGetHashParam CryptEnumProvidersW UnregisterTraceGuids RegisterTraceGuidsW GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags RegQueryValueExW ControlTraceW RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW TraceEvent

ole32

CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree StringFromGUID2 CoCreateInstance CoInitialize CreateStreamOnHGlobal

oleaut32

SysAllocStringLen SysStringByteLen SysAllocStringByteLen SysFreeString VarUI4FromStr SysStringLen LoadRegTypeLi LoadTypeLi UnRegisterTypeLi RegisterTypeLi SysAllocString

shlwapi

StrStrIW PathFileExistsW PathFindExtensionW PathRemoveFileSpecW

crypt32

CertAddCertificateContextToStore CertEnumCertificatesInStore CertOpenStore CertGetCertificateContextProperty CertCreateCertificateContext CryptEncodeObject CertDeleteCertificateFromStore CertVerifyTimeValidity CryptAcquireCertificatePrivateKey CryptDecodeObjectEx CertFindExtension CertNameToStrW CertGetNameStringW CertCloseStore CertDuplicateCertificateContext CertFreeCertificateContext

gdiplus

GdiplusStartup GdiplusShutdown GdipCreateFromHDC GdipDeleteGraphics GdipDrawImageRectRectI GdipGetImageWidth GdipGetImageHeight GdipFree GdipDisposeImage GdipLoadImageFromStream GdipCloneImage GdipAlloc

gdi32

GetObjectW DeleteObject CreateCompatibleDC CreateFontIndirectW SelectObject GetStockObject CreatePen RoundRect BitBlt SetTextColor CreateCompatibleBitmap SetBkMode CreateSolidBrush

shell32

SHGetSpecialFolderPathW

msimg32

GradientFill

cryptui

CryptUIDlgViewCertificateW

$SYSDIR/CryptoKit.UnionPay.x86.dll

IMPHASH c84a556b5ec5e471a8b4b8d7739949fb
SHA256 f77b1fe75e2403a369cd926e3ddf77bf20f7bb0ec4f72889cea0d10897f18f85
MD5 739560fd60762bc22e3d52765f784a78
SHA1 02c7c1ab1db36098bf1b698e263b12640f6d2c02
SHA512 dadb3ccdfa7d80ddb29a26c632af6d2f9a9be66882a7af2debbf9c37ae7aebefa51e55e16542159d3b56d158e8ccc44e82cedbc4a8a313acb4a472b96662ef57
SSDEEP 6144:zuJDmAtdvP0SIJmoOoBYNlobYwrLnMzPFH0+Ul5NLeaI8iv+t4:qRrdvcSIaoBylyYwrbMWyWt4
TLSH
T101847C20ABE5C031E6D61AB0567942B6187EF6312FA1C8CB73841D1D5EB27D36A3631F
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:5 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

ad:15:10:3e:0d:3a:8e:5e:36:7b:1f:97:c3:cc:cf:36:df:a6:00:37

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Chains

Oct 8, 2021

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Serial Number

0f:7a:91:1e:ff:5e:e2:7c:6c:d9:2a:85:ed:a3:a0:40

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 7, 2020 - Feb 10, 2023

Minor OS version

0

Major OS version

5

Entry point

161177

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\agent\_work\114\s\Toolkits\Private\Src\CryptoKits\UnionPay\CryptoKit\x86\Release\CryptoKit.UnionPay.x86.pdb

kernel32

InterlockedCompareExchange IsProcessorFeaturePresent LeaveCriticalSection EnterCriticalSection CreateFileW GetFileSizeEx CloseHandle GetModuleFileNameW LoadLibraryExW FindResourceW LoadResource SizeofResource MultiByteToWideChar InterlockedDecrement InterlockedIncrement lstrcmpiW GetModuleHandleW FormatMessageW SystemTimeToTzSpecificLocalTime DeleteCriticalSection InitializeCriticalSection RaiseException lstrlenW GetLastError SetLastError LoadLibraryW GetProcAddress FreeLibrary LocalAlloc LocalFree GetProcessHeap FlushFileBuffers FileTimeToSystemTime FreeResource WideCharToMultiByte ReadFile DeleteFileW WriteFile GetVersionExW GetFullPathNameW SystemTimeToFileTime CompareFileTime GetLocalTime TzSpecificLocalTimeToSystemTime GetModuleHandleA GetVersion GetFileAttributesW OutputDebugStringA GetCurrentThreadId GetCurrentProcess FlushInstructionCache GlobalAlloc GlobalLock GlobalUnlock GlobalFree HeapAlloc HeapFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind GetCommandLineA VirtualFree VirtualAlloc HeapReAlloc HeapCreate HeapDestroy Sleep ExitProcess GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode LCMapStringW InitializeCriticalSectionAndSpinCount LoadLibraryA SetFilePointer GetLocaleInfoA LCMapStringA GetStringTypeA GetStringTypeW CreateFileA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle

user32

GetWindow LoadImageW SendMessageW BringWindowToTop ShowWindow BeginPaint GetDlgItem EndPaint EndDialog GetCursorPos PtInRect TrackMouseEvent GetWindowLongW CreateWindowExW CallWindowProcW DrawTextW MonitorFromWindow DestroyWindow GetWindowRect GetSystemMetrics GetForegroundWindow GetActiveWindow GetMonitorInfoW GetParent ScreenToClient SetWindowLongW DialogBoxParamW DefWindowProcW GetClientRect MapWindowPoints InvalidateRect SetWindowPos FillRect wsprintfW LoadStringW CharNextW UnregisterClassA

advapi32

CryptHashData CryptReleaseContext CryptAcquireContextW CryptGetUserKey CryptGetKeyParam CryptDestroyKey CryptGetProvParam CryptCreateHash CryptSignHashW CryptDestroyHash UnregisterTraceGuids RegisterTraceGuidsW GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags RegQueryValueExW ControlTraceW RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW TraceEvent CryptGetHashParam CryptEnumProvidersW

ole32

CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree StringFromGUID2 CoCreateInstance CoInitialize CreateStreamOnHGlobal

oleaut32

SysAllocStringByteLen SysFreeString VarUI4FromStr SysStringLen SysStringByteLen LoadTypeLi UnRegisterTypeLi RegisterTypeLi LoadRegTypeLi SysAllocStringLen SysAllocString

shlwapi

PathFileExistsW PathFindExtensionW StrStrIW PathRemoveFileSpecW

crypt32

CertEnumCertificatesInStore CertGetCertificateContextProperty CertVerifyTimeValidity CryptAcquireCertificatePrivateKey CertAddCertificateContextToStore CertCreateCertificateContext CryptEncodeObject CertDeleteCertificateFromStore CertOpenStore CryptDecodeObjectEx CertFindExtension CertNameToStrW CertGetNameStringW CertCloseStore CertDuplicateCertificateContext CertFreeCertificateContext

gdiplus

GdiplusShutdown GdipCreateFromHDC GdipDeleteGraphics GdipDrawImageRectRectI GdipGetImageWidth GdipGetImageHeight GdipFree GdipAlloc GdipDisposeImage GdipLoadImageFromStream GdipCloneImage GdiplusStartup

gdi32

GetObjectW BitBlt RoundRect CreateFontIndirectW CreateCompatibleDC CreateCompatibleBitmap SelectObject GetStockObject CreatePen SetTextColor DeleteObject SetBkMode CreateSolidBrush

shell32

SHGetSpecialFolderPathW

msimg32

GradientFill

cryptui

CryptUIDlgViewCertificateW

$SYSDIR/npCryptoKit.CertEnrollment.UnionPay.x86.dll

IMPHASH aece329505cec342c58c487e90913c29
SHA256 836b9791054fb86ca87edab6ca7d7e66fe100a04149a41b286a5a54cb5b0560b
MD5 5c730a218b85042302a1c2a14444b21d
SHA1 f1ad4b301381778c9160b627c2f82aaa81972fce
SHA512 b4f7a631aeb8ae134a30b277ed9a85af9956207728668c32b86aa02253d17962d09c1fc9ede067135205cae4a10dfdf229c797cd54d564029f4b6989fe36f078
SSDEEP 6144:DqYYSUJY4t5/VjKWEBjU1+SCEGIY9WPg7REZH0+UlKSNLeaK8iv+teI1:bYSUJYi5/5KWEJU1d1Gr9WPgSWIWtp1
TLSH
T1C5A46B51E7F88031E4EB287475BBD7A31C3E757623B284CF9348951A5B626E05A3C32E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

1f:4c:9d:b7:1c:9d:ec:ac:7f:e2:1d:d5:fa:e5:cd:80:9a:15:df:e8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Chains

Oct 8, 2021

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Serial Number

0f:7a:91:1e:ff:5e:e2:7c:6c:d9:2a:85:ed:a3:a0:40

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 7, 2020 - Feb 10, 2023

Minor OS version

0

Major OS version

5

Entry point

195487

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\agent\_work\259\s\Toolkits\Private\Src\CryptoKits\UnionPay\CertEnrollment\x86\Release\npCryptoKit.CertEnrollment.UnionPay.x86.pdb

kernel32

GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree HeapAlloc Sleep ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsA GetCPInfo FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW EnterCriticalSection LeaveCriticalSection GetConsoleCP GetConsoleMode VirtualAlloc HeapReAlloc SetFilePointer LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize InterlockedDecrement LoadLibraryA InitializeCriticalSectionAndSpinCount CreateFileA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle FlushFileBuffers HeapFree IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess RtlUnwind RaiseException GetCommandLineA GetCurrentThreadId VerifyVersionInfoW VerSetConditionMask GetVersionExW GetTempPathW WriteFile DeleteFileW CloseHandle ReadFile CreateFileW WideCharToMultiByte TzSpecificLocalTimeToSystemTime GetLocalTime CompareFileTime SystemTimeToTzSpecificLocalTime FileTimeToLocalFileTime SystemTimeToFileTime FreeResource LoadResource SizeofResource FindResourceW FileTimeToSystemTime InterlockedIncrement FormatMessageW MultiByteToWideChar lstrlenA SetLastError GetLastError FreeLibrary GetProcAddress LoadLibraryW LocalFree GetEnvironmentStrings LocalAlloc GetModuleHandleA

user32

LoadStringW

advapi32

RegCreateKeyExW RegDeleteKeyW CryptEnumProvidersW CryptGetProvParam CryptCreateHash CryptHashData CryptSignHashW CryptDestroyHash CryptDestroyKey CryptGetUserKey CryptSetKeyParam TraceEvent CryptReleaseContext CryptAcquireContextW ControlTraceW RegOpenKeyExW RegQueryValueExW RegCloseKey GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags RegisterTraceGuidsW UnregisterTraceGuids CryptImportKey CryptDecrypt CryptGenKey CryptExportKey CryptGetKeyParam CryptGenRandom RegSetValueExW

ole32

CoUninitialize StringFromGUID2 CoCreateGuid CoCreateInstance CoInitialize

oleaut32

SysFreeString SysAllocStringByteLen SysStringByteLen SysAllocString

crypt32

CryptEncodeObject CertCloseStore CertEnumCertificatesInStore CertGetCertificateContextProperty CertVerifyTimeValidity CryptAcquireCertificatePrivateKey CryptDecodeObjectEx CertFindExtension CertNameToStrW CertGetNameStringW CertFreeCertificateContext CertCreateCertificateContext CertAddEncodedCertificateToStore CertSetCertificateContextProperty CryptExportPublicKeyInfo CertAddCertificateContextToStore CertDuplicateCertificateContext CertFindCertificateInStore CertOpenStore CertDeleteCertificateFromStore

shlwapi

PathFileExistsW StrStrIW

$SYSDIR/npCryptoKit.UnionPay.x86.dll

IMPHASH 67a73f479baa7b6b95225cd09893598c
SHA256 2d9c7e19782236c86906f3923058398ba151db8f12642b21ac4287ac9dd54a00
MD5 f422bcf71ae73cb745dac7e4256d048d
SHA1 b9d08af0d86f11d7b9b699da64d2345cae38a64b
SHA512 1534d7676cdf291f07306f2490fc6ae5b8780dcb6faaa085ebb755bcb6130e59c53ef3a5cad08e2d3bfc7c8875050b04e134c2ffa427b3cbcb0c8ee66aff2b39
SSDEEP 6144:BRlXCa5E0D/FIVEtwm1pesn2eh/ZdELAb0DH0+Ul5NLeaI8iv+t8UH:BXbLHwm1pe/eh/XE8jyWtN
TLSH
T1F5946B12F6FC9433D6966EB067F591666C3EB57247E2C4CF2340081AC9626E34A3536F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

f7:80:d7:db:0e:a2:69:1f:5b:30:3a:09:37:84:e3:69:e3:3d:d8:c2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Chains

Oct 8, 2021

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Serial Number

0f:7a:91:1e:ff:5e:e2:7c:6c:d9:2a:85:ed:a3:a0:40

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 7, 2020 - Feb 10, 2023

Minor OS version

0

Major OS version

5

Entry point

173524

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\agent\_work\114\s\Toolkits\Private\Src\CryptoKits\UnionPay\CryptoKit\x86\Release\npCryptoKit.UnionPay.x86.pdb

kernel32

LeaveCriticalSection RaiseException EnterCriticalSection LoadLibraryExW InitializeCriticalSection DeleteCriticalSection InterlockedDecrement InterlockedIncrement GetCurrentThreadId GetCurrentProcess FlushInstructionCache GlobalAlloc GlobalLock GlobalUnlock GlobalFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA RtlUnwind HeapFree lstrcmpiW TlsGetValue TlsAlloc TlsSetValue TlsFree Sleep ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW HeapSize SetFilePointer LoadLibraryA InitializeCriticalSectionAndSpinCount CreateFileA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle FlushFileBuffers LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap lstrlenW OutputDebugStringA GetFileAttributesW GetVersion GetModuleHandleW GetModuleHandleA TzSpecificLocalTimeToSystemTime GetLocalTime CompareFileTime SystemTimeToFileTime GetModuleFileNameW GetVersionExW WriteFile DeleteFileW GetFullPathNameW ReadFile MultiByteToWideChar WideCharToMultiByte FreeResource LoadResource SizeofResource FindResourceW FileTimeToSystemTime SetLastError InterlockedCompareExchange IsProcessorFeaturePresent FormatMessageW SystemTimeToTzSpecificLocalTime CloseHandle GetFileSizeEx CreateFileW GetLastError FreeLibrary GetProcAddress LoadLibraryW LocalFree HeapAlloc LocalAlloc

user32

GetWindowLongW MonitorFromWindow GetMonitorInfoW GetParent GetWindow LoadImageW GetForegroundWindow GetActiveWindow wsprintfW LoadStringW SendMessageW BringWindowToTop ShowWindow BeginPaint FillRect EndPaint EndDialog GetCursorPos PtInRect TrackMouseEvent InvalidateRect CreateWindowExW DrawTextW GetClientRect MapWindowPoints SetWindowPos GetDlgItem GetWindowRect GetSystemMetrics ScreenToClient SetWindowLongW DialogBoxParamW DefWindowProcW CharNextW CallWindowProcW UnregisterClassA

advapi32

CryptSignHashW CryptHashData CryptCreateHash RegDeleteKeyW RegSetValueExW RegCreateKeyExW CryptGetProvParam CryptReleaseContext CryptDestroyKey CryptGetKeyParam RegDeleteValueW RegEnumKeyExW CryptAcquireContextW RegQueryInfoKeyW CryptEnumProvidersW CryptGetHashParam TraceEvent ControlTraceW RegOpenKeyExW RegQueryValueExW RegCloseKey GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags RegisterTraceGuidsW UnregisterTraceGuids CryptGetUserKey CryptDestroyHash

oleaut32

SysFreeString SysAllocString VarUI4FromStr SysAllocStringLen SysStringByteLen SysAllocStringByteLen

shlwapi

StrStrIW PathFindExtensionW PathRemoveFileSpecW PathFileExistsW

crypt32

CertFreeCertificateContext CertDuplicateCertificateContext CertEnumCertificatesInStore CertAddCertificateContextToStore CertDeleteCertificateFromStore CertCreateCertificateContext CryptAcquireCertificatePrivateKey CertCloseStore CertGetNameStringW CertNameToStrW CertFindExtension CryptDecodeObjectEx CertVerifyTimeValidity CertGetCertificateContextProperty CertOpenStore CryptEncodeObject

msimg32

GradientFill

gdiplus

GdipDisposeImage GdipAlloc GdipFree GdipGetImageHeight GdipGetImageWidth GdipDrawImageRectRectI GdipDeleteGraphics GdipCreateFromHDC GdiplusShutdown GdiplusStartup GdipCloneImage GdipLoadImageFromStream

gdi32

CreateSolidBrush DeleteObject CreateCompatibleDC CreateCompatibleBitmap SelectObject GetStockObject CreatePen RoundRect BitBlt GetObjectW CreateFontIndirectW SetBkMode SetTextColor

shell32

SHGetSpecialFolderPathW

ole32

CreateStreamOnHGlobal CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree CoCreateInstance

cryptui

CryptUIDlgViewCertificateW

CertEnrollmentHost.UnionPay.x86.exe

IMPHASH 6a424340b1ef8ab3635d449ef532fcbc
SHA256 efef0c8b21b12401cecdd82e079098970ffe669b4a7796ce13e60cd617795c97
MD5 b07fe4b6bd5a31a9c53d2bed4646cd9a
SHA1 1b8c80ef5aeab9e3731a1feab17b52f8e6c43617
SHA512 47602a0d8e93cd6d397a76251d712eea9688cdc36c3ac1c5aa5b32250fe4cca3ece3d54d9230dad48eb0c6927a60b0d29f03e2da8772feab72e38af23dc733c0
SSDEEP 6144:MjbiMQzjSzB79zjHLj/ihLX9oRxD50E8eAOPZK04H0+UlKSNLeaV5hN+:w9BB7lj3ihL9oRZ50E8ex7pDXN+
TLSH
T124A47D22E6F8C435D9A31570D7B98AF12C3EB1761722D4CB37E418998970AF4A931B1F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

80:fc:43:8f:05:ca:2b:67:74:40:ee:c4:c3:cd:be:0e:49:2b:6e:60

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Chains

Oct 8, 2021

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Serial Number

0f:7a:91:1e:ff:5e:e2:7c:6c:d9:2a:85:ed:a3:a0:40

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 7, 2020 - Feb 10, 2023

Minor OS version

0

Major OS version

5

Entry point

202857

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\agent\_work\259\s\Toolkits\Private\Src\CryptoKits\UnionPay\CertEnrollment\x86\Release\CertEnrollmentHost.UnionPay.x86.pdb

kernel32

FileTimeToSystemTime FindResourceW SizeofResource LoadResource FreeResource GetModuleFileNameW SystemTimeToFileTime FileTimeToLocalFileTime SystemTimeToTzSpecificLocalTime CompareFileTime GetLocalTime TzSpecificLocalTimeToSystemTime WideCharToMultiByte CreateFileW ReadFile CloseHandle SetLastError WriteFile GetTempPathW GetVersionExW VerSetConditionMask VerifyVersionInfoW EnterCriticalSection LeaveCriticalSection RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree HeapAlloc GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsGetValue TlsAlloc TlsSetValue TlsFree GetCurrentThreadId SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringW GetConsoleCP GetConsoleMode VirtualAlloc HeapReAlloc SetStdHandle LCMapStringA SetFilePointer GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize InitializeCriticalSectionAndSpinCount LoadLibraryA FlushFileBuffers CreateFileA WriteConsoleA GetConsoleOutputCP WriteConsoleW GetModuleHandleW FormatMessageW MultiByteToWideChar lstrlenA GetLastError FreeLibrary GetProcAddress LoadLibraryW LocalFree DeleteFileW LocalAlloc GetModuleHandleA

user32

LoadStringW

advapi32

CryptDestroyKey CryptDestroyHash CryptSignHashW CryptHashData CryptCreateHash CryptGetProvParam CryptEnumProvidersW RegDeleteKeyW RegSetValueExW RegCreateKeyExW CryptGetUserKey TraceEvent CryptReleaseContext CryptAcquireContextW ControlTraceW RegOpenKeyExW RegQueryValueExW RegCloseKey GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags RegisterTraceGuidsW UnregisterTraceGuids CryptGenRandom CryptGetKeyParam CryptExportKey CryptGenKey CryptDecrypt CryptImportKey CryptSetKeyParam

ole32

CoCreateInstance CoInitialize CoUninitialize CoCreateGuid StringFromGUID2

oleaut32

SysAllocString SysStringByteLen SysAllocStringByteLen SysFreeString

crypt32

CertDeleteCertificateFromStore CertOpenStore CertCloseStore CertFreeCertificateContext CertGetNameStringW CertNameToStrW CertFindExtension CryptDecodeObjectEx CryptAcquireCertificatePrivateKey CertVerifyTimeValidity CertGetCertificateContextProperty CertEnumCertificatesInStore CertAddCertificateContextToStore CertDuplicateCertificateContext CertFindCertificateInStore CertCreateCertificateContext CryptExportPublicKeyInfo CryptEncodeObject CertAddEncodedCertificateToStore CertSetCertificateContextProperty

shlwapi

StrStrIW PathFileExistsW

CryptoKitHost.UnionPay.x86.exe

IMPHASH 252b29e7c01d580811fd8f8a8548ebae
SHA256 40c4af740c43fd7c3adf87e43866391c5c9a5aebc6b25b953c4e1e907443f5fa
MD5 ab1b49fa76597a54ada540dc9784a4db
SHA1 fdaf14d871d547a546e4a5d0e550a66044539d12
SHA512 2d76aef9628c76b2086039d13aa6fd651151525fef29402d79215c63a6fb63164d2d2e9dc58b91abb997c822a83f4ca819f7fa30cb1738276704691435c804f4
SSDEEP 6144:4ElOkVZIBBoamLlnWakxXQAORh28iv+tvH:4ERV6BoamxnWaqXQwWtv
TLSH
T1AA846C23F3B4C073E6A221B1A9B997A9287EB2361F21D4CB63B40D5C5D606F0993571E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

89:0d:d1:da:08:1d:f4:d2:4b:bf:69:f2:be:95:5e:54:db:bf:4e:64

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Chains

Oct 8, 2021

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Subject

CN=China Financial Certification Authority Co. Ltd,O=China Financial Certification Authority Co. Ltd,ST=Beijing,C=CN

Serial Number

0f:7a:91:1e:ff:5e:e2:7c:6c:d9:2a:85:ed:a3:a0:40

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 7, 2020 - Feb 10, 2023

Minor OS version

0

Major OS version

5

Entry point

154890

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\agent\_work\114\s\Toolkits\Private\Src\CryptoKits\UnionPay\CryptoKit\x86\Release\CryptoKitHost.UnionPay.x86.pdb

kernel32

lstrcmpiW LeaveCriticalSection RaiseException EnterCriticalSection LoadLibraryExW InitializeCriticalSection DeleteCriticalSection InterlockedDecrement InterlockedIncrement GetCurrentThreadId GetCurrentProcess FlushInstructionCache GlobalAlloc GlobalLock GlobalUnlock GlobalFree TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlUnwind HeapFree lstrlenW TlsGetValue TlsAlloc TlsSetValue TlsFree SetHandleCount GetStdHandle GetFileType GetStartupInfoA Sleep ExitProcess GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetConsoleCP GetConsoleMode VirtualAlloc HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW HeapSize SetFilePointer SetStdHandle LCMapStringA InitializeCriticalSectionAndSpinCount LoadLibraryA FlushFileBuffers CreateFileA WriteConsoleA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW GetLocaleInfoA GetProcessHeap OutputDebugStringA GetFileAttributesW GetVersion GetModuleHandleA GetModuleFileNameW GetVersionExW WriteFile DeleteFileW GetFullPathNameW ReadFile MultiByteToWideChar WideCharToMultiByte FreeResource LoadResource SizeofResource FindResourceW FileTimeToSystemTime SetLastError InterlockedCompareExchange IsProcessorFeaturePresent GetModuleHandleW FormatMessageW SystemTimeToTzSpecificLocalTime CloseHandle GetFileSizeEx CreateFileW GetLastError FreeLibrary GetProcAddress LoadLibraryW LocalFree HeapAlloc LocalAlloc

user32

GetWindowLongW MonitorFromWindow GetMonitorInfoW GetParent GetClientRect GetWindow LoadImageW GetForegroundWindow GetActiveWindow wsprintfW SendMessageW BringWindowToTop ShowWindow BeginPaint FillRect EndPaint EndDialog GetCursorPos PtInRect TrackMouseEvent InvalidateRect DrawTextW CreateWindowExW MapWindowPoints SetWindowPos GetDlgItem GetWindowRect GetSystemMetrics ScreenToClient SetWindowLongW DialogBoxParamW DefWindowProcW CharNextW CallWindowProcW LoadStringW UnregisterClassA

advapi32

CryptDestroyHash CryptHashData CryptCreateHash RegDeleteKeyW RegSetValueExW RegCreateKeyExW CryptGetProvParam CryptReleaseContext CryptDestroyKey CryptGetKeyParam RegDeleteValueW RegEnumKeyExW RegQueryInfoKeyW CryptAcquireContextW CryptGetUserKey CryptEnumProvidersW CryptGetHashParam TraceEvent ControlTraceW RegOpenKeyExW RegQueryValueExW RegCloseKey GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags RegisterTraceGuidsW UnregisterTraceGuids CryptSignHashW

oleaut32

SysFreeString SysAllocString VarUI4FromStr SysAllocStringLen SysStringByteLen SysAllocStringByteLen

shlwapi

StrStrIW PathRemoveFileSpecW PathFindExtensionW PathFileExistsW

crypt32

CryptEncodeObject CertFreeCertificateContext CertDuplicateCertificateContext CertOpenStore CertAddCertificateContextToStore CertEnumCertificatesInStore CertCreateCertificateContext CryptAcquireCertificatePrivateKey CertCloseStore CertNameToStrW CertFindExtension CryptDecodeObjectEx CertVerifyTimeValidity CertGetCertificateContextProperty

msimg32

GradientFill

gdiplus

GdipDisposeImage GdipAlloc GdipFree GdipGetImageHeight GdipGetImageWidth GdipDrawImageRectRectI GdipDeleteGraphics GdipCreateFromHDC GdiplusShutdown GdiplusStartup GdipCloneImage GdipLoadImageFromStream

gdi32

SetBkMode CreateSolidBrush DeleteObject CreateCompatibleDC CreateCompatibleBitmap SelectObject GetStockObject CreatePen RoundRect BitBlt GetObjectW SetTextColor CreateFontIndirectW

shell32

SHGetSpecialFolderPathW

ole32

CreateStreamOnHGlobal CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree CoCreateInstance

cryptui

CryptUIDlgViewCertificateW

com.cfca.CertEnrollmentHost.UnionPay-firefox.json

SHA256 bb667c98e6d622c295b5baa25f5125d383af41b86ffb69a971fa62ca45a4f174
MD5 c12d30ac18ba27b1719156cf27739002
SHA1 7cf5e89dfd2ed836e8d0cc5961d031beb288c240
SHA512 3cca4fa72e9caf31ba5e3510072474783ada20664a2fac38996dc26fff2a562dcd0bc515f8afe26498e601b2b473c514d811ad6eedebb33ea317a5af7dde4556
TLSH
T158D05E4409047D2185D9DB18DB914609BB7B894723406A1E868F1808A61CAE7526A66C
MD5 SHA1 SHA512 TLSH

com.cfca.CertEnrollmentHost.UnionPay-win.json

SHA256 a83aabaae6926a3468085d2cbdd36d9092522226be394bebb2cfed849fbb1da9
MD5 c481904728e110b8d5412a3e6d4514fc
SHA1 3d0a3583ac9b1ebc5befb73888f1b86deb88ad91
SHA512 e6196685aa3705aa39132e3288c8968e4018f7b5ce6557b98303d73d994db01aedeb193290dc68b56457d4b7263eb858e64623d7dba3af136a3aaff8dd5559a2
TLSH
T179F09E280908A82E51D4CF169B45245EEF1F9A16533A3657B78B5B08755CCB750E023E
MD5 SHA1 SHA512 TLSH

com.cfca.CryptoKitHost.UnionPay-firefox.json

SHA256 b92307ad05021ba2a2d10dd6a078eea72ee8088e492c6d54bc0309a3f642fe49
MD5 cfebf4072f8e73b3de01e61e0ac9d3a8
SHA1 d1f4d27d9c85b690a61985a13b75cb95421fa404
SHA512 25f3ea8081df6bd878a7ee0de92a67054fe509bd3760b0114285e1e37c48cb58a46f4230e0cc165b0871848ac886b627b7032b7f8724e300b1ffd46d2f479775
TLSH
T196D0A7140804FD82C6D9B9048D718616F37A4D473694AF18978B5004755C6B7426A75C
MD5 SHA1 SHA512 TLSH

com.cfca.CryptoKitHost.UnionPay-win.json

SHA256 898998fa29295eb3d8ce0974a0fe5fb05d2c8240703666dd0187e27d3d7b2a9d
MD5 bd8aae37474f2049e13cebc0375ec729
SHA1 f9671a4a93fe93141527c8bfd8d0676d40d611b2
SHA512 417aae019837bf371bb387df623710ccbd12be31ef7326c377ca4966f59d36f4ab921e6342da66a61dbefa946d1ad9bb3a393e3771d2ed0e963026e20da08bb7
TLSH
T138F00E2819C8A81E86E45B004E2A640AEB1E051366BB770BBB428304321CC3751E12AE
MD5 SHA1 SHA512 TLSH

cpkekonaflngeeomdaofgeiolmljjefe.json

SHA256 a2a0347d6656980f5c02c9ba85632ca8ec8ad2011857b599a2af20a97da7f6a9
MD5 4ba5cdf820e182872ef71718c3704913
SHA1 3ff24ffb94a1de167e97195a7328ede578bae2d5
SHA512 0893dc29ce73527c4a30513fae5c95fcc55b42a55a67b1f92e1b7d292001e3e90749d12c05d977ed20a270ff96f6b3b5855f54dc07b09267ef48450e3fa05b44
TLSH
T10831B553188D86F02F20EAA8BD76AE07A578022938C0E81D83F2059A4B635DE02173CF
MD5 SHA1 SHA512 TLSH

cpkekonaflngeeomdaofgeiolmljjefe.zip

SHA256 fe343cb3efa21ec039c285dc55cbcee834cf640d3e29a1326ebafea92eb32fe1
MD5 8611495354cda34de8c4d9909d4592c8
SHA1 fc939fa2b0d7e1f7793cc4aed37e849ab805c866
SHA512 ee45cd0bed61a2f09aa5a0bd15fb6d294b9ecd3fee0e093693a79cee1725203ed5a816bfe2852c93dd66a5394034f0b7ee2acac7cd624e836eb4bb48620f9c7c
SSDEEP 384:zYw5uzDU5R+Gll6y+d9/zdi5QziQL0kasV:0w5uzDU5EG6yQ9/zdiM1V
TLSH
T15B527DA4F6CF21F4E335EB780AC89A41BE95365705E1B64F58508E182E3FA3C00436CE
MD5 SHA1 SHA512 SSDEEP TLSH

cpkekonaflngeeomdaofgeiolmljjefe/3.2.0.8_0/_metadata/computed_hashes.json

SHA256 51feea85648d67a2ad61700d16248fa354f4b44ecde1c88c607a879f1fc82e2d
MD5 c2283618e18e5f29bcb1f7cb98b92fb8
SHA1 0720cae5cc48f60a1e5af20a3de17a3b7268dbcf
SHA512 6b1a03bb45b66aba6dfca0a3cf87c82e6c01d6244b1f3df83aa699f8268e68cc5584c2d79c0e5f8e16e8d1236c6167b00540fc707928bddc6c2af72c2ff3b4ba
TLSH
T1EAC02B14540F8073CF1493405B070826F53400C04D0816E03A107D34F28C48D13C711E
MD5 SHA1 SHA512 TLSH

cpkekonaflngeeomdaofgeiolmljjefe/3.2.0.8_0/_metadata/verified_contents.json

SHA256 06a36a88c3a085ae7282fa02116f26c11d86f040ca764d2a3ef54cb884371fd8
MD5 90bfc3f529ae40859405dad7441dc455
SHA1 c8dab94f2570da45a84a20620a432f8aa150e737
SHA512 a07f53170c507ca138a4533ed8085d55d34e2bcce8ce51b82d0356eeb3e2ff0adf8e7e7cc388d16ce0555e1a3f716d88565db1a6d7c80214674ba9832a8a85a1
TLSH
T13631D823CC0CF689314731782DC06B2FFB1EA6D23B65233665D29905E1D420DC6A31DD
MD5 SHA1 SHA512 TLSH

cpkekonaflngeeomdaofgeiolmljjefe/3.2.0.8_0/eventPage.js

SHA256 b24e2351df4b5f64f7ccd634e40672f28c551536c9966251bc61f324f1108769
MD5 7991798907737bdb6699d5f5f4b90f51
SHA1 5a65793e4d057186fa9827b0bbc8049e1608b1dc
SHA512 19ce553bae794bf2afd08ebb4695c7c2e2863acddb27757f33fe91ccf2d9a1121ce85a2a51e7ddc3a203255277522f52e902c51b3247a7577f86d136befbc1e9
TLSH
T1FE7191961ED321564773A3769F3B1601FA3A61570A0D976CBE8C47E11F348604289FED
MD5 SHA1 SHA512 TLSH

cpkekonaflngeeomdaofgeiolmljjefe/3.2.0.8_0/icon-128.png

SHA256 bea6391b6ddfc0ca53a11d6b762d67e055413a0cc7a2369b86c7b5906800dc7c
MD5 1752662865a3c3e3e4671cbb521b4553
SHA1 238fa87e00afc8b90ef8a2d8ab786ed0b26d8d14
SHA512 858d9d76d4db6233a5996dc735229cea2a413bd7ee8cc0687a920683eca305d4e29e1a3539f7aa34aa5579f74e03ca2a595f7f8b54425644fd30a271b3081f37
SSDEEP 96:rUihYVIreox/uWKlNAS55uzfbFp4tL1TxbsaEFqDlb17lr5B9y/K+TKsit8:Yav7uWKlWw5uzDot51bszUVll6/K+J
TLSH
T1F3C1AE713CA7B1E68475B53D8E5D56821BC38F411A22A384AA1CCC3A3E3FC58D053CAE
MD5 SHA1 SHA512 SSDEEP TLSH

cpkekonaflngeeomdaofgeiolmljjefe/3.2.0.8_0/icon-16.png

SHA256 c905d2d994ae4a3ccffc4292af05c45ea4c8095576901f20b54a46d84a029448
MD5 9a220f4366fb56d18d24933e43ef4f3a
SHA1 a60c18e62acc2f416348e75917c2cc1935d8dfc5
SHA512 7bf4444e7b8a431d681f4cef68b59550c21f3c9ec4df304417590888c5c072b74461331d2fe4dd93df4e0df0ca679246e8bc8005e0e08816f1912bb8ceb61ca0
TLSH
T191F0B76C7A1929FCCF2DB2014B78508DDE50101B31F03085E233B47C528CF1521F02D4
MD5 SHA1 SHA512 TLSH

cpkekonaflngeeomdaofgeiolmljjefe/3.2.0.8_0/icon-48.png

SHA256 b03c28aea1df52490e1cec0734e66a418bd92d2c9c49709a052847131a5cd09c
MD5 3a7c0bd9b520802821feaefe4aff1193
SHA1 a6c1ff7288de3d76b5bcdfdc3d0ae89cd0a4a683
SHA512 3e19533d428d5ece9af021f4e25f7ba0c88ae1445430d04049db5bcb93eca6ee9c393af40b385e7b021867c6e61df49e51b4962477f594b457cbf8dda4c3aca4
TLSH
T1E6413AD1D72BA7386EAEE3E86CF61F22D14860954C8B571831CE3D552DBD9288207EC1
MD5 SHA1 SHA512 TLSH

cpkekonaflngeeomdaofgeiolmljjefe/3.2.0.8_0/manifest.json

SHA256 df6ec25cb423e1c97960c4bc263c40ad88e6ca31a227639ce2ef0a88b177c555
MD5 6ca676d4e35d35c3c759e03246294f9c
SHA1 e6a24c3fa6bdbb8bd1595f30b6dd02c02118982f
SHA512 9d8a88ed1ec21c9575152e2c34c58614044d7e4d1b1d6c81ff890d0991ea92ee91f7bb245aeb5be0cf1d953afe2221fa4e04617ded0de2ea52525052e5cb9487
TLSH
T1271123A3905598EF63B4A3A4B9F59503F224136E65818C4F317CD126CF3556B0108A8C
MD5 SHA1 SHA512 TLSH

flaibjgdieeiakhdmgpkcogifikjnjhk.json

SHA256 0809b3966af4cca1cc8efe99a4f76bea515121526554a4d33598355ce38aa8c2
MD5 be8845cfbee98424719421777af7721a
SHA1 a21315237af1a7db9d7f2e915a66c2d05187ccf0
SHA512 8d94288ba7f246288f2e0f50f4a690f0cef488befc413ca615d2ca35ce2f0b16dbda8f8f281a7702538dc9438f1f092211edad2acfb1f49c2f67b5967ab8872a
TLSH
T1CA31954B5D0E56F41F61DB8DBCB26E87E578022D7490C41C83FA908D40A34DD05233DB
MD5 SHA1 SHA512 TLSH

flaibjgdieeiakhdmgpkcogifikjnjhk.zip

SHA256 9cf9f303647480d2756ec707e1d995cc8a01ddf5a2b07163bbe0524a8a3d7ffb
MD5 492871b41dff5f7a806a20167bcc0753
SHA1 2839702a35927c6e098e0deef36d5fe5aef3d4d0
SHA512 13793932ffde5d9c5f894e88688086a961042074ed7a3e5a751cb7562bfc2212c4e001fc7ca23f12b70908ee0359235e3335e78f6d0308c79d19075dbb41d5d9
SSDEEP 192:oPZav7uWKlWw5uzDot51bszUVll6/K+W9SQnq6L8EuoQJLO19Q209oB1BZbn/W9e:iYw5uzDU5R+Gll6y+W9/qdiW20ctbfGy
TLSH
T14A62AE64F80B61F7D3B5CB7E065D0D11DE84FB5A4F64AB4643B8EE10BD9EB059402386
MD5 SHA1 SHA512 SSDEEP TLSH

flaibjgdieeiakhdmgpkcogifikjnjhk/3.2.0.6_0/_metadata/computed_hashes.json

SHA256 6318feeff499c764a07050b62f3d5e0c42e336e27c0edd36f72d092f8c2482d5
MD5 b26a0291ac8b2e79f0555a0c911093c8
SHA1 91736a20616280bf671c99b372d0bd7b499c030d
SHA512 503bf78f5b95ab49143179d520be0025e36b3a37b598320e8fb76b2d6217d4ddaa3c49e83ad122b8f22287dd02f46897c92dadca71a91ae9b7952f4e4e1b2caf
TLSH
T1CED0A701A95980B7CF54BB405F435977E92410C0EF486AE67A54BD38F29884E13D711F
MD5 SHA1 SHA512 TLSH

flaibjgdieeiakhdmgpkcogifikjnjhk/3.2.0.6_0/_metadata/verified_contents.json

SHA256 2654ef97a5d67934539ac2db69e6bc17ab29e5f186952ab09f044b7bea0fb1eb
MD5 fce3c52c667547b0825c3e0e1b58695b
SHA1 fd879d872c53eb4d73373d5f8cf92385d70481c8
SHA512 a7eee38b699e88954e50f91b53b43d9e842d58b4c71ec4b5b86e8cf9ce0959f26b0e15660c63251fd32f4bb70c7c354a00ce22c756d644fc3fa60b1d2536682b
TLSH
T1A6416526DD207D0E6525736654AF192AEF56816B5042381DB1FC84CD1FFC903A08BBFA
MD5 SHA1 SHA512 TLSH

flaibjgdieeiakhdmgpkcogifikjnjhk/3.2.0.6_0/eventPage.js

SHA256 b24e2351df4b5f64f7ccd634e40672f28c551536c9966251bc61f324f1108769
MD5 7991798907737bdb6699d5f5f4b90f51
SHA1 5a65793e4d057186fa9827b0bbc8049e1608b1dc
SHA512 19ce553bae794bf2afd08ebb4695c7c2e2863acddb27757f33fe91ccf2d9a1121ce85a2a51e7ddc3a203255277522f52e902c51b3247a7577f86d136befbc1e9
TLSH
T1FE7191961ED321564773A3769F3B1601FA3A61570A0D976CBE8C47E11F348604289FED
MD5 SHA1 SHA512 TLSH

flaibjgdieeiakhdmgpkcogifikjnjhk/3.2.0.6_0/icon-128.png

SHA256 bea6391b6ddfc0ca53a11d6b762d67e055413a0cc7a2369b86c7b5906800dc7c
MD5 1752662865a3c3e3e4671cbb521b4553
SHA1 238fa87e00afc8b90ef8a2d8ab786ed0b26d8d14
SHA512 858d9d76d4db6233a5996dc735229cea2a413bd7ee8cc0687a920683eca305d4e29e1a3539f7aa34aa5579f74e03ca2a595f7f8b54425644fd30a271b3081f37
SSDEEP 96:rUihYVIreox/uWKlNAS55uzfbFp4tL1TxbsaEFqDlb17lr5B9y/K+TKsit8:Yav7uWKlWw5uzDot51bszUVll6/K+J
TLSH
T1F3C1AE713CA7B1E68475B53D8E5D56821BC38F411A22A384AA1CCC3A3E3FC58D053CAE
MD5 SHA1 SHA512 SSDEEP TLSH

flaibjgdieeiakhdmgpkcogifikjnjhk/3.2.0.6_0/icon-16.png

SHA256 c905d2d994ae4a3ccffc4292af05c45ea4c8095576901f20b54a46d84a029448
MD5 9a220f4366fb56d18d24933e43ef4f3a
SHA1 a60c18e62acc2f416348e75917c2cc1935d8dfc5
SHA512 7bf4444e7b8a431d681f4cef68b59550c21f3c9ec4df304417590888c5c072b74461331d2fe4dd93df4e0df0ca679246e8bc8005e0e08816f1912bb8ceb61ca0
TLSH
T191F0B76C7A1929FCCF2DB2014B78508DDE50101B31F03085E233B47C528CF1521F02D4
MD5 SHA1 SHA512 TLSH

flaibjgdieeiakhdmgpkcogifikjnjhk/3.2.0.6_0/icon-48.png

SHA256 b03c28aea1df52490e1cec0734e66a418bd92d2c9c49709a052847131a5cd09c
MD5 3a7c0bd9b520802821feaefe4aff1193
SHA1 a6c1ff7288de3d76b5bcdfdc3d0ae89cd0a4a683
SHA512 3e19533d428d5ece9af021f4e25f7ba0c88ae1445430d04049db5bcb93eca6ee9c393af40b385e7b021867c6e61df49e51b4962477f594b457cbf8dda4c3aca4
TLSH
T1E6413AD1D72BA7386EAEE3E86CF61F22D14860954C8B571831CE3D552DBD9288207EC1
MD5 SHA1 SHA512 TLSH

flaibjgdieeiakhdmgpkcogifikjnjhk/3.2.0.6_0/key.pem

SHA256 c000eb4f211cf25114366ee6a395c421d8801ab2d18ee9da1e0a29e7216658cc
MD5 781607b8e8a2d09dcebc1464c63f5c05
SHA1 19d49c39dee041ecea1711158daa808e4142438a
SHA512 11704b2bfef5d07c3ea32ff0f7f246a87d1b5b6411eaccf3c898ffd68b30704d58293d06b372947f69750a9f0ce070e66e4f6ef4943364f969e71687318ae956
TLSH
T1EC311AF319A418422D7681BC0AAAEF0D6229237353900A6256134E69FE1460FBCBE5D4
MD5 SHA1 SHA512 TLSH

flaibjgdieeiakhdmgpkcogifikjnjhk/3.2.0.6_0/manifest.json

SHA256 713b38646b5168409b772eb1e4f6455c1ea363c195af5c50c10963a836470c43
MD5 bfb1c76457e3b402dedab0aed8c0e555
SHA1 ec62898add3e5a93890e71f2f3f8d9d43a989481
SHA512 469fd0837653dfb7482785b042381056c9051bc654dd1518119255b76ef03613053a3326180dd6416fa57cbc359a5811b10739f246c79652396a850583537bb3
TLSH
T1311120AB955A68AF62BAD785B8E05683F234032E61808C8F727CD009CF314BA40666DC
MD5 SHA1 SHA512 TLSH

igiadmhndphenajafopeimbkfnnaofia.json

SHA256 c664041e6110e99386f5125bc824974f32064c37b9ea8d84e883a633fdcb861f
MD5 0fb8eb02a95e16086881979242db6c1a
SHA1 1511a5377aeb3ed255ef112b6dc0d3276c064304
SHA512 6eb27f168ff7c3d96e8988120f45e04842af12d12e75d6a2adf934abe064d20b16b39388fa03f880bdf8c2678a8b0e6d58ce8fc0ce61b65148af6ef053b241bf
TLSH
T11E31974B5A5FC6F42F50D58DBEBB9A87A578011C3890C45C47F5589D41D15ED06132CB
MD5 SHA1 SHA512 TLSH

igiadmhndphenajafopeimbkfnnaofia.zip

SHA256 164c51787c29a68f51344de20bc612296aafba44ba9d4fe9651504e049f262e4
MD5 89362b095cb5907605b1bc84edcb4cba
SHA1 909ee259e9ae2a3bc0c023bb8355166404ea3bea
SHA512 70ed5fce6ff17a5537e7e7a9d79490d814dd2854a843f42a51550bc0b15c9de6826fd1c6ee168087b516134d1df0d0f2dc3a872f59107853772baa62d5a3b5ed
SSDEEP 192:pPhav7uWKlWw5uzDot51bszUVll6/K+C9SQnq678EuoQJLOWVMXCGe5bnCkDurQy:9Yw5uzDU5R+Gll6y+C9/adpbmOsR
TLSH
T1C0628EF08EBB457DD7E9B2F837DE1702FF456A110D634706A403C92A2E5A9148703AFA
MD5 SHA1 SHA512 SSDEEP TLSH

igiadmhndphenajafopeimbkfnnaofia/3.2.0.8_0/_metadata/computed_hashes.json

SHA256 6eb7348c0f17955d246d54ecd0c987d0a957a8c6350bbb1c8c0eb7193b87c919
MD5 10d0e45c60f29dc5af20dfc0732749af
SHA1 f82280b45f02ec6db457024783fb832c0481735e
SHA512 522a96a54f715290e89ffe749b74a095d4b64c79daee42c1601b384df770206931f12b0b6a4edbae097aecfe2ca1ae0893afbba558b97ce3f79269b9f0943a66
TLSH
T1CED0A700595E50B3DF5067401F4B0837E82512C4AE4C56E1BF94FE34F28845E12D711E
MD5 SHA1 SHA512 TLSH

igiadmhndphenajafopeimbkfnnaofia/3.2.0.8_0/_metadata/verified_contents.json

SHA256 3fc95e8c1a0915c0ad4ac8470e09315fdc3b49c8fc16f21251512ae7ed9c06dd
MD5 d780c1155c1088b9b8d6ee57fdf4bc41
SHA1 db275a50866f719d6119c2cb7e782bba51879bee
SHA512 e47c48418f3e30471fa2ea70568ffb8786fa6b9da483a02a548c28c14d1240d89e5a6c792e243612ccb8373bbb2e0f7d8d3f05a9ebfefa56bed509758ebc3c75
TLSH
T1C141C612CD90780DA137273499BEA97BF78081AB0280262E35DF40CD0FF5943C1DA9E9
MD5 SHA1 SHA512 TLSH

igiadmhndphenajafopeimbkfnnaofia/3.2.0.8_0/eventPage.js

SHA256 b24e2351df4b5f64f7ccd634e40672f28c551536c9966251bc61f324f1108769
MD5 7991798907737bdb6699d5f5f4b90f51
SHA1 5a65793e4d057186fa9827b0bbc8049e1608b1dc
SHA512 19ce553bae794bf2afd08ebb4695c7c2e2863acddb27757f33fe91ccf2d9a1121ce85a2a51e7ddc3a203255277522f52e902c51b3247a7577f86d136befbc1e9
TLSH
T1FE7191961ED321564773A3769F3B1601FA3A61570A0D976CBE8C47E11F348604289FED
MD5 SHA1 SHA512 TLSH

igiadmhndphenajafopeimbkfnnaofia/3.2.0.8_0/icon-128.png

SHA256 bea6391b6ddfc0ca53a11d6b762d67e055413a0cc7a2369b86c7b5906800dc7c
MD5 1752662865a3c3e3e4671cbb521b4553
SHA1 238fa87e00afc8b90ef8a2d8ab786ed0b26d8d14
SHA512 858d9d76d4db6233a5996dc735229cea2a413bd7ee8cc0687a920683eca305d4e29e1a3539f7aa34aa5579f74e03ca2a595f7f8b54425644fd30a271b3081f37
SSDEEP 96:rUihYVIreox/uWKlNAS55uzfbFp4tL1TxbsaEFqDlb17lr5B9y/K+TKsit8:Yav7uWKlWw5uzDot51bszUVll6/K+J
TLSH
T1F3C1AE713CA7B1E68475B53D8E5D56821BC38F411A22A384AA1CCC3A3E3FC58D053CAE
MD5 SHA1 SHA512 SSDEEP TLSH

igiadmhndphenajafopeimbkfnnaofia/3.2.0.8_0/icon-16.png

SHA256 c905d2d994ae4a3ccffc4292af05c45ea4c8095576901f20b54a46d84a029448
MD5 9a220f4366fb56d18d24933e43ef4f3a
SHA1 a60c18e62acc2f416348e75917c2cc1935d8dfc5
SHA512 7bf4444e7b8a431d681f4cef68b59550c21f3c9ec4df304417590888c5c072b74461331d2fe4dd93df4e0df0ca679246e8bc8005e0e08816f1912bb8ceb61ca0
TLSH
T191F0B76C7A1929FCCF2DB2014B78508DDE50101B31F03085E233B47C528CF1521F02D4
MD5 SHA1 SHA512 TLSH

igiadmhndphenajafopeimbkfnnaofia/3.2.0.8_0/icon-48.png

SHA256 b03c28aea1df52490e1cec0734e66a418bd92d2c9c49709a052847131a5cd09c
MD5 3a7c0bd9b520802821feaefe4aff1193
SHA1 a6c1ff7288de3d76b5bcdfdc3d0ae89cd0a4a683
SHA512 3e19533d428d5ece9af021f4e25f7ba0c88ae1445430d04049db5bcb93eca6ee9c393af40b385e7b021867c6e61df49e51b4962477f594b457cbf8dda4c3aca4
TLSH
T1E6413AD1D72BA7386EAEE3E86CF61F22D14860954C8B571831CE3D552DBD9288207EC1
MD5 SHA1 SHA512 TLSH

igiadmhndphenajafopeimbkfnnaofia/3.2.0.8_0/key.pem

SHA256 0020e7c25d72e7c6fe3099a9be709f018e5b62cf6bdeec250f3aabd78ed98710
MD5 c91f7dd52e77c28a7fffce2123e2cb72
SHA1 318a0c09c774fc0933d3cb28a33756c9976c093d
SHA512 b8096809c28e0cacedd7546544ffa288fa1feca35381d9929a2a87544d3bad31c951f3da8c203f46c87b496d0e97edfa6ac3267a2e22286c7e75f92a3020d796
TLSH
T18231D8E35FED7EC16620EC9A2E1402FB829C98B6A39213654D902527A679C4C996C488
MD5 SHA1 SHA512 TLSH

igiadmhndphenajafopeimbkfnnaofia/3.2.0.8_0/manifest.json

SHA256 573432dcecfd1dfaba746bef59cd447882f0ea35994c9ea74ddd08dfbccac1a2
MD5 7ca9f26a332100a1dd8eeb62eea7392e
SHA1 f7e7112ca8b273db37e831a239101945976701ae
SHA512 966f07e5f892bc9aca391402957bb4c70fef75f67796b9b1584c53ab9a5c56317c560b6c7124d0223ddc4376a8e0ed9650fde4eae63f3278400ea4ac05eef9dd
TLSH
T19211009BA16ED9AB63B49746BAF98147F234531E25808C8F357CE428CFB053A404298D
MD5 SHA1 SHA512 TLSH

pgckjplmeoddljccnmmmighdiiannibk.json

SHA256 7489cac4a4f8302f141cc674448eb0f633d76ddf16f4fb04cad51fd6ccdc0bb2
MD5 1f606ac53f1b984cebe8b04c6014aeff
SHA1 b13aad0aa96578e8f8ef41494b6e35519a5dcfa6
SHA512 65d4ba2b117bd20daaaaf0934aaff564b4a540b8cd6fd18f47a5a789647e1187291a94efb12850f1212675e9ba8cad3f034f667af7a986853f4b3a9c7f990e87
TLSH
T1F831BA0B1D4DD7F45F28DB9A7D76A84B95B9021D3480E578C3F258CD4AA35D905033D7
MD5 SHA1 SHA512 TLSH

pgckjplmeoddljccnmmmighdiiannibk.zip

SHA256 07138f206a24664ad144d41c9dfe905b9d130fae06426807f2cdc5bc05d3f218
MD5 04ba358033c894801b433d85c5a9f6be
SHA1 81aa9990d4aaeb88bc7d6b04663637ad753a9645
SHA512 99352aac91766d3e68320492ed3d2961beae4cdd2133d985709b59a233ee42bbf62551f2a4105263a8647233ec924655a2df6460a801764e52072996c2121459
SSDEEP 192:9PLav7uWKlWw5uzDot51bszUVll6/K+E9SQnq6B8EuoQJLOA+tF2k/QzaXE:jYw5uzDU5R+Gll6y+E9/kdt+D2kIeXE
TLSH
T1FA529E20F6072667C7AA9BFD2FC0120BED4A37430591F791B84B6E692DAF6944112366
MD5 SHA1 SHA512 SSDEEP TLSH

pgckjplmeoddljccnmmmighdiiannibk/3.2.0.6_0/_metadata/computed_hashes.json

SHA256 51feea85648d67a2ad61700d16248fa354f4b44ecde1c88c607a879f1fc82e2d
MD5 c2283618e18e5f29bcb1f7cb98b92fb8
SHA1 0720cae5cc48f60a1e5af20a3de17a3b7268dbcf
SHA512 6b1a03bb45b66aba6dfca0a3cf87c82e6c01d6244b1f3df83aa699f8268e68cc5584c2d79c0e5f8e16e8d1236c6167b00540fc707928bddc6c2af72c2ff3b4ba
TLSH
T1EAC02B14540F8073CF1493405B070826F53400C04D0816E03A107D34F28C48D13C711E
MD5 SHA1 SHA512 TLSH

pgckjplmeoddljccnmmmighdiiannibk/3.2.0.6_0/_metadata/verified_contents.json

SHA256 098043c41ac4ab52f005ab59b4dd6ae132b709eb0a480fd26c084bc420bbaccc
MD5 bd09e193b96a09849628d517544b0e50
SHA1 0318ca44c0f64615ffab827b32155bb29d50232a
SHA512 0c4f1ebe52a911d01a108fa22bb21dd03fb0f137939eee4b9933e3b7b586a2d65e780191e7b6dde06596e5e6c91b5bd7b2ff298e0783aefbc8748a1b922bb7be
TLSH
T19C31D6738C0CB488250EFA745CC8735B4B0EB2A1A3B8263F65CA4E55C0E8649D2F34CE
MD5 SHA1 SHA512 TLSH

pgckjplmeoddljccnmmmighdiiannibk/3.2.0.6_0/eventPage.js

SHA256 b24e2351df4b5f64f7ccd634e40672f28c551536c9966251bc61f324f1108769
MD5 7991798907737bdb6699d5f5f4b90f51
SHA1 5a65793e4d057186fa9827b0bbc8049e1608b1dc
SHA512 19ce553bae794bf2afd08ebb4695c7c2e2863acddb27757f33fe91ccf2d9a1121ce85a2a51e7ddc3a203255277522f52e902c51b3247a7577f86d136befbc1e9
TLSH
T1FE7191961ED321564773A3769F3B1601FA3A61570A0D976CBE8C47E11F348604289FED
MD5 SHA1 SHA512 TLSH

pgckjplmeoddljccnmmmighdiiannibk/3.2.0.6_0/icon-128.png

SHA256 bea6391b6ddfc0ca53a11d6b762d67e055413a0cc7a2369b86c7b5906800dc7c
MD5 1752662865a3c3e3e4671cbb521b4553
SHA1 238fa87e00afc8b90ef8a2d8ab786ed0b26d8d14
SHA512 858d9d76d4db6233a5996dc735229cea2a413bd7ee8cc0687a920683eca305d4e29e1a3539f7aa34aa5579f74e03ca2a595f7f8b54425644fd30a271b3081f37
SSDEEP 96:rUihYVIreox/uWKlNAS55uzfbFp4tL1TxbsaEFqDlb17lr5B9y/K+TKsit8:Yav7uWKlWw5uzDot51bszUVll6/K+J
TLSH
T1F3C1AE713CA7B1E68475B53D8E5D56821BC38F411A22A384AA1CCC3A3E3FC58D053CAE
MD5 SHA1 SHA512 SSDEEP TLSH

pgckjplmeoddljccnmmmighdiiannibk/3.2.0.6_0/icon-16.png

SHA256 c905d2d994ae4a3ccffc4292af05c45ea4c8095576901f20b54a46d84a029448
MD5 9a220f4366fb56d18d24933e43ef4f3a
SHA1 a60c18e62acc2f416348e75917c2cc1935d8dfc5
SHA512 7bf4444e7b8a431d681f4cef68b59550c21f3c9ec4df304417590888c5c072b74461331d2fe4dd93df4e0df0ca679246e8bc8005e0e08816f1912bb8ceb61ca0
TLSH
T191F0B76C7A1929FCCF2DB2014B78508DDE50101B31F03085E233B47C528CF1521F02D4
MD5 SHA1 SHA512 TLSH

pgckjplmeoddljccnmmmighdiiannibk/3.2.0.6_0/icon-48.png

SHA256 b03c28aea1df52490e1cec0734e66a418bd92d2c9c49709a052847131a5cd09c
MD5 3a7c0bd9b520802821feaefe4aff1193
SHA1 a6c1ff7288de3d76b5bcdfdc3d0ae89cd0a4a683
SHA512 3e19533d428d5ece9af021f4e25f7ba0c88ae1445430d04049db5bcb93eca6ee9c393af40b385e7b021867c6e61df49e51b4962477f594b457cbf8dda4c3aca4
TLSH
T1E6413AD1D72BA7386EAEE3E86CF61F22D14860954C8B571831CE3D552DBD9288207EC1
MD5 SHA1 SHA512 TLSH

pgckjplmeoddljccnmmmighdiiannibk/3.2.0.6_0/manifest.json

SHA256 d69a82ea74756f9f7d7e50fa4304e9136f4995cfc4ed071c6ade031568ff758d
MD5 630920de3ab0fc60c15349c499d094bc
SHA1 cdae56397a535ee15f942a5713dd554d6273439d
SHA512 b68324b344bfaa254d28d31413a0e55181dfedbc5b1aaac1adafb1738a6eb3f38514918f6f74c1059f4a9d54fc9a44a18d5c662d0eb4e3e7c6aa76ba361aacfe
TLSH
T11611422BA485D9AFA3BCD35269F48047F375132E22819C9B71BCD08CCF32A754445B9D
MD5 SHA1 SHA512 TLSH

uninst.exe.nsis

SHA256 c1e3175fe4fc52c5ad4984ff3a1ab08f06548fb64bbc06ede220ba3db3699656
MD5 15d2bdc0e49d02884272c079cd9dc85c
SHA1 a1ff51b772c7d65d9d4d814e6e831c279f691c42
SHA512 e868223bee62ac6daadb84c0d1c5165baea4e93c80a646eae7efb63a7db79d6e1ceb2c858e5705d05547c5877216b1b63d28c35a103d0da0f898e0ff6dfa0f3d
SSDEEP 49152:ouZoYsWg+y3LKo6wA3DzmIjGnMYr5yg/rg9Jgg0qt:Pix9A3Dv05fTkgg0g
TLSH
T168A533F2B2CA93698CC90BD7CB57FE52827393D0364C6114F0EB121919A7E8E89C7B45
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

CryptoKit.UnionPay.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$PLUGINSDIR/CrxInstaller.dll

shlwapi

kernel32

user32

advapi32

shell32

generic

$PLUGINSDIR/FindProcDLL.dll

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/nsExec.dll

kernel32

user32

advapi32

generic

$SYSDIR/CryptoKit.CertEnrollment.UnionPay.x64.dll

kernel32

user32

advapi32

ole32

oleaut32

crypt32

shlwapi

generic

$SYSDIR/CryptoKit.CertEnrollment.UnionPay.x86.dll

kernel32

user32

advapi32

ole32

oleaut32

crypt32

shlwapi

generic

$SYSDIR/CryptoKit.UnionPay.x64.dll

kernel32

user32

advapi32

ole32

oleaut32

shlwapi

crypt32

gdiplus

gdi32

shell32

msimg32

cryptui

generic

$SYSDIR/CryptoKit.UnionPay.x86.dll

kernel32

user32

advapi32

ole32

oleaut32

shlwapi

crypt32

gdiplus

gdi32

shell32

msimg32

cryptui