c4f1185a5fd41f70613f846ad1cb90c9

.rar

ga/SqlIn.mdb

ga/ad/nzcms_link.asp

.html

ga/ad/nzcms_tj.asp

.html

ga/ad/nzcms_tj_files/01.gif

.gif

ga/ad/pic-index.asp

.html .js polyglot

ga/ad/pic2-index.asp

.html .js polyglot

ga/admin/GetCode.asp

.vbs

ga/admin/getcode/Head.Fix

ga/admin/getcode/body.Fix

ga/admin/images/RSCount.gif

.gif

ga/admin/images/Thumbs.db

ga/admin/images/XX.gif

.gif

ga/admin/images/a.gif

.gif

ga/admin/images/ad_01.gif

.gif

ga/admin/images/ad_02.gif

.gif

ga/admin/images/ad_04.gif

.gif

ga/admin/images/addinfo.gif

.gif

ga/admin/images/bar1.gif

.gif

ga/admin/images/botbg.gif

.gif

ga/admin/images/deng.png

.png

ga/admin/images/dui.png

.png

ga/admin/images/end.gif

.gif

ga/admin/images/help.gif

.gif

ga/admin/images/help.png

.png

ga/admin/images/help2.gif

.gif

ga/admin/images/hf.png

.png

ga/admin/images/info_top.gif

.gif

ga/admin/images/left1.gif

.gif

ga/admin/images/left2.gif

.gif

ga/admin/images/logo.jpg

.jpg

ga/admin/images/logo/nzcms_logo.fla

ga/admin/images/logo/nzcms_logo.swf

ga/admin/images/logo/top.jpg

.jpg

ga/admin/images/menu01.gif

.gif

ga/admin/images/menu02.gif

.gif

ga/admin/images/mhf.png

.png

ga/admin/images/no.gif

.gif

ga/admin/images/no.png

.png

ga/admin/images/nz.gif

.gif

ga/admin/images/nz519_02.gif

.gif

ga/admin/images/nz_01.gif

.gif

ga/admin/images/nz_05.gif

.gif

ga/admin/images/nzcms.mp3

ga/admin/images/nzcms/Thumbs.db

ga/admin/images/nzcms/www.ningzhi.net_01.gif

.gif

ga/admin/images/nzcms/www.ningzhi.net_010.gif

.gif

ga/admin/images/nzcms/www.ningzhi.net_011.gif

.gif

ga/admin/images/nzcms/www.ningzhi.net_02.gif

.gif

ga/admin/images/nzcms/www.ningzhi.net_03.gif

.gif

ga/admin/images/nzcms/www.ningzhi.net_04.gif

.gif

ga/admin/images/nzcms/www.ningzhi.net_05.gif

.gif

ga/admin/images/nzcms/www.ningzhi.net_06.gif

.gif

ga/admin/images/nzcms/www.ningzhi.net_07.gif

.gif

ga/admin/images/nzcms/www.ningzhi.net_08.gif

.gif

ga/admin/images/nzcms/www.ningzhi.net_09.gif

.gif

ga/admin/images/nzcms_ad.jpg

.jpg

ga/admin/images/nzcms_admin.jpg

.jpg

ga/admin/images/nzcms_close.gif

.gif

ga/admin/images/nzcms_top01.gif

.gif

ga/admin/images/nzsoft_06.gif

.gif

ga/admin/images/nzsoft_14.gif

.gif

ga/admin/images/s.gif

.gif

ga/admin/images/samll_addinfo.gif

.gif

ga/admin/images/sort_bg.gif

.gif

ga/admin/images/sort_bg2.gif

.gif

ga/admin/images/title.gif

.gif

ga/admin/images/top.gif

.gif

ga/admin/images/top2.gif

.gif

ga/admin/images/top_bg.gif

.gif

ga/admin/images/top_bg.png

.png

ga/admin/images/wenj.gif

.gif

ga/admin/images/www.ningzhi.net.jpg

.jpg

ga/admin/images/xin.gif

.gif

ga/admin/images/yzm.gif

.gif

ga/admin/index.asp

.html

ga/admin/login.asp

ga/admin/manage.asp

ga/admin/manage_web.asp

.html

ga/admin/nzcms_admin/index.asp

.vbs

ga/admin/nzcms_admin/ningzhi.asp

.vbs

ga/admin/nzcms_admin/ningzhi.css

ga/admin/nzcms_admin/ningzhi.js

.js

ga/admin/nzcms_left.asp

.html

ga/admin/out.asp

ga/admin/top.asp

.html .js polyglot

ga/admin/web1/index.asp

.html

ga/admin/web1/nzcms_2.asp

.html

ga/admin/web1/nzcms_3.asp

.html

ga/admin/web1/nzcms_4.asp

.html

ga/admin/web1/nzcms_5.asp

.html

ga/admin/web1/nzcms_dim.asp

.html

ga/admin/web1/nzcms_save_info.asp

ga/admin/web10/index.asp

.html

ga/admin/web10/nzcms_1.asp

ga/admin/web10/nzcms_2.asp

ga/admin/web10/nzcms_save_info.asp

ga/admin/web2/index.asp

.html

ga/admin/web2/nzcms_2.asp

.html

ga/admin/web2/nzcms_save_info.asp

ga/admin/web3/index.asp

ga/admin/web3/nz.asp

.html

ga/admin/web3/nzcms_0.asp

.html .js polyglot

ga/admin/web3/nzcms_1.asp

.html .js polyglot

ga/admin/web3/nzcms_2.asp

ga/admin/web3/nzcms_3.asp

ga/admin/web3/nzcms_dim.asp

.html

ga/admin/web3/nzcms_edit_info.asp

.html .js polyglot

ga/admin/web3/nzcms_save_info.asp

ga/admin/web4/index.asp

ga/admin/web4/nzcms_2.asp

.html

ga/admin/web4/nzcms_3.asp

ga/admin/web4/nzcms_4.asp

.html

ga/admin/web4/nzcms_save_info.asp

ga/admin/web5/index.asp

ga/admin/web5/nzcms_save_info.asp

ga/admin/web6/index.asp

ga/admin/web6/nzcms_1.asp

ga/admin/web6/nzcms_2.asp

ga/admin/web6/nzcms_save_info.asp

ga/admin/web7/index.asp

ga/admin/web7/nzcms_1.asp

ga/admin/web7/nzcms_save_info.asp

ga/admin/web8/index.asp

ga/admin/web8/nzcms_1.asp

ga/admin/web8/nzcms_save_info.asp

ga/admin/web9/index.asp

.html

ga/admin/web9/nzcms_1.asp

.html

ga/admin/web9/nzcms_2.asp

.html

ga/admin/web9/nzcms_3.asp

.html

ga/admin/web9/nzcms_add_info_m.asp

.html

ga/admin/web9/nzcms_save_info.asp

ga/admin/xeyi.htm

.html

ga/admin_css/css.css

ga/book.asp

.html .js polyglot

ga/book_write.asp

.html .js polyglot

ga/css/admin_css.css

ga/css/css.css

ga/css/css_2.css

ga/css/red_news_css.css

ga/data/xce_Data.MDF

ga/data/xce_Log.LDF

ga/file/GetCode.asp

.vbs

ga/file/getcode/Head.Fix

ga/file/getcode/body.Fix

ga/file/login.asp

ga/file/md5.asp

.vbs

ga/file/out.asp

ga/flash/ad1/ad1.swf

ga/flash/ad2/ad1.jpg

.jpg

ga/flash/ad2/ad2.gif

.gif

ga/flash/news/nzcms.swf

ga/flash/top/nzgov_06.jpg

.jpg

ga/flash/top/top.swf

ga/flv/20116220523610989.flv

ga/flv/Desktop.ini

ga/images/123.gif

.gif

ga/images/Desktop.ini

ga/images/HOT.gif

.gif

ga/images/HOT2.gif

.gif

ga/images/RSCount.gif

.gif

ga/images/bg/01.gif

.gif

ga/images/bg/ding.gif

.gif

ga/images/biao.gif

.gif

ga/images/book.gif

.gif

ga/images/end_logo.jpg

.jpg

ga/images/indexbook_bg.jpg

.jpg

ga/images/laba.gif

.gif

ga/images/left_bg1.jpg

.jpg

ga/images/left_bg2.jpg

.jpg

ga/images/loading.gif

.gif

ga/images/more.gif

.gif

ga/images/new.gif

.gif

ga/images/news_14.gif

.gif

ga/images/news_gg.gif

.gif

ga/images/no.gif

.gif

ga/images/nzcms.2011_39.gif

.gif

ga/images/nzcms.2011_44.gif

.gif

ga/images/nzcms.2011_book.gif

.gif

ga/images/nzcms.gif

.gif

ga/images/nzcms.topso_bg.gif

.gif

ga/images/nzcms.xinxin.gif

.gif

ga/images/nzcms/bannan1.gif

.gif

ga/images/nzcms/bannan2.gif

.gif

ga/images/nzcms/bannan3.gif

.gif

ga/images/nzcms/end.gif

.gif

ga/images/nzcms/left.gif

.gif

ga/images/nzcms/left2.gif

.gif

ga/images/nzcms/list_bg.gif

.gif

ga/images/nzcms/list_news_bg.gif

.gif

ga/images/nzcms/news_bg.gif

.gif

ga/images/nzcms/nzcms.2011_07.gif

.gif

ga/images/nzcms/nzcms.2011_077.gif

.gif

ga/images/nzcms/nzcms_bg.jpg

.jpg

ga/images/nzcms/nzcms_bh.gif

.gif

ga/images/nzcms/nzcms_top01.gif

.gif

ga/images/nzcms/right_bg2.gif

.gif

ga/images/nzcms/right_bg3.gif

.gif

ga/images/nzcms/top_bg.jpg

.jpg

ga/images/nzcms/tu.jpg

.jpg

ga/images/nzcms/tu2.jpg

.jpg

ga/images/nzcms/tu22.jpg

.jpg

ga/images/nzcms/zb.gif

.gif

ga/images/nzcms_book01.gif

.gif

ga/images/nzcms_book02.gif

.gif

ga/images/nzcms_left_bg.gif

.gif

ga/images/nzcms_pic_no.gif

.gif

ga/images/nzdown.gif

.gif

ga/images/nzshu.gif

.gif

ga/images/suo.gif

.gif

ga/images/swfnews.swf

ga/images/time.gif

.gif

ga/images/top03.gif

.gif

ga/images/txt.png

.png

ga/images/type_img.png

.png

ga/images/vote.gif

.gif

ga/images/vote1.gif

.gif

ga/images/word.gif

.gif

ga/images/zbr.gif

.gif

ga/images/复件 new.gif

.gif

ga/index.asp

.html .js polyglot

ga/index_book.asp

.html

ga/list.asp

.html .js polyglot

ga/list_news.asp

.html .js polyglot

ga/nz.ico

ga/nz_pic/01.jpg

.jpg

ga/nz_pic/02.jpg

.jpg

ga/nz_pic/03.jpg

.jpg

ga/nz_pic/04.jpg

.jpg

ga/nz_pic/201012281059790810.gif

.gif

ga/nz_pic/201161414215199829.jpg

.jpg

ga/nz_pic/201161414215199829_small.jpg

.jpg

ga/nz_pic/201161414222512335.jpg

.jpg

ga/nz_pic/201161414222512335_small.jpg

.jpg

ga/nz_pic/201161414233558648.jpg

.jpg

ga/nz_pic/201161414233558648_small.jpg

.jpg

ga/nz_pic/201161414244856495.jpg

.jpg

ga/nz_pic/201161414244856495_small.jpg

.jpg

ga/nz_pic/201182310473970125.jpg

.jpg

ga/nz_pic/201182315145364399.jpg

.jpg

ga/nz_pic/20118231603985552.jpg

.jpg

ga/nz_pic/201182622341532143.gif

.gif

ga/nz_pic/20119510244520322.gif

.gif

ga/nz_pic/20119510244520322_small.gif

.jpg

ga/nz_pic/2011951027145140.jpg

.jpg

ga/nz_pic/2011951027145140_small.jpg

.jpg

ga/nz_pic/20119510273784198.jpg

.jpg

ga/nz_pic/20119510273784198_small.jpg

.jpg

ga/nz_pic/20119510284448828.jpg

.jpg

ga/nz_pic/20119510284448828_small.jpg

.jpg

ga/nz_pic/2011972242232200.gif

.gif

ga/nz_pic/2011972242232200_small.gif

.jpg

ga/nz_pic/20119722424521076.gif

.gif

ga/nz_pic/20119722424521076_small.gif

.jpg

ga/nz_pic/20119722442844513.gif

.gif

ga/nz_pic/20119722442844513_small.gif

.jpg

ga/nz_pic/Desktop.ini

ga/nz_pic/nz_pic.jpg

.jpg

ga/nz_pic/soft_01.gif

.gif

ga/nz_pic/soft_02.gif

.gif

ga/nz_pic/soft_03.gif

.gif

ga/nz_pic/soft_04.gif

.gif

ga/nz_pic/soft_05.gif

.gif

ga/nz_pic/soft_06.gif

.gif

ga/nz_pic/soft_07.gif

.gif

ga/nz_pic/soft_08.gif

.gif

ga/nzweb/Desktop.ini

ga/nzweb/Dialog/about.htm

.html .js polyglot

ga/nzweb/Dialog/anchor.htm

.html .js polyglot

ga/nzweb/Dialog/art.htm

.html .js polyglot

ga/nzweb/Dialog/backimage.htm

.html .js polyglot

ga/nzweb/Dialog/browse.htm

.html .js polyglot

ga/nzweb/Dialog/dialog.js

.js

ga/nzweb/Dialog/eWebEditorClient.CAB

.cab

eWebEditorClient.INF

eWebEditorClient.dll

.dll regsvr32 windows:4 windows x86 arch:x86

075408aabeacabe90c51dddc4557f964

Code Sign

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6d
Certificate

Issuer

CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US

Not Before

23/08/2007, 00:00

Not After

22/08/2008, 23:59

Subject

CN=High-point Software Ltd.,OU=WoSign Class 3 Code Signing,O=High-point Software Ltd.,L=Fuzhou,ST=Fujian,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageDigitalSignature

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

25/04/2007, 00:00

Not After

09/07/2019, 18:40

Subject

CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

ExtKeyUsageMicrosoftCommercialCodeSigning

ExtKeyUsageClientAuth

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

KeyUsageCertSign

KeyUsageCRLSign

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

30/04/2007, 00:00

Not After

29/04/2012, 23:59

Subject

CN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

6c:1a:02:a1:2b:d9:fb:97:04:d1:5b:40:ba:da:b2:90:84:fe:b3:cf
Signer

Actual PE Digest

6c:1a:02:a1:2b:d9:fb:97:04:d1:5b:40:ba:da:b2:90:84:fe:b3:cf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

msvbvm60

__vbaVarTstGt

__vbaVarSub

_CIcos

_adj_fptan

__vbaVarMove

__vbaFreeVar

__vbaAptOffset

__vbaStrVarMove

__vbaLenBstr

__vbaFreeVarList

_adj_fdiv_m64

__vbaNextEachVar

__vbaFreeObjList

ord516

_adj_fprem1

ord518

__vbaForEachCollAd

__vbaStrCat

__vbaVarCmpNe

ord660

__vbaSetSystemError

__vbaHresultCheckObj

__vbaLenVar

_adj_fdiv_m32

__vbaAryDestruct

__vbaLateMemSt

ord593

__vbaOnError

__vbaObjSet

_adj_fdiv_m16i

__vbaObjSetAddref

_adj_fdivr_m16i

ord598

__vbaBoolVarNull

_CIsin

ord631

ord709

__vbaErase

ord632

__vbaChkstk

ord526

__vbaFileClose

EVENT_SINK_AddRef

__vbaGenerateBoundsError

__vbaStrCmp

ord529

__vbaVarTstEq

__vbaGet4

__vbaI2I4

__vbaObjVar

DllFunctionCall

__vbaVarLateMemSt

__vbaLbound

__vbaRedimPreserve

_adj_fpatan

__vbaRedim

EVENT_SINK_Release

__vbaNew

__vbaUI1I2

_CIsqrt

__vbaObjIs

__vbaVarAnd

EVENT_SINK_QueryInterface

__vbaExceptHandler

ord712

__vbaStrToUnicode

ord606

_adj_fprem

_adj_fdivr_m64

ord716

ord531

__vbaFPException

__vbaInStrVar

ord532

__vbaUbound

__vbaStrVarVal

__vbaVarCat

__vbaI2Var

ord537

ord645

_CIlog

__vbaErrorOverflow

__vbaFileOpen

__vbaInStr

__vbaVarLateMemCallLdRf

__vbaNew2

ord570

_adj_fdiv_m32i

_adj_fdivr_m32i

__vbaStrCopy

__vbaFreeStrList

_adj_fdivr_m32

_adj_fdiv_r

ord685

__vbaVarTstNe

ord579

ord101

__vbaVarSetVar

ord102

__vbaI4Var

ord103

ord104

ord105

__vbaAryLock

__vbaLateMemCall

__vbaVarAdd

__vbaVarDup

__vbaStrToAnsi

ord616

__vbaFpI4

__vbaVarLateMemCallLd

__vbaVarCopy

__vbaVarSetObjAddref

ord617

__vbaLateMemCallLd

_CIatan

__vbaStrMove

__vbaCastObj

__vbaForEachVar

__vbaStrVarCopy

ord619

_allmul

_CItan

__vbaNextEachCollAd

__vbaAryUnlock

_CIexp

__vbaFreeStr

__vbaFreeObj

ord580

Exports

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

ga/nzweb/Dialog/eWebEditorClientInstall.exe

.exe windows:1 windows x86 arch:x86

Code Sign

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6d
Certificate

Issuer

CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US

Not Before

23/08/2007, 00:00

Not After

22/08/2008, 23:59

Subject

CN=High-point Software Ltd.,OU=WoSign Class 3 Code Signing,O=High-point Software Ltd.,L=Fuzhou,ST=Fujian,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageDigitalSignature

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

25/04/2007, 00:00

Not After

09/07/2019, 18:40

Subject

CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

ExtKeyUsageMicrosoftCommercialCodeSigning

ExtKeyUsageClientAuth

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

KeyUsageCertSign

KeyUsageCRLSign

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

30/04/2007, 00:00

Not After

29/04/2012, 23:59

Subject

CN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

78:98:f8:e5:49:1b:e3:78:ac:ba:26:cb:07:bc:70:b7:05:f8:bd:fe
Signer

Actual PE Digest

78:98:f8:e5:49:1b:e3:78:ac:ba:26:cb:07:bc:70:b7:05:f8:bd:fe

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_BYTES_REVERSED_LO

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

ga/nzweb/Dialog/emot.htm

.html .js polyglot

ga/nzweb/Dialog/eq.htm

.html .js polyglot

ga/nzweb/Dialog/fieldset.htm

.html .js polyglot

ga/nzweb/Dialog/file.htm

.html .js polyglot

ga/nzweb/Dialog/findreplace.htm

.html .js polyglot

ga/nzweb/Dialog/flash.htm

.html .js polyglot

ga/nzweb/Dialog/fullscreen.htm

.html .js polyglot

ga/nzweb/Dialog/help.htm

.html

ga/nzweb/Dialog/hyperlink.htm

.html .js polyglot

ga/nzweb/Dialog/i_upload.htm

.html .js polyglot

ga/nzweb/Dialog/iframe.htm

.html .js polyglot

ga/nzweb/Dialog/img.htm

.html .js polyglot

ga/nzweb/Dialog/importexcel.htm

.html .js polyglot

ga/nzweb/Dialog/importword.htm

.html .js polyglot

ga/nzweb/Dialog/installactivex.htm

.html .js polyglot

ga/nzweb/Dialog/map.htm

.html .js polyglot

ga/nzweb/Dialog/marquee.htm

.html .js polyglot

ga/nzweb/Dialog/media.htm

.html .js polyglot

ga/nzweb/Dialog/owcexcel.htm

.html .js polyglot

ga/nzweb/Dialog/paragraph.htm

.html .js polyglot

ga/nzweb/Dialog/selcolor.htm

.html .js polyglot

ga/nzweb/Dialog/symbol.htm

.html .js polyglot

ga/nzweb/Dialog/table.htm

.html .js polyglot

ga/nzweb/Dialog/tablecell.htm

.html .js polyglot

ga/nzweb/Dialog/tablecellsplit.htm

.html .js polyglot

ga/nzweb/Dialog/template.htm

.html .js polyglot

ga/nzweb/SysImage/Rect.gif

.gif

ga/nzweb/SysImage/RectImg.gif

.gif

ga/nzweb/SysImage/bg/birthday.gif

.gif

ga/nzweb/SysImage/bg/christmas.gif

.gif

ga/nzweb/SysImage/bg/citrus.gif

.gif

ga/nzweb/SysImage/bg/clear.jpg

.jpg

ga/nzweb/SysImage/bg/fiesta.jpg

.jpg

ga/nzweb/SysImage/bg/flower.gif

.gif

ga/nzweb/SysImage/bg/gathering.jpg

.jpg

ga/nzweb/SysImage/bg/glacier.jpg

.jpg

ga/nzweb/SysImage/bg/grid.gif

.gif

ga/nzweb/SysImage/bg/hearts.gif

.gif

ga/nzweb/SysImage/bg/ivy.gif

.gif

ga/nzweb/SysImage/bg/maize.jpg

.jpg

ga/nzweb/SysImage/bg/nature.jpg

.jpg

ga/nzweb/SysImage/bg/snow.gif

.gif

ga/nzweb/SysImage/bg/tech.gif

.gif

ga/nzweb/SysImage/bold.gif

.gif

ga/nzweb/SysImage/emot/01.gif

.gif

ga/nzweb/SysImage/emot/02.gif

.gif

ga/nzweb/SysImage/emot/03.gif

.gif

ga/nzweb/SysImage/emot/04.gif

.gif

ga/nzweb/SysImage/emot/05.gif

.gif

ga/nzweb/SysImage/emot/06.gif

.gif

ga/nzweb/SysImage/emot/07.gif

.gif

ga/nzweb/SysImage/emot/08.gif

.gif

ga/nzweb/SysImage/emot/09.gif

.gif

ga/nzweb/SysImage/emot/10.gif

.gif

ga/nzweb/SysImage/emot/11.gif

.gif

ga/nzweb/SysImage/emot/12.gif

.gif

ga/nzweb/SysImage/emot/13.gif

.gif

ga/nzweb/SysImage/emot/14.gif

.gif

ga/nzweb/SysImage/emot/15.gif

.gif

ga/nzweb/SysImage/emot/16.gif

.gif

ga/nzweb/SysImage/emot/17.gif

.gif

ga/nzweb/SysImage/emot/18.gif

.gif

ga/nzweb/SysImage/emot/19.gif

.gif

ga/nzweb/SysImage/emot/20.gif

.gif

ga/nzweb/SysImage/emot/21.gif

.gif

ga/nzweb/SysImage/emot/22.gif

.gif

ga/nzweb/SysImage/emot/23.gif

.gif

ga/nzweb/SysImage/emot/24.gif

.gif

ga/nzweb/SysImage/emot/25.gif

.gif

ga/nzweb/SysImage/emot/26.gif

.gif

ga/nzweb/SysImage/emot/27.gif

.gif

ga/nzweb/SysImage/emot/28.gif

.gif

ga/nzweb/SysImage/emot/29.gif

.gif

ga/nzweb/SysImage/emot/30.gif

.gif

ga/nzweb/SysImage/emot/31.gif

.gif

ga/nzweb/SysImage/emot/32.gif

.gif

ga/nzweb/SysImage/emot/33.gif

.gif

ga/nzweb/SysImage/emot/34.gif

.gif

ga/nzweb/SysImage/emot/35.gif

.gif

ga/nzweb/SysImage/emot/36.gif

.gif

ga/nzweb/SysImage/emot/37.gif

.gif

ga/nzweb/SysImage/emot/38.gif

.gif

ga/nzweb/SysImage/emot/39.gif

.gif

ga/nzweb/SysImage/emot/40.gif

.gif

ga/nzweb/SysImage/emot/41.gif

.gif

ga/nzweb/SysImage/emot/42.gif

.gif

ga/nzweb/SysImage/emot/43.gif

.gif

ga/nzweb/SysImage/emot/44.gif

.gif

ga/nzweb/SysImage/emot/45.gif

.gif

ga/nzweb/SysImage/emot/46.gif

.gif

ga/nzweb/SysImage/emot/47.gif

.gif

ga/nzweb/SysImage/emot/48.gif

.gif

ga/nzweb/SysImage/emot/49.gif

.gif

ga/nzweb/SysImage/emot/50.gif

.gif

ga/nzweb/SysImage/file/audio.gif

.gif

ga/nzweb/SysImage/file/avi.gif

.gif

ga/nzweb/SysImage/file/bmp.gif

.gif

ga/nzweb/SysImage/file/closedfolder.gif

.gif

ga/nzweb/SysImage/file/code.gif

.gif

ga/nzweb/SysImage/file/doc.gif

.gif

ga/nzweb/SysImage/file/exe.gif

.gif

ga/nzweb/SysImage/file/folder.gif

.gif

ga/nzweb/SysImage/file/folderback.gif

.gif

ga/nzweb/SysImage/file/gif.gif

.gif

ga/nzweb/SysImage/file/hlp.gif

.gif

ga/nzweb/SysImage/file/htm.gif

.gif

ga/nzweb/SysImage/file/jpg.gif

.gif

ga/nzweb/SysImage/file/mdb.gif

.gif

ga/nzweb/SysImage/file/mid.gif

.gif

ga/nzweb/SysImage/file/mp.gif

.gif

ga/nzweb/SysImage/file/mp3.gif

.gif

ga/nzweb/SysImage/file/openfolder.gif

.gif

ga/nzweb/SysImage/file/parentfolder.gif

.gif

ga/nzweb/SysImage/file/pdf.gif

.gif

ga/nzweb/SysImage/file/pic.gif

.gif

ga/nzweb/SysImage/file/ppt.gif

.gif

ga/nzweb/SysImage/file/rar.gif

.gif

ga/nzweb/SysImage/file/rm.gif

.gif

ga/nzweb/SysImage/file/swf.gif

.gif

ga/nzweb/SysImage/file/txt.gif

.gif

ga/nzweb/SysImage/file/unknow.gif

.gif

ga/nzweb/SysImage/file/xls.gif

.gif

ga/nzweb/SysImage/file/zip.gif

.gif

ga/nzweb/SysImage/icon16/aspx.gif

.gif

ga/nzweb/SysImage/icon16/audio.gif

.gif

ga/nzweb/SysImage/icon16/avi.gif

.gif

ga/nzweb/SysImage/icon16/bmp.gif

.gif

ga/nzweb/SysImage/icon16/chm.gif

.gif

ga/nzweb/SysImage/icon16/code.gif

.gif

ga/nzweb/SysImage/icon16/doc.gif

.gif

ga/nzweb/SysImage/icon16/exe.gif

.gif

ga/nzweb/SysImage/icon16/gif.gif

.gif

ga/nzweb/SysImage/icon16/hlp.gif

.gif

ga/nzweb/SysImage/icon16/htm.gif

.gif

ga/nzweb/SysImage/icon16/ico.gif

.gif

ga/nzweb/SysImage/icon16/jpg.gif

.gif

ga/nzweb/SysImage/icon16/js.gif

.gif

ga/nzweb/SysImage/icon16/mdb.gif

.gif

ga/nzweb/SysImage/icon16/mid.gif

.gif

ga/nzweb/SysImage/icon16/mp.gif

.gif

ga/nzweb/SysImage/icon16/mp3.gif

.gif

ga/nzweb/SysImage/icon16/pdf.gif

.gif

ga/nzweb/SysImage/icon16/png.gif

.gif

ga/nzweb/SysImage/icon16/ppt.gif

.gif

ga/nzweb/SysImage/icon16/rar.gif

.gif

ga/nzweb/SysImage/icon16/rm.gif

.gif

ga/nzweb/SysImage/icon16/swf.gif

.gif

ga/nzweb/SysImage/icon16/txt.gif

.gif

ga/nzweb/SysImage/icon16/unknow.gif

.gif

ga/nzweb/SysImage/icon16/xls.gif

.gif

ga/nzweb/SysImage/icon16/xml.gif

.gif

ga/nzweb/SysImage/icon16/zip.gif

.gif

ga/nzweb/SysImage/icon32/aspx.gif

.gif

ga/nzweb/SysImage/icon32/audio.gif

.gif

ga/nzweb/SysImage/icon32/avi.gif

.gif

ga/nzweb/SysImage/icon32/bmp.gif

.gif

ga/nzweb/SysImage/icon32/chm.gif

.gif

ga/nzweb/SysImage/icon32/code.gif

.gif

ga/nzweb/SysImage/icon32/doc.gif

.gif

ga/nzweb/SysImage/icon32/exe.gif

.gif

ga/nzweb/SysImage/icon32/gif.gif

.gif

ga/nzweb/SysImage/icon32/hlp.gif

.gif

ga/nzweb/SysImage/icon32/htm.gif

.gif

ga/nzweb/SysImage/icon32/ico.gif

.gif

ga/nzweb/SysImage/icon32/jpg.gif

.gif

ga/nzweb/SysImage/icon32/js.gif

.gif

ga/nzweb/SysImage/icon32/mdb.gif

.gif

ga/nzweb/SysImage/icon32/mid.gif

.gif

ga/nzweb/SysImage/icon32/mp.gif

.gif

ga/nzweb/SysImage/icon32/mp3.gif

.gif

ga/nzweb/SysImage/icon32/pdf.gif

.gif

ga/nzweb/SysImage/icon32/png.gif

.gif

ga/nzweb/SysImage/icon32/ppt.gif

.gif

ga/nzweb/SysImage/icon32/rar.gif

.gif

ga/nzweb/SysImage/icon32/rm.gif

.gif

ga/nzweb/SysImage/icon32/swf.gif

.gif

ga/nzweb/SysImage/icon32/txt.gif

.gif

ga/nzweb/SysImage/icon32/unknow.gif

.gif

ga/nzweb/SysImage/icon32/xls.gif

.gif

ga/nzweb/SysImage/icon32/xml.gif

.gif

ga/nzweb/SysImage/icon32/zip.gif

.gif

ga/nzweb/SysImage/italic.gif

.gif

ga/nzweb/SysImage/loading.gif

.gif

ga/nzweb/SysImage/space.gif

.gif

ga/nzweb/SysImage/tree/arrowdown.gif

.gif

ga/nzweb/SysImage/tree/arrowup.gif

.gif

ga/nzweb/SysImage/tree/blank.gif

.gif

ga/nzweb/SysImage/tree/branch1.gif

.gif

ga/nzweb/SysImage/tree/branch2.gif

.gif

ga/nzweb/SysImage/tree/dirclose.gif

.gif

ga/nzweb/SysImage/tree/diropen.gif

.gif

ga/nzweb/SysImage/tree/folderclose.gif

.gif

ga/nzweb/SysImage/tree/folderopen.gif

.gif

ga/nzweb/SysImage/tree/folderparent.gif

.gif

ga/nzweb/SysImage/tree/line.gif

.gif

ga/nzweb/SysImage/tree/minus1.gif

.gif

ga/nzweb/SysImage/tree/minus2.gif

.gif

ga/nzweb/SysImage/tree/plus1.gif

.gif

ga/nzweb/SysImage/tree/plus2.gif

.gif

ga/nzweb/SysImage/tree/root.gif

.gif

ga/nzweb/asp/config.asp

ga/nzweb/ewebeditor.htm

.html .js polyglot

ga/nzweb/js/buttons.js

.js

ga/nzweb/js/nzcms.js

.js

ga/nzweb/js/zh-cn.js

ga/nzweb/nzcms_up/201109/20110901102623469.rar

.rar

ga/nzweb/nzcms_up/201109/20110901102629198.xls

.xls windows office2003

ga/nzweb/nzcms_up/201109/20110901102634755.doc

.doc windows office2003

ga/nzweb/nzcms_up/201109/20110905093642237.jpg

.jpg

ga/nzweb/nzcms_up/201109/20110905100632995.zip

ga/nzweb/nzcms_up/201109/20110905100636244.xls

.xls windows office2003

ga/nzweb/nzcms_up/201109/20110905100641635.doc

.doc windows office2003

ga/nzweb/popup.htm

.html .js polyglot

ga/nzweb/sharefile/image/back_48.jpg

.jpg

ga/nzweb/sharefile/image/book_48.jpg

.jpg

ga/nzweb/sharefile/image/book_lock_48.jpg

.jpg

ga/nzweb/sharefile/image/book_pencil_48.jpg

.jpg

ga/nzweb/sharefile/image/bullet_arrow_48.jpg

.jpg

ga/nzweb/sharefile/image/bullet_arrow_v48.jpg

.jpg

ga/nzweb/sharefile/image/bullet_email_48.jpg

.jpg

ga/nzweb/sharefile/image/bullet_info_48.jpg

.jpg

ga/nzweb/sharefile/image/cd_gray_48.jpg

.jpg

ga/nzweb/sharefile/image/cd_green_48.jpg

.jpg

ga/nzweb/sharefile/image/cd_yellow_48.jpg

.jpg

ga/nzweb/sharefile/image/copy_48.jpg

.jpg

ga/nzweb/sharefile/image/doc_48.jpg

.jpg

ga/nzweb/sharefile/image/doc_faq_48.jpg

.jpg

ga/nzweb/sharefile/image/doc_important_48.jpg

.jpg

ga/nzweb/sharefile/image/doc_remove_48.jpg

.jpg

ga/nzweb/sharefile/image/email_48.jpg

.jpg

ga/nzweb/sharefile/image/email_delete_48.jpg

.jpg

ga/nzweb/sharefile/image/email_new_48.jpg

.jpg

ga/nzweb/sharefile/image/email_open_48.jpg

.jpg

ga/nzweb/sharefile/image/email_sent_48.jpg

.jpg

ga/nzweb/sharefile/image/folder_48.jpg

.jpg

ga/nzweb/sharefile/image/folder_info_48.jpg

.jpg

ga/nzweb/sharefile/image/folder_lock_48.jpg

.jpg

ga/nzweb/sharefile/image/folder_move_48.jpg

.jpg

ga/nzweb/sharefile/image/forward_48.jpg

.jpg

ga/nzweb/sharefile/image/mix_clock_48.jpg

.jpg

ga/nzweb/sharefile/image/mix_money_48.jpg

.jpg

ga/nzweb/sharefile/image/mix_pencil_48.jpg

.jpg

ga/nzweb/sharefile/image/mix_world_48.jpg

.jpg

ga/nzweb/sharefile/image/paste_48.jpg

.jpg

ga/nzweb/sharefile/image/stop_48.jpg

.jpg

ga/nzweb/sharefile/image/symbol_faq_48.jpg

.jpg

ga/nzweb/sharefile/image/symbols_download_48.jpg

.jpg

ga/nzweb/sharefile/image/symbols_info_48.jpg

.jpg

ga/nzweb/sharefile/image/symbols_stop_48.jpg

.jpg

ga/nzweb/sharefile/image/toolbar_back_48.jpg

.jpg

ga/nzweb/sharefile/image/toolbar_buy_48.jpg

.jpg

ga/nzweb/sharefile/image/toolbar_calendar_48.jpg

.jpg

ga/nzweb/sharefile/image/toolbar_edit_48.jpg

.jpg

ga/nzweb/sharefile/image/toolbar_help_48.jpg

.jpg

ga/nzweb/sharefile/image/toolbar_login_48.jpg

.jpg

ga/nzweb/sharefile/image/toolbar_manual_48.jpg

.jpg

ga/nzweb/sharefile/image/toolbar_open_48.jpg

.jpg

ga/nzweb/sharefile/image/toolbar_print_48.jpg

.jpg

ga/nzweb/sharefile/image/toolbar_remove_48.jpg

.jpg

ga/nzweb/sharefile/image/toolbar_save_48.jpg

.jpg

ga/nzweb/sharefile/image/toolbar_search_48.jpg

.jpg

ga/nzweb/sharefile/image/trash_48.jpg

.jpg

ga/nzweb/sharefile/image/trash_arrow_48.jpg

.jpg

ga/nzweb/sharefile/image/trash_full_48.jpg

.jpg

ga/nzweb/sharefile/image/user_48.jpg

.jpg

ga/nzweb/sharefile/image/user_add_48.jpg

.jpg

ga/nzweb/sharefile/image/user_delete_48.jpg

.jpg

ga/nzweb/sharefile/image/user_info_48.jpg

.jpg

ga/nzweb/sharefile/image/weather_clouds_48.jpg

.jpg

ga/nzweb/sharefile/image/weather_ray_48.jpg

.jpg

ga/nzweb/sharefile/image/weather_sun_48.jpg

.jpg

ga/nzweb/sharefile/image/weather_sunny_48.jpg

.jpg

ga/nzweb/skin/blue1/btnchecked.gif

.gif

ga/nzweb/skin/blue1/btndown.gif

.gif

ga/nzweb/skin/blue1/btnover.gif

.gif

ga/nzweb/skin/blue1/buttons.gif

.gif

ga/nzweb/skin/blue1/dialog.css

ga/nzweb/skin/blue1/editor.css

ga/nzweb/skin/blue1/editorarea.code.css

ga/nzweb/skin/blue1/editorarea.css

ga/nzweb/skin/blue1/editorarea.edit.css

ga/nzweb/skin/blue1/editorarea.text.css

ga/nzweb/skin/blue1/menuarea.css

ga/nzweb/skin/blue1/tbbg.gif

.gif

ga/nzweb/skin/blue2/btnchecked.gif

.gif

ga/nzweb/skin/blue2/btndown.gif

.gif

ga/nzweb/skin/blue2/btnover.gif

.gif

ga/nzweb/skin/blue2/buttons.gif

.gif

ga/nzweb/skin/blue2/dialog.css

ga/nzweb/skin/blue2/editor.css

ga/nzweb/skin/blue2/editorarea.code.css

ga/nzweb/skin/blue2/editorarea.css

ga/nzweb/skin/blue2/editorarea.edit.css

ga/nzweb/skin/blue2/editorarea.text.css

ga/nzweb/skin/blue2/menuarea.css

ga/nzweb/skin/blue2/menubg.gif

.gif

ga/nzweb/skin/green1/btnchecked.gif

.gif

ga/nzweb/skin/green1/btndown.gif

.gif

ga/nzweb/skin/green1/btnover.gif

.gif

ga/nzweb/skin/green1/buttons.gif

.gif

ga/nzweb/skin/green1/dialog.css

ga/nzweb/skin/green1/editor.css

ga/nzweb/skin/green1/editorarea.code.css

ga/nzweb/skin/green1/editorarea.css

ga/nzweb/skin/green1/editorarea.edit.css

ga/nzweb/skin/green1/editorarea.text.css

ga/nzweb/skin/green1/menuarea.css

ga/nzweb/skin/green1/menubg.gif

.gif

ga/nzweb/skin/light1/btnchecked.gif

.gif

ga/nzweb/skin/light1/btndown.gif

.gif

ga/nzweb/skin/light1/btnover.gif

.gif

ga/nzweb/skin/light1/buttons.gif

.gif

ga/nzweb/skin/light1/dialog.css

ga/nzweb/skin/light1/editor.css

ga/nzweb/skin/light1/editorarea.code.css

ga/nzweb/skin/light1/editorarea.css

ga/nzweb/skin/light1/editorarea.edit.css

ga/nzweb/skin/light1/editorarea.text.css

ga/nzweb/skin/light1/menuarea.css

ga/nzweb/skin/light1/menubg.gif

.gif

ga/nzweb/skin/ningzhi/btnchecked.gif

.gif

ga/nzweb/skin/ningzhi/btndown.gif

.gif

ga/nzweb/skin/ningzhi/btnover.gif

.gif

ga/nzweb/skin/ningzhi/buttons.gif

.gif

ga/nzweb/skin/ningzhi/dialog.css

ga/nzweb/skin/ningzhi/editor.css

ga/nzweb/skin/ningzhi/editorarea.code.css

ga/nzweb/skin/ningzhi/editorarea.css

ga/nzweb/skin/ningzhi/editorarea.edit.css

ga/nzweb/skin/ningzhi/editorarea.text.css

ga/nzweb/skin/ningzhi/menuarea.css

ga/nzweb/skin/ningzhi/menubg.gif

.gif

ga/nzweb/skin/office2000/btnchecked.gif

.gif

ga/nzweb/skin/office2000/buttons.gif

.gif

ga/nzweb/skin/office2000/dialog.css

ga/nzweb/skin/office2000/editor.css

ga/nzweb/skin/office2000/editorarea.code.css

ga/nzweb/skin/office2000/editorarea.css

ga/nzweb/skin/office2000/editorarea.edit.css

ga/nzweb/skin/office2000/editorarea.text.css

ga/nzweb/skin/office2000/menuarea.css

ga/nzweb/skin/office2000/tbbg.gif

.gif

ga/nzweb/skin/office2000/tbleft.gif

.gif

ga/nzweb/skin/office2000/tbright.gif

.gif

ga/nzweb/skin/office2003/btnchecked.gif

.gif

ga/nzweb/skin/office2003/btndown.gif

.gif

ga/nzweb/skin/office2003/btnover.gif

.gif

ga/nzweb/skin/office2003/buttons.gif

.gif

ga/nzweb/skin/office2003/dialog.css

ga/nzweb/skin/office2003/editor.css

ga/nzweb/skin/office2003/editorarea.code.css

ga/nzweb/skin/office2003/editorarea.css

ga/nzweb/skin/office2003/editorarea.edit.css

ga/nzweb/skin/office2003/editorarea.text.css

ga/nzweb/skin/office2003/menuarea.css

ga/nzweb/skin/office2003/menubg.gif

.gif

ga/nzweb/skin/office2003/tbbg.gif

.gif

ga/nzweb/skin/office2003/tbhandle.gif

.gif

ga/nzweb/skin/office2003/tbleft.gif

.gif

ga/nzweb/skin/office2003/tbright.gif

.gif

ga/nzweb/skin/officexp/buttons.gif

.gif

ga/nzweb/skin/officexp/dialog.css

ga/nzweb/skin/officexp/editor.css

ga/nzweb/skin/officexp/editorarea.code.css

ga/nzweb/skin/officexp/editorarea.css

ga/nzweb/skin/officexp/editorarea.edit.css

ga/nzweb/skin/officexp/editorarea.text.css

ga/nzweb/skin/officexp/menuarea.css

ga/nzweb/skin/officexp/menubg.gif

.gif

ga/nzweb/skin/officexp/tbbg.gif

.gif

ga/nzweb/skin/officexp/tbleft.gif

.gif

ga/nzweb/skin/officexp/tbright.gif

.gif

ga/nzweb/skin/red1/btnchecked.gif

.gif

ga/nzweb/skin/red1/btndown.gif

.gif

ga/nzweb/skin/red1/btnover.gif

.gif

ga/nzweb/skin/red1/buttons.gif

.gif

ga/nzweb/skin/red1/dialog.css

ga/nzweb/skin/red1/editor.css

ga/nzweb/skin/red1/editorarea.code.css

ga/nzweb/skin/red1/editorarea.css

ga/nzweb/skin/red1/editorarea.edit.css

ga/nzweb/skin/red1/editorarea.text.css

ga/nzweb/skin/red1/menuarea.css

ga/nzweb/skin/red1/menubg.gif

.gif

ga/nzweb/skin/vista1/btnchecked.gif

.gif

ga/nzweb/skin/vista1/btndown.gif

.gif

ga/nzweb/skin/vista1/btnover.gif

.gif

ga/nzweb/skin/vista1/buttons.gif

.gif

ga/nzweb/skin/vista1/dialog.css

ga/nzweb/skin/vista1/editor.css

ga/nzweb/skin/vista1/editorarea.code.css

ga/nzweb/skin/vista1/editorarea.css

ga/nzweb/skin/vista1/editorarea.edit.css

ga/nzweb/skin/vista1/editorarea.text.css

ga/nzweb/skin/vista1/menuarea.css

ga/nzweb/skin/vista1/menubg.gif

.gif

ga/nzweb/skin/vista1/sb_btn_bg.gif

.gif

ga/nzweb/skin/vista1/sb_btn_bg2.gif

.gif

ga/nzweb/skin/vista1/sb_btn_left.gif

.gif

ga/nzweb/skin/vista1/sb_btn_left2.gif

.gif

ga/nzweb/skin/vista1/sb_btn_right.gif

.gif

ga/nzweb/skin/vista1/sb_btn_right2.gif

.gif

ga/nzweb/skin/vista1/tbbg.gif

.gif

ga/nzweb/skin/yellow1/btnchecked.gif

.gif

ga/nzweb/skin/yellow1/btndown.gif

.gif

ga/nzweb/skin/yellow1/btnover.gif

.gif

ga/nzweb/skin/yellow1/buttons.gif

.gif

ga/nzweb/skin/yellow1/dialog.css

ga/nzweb/skin/yellow1/editor.css

ga/nzweb/skin/yellow1/editorarea.code.css

ga/nzweb/skin/yellow1/editorarea.css

ga/nzweb/skin/yellow1/editorarea.edit.css

ga/nzweb/skin/yellow1/editorarea.text.css

ga/nzweb/skin/yellow1/menuarea.css

ga/nzweb/skin/yellow1/menubg.gif

.gif

ga/nzweb/style/ningzhi.js

ga/nzweb/style/user.js

ga/nzweb/template/0.gif

.gif

ga/nzweb/template/01.htm

ga/nzweb/template/02.htm

ga/nzweb/template/03.htm

ga/nzweb/template/04.htm

ga/nzweb/template/05.htm

ga/nzweb/template/06.htm

ga/nzweb/template/template.js

ga/poto.asp

.html .js polyglot

ga/red_news.asp

.html .js polyglot

ga/show_book.asp

.html .js polyglot

ga/show_news.asp

.html .js polyglot

ga/tp.asp

.html .js polyglot

ga/vcastr22.swf

ga/zhiban.asp

.html .js polyglot

ga/新云软件.url

.url

ga/说明.txt

Sharing

General

Malware Config

Signatures

Files

075408aabeacabe90c51dddc4557f964

Code Sign

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6dCertificate

Extended Key Usages

Key Usages

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate

Extended Key Usages

Key Usages

6c:1a:02:a1:2b:d9:fb:97:04:d1:5b:40:ba:da:b2:90:84:fe:b3:cfSigner

Headers

File Characteristics

Imports

msvbvm60

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 73KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 8KB - Virtual size: 7KB

Code Sign

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6dCertificate

Extended Key Usages

Key Usages

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate

Extended Key Usages

Key Usages

78:98:f8:e5:49:1b:e3:78:ac:ba:26:cb:07:bc:70:b7:05:f8:bd:feSigner

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 36KB - Virtual size: 36KB

DATA Size: 1024B - Virtual size: 588B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 14KB - Virtual size: 14KB

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6d
Certificate

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

6c:1a:02:a1:2b:d9:fb:97:04:d1:5b:40:ba:da:b2:90:84:fe:b3:cf
Signer

.text
Size: 76KB - Virtual size: 73KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 8KB - Virtual size: 7KB

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6d
Certificate

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

78:98:f8:e5:49:1b:e3:78:ac:ba:26:cb:07:bc:70:b7:05:f8:bd:fe
Signer

CODE
Size: 36KB - Virtual size: 36KB

DATA
Size: 1024B - Virtual size: 588B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 14KB - Virtual size: 14KB