FindProc
Overview
overview
7Static
static
71762b02d55...18.exe
windows7-x64
71762b02d55...18.exe
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...oc.dll
windows7-x64
1$PLUGINSDI...oc.dll
windows10-2004-x64
7$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows7-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows7-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDIR/xml.dll
windows7-x64
3$PLUGINSDIR/xml.dll
windows10-2004-x64
3content/aboutTabs.htm
windows7-x64
1content/aboutTabs.htm
windows10-2004-x64
1content/ctoolbar.js
windows7-x64
3content/ctoolbar.js
windows10-2004-x64
3$R5/compon...rch.js
windows7-x64
3$R5/compon...rch.js
windows10-2004-x64
3$R5/compon...bar.js
windows7-x64
3$R5/compon...bar.js
windows10-2004-x64
3$R5/compon...rt.dll
windows7-x64
1$R5/compon...rt.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
1762b02d557e5419161437498c4f0c99_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1762b02d557e5419161437498c4f0c99_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FindProcDLL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/KillProc.dll
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/KillProc.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240611-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/UAC.dll
Resource
win7-20240611-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/ZipDLL.dll
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/ZipDLL.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/nsExec.dll
Resource
win7-20240611-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/xml.dll
Resource
win7-20240611-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/xml.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
content/aboutTabs.htm
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
content/aboutTabs.htm
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
content/ctoolbar.js
Resource
win7-20240220-en
Behavioral task
behavioral26
Sample
content/ctoolbar.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
$R5/components/ConduitAutoCompleteSearch.js
Resource
win7-20240611-en
Behavioral task
behavioral28
Sample
$R5/components/ConduitAutoCompleteSearch.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
$R5/components/ConduitToolbar.js
Resource
win7-20240508-en
Behavioral task
behavioral30
Sample
$R5/components/ConduitToolbar.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
$R5/components/FFExternalAlert.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
$R5/components/FFExternalAlert.dll
Resource
win10v2004-20240508-en
General
-
Target
1762b02d557e5419161437498c4f0c99_JaffaCakes118
-
Size
3.3MB
-
MD5
1762b02d557e5419161437498c4f0c99
-
SHA1
af919dfd4236b24400510a1f56ab74ddd036dc35
-
SHA256
fb7bf0c4a9c019d09f23c4bb949656dda12157fba6197853aa68e146981838b5
-
SHA512
39645eee43814f6378861141dcf965c1cf6e1e91482d36e4cc9507e9d22f45635526bd1491b52813f2fce054ac917da4d905b7b1969c50e94b74fd61b79c2069
-
SSDEEP
98304:Xw3iMK/ifWnlps9zwyBubwbrYU1wob45sh22QtUYtM/wnoP5Q:XwSls9zwyw9Up0EJYtMYnaQ
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack001/$PLUGINSDIR/KillProc.dll acprotect -
resource yara_rule static1/unpack001/$PLUGINSDIR/KillProc.dll upx -
Unsigned PE 14 IoCs
Checks for missing Authenticode signature.
resource 1762b02d557e5419161437498c4f0c99_JaffaCakes118 unpack001/$PLUGINSDIR/FindProcDLL.dll unpack001/$PLUGINSDIR/InstallOptions.dll unpack001/$PLUGINSDIR/KillProc.dll unpack002/out.upx unpack001/$PLUGINSDIR/LangDLL.dll unpack001/$PLUGINSDIR/NSISdl.dll unpack001/$PLUGINSDIR/System.dll unpack001/$PLUGINSDIR/UAC.dll unpack001/$PLUGINSDIR/ZipDLL.dll unpack001/$PLUGINSDIR/nsExec.dll unpack001/$PLUGINSDIR/xml.dll unpack001/$R5/components/FFExternalAlert.dll unpack001/$R5/components/RadioWMPCore.dll -
NSIS installer 2 IoCs
resource yara_rule sample nsis_installer_1 sample nsis_installer_2
Files
-
1762b02d557e5419161437498c4f0c99_JaffaCakes118.exe windows:4 windows x86 arch:x86
7fa974366048f9c551ef45714595665e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/FindProcDLL.dll.dll windows:4 windows x86 arch:x86
c480ee4d2a64d4a16edee43fdfe35079
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleA
OpenProcess
LoadLibraryA
CloseHandle
GetProcAddress
GetVersionExA
GlobalFree
lstrcpyA
HeapCreate
VirtualFree
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
FreeLibrary
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
DisableThreadLibraryCalls
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetACP
GetOEMCP
WriteFile
VirtualAlloc
RtlUnwind
GetStringTypeA
GetStringTypeW
GetCPInfo
user32
wsprintfA
Exports
Exports
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/InstallOptions.dll.dll windows:4 windows x86 arch:x86
b1cd0d78f652ce5fc63f0879371af012
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc
user32
MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect
gdi32
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
shell32
SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
ole32
CoTaskMemFree
Exports
Exports
dialog
initDialog
show
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/KillProc.dll.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
FindProcesses
KillProcesses
Sections
UPX0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 101B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/LangDLL.dll.dll windows:4 windows x86 arch:x86
9b6b6a7858e17fb0b17e1c1428330343
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalFree
GetACP
lstrlenA
lstrcmpA
lstrcpynA
GetModuleHandleA
MulDiv
lstrcpyA
GlobalAlloc
user32
SetWindowTextA
SetDlgItemTextA
SendDlgItemMessageA
EndDialog
DialogBoxParamA
LoadIconA
SendMessageA
ShowWindow
GetDC
gdi32
CreateFontIndirectA
GetDeviceCaps
DeleteObject
Exports
Exports
LangDialog
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 697B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/NSISdl.dll.dll windows:4 windows x86 arch:x86
9cce555dd3ff1b6c7dc92d64c794c51a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WaitForSingleObject
lstrcpynA
lstrlenA
lstrcatA
GlobalAlloc
GlobalFree
CloseHandle
GetTickCount
DeleteFileA
Sleep
WriteFile
CreateFileA
lstrcmpiA
lstrcpyA
MulDiv
CreateThread
user32
CharPrevA
SetWindowLongA
RegisterWindowMessageA
CallWindowProcA
DestroyWindow
EnableWindow
GetWindowLongA
CreateWindowExA
GetWindowRect
GetClientRect
ShowWindow
IsWindowVisible
GetFocus
GetDlgItem
FindWindowExA
SetWindowTextA
SendMessageA
wsprintfA
SetDlgItemTextA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ws2_32
gethostbyname
inet_addr
ioctlsocket
htons
socket
closesocket
shutdown
connect
__WSAFDIsSet
select
recv
WSAGetLastError
send
WSACleanup
WSAStartup
Exports
Exports
download
download_quiet
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 836B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/System.dll.dll windows:4 windows x86 arch:x86
2017f2acbdaa42ab3e4adeb8b4c37e7b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect
user32
wsprintfA
ole32
StringFromGUID2
CLSIDFromString
Exports
Exports
Alloc
Call
Copy
Free
Get
Int64Op
Store
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 520B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/UAC.dll.dll windows:4 windows x86 arch:x86
ab0d6b61eda9d1dc039b5837f731d965
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
GlobalAlloc
lstrlenA
GetVersionExA
lstrcmpiA
GetCurrentThreadId
LoadLibraryA
FreeLibrary
GetProcAddress
GetLastError
GetExitCodeProcess
WaitForSingleObject
DuplicateHandle
Sleep
GetCurrentProcessId
CreateThread
GetCommandLineA
OpenProcess
MultiByteToWideChar
FormatMessageA
LocalFree
GlobalFree
CloseHandle
SetLastError
GetModuleFileNameA
GetPrivateProfileIntA
GetPrivateProfileStringA
lstrcpynA
GetModuleHandleA
user32
SendMessageW
DialogBoxParamA
CharNextA
UnhookWindowsHookEx
CallNextHookEx
GetClassNameA
SetWindowsHookExA
SendMessageTimeoutA
WaitForInputIdle
DefWindowProcA
PostMessageA
GetLastActivePopup
PostQuitMessage
SetForegroundWindow
DispatchMessageA
GetMessageA
CreateWindowExA
RegisterClassA
UnregisterClassA
GetWindowTextA
TranslateMessage
IsDialogMessageA
PeekMessageA
MsgWaitForMultipleObjects
IsWindow
GetWindowThreadProcessId
MessageBoxA
SetWindowLongA
LoadImageA
DestroyWindow
GetWindowLongA
EnableWindow
ShowWindow
SetWindowTextA
wsprintfA
GetDlgItem
SendMessageA
LoadStringA
EndDialog
advapi32
RegCloseKey
QueryServiceStatus
OpenServiceA
CloseServiceHandle
OpenSCManagerA
OpenProcessToken
RegQueryValueExA
RegOpenKeyExA
shell32
ShellExecuteExA
ole32
CoInitialize
CoUninitialize
Exports
Exports
Exec
ExecCodeSegment
ExecWait
GetElevationType
GetOuterHwnd
GetShellFolderPath
IsAdmin
RunElevated
ShellExec
ShellExecWait
StackPush
SupportsUAC
Unload
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/ZipDLL.dll.dll windows:4 windows x86 arch:x86
f10b94e3705eae25c7617ba56a648b77
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcmpiA
GlobalFree
lstrcpyA
lstrcpynA
GlobalAlloc
GetLocaleInfoW
LoadLibraryA
IsBadCodePtr
LocalFree
FormatMessageA
GetLastError
MapViewOfFile
CreateFileMappingA
CloseHandle
UnmapViewOfFile
GetDiskFreeSpaceA
CreateFileA
GetCurrentDirectoryA
SetFileAttributesA
GetFileAttributesA
GetDriveTypeA
SetVolumeLabelA
DeleteFileA
MoveFileA
CreateDirectoryA
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetEnvironmentVariableA
SetCurrentDirectoryA
GetFileType
FlushFileBuffers
SetStdHandle
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
SetEndOfFile
ReadFile
SetFilePointer
GetACP
GetOEMCP
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetProcAddress
GetStringTypeA
GetStringTypeW
IsBadReadPtr
user32
SendMessageA
GetDlgItem
SetWindowTextA
FindWindowExA
OemToCharBuffA
CharToOemBuffA
Exports
Exports
extractall
extractfile
Sections
.text Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/ioSpecial.ini
-
$PLUGINSDIR/modern-wizard.bmp
-
$PLUGINSDIR/nsExec.dll.dll windows:4 windows x86 arch:x86
d83f71e61ee459ee63ca3e829966a9dc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetExitCodeProcess
WaitForSingleObject
Sleep
TerminateProcess
lstrcpyA
lstrcpynA
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
PeekNamedPipe
GetTickCount
CreateProcessA
GetStartupInfoA
CreatePipe
GetVersionExA
GetModuleHandleA
DeleteFileA
lstrcmpiA
lstrlenA
lstrcatA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
CopyFileA
GetTempFileNameA
GlobalFree
GlobalAlloc
GetModuleFileNameA
ExitProcess
GetCommandLineA
GetProcAddress
GlobalLock
GetCurrentProcess
user32
SendMessageA
OemToCharBuffA
CharNextA
wsprintfA
CharPrevA
FindWindowExA
advapi32
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
Exports
Exports
Exec
ExecToLog
ExecToStack
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 410B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/pantallatoolbar
-
$PLUGINSDIR/xml.dll.dll windows:4 windows x86 arch:x86
b5ed5b3a951d4443ce56e5453702d536
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GlobalAlloc
GlobalFree
lstrcpynA
lstrcmpA
lstrcmpiA
lstrcpyA
RtlUnwind
GetModuleFileNameA
RaiseException
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
HeapReAlloc
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
HeapSize
GetLastError
LoadLibraryA
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
CloseHandle
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
FlushFileBuffers
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateFileA
VirtualProtect
GetSystemInfo
VirtualQuery
SetStdHandle
GetLocaleInfoA
InterlockedExchange
SetEndOfFile
Exports
Exports
_CloneNode
_Coordinate
_CreateNode
_CreateText
_CurrentAttribute
_DeclarationEncoding
_DeclarationStandalone
_DeclarationVersion
_ElementPath
_FindCloseElement
_FindNextElement
_FirstAttribute
_FirstChild
_FirstChildElement
_FreeNode
_GetAttribute
_GetNodeValue
_GetText
_GotoHandle
_GotoPath
_InsertAfterNode
_InsertBeforeNode
_InsertEndChild
_IsCDATA
_LastAttribute
_LastChild
_LoadFile
_NextAttribute
_NextSibling
_NextSiblingElement
_NoChildren
_NodeHandle
_NodeType
_Parent
_PreviousAttribute
_PreviousSibling
_RemoveAllChild
_RemoveAttribute
_RemoveNode
_ReplaceNode
_RootElement
_SaveFile
_SetAttribute
_SetAttributeName
_SetAttributeValue
_SetCDATA
_SetCondenseWhiteSpace
_SetEncoding
_SetNodeValue
_SetText
_Unload
_XPathAttribute
_XPathNode
_XPathString
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$R5/META-INF/manifest.mf
-
$R5/META-INF/zigbert.rsa
-
$R5/META-INF/zigbert.sf
-
$R5/chrome.manifest
-
$R5/chrome/toggleen.jar.zip
-
content/ScrollbarBindings.xml.xml
-
content/about.xul.xml
-
content/aboutTabs.htm.html
-
content/alert-bindings.xml.xml
-
content/alertAbout.xul.xml
-
content/alertMain.xul.xml
-
content/alertPreview.xul.xml
-
content/alertSettings.xul.xml
-
content/autocomplete-menulist.xml.js .xml polyglot
-
content/chat-menu-button.xml.js .xml polyglot
-
content/chevronDialog.xul.js .xml polyglot
-
content/contents.rdf.xml
-
content/ctoolbar.js.js
-
content/enAddEdit.xul.js .xml polyglot
-
content/enConfirm.xul.js .xml polyglot
-
content/enSettings.xul.js .xml polyglot
-
content/enTestAccount.xul.xml
-
content/fbSettings.xul.xml
-
content/feed-bindings.xml.js .xml polyglot
-
content/gadgets-bindings.xml.js .xml polyglot
-
content/manageMenu.xul.xml
-
content/multicommunity.xul.xml
-
content/multicommunity_detected.xul.js .xml polyglot
-
content/multicommunity_download.xul.xml
-
content/myStuffError.xul.xml
-
content/oldapi/weather_oldapi.xul.xml
-
content/options.xul.xml
-
content/popup.xul.js .xml polyglot
-
content/popup_chat.xul.js .xml polyglot
-
content/radio.xml.xml
-
content/radio_addEdit.xul.js .xml polyglot
-
content/radio_menu.xul.xml
-
content/radio_search.xul.xml
-
content/radio_volume.xul.xml
-
content/toolbarOverlay.xul.js .xml polyglot
-
content/toolbarbutton-mirrored-icon.xml.js .xml polyglot
-
content/truste.xul.xml
-
content/twitter-bindings.xml.js .xml polyglot
-
content/uninstall.xul.js .xml polyglot
-
content/wait.xul.xml
-
content/weather.xul.xml
-
content/weatherRTL.xul.js .xml polyglot
-
content/welcome.xul.xml
-
content/welcomeMacLinux.xul.xml
-
content/welcomeRTL.xul.xml
-
skin/AOL_load.gif.gif
-
skin/about_bg.png.png
-
skin/about_icon.png.png
-
skin/alert/AboutTitleBarImage.gif.gif
-
skin/alert/BottomStrip.gif.gif
-
skin/alert/CloseButtonAll.gif.gif
-
skin/alert/NextAll.gif.gif
-
skin/alert/OptionsTitleBarImage.gif.gif
-
skin/alert/PrevAll.gif.gif
-
skin/alert/SettingsButtonAll.gif.gif
-
skin/alert/TopStrip.gif.gif
-
skin/alert/TrayIcon.ico
-
skin/alert/TrayIconAnimated.gif.gif
-
skin/alert/TrayIconBlocked.ico
-
skin/alert/about.css
-
skin/alert/aboutAll.gif.gif
-
skin/alert/alert.css
-
skin/alert/btn.gif.gif
-
skin/alert/btn_dn.gif.gif
-
skin/alert/btn_hover.gif.gif
-
skin/alert/dot.gif.gif
-
skin/alert/faqAll.gif.gif
-
skin/alert/feedbackAll.gif.gif
-
skin/alert/preview.css
-
skin/alert/privacyAll.gif.gif
-
skin/alert/settings.css
-
skin/alert/viewRecentTitleBarImage.gif.gif
-
skin/blank.png.png
-
skin/block.png.png
-
skin/chat/HasUsersOnline.gif.gif
-
skin/chevron.png.png
-
skin/chevron_rtl.png.png
-
skin/contents.rdf.xml
-
skin/ebdialogstyle.css
-
skin/ebtoolbarbuttonstyleLinux.css
-
skin/ebtoolbarbuttonstyleMac.css
-
skin/ebtoolbarbuttonstyleWinXP.css
-
skin/ebtoolbarstyle.css
-
skin/email.png.png
-
skin/emailnew.png.png
-
skin/emailnewsmall.png.png
-
skin/enSound.wav
-
skin/expand.png.png
-
skin/facebook/component_icon_big.png.png
-
skin/facebook/facebook.css
-
skin/facebook/facebook_logo.png.png
-
skin/facebook/faq.png.png
-
skin/facebook/faq_over.png.png
-
skin/facebook/privacy.png.png
-
skin/facebook/privacy_over.png.png
-
skin/facebook/separator_line.jpg.jpg
-
skin/feed.css
-
skin/feedRTL_bg.png.png
-
skin/feed_bg.png.png
-
skin/feed_comment_all.png.png
-
skin/feed_delete_all.png.png
-
skin/feed_env_read.png.png
-
skin/feed_env_unread.png.png
-
skin/feed_read_all.png.png
-
skin/feed_refresh_all.png.png
-
skin/feed_unread_all.png.png
-
skin/floatingToolbar.css
-
skin/gadgets/MyStuff.png.png
-
skin/gadgets/MyStuffBlinkAndHighlight.gif.gif
-
skin/gadgets/MyStuffHighlight.png.png
-
skin/gadgets/chat/Close.gif.gif
-
skin/gadgets/chat/CloseHover.gif.gif
-
skin/gadgets/chat/ClosePressed.gif.gif
-
skin/gadgets/chat/EditDown.gif.gif
-
skin/gadgets/chat/EditDownHover.gif.gif
-
skin/gadgets/chat/EditDownPressed.gif.gif
-
skin/gadgets/chat/EditUp.gif.gif
-
skin/gadgets/chat/EditUpHover.gif.gif
-
skin/gadgets/chat/EditUpPressed.gif.gif
-
skin/gadgets/chat/GadgetWindow.css
-
skin/gadgets/chat/Minimized.gif.gif
-
skin/gadgets/chat/MinimizedHover.gif.gif
-
skin/gadgets/chat/MinimizedPressed.gif.gif
-
skin/gadgets/chat/WindowTop.gif.gif
-
skin/gadgets/gadget/Close.gif.gif
-
skin/gadgets/gadget/CloseHover.gif.gif
-
skin/gadgets/gadget/ClosePressed.gif.gif
-
skin/gadgets/gadget/GadgetWindow.css
-
skin/gadgets/gadget/Minimize.png.png
-
skin/gadgets/gadget/MinimizeHover.png.png
-
skin/gadgets/gadget/MinimizePressed.png.png
-
skin/gadgets/gadget/WindowTop.gif.gif
-
skin/gadgets/gadget/thumb/bg-shadow-bottom-left.png.png
-
skin/gadgets/gadget/thumb/bg-shadow-bottom-right.png.png
-
skin/gadgets/gadget/thumb/bg-shadow-bottom.png.png
-
skin/gadgets/gadget/thumb/bg-shadow-left.png.png
-
skin/gadgets/gadget/thumb/bg-shadow-right.png.png
-
skin/gadgets/gadget/thumb/bg-shadow-top-left.png.png
-
skin/gadgets/gadget/thumb/bg-shadow-top-right.png.png
-
skin/gadgets/gadget/thumb/bg-shadow-top.png.png
-
skin/gadgets/gadget/thumb/bg.png.png
-
skin/gadgets/gadget/thumb/close.png.png
-
skin/gadgets/gadget/thumb/close_hover.png.png
-
skin/gadgets/gadget/thumb/close_pressed.png.png
-
skin/gadgets/gadget/thumb/hovered-bg.png.png
-
skin/gadgets/gadget/thumb/minimized.css
-
skin/go_btn.gif.gif
-
skin/go_btnRTL.gif.gif
-
skin/highlighter.png.png
-
skin/highlighterDisabled.png.png
-
skin/highlighterSearchTerm.png.png
-
skin/highlighter_chevron.png.png
-
skin/loading.gif.gif
-
skin/manage.gif.gif
-
skin/mc_add_active.png.png
-
skin/mc_add_candidate.png.png
-
skin/mc_add_flashing.gif.gif
-
skin/mc_add_inactive.png.png
-
skin/mc_community.png.png
-
skin/mc_community_dialog.png.png
-
skin/mc_community_dialog_over.png.png
-
skin/mc_community_selected.png.png
-
skin/mc_community_starred.png.png
-
skin/mc_options.png.png
-
skin/mc_search.png.png
-
skin/mc_tooltip_addTo.gif.gif
-
skin/mc_tooltip_addTo_dn.gif.gif
-
skin/mc_tooltip_addTo_over.gif.gif
-
skin/mc_tooltip_close.gif.gif
-
skin/mc_tooltip_close_dn.gif.gif
-
skin/mc_tooltip_close_over.gif.gif
-
skin/mc_tooltip_next.gif.gif
-
skin/mc_tooltip_next_dis.gif.gif
-
skin/mc_tooltip_next_dn.gif.gif
-
skin/mc_tooltip_next_over.gif.gif
-
skin/mc_tooltip_prev.gif.gif
-
skin/mc_tooltip_prev_dis.gif.gif
-
skin/mc_tooltip_prev_dn.gif.gif
-
skin/mc_tooltip_prev_over.gif.gif
-
skin/mc_tooltip_separator.gif.gif
-
skin/minibrowser.png.png
-
skin/multicommunityDialog_bg.png.png
-
skin/myGadgets_detect_x.png.png
-
skin/myGadgets_detect_x_dn.png.png
-
skin/myGadgets_detect_x_hover.png.png
-
skin/myStuff/add.png.png
-
skin/myStuff/myStuff.css
-
skin/myStuff/options.png.png
-
skin/radio/Podcast.png.png
-
skin/radio/RadioCombo.gif.gif
-
skin/radio/RadioEqualizerLoading.gif.gif
-
skin/radio/RadioEqualizerPause.gif.gif
-
skin/radio/RadioEqualizerPlay.gif.gif
-
skin/radio/RadioEqualizerReal.ico
-
skin/radio/RadioEqualizerSilent.gif.gif
-
skin/radio/RadioError.gif.gif
-
skin/radio/RadioErrow.ico
-
skin/radio/RadioErrowRTL.ico
-
skin/radio/RadioImgChev.ico
-
skin/radio/RadioMaxi.gif.gif
-
skin/radio/RadioMaxi_dn.gif.gif
-
skin/radio/RadioMaxi_on.gif.gif
-
skin/radio/RadioMini.gif.gif
-
skin/radio/RadioMini_dn.gif.gif
-
skin/radio/RadioMini_on.gif.gif
-
skin/radio/RadioPause.gif.gif
-
skin/radio/RadioPauseChev.ico
-
skin/radio/RadioPause_dn.gif.gif
-
skin/radio/RadioPause_on.gif.gif
-
skin/radio/RadioPlay.gif.gif
-
skin/radio/RadioPlayChev.ico
-
skin/radio/RadioPlay_dn.gif.gif
-
skin/radio/RadioPlay_on.gif.gif
-
skin/radio/RadioSliderBG.gif.gif
-
skin/radio/RadioSliderBall.gif.gif
-
skin/radio/RadioStop.gif.gif
-
skin/radio/RadioStopChev.ico
-
skin/radio/RadioStop_dn.gif.gif
-
skin/radio/RadioStop_on.gif.gif
-
skin/radio/RadioStrip.gif.gif
-
skin/radio/RadioTooltipPlaying.gif.gif
-
skin/radio/RadioTooltipStopped.gif.gif
-
skin/radio/RadioVolume.gif.gif
-
skin/radio/RadioVolume_dn.gif.gif
-
skin/radio/RadioVolume_on.gif.gif
-
skin/radio/RealLogo.png.png
-
skin/radio/WMPLogo.png.png
-
skin/radio/default_skin.xml.xml
-
skin/radio/defaultskin/RadioImgChev.ico
-
skin/radio/defaultskin/RadioPlayChev.ico
-
skin/radio/defaultskin/RadioStopChev.ico
-
skin/radio/defaultskin/display.gif.gif
-
skin/radio/defaultskin/equalizer_buffering.gif.gif
-
skin/radio/defaultskin/equalizer_error.gif.gif
-
skin/radio/defaultskin/equalizer_playing.gif.gif
-
skin/radio/defaultskin/equalizer_stopped.gif.gif
-
skin/radio/defaultskin/equalizer_stopped1.gif.gif
-
skin/radio/defaultskin/maxi.png.png
-
skin/radio/defaultskin/maxi_dn.png.png
-
skin/radio/defaultskin/maxi_over.png.png
-
skin/radio/defaultskin/minimize.png.png
-
skin/radio/defaultskin/minimize_dn.png.png
-
skin/radio/defaultskin/minimize_over.png.png
-
skin/radio/defaultskin/pause.gif.gif
-
skin/radio/defaultskin/pause_dn.gif.gif
-
skin/radio/defaultskin/pause_over.gif.gif
-
skin/radio/defaultskin/play.gif.gif
-
skin/radio/defaultskin/play_dn.gif.gif
-
skin/radio/defaultskin/play_over.gif.gif
-
skin/radio/defaultskin/slider.gif.gif
-
skin/radio/defaultskin/slider_bg.png.png
-
skin/radio/defaultskin/slider_dn.gif.gif
-
skin/radio/defaultskin/slider_over.gif.gif
-
skin/radio/defaultskin/stop.png.png
-
skin/radio/defaultskin/stop_dn.png.png
-
skin/radio/defaultskin/stop_over.png.png
-
skin/radio/defaultskin/vol.gif.gif
-
skin/radio/defaultskin/vol_dn.gif.gif
-
skin/radio/defaultskin/vol_over.gif.gif
-
skin/resize.gif.gif
-
skin/scrollbar/down-active.png.png
-
skin/scrollbar/down.png.png
-
skin/scrollbar/horizontal-background.png.png
-
skin/scrollbar/horizontal-gripper.png.png
-
skin/scrollbar/horizontal-thumb-end.png.png
-
skin/scrollbar/horizontal-thumb-start.png.png
-
skin/scrollbar/horizontal-thumb.png.png
-
skin/scrollbar/left-active.png.png
-
skin/scrollbar/left.png.png
-
skin/scrollbar/right-active.png.png
-
skin/scrollbar/right.png.png
-
skin/scrollbar/slider.gif.gif
-
skin/scrollbar/up-active.png.png
-
skin/scrollbar/up.png.png
-
skin/scrollbar/vertical-background.png.png
-
skin/scrollbar/vertical-gripper.png.png
-
skin/scrollbar/vertical-thumb-end.png.png
-
skin/scrollbar/vertical-thumb-start.png.png
-
skin/scrollbar/vertical-thumb.png.png
-
skin/scrollbars.css
-
skin/searchBox-suggest.xml.js .xml polyglot
-
skin/separator.png.png
-
skin/small_arrow.png.png
-
skin/small_arrowRTL.png.png
-
skin/splitter.ico
-
skin/star.png.png
-
skin/truste_about.gif.gif
-
skin/truste_welcome.gif.gif
-
skin/twitter/twitter.css
-
skin/twitter/twitterRTL_bg.png.png
-
skin/twitter/twitter_bg.png.png
-
skin/twitter/twitter_chevron.gif.gif
-
skin/twitter/twitter_no_img.png.png
-
skin/v.png.png
-
skin/warning.png.png
-
skin/weather.png.png
-
skin/weather_bg.png.png
-
skin/weather_bg_rtl.png.png
-
skin/weather_bullet.png.png
-
skin/weather_close.png.png
-
skin/weather_close_dn.png.png
-
skin/weather_na.png.png
-
skin/welcome-rtl/arrow.png.png
-
skin/welcome-rtl/bottom.png.png
-
skin/welcome-rtl/corner_ld.png.png
-
skin/welcome-rtl/corner_lup.png.png
-
skin/welcome-rtl/corner_rd.png.png
-
skin/welcome-rtl/corner_rup.png.png
-
skin/welcome-rtl/emailNotifier.gif.gif
-
skin/welcome-rtl/facebook.png.png
-
skin/welcome-rtl/grad_dn.png.png
-
skin/welcome-rtl/left.png.png
-
skin/welcome-rtl/radio.gif.gif
-
skin/welcome-rtl/right.png.png
-
skin/welcome-rtl/upper_border.png.png
-
skin/welcome-rtl/weather.gif.gif
-
skin/welcome-rtl/welcomeDialog.css
-
skin/welcome.bmp
-
skin/welcome/arrow.png.png
-
skin/welcome/bottom.png.png
-
skin/welcome/corner_ld.png.png
-
skin/welcome/corner_lup.png.png
-
skin/welcome/corner_rd.png.png
-
skin/welcome/corner_rup.png.png
-
skin/welcome/emailNotifier.gif.gif
-
skin/welcome/facebook.png.png
-
skin/welcome/grad_dn.png.png
-
skin/welcome/left.png.png
-
skin/welcome/radio.gif.gif
-
skin/welcome/right.png.png
-
skin/welcome/upper_border.png.png
-
skin/welcome/weather.gif.gif
-
skin/welcome/welcomeDialog.css
-
skin/x.png.png
-
$R5/components/ConduitAutoCompleteSearch.js.js
-
$R5/components/ConduitAutoCompleteSearch.xpt
-
$R5/components/ConduitToolbar.idl
-
$R5/components/ConduitToolbar.js.js
-
$R5/components/ConduitToolbar.xpt
-
$R5/components/FFExternalAlert.dll.dll windows:5 windows x86 arch:x86
3223d50e0400d555fa5614bff18da5cf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
d:\Conduit\RnD\Client\FF\Dev-2.5.0.x\FirefoxXPIGenerator\XPISource\components\FFExternalAlert.pdb
Imports
user32
RegisterWindowMessageW
DestroyWindow
CreateWindowExW
ole32
CoCreateInstance
IIDFromString
CLSIDFromString
oleaut32
SysAllocString
SysFreeString
nspr4
PR_AtomicDecrement
PR_AtomicIncrement
xpcom
NS_Alloc
kernel32
GetModuleFileNameA
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
RaiseException
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
WriteFile
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Exports
Exports
NSGetModule
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$R5/components/FFExternalAlert.xpt
-
$R5/components/RadioWMPCore.dll.dll windows:5 windows x86 arch:x86
a50dc75f0f339366da4f56137bf8807f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
d:\Conduit\RnD\Client\FF\Dev-2.5.2\FirefoxXPIGenerator\XPISource\components\RadioWMPCore.pdb
Imports
xpcom
NS_GetServiceManager
NS_Alloc
kernel32
SetLastError
WideCharToMultiByte
LeaveCriticalSection
MultiByteToWideChar
EnterCriticalSection
GetModuleHandleA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryA
HeapSize
RtlUnwind
WriteFile
HeapReAlloc
VirtualAlloc
GetLocaleInfoA
GetLastError
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RaiseException
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
ole32
CoCreateInstance
oleaut32
SysFreeString
nspr4
PR_AtomicDecrement
PR_AtomicIncrement
Exports
Exports
NSGetModule
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$R5/components/RadioWMPCore.xpt
-
$R5/defaults/default_radio_skin.xml.xml
-
$R5/defaults/fbAlert.js.html .js polyglot
-
$R5/install.rdf.xml
-
$R5/lib/xpcom.js.js
-
$R5/searchplugin/conduit.PNG.png
-
$R5/searchplugin/conduit.gif.gif
-
$R5/searchplugin/conduit.ico
-
$R5/searchplugin/conduit.src
-
$R5/searchplugin/conduit.xml
-
$R5/version.txt
-
$TEMP/Toolbar.exe.exe windows:4 windows x86 arch:x86
81638d02019c0bfcaaf23a9c69f2f12c
Code Sign
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15-06-2007 00:00Not After14-06-2012 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04-12-2003 00:00Not After03-12-2013 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
37:36:da:15:af:64:76:32:cc:e6:1c:d4:1b:65:77:ddCertificate
IssuerCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USNot Before17-02-2010 00:00Not After29-03-2013 23:59SubjectCN=Conduit Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Conduit Ltd.,ST=Israel,C=ILExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate
IssuerOU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=USNot Before21-05-2009 00:00Not After20-05-2019 23:59SubjectCN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA
user32
wsprintfA
Sections
.text Size: 512B - Virtual size: 510B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 533B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.3MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$TEMP/captura.bmp