e19702f197d7afa6078e0e34d2a12d8e

Sharing

Copy URL Twitter E-mail

General

Target

e19702f197d7afa6078e0e34d2a12d8e
Size

17.5MB
MD5

e19702f197d7afa6078e0e34d2a12d8e
SHA1

c06eeda1d02f319056658ee20c9ec133f9ee1f62
SHA256

1b0ea9acdaa7fe166400f30330b2c05e4be75cf517443e18a24b0bd3eb9507c3
SHA512

dc7b3e9491601713b86b908815b382bb05d59390dbf9bf19ed9e55befa4dddbad7779b4bf8749bf9f4df75f5a585bcfa3ab9e1b354d0b34d6f8bbc49dcb89918
SSDEEP

393216:4mK7yGjnfNK8ljIqeSfp8K9NH3JFXgRjZnAunLIsAehhSAFuqmnpz2F4k:Finfs4jIIfpDRZFXiZAuLIQXwNx2F4k

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/隐藏菜单.exe	upx

Unsigned PE 18 IoCs

Checks for missing Authenticode signature.

resource
unpack001/桌面天下系统美化包 TX1.0 （春春版）/主题(Theme)/vs/TX 1.0_春春版.msstyles
unpack001/桌面天下系统美化包 TX1.0 （春春版）/其他(Other)/YzShadow/Languages/ChineseS.lang
unpack001/桌面天下系统美化包 TX1.0 （春春版）/其他(Other)/YzShadow/Languages/English.lang
unpack001/桌面天下系统美化包 TX1.0 （春春版）/其他(Other)/YzShadow/Languages/Japanese.lang
unpack001/桌面天下系统美化包 TX1.0 （春春版）/其他(Other)/YzShadow/YzShadow.dll
unpack001/桌面天下系统美化包 TX1.0 （春春版）/其他(Other)/YzShadow/YzShadow.exe
unpack001/桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/IconExplorer.exe
unpack001/桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/ODZip.dll
unpack001/桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/sdczip.dll
unpack001/桌面天下系统美化包 TX1.0 （春春版）/字体(Fonts)/超清晰显示WindowsXP字体增强补丁/cttune.cpl
unpack001/桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/Styler.exe
unpack001/桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/StylerHelper.dll
unpack001/桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/Styler_EN.exe
unpack001/桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/StylerTB.dll
unpack001/桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/UNRAR/unrar.dll
unpack001/桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/隐藏菜单.exe
unpack001/桌面天下系统美化包 TX1.0 （春春版）/登陆界面(Logon)/2、登陆界面替换器.exe
unpack001/桌面天下系统美化包 TX1.0 （春春版）/登陆界面(Logon)/Theme/TX 1.0_春春版.exe

Files

e19702f197d7afa6078e0e34d2a12d8e
.rar
桌面天下系统美化包 TX1.0 （春春版）/主题(Theme)/vs/TX 1.0_春春版.msstyles
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/主题(Theme)/vs/vs主题下载站.url
桌面天下系统美化包 TX1.0 （春春版）/主题(Theme)/wb/wb主题下载站.url
桌面天下系统美化包 TX1.0 （春春版）/其他(Other)/YzShadow/Languages/ChineseS.lang
.dll windows:4 windows x86 arch:x86

5c54715227e960c5019e7a45d4b9d02a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/其他(Other)/YzShadow/Languages/English.lang
.dll windows:4 windows x86 arch:x86

5c54715227e960c5019e7a45d4b9d02a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/其他(Other)/YzShadow/Languages/Japanese.lang
.dll windows:4 windows x86 arch:x86

5c54715227e960c5019e7a45d4b9d02a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/其他(Other)/YzShadow/Readme_jp.txt
.vbs
桌面天下系统美化包 TX1.0 （春春版）/其他(Other)/YzShadow/YzShadow.dll
.dll windows:4 windows x86 arch:x86

1198ed2b9f432372fcf2b2048bf614c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpA
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

user32

UnhookWindowsHookEx
SetWindowsHookExA
SystemParametersInfoA
EnumWindows
SendMessageA
SetWindowLongA
SetLayeredWindowAttributes
UpdateWindow
PostMessageA
CallNextHookEx
GetWindowLongA
GetClassNameA

Exports

Exports

createShadowAll
enableHook
endHook
isAppMenuWindow
isMenuWindow
isNormalMenuWindow
isVisualStyleStartMenuWindow
menuTransparent
startHook

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.HOOKDAT
Size: 4KB - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/其他(Other)/YzShadow/YzShadow.exe
.exe windows:4 windows x86 arch:x86

54374a66802a03b20cdae3e8afc167bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
lstrcmpiA
lstrcmpA
RaiseException
InterlockedExchange
LocalAlloc
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
SetFilePointer
InterlockedIncrement
InterlockedDecrement
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
CloseHandle
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetLastError
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
HeapAlloc
HeapFree
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
RtlUnwind
GetModuleHandleA
lstrcpyA
GetVersionExA
GetProcAddress
WritePrivateProfileStringA
lstrcatA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetTickCount
FindNextFileA
FindFirstFileA
FindClose
FreeLibrary
LoadLibraryA
GetFileType
GetModuleFileNameA

user32

GetSystemMetrics
DestroyCursor
SetWindowPos
ShowWindow
IsDlgButtonChecked
GetDlgItemTextA
GetWindowRect
ReleaseDC
ReleaseCapture
GetWindowDC
InvalidateRect
RedrawWindow
WindowFromPoint
GetAncestor
SetDlgItemTextA
GetWindowTextA
SendDlgItemMessageA
SetCursorPos
SetCursor
SetCapture
GetWindowThreadProcessId
LoadImageA
LoadCursorA
RegisterClassExA
GetSysColorBrush
RegisterWindowMessageA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyIcon
SystemParametersInfoA
KillTimer
GetForegroundWindow
IsIconic
EnumWindows
SetTimer
IsWindow
SetLayeredWindowAttributes
UpdateWindow
PostQuitMessage
DialogBoxParamA
LoadMenuA
GetSubMenu
SetMenuDefaultItem
EnableMenuItem
SetMenuItemInfoA
SetForegroundWindow
GetCursorPos
TrackPopupMenu
DestroyMenu
GetDoubleClickTime
IsZoomed
MoveWindow
DefWindowProcA
SetWindowTextA
PostMessageA
FindWindowA
GetWindowLongA
GetClassNameA
LoadStringA
MessageBoxA
GetDlgItem
SendMessageA
SetFocus
EnableWindow
EndDialog
GetParent
DestroyWindow
IsWindowVisible
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
CreateWindowExA
SetWindowLongA
UpdateLayeredWindow
GetDC
CallWindowProcA

gdi32

DeleteObject
SelectObject
GetStockObject
Rectangle
CreatePen
CreateDIBSection
CreateCompatibleDC
CreateSolidBrush

shell32

SHGetFileInfoA
Shell_NotifyIconA

comctl32

ImageList_Destroy
ImageList_Create
ImageList_Remove
ImageList_ReplaceIcon
ord17
PropertySheetA

comdlg32

ChooseColorA

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/其他(Other)/YzShadow/YzShadow.ini
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/IconExplorer.exe
.exe windows:4 windows x86 arch:x86

78cfe009649ba58383f2c6bde8413239

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42u

ord808
ord818
ord1202
ord1165
ord5208
ord2613
ord2403
ord2015
ord4213
ord2570
ord4392
ord3577
ord2578
ord4399
ord3718
ord3728
ord3391
ord3726
ord6051
ord1768
ord5286
ord3397
ord6742
ord384
ord567
ord1761
ord6193
ord2110
ord2858
ord981
ord2113
ord6612
ord3991
ord802
ord6898
ord3993
ord542
ord2400
ord6871
ord3865
ord6451
ord6896
ord6003
ord2857
ord2088
ord5871
ord3297
ord2746
ord3288
ord2854
ord3281
ord4215
ord2576
ord3649
ord2430
ord6266
ord810
ord1143
ord2371
ord729
ord2496
ord1699
ord430
ord2859
ord5977
ord2637
ord3870
ord1821
ord656
ord4270
ord1794
ord1919
ord793
ord3393
ord4266
ord6004
ord3995
ord3282
ord6237
ord5142
ord3285
ord2072
ord2106
ord6437
ord3291
ord4500
ord3909
ord3016
ord4688
ord3542
ord4120
ord3716
ord795
ord755
ord470
ord535
ord3298
ord540
ord858
ord2910
ord4199
ord3084
ord2855
ord3215
ord556
ord809
ord3792
ord6354
ord1088
ord2114
ord797
ord686
ord616
ord815
ord561
ord3733
ord4418
ord4616
ord5710
ord5285
ord5303
ord4692
ord4074
ord2717
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord4269
ord538
ord3312
ord2756
ord6868
ord1001
ord4124
ord800
ord4273
ord4272
ord5597
ord2769
ord1085
ord1172
ord1197
ord861
ord617
ord296
ord5261
ord3658
ord5214
ord823
ord4704
ord6195
ord3087
ord6211
ord4229
ord2294
ord825
ord324
ord641
ord3592
ord4419
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5276
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1767
ord4073
ord6048
ord2506
ord4992
ord4847
ord4370
ord1637
ord1569

msvcrt

wcscpy
free
malloc
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@XZ
_CxxThrowException
memmove
_purecall
wcscat
??8type_info@@QBEHABV0@@Z
?name@type_info@@QBEPBDXZ
??9type_info@@QBEHABV0@@Z
_wcslwr
wcsncpy
_wcsicmp
_wtoi
wcslen
realloc
wcsncmp
wcsstr
wcschr
wcstok
_wsplitpath
_exit
_XcptFilter
exit
?terminate@@YAXXZ
__CxxFrameHandler
wcscmp
_controlfp
_onexit
__dllonexit
??1type_info@@UAE@XZ
_except_handler3
__set_app_type
_errno
?set_new_handler@@YAP6AXXZP6AXXZ@Z
strncmp
strcmp
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
isalpha
toupper
tolower
memcpy
memset
memcmp
strlen
_stricmp
wcsrchr
_wcsnicmp
_wcmdln
__wgetmainargs
strtok

kernel32

SetLastError
GetComputerNameA
lstrcmpA
lstrcatA
GetModuleFileNameW
WaitForSingleObject
GetExitCodeProcess
GetFileSize
ReadFile
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryW
SetFilePointer
SizeofResource
LockResource
LoadResource
FindResourceW
EnumResourceNamesW
LoadLibraryExW
WriteFile
FindClose
FindFirstFileW
FindNextFileW
GetPrivateProfileStringW
GetVersionExW
WideCharToMultiByte
LocalUnlock
LocalFree
LocalLock
LocalAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
DeleteFileW
lstrcpyW
GlobalFree
lstrlenW
GetTempPathW
GetWindowsDirectoryW
MultiByteToWideChar
GetModuleHandleW
GetStartupInfoW
lstrlenA
CreateFileW

user32

LoadMenuW
SetMenuDefaultItem
SetMenuItemInfoW
EnableMenuItem
CheckMenuItem
GetFocus
DrawFocusRect
DrawIconEx
GetSysColor
DestroyIcon
SetTimer
GetWindowRect
InvalidateRect
TranslateAcceleratorW
KillTimer
GetParent
DrawTextW
FillRect
ScreenToClient
CopyIcon
DestroyCursor
PostMessageW
PtInRect
GetCursor
SetCapture
IsWindowVisible
GetMenuState
DeleteMenu
IsClipboardFormatAvailable
InsertMenuW
GetMenuItemCount
GetMenuItemID
SetWindowLongW
LoadImageW
GetWindowLongW
GetWindow
SendMessageW
wsprintfW
EnableWindow
wsprintfA
DrawFrameControl
CreateIconFromResourceEx
SetCursor
LoadCursorW
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
ReleaseDC
GetDC
GetClipboardData
RegisterClipboardFormatW
MessageBoxW
GetActiveWindow
SystemParametersInfoW
MessageBeep
EndPaint
DrawIcon
BeginPaint
GetDialogBaseUnits
LoadIconW
GetSystemMetrics
MoveWindow
SetForegroundWindow
SetWindowPos
GetSystemMenu
SetFocus
CheckDlgButton
EndDialog
IsWindow
DialogBoxIndirectParamW
LoadAcceleratorsW
GetClientRect
ModifyMenuW
CheckMenuRadioItem
RemoveMenu
GetSubMenu
GetMenu
SetRect
GetCapture
GetCursorPos
ReleaseCapture
GetDlgItem

gdi32

GetObjectW
CreateFontIndirectW
CreateHalftonePalette
GetPaletteEntries
SetStretchBltMode
StretchBlt
PatBlt
CreateDIBSection
CreateCompatibleDC
SelectObject
SetDIBColorTable
GetPixel
CreateDCW
CreateCompatibleBitmap
CreateSolidBrush
Rectangle
SetBkMode
BitBlt
SetPixel
SetPixelV
GdiFlush
DeleteObject
DeleteDC
SetTextColor
GetStockObject

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
IsValidSid
RegCloseKey
RegOpenKeyExW
RegCreateKeyW
RegQueryValueExW
RegSetValueExW
LookupAccountNameA

shell32

SHGetFileInfoW
ExtractIconW
DragQueryFileW
SHGetDesktopFolder
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW

comctl32

ImageList_SetBkColor
ImageList_Draw
ImageList_GetIconSize
ImageList_ReplaceIcon

msvcp60

??0bad_alloc@std@@QAE@PBD@Z
??1bad_alloc@std@@UAE@XZ
??0bad_alloc@std@@QAE@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

Sections

.text
Size: 168KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 168KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/IconPackager.exe
.exe windows:4 windows x86 arch:x86

e85c1bbfeff11d330b7cddcea36a09ce

Code Sign

01
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

01/08/1996, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

0a
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

06/08/2003, 00:00

Not After

05/08/2013, 23:59

Subject

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

21:d2:bd
Certificate

Issuer

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Not Before

21/09/2005, 21:26

Not After

21/09/2007, 21:26

Subject

CN=Stardock Corporation,OU=,O=Stardock Corporation,L=Plymouth,ST=Michigan,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRelativePathToW
PathIsDirectoryW
PathCanonicalizeW
PathParseIconLocationW

mfc42u

ord4214
ord4395
ord3634
ord692
ord4667
ord4269
ord6371
ord4480
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord2717
ord4074
ord4692
ord5303
ord5285
ord5710
ord4616
ord3733
ord561
ord815
ord5208
ord2613
ord1131
ord2769
ord3566
ord3621
ord6237
ord2406
ord1634
ord5845
ord2876
ord6168
ord5785
ord4532
ord3491
ord2078
ord2072
ord5977
ord3737
ord818
ord1230
ord5783
ord5784
ord283
ord472
ord3706
ord640
ord783
ord323
ord6373
ord2104
ord3133
ord5781
ord4294
ord3915
ord613
ord289
ord2016
ord1633
ord3701
ord2444
ord3792
ord491
ord1900
ord1683
ord2520
ord5284
ord4433
ord2046
ord4425
ord4254
ord4798
ord4709
ord2579
ord4400
ord3389
ord3724
ord804
ord6777
ord2111
ord1821
ord656
ord1794
ord2403
ord2015
ord4213
ord2570
ord4392
ord616
ord1919
ord793
ord3393
ord3728
ord810
ord4266
ord6004
ord3995
ord3282
ord5142
ord3285
ord2106
ord6437
ord3291
ord4500
ord3909
ord3016
ord4688
ord3542
ord4120
ord2573
ord3577
ord2680
ord3000
ord2127
ord535
ord1594
ord540
ord2405
ord6362
ord1764
ord6390
ord6379
ord5436
ord5446
ord6868
ord2099
ord2836
ord1761
ord1172
ord5597
ord1085
ord3806
ord3332
ord551
ord861
ord617
ord296
ord5214
ord4253
ord768
ord489
ord4829
ord5283
ord4848
ord4371
ord4352
ord4942
ord4970
ord537
ord6565
ord2812
ord1001
ord4736
ord4899
ord5154
ord5156
ord5155
ord1899
ord1008
ord2629
ord2101
ord4282
ord498
ord771
ord3870
ord4292
ord4128
ord3084
ord4279
ord2114
ord1088
ord6354
ord809
ord556
ord609
ord3569
ord4390
ord2567
ord3905
ord2854
ord2746
ord5871
ord538
ord4118
ord800
ord2634
ord3865
ord3658
ord1637
ord2858
ord6266
ord2430
ord3649
ord2576
ord4215
ord3281
ord1165
ord1143
ord2113
ord6193
ord2110
ord797
ord808
ord3718
ord1569
ord3397
ord4399
ord2578
ord3726
ord3391
ord470
ord755
ord2855
ord5869
ord2859
ord6871
ord4270
ord795
ord567
ord3716
ord4418
ord5286
ord1768
ord6051
ord2371
ord2637
ord6451
ord2400
ord3297
ord1197
ord3993
ord6003
ord6898
ord542
ord2088
ord3991
ord2857
ord6896
ord802
ord686
ord384
ord823
ord4704
ord6195
ord3087
ord6211
ord4229
ord2294
ord825
ord324
ord641
ord3592
ord4419
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5276
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1767
ord4073
ord6048
ord2506
ord4992
ord4847
ord4370
ord5261
ord2397

msvcrt

??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@XZ
_CxxThrowException
memmove
_purecall
??8type_info@@QBEHABV0@@Z
?name@type_info@@QBEPBDXZ
??9type_info@@QBEHABV0@@Z
wcslen
_wcsupr
_wcsicmp
wcsstr
strncmp
_wtoi
toupper
_wcsnicmp
wcsncmp
wcschr
malloc
realloc
wcsrchr
_wcslwr
?terminate@@YAXXZ
_errno
?set_new_handler@@YAP6AXXZP6AXXZ@Z
strcmp
isalpha
tolower
memcpy
memset
memcmp
strlen
_stricmp
_strnicmp
??0exception@@QAE@ABQBD@Z
time
localtime
srand
rand
_wsplitpath
wcsncpy
_ftol
vswprintf
calloc
wcsncat
strstr
swprintf
printf
free
strtok
atoi
wcscpy
wcscmp
wcscat
__CxxFrameHandler
??1type_info@@UAE@XZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
isdigit
sprintf
__dllonexit
_onexit
_controlfp
_XcptFilter
_exit
wcstok
exit

kernel32

WriteFile
CreateEventW
GetLastError
SetEndOfFile
FormatMessageW
SetEvent
MultiByteToWideChar
GetModuleHandleW
EnumResourceNamesW
SetVolumeLabelW
SetFileAttributesW
GetFileAttributesW
GetDriveTypeW
GetWindowsDirectoryW
LoadLibraryW
GetProcAddress
FreeLibrary
DeleteFileW
GetSystemDirectoryW
CreateThread
SetFilePointer
GetPrivateProfileStringW
WritePrivateProfileStringW
GetComputerNameA
SetLastError
lstrlenA
lstrcmpA
lstrcatA
GetModuleFileNameW
WaitForSingleObject
GetExitCodeProcess
CreateFileW
GetFileSize
ReadFile
CloseHandle
GetUserDefaultLangID
CreateDirectoryW
GetCurrentProcess
UnmapViewOfFile
Sleep
MapViewOfFile
CreateFileMappingW
LocalAlloc
GlobalFree
GlobalAlloc
LocalFree
CopyFileW
MoveFileW
GetTempFileNameW
GetTempPathW
EndUpdateResourceW
UpdateResourceW
BeginUpdateResourceW
SizeofResource
SetCurrentDirectoryW
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
OutputDebugStringW
WideCharToMultiByte
OutputDebugStringA
LocalUnlock
LocalLock
LockResource
LoadResource
FindResourceW
EnumResourceLanguagesW
FindResourceExW
LoadLibraryExW
GetLogicalDriveStringsW
GetDiskFreeSpaceExW
HeapFree
HeapAlloc
GetProcessHeap
GetShortPathNameW
lstrcmpW
GetStartupInfoW
GetLocaleInfoW
GetTickCount

user32

GetWindow
SendMessageW
wsprintfW
EnableWindow
wsprintfA
DestroyIcon
SetCursor
LoadCursorW
KillTimer
SetTimer
UpdateWindow
GetParent
GetWindowRect
RedrawWindow
InvalidateRect
IsWindowVisible
MessageBoxW
GetActiveWindow
LoadStringW
DrawIcon
GetSysColor
FillRect
GetClientRect
CreateIconFromResourceEx
GetDlgItem
LoadImageW
LoadIconW
GetKeyState
GetCursorPos
EnableMenuItem
ModifyMenuW
SetMenuDefaultItem
GetSubMenu
GetSystemMetrics
IsIconic
IntersectRect
OffsetRect
PeekMessageW
MsgWaitForMultipleObjects
IsWindow
LoadMenuW
DrawFocusRect
GetFocus
ScreenToClient
DestroyMenu
TrackPopupMenu
RemoveMenu
AppendMenuW
CheckMenuRadioItem
CheckMenuItem
GetWindowLongW
DrawIconEx
DrawFrameControl
PostMessageW
DrawTextW
FindWindowExW
ShowWindow
SetDlgItemTextW
SendDlgItemMessageW
SetWindowTextW
SetCapture
ReleaseCapture
GetCursor
PtInRect
DestroyCursor
CopyIcon
RegisterWindowMessageW
GetScrollInfo
WindowFromDC
GetWindowRgn
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetClassNameW
SetWindowRgn
MapWindowPoints
DrawEdge
SetSysColors
SendMessageTimeoutW
SystemParametersInfoW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetIconInfo
GetMenuItemID
wvsprintfW
MessageBeep
GetDialogBaseUnits
MoveWindow
GetSystemMenu
SetFocus
CheckDlgButton
EndDialog
DialogBoxIndirectParamW
GetMenuItemCount
InsertMenuW
GetMenu
LoadBitmapW
GetWindowThreadProcessId
SetWindowsHookExW
PostThreadMessageW
UnhookWindowsHookEx
FindWindowW
BringWindowToTop
SetForegroundWindow
DefDlgProcW
GetDesktopWindow
GetSysColorBrush
SetRect
SetWindowLongW
BeginPaint
EndPaint
SetWindowPos
ReleaseDC
GetDC
RegisterClassW
GetDlgItemTextW

gdi32

RoundRect
CreateFontW
GetDeviceCaps
CreateCompatibleBitmap
GetObjectW
DeleteDC
CreateCompatibleDC
BitBlt
GetDIBits
CreatePen
SetPixel
CreateFontIndirectW
CreateDCW
SetBkColor
CreateRectRgn
GetPixel
CreateBitmap
CreatePolygonRgn
CombineRgn
SetRectRgn
OffsetRgn
CreateRectRgnIndirect
GetClipRgn
SetBkMode
SetTextColor
CreateSolidBrush
SelectObject
Rectangle
DeleteObject
ExtSelectClipRgn
GetStockObject

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

AddAccessAllowedAce
AddAccessDeniedAce
InitializeAcl
GetLengthSid
RegOpenKeyExW
RegEnumKeyExW
RegEnumValueW
RegDeleteKeyW
RegEnumKeyW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
SetSecurityDescriptorDacl
RegSetKeySecurity
RegCloseKey
AllocateAndInitializeSid
SetEntriesInAclW
OpenProcessToken
FreeSid
LookupPrivilegeValueW
AdjustTokenPrivileges
GetNamedSecurityInfoW
SetNamedSecurityInfoW
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
LookupAccountNameA
InitializeSecurityDescriptor

shell32

ExtractIconExW
DragQueryFileW
ShellExecuteExW
DragFinish
SHChangeNotify
SHGetSpecialFolderLocation
SHGetMalloc
SHGetFolderPathW
ExtractIconW
SHGetPathFromIDListW
SHBrowseForFolderW
SHFileOperationW
SHGetDesktopFolder
SHGetFileInfoW

comctl32

ImageList_Destroy
ImageList_SetBkColor
ImageList_Create
ImageList_Draw
ImageList_Add
ImageList_GetIconSize
_TrackMouseEvent
ImageList_AddMasked
ImageList_GetIcon
ord14
ImageList_ReplaceIcon

oleaut32

VariantClear
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
SysAllocString

msvcp60

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0bad_alloc@std@@QAE@PBD@Z
??1bad_alloc@std@@UAE@XZ
??0bad_alloc@std@@QAE@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z

wininet

InternetGetLastResponseInfoW
InternetCloseHandle
InternetSetStatusCallbackW
InternetConnectW
InternetCrackUrlW
InternetOpenW
InternetSetOptionW
HttpOpenRequestW
HttpQueryInfoW
HttpSendRequestW
InternetReadFile
InternetErrorDlg
FtpOpenFileW
InternetWriteFile

ole32

CoInitialize
CoCreateInstance
CoUninitialize

Sections

.text
Size: 436KB - Virtual size: 433KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 312KB - Virtual size: 310KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/ODZip.dll
.dll windows:4 windows x86 arch:x86

e74d2172d762ec14711dacd915833c1d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetProcAddress
LoadLibraryA
GlobalFree
GlobalUnlock
GlobalLock
RemoveDirectoryA
PeekNamedPipe
GetFileInformationByHandle
SystemTimeToFileTime
LocalFileTimeToFileTime
DeleteFileA
FileTimeToSystemTime
SetCurrentDirectoryA
GetCurrentDirectoryA
lstrcpynA
lstrcpyA
lstrcatA
lstrlenA
DeleteCriticalSection
InitializeCriticalSection
GetVersionExA
GetLocaleInfoA
GetACP
InterlockedExchange
CreateFileA
DosDateTimeToFileTime
SetFileTime
CloseHandle
GlobalAlloc
GetFileAttributesA
FindFirstFileA
FindClose
FindNextFileA
GetVolumeInformationA
GetVersion
GetFileType
GetDriveTypeA
LeaveCriticalSection
lstrcmpiA
EnterCriticalSection
ReleaseMutex
WaitForSingleObject
CreateMutexA
HeapFree
HeapAlloc
GetProcessHeap
GetCurrentProcess
FileTimeToLocalFileTime
GetFullPathNameA
SetVolumeLabelA
GetFileTime
FileTimeToDosDateTime
ReadFile
SetConsoleMode
GetConsoleMode
GetTimeZoneInformation
WriteFile
SetFilePointer
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetSystemTimeAsFileTime
MoveFileA
HeapReAlloc
SetStdHandle
SetConsoleCtrlHandler
ExitProcess
GetModuleHandleA
TerminateProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetEndOfFile
SetHandleCount
GetStdHandle
GetStartupInfoA
VirtualQuery
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapSize
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
GetCPInfo
GetOEMCP
SetUnhandledExceptionFilter
IsBadCodePtr
VirtualProtect
GetSystemInfo
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetFileAttributesA
CreateDirectoryA

user32

wvsprintfA
CharToOemA
GetActiveWindow
MessageBoxA
OemToCharA

advapi32

GetKernelObjectSecurity
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
GetSecurityDescriptorGroup
IsValidSid
GetSecurityDescriptorOwner
GetSecurityDescriptorSacl
IsValidAcl
GetSecurityDescriptorDacl
IsValidSecurityDescriptor
SetKernelObjectSecurity
GetSecurityDescriptorControl
GetSecurityDescriptorLength

Exports

Exports

AddFiletoZipList
ExtractFile
UnZipFiles
ZipFiles
ZipFiles2
ZipFilesfromList
ZipProgressCB

Sections

.text
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/Themes/TX 1.0_春春版/Somatic.icl
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/Themes/TX 1.0_春春版/Somatic.iptheme
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/cache.dll
.dll windows:4 windows x86 arch:x86

4017962c81ada9ce46ba1d111d89bdc8

Code Sign

01
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

01/08/1996, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

0a
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

06/08/2003, 00:00

Not After

05/08/2013, 23:59

Subject

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

21:d2:bd
Certificate

Issuer

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Not Before

21/09/2005, 21:26

Not After

21/09/2007, 21:26

Subject

CN=Stardock Corporation,OU=,O=Stardock Corporation,L=Plymouth,ST=Michigan,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ImageList_GetIconSize

user32

FindWindowA
SendMessageA
MessageBoxA
CallNextHookEx
GetWindow
wsprintfA

advapi32

RegCloseKey
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA

shell32

SHGetFileInfoA

msvcrt

_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
atoi
free

kernel32

OpenEventA
Sleep
DeleteFileA
GetWindowsDirectoryA
lstrlenA
SetEvent
CloseHandle
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile

Exports

Exports

HookMsgProc
RebuildIcons

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 306B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/common.dll
.dll windows:4 windows x86 arch:x86

c9d74ac1216f3ccbde63051f99379151

Code Sign

01
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

01/08/1996, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

0a
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

06/08/2003, 00:00

Not After

05/08/2013, 23:59

Subject

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

21:d2:bd
Certificate

Issuer

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Not Before

21/09/2005, 21:26

Not After

21/09/2007, 21:26

Subject

CN=Stardock Corporation,OU=,O=Stardock Corporation,L=Plymouth,ST=Michigan,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42u

ord283
ord6451
ord3865
ord6697
ord2637
ord3658
ord5977
ord551
ord3332
ord3806
ord1172
ord4269
ord6371
ord4480
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord2717
ord4074
ord4692
ord5303
ord5285
ord5710
ord3948
ord4616
ord3733
ord561
ord815
ord6466
ord641
ord326
ord2836
ord324
ord325
ord4229
ord3084
ord4704
ord2099
ord823
ord5446
ord2406
ord6379
ord6390
ord3566
ord3706
ord640
ord783
ord323
ord6373
ord2104
ord3133
ord5781
ord4294
ord3915
ord613
ord1634
ord289
ord2397
ord1633
ord3701
ord2444
ord3792
ord4532
ord3621
ord4768
ord2756
ord2567
ord4124
ord4273
ord4272
ord2769
ord537
ord6565
ord2812
ord5597
ord6868
ord800
ord1085
ord1001
ord538
ord1115
ord542
ord802
ord2634
ord1197
ord1143
ord1637
ord2858
ord6266
ord1173
ord1568
ord1570
ord1179
ord2430
ord3649
ord2576
ord4215
ord6195
ord342
ord3087
ord1165
ord6211
ord6776
ord6193
ord1761
ord2331
ord2294
ord3592
ord4419
ord5276
ord4401
ord1767
ord6048
ord2506
ord4992
ord4847
ord4370
ord5261
ord2854
ord3870
ord2859
ord4292
ord4128
ord2371
ord4279
ord4270
ord825
ord567
ord609
ord3569
ord4418
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5286
ord4347
ord6370
ord5157
ord1240
ord1194
ord1563
ord1248
ord2377
ord5237
ord4390
ord1768
ord4073
ord6051
ord3397
ord5273
ord5436
ord269
ord826
ord600
ord1571
ord1250

msvcrt

_wsplitpath
__CxxFrameHandler
wcslen
_wtoi
_stricmp
_strnicmp
_CxxThrowException
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
_purecall
_wcslwr
wcsncpy
free
wcscat
_wcsicmp
wcscpy
wcscmp
wcsstr
wcstok
_wcsnicmp
wcsrchr
wcsncmp
wcschr
realloc
wcsncat
sprintf
strstr
strtok
rand
srand
localtime
time
??0exception@@QAE@ABV0@@Z

kernel32

SizeofResource
LockResource
LoadResource
FindResourceW
EnumResourceNamesW
LoadLibraryExW
GlobalUnlock
GlobalLock
GlobalAlloc
CopyFileW
GetFileSize
ReadFile
OutputDebugStringA
SetFilePointer
CreateFileW
WriteFile
GetTempPathW
GetTickCount
OutputDebugStringW
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
GetVersionExW
GetPrivateProfileStringW
FindNextFileW
GetShortPathNameW
FindFirstFileW
DeleteFileW
GetWindowsDirectoryW
LocalAlloc
LocalFree
lstrcmpW
LoadLibraryW
GetProcAddress
FreeLibrary
GetSystemDirectoryW
SetCurrentDirectoryW
CreateDirectoryW
GetFileAttributesW
FindClose

user32

InvalidateRect
DrawTextW
wsprintfW
FindWindowExW
GetSysColor
SendMessageW
RegisterWindowMessageW
IntersectRect
GetWindowLongW
GetScrollInfo
WindowFromDC
GetWindowRgn
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetClassNameW
OffsetRect
IsWindowVisible
SetWindowRgn
MapWindowPoints
BeginPaint
EndPaint
GetSystemMetrics
IsWindow
EnableMenuItem
CheckMenuRadioItem
MessageBoxW
GetActiveWindow
wvsprintfW
CreateIconFromResourceEx
SetCursor
LoadCursorW
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
GetClipboardData
GetDC
ReleaseDC
GetFocus
FillRect
DrawIconEx
DrawFocusRect
DestroyIcon
LoadMenuW
GetSubMenu
SetMenuDefaultItem
ModifyMenuW
GetWindowRect
LoadImageW
GetDlgItem
GetWindow
DrawFrameControl
GetClientRect
GetParent
EnableWindow

gdi32

CreateRectRgnIndirect
OffsetRgn
SetRectRgn
CombineRgn
CreatePolygonRgn
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
GetPixel
BitBlt
ExtSelectClipRgn
GetDeviceCaps
GetStockObject
CreateSolidBrush
Rectangle
DeleteObject
CreatePen
SetPixel
CreateFontIndirectW
SelectObject
SetBkMode
SetTextColor
GetClipRgn
CreateRectRgn
CreateHalftonePalette
GetPaletteEntries
SetStretchBltMode
StretchBlt
CreateDIBSection
SetDIBColorTable
SetPixelV
GdiFlush
DeleteDC

comdlg32

GetOpenFileNameW

shell32

SHGetDesktopFolder
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteExW
SHFileOperationW
SHGetFileInfoW
ExtractIconW
DragQueryFileW

comctl32

ord14
_TrackMouseEvent

ole32

CoCreateInstance
CoUninitialize
CoInitialize

shlwapi

PathCanonicalizeW

advapi32

RegQueryValueExW
RegDeleteValueW
RegCreateKeyExW
RegEnumKeyW
RegDeleteKeyW
RegEnumValueW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW

Exports

Exports

ChangeIcon

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/desktop.ini
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/extracticon.dll
.dll windows:4 windows x86 arch:x86

8e088868d09ecae0685b835afc4d13f8

Code Sign

01
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

01/08/1996, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

0a
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

06/08/2003, 00:00

Not After

05/08/2013, 23:59

Subject

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

21:d2:bd
Certificate

Issuer

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Not Before

21/09/2005, 21:26

Not After

21/09/2007, 21:26

Subject

CN=Stardock Corporation,OU=,O=Stardock Corporation,L=Plymouth,ST=Michigan,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42u

ord1165
ord815
ord825
ord561
ord3733
ord4418
ord4616
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord3948
ord5710
ord5285
ord5303
ord4692
ord4074
ord2717
ord5298
ord5296
ord4269
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord269
ord826
ord600
ord1571
ord6466
ord1250
ord1248
ord1563
ord1194
ord1240
ord342
ord1179
ord1570
ord1568
ord1173
ord1115
ord2546
ord4480
ord6371

msvcrt

_onexit
free
_initterm
malloc
__dllonexit
_adjust_fdiv
wcslen
??1type_info@@UAE@XZ
_wcsicmp
__CxxFrameHandler
??2@YAPAXI@Z

kernel32

LocalAlloc
LocalFree
ExpandEnvironmentStringsW
SearchPathW
CreateFileW
ReadFile
GetFileSize
CreateFileMappingW
MapViewOfFile
CloseHandle
lstrcpynW
MultiByteToWideChar
GetVersionExW
LoadLibraryW
GetProcAddress
FreeLibrary
UnmapViewOfFile

user32

DestroyIcon
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx

shell32

ExtractIconW

Exports

Exports

ICLExtractIconExA
ICLExtractIconExW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/images/All Icons.ico
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/images/Control panel.ico
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/images/Cursors.ico
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/images/Custom view.ico
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/images/Desktop.ico
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/images/Drives.ico
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/images/Files.ico
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/images/Folders.ico
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/images/IconPackager.ico
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/images/Launch.ico
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/images/New.ico
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/images/Open.ico
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/images/Others.ico
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/images/Save as.ico
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/images/Save.ico
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/images/Start.ico
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/images/ip.ico
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/install.inf
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/lang/English.lng
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/lang/Sim_Chinese.lng
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/sdczip.dll
.dll windows:4 windows x86 arch:x86

a0ebcff7be84b69745eb0731ca8302cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
SetFileAttributesA
GetLastError
SetFilePointer
ReadFile
WriteFile
GetFileAttributesA
FileTimeToLocalFileTime
OutputDebugStringA
GetCurrentDirectoryA
GetFullPathNameA
lstrlenA
lstrcmpiA
CreateDirectoryA
GetFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
GetFileSize
lstrcpyA
FindNextFileA
lstrcatA

user32

wvsprintfA
SendMessageA
wsprintfA

msvcrt

_adjust_fdiv
??3@YAXPAX@Z
strncpy
_splitpath
_errno
malloc
free
fopen
fread
fwrite
ftell
fseek
fclose
__CxxFrameHandler
_makepath
_ftol
strrchr
_strdup
rand
srand
time
_strnicmp
strchr
strstr
_stricmp
_initterm

Exports

Exports

AddFileToZipWithPath
ExtractFile
GetFilesCount
GetFolderSize
GetLastZipError
GetUncompressedSize
UnZipFile
UnZipFiles
UnZipFiles2
UnZipProgressCB
ZipFiles
ZipProgressCB

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/卸载.cmd
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/图标下载站.url
桌面天下系统美化包 TX1.0 （春春版）/图标(Icon)/IconPackager/安装.cmd
桌面天下系统美化包 TX1.0 （春春版）/壁纸(Wallpaper)/TX 1.0_春春版/1024×768分辨率.jpg
.jpg
桌面天下系统美化包 TX1.0 （春春版）/壁纸(Wallpaper)/TX 1.0_春春版/1280×1024分辨率.jpg
.jpg
桌面天下系统美化包 TX1.0 （春春版）/壁纸(Wallpaper)/TX 1.0_春春版/1280×800分辨率.jpg
.jpg
桌面天下系统美化包 TX1.0 （春春版）/壁纸(Wallpaper)/TX 1.0_春春版/1600×1200分辨率.jpg
.jpg
桌面天下系统美化包 TX1.0 （春春版）/壁纸(Wallpaper)/TX 1.0_春春版/Thumbs.db
桌面天下系统美化包 TX1.0 （春春版）/壁纸(Wallpaper)/TX 1.0_春春版/唯美1440×900分辨率.jpg
.jpg
桌面天下系统美化包 TX1.0 （春春版）/壁纸(Wallpaper)/TX 1.0_春春版/春天1440×900分辨率.jpg
.jpg
桌面天下系统美化包 TX1.0 （春春版）/壁纸(Wallpaper)/TX 1.0_春春版/水珠.jpg
.jpg
桌面天下系统美化包 TX1.0 （春春版）/壁纸(Wallpaper)/TX 1.0_春春版/美女1024×768分辨率.jpg
.jpg
桌面天下系统美化包 TX1.0 （春春版）/壁纸(Wallpaper)/TX 1.0_春春版/美女1280×1024分辨率.jpg
.jpg
桌面天下系统美化包 TX1.0 （春春版）/壁纸(Wallpaper)/TX 1.0_春春版/美女1280×800分辨率.jpg
.jpg
桌面天下系统美化包 TX1.0 （春春版）/字体(Fonts)/微软雅黑.rar
.rar
微软雅黑.ttf
桌面天下系统美化包 TX1.0 （春春版）/字体(Fonts)/超清晰显示WindowsXP字体增强补丁/cttune.cpl
.dll windows:4 windows x86 arch:x86

552cb981f1c1a1e806e845a12c44c7a7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\tttools\cttune\Release\cttune.pdb

Imports

msimg32

AlphaBlend

comctl32

PropertySheetW
InitCommonControlsEx

kernel32

HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
SetStdHandle
InitializeCriticalSection
GetCPInfo
GetOEMCP
GetACP
FlushFileBuffers
IsBadReadPtr
GetModuleHandleW
MultiByteToWideChar
SetFilePointer
IsBadWritePtr
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
VirtualQuery
InterlockedExchange
WriteFile
UnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
VirtualProtect
GetSystemInfo
CloseHandle
LoadLibraryA
GetProcAddress
VerSetConditionMask
VerifyVersionInfoW
MulDiv
LoadLibraryW
GetProcessHeap
FreeLibrary
WideCharToMultiByte
FreeEnvironmentStringsW
HeapAlloc
HeapFree
lstrcmpiW
SetUnhandledExceptionFilter
lstrlenW
IsBadCodePtr
ExitProcess
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings

user32

RedrawWindow
GetMessageW
DestroyWindow
PostQuitMessage
TranslateMessage
DispatchMessageW
CheckRadioButton
GetKeyState
CheckDlgButton
WinHelpW
GetWindowRect
ShowWindow
IsDlgButtonChecked
LoadStringA
PostMessageW
MessageBoxW
EnableWindow
SystemParametersInfoW
SetCursor
CallWindowProcW
GetFocus
LoadStringW
GetDlgItem
MapDialogRect
SendDlgItemMessageW
DrawTextW
FrameRect
LoadCursorW
RegisterClassExW
GetWindowLongW
GetClientRect
GetDC
DrawFocusRect
ReleaseDC
BeginPaint
FillRect
EndPaint
SetWindowLongW
GetParent
SendMessageW
SetWindowPos
DefWindowProcW
InvalidateRect

gdi32

GetDeviceCaps
GdiSetBatchLimit
CreateFontIndirectW
SetTextColor
CreateCompatibleBitmap
PatBlt
GetStockObject
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
DeleteObject
GetObjectW
CreateSolidBrush

comdlg32

ChooseFontW

advapi32

RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey

Exports

Exports

CPlApplet

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/Styler.exe
.exe windows:4 windows x86 arch:x86

b9069207b537a1b9a6a741636615104a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeKillEvent
timeSetEvent

shlwapi

PathRemoveExtensionA
PathIsDirectoryEmptyA
PathFindExtensionA
SHGetValueA
PathParseIconLocationA
PathRemoveBackslashA
PathIsDirectoryA
PathRemoveFileSpecA
PathFileExistsA
PathFindFileNameA

uxtheme

EnableThemeDialogTexture
DrawThemeParentBackground

wininet

InternetSetOptionA
InternetOpenA
HttpOpenRequestA
InternetCloseHandle
HttpAddRequestHeadersA
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
InternetConnectA

imagehlp

MakeSureDirectoryPathExists

mfc42

ord4243
ord3301
ord4133
ord4297
ord5788
ord472
ord2862
ord2859
ord3293
ord6905
ord6907
ord3302
ord535
ord537
ord924
ord3998
ord541
ord801
ord6143
ord5861
ord3370
ord729
ord430
ord786
ord2504
ord1706
ord2461
ord6389
ord519
ord1175
ord6199
ord2575
ord4396
ord3574
ord609
ord4275
ord4367
ord5344
ord3273
ord3353
ord4622
ord3579
ord438
ord614
ord4530
ord4525
ord4542
ord3274
ord439
ord736
ord4042
ord3216
ord5495
ord5685
ord3910
ord3721
ord795
ord3716
ord790
ord3797
ord4123
ord2244
ord2864
ord2587
ord4406
ord3729
ord804
ord4267
ord1232
ord2754
ord6706
ord2567
ord6197
ord6378
ord6380
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord693
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord3738
ord561
ord815
ord398
ord700
ord5710
ord2725
ord802
ord692
ord809
ord616
ord686
ord656
ord6515
ord6743
ord3610
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord1205
ord1200
ord556
ord384
ord542
ord6215
ord4287
ord941
ord2645
ord6883
ord2820
ord3811
ord922
ord4284
ord2086
ord4220
ord2584
ord3654
ord2438
ord6270
ord5981
ord2863
ord1644
ord6877
ord6785
ord2119
ord5608
ord5572
ord2915
ord2642
ord4694
ord2558
ord2096
ord6900
ord3996
ord2080
ord4277
ord4129
ord6442
ord6111
ord2113
ord2089
ord2116
ord2078
ord4299
ord2408
ord6153
ord3790
ord5683
ord4224
ord2546
ord3815
ord1176
ord291
ord665
ord603
ord1979
ord1969
ord273
ord5186
ord354
ord2513
ord293
ord5053
ord1601
ord5450
ord6394
ord5440
ord6383
ord2860
ord3640
ord4402
ord2582
ord5268
ord5232
ord4229
ord4852
ord4375
ord1816
ord823
ord2818
ord2302
ord683
ord567
ord3631
ord4424
ord3402
ord5290
ord1776
ord6055
ord470
ord5875
ord2243
ord5789
ord2414
ord1641
ord6172
ord755
ord3663
ord3626
ord3619
ord926
ord858
ord2763
ord1168
ord1146
ord2379
ord4710
ord3092
ord6880
ord4376
ord4853
ord4234
ord2370
ord825
ord324
ord540
ord860
ord641
ord800
ord3597
ord4425
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5280
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord2514
ord4998
ord5265
ord1576
ord5199

msvcrt

?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
calloc
fclose
fseek
ftell
fwrite
fread
fopen
_strdup
_splitpath
_makepath
wcscmp
wcsstr
wcschr
iswspace
iswpunct
_exit
wcstok
wcsncpy
_wtoi
strrchr
wcscpy
wcscat
_wcslwr
iswalnum
iswupper
swprintf
strncpy
rand
malloc
free
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_wcsicmp
_CxxThrowException
_strnicmp
_setmbcp
??1type_info@@UAE@XZ
__CxxFrameHandler
memset
sprintf
_ftol
rename
strcat
strcpy
strcmp
strncmp
strlen
memcpy
wcslen
_stricmp
atoi
_mkdir
_controlfp

kernel32

lstrlenA
ExpandEnvironmentStringsA
LoadLibraryA
GetProcAddress
GetVersion
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetPrivateProfileIntA
WritePrivateProfileStringA
IsBadReadPtr
GlobalMemoryStatus
CreateFileA
DeviceIoControl
CloseHandle
GetSystemInfo
GetLastError
CreateMutexA
SetCurrentDirectoryA
GetModuleFileNameA
GetCommandLineA
lstrcpyA
GetSystemDefaultLangID
ReleaseMutex
Sleep
FindFirstChangeNotificationA
FindCloseChangeNotification
InterlockedExchangeAdd
InterlockedDecrement
TerminateThread
WaitForSingleObject
SetProcessWorkingSetSize
GetCurrentProcess
GetTickCount
GetPrivateProfileStringW
SetFileAttributesA
GetFileAttributesA
VirtualFree
UnmapViewOfFile
lstrcpyW
MulDiv
lstrlenW
CreateThread
MapViewOfFile
VirtualAlloc
LockResource
LoadResource
SizeofResource
FindResourceW
CreateFileMappingA
LoadLibraryExW
SetThreadPriority
VirtualFreeEx
ReadProcessMemory
VirtualAllocEx
OpenProcess
GetFullPathNameA
lstrcmpiA
WriteFile
CreateDirectoryA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileTime
GetStartupInfoA
FindClose
FindNextFileA
FindFirstFileA
GetModuleHandleA
EnumResourceNamesA
LoadLibraryExA
GetPrivateProfileStringA
IsBadStringPtrA
LocalFree
GlobalUnlock
LocalAlloc
InterlockedExchange
GetVersionExA
RaiseException
GlobalLock

user32

CreateMenu
AppendMenuA
RemoveMenu
GetWindowThreadProcessId
RegisterHotKey
SetTimer
SendMessageTimeoutA
FindWindowExA
ShowWindow
MoveWindow
RegisterWindowMessageA
MessageBoxA
SystemParametersInfoA
GetSystemMetrics
InflateRect
GetClassInfoA
DestroyMenu
GetParent
DrawTextW
LoadImageW
ModifyMenuA
GetCursorPos
SetForegroundWindow
ReleaseDC
PostMessageA
IsIconic
GetWindowDC
GetClientRect
KillTimer
LoadImageA
GetSysColorBrush
FillRect
GetSysColor
DestroyIcon
SendMessageA
EnableWindow
GetMenu
GetMenuItemCount
GetMenuItemID
LoadStringW
wsprintfW
SetSysColors
EnumWindows
GetClassNameA
SetParent
GetDC
RedrawWindow
UpdateWindow
PostQuitMessage
GetSubMenu
LoadMenuA
DrawTextA
InvalidateRect
PtInRect
LoadCursorA
SetCursor
GetWindowRect
DrawIcon
GetWindowTextW
UnregisterHotKey
IsWindowVisible

gdi32

GetDIBits
DeleteDC
StretchBlt
BitBlt
SetDIBits
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
AddFontResourceA
EnumFontFamiliesExA
RemoveFontResourceA
DeleteObject
SelectObject
GetObjectA
CreateFontIndirectA
GetTextExtentPoint32A
SetStretchBltMode

comdlg32

ChooseColorA

advapi32

RegQueryValueExA
RegOpenKeyExA
CloseServiceHandle
StartServiceA
QueryServiceStatus
OpenServiceA
OpenSCManagerA
RegCreateKeyExA
RegSetValueExA
RegSetValueExW
RegCreateKeyExW
RegCloseKey

shell32

ExtractIconA
SHGetSpecialFolderPathA
SHFileOperationA
Shell_NotifyIconA
DragQueryFileA
ShellExecuteA

comctl32

ImageList_Draw
ImageList_ReplaceIcon
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Add
ImageList_AddMasked
ImageList_Replace

ole32

CoUninitialize
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
OleRun

oleaut32

VariantClear
GetErrorInfo
SysAllocString
SysFreeString

msvcp60

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

Sections

.text
Size: 216KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/StylerHelper.dll
.dll windows:4 windows x86 arch:x86

6c4bd873400343d5e578980647241ffa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

uxtheme

DrawThemeParentBackground

mfc42

ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord3626
ord823
ord2414
ord283
ord5631
ord3147
ord4188
ord3663
ord3797
ord2864
ord3619
ord2244
ord3953
ord1168
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord1578
ord600
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord1176
ord826
ord269
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord699
ord397
ord1116
ord912

msvcrt

_stricmp
__CxxFrameHandler
_mbsicmp
wcslen
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
sprintf

kernel32

LocalAlloc
LocalFree
lstrcmpiA
GetModuleHandleA
GetProcAddress
GetPrivateProfileIntA
GetPrivateProfileStringA

user32

FillRect
GetSysColorBrush
GetClientRect
GetSysColor
GetWindowTextW
GetParent
FindWindowExA
RegisterWindowMessageA
GetWindowTextA
GetClassNameA
GetWindowInfo
DrawTextW
SetWindowLongA
IsWindow
DestroyWindow
IsZoomed
IsIconic
ShowWindow
GetWindowLongA
ClipCursor
IsWindowVisible
GetWindowRect
GetWindowRgn
GetWindowDC
CreateWindowExA
ValidateRect
LoadImageA
ReleaseDC
FindWindowA
GetSystemMetrics
GetCursorPos
OffsetRect
CallWindowProcA
SystemParametersInfoA
SetWindowsHookExA
UnhookWindowsHookEx
EnumWindows
SendMessageA
PostMessageA
SetWindowPos
CallNextHookEx

gdi32

DeleteDC
GetDIBits
GdiFlush
FillRgn
SelectObject
CreateDIBSection
CreateCompatibleDC
OffsetRgn
GetRgnBox
DeleteObject
CombineRgn
CreateRectRgn
BitBlt
CreateCompatibleBitmap
SetTextColor
SetBkMode

shell32

SHGetSpecialFolderPathA

Exports

Exports

captionbarHook
makehook
menuHook
menuUnhook
shadowHook
taskbarHook
unhook
whiteHook

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SH_DATA
Size: 4KB - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/Styler_EN.exe
.exe windows:4 windows x86 arch:x86

b9069207b537a1b9a6a741636615104a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeKillEvent
timeSetEvent

shlwapi

PathRemoveExtensionA
PathIsDirectoryEmptyA
PathFindExtensionA
SHGetValueA
PathParseIconLocationA
PathRemoveBackslashA
PathIsDirectoryA
PathRemoveFileSpecA
PathFileExistsA
PathFindFileNameA

uxtheme

EnableThemeDialogTexture
DrawThemeParentBackground

wininet

InternetSetOptionA
InternetOpenA
HttpOpenRequestA
InternetCloseHandle
HttpAddRequestHeadersA
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
InternetConnectA

imagehlp

MakeSureDirectoryPathExists

mfc42

ord4243
ord3301
ord4133
ord4297
ord5788
ord472
ord2862
ord2859
ord3293
ord6905
ord6907
ord3302
ord535
ord537
ord924
ord3998
ord541
ord801
ord6143
ord5861
ord3370
ord729
ord430
ord786
ord2504
ord1706
ord2461
ord6389
ord519
ord1175
ord6199
ord2575
ord4396
ord3574
ord609
ord4275
ord4367
ord5344
ord3273
ord3353
ord4622
ord3579
ord438
ord614
ord4530
ord4525
ord4542
ord3274
ord439
ord736
ord4042
ord3216
ord5495
ord5685
ord3910
ord3721
ord795
ord3716
ord790
ord3797
ord4123
ord2244
ord2864
ord2587
ord4406
ord3729
ord804
ord4267
ord1232
ord2754
ord6706
ord2567
ord6197
ord6378
ord6380
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord693
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord3738
ord561
ord815
ord398
ord700
ord5710
ord2725
ord802
ord692
ord809
ord616
ord686
ord656
ord6515
ord6743
ord3610
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord1205
ord1200
ord556
ord384
ord542
ord6215
ord4287
ord941
ord2645
ord6883
ord2820
ord3811
ord922
ord4284
ord2086
ord4220
ord2584
ord3654
ord2438
ord6270
ord5981
ord2863
ord1644
ord6877
ord6785
ord2119
ord5608
ord5572
ord2915
ord2642
ord4694
ord2558
ord2096
ord6900
ord3996
ord2080
ord4277
ord4129
ord6442
ord6111
ord2113
ord2089
ord2116
ord2078
ord4299
ord2408
ord6153
ord3790
ord5683
ord4224
ord2546
ord3815
ord1176
ord291
ord665
ord603
ord1979
ord1969
ord273
ord5186
ord354
ord2513
ord293
ord5053
ord1601
ord5450
ord6394
ord5440
ord6383
ord2860
ord3640
ord4402
ord2582
ord5268
ord5232
ord4229
ord4852
ord4375
ord1816
ord823
ord2818
ord2302
ord683
ord567
ord3631
ord4424
ord3402
ord5290
ord1776
ord6055
ord470
ord5875
ord2243
ord5789
ord2414
ord1641
ord6172
ord755
ord3663
ord3626
ord3619
ord926
ord858
ord2763
ord1168
ord1146
ord2379
ord4710
ord3092
ord6880
ord4376
ord4853
ord4234
ord2370
ord825
ord324
ord540
ord860
ord641
ord800
ord3597
ord4425
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5280
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord2514
ord4998
ord5265
ord1576
ord5199

msvcrt

?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
calloc
fclose
fseek
ftell
fwrite
fread
fopen
_strdup
_splitpath
_makepath
wcscmp
wcsstr
wcschr
iswspace
iswpunct
_exit
wcstok
wcsncpy
_wtoi
strrchr
wcscpy
wcscat
_wcslwr
iswalnum
iswupper
swprintf
strncpy
rand
malloc
free
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_wcsicmp
_CxxThrowException
_strnicmp
_setmbcp
??1type_info@@UAE@XZ
__CxxFrameHandler
memset
sprintf
_ftol
rename
strcat
strcpy
strcmp
strncmp
strlen
memcpy
wcslen
_stricmp
atoi
_mkdir
_controlfp

kernel32

lstrlenA
ExpandEnvironmentStringsA
LoadLibraryA
GetProcAddress
GetVersion
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetPrivateProfileIntA
WritePrivateProfileStringA
IsBadReadPtr
GlobalMemoryStatus
CreateFileA
DeviceIoControl
CloseHandle
GetSystemInfo
GetLastError
CreateMutexA
SetCurrentDirectoryA
GetModuleFileNameA
GetCommandLineA
lstrcpyA
GetSystemDefaultLangID
ReleaseMutex
Sleep
FindFirstChangeNotificationA
FindCloseChangeNotification
InterlockedExchangeAdd
InterlockedDecrement
TerminateThread
WaitForSingleObject
SetProcessWorkingSetSize
GetCurrentProcess
GetTickCount
GetPrivateProfileStringW
SetFileAttributesA
GetFileAttributesA
VirtualFree
UnmapViewOfFile
lstrcpyW
MulDiv
lstrlenW
CreateThread
MapViewOfFile
VirtualAlloc
LockResource
LoadResource
SizeofResource
FindResourceW
CreateFileMappingA
LoadLibraryExW
SetThreadPriority
VirtualFreeEx
ReadProcessMemory
VirtualAllocEx
OpenProcess
GetFullPathNameA
lstrcmpiA
WriteFile
CreateDirectoryA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileTime
GetStartupInfoA
FindClose
FindNextFileA
FindFirstFileA
GetModuleHandleA
EnumResourceNamesA
LoadLibraryExA
GetPrivateProfileStringA
IsBadStringPtrA
LocalFree
GlobalUnlock
LocalAlloc
InterlockedExchange
GetVersionExA
RaiseException
GlobalLock

user32

CreateMenu
AppendMenuA
RemoveMenu
GetWindowThreadProcessId
RegisterHotKey
SetTimer
SendMessageTimeoutA
FindWindowExA
ShowWindow
MoveWindow
RegisterWindowMessageA
MessageBoxA
SystemParametersInfoA
GetSystemMetrics
InflateRect
GetClassInfoA
DestroyMenu
GetParent
DrawTextW
LoadImageW
ModifyMenuA
GetCursorPos
SetForegroundWindow
ReleaseDC
PostMessageA
IsIconic
GetWindowDC
GetClientRect
KillTimer
LoadImageA
GetSysColorBrush
FillRect
GetSysColor
DestroyIcon
SendMessageA
EnableWindow
GetMenu
GetMenuItemCount
GetMenuItemID
LoadStringW
wsprintfW
SetSysColors
EnumWindows
GetClassNameA
SetParent
GetDC
RedrawWindow
UpdateWindow
PostQuitMessage
GetSubMenu
LoadMenuA
DrawTextA
InvalidateRect
PtInRect
LoadCursorA
SetCursor
GetWindowRect
DrawIcon
GetWindowTextW
UnregisterHotKey
IsWindowVisible

gdi32

GetDIBits
DeleteDC
StretchBlt
BitBlt
SetDIBits
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
AddFontResourceA
EnumFontFamiliesExA
RemoveFontResourceA
DeleteObject
SelectObject
GetObjectA
CreateFontIndirectA
GetTextExtentPoint32A
SetStretchBltMode

comdlg32

ChooseColorA

advapi32

RegQueryValueExA
RegOpenKeyExA
CloseServiceHandle
StartServiceA
QueryServiceStatus
OpenServiceA
OpenSCManagerA
RegCreateKeyExA
RegSetValueExA
RegSetValueExW
RegCreateKeyExW
RegCloseKey

shell32

ExtractIconA
SHGetSpecialFolderPathA
SHFileOperationA
Shell_NotifyIconA
DragQueryFileA
ShellExecuteA

comctl32

ImageList_Draw
ImageList_ReplaceIcon
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Add
ImageList_AddMasked
ImageList_Replace

ole32

CoUninitialize
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
OleRun

oleaut32

VariantClear
GetErrorInfo
SysAllocString
SysFreeString

msvcp60

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

Sections

.text
Size: 216KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/StylerTB.dll
.dll regsvr32 windows:4 windows x86 arch:x86

c6346456368d9723eb16b3da5f091dd4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

uxtheme

DrawThemeBackground
OpenThemeData
DrawThemeParentBackground
IsThemeActive
CloseThemeData

shlwapi

PathFileExistsW
PathFindFileNameW
PathCreateFromUrlW
PathIsURLW
PathIsDirectoryW
UrlGetPartW
SHAutoComplete

mfc42u

ord567
ord825
ord4238
ord2857
ord2088
ord2371
ord2859
ord6211
ord2400
ord6451
ord4294
ord6871
ord786
ord2496
ord1699
ord2453
ord3297
ord6385
ord519
ord6466
ord4401
ord3703
ord781
ord4270
ord1229
ord1165
ord4215
ord2576
ord3649
ord2430
ord6266
ord1749
ord2858
ord1637
ord1143
ord6130
ord3758
ord3658
ord4269
ord815
ord6371
ord4480
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord4074
ord4692
ord5285
ord5710
ord4616
ord3733
ord561
ord3948
ord2717
ord1128
ord823
ord2113
ord5977
ord3614
ord3391
ord3726
ord809
ord801
ord800
ord808
ord556
ord541
ord540
ord3621
ord2406
ord4264
ord1088
ord4282
ord3133
ord2423
ord2855
ord6437
ord4457
ord538
ord5857
ord6279
ord858
ord4124
ord2756
ord861
ord6874
ord925
ord922
ord537
ord2810
ord6139
ord3870
ord755
ord2854
ord6174
ord470
ord535
ord5679
ord6868
ord6655
ord940
ord859
ord4219
ord942
ord1571
ord600
ord826
ord269
ord4418
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5286
ord4347
ord6370
ord5157
ord2377
ord5237
ord1768
ord4073
ord6051
ord1250
ord1248
ord1563
ord1194
ord1240
ord342
ord1179
ord1570
ord1568
ord1173
ord1115
ord5303

msvcrt

_initterm
__CxxFrameHandler
wcslen
_purecall
wcscpy
_wcsicmp
swprintf
_wtoi
wcsncpy
wcstok
wcsrchr
_wcsnicmp
wcsncmp
wcscat
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
free
_CxxThrowException
malloc
_adjust_fdiv
??1type_info@@UAE@XZ

kernel32

CreateFileW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
CloseHandle
GetPrivateProfileIntW
GetPrivateProfileStringW
GetModuleHandleW
WritePrivateProfileStringW
FlushInstructionCache
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryW
GetModuleFileNameW
CreateDirectoryW
GetPrivateProfileSectionW
FindClose
FindNextFileW
FindFirstFileW
FreeLibrary
LocalFree
LocalAlloc
GetProcAddress
InterlockedExchange
RaiseException
GetLastError
GetCurrentProcess
LoadLibraryA

user32

SetParent
DeleteMenu
CreateMenu
AppendMenuW
CheckMenuItem
DestroyMenu
ClientToScreen
wsprintfW
SetTimer
KillTimer
TrackMouseEvent
PtInRect
SetWindowLongW
InvalidateRect
IsWindowVisible
GetDC
GetSysColor
GetClassNameW
ShowWindow
DestroyWindow
SetWindowTextW
IsWindow
TranslateMessage
DispatchMessageW
LoadMenuW
GetSubMenu
ModifyMenuW
GetClassInfoW
EnableWindow
GetParent
FindWindowExW
GetWindowRect
GetClientRect
EnumWindows
GetFocus
PostMessageW
CallWindowProcW
RegisterWindowMessageW
DestroyIcon
LoadImageW
GetAncestor
SendMessageW
ReleaseDC

advapi32

RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW

shell32

SHGetDesktopFolder
SHGetPathFromIDListW
ShellExecuteW
ShellExecuteExW
SHGetSpecialFolderPathW
SHFileOperationW

ole32

CoTaskMemFree
CoCreateInstance

oleaut32

SysFreeString
VariantInit
SysAllocString
VariantChangeType
DispCallFunc
VariantClear
LoadRegTypeLi
SysStringLen

atl

ord57
ord18
ord32
ord21
ord16
ord23
ord58
ord30
ord10
ord54
ord11
ord15

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/StylerTB.ini
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/search.ini
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/SearchEdit.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/addressIE.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/back.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/backIE.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/customize.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/details.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/favorites.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/forward.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/forwardIE.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/home.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/icon.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/list.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/optie.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/option.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/refresh.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/stop.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/toolbar.ini
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/up.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/zoom+.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/TB/skins/Styler's/TX 1.0_春春版/zoom-.png
.png
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/UNRAR/license.txt
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/UNRAR/unrar.dll
.dll windows:4 windows x86 arch:x86

244d2f9772f4886a651db44514a2a29b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
SetFileSecurityA
SetFileSecurityW

kernel32

CloseHandle
CompareStringA
CompareStringW
CreateDirectoryA
CreateDirectoryW
CreateFileA
CreateFileW
DeleteFileA
DeleteFileW
DeviceIoControl
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetCPInfo
GetCurrentProcess
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileAttributesW
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
IsDBCSLeadByte
LCMapStringA
LoadLibraryA
LocalFileTimeToFileTime
MoveFileA
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetHandleCount
Sleep
SystemTimeToFileTime
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile

user32

CharLowerA
CharLowerW
CharToOemA
CharToOemBuffA
CharUpperA
CharUpperW
EnumThreadWindows
MessageBoxA
OemToCharA
OemToCharBuffA
wsprintfA

Exports

Exports

RARCloseArchive
RARGetDllVersion
RAROpenArchive
RAROpenArchiveEx
RARProcessFile
RARProcessFileW
RARReadHeader
RARReadHeaderEx
RARSetCallback
RARSetChangeVolProc
RARSetPassword
RARSetProcessDataProc
___CPPdebugHook

Sections

.text
Size: 130KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/工具栏样式(Styler)/隐藏菜单.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 224KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 109KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
桌面天下系统美化包 TX1.0 （春春版）/文字使用教程/1、先要看的东西.txt
桌面天下系统美化包 TX1.0 （春春版）/文字使用教程/2、壁纸使用教程.txt
桌面天下系统美化包 TX1.0 （春春版）/文字使用教程/3、主题使用教程.txt
桌面天下系统美化包 TX1.0 （春春版）/文字使用教程/4、图标使用教程.txt
桌面天下系统美化包 TX1.0 （春春版）/文字使用教程/5、登陆界面使用教程.txt
桌面天下系统美化包 TX1.0 （春春版）/文字使用教程/5、鼠标指针替换方法.txt
桌面天下系统美化包 TX1.0 （春春版）/文字使用教程/6、工具栏样式教程.txt
桌面天下系统美化包 TX1.0 （春春版）/文字使用教程/7、字体使用说明.txt
桌面天下系统美化包 TX1.0 （春春版）/文字使用教程/8、其他美化工具.txt
桌面天下系统美化包 TX1.0 （春春版）/新云软件.url
.url
桌面天下系统美化包 TX1.0 （春春版）/登陆界面(Logon)/1、先运行一下这个.reg
桌面天下系统美化包 TX1.0 （春春版）/登陆界面(Logon)/2、登陆界面替换器.exe
.exe windows:4 windows x86 arch:x86

02dcc622fd188f4eddaeaa7bd9c18bc1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarSub
__vbaStrI2
_CIcos
_adj_fptan
__vbaStrI4
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
ord516
_adj_fprem1
__vbaRecAnsiToUni
__vbaStrCat
ord660
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryVar
__vbaAryDestruct
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
_CIsin
ord709
ord631
ord632
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
ord529
__vbaVarTstEq
__vbaAryConstruct2
__vbaObjVar
__vbaI2I4
DllFunctionCall
ord670
_adj_fpatan
__vbaFixstrConstruct
__vbaRecUniToAnsi
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
__vbaPrintFile
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
ord607
__vbaI2Str
ord608
ord530
ord716
__vbaFPException
ord717
__vbaInStrVar
ord533
__vbaStrVarVal
__vbaVarCat
ord536
ord537
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
ord573
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaVarSetVar
__vbaI4Var
__vbaVarAdd
__vbaLateMemCall
__vbaVarDup
__vbaStrToAnsi
ord616
__vbaVarLateMemCallLd
__vbaRecDestructAnsi
__vbaLateMemCallLd
_CIatan
__vbaAryCopy
__vbaStrMove
ord650
_allmul
__vbaLenVarB
_CItan
ord546
_CIexp
__vbaFreeObj
__vbaFreeStr

Sections

.text
Size: 484KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/登陆界面(Logon)/Theme/TX 1.0_春春版.exe
.exe windows:5 windows x86 arch:x86

26b589cfdb216ea1e72ef542e2eb607d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

logonui.pdb

Imports

msvcrt

_onexit
??3@YAXPAX@Z
swprintf
_wcsicmp
_purecall
wcscpy
qsort
_c_exit
_exit
_iob
fwrite
strtol
_wtoi
_itow
_ftol
memmove
_snwprintf
wcsncpy
wcscmp
wcslen
_controlfp
atoi
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter

advapi32

RegOpenKeyExA
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenThreadToken
OpenProcessToken
ConvertSidToStringSidW
RegLoadKeyW
RegUnLoadKeyW
GetUserNameW
RegQueryValueExA
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
LookupAccountNameW
GetSidSubAuthorityCount
GetSidSubAuthority

kernel32

GetModuleHandleA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LoadLibraryA
InterlockedCompareExchange
DeleteAtom
AddAtomW
lstrcatW
TlsGetValue
HeapFree
HeapReAlloc
HeapAlloc
MulDiv
GetProcAddress
LoadLibraryW
InterlockedDecrement
InterlockedIncrement
HeapCreate
TlsAlloc
TlsFree
HeapDestroy
TlsSetValue
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
GetLocaleInfoW
GetModuleHandleW
lstrlenW
lstrcpynW
lstrcmpiW
SetUnhandledExceptionFilter
ExitProcess
LocalAlloc
lstrcpyW
LocalFree
GetStartupInfoA
DelayLoadFailureHook
GetLastError
GetComputerNameW
LocalSize
SetLastError
ExpandEnvironmentStringsW
IsBadWritePtr
IsBadStringPtrW
GetCurrentThread
CloseHandle
InterlockedExchange
GetVersionExA
GetAtomNameW
SetProcessWorkingSetSize
GetUserDefaultUILanguage
MultiByteToWideChar
FindAtomW
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringW
SizeofResource
LockResource
LoadResource
FindResourceW

gdi32

CreateCompatibleDC
CreateFontIndirectW
GdiFlush
CreateSolidBrush
GetDeviceCaps
CreateBitmap
SelectObject
SetBkColor
SetTextColor
ExtTextOutW
PatBlt
DeleteObject
DeleteDC
CreateRectRgn
OffsetRgn
ExtTextOutA
LPtoDP
StretchDIBits
GetLayout
SetLayout
CreateDIBPatternBrushPt
CreateDIBSection
GetDIBits
GetBrushOrgEx
SetBrushOrgEx
CreateHalftonePalette
SelectPalette
RealizePalette
PlayEnhMetaFile
SetStretchBltMode
CreatePatternBrush
BitBlt
SetBkMode
SetTextAlign
GetTextExtentPoint32W
DeleteEnhMetaFile
GetObjectA
StretchBlt
GetObjectW
GetPixel
GetStockObject
CreateCompatibleBitmap

user32

CreateWindowExW
ShowWindow
SetForegroundWindow
EnableWindow
DestroyWindow
UnregisterClassW
GetSystemMetrics
SetWindowLongW
MonitorFromPoint
GetMonitorInfoW
SetWindowPos
wsprintfW
LoadStringW
PostMessageW
CopyIcon
GetClientRect
MessageBoxW
FindWindowW
GetKeyboardLayout
DestroyIcon
GetKeyboardLayoutList
SystemParametersInfoW
GetDC
ReleaseDC
GetSysColor
DrawTextW
GetProcessDefaultLayout
CreateIconIndirect
GetWindowRect
SendMessageW
KillTimer
SetTimer
LoadCursorW
RegisterClassExW
GetWindowLongW
DefWindowProcW
BeginPaint
FillRect
EndPaint
CharNextA
CharNextW
GetWindowLongA
SetRect
GetIconInfo
LoadImageW
EqualRect
DrawIconEx
DrawFocusRect
IntersectRect
DrawFrameControl
CopyRect
SetRectEmpty
AdjustWindowRectEx
GetParent
SetCursor
ScreenToClient
GetMessagePos
InvalidateRect
DefWindowProcA
GetClassInfoExW
GetSysColorBrush
SendMessageA
GetWindowTextW
GetWindowTextLengthW
DispatchMessageW
TranslateMessage
GetMessageW
PostQuitMessage
SetWindowLongA
SetFocus
SystemParametersInfoA
NotifyWinEvent
SetParent
CallWindowProcW
UpdateWindow
SetWindowRgn
SetWindowTextW
MapWindowPoints
GetFocus

comctl32

ord413
ord412
InitCommonControlsEx
ord355
ord17
ord410

shell32

ord752

ntdll

NtQuerySystemInformation
RtlUnhandledExceptionFilter

netapi32

NetApiBufferFree
DsGetDcNameW
NetQueryDisplayInformation

ole32

CoUninitialize
CoInitialize
CoDisconnectObject
CoInitializeEx
CoCreateInstance

oleaut32

VariantInit
VariantClear
SysAllocString
SysFreeString

rpcrt4

RpcBindingFromStringBindingW
NdrClientCall2
RpcBindingFree
RpcStringFreeW
RpcEpResolveBinding
RpcStringBindingComposeW

duser

UtilDrawBlendRect
DUserRegisterStub
DeleteHandle
FindGadgetFromPoint
LookupGadgetTicket
SetGadgetRootInfo
GetStdColorBrushI
GetStdColorI
FindStdColor
GetMessageExW
InitGadgets
SetGadgetBufferInfo
GetGadgetTicket
MapGadgetPoints
CreateAction
GetGadgetRgn
GetGadgetAnimation
BuildInterpolation
BuildAnimation
GetGadgetSize
GetGadgetRect
CreateGadget
DUserPostEvent
ForwardGadgetMessage
AttachWndProcW
InvalidateGadget
SetGadgetRect
SetGadgetParent
SetGadgetFocus
GetGadgetFocus
SetGadgetMessageFilter
SetGadgetStyle
DUserSendEvent

msimg32

GradientFill
AlphaBlend
TransparentBlt

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
桌面天下系统美化包 TX1.0 （春春版）/登陆界面(Logon)/logonxp2exe.ini
桌面天下系统美化包 TX1.0 （春春版）/登陆界面(Logon)/登陆界面下载站.url
桌面天下系统美化包 TX1.0 （春春版）/视频教程下载地址.txt
桌面天下系统美化包 TX1.0 （春春版）/鼠标(Cursors)/TX 1.0_春春版/Alternate.cur
桌面天下系统美化包 TX1.0 （春春版）/鼠标(Cursors)/TX 1.0_春春版/Busy.ani
桌面天下系统美化包 TX1.0 （春春版）/鼠标(Cursors)/TX 1.0_春春版/Diagonal Resize 1.cur
桌面天下系统美化包 TX1.0 （春春版）/鼠标(Cursors)/TX 1.0_春春版/Diagonal Resize 2.cur
桌面天下系统美化包 TX1.0 （春春版）/鼠标(Cursors)/TX 1.0_春春版/Handwriting.cur
桌面天下系统美化包 TX1.0 （春春版）/鼠标(Cursors)/TX 1.0_春春版/Help.cur
桌面天下系统美化包 TX1.0 （春春版）/鼠标(Cursors)/TX 1.0_春春版/Horizontal Resize.cur
桌面天下系统美化包 TX1.0 （春春版）/鼠标(Cursors)/TX 1.0_春春版/Link.cur
桌面天下系统美化包 TX1.0 （春春版）/鼠标(Cursors)/TX 1.0_春春版/Move.cur
桌面天下系统美化包 TX1.0 （春春版）/鼠标(Cursors)/TX 1.0_春春版/Normal.cur
桌面天下系统美化包 TX1.0 （春春版）/鼠标(Cursors)/TX 1.0_春春版/Precision.cur
桌面天下系统美化包 TX1.0 （春春版）/鼠标(Cursors)/TX 1.0_春春版/Text.cur
桌面天下系统美化包 TX1.0 （春春版）/鼠标(Cursors)/TX 1.0_春春版/Unavailable.cur
桌面天下系统美化包 TX1.0 （春春版）/鼠标(Cursors)/TX 1.0_春春版/Vertical Resize.cur
桌面天下系统美化包 TX1.0 （春春版）/鼠标(Cursors)/TX 1.0_春春版/Working.ani
桌面天下系统美化包 TX1.0 （春春版）/鼠标(Cursors)/TX 1.0_春春版/安装文件.inf

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.rsrc Size: 3.5MB - Virtual size: 3.5MB

5c54715227e960c5019e7a45d4b9d02a

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 244KB - Virtual size: 244KB

.reloc Size: 4KB - Virtual size: 3KB

5c54715227e960c5019e7a45d4b9d02a

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 248KB - Virtual size: 244KB

.reloc Size: 4KB - Virtual size: 3KB

5c54715227e960c5019e7a45d4b9d02a

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 244KB - Virtual size: 240KB

.reloc Size: 4KB - Virtual size: 3KB

1198ed2b9f432372fcf2b2048bf614c7

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 17KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 12KB

.HOOKDAT Size: 4KB - Virtual size: 88B

.rsrc Size: 4KB - Virtual size: 1024B

.reloc Size: 4KB - Virtual size: 3KB

54374a66802a03b20cdae3e8afc167bf

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comctl32

comdlg32

Sections

.text Size: 64KB - Virtual size: 60KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 16KB - Virtual size: 65KB

.rsrc Size: 76KB - Virtual size: 76KB

78cfe009649ba58383f2c6bde8413239

Headers

File Characteristics

Imports

mfc42u

msvcrt

kernel32

user32

.rsrc
Size: 3.5MB - Virtual size: 3.5MB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 244KB - Virtual size: 244KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 248KB - Virtual size: 244KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 244KB - Virtual size: 240KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 12KB

.HOOKDAT
Size: 4KB - Virtual size: 88B

.rsrc
Size: 4KB - Virtual size: 1024B

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 64KB - Virtual size: 60KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 16KB - Virtual size: 65KB

.rsrc
Size: 76KB - Virtual size: 76KB

.text
Size: 168KB - Virtual size: 164KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 16KB - Virtual size: 18KB

.rsrc
Size: 168KB - Virtual size: 164KB

01
Certificate

0a
Certificate

21:d2:bd
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

.text
Size: 436KB - Virtual size: 433KB

.rdata
Size: 80KB - Virtual size: 77KB

.data
Size: 120KB - Virtual size: 122KB

.rsrc
Size: 312KB - Virtual size: 310KB

.text
Size: 240KB - Virtual size: 236KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 16KB - Virtual size: 332KB

.rsrc
Size: 4KB - Virtual size: 952B

.reloc
Size: 16KB - Virtual size: 13KB

01
Certificate

0a
Certificate