43ce7fae32a1e16de37e3386cf13870e_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

43ce7fae32a1e16de37e3386cf13870e_JaffaCakes118
Size

7.4MB
MD5

43ce7fae32a1e16de37e3386cf13870e
SHA1

4492210f606bb1e8b92f280ef45341088f569ccb
SHA256

fdb9a6c8085774dd9c20601daa5473bff3048dc606b4918eba7f47c66572839c
SHA512

9b33c36a2798ab0af165e999f504a0f02099ab89c08aa22659e8eec1a716410a9f40032d5e0ff483ae5f66e793986856adab9bce22fdaa8e5d813a4fc5e5a586
SSDEEP

98304:5DMLFda74wVLpQFZ2dgoWhVuDTBVN27DRWUhJYKbk/7M/99c20w4iP28pViYzzli:5D0FdasqyFcULCTFQjCKQd20wh1d1cr

Score

3^/10

Malware Config

Signatures

Unsigned PE 23 IoCs

Checks for missing Authenticode signature.

resource
43ce7fae32a1e16de37e3386cf13870e_JaffaCakes118
unpack001/$PLUGINSDIR/StartMenu.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/$PLUGINSDIR/registry.dll
unpack002/$PLUGINSDIR/InstallOptions.dll
unpack002/$PLUGINSDIR/KillProcDLL.dll
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/inetc.dll
unpack002/$_10_/CCPMachineInfo.dll
unpack002/$_10_/Coopen.scr
unpack002/$_10_/CoopenActiveControl110.dll
unpack002/$_10_/CoopenLottery.cop
unpack002/$_10_/CoopenMainManager.dll
unpack003/$PLUGINSDIR/FindProcDLL.dll
unpack003/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/mx2_data/Modules/MxDownloader/TaskManager.dll
unpack003/$PLUGINSDIR/mx2_data/Modules/MxDownloader/asyn_dns.dll
unpack003/$PLUGINSDIR/mx2_data/Modules/MxDownloader/download_interface.dll
unpack003/$PLUGINSDIR/mx2_data/Modules/MxMute/MxMute.dll
unpack003/$PLUGINSDIR/mx2_data/MxProxy2.dll
unpack001/Uninstall.exe

NSIS installer 8 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/$TEMP/coopen_setup_100030.exe	nsis_installer_1
static1/unpack001/$TEMP/coopen_setup_100030.exe	nsis_installer_2
static1/unpack001/$TEMP/maxthon_qingqing.exe	nsis_installer_1
static1/unpack001/$TEMP/maxthon_qingqing.exe	nsis_installer_2
static1/unpack001/Uninstall.exe	nsis_installer_1
static1/unpack001/Uninstall.exe	nsis_installer_2

Files

43ce7fae32a1e16de37e3386cf13870e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/StartMenu.dll
.dll windows:4 windows x86 arch:x86

a648aeaa164b592c1e8892a10400b5ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
lstrcatA
FindClose
FindNextFileA
MulDiv
GlobalFree
lstrcpynA
GlobalAlloc
lstrcmpiA
FindFirstFileA
lstrcpyA

user32

TranslateMessage
GetMessageA
IsDialogMessageA
PostMessageA
DispatchMessageA
GetWindowLongA
CheckDlgButton
ShowWindow
LoadIconA
GetClientRect
MoveWindow
ScreenToClient
GetWindowRect
ReleaseDC
GetDC
EnableWindow
SetWindowTextA
SendMessageA
IsDlgButtonChecked
GetWindowTextA
DestroyWindow
GetDlgItem
CreateDialogParamA
SetWindowLongA
wsprintfA
CallWindowProcA

gdi32

GetTextMetricsA
SelectObject

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

CoTaskMemFree

Exports

Exports

Init
Select
Show

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 518B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

1e2884056e655f2b7bc5a904e352fc80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GetFileAttributesA
lstrcmpiA
MulDiv
lstrlenA
HeapFree
GetCurrentDirectoryA
HeapAlloc
HeapReAlloc
GlobalFree
lstrcpynA
GlobalAlloc
GetProcessHeap
SetCurrentDirectoryA

user32

GetPropA
DestroyWindow
CallWindowProcA
SetCursor
LoadCursorA
RemovePropA
CharPrevA
GetWindowLongA
DrawTextA
GetWindowTextA
GetDlgItem
SetWindowLongA
SetWindowPos
CreateDialogParamA
MapWindowPoints
GetWindowRect
SetPropA
CreateWindowExA
IsWindow
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
ShowWindow
wsprintfA
MapDialogRect
GetClientRect
CharNextA
SendMessageA
DrawFocusRect

gdi32

SetTextColor

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsExec.dll
.dll windows:4 windows x86 arch:x86

d83f71e61ee459ee63ca3e829966a9dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetExitCodeProcess
WaitForSingleObject
Sleep
TerminateProcess
lstrcpyA
lstrcpynA
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
PeekNamedPipe
GetTickCount
CreateProcessA
GetStartupInfoA
CreatePipe
GetVersionExA
GetModuleHandleA
DeleteFileA
lstrcmpiA
lstrlenA
lstrcatA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
CopyFileA
GetTempFileNameA
GlobalFree
GlobalAlloc
GetModuleFileNameA
ExitProcess
GetCommandLineA
GetProcAddress
GlobalLock
GetCurrentProcess

user32

SendMessageA
OemToCharBuffA
CharNextA
wsprintfA
CharPrevA
FindWindowExA

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

Exec
ExecToLog
ExecToStack

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/registry.dll
.dll windows:4 windows x86 arch:x86

cd53277eaa7bbb8fb5b2b678274dcb4e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
SearchPathA
CloseHandle
CreateFileA
lstrcpynA
lstrcatA
FindFirstFileA
FindClose
lstrlenA
lstrcmpiA
lstrcpyA
GlobalFree
GlobalAlloc
WriteFile

user32

SendMessageA
FindWindowExA
GetDlgItem
wsprintfA
CharUpperA

advapi32

RegCreateKeyExA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumValueA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCloseKey

Exports

Exports

_Close
_CopyKey
_CopyValue
_CreateKey
_DeleteKey
_DeleteKeyEmpty
_DeleteValue
_Find
_HexToStr
_KeyExists
_MoveKey
_MoveValue
_Open
_Read
_ReadExtra
_RestoreKey
_SaveKey
_StrToHex
_Unload
_Write
_WriteExtra

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$TEMP/coopen_setup_100030.exe
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Code Sign

04:00:00:00:00:01:23:9e:0f:ac:b3
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

28/01/1999, 13:00

Not After

27/01/2017, 12:00

Subject

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:20:19:c1:90:66
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/03/2009, 11:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:00:00:00:00:01:25:b0:b4:cc:01
Certificate

Issuer

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Not Before

21/12/2009, 09:32

Not After

22/12/2020, 09:32

Subject

CN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:00:00:00:00:01:2a:22:5d:6d:d7
Certificate

Issuer

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Not Before

30/07/2010, 07:33

Not After

30/07/2011, 07:33

Subject

CN=北京首都在线网络技术有限公司,O=北京首都在线网络技术有限公司,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:1e:44:a5:ec:be
Certificate

Issuer

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Not Before

22/01/2004, 10:00

Not After

27/01/2017, 11:00

Subject

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

cc:2f:76:ab:a4:76:cc:11:a7:d3:95:d1:0d:12:f3:46:0b:b7:3a:c2
Signer

Actual PE Digest

cc:2f:76:ab:a4:76:cc:11:a7:d3:95:d1:0d:12:f3:46:0b:b7:3a:c2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/KillProcDLL.dll
.dll windows:4 windows x86 arch:x86

153027ec3b10bcea606b777657dd3402

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA
TerminateProcess
OpenProcess
LoadLibraryA
CloseHandle
GetProcAddress
FreeLibrary
GlobalFree
lstrcpyA
DisableThreadLibraryCalls

msvcrt

strcmp
_strupr
toupper
strlen
free
_initterm
malloc
_adjust_fdiv
strcpy
_itoa

Exports

Exports

KillProc

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/PartnerDlg.ini
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/inetc.dll
.dll windows:4 windows x86 arch:x86

3f1149a3053980fe6b461521d2b55a2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_mbschr
_adjust_fdiv
malloc
_initterm
free
_mbsrchr
strtoul
memset
_mbsstr
strtol

kernel32

CloseHandle
CreateThread
WaitForSingleObject
TerminateThread
GetModuleHandleA
MulDiv
lstrcpyA
GlobalAlloc
LoadLibraryA
GetProcAddress
lstrlenA
WriteFile
ReadFile
lstrcmpA
lstrcpynA
GetLastError
GlobalFree
lstrcmpiA
DeleteFileA
SleepEx
SetFilePointer
GetTickCount
lstrcatA
GetFileSize
CreateFileA

user32

MessageBoxA
GetParent
ShowWindow
PostMessageA
SetWindowTextA
GetWindowTextA
IsWindow
GetDlgItem
SetDlgItemTextA
SendDlgItemMessageA
SetWindowPos
SystemParametersInfoA
GetClientRect
GetWindowRect
SetTimer
LoadIconA
SetWindowLongA
GetWindowLongA
UpdateWindow
DestroyWindow
KillTimer
RedrawWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
IsWindowVisible
EnableWindow
CreateDialogParamA
FindWindowExA
wsprintfA
SendMessageA

wininet

HttpSendRequestA
HttpSendRequestExA
HttpQueryInfoA
FtpCreateDirectoryA
FtpOpenFileA
InternetGetLastResponseInfoA
InternetSetFilePointer
InternetSetOptionA
InternetQueryOptionA
InternetCloseHandle
InternetErrorDlg
HttpOpenRequestA
HttpAddRequestHeadersA
HttpEndRequestA
InternetConnectA
InternetCrackUrlA
InternetOpenA
InternetReadFile
InternetWriteFile

comctl32

ord17

Exports

Exports

get
head
post
put

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/install.bmp
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-wizard.bmp
$_10_/$_10_/HttpDownloader.exe
.exe windows:4 windows x86 arch:x86

4095847f15924fd0fef7c9ebf1826f51

Code Sign

04:00:00:00:00:00:f9:7f:aa:2e:1e
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

16/12/2003, 13:00

Not After

27/01/2014, 11:00

Subject

CN=GlobalSign RootSign Partners CA,OU=RootSign Partners CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:1e:44:a5:e2:4e
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

28/01/1999, 13:00

Not After

27/01/2017, 12:00

Subject

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:10:92:eb:82:95
Certificate

Issuer

CN=GlobalSign RootSign Partners CA,OU=RootSign Partners CA,O=GlobalSign nv-sa,C=BE

Not Before

05/02/2007, 09:00

Not After

27/01/2014, 09:00

Subject

CN=GlobalSign Time Stamping Authority,O=GlobalSign,1.2.840.113549.1.9.1=#0c1c74696d657374616d70696e666f40676c6f62616c7369676e2e636f6d

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:00:00:00:00:01:23:5a:e0:e4:3b
Certificate

Issuer

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Not Before

27/08/2009, 07:10

Not After

27/08/2010, 07:10

Subject

CN=Beijing Capital Online Network Technology Co.Ltd.,O=Beijing Capital Online Network Technology Co.Ltd.,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:1e:44:a5:ec:be
Certificate

Issuer

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Not Before

22/01/2004, 10:00

Not After

27/01/2017, 11:00

Subject

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c3:74:fe:a8:e1:18:3a:a1:0a:ac:b8:99:08:b9:e8:ce:89:45:99:6f
Signer

Actual PE Digest

c3:74:fe:a8:e1:18:3a:a1:0a:ac:b8:99:08:b9:e8:ce:89:45:99:6f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord5186
ord858
ord924
ord800
ord5710
ord5683
ord860
ord540
ord350
ord354
ord825
ord1105
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord641
ord609
ord795
ord765
ord2514
ord2621
ord1134
ord665
ord4376
ord4853
ord4998
ord4710
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord4234
ord2575
ord4396
ord3574
ord3721
ord6055
ord1776
ord5290
ord3402
ord3698
ord823
ord1146
ord1168
ord567
ord2302
ord537
ord4160
ord2863
ord2379
ord755
ord470
ord2642
ord3092
ord5953
ord2645
ord4224
ord3810
ord920
ord6385
ord1979
ord3663
ord3616
ord3127
ord5265
ord5651
ord1576

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_onexit
__dllonexit
sprintf
_mbscmp
vsprintf
_ftol
__CxxFrameHandler
atol
_XcptFilter
_setmbcp

kernel32

GetTempFileNameA
WideCharToMultiByte
GetCommandLineW
WaitForSingleObject
CreateProcessA
GetModuleHandleA
GetStartupInfoA
GetLastError

user32

AppendMenuA
GetSystemMenu
DrawIcon
GetClientRect
LoadIconA
IsIconic
ShowWindow
EnableWindow
GetSystemMetrics
SendMessageA
SetDlgItemTextA
PostMessageA

shell32

CommandLineToArgvW

wininet

InternetCloseHandle
InternetOpenUrlA
InternetReadFile
InternetOpenA
HttpQueryInfoA

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$_10_/$_10_/uninst.exe.nsis
$_10_/CCPMachineInfo.dll
.dll windows:4 windows x86 arch:x86

22abd1238fcf6f0b3b1549f2db91446e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord823
ord924
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord4204
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord860
ord922
ord540
ord2818
ord939
ord800
ord4202
ord3262
ord535
ord1578
ord600
ord826
ord269
ord1116

msvcrt

__CxxFrameHandler
__dllonexit
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit

kernel32

LocalFree
GetCurrentProcess
SetPriorityClass
CreateFileA
CloseHandle
DeviceIoControl
GetVersionExA
LocalAlloc

user32

wsprintfA
MessageBoxW
IsCharAlphaNumericA

iphlpapi

GetAdaptersInfo

Exports

Exports

GetUserInfo

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 682B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$_10_/Coopen.scr
.exe windows:4 windows x86 arch:x86

275692bec0100c18fbd1963bea45a23d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
ReadFile
GetFileSize
GetCommandLineA
SetThreadPriority
GetCurrentThread
FreeLibrary
GlobalLock
LoadLibraryA
GetModuleFileNameA
WritePrivateProfileStringA
GetStartupInfoA
GetModuleHandleA
GlobalUnlock
MultiByteToWideChar
GlobalFree
GetTickCount
Sleep
CreateThread
SetEvent
WideCharToMultiByte
OutputDebugStringA
GetPrivateProfileIntA
CreateFileA
FindFirstFileA
FindClose
FindNextFileA
WaitForSingleObject
GetVersionExA
CloseHandle
CreateEventA
GetSystemDirectoryA
GetPrivateProfileStringA
ExpandEnvironmentStringsA
GetProcAddress

user32

wsprintfA
GetClientRect
FillRect
BeginPaint
GetWindowRect
ReleaseDC
GetDC
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
MessageBoxA
RegisterClassA
LoadIconA
LoadCursorA
SystemParametersInfoA
PostQuitMessage
PostMessageA
GetSystemMetrics
CreateWindowExA
AdjustWindowRect
SetTimer
KillTimer
SetCursor
DefWindowProcA
EndPaint

gdi32

GetDeviceCaps
CreateDCA
StretchBlt
SetStretchBltMode
GetStockObject
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
SelectPalette
RealizePalette
GetDIBits
DeleteObject
SelectObject
DeleteDC
TextOutA

advapi32

RegQueryValueExA
RegOpenKeyA
RegQueryValueA
RegCloseKey
RegCreateKeyExA

ole32

StringFromGUID2
CoCreateInstance
CreateStreamOnHGlobal
CoUninitialize
CoInitialize

oleaut32

OleLoadPicture

msvcp60

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Xlen@std@@YAXXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

msvcrt

_onexit
__dllonexit
free
atoi
isdigit
atol
memmove
_except_handler3
_exit
srand
rand
_mbscmp
_strnicmp
??2@YAPAXI@Z
__CxxFrameHandler
strstr
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
time

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$_10_/CoopenActiveControl110.dll
.dll regsvr32 windows:4 windows x86 arch:x86

6aa21ccdbbbb0d1fd90240b162f05b98

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExpandEnvironmentStringsW
GetModuleHandleW
GetModuleFileNameW
CreateDirectoryW
CreateFileW
CloseHandle
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetCurrentProcess
FlushInstructionCache
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenW
DisableThreadLibraryCalls
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
LocalFree

user32

IsChild
UnionRect
SetFocus
GetKeyState
PtInRect
GetFocus
GetClientRect
FindWindowW
SendMessageW
wsprintfW
CreateWindowExW
CallWindowProcW
GetWindowLongW
SetWindowLongW
BeginPaint
DefWindowProcW
EndPaint
InvalidateRect
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
SetWindowPos
IsWindow
DestroyWindow
GetParent
ShowWindow

gdi32

GetDeviceCaps
LPtoDP
SetMapMode
SetViewportOrgEx
TextOutW
SetTextAlign
Rectangle
CreateRectRgnIndirect
CloseMetaFile
DeleteMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
CreateMetaFileW
DeleteDC

advapi32

RegQueryValueExW
RegCloseKey
RegCreateKeyExW

shell32

SHGetSpecialFolderPathW
ShellExecuteW

ole32

OleRegGetMiscStatus
CreateDataAdviseHolder
CoTaskMemFree
CreateOleAdviseHolder
CoTaskMemAlloc
OleRegGetUserType
OleRegEnumVerbs

oleaut32

SysStringByteLen
SysAllocStringByteLen
SysAllocString
VariantClear
SysStringLen
LoadRegTypeLi
SysFreeString
OleCreatePropertyFrame

atl

ord30
ord45
ord31
ord27
ord26
ord58
ord50
ord44
ord43
ord16
ord21
ord32
ord57
ord15
ord51
ord23
ord18

msvcp60

?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@IIABV?$allocator@G@1@@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z

msvcrt

wcslen
wcscpy
fclose
malloc
realloc
memset
memcmp
??2@YAPAXI@Z
memcpy
??1type_info@@UAE@XZ
_adjust_fdiv
_purecall
_initterm
_CxxThrowException
free
wcscat
fgetws
_wfopen
swprintf
fwprintf
_wtoi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$_10_/CoopenAir.exe
.exe windows:4 windows x86 arch:x86

7811f517d961bce7675eefabcb7f4606

Code Sign

04:00:00:00:00:01:23:9e:0f:ac:b3
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

28/01/1999, 13:00

Not After

27/01/2017, 12:00

Subject

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:20:19:c1:90:66
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/03/2009, 11:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:00:00:00:00:01:25:b0:b4:cc:01
Certificate

Issuer

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Not Before

21/12/2009, 09:32

Not After

22/12/2020, 09:32

Subject

CN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:00:00:00:00:01:2a:22:5d:6d:d7
Certificate

Issuer

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Not Before

30/07/2010, 07:33

Not After

30/07/2011, 07:33

Subject

CN=北京首都在线网络技术有限公司,O=北京首都在线网络技术有限公司,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:1e:44:a5:ec:be
Certificate

Issuer

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Not Before

22/01/2004, 10:00

Not After

27/01/2017, 11:00

Subject

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

27:f7:47:29:51:54:d9:c2:86:5f:93:16:b3:a5:5a:be:e4:6e:89:89
Signer

Actual PE Digest

27:f7:47:29:51:54:d9:c2:86:5f:93:16:b3:a5:5a:be:e4:6e:89:89

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageW
GetStartupInfoW
ExitProcess
RtlUnwind
TerminateProcess
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetStringTypeA
GetStringTypeW
SetStdHandle
CompareStringA
GetACP
GetOEMCP
SetEnvironmentVariableA
FindResourceA
GlobalAddAtomA
GetProfileStringA
GetFileTime
GetFileSize
GetFileAttributesW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetCurrentProcess
DuplicateHandle
SetErrorMode
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTickCount
SizeofResource
GetProcessVersion
WritePrivateProfileStringW
GlobalFlags
lstrcmpiW
GetThreadLocale
MulDiv
SetLastError
lstrcpynW
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
InterlockedDecrement
GlobalUnlock
GetModuleHandleA
LoadLibraryA
FreeLibrary
lstrlenA
MultiByteToWideChar
GetVersion
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
lstrcpyW
GetModuleHandleW
GetProcAddress
FindResourceW
LoadResource
LockResource
GlobalFree
GetModuleFileNameW
GlobalLock
lstrcmpW
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
lstrlenW
WideCharToMultiByte
GetCurrentThread
GetCurrentThreadId
CompareStringW
OutputDebugStringW
InterlockedIncrement
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
ReleaseMutex
CloseHandle
CreateMutexW
GetLastError
CreateEventW
GetVersionExA
ResetEvent

user32

GetSysColorBrush
RegisterClipboardFormatW
InvalidateRect
CharUpperW
PostThreadMessageW
SetFocus
AdjustWindowRectEx
ScreenToClient
GetCapture
WinHelpW
wsprintfW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextW
GetDlgCtrlID
DestroyWindow
CreateWindowExW
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetForegroundWindow
SetWindowLongW
RegisterWindowMessageW
IntersectRect
SystemParametersInfoW
GetWindowPlacement
GetWindowRect
MapDialogRect
SetWindowPos
SetWindowContextHelpId
IsDialogMessageW
MessageBeep
GetNextDlgGroupItem
GetWindow
GetTopWindow
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageW
GetCursorPos
SetWindowsHookExW
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongW
MessageBoxW
SetCursor
PostMessageW
GetDesktopWindow
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
SetForegroundWindow
CopyRect
EnableWindow
KillTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuW
SendMessageW
RegisterHotKey
PtInRect
GetClassNameW
OffsetRect
SetTimer
LoadIconW
DrawTextA
DrawFocusRect
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
FindWindowW
PostQuitMessage
IsWindow
LoadCursorW
InflateRect
CharNextW
GrayStringW
DrawTextW
TabbedTextOutW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
DestroyMenu
LoadStringW
ShowWindow
MoveWindow
SetMenuItemBitmaps
SetWindowTextW
GetDC
SetActiveWindow
SetRect
CopyAcceleratorTableW
EndDialog
CreateDialogIndirectParamW
UpdateWindow
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
IsChild
GetSysColor
ReleaseDC

gdi32

SetBkMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
GetStockObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
BitBlt
CreateCompatibleDC
GetTextColor
GetBkColor
GetMapMode
PatBlt
SelectObject
RestoreDC
SaveDC
DeleteDC
SetMapMode
LPtoDP
DPtoLP
GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
ExtTextOutA
GetTextExtentPointA
CreateBitmap

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW

comctl32

ord17

oledlg

OleUIBusyW

ole32

CoRegisterMessageFilter
CoRevokeClassObject
CoFreeUnusedLibraries
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

VariantCopy
VariantChangeType
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
SysAllocString
VariantInit
SysStringLen

urlmon

CoInternetSetFeatureEnabled

wininet

InternetGetConnectedState
InternetCheckConnectionW

winmm

timeGetTime

Exports

Exports

?interfaceMap@CCustomControlSite@@1UAFX_INTERFACEMAP@@B

Sections

.text
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$_10_/CoopenLottery.Config
$_10_/CoopenLottery.cop
.dll windows:4 windows x86 arch:x86

d2100ef740f57bc1437c03b2d4968029

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetCommandLineA
ExitProcess
TerminateProcess
HeapFree
RaiseException
GetTimeZoneInformation
HeapSize
HeapReAlloc
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
SetStdHandle
CompareStringA
SetEnvironmentVariableA
GetFileTime
GetFileSize
GetFileAttributesW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetCurrentProcess
DuplicateHandle
GetProcessVersion
GetLastError
GlobalFlags
lstrcmpiW
SetErrorMode
FileTimeToLocalFileTime
FileTimeToSystemTime
GetThreadLocale
MulDiv
SetLastError
FormatMessageW
GetModuleHandleA
LoadLibraryA
GetVersion
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
lstrcpyW
GetModuleHandleW
MultiByteToWideChar
lstrlenA
InterlockedDecrement
lstrcpynW
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
LockResource
CloseHandle
lstrcmpW
GlobalDeleteAtom
lstrlenW
WideCharToMultiByte
GetCurrentThread
FindResourceW
SizeofResource
LoadResource
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCurrentThreadId
GetTickCount
GetModuleFileNameW
ExpandEnvironmentStringsW
GetVersionExW
LoadLibraryW
GetProcAddress
FreeLibrary
CompareStringW
InterlockedIncrement
GetPrivateProfileIntW
GetStartupInfoA
WritePrivateProfileStringW

user32

DestroyMenu
CharUpperW
PostThreadMessageW
LoadCursorW
GetClassNameW
UnregisterClassW
CharNextW
GrayStringW
DrawTextW
TabbedTextOutW
GetWindowDC
ClientToScreen
WindowFromPoint
LoadIconW
SendDlgItemMessageA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
ScreenToClient
GetCapture
WinHelpW
wsprintfW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
SetPropW
GetPropW
CallWindowProcW
RegisterClipboardFormatW
DefWindowProcW
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageW
IsIconic
GetWindowPlacement
EndDialog
SetActiveWindow
CreateDialogIndirectParamW
MoveWindow
GetDlgCtrlID
GetWindowTextW
SetWindowTextW
SendDlgItemMessageW
GetDlgItem
GetClientRect
SetFocus
SetRect
CopyAcceleratorTableW
OffsetRect
CopyRect
MapDialogRect
SetWindowContextHelpId
MessageBeep
IsWindow
IsChild
GetNextDlgGroupItem
GetWindow
GetTopWindow
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
GetKeyState
ValidateRect
IsWindowVisible
PeekMessageW
LoadStringW
RemovePropW
GetSysColorBrush
GetLastActivePopup
IsWindowEnabled
PostQuitMessage
SetTimer
MessageBoxW
IsDialogMessageW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
BringWindowToTop
PostMessageW
ShowWindow
SystemParametersInfoW
GetCursorPos
PtInRect
KillTimer
GetDC
GetWindowLongW
SetWindowLongW
ReleaseDC
UpdateWindow
SetWindowPos
EnableWindow
SetCursor
InvalidateRect
GetParent
GetWindowRect
CreateWindowExW
SendMessageW
GetSystemMetrics
DestroyWindow
GetDesktopWindow

gdi32

GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
GetTextColor
GetBkColor
ScaleWindowExtEx
GetMapMode
DeleteDC
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetStockObject
RestoreDC
SaveDC
GetObjectW
SetBkColor
SetTextColor
GetClipBox
SetMapMode
LPtoDP
DPtoLP
CreateBitmap
CreateCompatibleDC
CreateDIBSection
SelectObject
StretchBlt
DeleteObject

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW
RegOpenKeyExW

comctl32

_TrackMouseEvent
ord17

oledlg

OleUIBusyW

ole32

CoRevokeClassObject
OleFlushClipboard
CoInitialize
CoUninitialize
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CoFreeUnusedLibraries
OleIsCurrentClipboard
CoRegisterMessageFilter

olepro32

ord253

oleaut32

SysStringLen
VariantChangeType
VariantCopy
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
VariantClear
SysAllocString
VariantInit

gdiplus

GdipFree
GdipCloneBrush
GdipAlloc
GdipCreateFontFamilyFromName
GdipCreateFont
GdipCreateSolidFill
GdipDrawString
GdipDeleteBrush
GdipDeleteFont
GdipDrawImageI
GdipSetTextRenderingHint
GdipDrawImageRectI
GdipReleaseDC
GdipGetImageWidth
GdipGetImageHeight
GdipCreateFromHDC
GdipDrawImagePointRectI
GdipDeleteGraphics
GdiplusStartup
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipDeleteFontFamily
GdipCloneImage
GdipDisposeImage

wininet

InternetSetCookieW

Exports

Exports

?interfaceMap@CCustomControlSite@@1UAFX_INTERFACEMAP@@B
CreatePlugInInstance
DestroyPlugInInstance

Sections

.text
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$_10_/CoopenMainManager.dll
.dll windows:4 windows x86 arch:x86

c46dbef156038cf8343e2004d38045a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
GlobalFlags
SetLastError
GetModuleHandleA
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryA
GetProcessVersion
RtlUnwind
CreateThread
ExitThread
GetCommandLineA
TerminateProcess
HeapAlloc
HeapFree
RaiseException
HeapSize
HeapReAlloc
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetStartupInfoA
lstrcpynW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
GetStringTypeA
GetStringTypeW
lstrcpyW
lstrcatW
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
lstrlenA
InterlockedIncrement
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
FindResourceW
SizeofResource
LoadResource
LockResource
FreeResource
GetExitCodeThread
TerminateThread
OpenEventW
OpenProcess
lstrcmpW
ResetEvent
LocalFileTimeToFileTime
SetFileTime
DosDateTimeToFileTime
GetCurrentDirectoryW
SystemTimeToFileTime
GetFileType
GetDriveTypeW
LocalFree
FormatMessageW
GetTempPathW
MulDiv
GetVersion
InterlockedDecrement
GetLastError
GetLocalTime
DuplicateHandle
GetPrivateProfileStringW
GetPrivateProfileIntW
WritePrivateProfileStringW
CreateDirectoryW
SetCurrentDirectoryW
SetEndOfFile
GetFileSize
SetFilePointer
FlushFileBuffers
ReadFile
CopyFileW
DeleteFileW
FindNextFileW
FindFirstFileW
FindClose
WideCharToMultiByte
MultiByteToWideChar
WriteFile
CreateFileW
GetModuleHandleW
ExitProcess
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCurrentProcess
SetPriorityClass
CreateFileA
DeviceIoControl
SetEvent
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
CreateEventW
GetVersionExW
lstrlenW
GetModuleFileNameW
Sleep
ExpandEnvironmentStringsW
GetFileAttributesW
SetFileAttributesW
FreeLibrary
GetTickCount
LoadLibraryW
GetProcAddress
GetModuleFileNameA
GetSystemDirectoryW

user32

GetMessagePos
GetMessageTime
RemovePropW
GetPropW
SetPropW
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassW
GetClassInfoW
WinHelpW
GetTopWindow
CopyRect
AdjustWindowRectEx
LoadStringW
DestroyMenu
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetMessageW
TranslateMessage
DispatchMessageW
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageW
SetWindowsHookExW
GetLastActivePopup
PostThreadMessageW
DrawTextExW
FillRect
GetDesktopWindow
GetForegroundWindow
GetAncestor
GetWindowTextW
GetWindowThreadProcessId
RegisterWindowMessageW
SetWindowTextW
TrackMouseEvent
FindWindowExW
SetClassLongW
CreateDialogParamW
IsWindowEnabled
LoadBitmapW
SendDlgItemMessageW
GetDlgItemTextW
SetDlgItemTextW
CheckDlgButton
SetDlgItemInt
CheckRadioButton
GetDlgItemInt
IsDlgButtonChecked
DrawFocusRect
CallWindowProcW
GetCapture
MapWindowPoints
GetWindow
SetFocus
GetDlgItem
GetActiveWindow
SetActiveWindow
EnableWindow
IsWindow
GetDoubleClickTime
PostQuitMessage
SetForegroundWindow
GetSysColorBrush
UpdateWindow
DrawFrameControl
GetFocus
InvalidateRect
GetSysColor
DrawEdge
DrawStateW
SetRect
PostMessageW
EqualRect
GetParent
GetWindowDC
wsprintfW
InflateRect
ScreenToClient
IsWindowVisible
ClientToScreen
SetParent
GetWindowLongW
LoadIconW
SetWindowLongW
GetDC
SetCapture
MessageBoxW
FindWindowW
IsIconic
GetWindowPlacement
GetClassNameW
ReleaseCapture
SetWindowPos
ReleaseDC
SetTimer
LoadCursorW
SetCursor
KillTimer
GetCursorPos
PtInRect
GetWindowRect
GetSystemMetrics
GrayStringW
TabbedTextOutW
GetMenuItemCount
GetDlgCtrlID
UnregisterClassW
WindowFromPoint
UnhookWindowsHookEx
SystemParametersInfoW
OffsetRect
DestroyWindow
LoadImageW
DestroyIcon
ShowWindow
RegisterClassExW
CloseWindow
MoveWindow
DefWindowProcW
CreateWindowExW
SendMessageW
IsCharAlphaNumericW
wsprintfA
EndPaint
DrawTextW
GetClientRect
BeginPaint
SetMenuItemBitmaps

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SetMapMode
PtVisible
RectVisible
Escape
RestoreDC
SaveDC
CreateBitmap
CreateDCW
SelectPalette
RealizePalette
GetDIBits
CreateFontW
CreateFontIndirectW
SetBkColor
ExtTextOutW
GetTextExtentPointW
GetNearestColor
SetBkMode
SetTextColor
ExtCreatePen
GetStockObject
TextOutW
GetDeviceCaps
GetPixel
BitBlt
CreateDIBSection
GetObjectA
CreateCompatibleDC
CreateSolidBrush
CreateCompatibleBitmap
SelectObject
PatBlt
DeleteDC
DeleteObject
GetObjectW

comdlg32

ChooseColorW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey

shell32

SHFileOperationW
SHGetMalloc
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetPathFromIDListW
Shell_NotifyIconW
SHGetSpecialFolderPathW
ShellExecuteW

comctl32

ImageList_Destroy
ImageList_GetIcon
ImageList_AddMasked
ImageList_Create
_TrackMouseEvent
ord17
ImageList_ReplaceIcon
PropertySheetW
ImageList_GetImageInfo
ImageList_Add

iphlpapi

GetAdaptersInfo

gdiplus

GdipGetStringFormatFlags
GdipGetFontHeight
GdipGetFontSize
GdipDeleteGraphics
GdipDisposeImageAttributes
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetCompositingMode
GdipSetSmoothingMode
GdipSetImageAttributesColorMatrix
GdipCreateImageAttributes
GdipCreateFromHDC
GdipDrawImageI
GdipDrawImageRectI
GdipFillRectangleI
GdipCreateSolidFill
GdipCreateFontFromLogfontW
GdipSetStringFormatFlags
GdipCreateLineBrushFromRectI
GdipDrawImagePointsRectI
GdipGetLogFontW
GdipDeleteFontFamily
GdipReleaseDC
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipDeletePath
GdipDeleteRegion
GdipGetRegionHRgn
GdipCreateRegionPath
GdipAddPathPolygon
GdipCreatePath
GdipDrawPolygon
GdipFillRegion
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipMeasureString
GdipGetDC
GdipCloneBrush
GdipCreateStringFormat
GdipCreateFontFromLogfontA
GdipDrawImagePointsI
GdipCreateFontFromDC
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateBitmapFromHBITMAP
GdipCreateTexture
GdipDrawString
GdipGetImageHeight
GdipDrawImageRectRectI
GdipCreatePen1
GdipDrawRectangleI
GdipDeletePen
GdipAlloc
GdipLoadImageFromFile
GdiplusShutdown
GdiplusStartup
GdipDeleteBrush
GdipDeleteFont
GdipDeleteStringFormat
GdipCloneImage
GdipDisposeImage
GdipFree
GdipCreateFont
GdipGetImageWidth

ole32

OleRun
CreateStreamOnHGlobal
OleInitialize
CoTaskMemFree
CoCreateInstance
OleDraw
OleCreate
OleSetContainedObject
CoUninitialize
CoInitialize
OleUninitialize

oleaut32

SysAllocString
OleLoadPicture
VariantClear
SysStringLen
VariantInit
VariantChangeType
GetErrorInfo
SysFreeString

wininet

HttpQueryInfoW
InternetReadFile
InternetGetLastResponseInfoW
InternetGetConnectedState
HttpOpenRequestW
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetSetOptionW
InternetOpenUrlW
HttpSendRequestW

shlwapi

PathFileExistsW
PathFindExtensionW
StrCmpIW
StrToIntW

psapi

EnumProcessModules
GetModuleBaseNameW

Exports

Exports

CreatePlugInInstance
DestroyPlugInInstance
MainPreTranslateMessage
MainRun

Sections

.text
Size: 584KB - Virtual size: 581KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$_10_/Resource/Plugins/CoopenLottery.png
.png
$_10_/Resource/Plugins/CoopenNotepad.png
.png
$_10_/Resource/Plugins/CoopenSearchTool.png
.png
$_10_/Resource/Plugins/CoopenWeather.png
.png
$_10_/Resource/Plugins/border.png
.png
$_10_/Resource/Plugins/hover.png
.png
$_10_/Resource/Plugins/running.png
.png
$_10_/Resource/Plugins/tip.png
.png
$_10_/Resource/SkinFormal/Background.png
.png
$_10_/Resource/SkinFormal/Button_Channel.png
.png
$_10_/Resource/SkinFormal/Button_Close.png
.png
$_10_/Resource/SkinFormal/Button_Commit.png
.png
$_10_/Resource/SkinFormal/Button_Next.png
.png
$_10_/Resource/SkinFormal/Button_Pause.png
.png
$_10_/Resource/SkinFormal/Button_Play.png
.png
$_10_/Resource/SkinFormal/Button_Prev.png
.png
$_10_/Resource/SkinFormal/Button_Widget.png
.png
$_10_/Resource/SkinFormal/CheckC.png
.png
$_10_/Resource/SkinFormal/CheckU.png
.png
$_10_/Resource/SkinFormal/Indicator1.png
.png
$_10_/Resource/SkinFormal/Indicator2.png
.png
$_10_/Resource/SkinFormal/MainIcon.png
.png
$_10_/Resource/SkinFormal/Message.png
.png
$_10_/Resource/SkinFormal/Notify.png
.png
$_10_/Resource/SkinFormal/Progress.png
.png
$_10_/Resource/SkinFormal/Push_Cancel.png
.png
$_10_/Resource/SkinFormal/Push_Config.png
.png
$_10_/Resource/SkinFormal/Push_Confirm.png
.png
$_10_/Resource/SkinFormal/Push_Folder.png
.png
$_10_/Resource/SkinFormal/RadioC.png
.png
$_10_/Resource/SkinFormal/RadioU.png
.png
$_10_/Resource/SkinFormal/SkinClient.ini
$_10_/Resource/SkinFormal/SkinClose.ini
$_10_/Resource/SkinFormal/Synopsis1.ini
$_10_/Resource/SkinFormal/Synopsis1.png
.png
$_10_/Resource/SkinFormal/Synopsis2.png
.png
$_10_/Resource/SkinFormal/close.png
.png
$_10_/Resource/SkinFormal/downarrow.png
.png
$_10_/Resource/SkinFormal/hover.png
.png
$_10_/Resource/SkinFormal/leftarrow.png
.png
$_10_/Resource/SkinFormal/rightarrow.png
.png
$_10_/Resource/SkinFormal/setting.png
.png
$_10_/Resource/SkinFormal/uparrow.png
.png
$_10_/Templete/CoopenPhoto.jpg
.jpg
$_10_/Templete/DefaultCoopenWallpaper.jpg
.jpg
$_10_/Templete/ModeB.tpl
$_10_/Templete/ModeB_logo.jpg
.jpg
$_10_/Templete/ModeC.tpl
$_10_/conf/ChannelListReal.txt
$_10_/conf/PluginConfig.ini
$_10_/image/Photo/local Photo/B_0.jpg
.jpg
$_10_/image/Photo/local Photo/B_1.jpg
.jpg
$_10_/image/Wallpaper/coopen wallpaper/DefaultCoopenWallpaper.jpg
.jpg
$_10_/image/Wallpaper/local wallpaper/DefaultCoopenWallpaper.jpg
.jpg
$_10_/licence.txt
Coopen.exe
.exe windows:4 windows x86 arch:x86

37bdd694e262b9b644cfec8bf5405995

Code Sign

04:00:00:00:00:01:23:9e:0f:ac:b3
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

28/01/1999, 13:00

Not After

27/01/2017, 12:00

Subject

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:20:19:c1:90:66
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18/03/2009, 11:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:00:00:00:00:01:25:b0:b4:cc:01
Certificate

Issuer

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Not Before

21/12/2009, 09:32

Not After

22/12/2020, 09:32

Subject

CN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:00:00:00:00:01:2a:22:5d:6d:d7
Certificate

Issuer

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Not Before

30/07/2010, 07:33

Not After

30/07/2011, 07:33

Subject

CN=北京首都在线网络技术有限公司,O=北京首都在线网络技术有限公司,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:1e:44:a5:ec:be
Certificate

Issuer

CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE

Not Before

22/01/2004, 10:00

Not After

27/01/2017, 11:00

Subject

CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ca:1f:12:42:63:4b:3d:4b:d3:9d:be:f8:64:04:52:cc:b8:7c:49:93
Signer

Actual PE Digest

ca:1f:12:42:63:4b:3d:4b:d3:9d:be:f8:64:04:52:cc:b8:7c:49:93

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateMutexW
CloseHandle
TerminateProcess
OpenProcess
GetCurrentProcessId
GetVersionExW
Process32NextW
Process32FirstW
ReleaseMutex
WaitForSingleObject
LocalFree
GetCommandLineW
FreeLibrary
GetProcAddress
LoadLibraryW
CreateProcessW
GetModuleFileNameW
CreateToolhelp32Snapshot
Sleep
GetOEMCP
GetACP
SetStdHandle
GetStringTypeW
GetStringTypeA
GetCPInfo
IsBadCodePtr
EnterCriticalSection
LeaveCriticalSection
ExitProcess
InitializeCriticalSection
DeleteCriticalSection
WriteFile
MultiByteToWideChar
WideCharToMultiByte
ExpandEnvironmentStringsW
SetCurrentDirectoryW
CreateDirectoryW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
CopyFileW
FlushFileBuffers
SetFilePointer
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetCurrentProcess
GetModuleHandleA
GetStartupInfoW
GetVersion
RtlUnwind
InterlockedDecrement
InterlockedIncrement
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
HeapReAlloc
HeapSize
VirtualAlloc
IsBadWritePtr
LoadLibraryA
SetUnhandledExceptionFilter
IsBadReadPtr

user32

FindWindowExW
ShowWindow
wsprintfW
MessageBoxW
GetWindow
FindWindowW
SendMessageW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
CloseWindow

shell32

ShellExecuteW
CommandLineToArgvW
SHFileOperationW

ole32

CoInitialize
CoCreateInstance
CoUninitialize

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$TEMP/maxthon_qingqing.exe
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b3:9e:c9:3f:bf:19:bd:90:d4:ce:4e:fd:aa:ba:74:bf:15:1c:c9:0e
Signer

Actual PE Digest

b3:9e:c9:3f:bf:19:bd:90:d4:ce:4e:fd:aa:ba:74:bf:15:1c:c9:0e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/FindProcDLL.dll
.dll windows:4 windows x86 arch:x86

8df26927f8978d4eb40ff179c0aa961b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
lstrcmpA
OpenProcess
lstrcpyA
LoadLibraryA
CloseHandle
FreeLibrary
GetVersionExA
lstrlenA
GlobalFree

user32

wsprintfA

Exports

Exports

FindProc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/install_data/InstallLang/en.ini
$PLUGINSDIR/install_data/InstallLang/zh-cn.ini
$PLUGINSDIR/install_data/License.txt
$PLUGINSDIR/install_data/License_cn.txt
$PLUGINSDIR/install_data/Mx2Uninstall.exe
.exe windows:4 windows x86 arch:x86

f6ec26f2cfbd88efc00ba02239ffc2e0

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f5:e0:07:cb:f0:23:44:67:d4:39:27:8a:7d:8b:6b:8c:bb:be:23:66
Signer

Actual PE Digest

f5:e0:07:cb:f0:23:44:67:d4:39:27:8a:7d:8b:6b:8c:bb:be:23:66

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
SetCurrentDirectoryA
CreateDirectoryA
GetTempPathA
GetModuleFileNameA
GetLastError
CreateProcessA
FreeResource
CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetStringTypeA
LCMapStringW
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
RaiseException
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
SetFilePointer
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
SetConsoleCtrlHandler
FlushFileBuffers
MultiByteToWideChar
LCMapStringA
GetStringTypeW

shell32

SHFileOperationA

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 268KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/install_data/MxHttpRq.dll
.dll windows:4 windows x86 arch:x86

0235c9ce0cd883ac81f61a214f75c4a8

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a8:21:02:6c:95:0c:4a:90:d9:eb:64:3b:ae:4e:bd:d6:9c:6f:b4:3a
Signer

Actual PE Digest

a8:21:02:6c:95:0c:4a:90:d9:eb:64:3b:ae:4e:bd:d6:9c:6f:b4:3a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
GetLastError
SystemTimeToFileTime
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
HeapDestroy
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
InitializeCriticalSection
GetLocalTime
CreateEventA
CloseHandle
WriteFile
SetFilePointer
DeleteFileA
CreateFileA
InterlockedIncrement
OutputDebugStringA
ReadFile
GetFileSize
ResetEvent
WaitForMultipleObjects
SetEvent
DebugBreak
InterlockedExchangeAdd
InterlockedExchange
TerminateThread
CreateThread
WaitForSingleObject
CompareStringW
CompareStringA
GetLocaleInfoW
SetConsoleCtrlHandler
SetStdHandle
LoadLibraryA
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
SetUnhandledExceptionFilter
FlushFileBuffers
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
GetProcAddress
GetOEMCP
GetACP
Sleep
RtlUnwind
HeapFree
TlsSetValue
TlsGetValue
ExitThread
GetTimeZoneInformation
GetSystemTime
GetCommandLineA
GetVersion
RaiseException
ExitProcess
FatalAppExitA
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
TlsAlloc
TlsFree
SetLastError
GetCurrentThread
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
SetEnvironmentVariableA

user32

RegisterWindowMessageA
CharNextA
CharLowerA
SendMessageA
wvsprintfA
LoadStringA
IsWindow
DestroyWindow

wininet

InternetCanonicalizeUrlW
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpQueryInfoA
InternetCloseHandle
InternetCanonicalizeUrlA
InternetCrackUrlA
HttpSendRequestA
HttpSendRequestExA
HttpAddRequestHeadersA
InternetReadFileExA
InternetWriteFile
HttpEndRequestA
InternetSetStatusCallback

winmm

timeGetTime

shlwapi

PathCreateFromUrlW

Exports

Exports

Abort
AbortAll
AddHeader
CloseAsynClientHandle
CreateAsynHttpClient
Finalize
GetContentType
GetDataLengthLimit
GetDownloadData
GetEtag
GetGroupID
GetLastModified
GetNamedDataLength
GetPara
GetRequestHeaderValue
GetResponseCode
GetResponseHeaderValue
GetTotalReadDataLength
GetURL
Init
MxHttpRequest
MxHttpRequestByCallBack
SetAutoClose
SetDataLengthLimit
SetNoCache
SetNoMemory
SetPara
SetTimeout
SetTotalThreadCount
SetlocalPath

Sections

.text
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/install_data/MxInstall.exe
.exe windows:4 windows x86 arch:x86

0ff0dc578868a1bb28c1274eaf5f9237

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5c:89:08:87:16:f1:b9:de:eb:af:77:b2:eb:c1:24:5e:e4:02:90:6c
Signer

Actual PE Digest

5c:89:08:87:16:f1:b9:de:eb:af:77:b2:eb:c1:24:5e:e4:02:90:6c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesW
FindClose
FindFirstFileW
lstrlenW
lstrcpyW
OpenProcess
CreateProcessW
TerminateProcess
CreateThread
GetPrivateProfileStringW
WaitForSingleObject
WritePrivateProfileStringW
HeapFree
HeapAlloc
GetProcessHeap
GetPrivateProfileIntW
SizeofResource
LockResource
LoadResource
FindResourceW
lstrcpynW
UnmapViewOfFile
FreeLibrary
LoadLibraryExW
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetFileSize
CreateFileW
ReadFile
AllocConsole
MultiByteToWideChar
WideCharToMultiByte
FindNextFileW
SetCurrentDirectoryW
GetCurrentProcess
LoadLibraryW
Process32NextW
Process32FirstW
GetCurrentProcessId
CreateToolhelp32Snapshot
GetModuleFileNameW
LeaveCriticalSection
GetCurrentThreadId
MoveFileW
GetUserDefaultLCID
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
FlushInstructionCache
SetStdHandle
SetConsoleCtrlHandler
LoadLibraryA
GetProcAddress
GetStringTypeW
GetStringTypeA
FlushFileBuffers
CreateFileA
SetFilePointer
IsBadCodePtr
IsBadReadPtr
WriteFile
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
CompareStringW
CompareStringA
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
HeapSize
ExitProcess
GetVersion
GetStartupInfoW
GetFileAttributesW
CreateDirectoryW
lstrcatW
GetCurrentDirectoryW
DeleteFileW
CopyFileW
Sleep
GetDiskFreeSpaceExW
GetVersionExW
CreateMutexA
GetLastError
GetFullPathNameW
EnterCriticalSection
CloseHandle
GetModuleHandleA
HeapReAlloc
RaiseException
RtlUnwind
SetEndOfFile

user32

SetWindowPos
MapWindowPoints
GetClientRect
GetMonitorInfoW
MonitorFromWindow
PostMessageW
SetTimer
KillTimer
GetWindowRect
GetWindow
GetParent
GetWindowLongW
GetClassInfoExW
LoadCursorW
RegisterClassExW
DestroyWindow
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
wsprintfW
CallWindowProcW
SetWindowLongW
DefWindowProcW
RegisterWindowMessageA
CreateWindowExW
SystemParametersInfoW
IsZoomed
FindWindowW
IsWindow
GetWindowThreadProcessId
PostQuitMessage
ShowWindow
MessageBoxW
PostThreadMessageW
LoadImageW
SendMessageW
SetWindowTextW

advapi32

OpenProcessToken
DuplicateTokenEx
GetLengthSid
SetTokenInformation
CreateProcessAsUserW
RegCreateKeyExW
RegOpenKeyW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyW
RegSetValueExW
RegCloseKey
GetUserNameW

shell32

SHBrowseForFolderW
SHGetSpecialFolderPathW
ShellExecuteW
SHFileOperationW
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysFreeString

mxtool

CreateMxZipObj
MxFree

mxui

HTMLayoutLoadHtml
HTMLayout_UnuseElement
HTMLayout_UseElement
HTMLayoutGetRootElement
HTMLayoutGetElementInnerText16
HTMLayoutGetAttributeByName
HTMLayoutSetupDebugOutput
HTMLayoutSetElementInnerText16
HTMLayoutUpdateElementEx
HTMLayoutSetStyleAttribute
HTMLayoutSetElementState
HTMLayoutGetElementState
HTMLayoutVisitElements
HTMLayoutSetAttributeByName
HTMLayoutSetElementHtml
HTMLayoutGetElementHtml
ValueIntData
HTMLayoutUpdateElement
HTMLayoutCallBehaviorMethod
ValueClear
HTMLayoutDataReady
HTMLayoutLoadFile
HTMLayoutCombineURL
ValueInit
HTMLayoutSetMediaType
HTMLayoutSetCallback
HTMLayoutClassNameW
HTMLayoutLoadHtmlEx
ValueIntDataSet
ValueToString
ValueCopy
ValueStringData
HTMLayoutSelectElements
HTMLayoutGetNthAttribute
HTMLayoutGetAttributeCount
HTMLayoutProcND
HTMLayoutWindowAttachEventHandler

shlwapi

PathIsDirectoryW
PathCompactPathExW
PathCreateFromUrlW
PathFileExistsW
PathGetDriveNumberW

wininet

InternetCombineUrlW
InternetCanonicalizeUrlW

mxhttprq

CreateAsynHttpClient
MxHttpRequestByCallBack
GetResponseCode
MxHttpRequest
Finalize
GetDownloadData
Init

psapi

GetModuleFileNameExW
EnumProcessModules

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

iphlpapi

GetAdaptersInfo

netapi32

Netbios

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/install_data/MxUI.dll
.dll windows:4 windows x86 arch:x86

e03dbf1d9b2548717e2b645453b93825

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3f:21:af:bd:ae:1e:90:8c:fb:d5:fc:2e:79:b8:43:5e:3a:26:83:fc
Signer

Actual PE Digest

3f:21:af:bd:ae:1e:90:8c:fb:d5:fc:2e:79:b8:43:5e:3a:26:83:fc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsBadReadPtr
GetOEMCP
GetACP
ReadFile
SetUnhandledExceptionFilter
FlushFileBuffers
GetTimeZoneInformation
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
WriteFile
FatalAppExitA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleHandleA
GetCurrentThread
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
HeapSize
HeapReAlloc
GetCurrentProcess
IsBadCodePtr
SetStdHandle
CreateFileA
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
SetConsoleCtrlHandler
CompareStringA
CompareStringW
SetEnvironmentVariableA
FindResourceW
FindResourceA
LoadResource
LockResource
SizeofResource
Sleep
FreeLibrary
LoadLibraryA
GetProcAddress
GetTempPathA
GetTempFileNameA
GetLocaleInfoA
GetCurrentThreadId
GetTickCount
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
LeaveCriticalSection
TerminateProcess
ExitProcess
RaiseException
GetVersion
GetCommandLineA
HeapAlloc
DeleteFileA
HeapFree
RtlUnwind
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
MulDiv
CloseHandle
SetEvent
InterlockedExchange
WideCharToMultiByte
SystemTimeToFileTime
GetLocalTime
GetSystemTime
GetDateFormatW
FileTimeToSystemTime
GetThreadLocale
GetLocaleInfoW
GetLastError
GetVersionExA
CreateThread
CreateEventA
ExitThread
WaitForSingleObject
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileW
SetEndOfFile
SetFilePointer
UnmapViewOfFile
FlushViewOfFile
GetCPInfo
SetThreadLocale
GetNumberFormatW
GetCurrencyFormatW
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleFileNameA
GetSystemDefaultLCID

user32

GetAncestor
GetDesktopWindow
UnregisterClassW
RegisterClassW
RegisterClassExW
UnregisterClassA
RegisterClassExA
IsWindowVisible
GetActiveWindow
CreateWindowExW
RegisterWindowMessageA
SetForegroundWindow
GetDC
ScrollDC
ScrollWindowEx
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
SetScrollInfo
ShowWindow
PostQuitMessage
SystemParametersInfoA
EndDialog
GetWindow
CreateWindowExA
SetWindowTextA
SetWindowPos
DialogBoxIndirectParamA
DestroyWindow
AdjustWindowRectEx
GetMessageA
TranslateMessage
DispatchMessageA
LoadCursorFromFileA
DestroyIcon
SetCursor
LoadCursorA
CreateCursor
DefWindowProcW
IsWindowEnabled
GetWindowPlacement
MoveWindow
PostMessageA
GetWindowThreadProcessId
WindowFromPoint
GetCursorPos
GetFocus
DrawFocusRect
DrawTextA
DrawTextW
InvertRect
CharLowerBuffW
CharUpperBuffW
GetSysColorBrush
DrawEdge
DrawFrameControl
DrawIconEx
CreateIconFromResourceEx
GetKeyState
MessageBeep
RegisterClipboardFormatW
CloseClipboard
EmptyClipboard
OpenClipboard
EnumClipboardFormats
CountClipboardFormats
SetClipboardData
GetClipboardData
IsClipboardFormatAvailable
LoadStringW
GetCaretBlinkTime
GetDoubleClickTime
GetScrollInfo
GetWindowDC
InflateRect
OffsetRect
GetClassLongA
FillRect
ReleaseDC
GetAsyncKeyState
GetSysColor
UpdateWindow
GetDlgCtrlID
SetTimer
ClientToScreen
GetSystemMetrics
GetCapture
ReleaseCapture
GetClientRect
BeginPaint
EndPaint
InvalidateRect
ScreenToClient
DefWindowProcA
IsWindowUnicode
SetWindowLongA
SetCapture
SetFocus
PeekMessageA
GetParent
IsWindow
MapWindowPoints
GetWindowLongA
GetWindowRect
SendMessageA
NotifyWinEvent
KillTimer

gdi32

CombineRgn
ExcludeClipRect
SetTextColor
SetBkColor
CreateSolidBrush
SetWindowOrgEx
BitBlt
DeleteDC
CreateRectRgnIndirect
LPtoDP
CreateCompatibleBitmap
SelectObject
GetStockObject
GetMapMode
SetMapMode
GetWindowExtEx
SetWindowExtEx
GetTextMetricsA
GetDeviceCaps
IntersectClipRect
CreateCompatibleDC
GetKerningPairsA
GetGlyphOutlineW
GetCurrentObject
SetDIBitsToDevice
CreateDIBPatternBrushPt
StretchBlt
SetStretchBltMode
StretchDIBits
CreateDIBSection
GetTextAlign
GetPixel
SetPixel
RoundRect
CreateRectRgn
SelectClipRgn
CreateBitmap
CreatePatternBrush
TextOutA
TextOutW
GetTextExtentPoint32A
GetTextExtentPoint32W
RectVisible
PatBlt
Rectangle
GetWindowOrgEx
CreateHatchBrush
SetBrushOrgEx
CreatePen
SetTextAlign
SetBkMode
EnumFontFamiliesExW
EnumFontFamiliesExA
CreateFontA
GetViewportExtEx
SetViewportExtEx
DPtoLP
GetObjectA
GetClipBox
SaveDC
SetViewportOrgEx
SetLayout
RestoreDC
CreateDCA
DeleteObject

ole32

CoInitialize
CoCreateGuid

oleaut32

SysAllocStringLen

oleacc

LresultFromObject
AccessibleObjectFromWindow

winmm

timeGetDevCaps
timeSetEvent
timeGetTime
timeKillEvent

advapi32

IsTextUnicode

comctl32

ImageList_Draw
ImageList_GetIconSize

shell32

SHGetSpecialFolderPathA
SHGetFileInfoW

wininet

InternetCombineUrlA
InternetConnectA
HttpOpenRequestA
InternetCloseHandle
InternetReadFile
InternetSetOptionA
InternetQueryOptionA
InternetErrorDlg
HttpSendRequestA
HttpQueryInfoA
InternetOpenA
InternetGetLastResponseInfoA

msimg32

AlphaBlend

Exports

Exports

?HTMLayoutEnumResourcesEx@@YGIPAUHWND__@@P6GHPBGPBDPBEKPAX@ZPAPAX@Z
HTMLayoutAnimateElement
HTMLayoutAppendMasterCSS
HTMLayoutAttachEventHandler
HTMLayoutAttachEventHandlerEx
HTMLayoutCallBehaviorMethod
HTMLayoutClassNameA
HTMLayoutClassNameW
HTMLayoutClearAttributes
HTMLayoutClipboardCopy
HTMLayoutCloneElement
HTMLayoutCombineURL
HTMLayoutCommitUpdates
HTMLayoutControlGetType
HTMLayoutControlGetValue
HTMLayoutControlSetValue
HTMLayoutCreateElement
HTMLayoutDataReady
HTMLayoutDataReadyAsync
HTMLayoutDeclareElementType
HTMLayoutDeleteElement
HTMLayoutDetachElement
HTMLayoutDetachEventHandler
HTMLayoutDialog
HTMLayoutElementGetExpando
HTMLayoutElementSetExpando
HTMLayoutEnumElementStyles
HTMLayoutEnumResources
HTMLayoutEnumerate
HTMLayoutFindElement
HTMLayoutGetAttributeByName
HTMLayoutGetAttributeCount
HTMLayoutGetCharacterRect
HTMLayoutGetChildrenCount
HTMLayoutGetElementByUID
HTMLayoutGetElementHtml
HTMLayoutGetElementHwnd
HTMLayoutGetElementIndex
HTMLayoutGetElementInnerText
HTMLayoutGetElementInnerText16
HTMLayoutGetElementIntrinsicHeight
HTMLayoutGetElementIntrinsicWidths
HTMLayoutGetElementLocation
HTMLayoutGetElementState
HTMLayoutGetElementText
HTMLayoutGetElementType
HTMLayoutGetElementUID
HTMLayoutGetFocusElement
HTMLayoutGetGraphin
HTMLayoutGetMinHeight
HTMLayoutGetMinWidth
HTMLayoutGetNthAttribute
HTMLayoutGetNthChild
HTMLayoutGetParentElement
HTMLayoutGetRootElement
HTMLayoutGetScrollInfo
HTMLayoutGetSelectedHTML
HTMLayoutGetStyleAttribute
HTMLayoutHidePopup
HTMLayoutHttpRequest
HTMLayoutInit
HTMLayoutInsertElement
HTMLayoutIsElementEnabled
HTMLayoutIsElementVisible
HTMLayoutLoadFile
HTMLayoutLoadHtml
HTMLayoutLoadHtmlEx
HTMLayoutMoveElement
HTMLayoutMoveElementEx
HTMLayoutParseValue
HTMLayoutPostEvent
HTMLayoutProc
HTMLayoutProcND
HTMLayoutProcW
HTMLayoutProcessUIEvent
HTMLayoutRangeAdvancePos
HTMLayoutRangeCreate
HTMLayoutRangeFromPositions
HTMLayoutRangeFromSelection
HTMLayoutRangeInsertHtml
HTMLayoutRangeIsEmpty
HTMLayoutRangeRelease
HTMLayoutRangeReplace
HTMLayoutRangeToHtml
HTMLayoutRender
HTMLayoutRenderElement
HTMLayoutRequestElementData
HTMLayoutScrollToView
HTMLayoutSelectElements
HTMLayoutSelectElementsW
HTMLayoutSelectParent
HTMLayoutSelectParentW
HTMLayoutSelectionExist
HTMLayoutSendEvent
HTMLayoutSetAttributeByName
HTMLayoutSetCSS
HTMLayoutSetCallback
HTMLayoutSetCapture
HTMLayoutSetDataLoader
HTMLayoutSetElementHtml
HTMLayoutSetElementInnerText
HTMLayoutSetElementInnerText16
HTMLayoutSetElementState
HTMLayoutSetEventRoot
HTMLayoutSetHttpHeaders
HTMLayoutSetMasterCSS
HTMLayoutSetMediaType
HTMLayoutSetMode
HTMLayoutSetOption
HTMLayoutSetScrollPos
HTMLayoutSetStyleAttribute
HTMLayoutSetTimer
HTMLayoutSetTimerEx
HTMLayoutSetupDebugOutput
HTMLayoutShowPopup
HTMLayoutShowPopupAt
HTMLayoutSortElements
HTMLayoutSwapElements
HTMLayoutTrackPopupAt
HTMLayoutTraverseUIEvent
HTMLayoutUpdateElement
HTMLayoutUpdateElementEx
HTMLayoutUpdateView
HTMLayoutUpdateWindow
HTMLayoutVisitElements
HTMLayoutWindowAttachEventHandler
HTMLayoutWindowDetachEventHandler
HTMLayout_UnuseElement
HTMLayout_UseElement
HTMLiteAdvanceFocus
HTMLiteAttachEventHandler
HTMLiteCreateInstance
HTMLiteDestroyInstance
HTMLiteDetachEventHandler
HTMLiteFindElement
HTMLiteGetDocumentMinHeight
HTMLiteGetDocumentMinWidth
HTMLiteGetElementHTMLITE
HTMLiteGetFocusElement
HTMLiteGetNextFocusable
HTMLiteGetRootElement
HTMLiteGetTag
HTMLiteLoadHtmlFromFile
HTMLiteLoadHtmlFromMemory
HTMLiteMeasure
HTMLiteRender
HTMLiteRenderOnBitmap
HTMLiteSetCallback
HTMLiteSetDataReady
HTMLiteSetDataReadyAsync
HTMLiteSetMediaType
HTMLiteSetTag
HTMLiteTraverseUIEvent
HTMPrintCreateInstance
HTMPrintDestroyInstance
HTMPrintGetDocumentHeight
HTMPrintGetDocumentMinWidth
HTMPrintGetRootElement
HTMPrintGetTag
HTMPrintLoadHtmlFromFile
HTMPrintLoadHtmlFromFileW
HTMPrintLoadHtmlFromMemory
HTMPrintMeasure
HTMPrintRender
HTMPrintSetDataReady
HTMPrintSetHyperlinkAreaCallback
HTMPrintSetLoadDataCallback
HTMPrintSetMediaType
HTMPrintSetNextPageCallback
HTMPrintSetTag
ValueBinaryData
ValueBinaryDataSet
ValueClear
ValueCompare
ValueCopy
ValueElementsCount
ValueFloatData
ValueFloatDataSet
ValueFromString
ValueGetValueOfKey
ValueInit
ValueInt64Data
ValueInt64DataSet
ValueIntData
ValueIntDataSet
ValueInvoke
ValueNthElementKey
ValueNthElementValue
ValueNthElementValueSet
ValueSetValueToKey
ValueStringData
ValueStringDataSet
ValueToString
ValueType
_HTMLayoutUrlEscape@16
_HTMLayoutUrlUnescape@12
_HTMLiteGetElementByUID@12
_HTMPrintSetCallback@12
_ValueEnumElements@12
_ValueIsolate@4

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/install_data/maxzlib.dll
.dll windows:4 windows x86 arch:x86

58ebe63bde2e8d9e022f7f601830ac71

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:02:99:22:7c:f0:27:e8:e1:2b:bb:7a:75:d2:98:8b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

16/06/2008, 00:00

Not After

15/07/2009, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

66:9e:fd:ce:66:08:bf:19:23:90:9d:36:f2:12:9d:fa:7a:ac:c8:96
Signer

Actual PE Digest

66:9e:fd:ce:66:08:bf:19:23:90:9d:36:f2:12:9d:fa:7a:ac:c8:96

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_fdopen
fopen
_errno
malloc
sprintf
fwrite
fread
fclose
free
fprintf
fflush
fseek
fputc
strerror
clearerr
_initterm
_adjust_fdiv
_vsnprintf
ftell

kernel32

DisableThreadLibraryCalls

Exports

Exports

adler32
compress
compress2
compressBound
crc32
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
get_crc_table
gzclearerr
gzclose
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateInit2_
inflateInit_
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
uncompress
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/install_data/module_config.ini
$PLUGINSDIR/install_data/mxtool.dll
.dll windows:4 windows x86 arch:x86

1e1b4359ecfd77fe0126157cf089cd8d

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6f:27:41:b6:af:4a:6c:58:eb:1a:da:61:3a:d9:5a:bc:b7:d6:74:36
Signer

Actual PE Digest

6f:27:41:b6:af:4a:6c:58:eb:1a:da:61:3a:d9:5a:bc:b7:d6:74:36

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

maxzlib

get_crc_table
deflateEnd
deflate
deflateInit2_
inflateEnd
crc32
inflate
inflateInit2_

mfc42u

ord3171
ord6381
ord353
ord538
ord861
ord2795
ord3502
ord3175
ord6006
ord5438
ord3313
ord5647
ord3122
ord3611
ord2385
ord350
ord1971
ord922
ord535
ord858
ord6921
ord5596
ord940
ord942
ord6919
ord4272
ord4124
ord3178
ord5446
ord6390
ord2836
ord5436
ord6379
ord2099
ord1824
ord349
ord2910
ord1825
ord354
ord665
ord6920
ord6918
ord5568
ord6466
ord1560
ord4078
ord268
ord6867
ord5180
ord2593
ord5769
ord4172
ord6308
ord958
ord2912
ord941
ord2810
ord2754
ord5603
ord1083
ord823
ord2606
ord773
ord3658
ord540
ord501
ord800
ord3697
ord825
ord1194
ord269
ord826
ord600
ord1571
ord1250
ord1248
ord1563
ord1240
ord342
ord1179
ord1570
ord1165
ord1568
ord1173
ord4197
ord1115

msvcrt

_onexit
__dllonexit
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
wcscpy
strlen
??0exception@@QAE@ABV0@@Z
_ftol
ceil
_wcsicoll
_wcsicmp
wcscmp
wcslen
_waccess
_wchdir
_wutime
_wstat
_wsplitpath
realloc
malloc
localtime
mktime
_errno
wcsncpy
memmove
memcmp
qsort
wcscoll
abs
srand
rand
free
_purecall
time
memcpy
_CxxThrowException
__CxxFrameHandler
memset

kernel32

DeleteFileW
EnterCriticalSection
GetTickCount
lstrcpyW
GetModuleFileNameW
GetModuleHandleW
LocalAlloc
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
MoveFileW
MapViewOfFile
CreateFileMappingW
CloseHandle
UnmapViewOfFile
LocalFree
FormatMessageW
GetLastError
GetDiskFreeSpaceW
GetFileSize
CreateFileW
GetTempFileNameW
GetTempPathW
GetCurrentDirectoryW
SetFileAttributesW
GetFileAttributesW
GetDriveTypeW
SetVolumeLabelW
LeaveCriticalSection

user32

GetWindowRect
KillTimer
OemToCharBuffA
CharToOemBuffA
RegisterWindowMessageA
IsWindow
SetWindowPos
SetTimer
PostMessageW

msvcp60

??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
?str@?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_7out_of_range@std@@6B@
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??_D?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Exports

Exports

CreateAMObj
CreateMxZipObj
DeleteAMObj
MxFree

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Default/Filter/template.xml
$PLUGINSDIR/mx2_data/Default/Filter/template0x0804.xml
$PLUGINSDIR/mx2_data/Default/config/Config.ini
$PLUGINSDIR/mx2_data/Default/config/MFA2.dat
.xml
$PLUGINSDIR/mx2_data/Default/config/MFA2.dat.bak
.xml
$PLUGINSDIR/mx2_data/Default/config/ProxyConfig.xml
$PLUGINSDIR/mx2_data/Default/config/SiteList.xml
$PLUGINSDIR/mx2_data/Default/config/System.dat
$PLUGINSDIR/mx2_data/Default/config/dmgr.ini
$PLUGINSDIR/mx2_data/Favicons/4399.ico
$PLUGINSDIR/mx2_data/Favicons/EABCDIFOCCAMFJCAECELCMBPCN.ico
$PLUGINSDIR/mx2_data/Favicons/EABCDIFOCDBNFDCCFGALGBBDCPAA.ico
$PLUGINSDIR/mx2_data/Favicons/EABCDIFOCHACFPCDFLAAGBBDCO.ico
$PLUGINSDIR/mx2_data/Favicons/EABCDIFOHBFOADHNAEELCMBPCN.ico
$PLUGINSDIR/mx2_data/Favicons/EHAMCBBECBACBOCMECAKCNBBCOEDEECFFIAHCOBPGOAOFPCJ.ico
$PLUGINSDIR/mx2_data/Favicons/FOELCCBBDIBJFICLFJELCMBO.ico
$PLUGINSDIR/mx2_data/Language/Chinese/language.ini
$PLUGINSDIR/mx2_data/Language/English/Language.ini
$PLUGINSDIR/mx2_data/Language/InstallLang/en.ini
$PLUGINSDIR/mx2_data/Language/InstallLang/zh-cn.ini
$PLUGINSDIR/mx2_data/License_cn.txt
$PLUGINSDIR/mx2_data/Maxthon.exe
.exe windows:4 windows x86 arch:x86

8adb670ccded0796f27a757147e23aaf

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ed:9c:2d:51:dd:ce:01:35:69:ec:5d:33:b0:59:9f:88:01:f1:c8:86
Signer

Actual PE Digest

ed:9c:2d:51:dd:ce:01:35:69:ec:5d:33:b0:59:9f:88:01:f1:c8:86

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpAddRequestHeadersW
HttpSendRequestExW
HttpOpenRequestW
InternetCloseHandle
InternetCrackUrlW
FindFirstUrlCacheEntryW
FindNextUrlCacheEntryW
FindCloseUrlCache
DeleteUrlCacheEntryW
InternetGetCookieW
InternetConnectW
InternetOpenW
GetUrlCacheEntryInfoW
InternetSetOptionW
InternetCombineUrlW
InternetWriteFile
InternetCanonicalizeUrlW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

atl

ord42

ws2_32

closesocket
gethostname
listen
bind
htons
inet_addr
socket
recv
accept
gethostbyname
WSACleanup
WSAStartup
WSACancelBlockingCall
inet_ntoa

iphlpapi

GetAdaptersInfo
GetTcpStatistics

netapi32

Netbios

imm32

ImmReleaseContext
ImmGetCandidateListCountW
ImmGetContext
ImmSetCompositionFontW
ImmSetCompositionWindow
ImmNotifyIME
ImmSetCandidateWindow
ImmAssociateContext
ImmGetOpenStatus
ImmIsIME
ImmGetCandidateListW

winmm

timeGetTime
PlaySoundW

rpcrt4

UuidCreate

mfc42u

ord4361
ord5340
ord4524
ord4538
ord5681
ord3269
ord439
ord5491
ord2078
ord6640
ord5024
ord2715
ord2382
ord3054
ord5094
ord5097
ord4461
ord4298
ord3345
ord975
ord5468
ord3398
ord2874
ord2873
ord4072
ord5233
ord2641
ord1658
ord4430
ord5248
ord4421
ord3364
ord3618
ord4237
ord4451
ord3701
ord5778
ord5777
ord4787
ord4331
ord4975
ord4146
ord5006
ord674
ord5278
ord4078
ord2444
ord6153
ord698
ord610
ord287
ord396
ord3432
ord1972
ord665
ord1971
ord6381
ord5180
ord354
ord6489
ord4053
ord3176
ord911
ord6135
ord5852
ord4182
ord5626
ord2440
ord5830
ord2036
ord3898
ord3806
ord6278
ord6168
ord6316
ord1112
ord1113
ord5438
ord3313
ord1644
ord2229
ord3397
ord2447
ord3579
ord543
ord803
ord613
ord289
ord1099
ord3696
ord5602
ord5856
ord812
ord559
ord2127
ord2680
ord1761
ord6375
ord1105
ord6874
ord5679
ord1085
ord5597
ord6867
ord6655
ord1560
ord268
ord798
ord1989
ord6403
ord6388
ord5188
ord533
ord2813
ord1567
ord4197
ord539
ord690
ord1980
ord688
ord5201
ord6055
ord389
ord3332
ord5261
ord4370
ord4847
ord4992
ord6048
ord1767
ord5276
ord4419
ord3592
ord324
ord4229
ord1594
ord6376
ord4704
ord941
ord702
ord400
ord5592
ord3436
ord915
ord5630
ord4186
ord860
ord3975
ord542
ord802
ord6654
ord4273
ord6565
ord4272
ord2769
ord2757
ord2289
ord2355
ord4029
ord6771
ord5857
ord3716
ord795
ord2294
ord6266
ord2385
ord5349
ord5352
ord920
ord3805
ord3633
ord2630
ord6466
ord1151
ord384
ord686
ord501
ord773
ord1782
ord4761
ord3514
ord6418
ord5164
ord5160
ord5161
ord5162
ord5165
ord5166
ord5225
ord5163
ord5183
ord5182
ord3789
ord2912
ord6421
ord6311
ord4175
ord6386
ord6423
ord3317
ord6009
ord5772
ord2596
ord3175
ord3178
ord3171
ord3504
ord604
ord1083
ord2754
ord276
ord5603
ord5042
ord2899
ord4475
ord1639
ord2117
ord2118
ord4896
ord5044
ord6420
ord1962
ord398
ord700
ord3434
ord913
ord4184
ord5628
ord5590
ord6190
ord4327
ord6921
ord6919
ord3087
ord3693
ord765
ord2637
ord4050
ord1771
ord1863
ord6138
ord2248
ord1940
ord2388
ord3341
ord5296
ord5299
ord4074
ord4693
ord5303
ord565
ord817
ord1202
ord2718
ord1216
ord6363
ord6419
ord699
ord397
ord4118
ord5627
ord912
ord4183
ord5605
ord5639
ord6773
ord5589
ord3433
ord692
ord4219
ord465
ord859
ord4280
ord6920
ord1683
ord4433
ord2046
ord807
ord956
ord1137
ord1191
ord2520
ord5284
ord4425
ord5845
ord4155
ord3810
ord3356
ord414
ord713
ord5801
ord857
ord1821
ord2293
ord5949
ord1764
ord6362
ord2405
ord2016
ord4214
ord2573
ord4395
ord3634
ord6139
ord3092
ord6004
ord3298
ord3282
ord6668
ord3909
ord6880
ord3995
ord4803
ord2362
ord6726
ord2403
ord2015
ord4213
ord2570
ord4392
ord3577
ord616
ord3312
ord6330
ord3626
ord683
ord2574
ord4396
ord3365
ord3635
ord693
ord1225
ord6898
ord3296
ord3993
ord3991
ord6918
ord2091
ord2809
ord6896
ord6003
ord6879
ord3281
ord3314
ord3605
ord2550
ord2579
ord4400
ord3389
ord3724
ord804
ord6777
ord4391
ord4638
ord4212
ord2568
ord3347
ord3572
ord283
ord6899
ord6699
ord2932
ord4055
ord1899
ord5155
ord5156
ord5154
ord4899
ord4736
ord4970
ord4942
ord4352
ord4371
ord4848
ord5283
ord4829
ord768
ord489
ord5886
ord4253
ord3694
ord3014
ord2508
ord361
ord4470
ord6732
ord6498
ord2291
ord6776
ord2478
ord4001
ord1869
ord3525
ord2431
ord1686
ord5614
ord994
ord4336
ord4681
ord4633
ord5670
ord2148
ord4850
ord4914
ord3128
ord5998
ord2129
ord1955
ord5207
ord2948
ord3863
ord5144
ord4699
ord4701
ord2871
ord2993
ord5645
ord4108
ord4655
ord4654
ord4762
ord4644
ord4897
ord4542
ord4515
ord4588
ord2640
ord4919
ord4924
ord4929
ord4653
ord4903
ord4902
ord4662
ord4661
ord4660
ord4642
ord4683
ord5017
ord4648
ord4637
ord4348
ord4774
ord4643
ord4631
ord4435
ord5054
ord4578
ord4365
ord4355
ord4350
ord4733
ord4735
ord4732
ord4403
ord4597
ord5002
ord4409
ord4986
ord4973
ord2480
ord3399
ord4533
ord4528
ord4943
ord2533
ord2949
ord2376
ord6366
ord2978
ord3143
ord3255
ord438
ord2981
ord3371
ord3075
ord4076
ord4618
ord5821
ord3714
ord423
ord3232
ord2719
ord2722
ord2721
ord3824
ord3941
ord2615
ord4244
ord1174
ord2679
ord2354
ord1834
ord529
ord796
ord2244
ord5996
ord2109
ord4493
ord4407

msvcrt

iswxdigit
iswalnum
iswspace
iswdigit
iswprint
iswalpha
rand
wcstod
_CIpow
_wcslwr
calloc
_stricmp
_itoa
_controlfp
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
strncmp
_vsnwprintf
??1exception@@UAE@XZ
__p___argc
__p___wargv
_putenv
wcsncmp
_ltow
strcmp
vswprintf
sprintf
strcat
_wcsnicmp
wcsrchr
swprintf
mktime
strncpy
_beginthreadex
wcsncpy
strtod
sscanf
realloc
localeconv
strcpy
_except_handler3
malloc
free
wcstol
time
_ftol
swscanf
wcscpy
wcschr
wcslen
strlen
??0exception@@QAE@ABV0@@Z
_CxxThrowException
memcpy
memmove
_wtoi
_wcsupr
wcsstr
_itow
abs
_wcsicmp
wcscmp
memcmp
memset
_purecall
__CxxFrameHandler
qsort

kernel32

RaiseException
CompareStringW
GetExitCodeThread
GetVersionExW
GetModuleHandleA
LoadLibraryA
lstrcmpA
EnumResourceTypesW
EnumResourceNamesW
EnumResourceLanguagesW
SetThreadPriority
CreateThread
GetStartupInfoW
FindResourceA
SetFilePointer
GetVolumeInformationW
GetFileAttributesExW
GetProcessHeap
HeapAlloc
HeapFree
GetTimeFormatW
GetDateFormatW
GlobalMemoryStatus
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetShortPathNameW
HeapDestroy
GetCommandLineW
GlobalAddAtomW
GlobalFindAtomW
TerminateProcess
IsBadReadPtr
IsBadWritePtr
CreateProcessW
ExpandEnvironmentStringsW
FindAtomW
GlobalDeleteAtom
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetEnvironmentVariableW
SetProcessWorkingSetSize
CreateFileW
ReleaseSemaphore
CreateSemaphoreW
GetWindowsDirectoryW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
GetLocalTime
GetCurrentDirectoryW
SetCurrentDirectoryW
GetTempFileNameW
GetUserDefaultLangID
GetSystemDefaultLangID
lstrcpynW
GetCurrentProcessId
QueryPerformanceFrequency
GetPrivateProfileStringW
GetTempPathW
QueryPerformanceCounter
CopyFileW
WideCharToMultiByte
FindResourceW
SizeofResource
LoadResource
LockResource
InitializeCriticalSectionAndSpinCount
GetVersion
lstrcpyA
CreateFileA
GetFileSize
ReadFile
WriteFile
lstrcpyW
lstrcmpW
Sleep
ResetEvent
lstrcmpiW
SetEvent
lstrcatW
CreateEventW
GetUserDefaultLCID
GetPrivateProfileIntW
WaitForSingleObject
TerminateThread
FindFirstFileW
FindNextFileW
FindClose
CreateDirectoryW
LocalFree
OpenProcess
FreeLibrary
CloseHandle
SetLastError
VirtualAlloc
GetLastError
SetThreadContext
GetThreadContext
FlushInstructionCache
ResumeThread
VirtualProtect
InterlockedCompareExchange
GetCurrentProcess
FormatMessageW
VirtualQuery
GetModuleFileNameW
GlobalSize
lstrlenA
LoadLibraryW
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
GlobalAlloc
InterlockedExchange
MulDiv
GetFileAttributesW
GetTickCount
GlobalLock
GlobalUnlock
GetCurrentThreadId
DeleteFileW
EnterCriticalSection
LeaveCriticalSection
lstrlenW
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc

user32

CreateAcceleratorTableW
CharUpperW
GetKeyboardLayoutList
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
CopyAcceleratorTableW
LoadAcceleratorsW
DestroyAcceleratorTable
GetMenuState
GetTabbedTextExtentW
CheckMenuItem
GetClipboardFormatNameW
GetActiveWindow
EqualRect
PostMessageW
GetKeyState
CopyRect
RegisterWindowMessageW
EnableWindow
DrawFrameControl
CallWindowProcW
LoadImageW
InvalidateRect
DrawIconEx
DestroyIcon
CopyIcon
DrawTextW
GetCursor
GetSysColorBrush
GetDoubleClickTime
ClientToScreen
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
SetCursorPos
GetClassLongW
CreateIconIndirect
GetIconInfo
GetMenuDefaultItem
IsDialogMessageW
IsClipboardFormatAvailable
GetWindowRgn
GetDlgCtrlID
GetNextDlgTabItem
IsMenu
DrawStateW
GetLastActivePopup
GrayStringW
TabbedTextOutW
ScreenToClient
OffsetRect
PtInRect
GetCursorPos
WindowFromPoint
SendMessageW
CallNextHookEx
SetMenuItemInfoW
SetWindowsHookExW
mouse_event
MessageBeep
ShowCaret
IsChild
LockWindowUpdate
GetDCEx
InvertRect
GetKeyboardLayout
ActivateKeyboardLayout
TranslateAcceleratorW
CharNextW
UnregisterClassW
WaitForInputIdle
MonitorFromPoint
BringWindowToTop
MsgWaitForMultipleObjects
FindWindowExW
IntersectRect
SetMenuDefaultItem
GetSystemMenu
GetMenu
GetAsyncKeyState
EnableMenuItem
DestroyMenu
TrackPopupMenu
GetTopWindow
FindWindowW
GetUpdateRect
BeginPaint
EndPaint
SetActiveWindow
SetMenu
InsertMenuW
LoadBitmapW
FillRect
MapVirtualKeyW
GetKeyNameTextW
RegisterHotKey
UnregisterHotKey
GetMessagePos
GetDlgItem
ModifyMenuW
GetMenuItemID
GetDesktopWindow
GetMenuItemCount
GetMenuItemInfoW
GetClassNameW
GetDlgItemTextW
SetDlgItemTextW
GetWindowTextW
GetCaretPos
EnumWindows
HideCaret
GetForegroundWindow
InSendMessage
LoadIconW
GetAncestor
GetMenuStringW
IsWindowEnabled
SetForegroundWindow
EnumThreadWindows
GetWindowThreadProcessId
TranslateMessage
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
ChildWindowFromPoint
LoadStringW
wsprintfW
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
GetWindowDC
SetWindowTextW
GetWindowLongW
SetWindowLongW
IsIconic
RegisterClassExW
DestroyWindow
CreateWindowExW
SendMessageTimeoutW
GetMessageExtraInfo
DrawFocusRect
SetRectEmpty
GetWindowPlacement
GetSystemMetrics
SetWindowRgn
MapWindowPoints
RegisterClipboardFormatW
DeleteMenu
RemoveMenu
SetRect
InflateRect
SetWindowPos
SetParent
MoveWindow
ShowWindow
IsRectEmpty
IsZoomed
SystemParametersInfoW
SetCapture
GetMessageW
GetCapture
DispatchMessageW
ReleaseCapture
IsWindowVisible
DrawEdge
IsWindow
RedrawWindow
GetParent
SetCursor
PeekMessageW
UpdateWindow
LoadMenuW
GetWindow
GetSubMenu
GetDC
ReleaseDC
UnionRect
CreatePopupMenu
AppendMenuW
GetFocus
SetFocus
SetLayeredWindowAttributes
GetSysColor
GetClientRect
KillTimer
SetTimer
GetWindowRect
GetClassInfoW
DefWindowProcW
LoadCursorW
RegisterWindowMessageA
CharLowerW
UnhookWindowsHookEx

gdi32

ExtCreateRegion
GetTextAlign
GetTextCharsetInfo
Ellipse
ExtFloodFill
CreatePatternBrush
CreatePolygonRgn
GetRgnBox
SetDIBits
GetDIBits
SetStretchBltMode
CreateBitmap
GetCurrentObject
PtInRegion
Polygon
EnumFontFamiliesExW
CreateDIBitmap
CreateDIBSection
CreateRectRgn
CombineRgn
GetWindowOrgEx
GetMapMode
SetBkColor
ExtTextOutW
RectVisible
GetBkColor
GetStockObject
GetObjectW
StretchBlt
DeleteObject
RoundRect
CreateRectRgnIndirect
CreateRoundRectRgn
SelectObject
GetDeviceCaps
GetBkMode
CreateFontIndirectW
GetTextMetricsW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateFontW
CreateSolidBrush
GetTextColor
SetTextColor
GetTextExtentPoint32W
GetBitmapBits
GetViewportOrgEx
GetPixel
PtVisible
CreatePen
PatBlt
TextOutW
DeleteDC
Escape
SetPixelV
SetPixel

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegEnumValueW
RegOpenKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegRestoreKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyW
SetNamedSecurityInfoA
RegCloseKey

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
DragQueryFileW
DragFinish
SHGetMalloc
SHChangeNotify
ShellExecuteExW
Shell_NotifyIconW
SHBrowseForFolderW
ShellExecuteW
SHFileOperationW
SHAppBarMessage
SHGetSpecialFolderPathW
SHGetFileInfoW

comctl32

ImageList_EndDrag
ImageList_GetIcon
_TrackMouseEvent
ImageList_DragMove
ImageList_BeginDrag
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_Destroy
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Add
ImageList_GetImageInfo
ImageList_Draw
PropertySheetW
ImageList_Remove
ImageList_Create
ImageList_ReplaceIcon

ole32

CoCreateInstance
CLSIDFromProgID
CreateStreamOnHGlobal
CoTaskMemAlloc
CLSIDFromString
CoRevokeClassObject
CoRegisterClassObject
StringFromCLSID
CoCreateGuid
StringFromGUID2
CoInitializeEx
CoMarshalInterThreadInterfaceInStream
CoTaskMemFree
CoUninitialize
CoGetInterfaceAndReleaseStream
CoLoadLibrary
OleRun
OleInitialize
OleUninitialize

oleaut32

LoadTypeLi
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysFreeString
LoadRegTypeLi
SysStringLen
VariantCopy
SysAllocString
VariantClear
SysAllocStringLen
SysAllocStringByteLen
SafeArrayPutElement
SafeArrayCreate
RegisterTypeLi
VariantInit
SysStringByteLen
SafeArrayDestroy
VariantChangeType
OleLoadPicturePath
VariantChangeTypeEx
GetErrorInfo

urlmon

RegisterBindStatusCallback
CoInternetCreateZoneManager
CoInternetCreateSecurityManager
CreateURLMoniker
URLDownloadToFileW

msvcp60

?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??_7out_of_range@std@@6B@
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIABV12@II@Z

gdiplus

GdipSetPenEndCap
GdipSetPenLineJoin
GdipDrawLineI
GdipDeletePen
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipImageRotateFlip
GdipDeleteGraphics
GdipDeleteBrush
GdipCreateFromHDC
GdipGetImagePixelFormat
GdipAlloc
GdipSetPenStartCap
GdipFree
GdipCreateTexture
GdipFillRectangleI
GdipDrawImageRectI
GdipGetImageWidth
GdipGetImageHeight
GdipDisposeImage
GdipCloneBitmapAreaI
GdipCloneImage
GdipDrawImageI
GdipCreateHICONFromBitmap
GdipGetImageThumbnail
GdipCreateBitmapFromFile
GdipCreatePen1
GdipDrawImageRectRectI
GdipCreateBitmapFromFileICM
GdipSetSmoothingMode
GdipCreateFromHWND
GdipCreateFromHWNDICM
GdipFlush
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipReleaseDC
GdipGetDC
GdiplusStartup
GdiplusShutdown
GdipCloneBrush
GdipCreateHBITMAPFromBitmap

mxhttprq

Finalize
GetResponseCode
GetDownloadData
MxHttpRequestByCallBack
Init
CreateAsynHttpClient
SetAutoClose
SetNoMemory
SetlocalPath

shlwapi

PathIsNetworkPathW
UrlUnescapeW
StrStrW
StrCmpW
PathCompactPathExW
PathCreateFromUrlW
PathFileExistsW
SHDeleteKeyW
StrFormatByteSizeW
PathCombineW
PathRemoveFileSpecW

winhttp

WinHttpOpen
WinHttpConnect
WinHttpOpenRequest
WinHttpSendRequest
WinHttpQueryOption
WinHttpCloseHandle

crypt32

CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertNameToStrW
CertGetCertificateChain
CertFindExtension
CryptDecodeObjectEx
CertFreeCertificateContext
CryptHashCertificate

psapi

GetModuleFileNameExW

mxproxy2

?DeleteProxy2Obj@@YAXPAPAX@Z
?CreateProxy2Obj@@YA_NPAPAX@Z

mxui

HTMLayoutGetChildrenCount
HTMLayoutSetElementState
HTMLayoutGetNthChild
HTMLayoutGetElementLocation
HTMLayoutDataReady
HTMLayoutProcND
HTMLayoutGetParentElement
HTMLayoutSetElementInnerText16
HTMLayoutAttachEventHandlerEx
HTMLayoutGetAttributeByName
HTMLayoutGetRootElement
HTMLayout_UseElement
HTMLayoutSetAttributeByName
HTMLayoutUpdateElementEx
HTMLayout_UnuseElement
HTMLayoutUpdateElement
HTMLayoutLoadHtml
HTMLayoutSetElementHtml
HTMLayoutSelectElementsW
HTMLayoutSetCallback
HTMLayoutVisitElements
HTMLayoutGetElementIndex
HTMLayoutScrollToView

mxaccount

DeleteMxAccount
CreateMxAccount

mxpp

CreatePpObj
DeletePpObj

Exports

Exports

?interfaceMap@CCustomControlSite@@1UAFX_INTERFACEMAP@@B

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 420KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 824KB - Virtual size: 823KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 220KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxCapScr/MxCapScr.dll
.dll windows:4 windows x86 arch:x86

d5a30c269a32ff5b107adb055a998090

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

85:ff:c4:ae:8c:02:75:9a:6a:02:fa:f7:33:6c:b4:05:54:2c:0b:a0
Signer

Actual PE Digest

85:ff:c4:ae:8c:02:75:9a:6a:02:fa:f7:33:6c:b4:05:54:2c:0b:a0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CloseHandle
WaitForSingleObject
GlobalFree
FreeResource
GlobalUnlock
GlobalAlloc
GlobalSize
LockResource
SizeofResource
LoadResource
FindResourceW
GlobalLock
FreeLibrary
LoadLibraryA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
ReadFile
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
FlushFileBuffers
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
SetStdHandle
SetConsoleCtrlHandler
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
SetFilePointer
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
FatalAppExitA
SetUnhandledExceptionFilter
GetModuleHandleA
HeapSize
HeapAlloc
HeapReAlloc
GetCurrentProcess
TerminateProcess
ExitProcess
GetCurrentThread
TlsFree
TlsAlloc
HeapFree
GetVersion
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WritePrivateProfileStringW
GetPrivateProfileStringW
GetFileAttributesW
SetLastError
GetModuleHandleW
GetCurrentThreadId
MultiByteToWideChar
GetProcAddress
GetCommandLineA
ExitThread
TlsGetValue
TlsSetValue
CreateThread
GetLastError
RaiseException
GetLocalTime
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
Sleep
SetEnvironmentVariableA

user32

GetSystemMetrics
DefWindowProcW
RedrawWindow
ShowCursor
SetCursor
LoadCursorW
EndPaint
BeginPaint
DestroyWindow
GetCursorPos
PostQuitMessage
GetDC
SetParent
GetWindowRect
InvalidateRect
UnhookWindowsHookEx
GetWindowTextW
IsWindow
WindowFromPoint
SetWindowsHookExW
CallNextHookEx
PostThreadMessageW
GetWindowDC
RegisterClassExW
UpdateWindow
GetDesktopWindow
SetWindowTextW
EnableWindow
GetDlgItem
IsDlgButtonChecked
GetDlgItemTextW
SetDlgItemTextW
CheckDlgButton
SendMessageW
MessageBoxW
EnumChildWindows
EndDialog
CreateDialogParamW
GetClientRect
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
PostMessageW
SetTimer
SetWindowLongW
GetWindowLongW
CreateWindowExW
ShowWindow
GetForegroundWindow
SetWindowPos
GetMessageW
LoadStringW
DispatchMessageW
UnregisterClassW
LoadAcceleratorsW
TranslateMessage
TranslateAcceleratorW

gdi32

SelectObject
DeleteObject
GetDeviceCaps
BitBlt
StretchBlt
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap

comdlg32

GetSaveFileNameW

shell32

SHGetPathFromIDListW
ShellExecuteW
SHBrowseForFolderW

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CoUninitialize
CreateStreamOnHGlobal

oleaut32

SysFreeString

gdiplus

GdipDeleteStringFormat
GdipGetPenWidth
GdipDrawImageRectI
GdipCreateLineBrushFromRectI
GdipCreateBitmapFromResource
GdipCreateTexture
GdipSetStringFormatTrimming
GdipLoadImageFromStream
GdipMeasureString
GdipCloneImage
GdipSaveImageToFile
GdipFlush
GdipGetImagePixelFormat
GdipCloneBitmapAreaI
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusShutdown
GdiplusStartup
GdipClonePen
GdipSetStringFormatAlign
GdipGetDC
GdipReleaseDC
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipFillRectangle
GdipDrawRectangleI
GdipFree
GdipCloneBrush
GdipAlloc
GdipCreateFromHDC
GdipDrawImagePointRectI
GdipCreatePen1
GdipDeletePen
GdipCreateRegionRectI
GdipCombineRegionRectI
GdipFillRegion
GdipDeleteRegion
GdipCreateFont
GdipDeleteFontFamily
GdipCreateStringFormat
GdipSetStringFormatLineAlign
GdipSetInterpolationMode
GdipDrawImageRectRect
GdipDrawRectangle
GdipDrawString
GdipBitmapGetPixel
GdipDeleteFont
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCreateSolidFill
GdipGetImageHeight
GdipGetImageWidth
GdipFillRectangleI
GdipDeleteBrush
GdipDeleteGraphics

Exports

Exports

CapMulWeb
CapMulWebBegin
CapMulWebEnd
CapRegion
CapScreen
CapWeb
CapWindow
SetOption
SetProfile

Sections

.text
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxDownloader/MxDownloadServer.exe
.exe windows:4 windows x86 arch:x86

b18b6f3ec95b8acd827d5f205313f0ba

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:02:99:22:7c:f0:27:e8:e1:2b:bb:7a:75:d2:98:8b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

16/06/2008, 00:00

Not After

15/07/2009, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

a8:48:94:d0:bd:9c:e8:05:45:4c:e6:8c:ab:3c:70:21:a7:be:f9:77
Signer

Actual PE Digest

a8:48:94:d0:bd:9c:e8:05:45:4c:e6:8c:ab:3c:70:21:a7:be:f9:77

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsDirectoryW

winmm

timeGetTime

rpcrt4

UuidCreate

wininet

InternetGetCookieA
FindNextUrlCacheEntryW
FindFirstUrlCacheEntryW
InternetCombineUrlW

mfc42u

ord3348
ord3825
ord3826
ord3820
ord3074
ord4075
ord4616
ord4418
ord3574
ord3566
ord3614
ord3688
ord809
ord641
ord1634
ord2406
ord2631
ord439
ord556
ord324
ord736
ord3658
ord3621
ord4229
ord3568
ord2859
ord472
ord4128
ord4292
ord5784
ord2855
ord5871
ord2371
ord6195
ord5491
ord4704
ord6211
ord1143
ord4215
ord2576
ord3649
ord2430
ord2858
ord1637
ord5276
ord1088
ord2423
ord4279
ord2114
ord2836
ord2914
ord3169
ord4037
ord3443
ord6451
ord2099
ord5446
ord5436
ord6379
ord6390
ord5155
ord5156
ord5154
ord4899
ord4736
ord4970
ord4942
ord4352
ord4371
ord4848
ord5283
ord4829
ord2567
ord6051
ord1768
ord4390
ord5286
ord3397
ord3569
ord609
ord567
ord2294
ord3087
ord6024
ord3714
ord793
ord2634
ord3090
ord4253
ord537
ord3092
ord2403
ord2015
ord4213
ord2570
ord4392
ord3577
ord616
ord2354
ord2362
ord2293
ord5949
ord3296
ord6667
ord6879
ord6898
ord3993
ord5977
ord3991
ord6003
ord3605
ord656
ord3871
ord1791
ord614
ord1165
ord1203
ord2615
ord290
ord1220
ord4221
ord2478
ord3998
ord446
ord743
ord3716
ord795
ord4219
ord1761
ord3703
ord781
ord2078
ord3312
ord6193
ord6376
ord3494
ord2507
ord355
ord4470
ord5438
ord4667
ord4269
ord6371
ord4480
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord4074
ord4692
ord5303
ord2971
ord5710
ord3733
ord815
ord561
ord6433
ord2613
ord5713
ord1131
ord1196
ord1202
ord2717
ord1229
ord4270
ord1921
ord613
ord4294
ord289
ord6871
ord1808
ord1166
ord1197
ord6655
ord6466
ord2637
ord6921
ord2719
ord2722
ord2721
ord1106
ord3253
ord2629
ord1008
ord2101
ord941
ord536
ord5679
ord6640
ord6874
ord6867
ord2574
ord4396
ord3635
ord693
ord4238
ord1899
ord489
ord768
ord3739
ord1900
ord1683
ord2520
ord5284
ord2046
ord4425
ord497
ord771
ord4254
ord4709
ord3470
ord4433
ord4118
ord3365
ord6266
ord6896
ord860
ord1941
ord818
ord2144
ord1230
ord2235
ord640
ord1569
ord1633
ord323
ord2372
ord4199
ord801
ord541
ord1225
ord1105
ord1940
ord5299
ord4693
ord5711
ord817
ord565
ord2718
ord6919
ord283
ord2746
ord5647
ord3122
ord3611
ord1989
ord5461
ord798
ord5188
ord350
ord533
ord4198
ord2440
ord6654
ord2606
ord3211
ord539
ord2755
ord2036
ord5830
ord1571
ord600
ord826
ord269
ord1971
ord665
ord6279
ord942
ord2756
ord4124
ord858
ord2910
ord700
ord4197
ord540
ord398
ord861
ord800
ord538
ord5674
ord755
ord470
ord5860
ord6057
ord5567
ord5575
ord5732
ord5790
ord5785
ord5869
ord6168
ord6017
ord6185
ord4324
ord6182
ord5752
ord6188
ord5755
ord2966
ord1891
ord3076
ord2980
ord3269
ord3131
ord4459
ord3254
ord3142
ord2977
ord5681
ord3592
ord4419
ord4621
ord3257
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1767
ord4073
ord6048
ord2506
ord4992
ord4847
ord4370
ord5261
ord5568
ord5590
ord5628
ord4184
ord913
ord6381
ord927
ord925
ord940
ord535
ord922
ord3434
ord6278
ord6868
ord4273
ord5706
ord2810
ord354
ord5180
ord5285
ord3313
ord823
ord825
ord1240
ord1173
ord5781

msvcrt

__CxxFrameHandler
_onexit
wcslen
wcschr
_itow
_controlfp
wcscmp
__dllonexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
_XcptFilter
_exit
strchr
free
_ltow
swscanf
_wtoi
_wtol
_atoi64
_wtoi64
sprintf
wcscpy
_ftol
realloc
malloc
_CIpow
exit
_wcsicmp
_ui64tow

kernel32

LocalAlloc
LocalFree
FindFirstFileW
GetDiskFreeSpaceExW
DeleteFileW
GetWindowsDirectoryW
GetSystemDirectoryW
CreateProcessW
GetLongPathNameW
GetCurrentProcessId
SystemTimeToFileTime
InterlockedExchange
ResetEvent
CreateEventW
CloseHandle
CreateDirectoryW
GetTempPathW
ResumeThread
SetEvent
lstrcatW
lstrcpyW
LoadLibraryW
GetProcAddress
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetShortPathNameW
FlushInstructionCache
GlobalAlloc
GlobalLock
GlobalUnlock
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
InterlockedExchangeAdd
CreateMutexA
GetLastError
GetCurrentThreadId
lstrcmpiW
GetVersion
WaitForSingleObject
DeleteCriticalSection
HeapDestroy
GetCommandLineW
WritePrivateProfileStringW
GetCurrentProcess
SetProcessWorkingSetSize
GetFileAttributesW
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetStartupInfoW

user32

SetActiveWindow
SetRect
RedrawWindow
GetCaretPos
FindWindowW
LoadStringW
CloseClipboard
GetClipboardData
OpenClipboard
RegisterClipboardFormatW
SetWindowLongW
IsWindowVisible
DrawIconEx
FillRect
SetWindowPos
LoadCursorW
GetDesktopWindow
GetWindowRect
PtInRect
GrayStringW
DrawTextW
TabbedTextOutW
GetClientRect
RegisterWindowMessageW
LoadImageW
ChangeClipboardChain
PostThreadMessageW
IsIconic
SetClipboardViewer
SetTimer
GetParent
BeginPaint
EndPaint
DestroyWindow
IsChild
GetFocus
SetFocus
GetClassInfoExW
wsprintfW
RegisterClassExW
CallWindowProcW
DefWindowProcW
GetDC
IntersectRect
EqualRect
OffsetRect
UnionRect
GetKeyState
ShowWindow
CreateWindowExW
GetClassInfoW
CharNextW
MessageBoxW
KillTimer
GetDlgItemTextW
GetSysColor
GetSysColorBrush
DrawIcon
DestroyIcon
EnableWindow
LoadMenuW
GetSubMenu
ModifyMenuW
RemoveMenu
InvalidateRect
CopyRect
FindWindowExW
GetSystemMetrics
SystemParametersInfoW
SetWindowRgn
LoadBitmapW
ReleaseDC
GetWindowDC
UpdateWindow
SetCursor
PostMessageW
SendMessageW
IsWindow
MoveWindow
GetCursorPos
ReleaseCapture
DispatchMessageW
GetMessageW
GetMenuItemCount
SetMenuDefaultItem
SetForegroundWindow
TrackPopupMenu
ScreenToClient
SetCapture
GetCapture
GetWindowLongW

gdi32

CreateFontIndirectW
CreateSolidBrush
CreatePen
GetTextExtentPoint32W
ExtCreatePen
GetObjectW
CombineRgn
CreateRectRgn
GetDIBits
GetBkMode
GetTextColor
CreateRectRgnIndirect
DeleteMetaFile
Escape
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
CreateMetaFileW
GetDeviceCaps
SetViewportOrgEx
SetMapMode
LPtoDP
CreateDCW
GetTextMetricsW
CreateBitmap
ExtTextOutW
TextOutW
RectVisible
PtVisible
BitBlt
DeleteObject
DeleteDC
CreateCompatibleDC
CloseMetaFile
SelectObject
CreateCompatibleBitmap

advapi32

RegCloseKey
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegOpenKeyExW

shell32

ShellExecuteW
SHBrowseForFolderW
ShellExecuteExW
SHGetPathFromIDListW
SHAppBarMessage

comctl32

_TrackMouseEvent

ole32

StringFromCLSID
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
CoRegisterClassObject
CoTaskMemAlloc
CreateDataAdviseHolder
CoTaskMemFree
OleLoadFromStream
WriteClassStm
CoRevokeClassObject
CoInitialize
CreateOleAdviseHolder
OleSaveToStream
CoCreateInstance

olepro32

ord250

oleaut32

SysAllocStringByteLen
SysAllocStringLen
LoadRegTypeLi
SysStringLen
SysStringByteLen
SysFreeString
SysAllocString
VariantClear
LoadTypeLi
RegisterTypeLi
VariantChangeType

msvcp60

??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 376KB - Virtual size: 375KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxDownloader/TaskManager.dll
.dll regsvr32 windows:4 windows x86 arch:x86

85de515e0b9fcd6f424d020d756462bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathCombineA
PathIsDirectoryA
PathIsUNCA
PathIsRootA

mfc42

ord2841
ord5450
ord6394
ord2107
ord5440
ord6383
ord1799
ord3262
ord4226
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3738
ord561
ord815
ord5500
ord1132
ord1131
ord6354
ord801
ord860
ord541
ord539
ord861
ord6283
ord6282
ord5608
ord6143
ord3811
ord858
ord924
ord3258
ord4278
ord4277
ord4021
ord2818
ord6883
ord1200
ord6673
ord940
ord5861
ord2820
ord6648
ord5431
ord3348
ord4351
ord2989
ord2625
ord297
ord619
ord2033
ord3443
ord3786
ord5860
ord500
ord1206
ord1223
ord446
ord743
ord4020
ord4129
ord2764
ord5683
ord6662
ord6929
ord1168
ord926
ord3988
ord6781
ord922
ord537
ord2614
ord2919
ord1193
ord2915
ord5572
ord941
ord535
ord823
ord3663
ord1601
ord825
ord290
ord540
ord614
ord800
ord3579
ord4424
ord4622
ord4080
ord269
ord826
ord600
ord1578
ord1255
ord3079
ord3825
ord3831
ord3830
ord3353
ord2976
ord3081
ord2985
ord3136
ord4465
ord3259
ord3147
ord2982
ord4003
ord2729
ord2730
ord6467
ord2727
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1575
ord1176
ord548
ord1116

msvcrt

_ismbcalpha
atol
strcpy
isalnum
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_ftol
_mbsnbcat
memmove
_mbsicmp
free
malloc
realloc
_mbsnbicmp
sprintf
_mbsnbcmp
sscanf
rand
memcmp
_CxxThrowException
_mbscmp
memcpy
memset
strlen
_mbsnbcpy
_mbsrchr
__CxxFrameHandler

kernel32

GetModuleFileNameA
LocalAlloc
FindFirstFileA
GetProcAddress
GetLastError
FreeLibrary
GetSystemTime
InterlockedIncrement
GetTickCount
MultiByteToWideChar
IsBadReadPtr
DeleteFileA
OutputDebugStringA
CopyFileA
CreateDirectoryA
LocalFree
FindClose

user32

SetTimer
KillTimer

ole32

StgIsStorageFile
CoUninitialize
StgCreateDocfile
CoTaskMemFree
CoInitialize
StgOpenStorage
CoCreateInstance

oleaut32

VariantCopy
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantClear
SysStringByteLen

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxDownloader/asyn_dns.dll
.dll windows:4 windows x86 arch:x86

3709b88712d1ac4dd47559a06934d584

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WritePrivateProfileStringA
CreateThread
GetCurrentThreadId
WaitForSingleObject
FindFirstFileA
ResetEvent
SetWaitableTimer
CreateWaitableTimerA
CancelWaitableTimer
GetLastError
FindClose
GetVersionExA
GetWindowsDirectoryA
GetTickCount
SetEvent
PostQueuedCompletionStatus
QueueUserAPC
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventA
InitializeCriticalSection
DisableThreadLibraryCalls
GetModuleFileNameA
GetModuleHandleA
RaiseException
GetOverlappedResult

ws2_32

WSAGetOverlappedResult
closesocket
WSACloseEvent
socket
WSACreateEvent
WSAEventSelect
recvfrom
htons
sendto
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAGetLastError
gethostbyname
inet_ntoa
inet_addr

iphlpapi

GetNetworkParams

msvcp60

?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1runtime_error@std@@UAE@XZ
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??_7runtime_error@std@@6B@
??0logic_error@std@@QAE@ABV01@@Z
??1logic_error@std@@UAE@XZ
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?_Xran@std@@YAXXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?what@runtime_error@std@@UBEPBDXZ
?_Doraise@runtime_error@std@@MBEXXZ
??0runtime_error@std@@QAE@ABV01@@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z

msvcrt

_purecall
?name@type_info@@QBEPBDXZ
__RTtypeid
free
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
atol
_ultoa
_ftol
pow
fopen
fread
fgetc
fclose
_strtime
_strdate
isalpha
isdigit
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
strncpy
??2@YAPAXI@Z
memset
memcpy
__CxxFrameHandler
strlen

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

adns_cancel
adns_commit
adns_get_complete_code
adns_get_host
adns_get_ip
adns_get_ip_count
adns_get_notify_handle
asyn_dns_cancel
asyn_dns_commit
asyn_dns_init
asyn_dns_uninit

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxDownloader/download_interface.dll
.dll regsvr32 windows:4 windows x86 arch:x86

450a0b39e35d5f2b0b10d218c688e656

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RemoveDirectoryA
FindFirstFileA
FindNextFileA
FindClose
ResetEvent
WaitForMultipleObjects
EnterCriticalSection
GetLastError
LoadLibraryA
GetProcAddress
FreeLibrary
WriteFileGather
ReadFileScatter
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateWaitableTimerA
SetWaitableTimer
CreateThread
GetSystemDirectoryA
GetFileAttributesExA
CompareFileTime
ReleaseMutex
CreateMutexA
QueueUserAPC
PostQueuedCompletionStatus
WaitForSingleObjectEx
GetQueuedCompletionStatus
LeaveCriticalSection
CancelIo
CreateIoCompletionPort
GetCurrentThreadId
WaitForMultipleObjectsEx
GetOverlappedResult
CreateEventA
SetEvent
WaitForSingleObject
GetTickCount
GetVolumeInformationA
CreateDirectoryA
GetFileAttributesA
DeleteFileA
MoveFileA
FlushFileBuffers
GetFileSize
SetEndOfFile
SetFilePointer
ReadFile
WriteFile
CloseHandle
CreateFileA
MultiByteToWideChar
WideCharToMultiByte
GetDiskFreeSpaceA
GetModuleHandleA
GetVersionExA
WritePrivateProfileStringA
GetModuleFileNameA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
VirtualAlloc
VirtualFree
GetSystemInfo
QueryPerformanceFrequency
QueryPerformanceCounter
CreateProcessA
DisableThreadLibraryCalls
DeleteCriticalSection
SetLastError
InitializeCriticalSection
RaiseException

ole32

CoUninitialize
CoInitializeEx
CoCreateInstance

ws2_32

WSACleanup
WSACloseEvent
WSACreateEvent
WSARecvFrom
WSAStartup
recvfrom
inet_ntoa
gethostbyname
WSAGetLastError
gethostname
inet_addr
WSAIoctl
WSASocketA
ntohs
WSAGetOverlappedResult
connect
htons
WSAEventSelect
WSAEnumNetworkEvents
getsockname
WSAWaitForMultipleEvents
accept
closesocket
shutdown
WSARecv
WSASend
setsockopt
socket
listen
bind
htonl
getpeername
sendto
WSASendTo

asyn_dns

ord2
ord3
ord4
ord1

msvcp60

??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??_7?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0ios_base@std@@IAE@XZ
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??1ios_base@std@@UAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Tidy@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXXZ
??_7?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@
??1locale@std@@QAE@XZ
??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@
?_Init@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXPBDIH@Z
?_Mode@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEHH@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??8std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0ABV?$allocator@D@1@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??9std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?nothrow@std@@3Unothrow_t@1@B
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z
??0bad_alloc@std@@QAE@ABV01@@Z
??1bad_alloc@std@@UAE@XZ
??0bad_alloc@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
??_7out_of_range@std@@6B@
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?assign@?$char_traits@D@std@@SAXAADABD@Z
?_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ
??_7bad_alloc@std@@6B@
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADPAD@Z
??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0logic_error@std@@QAE@ABV01@@Z
??1logic_error@std@@UAE@XZ
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Xran@std@@YAXXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0runtime_error@std@@QAE@ABV01@@Z
?_Doraise@runtime_error@std@@MBEXXZ
?what@runtime_error@std@@UBEPBDXZ
??_7logic_error@std@@6B@
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IABV12@II@Z
??1runtime_error@std@@UAE@XZ
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??_7runtime_error@std@@6B@
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ

msvcrt

fgets
malloc
realloc
exit
free
printf
_mbsnbicmp
_mbsstr
_mbsicmp
_itoa
_callnewh
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
mktime
memchr
abs
_strtime
_strdate
strtok
strrchr
_open
_read
_close
fseek
fwrite
fflush
fopen
fread
fclose
?what@exception@@UBEPBDXZ
tolower
_strnicmp
atoi
strchr
sscanf
??0exception@@QAE@XZ
__RTtypeid
?name@type_info@@QBEPBDXZ
memmove
__RTDynamicCast
_purecall
_ftol
rand
atof
log10
pow
_strlwr
memcmp
memset
isspace
isalpha
isdigit
strcmp
_snprintf
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_atoi64
atol
_ui64toa
_ultoa
_i64toa
sprintf
strncpy
_CxxThrowException
??0exception@@QAE@ABV0@@Z
memcpy
_putenv
__CxxFrameHandler
??2@YAPAXI@Z
time
srand
strlen
strstr

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

wininet

InternetGetCookieA
InternetQueryOptionA

user32

GetDesktopWindow

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

shell32

ShellExecuteA

mswsock

GetAcceptExSockaddrs
AcceptEx

iphlpapi

GetAdaptersInfo

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
add_emule_server
add_emule_server_byLink
cancel_speed_limit
connect_emule_server
create_continued_bt_task
create_continued_emule_task
create_continued_task
create_ed2k_link
create_new_bt_task
create_new_emule_task
create_new_task
create_predownload_task
create_upload_bt_task
create_upload_emule_task
debug_p2p_pipe_choke_remote
debug_p2p_pipe_query_info
debug_p2p_pipe_release_info
debug_p2p_pipe_simulate_remote_choke_local
delete_emule_server
delete_emule_temp_files
delete_task
delete_tempfile
fetch_server_connection_info
fix_pre_download_parameter
fix_task_parameter
get_bt_cfg_file_list
get_bt_data_file_list
get_bt_file_id
get_bt_file_info
get_bt_peer_info_list
get_bt_task_info
get_client_hash
get_connect_period
get_connector_parameter
get_credits_file
get_crypt_option
get_current_upload_speed
get_dht_status
get_download_bandwidth
get_ed2k_server_link
get_emule_hub_host
get_emule_hub_port
get_emule_kad_port
get_emule_listen_port
get_emule_peer_info_list
get_emule_server_count
get_emule_server_info
get_emule_server_list
get_emule_status
get_emule_task_AICH_hash
get_emule_task_bcid
get_emule_task_cid
get_emule_task_fileid
get_emule_task_gcid
get_emule_task_info
get_enrollsp1_info
get_failure_detail
get_final_filename
get_global_connection_limit
get_kademlia_node_hash
get_kadnode_file
get_last_modified
get_memory_pool_size
get_mod_version
get_nickname
get_origin_readbytes
get_peer_id
get_play_port
get_reconnect_period
get_secure_file
get_secureident_option
get_server_list_file
get_small_file_size
get_source_search_period
get_source_upmost
get_task_gcid
get_task_url
get_temp_file_list
get_thunder_peer_extern_credit
get_upnp_status
get_url_str
hold_connect_ranking
import_clients_credit
init
is_AICH_enable
is_bt_tempfile_exist
is_compress_enable
is_ed2k_enable
is_emule_temp_file_exist
is_kad_enable
is_nated
is_p2sp_enable
is_protocol_forbidded
is_registered
is_source_exchange_enable
is_support_dispatch_strategy
is_support_schema
is_tempfile_exist
notify_hub_bt_deleted
notify_hub_bt_moved
notify_hub_deleted
notify_hub_moved
on_playing
parse_ed2k_server_url
parse_ed2k_url
parse_filename
parse_seed_file
parse_url
query_new_connect_info
query_part_cid
query_resource_info
query_task_info
read_ie_proxy
register_client
release_bt_data_file_list
release_bt_peer_info_list
release_ed2k_link
release_peer_info_list
release_seed_file_info
release_temp_file_list
report_crack
report_crack_cancel
reset_bt_task_need_download_file
sametime_connecting_peers
set_AICH_enable
set_added_resource_count
set_bt_task_stat_para
set_client_hash
set_compress_enable
set_connector_parameter
set_cookie
set_crypt_option
set_cur_language
set_dht_switch
set_dispatch_strategy
set_ed2k_enable
set_emule_crypt_option
set_emule_hub_host
set_emule_hub_port
set_emule_kad_port
set_emule_listen_port
set_emule_server_priority
set_emule_switch
set_emule_task_stat_para
set_forbid_p2p_service
set_global_connection_limit
set_hub_proxy
set_iobuffer_size
set_kad_enable
set_kademlia_node_hash
set_last_modified
set_listen_port
set_nichname
set_p2sp_enable
set_pragma_send_strategy
set_product_identifier
set_proxy_info
set_recommend_info
set_ref_send_strategy
set_report_strategy
set_res_query_cid
set_res_use_strategy
set_retry_strategy
set_sametime_connecting_peers
set_secureident_option
set_source_exchange_enable
set_source_upmost
set_speed_limit
set_stat_ref_url
set_task_type
set_thread_num
set_thunder_peer_extern_credit
set_upload_speed_limit
set_upnp_switch
set_user_name
start_predownload_task
start_task
stop_batch_task
stop_emule_server
stop_task
uninit
update_datafile
url_info_to_str
verify_proxy

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 240KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxHistory/MxHistory.dll
.dll windows:4 windows x86 arch:x86

7e21011f062a2aa25c805d509fa39238

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

07:a8:e8:ae:df:fc:aa:90:ce:b5:60:74:0c:c3:a4:9d:19:2e:4b:ca
Signer

Actual PE Digest

07:a8:e8:ae:df:fc:aa:90:ce:b5:60:74:0c:c3:a4:9d:19:2e:4b:ca

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
GetSystemTime
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
EnterCriticalSection
WaitForSingleObject
LeaveCriticalSection
CreateEventA
SetEvent
ResetEvent
FlushFileBuffers
GetLocaleInfoW
ReadFile
SetStdHandle
SetConsoleCtrlHandler
LoadLibraryA
Sleep
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
HeapAlloc
HeapFree
RaiseException
GetCommandLineA
GetVersion
HeapReAlloc
ExitProcess
FatalAppExitA
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
TerminateProcess
GetCurrentProcess
HeapSize
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetProcAddress
SetUnhandledExceptionFilter
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
UnhandledExceptionFilter
SetFilePointer
GetACP
GetOEMCP
SetEnvironmentVariableA

mxdb

?CreateMxDbObj@@YA_NPAK@Z
?DeleteMxDbObj@@YAXPAK@Z

wininet

InternetCrackUrlA
InternetCanonicalizeUrlA

Exports

Exports

CreateMxHis
DeleteMxHis

Sections

.text
Size: 196KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxMute/MxMute.dll
.dll windows:4 windows x86 arch:x86

50a27502567c0b14b6b8bfa5043bff34

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeKillEvent
timeEndPeriod
midiStreamRestart
midiStreamStop

kernel32

TlsAlloc
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
WriteFile
ReleaseMutex
GetCurrentThreadId
WaitForSingleObject
GetCurrentThread
VirtualProtect
VirtualQuery
CreateMutexA
GetVersionExA
VirtualAlloc
InterlockedCompareExchange
ResumeThread
FlushInstructionCache
GetCurrentProcess
GetThreadContext
SetThreadContext
GetLastError
SuspendThread
FreeLibrary
GetProcAddress
LoadLibraryA
SetLastError
GetModuleHandleA
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
HeapSize
MultiByteToWideChar
GetLocaleInfoA

user32

SetTimer
KillTimer

ole32

CoInitialize
CoCreateInstance

Exports

Exports

Mute

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxPageSearch/MxPageSearch.dll
.dll windows:4 windows x86 arch:x86

af2e6454b74babad00aac696be57c341

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:02:99:22:7c:f0:27:e8:e1:2b:bb:7a:75:d2:98:8b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

16/06/2008, 00:00

Not After

15/07/2009, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

b6:bc:6c:f5:6c:da:bd:5e:2f:fd:fa:a0:88:a1:58:1c:e6:22:38:9b
Signer

Actual PE Digest

b6:bc:6c:f5:6c:da:bd:5e:2f:fd:fa:a0:88:a1:58:1c:e6:22:38:9b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls

user32

CharLowerW

oleaut32

SysFreeString
SysStringLen
SysAllocStringLen
VariantClear
SysAllocString

msvcp60

?find_first_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?swap@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXAAV12@@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z

msvcrt

_purecall
free
abs
memset
wcscmp
swprintf
_adjust_fdiv
malloc
_initterm
_onexit
__CxxFrameHandler
wcslen
??2@YAPAXI@Z
_wcsicmp
clock
__dllonexit

Exports

Exports

CreatePageSearch
DeletePageSearch

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxSandBox/MxSandBox.zip
.zip
collapse.css
crash.css
crash/icon_32_crash.png
.png
crash/popup_bg_rich.png
.png
crash/popup_bg_rich_1.png
.png
crash/popup_bg_rich_2.png
.png
crash/popup_bg_rich_3.png
.png
crash/popup_bg_rich_4.png
.png
crash/popup_close_fg.png
.png
crash/popup_close_fg_hover.png
.png
crash/s.png
.png
images/all.png
.png
images/bg.png
.png
images/bodyBg.png
.png
images/bugBg.png
.png
images/max.png
.png
images/point.png
.png
images/titleBg.png
.png
images/titleIcon.png
.png
page1.html
.html
page2.html
.html
page3.html
.html
page5.html
sandbox.css
$PLUGINSDIR/mx2_data/Modules/MxSandBox/MxSec.dll
.dll windows:4 windows x86 arch:x86

f4cdf616498e20ff5dc68a909f2ad61f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:b7:43:76:67:68:dd:0c:a8:5a:c2:d4:66:b1:fb:60:ae:97:b5:a2
Signer

Actual PE Digest

68:b7:43:76:67:68:dd:0c:a8:5a:c2:d4:66:b1:fb:60:ae:97:b5:a2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAddAtomW
InterlockedExchange
FlushFileBuffers
RtlUnwind
GetSystemTimeAsFileTime
GetCommandLineA
RaiseException
HeapSize
ExitProcess
TerminateProcess
GlobalFindAtomW
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
Sleep
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GlobalDeleteAtom
GetVersionExA
GlobalFlags
lstrcmpW
GetThreadLocale
GetVersion
InterlockedIncrement
InterlockedDecrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
GlobalFree
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
SetLastError
LoadLibraryA
FreeLibrary
SuspendThread
SetThreadContext
GetThreadContext
FlushInstructionCache
ResumeThread
InterlockedCompareExchange
GetLastError
GlobalAlloc
GetModuleHandleA
GetCommandLineW
GetVersionExW
GetModuleFileNameW
GetTempPathW
GetLongPathNameW
SetUnhandledExceptionFilter
CopyFileW
CreateDirectoryW
GetFileType
SetFilePointer
GetLogicalDrives
QueryDosDeviceA
FindFirstFileW
GetFileAttributesW
CloseHandle
WriteFile
WideCharToMultiByte
VirtualAlloc
LoadLibraryW
GetProcAddress
VirtualProtect
WriteProcessMemory
GetCurrentThreadId
VirtualQuery
GetModuleFileNameA
ExitThread
GetProcessHeap
HeapAlloc
HeapReAlloc
HeapFree
GetCurrentThread
GetModuleHandleW
GetCurrentProcess
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
UnhandledExceptionFilter

user32

DestroyMenu
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CopyRect
DefWindowProcW
CallWindowProcW
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
SetWindowPos
SetWindowLongW
IsWindow
GetDlgItem
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
SetWindowsHookExW
CallNextHookEx
GetKeyState
ValidateRect
PostQuitMessage
GetWindowTextW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetWindowThreadProcessId
SendMessageW
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
MessageBoxW
GetParent
PeekMessageW
DispatchMessageW
TranslateMessage
UnregisterClassA

gdi32

DeleteDC
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
GetDeviceCaps
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
DeleteObject
PtVisible

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

OpenProcessToken
GetTokenInformation
GetUserNameW
LookupAccountNameW
LookupPrivilegeValueW
CreateRestrictedToken
ImpersonateLoggedOnUser
RegOpenKeyExW
RegCreateKeyExW

shell32

SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
SHGetPathFromIDListW

oleaut32

VariantInit
VariantChangeType
SysAllocStringLen
VariantClear

Exports

Exports

SandboxInitInstance
SetPrivacyMode
SetThreadCrToken
SetThreadSEHCheck

Sections

.text
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxSpeedDial/0x0804.zip
.zip
SD_Default9Grid.ini
SD_Statistic.ini
SpeedDial.ini
Thumbnail/Pic1.bmp
Thumbnail/Pic2.bmp
Thumbnail/Pic3.bmp
Thumbnail/Pic4.bmp
Thumbnail/Pic5.bmp
Thumbnail/Pic6.bmp
Thumbnail/Pic7.bmp
Thumbnail/Pic8.bmp
$PLUGINSDIR/mx2_data/Modules/MxSpeedDial/MxIeCore.dll
.dll windows:4 windows x86 arch:x86

1df84079db0a9917dd8f280443a51624

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b7:f6:da:fa:41:54:d3:29:ab:41:7e:52:82:13:17:ed:07:79:8f:3a
Signer

Actual PE Digest

b7:f6:da:fa:41:54:d3:29:ab:41:7e:52:82:13:17:ed:07:79:8f:3a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
lstrcpyW
GlobalUnlock
GetProcAddress
GlobalAlloc
GetModuleFileNameW
GetVersionExW
HeapFree
HeapAlloc
GetProcessHeap
ReadFile
GetFileSize
GetCurrentThreadId
HeapDestroy
GetLastError
LoadLibraryW
CreateFileW
WriteFile
CloseHandle
FreeLibrary
lstrlenA
OutputDebugStringW
DebugBreak
lstrlenW
InterlockedDecrement
GlobalLock
InterlockedIncrement

user32

GetParent
GetClientRect
MessageBoxW
DestroyWindow
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
RegisterClipboardFormatW
SetRectEmpty
CopyRect
IsClipboardFormatAvailable
GetClipboardData
OpenClipboard
IsWindow
ShowWindow
IsWindowVisible
GetWindow
ReleaseDC
GetDC
EmptyClipboard
CloseClipboard
SetClipboardData
GetWindowDC
CharLowerW
IsRectEmpty
LoadImageW
SendMessageW
GetMenuStringW
GetWindowLongW
GetWindowRect
LoadMenuW
GetSubMenu
GetMenuItemCount
GetMenuItemID
EnableMenuItem
GetMenuState
RemoveMenu
SetMenuItemInfoW
TrackPopupMenu
PostMessageW
CharNextW
wvsprintfW
LoadStringW

gdi32

DeleteObject
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
GetDeviceCaps

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

ShellExecuteW
DragQueryFileW

ole32

CoGetInterfaceAndReleaseStream
CoCreateInstance
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemFree
CoUninitialize
CoInitialize
ReleaseStgMedium

oleaut32

SysAllocStringLen
VariantClear
SysAllocString
SysFreeString
SysStringLen
LoadRegTypeLi

msvcp60

??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Xlen@std@@YAXXZ
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z

wininet

FindNextUrlCacheEntryW
InternetCombineUrlW
FindFirstUrlCacheEntryW
FindCloseUrlCache
DeleteUrlCacheEntryW

msvcrt

__CxxFrameHandler
??2@YAPAXI@Z
wcslen
wcsstr
iswdigit
_wtoi
_CxxThrowException
wcscmp
_wcsncoll
_wcsicmp
_vsnwprintf
wcsncpy
free
malloc
wcsncmp
wcschr
wcscpy
iswctype
swscanf
_wcslwr
_itow
memmove
iswspace
realloc
_purecall
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
wcsrchr

shlwapi

PathCombineW
PathFileExistsW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

iphlpapi

GetAdaptersInfo

netapi32

Netbios

Exports

Exports

MxClearHistory
MxCreateBrowserCore
MxDestroyBrowserCore
MxInit
MxRunMessageLoop
MxSetLanguageIni

Sections

.text
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxSpeedDial/MxSpeedDial.dll
.dll windows:4 windows x86 arch:x86

e6e3a891f9a0cb27478189673bc0b8ae

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:a4:63:bd:65:91:a5:06:c2:a6:1e:f0:24:d3:82:a3:da:7a:95:18
Signer

Actual PE Digest

10:a4:63:bd:65:91:a5:06:c2:a6:1e:f0:24:d3:82:a3:da:7a:95:18

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetPrivateProfileIntW
WritePrivateProfileStringW
DeleteFileW
CloseHandle
CreateThread
WaitForSingleObject
WritePrivateProfileSectionW
GetPrivateProfileSectionW
WideCharToMultiByte
MultiByteToWideChar
GetLastError
CreateDirectoryW
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
SizeofResource
LockResource
LoadResource
FindResourceW
lstrcpynW
GetFullPathNameW
GetPrivateProfileStringW
UnmapViewOfFile
FreeLibrary
LoadLibraryExW
ReadFile
GetFileSize
CreateFileW
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
GlobalUnlock
GlobalLock
GetProcAddress
LoadLibraryW
WriteFile
HeapDestroy
GetModuleFileNameW
GlobalAlloc
InterlockedIncrement
lstrcmpW
InterlockedDecrement
FindFirstFileW
FindClose
CopyFileW
GetFileAttributesW
EnterCriticalSection
LeaveCriticalSection
ResetEvent
SetEvent
CreateEventW
DeleteCriticalSection
lstrlenW
InitializeCriticalSection

user32

GetWindowLongW
SetWindowLongW
GetClassInfoExW
LoadCursorW
RegisterClassExW
GetMonitorInfoW
SetTimer
PostMessageW
PostThreadMessageW
wsprintfW
GetClientRect
CreateWindowExW
IsWindow
DestroyWindow
KillTimer
RegisterWindowMessageA
MonitorFromWindow
GetParent
InflateRect
ScreenToClient
GetWindowRect
ShowWindow
MessageBoxW
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
OpenClipboard
CallWindowProcW
ClientToScreen
PostQuitMessage
ReleaseDC
GetDC
RegisterWindowMessageW
GetWindow
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
GetSysColor
GetDlgItem
EndPaint
FillRect
BeginPaint
SetFocus
IsChild
GetFocus
SetWindowPos
GetClassNameW
RedrawWindow
GetDesktopWindow
CreateAcceleratorTableW
ReleaseCapture
SetCapture
InvalidateRect
InvalidateRgn
IsZoomed
SendMessageW
PtInRect
MoveWindow
SystemParametersInfoW
DefWindowProcW

gdi32

DeleteDC
GetStockObject
GetDeviceCaps
CreateSolidBrush
BitBlt
GetObjectW
GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject

shell32

SHFileOperationW

ole32

CoCreateInstance
CoTaskMemFree
CLSIDFromString
OleInitialize
OleUninitialize
CoUninitialize
CLSIDFromProgID
CreateStreamOnHGlobal
StringFromCLSID
CoTaskMemAlloc
OleLockRunning
CoInitialize

oleaut32

SysAllocString
SysAllocStringLen
LoadRegTypeLi
OleCreateFontIndirect
SysStringLen
SysFreeString
VariantClear

msvcp60

?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIABV12@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGIABV?$allocator@G@1@@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z

msvcrt

__CxxFrameHandler
_vsnprintf
_purecall
wcslen
??2@YAPAXI@Z
swprintf
memmove
_wtoi
wcscmp
wcsncpy
gmtime
time
_itow
free
malloc
_wcsicmp
wcsrchr
wcsncmp
wcscpy
_CxxThrowException
_wcsncoll
_ftol
_vsnwprintf
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_stricmp
memchr

mxui

HTMLayoutGetAttributeByName
HTMLayout_UseElement
HTMLayoutPostEvent
HTMLayoutSetElementState
HTMLayoutGetChildrenCount
HTMLayoutGetNthChild
ValueToString
HTMLayoutSelectElementsW
HTMLayoutDataReadyAsync
HTMLayoutInsertElement
HTMLayoutHidePopup
HTMLayoutSetStyleAttribute
HTMLayoutGetStyleAttribute
HTMLayoutGetElementType
HTMLayoutWindowAttachEventHandler
HTMLayoutLoadHtmlEx
HTMLayoutSetCallback
HTMLayoutSetMediaType
HTMLayoutLoadHtml
HTMLayoutCombineURL
HTMLayoutLoadFile
HTMLayoutGetAttributeCount
HTMLayoutGetNthAttribute
HTMLayoutDataReady
ValueStringData
ValueCopy
HTMLayout_UnuseElement
ValueIntDataSet
ValueInit
ValueClear
HTMLayoutCallBehaviorMethod
HTMLayoutUpdateElement
ValueIntData
HTMLayoutGetElementLocation
HTMLayoutSetElementHtml
HTMLayoutGetElementHtml
HTMLayoutGetRootElement
HTMLayoutSetElementInnerText16
HTMLayoutUpdateElementEx
HTMLayoutVisitElements
HTMLayoutGetElementInnerText16
HTMLayoutProcND
HTMLayoutClassNameW
HTMLayoutGetElementState
HTMLayoutSetAttributeByName
HTMLayoutSelectParent
HTMLayoutSelectElements
HTMLayoutScrollToView
HTMLayoutGetParentElement
HTMLayoutGetElementIndex

shlwapi

PathFileExistsW
PathCreateFromUrlW

wininet

InternetCombineUrlW
InternetCanonicalizeUrlW

mxtool

CreateMxZipObj
MxFree

Exports

Exports

CreateMxSDObject
DeleteMxSDObject

Sections

.text
Size: 264KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 316KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxSpeedDial/default.zip
.zip
SpeedDial.ini
$PLUGINSDIR/mx2_data/Modules/MxUpdate/MxUp.exe
.exe windows:4 windows x86 arch:x86

c14bc40d264709172420cbc79f7c8532

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f2:10:12:82:7b:c9:ea:c3:ad:fc:80:bf:c0:73:5a:d7:2b:a7:ba:a2
Signer

Actual PE Digest

f2:10:12:82:7b:c9:ea:c3:ad:fc:80:bf:c0:73:5a:d7:2b:a7:ba:a2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
DeleteFileW
GetTempPathW
lstrlenW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
WriteFile
CreateFileW
GetTickCount
GetPrivateProfileIntW
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetFullPathNameW
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
GetFileAttributesW
lstrcpynW
InterlockedDecrement
FreeLibrary
LoadLibraryExW
FlushInstructionCache
GetCurrentProcess
InterlockedIncrement
lstrlenA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetFileSize
GetLastError
ReadFile
SetStdHandle
GetStringTypeW
GetStringTypeA
SetConsoleCtrlHandler
LoadLibraryA
LCMapStringW
LCMapStringA
SetFilePointer
IsBadCodePtr
IsBadReadPtr
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameW
UnhandledExceptionFilter
CompareStringW
CompareStringA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetProcAddress
SetUnhandledExceptionFilter
HeapSize
TerminateProcess
ExitProcess
GetVersion
GetStartupInfoW
GetModuleHandleA
HeapAlloc
HeapReAlloc
HeapFree
RaiseException
RtlUnwind
FlushFileBuffers

user32

SetTimer
SetWindowPos
MessageBoxW
PostMessageW
RegisterWindowMessageA
ScreenToClient
InflateRect
SetFocus
LoadStringW
CallWindowProcW
SetWindowLongW
GetClassInfoExW
LoadCursorW
wsprintfW
RegisterClassExW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
CreateWindowExW
SystemParametersInfoW
MonitorFromRect
IsZoomed
FindWindowW
ShowWindow
DefWindowProcW
DestroyWindow
PtInRect
IsWindowVisible
IsWindow
PostQuitMessage
LoadImageW
SendMessageW
SetWindowTextW
MoveWindow
GetWindowLongW
GetParent
GetWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints

shell32

ShellExecuteExW
CommandLineToArgvW
SHAppBarMessage

ole32

CoInitialize
CoUninitialize

mxui

HTMLayoutGetAttributeByName
HTMLayoutUpdateElement
HTMLayoutSetAttributeByName
HTMLayoutGetRootElement
HTMLayoutUpdateElementEx
HTMLayoutSetElementInnerText16
HTMLayoutSetElementHtml
HTMLayoutGetElementLocation
ValueIntData
HTMLayoutCallBehaviorMethod
ValueClear
ValueInit
HTMLayoutIsElementVisible
HTMLayoutGetStyleAttribute
HTMLayoutGetElementState
ValueIntDataSet
HTMLayoutSelectElements
HTMLayoutVisitElements
ValueCopy
HTMLayoutDataReady
HTMLayoutLoadFile
HTMLayoutCombineURL
HTMLayoutLoadHtml
HTMLayoutSetMediaType
HTMLayoutSetCallback
HTMLayoutClassNameW
HTMLayoutGetElementType
HTMLayoutGetNthAttribute
HTMLayoutGetAttributeCount
HTMLayoutProcND
HTMLayoutLoadHtmlEx
HTMLayoutWindowAttachEventHandler
HTMLayout_UseElement
HTMLayoutSetStyleAttribute
HTMLayout_UnuseElement
HTMLayoutSetElementState

shlwapi

PathCreateFromUrlW
PathFileExistsW

wininet

InternetCombineUrlW
InternetCanonicalizeUrlW

mxtool

CreateMxZipObj
MxFree

mxhttprq

Init
GetResponseCode
GetDownloadData
CreateAsynHttpClient
MxHttpRequest
Finalize

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxUrlSec/mxurlsec.dll
.dll windows:4 windows x86 arch:x86

2586cbe7d7ee1e1f8ea05bef44f1b9e5

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c4:07:ee:54:01:ec:f1:ff:5b:c2:f9:8a:61:7a:d3:a7:7e:69:40:8d
Signer

Actual PE Digest

c4:07:ee:54:01:ec:f1:ff:5b:c2:f9:8a:61:7a:d3:a7:7e:69:40:8d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
DeleteFileA
CloseHandle
Sleep
WaitForSingleObject
ReadFile
GetFileSizeEx
CreateFileA
WriteFile
CreateFileW
FindClose
WideCharToMultiByte
CreateDirectoryW
GetFileAttributesW
MultiByteToWideChar
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
CreateDirectoryA
GetFileAttributesA
DisableThreadLibraryCalls

user32

CreateWindowExA
IsWindow
SetTimer
DispatchMessageA
PostThreadMessageA
GetMessageA
PeekMessageA
SetWindowLongA
GetWindowLongA
DestroyWindow
RegisterWindowMessageA
TranslateMessage
SendMessageA
UnregisterClassA
RegisterClassExA
DefWindowProcA

shell32

SHFileOperationA

msvcrt

??1type_info@@UAE@XZ
free
_initterm
malloc
_adjust_fdiv
__dllonexit
memcmp
memcpy
memset
??0exception@@QAE@ABV0@@Z
_onexit
strlen
_beginthreadex
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
sprintf
time
wcslen
_ftol
swprintf
wcstod
_CxxThrowException

msvcp60

??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??_7out_of_range@std@@6B@
??1out_of_range@std@@UAE@XZ
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??0logic_error@std@@QAE@ABV01@@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
??0out_of_range@std@@QAE@ABV01@@Z

shlwapi

StrStrW

mxhttprq

Init
CreateAsynHttpClient
SetAutoClose
SetPara
SetlocalPath
SetNoMemory
SetTimeout
MxHttpRequestByCallBack
GetDownloadData
GetPara
GetResponseCode
Finalize

Exports

Exports

MxUrlSecCreate
MxUrlSecDelete

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxVideoPopup/MxVideoPopup.dll
.dll windows:4 windows x86 arch:x86

bd8ee9b65e451b317c82655a71f1551b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3d:fd:fe:10:61:b1:96:6b:bd:aa:ab:89:02:12:0c:2b:88:a6:7e:b9
Signer

Actual PE Digest

3d:fd:fe:10:61:b1:96:6b:bd:aa:ab:89:02:12:0c:2b:88:a6:7e:b9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
GlobalHandle
LockResource
LoadResource
FindResourceW
LeaveCriticalSection
EnterCriticalSection
lstrcpynW
GlobalUnlock
GlobalLock
lstrcpyA
CreateThread
FlushInstructionCache
GetCurrentProcess
GlobalAlloc
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
HeapDestroy
VirtualQuery
InterlockedCompareExchange
ResumeThread
GetThreadContext
SetThreadContext
GetLastError
SuspendThread
GetCurrentThread
VirtualAlloc
SetLastError
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
Sleep
FreeResource
GetStringTypeA
LCMapStringW
LCMapStringA
SetConsoleCtrlHandler
GetOEMCP
GetACP
GetCPInfo
UnhandledExceptionFilter
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
FatalAppExitA
IsBadWritePtr
WriteFile
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetModuleHandleA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
HeapReAlloc
TerminateProcess
ExitProcess
TlsGetValue
TlsFree
TlsAlloc
TlsSetValue
HeapFree
HeapAlloc
GetVersion
GetCommandLineA
RtlUnwind
WaitForSingleObject
lstrcpyW
lstrcmpiW
RaiseException
GetCurrentThreadId
lstrcmpW
CreateFileA
GetFileSize
ReadFile
CloseHandle
GetPrivateProfileStringA
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrcmpA
GetPrivateProfileIntA
DeleteFileA
MoveFileExA
GetModuleHandleW
FreeLibrary
LoadLibraryA
GetProcAddress
GetStringTypeW
VirtualProtect

user32

GetFocus
IsChild
RegisterWindowMessageW
PostMessageW
wsprintfA
SendMessageW
GetClassNameW
RedrawWindow
LoadBitmapW
DefWindowProcW
IsZoomed
IsWindow
GetDlgCtrlID
DispatchMessageW
TranslateMessage
GetDesktopWindow
CreateAcceleratorTableW
wsprintfW
ReleaseCapture
SetCapture
InvalidateRgn
SetWindowLongW
SetFocus
GetDC
BeginPaint
EndPaint
GetSysColor
GetWindowTextLengthW
GetWindowTextW
GetClassInfoExW
RegisterClassExW
GetCursorPos
ScreenToClient
ChildWindowFromPoint
TrackMouseEvent
CallWindowProcW
DestroyWindow
LoadCursorW
SetCursor
TrackPopupMenuEx
InvalidateRect
SetWindowTextW
LoadIconW
GetDlgItem
SetWindowPos
CreateWindowExW
GetWindow
SystemParametersInfoW
MapWindowPoints
GetClientRect
FillRect
PostQuitMessage
GetWindowLongW
SetParent
MoveWindow
GetSystemMenu
EnableMenuItem
IsIconic
RegisterClipboardFormatW
GetParent
ClientToScreen
GetWindowRect
SetRectEmpty
DrawTextW
CreateDialogIndirectParamW
ShowWindow
GetMessageW
ReleaseDC

gdi32

CreatePen
CreateSolidBrush
CreateFontIndirectW
GetStockObject
BitBlt
LineTo
DeleteObject
Rectangle
SetBkMode
SetTextColor
CreateCompatibleBitmap
GetDeviceCaps
GetObjectW
DeleteDC
StretchBlt
MoveToEx
CreateCompatibleDC
SelectObject

ole32

OleLockRunning
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
RegisterDragDrop
ReleaseStgMedium
CoCreateInstance

oleaut32

VariantClear
LoadRegTypeLi
SysStringLen
SysAllocString
SysFreeString
SysAllocStringLen
OleCreateFontIndirect

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ImageList_Draw

Exports

Exports

MxCreateVideoPopupObject
MxDestroyVideoPopupObject

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxWebBoost/MxWebBoost.dll
.dll windows:4 windows x86 arch:x86

ccbcaab6be8bd4b77ee9760cf1b76887

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:02:99:22:7c:f0:27:e8:e1:2b:bb:7a:75:d2:98:8b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

16/06/2008, 00:00

Not After

15/07/2009, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f0:a9:dc:fb:6a:02:e1:3a:1b:4d:a2:20:b0:46:07:e7:0a:83:01:f2
Signer

Actual PE Digest

f0:a9:dc:fb:6a:02:e1:3a:1b:4d:a2:20:b0:46:07:e7:0a:83:01:f2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord324
ord825
ord3626
ord3663
ord693
ord2414
ord2302
ord4234
ord5981
ord6907
ord800
ord535
ord3301
ord1641
ord4710
ord2379
ord6199
ord3092
ord3996
ord2818
ord540
ord3998
ord4853
ord6905
ord6007
ord858
ord6888
ord6675
ord3573
ord755
ord5789
ord5873
ord5875
ord6021
ord470
ord4220
ord2584
ord3654
ord2438
ord6270
ord2863
ord1644
ord1146
ord823
ord860
ord537
ord3742
ord818
ord4275
ord6467
ord539
ord939
ord801
ord2915
ord5710
ord4129
ord2764
ord541
ord5683
ord924
ord926
ord922
ord6453
ord4277
ord4278
ord6663
ord4202
ord5572
ord2919
ord6883
ord3337
ord3811
ord551
ord6662
ord941
ord2614
ord1106
ord1948
ord2396
ord3346
ord5300
ord5303
ord4079
ord4699
ord5307
ord5289
ord5715
ord4622
ord565
ord817
ord6215
ord2864
ord501
ord773
ord2726
ord4226
ord538
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord5302
ord1776
ord4698
ord5714
ord3953
ord567
ord561
ord815
ord1200
ord1949
ord5607
ord1790
ord4767
ord3519
ord5170
ord5166
ord5167
ord5168
ord5171
ord5172
ord5229
ord5169
ord5189
ord5188
ord3794
ord2917
ord6425
ord6315
ord4180
ord6390
ord6427
ord3322
ord6013
ord5776
ord2604
ord5186
ord3180
ord3183
ord3176
ord3509
ord610
ord604
ord1083
ord2762
ord287
ord276
ord5048
ord2904
ord4481
ord6139
ord1646
ord2125
ord2126
ord2393
ord1567
ord268
ord4902
ord1269
ord5050
ord1970
ord2784
ord861
ord1206
ord1168
ord1223
ord5297
ord1649
ord1899
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord6172
ord5794
ord5736
ord5579
ord5571
ord6061
ord5864
ord5678
ord1187
ord1601
ord283
ord3571
ord2754
ord5785
ord1640
ord640
ord323
ord1228
ord641
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord4078
ord6055
ord2582
ord3619
ord3597
ord4425
ord5280
ord4407
ord1775
ord3640
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord3370
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord3738
ord4402
ord6052
ord2514
ord4998
ord4376
ord2725
ord5265

msvcrt

_mbsicmp
_i64toa
wcslen
malloc
_purecall
wcstoul
_CxxThrowException
sprintf
atof
strncpy
free
time
atoi
_mbscmp
__CxxFrameHandler
__RTDynamicCast
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
rand
atol
_atoi64

kernel32

LocalFree
GetModuleFileNameA
GetPrivateProfileStringA
GetProcAddress
QueryPerformanceFrequency
QueryPerformanceCounter
ReleaseMutex
OpenMutexA
CreateMutexA
IsBadWritePtr
IsBadReadPtr
ResetEvent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetSystemTime
InterlockedDecrement
InterlockedIncrement
lstrlenA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCurrentThreadId
Sleep
WaitForSingleObject
TerminateThread
ResumeThread
CloseHandle
CreateEventA
DeleteFileA
SetEvent
InterlockedExchange
GetLastError
LocalAlloc

user32

SendMessageA
SetTimer
IsWindow
KillTimer
GetClientRect
FillRect
LoadBitmapA
LoadStringA
GrayStringA
DrawTextA
TabbedTextOutA
GetDesktopWindow
PostThreadMessageA
PostMessageA
RegisterWindowMessageA
EnableWindow
MessageBoxA
LoadMenuA
GetSubMenu
ModifyMenuA
GetCursorPos
UpdateWindow
GetSystemMetrics
GetWindowRect
CopyRect
GetSysColor
GetSysColorBrush

gdi32

CreateFontIndirectA
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
BitBlt
SetBoundsRect
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
SelectObject

ole32

CLSIDFromString
CoLoadLibrary
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemAlloc
CoInitializeEx
CoCreateGuid
StringFromCLSID

oleaut32

VariantChangeType
SetErrorInfo
GetErrorInfo
VariantInit
LoadRegTypeLi
SysAllocStringByteLen
VariantClear
SysAllocStringLen
SysFreeString
SysAllocString
CreateErrorInfo

msvcp60

??1_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Xlen@std@@YAXXZ
??0_Lockit@std@@QAE@XZ

mxdb

?DeleteMxDbObj@@YAXPAK@Z
?CreateMxDbObj@@YA_NPAK@Z

winmm

timeGetTime

Exports

Exports

CreateWbBstObj
DeleteWbBstObj

Sections

.text
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxWin7/MxW7Wg.dll
.dll windows:5 windows x86 arch:x86

a513c6724d28c85705f3bc82dd348118

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:1b:66:2b:d9:5f:b1:4f:3f:8d:dc:97:b7:3b:b1:3d:cc:01:55:c9
Signer

Actual PE Digest

2b:1b:66:2b:d9:5f:b1:4f:3f:8d:dc:97:b7:3b:b1:3d:cc:01:55:c9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\SVN\Modules\MxW7Widgets\Trunk\Source\Release\MxW7Wg.pdb

Imports

kernel32

GetFileSize
lstrlenA
InterlockedIncrement
InterlockedDecrement
OutputDebugStringW
WriteFile
ReadFile
CreateFileW
MultiByteToWideChar
lstrlenW
CloseHandle
DebugBreak
GetFullPathNameW
MapViewOfFile
UnmapViewOfFile
FindResourceW
FreeLibrary
LoadResource
LoadLibraryExW
GetCurrentProcess
K32GetModuleFileNameExW
WideCharToMultiByte
SizeofResource
LeaveCriticalSection
lstrcpynW
GetFileAttributesW
FlushInstructionCache
RaiseException
GetLastError
SetLastError
EnterCriticalSection
CreateFileMappingW
LockResource
OpenFileMappingW
GetCurrentThreadId
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
ExitProcess
Sleep
CompareStringW
GetModuleFileNameA
GetStdHandle
HeapSize
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
RtlUnwind
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
VirtualAlloc
VirtualFree
GetModuleHandleA
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryA
InterlockedExchange
GetProcAddress
LocalAlloc

user32

SetRectEmpty
LoadStringW
wvsprintfW
UnregisterClassA
RegisterWindowMessageA
DestroyWindow
GetWindowRect
IsWindow
MessageBoxW
ScreenToClient
RegisterWindowMessageW
PostMessageW
IsZoomed
GetParent
LoadCursorW
GetClientRect
SetFocus
CharNextW
GetClassInfoExW
InflateRect
RegisterClassExW
GetWindowLongW
SystemParametersInfoW
MonitorFromWindow
SetWindowLongW
SetWindowPos
ShowWindow
CreateWindowExW
SendMessageW
GetMonitorInfoW
CallWindowProcW
DefWindowProcW
MonitorFromRect
CharLowerW

shell32

SHAppBarMessage

ole32

CoUninitialize
PropVariantClear
CoInitializeEx
CoCreateInstance

mxui

HTMLayoutSetElementInnerText16
ValueIntDataSet
HTMLayoutGetAttributeByName
HTMLayoutWindowAttachEventHandler
HTMLayoutGetRootElement
HTMLayoutGetElementLocation
HTMLayoutLoadHtml
HTMLayoutGetAttributeCount
ValueIntData
HTMLayoutGetParentElement
HTMLayoutSelectElements
ValueClear
HTMLayoutSetElementState
HTMLayout_UnuseElement
HTMLayoutUpdateElementEx
HTMLayoutGetElementType
ValueInit
HTMLayoutSetMediaType
HTMLayoutGetElementState
HTMLayoutLoadHtmlEx
HTMLayoutLoadFile
HTMLayoutVisitElements
HTMLayoutSetCallback
HTMLayoutProcND
HTMLayoutSetStyleAttribute
ValueCopy
HTMLayoutSetElementHtml
HTMLayoutCombineURL
HTMLayoutCallBehaviorMethod
HTMLayoutGetNthAttribute
HTMLayoutDataReady
HTMLayoutUpdateElement
HTMLayoutClassNameW
HTMLayout_UseElement

wininet

InternetCanonicalizeUrlW
InternetCombineUrlW

mxtool

MxFree
CreateMxZipObj

Exports

Exports

CreateJLMObj
CreateQuickActionObj
CreateTooltipObj
DeleteJLMObj
DeleteQuickActionObj
DeleteTooltipObj

Sections

.text
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Mx2UnInstall.exe
.exe windows:4 windows x86 arch:x86

f6ec26f2cfbd88efc00ba02239ffc2e0

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f5:e0:07:cb:f0:23:44:67:d4:39:27:8a:7d:8b:6b:8c:bb:be:23:66
Signer

Actual PE Digest

f5:e0:07:cb:f0:23:44:67:d4:39:27:8a:7d:8b:6b:8c:bb:be:23:66

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
SetCurrentDirectoryA
CreateDirectoryA
GetTempPathA
GetModuleFileNameA
GetLastError
CreateProcessA
FreeResource
CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetStringTypeA
LCMapStringW
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
RaiseException
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
SetFilePointer
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
SetConsoleCtrlHandler
FlushFileBuffers
MultiByteToWideChar
LCMapStringA
GetStringTypeW

shell32

SHFileOperationA

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 268KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/MxAccount.dll
.dll windows:4 windows x86 arch:x86

b37fa14b56275ffc2feedbc068f837bb

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9a:91:5b:15:f9:1b:c2:73:06:db:f8:a5:9d:55:a4:22:11:b4:be:23
Signer

Actual PE Digest

9a:91:5b:15:f9:1b:c2:73:06:db:f8:a5:9d:55:a4:22:11:b4:be:23

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
GetProcAddress
GetModuleFileNameW
LoadLibraryA
FreeLibrary
DeleteFileW
GetLastError
MoveFileExW
WideCharToMultiByte
CreateDirectoryW
GetFileAttributesW
FindNextFileW
FindClose
FindFirstFileW
CreateDirectoryA
GetFileAttributesA
HeapDestroy
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
InitializeCriticalSection
FlushInstructionCache
GetCurrentProcess
GetPrivateProfileStringW
GetFullPathNameW
ReadFile
GetFileSizeEx
CloseHandle
SizeofResource
LockResource
LoadResource
FindResourceW
lstrcpynW
InterlockedDecrement
lstrlenW
LoadLibraryExW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetFileSize
CreateFileW
InterlockedIncrement
lstrlenA
GetVolumeInformationA
GetModuleFileNameA
GetLocaleInfoW
GetTimeZoneInformation
SetStdHandle
GetOEMCP
GetACP
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetCPInfo
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
SetFilePointer
FlushFileBuffers
UnhandledExceptionFilter
IsBadCodePtr
IsBadReadPtr
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
CompareStringW
CompareStringA
SetUnhandledExceptionFilter
HeapSize
SetConsoleCtrlHandler
TerminateProcess
GetCurrentThread
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
FatalAppExitA
ExitProcess
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetModuleHandleA
GetVersion
GetCommandLineA
RaiseException
HeapReAlloc
HeapAlloc
RtlUnwind
HeapFree
InterlockedExchange
Sleep
SetEnvironmentVariableA

user32

RegisterClassExW
CreateWindowExW
DestroyWindow
SetWindowLongW
ScreenToClient
InflateRect
SetFocus
LoadStringW
CallWindowProcW
SendMessageW
SystemParametersInfoW
MonitorFromRect
IsZoomed
GetMenu
AdjustWindowRectEx
PtInRect
GetClassInfoExW
LoadCursorW
wsprintfW
KillTimer
PostMessageW
GetParent
GetWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints
SetWindowPos
IsWindowVisible
ShowWindow
IsWindow
SetTimer
RegisterWindowMessageA
GetWindowLongW
DefWindowProcW

shell32

SHAppBarMessage
SHFileOperationW

oleaut32

SysFreeString

mxhttprq

SetlocalPath
SetNoMemory
SetPara
SetAutoClose
CreateAsynHttpClient
GetPara
SetNoCache
MxHttpRequest
Finalize
Init
GetDownloadData
GetResponseCode

shlwapi

StrStrA
PathFileExistsW
PathCreateFromUrlW
StrStrW

wininet

InternetCombineUrlW
InternetGetCookieA
InternetSetCookieA
InternetCanonicalizeUrlW

mxui

HTMLayoutSetElementHtml
ValueIntData
HTMLayoutSetAttributeByName
HTMLayoutGetAttributeByName
HTMLayoutGetElementInnerText16
ValueStringData
ValueToString
HTMLayoutVisitElements
HTMLayoutCreateElement
HTMLayoutCloneElement
HTMLayoutInsertElement
HTMLayoutSetElementState
HTMLayoutGetNthChild
HTMLayoutGetChildrenCount
HTMLayoutSelectElements
HTMLayout_UseElement
ValueIntDataSet
HTMLayoutSetElementInnerText16
HTMLayoutGetElementLocation
HTMLayoutDataReadyAsync
HTMLayoutUpdateElement
HTMLayoutDataReady
ValueBinaryData
HTMLayoutCombineURL
HTMLayoutLoadHtml
HTMLayoutSetMediaType
HTMLayoutSetCallback
HTMLayoutLoadHtmlEx
HTMLayoutGetElementState
HTMLayoutGetElementType
HTMLayoutGetNthAttribute
HTMLayoutGetAttributeCount
HTMLayoutProcND
HTMLayoutWindowAttachEventHandler
HTMLayoutGetParentElement
HTMLayoutDeleteElement
HTMLayoutClassNameW
HTMLayoutGetRootElement
HTMLayoutCallBehaviorMethod
HTMLayout_UnuseElement
ValueCopy
ValueInit
ValueStringDataSet
ValueClear
ValueCompare
HTMLayoutLoadFile

mxtool

CreateMxZipObj
MxFree

Exports

Exports

CreateMxAccount
DeleteMxAccount

Sections

.text
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/MxCrashCatch.dll
.dll windows:4 windows x86 arch:x86

3fd4e2dd688d21ff4a7f2313148e0670

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b7:be:63:b3:84:b5:3e:2e:c6:6f:e7:c7:79:eb:cc:bf:6b:02:56:07
Signer

Actual PE Digest

b7:be:63:b3:84:b5:3e:2e:c6:6f:e7:c7:79:eb:cc:bf:6b:02:56:07

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteProcessMemory
GetCurrentProcess
VirtualProtect
GetProcAddress
LoadLibraryW
ExitProcess
SetUnhandledExceptionFilter
SetErrorMode
lstrlenW
GetModuleHandleW
CloseHandle
CreateFileW
InterlockedIncrement
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
WritePrivateProfileStringW
DeleteFileW
GetCurrentThreadId
InitializeCriticalSection
InterlockedDecrement
GetCurrentProcessId
GetModuleFileNameW
VirtualQuery
FormatMessageW
GetCurrentThread
WritePrivateProfileStringA
lstrlenA
DebugBreak
OutputDebugStringW
WriteFile
SetFilePointer
MultiByteToWideChar
GetVersionExW
WideCharToMultiByte
FileTimeToSystemTime
FileTimeToDosDateTime
FileTimeToLocalFileTime
ReadFile
GetFileSize
GetFileInformationByHandle
GetFileType
MapViewOfFile
CreateFileMappingW
DuplicateHandle
UnmapViewOfFile
SystemTimeToFileTime
GetLocalTime

user32

DefWindowProcW
wvsprintfW
LoadStringW
CharNextW

shell32

ShellExecuteW

dbghelp

MiniDumpWriteDump

ole32

CoUninitialize
CoInitialize

msvcp60

?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

shlwapi

PathFileExistsW
PathAddBackslashW
PathRemoveFileSpecW
PathFindFileNameW

msvcrt

_tzset
malloc
mktime
strcat
strcpy
strncpy
__dllonexit
_onexit
_initterm
_adjust_fdiv
_stricmp
strlen
wcsrchr
wcscspn
_wtoi
iswdigit
iswspace
_wcsdup
wcscmp
free
_getpid
memset
__CxxFrameHandler
signal
wcscpy
wcscat
??2@YAPAXI@Z
wcslen
memcpy
realloc
memmove

psapi

GetModuleFileNameExW

Exports

Exports

GenerateErrorReport
Install
SelLanIniFile
Uninstall

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/MxCrashReport.exe
.exe windows:4 windows x86 arch:x86

61faf6bb0cfe6e37c7a9ade06e916818

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1c:b3:66:f6:ea:b5:1c:e0:2d:a3:a1:4f:f4:80:9f:71:e6:29:6f:00
Signer

Actual PE Digest

1c:b3:66:f6:ea:b5:1c:e0:2d:a3:a1:4f:f4:80:9f:71:e6:29:6f:00

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
GetPrivateProfileSectionW
GetPrivateProfileStringW
MultiByteToWideChar
lstrcpyW
CompareStringW
FlushInstructionCache
HeapDestroy
DeleteCriticalSection
Sleep
CreateMutexW
GetLastError
InitializeCriticalSection
FileTimeToSystemTime
GetModuleFileNameW
FileTimeToLocalFileTime
SetFilePointer
GetFileInformationByHandle
GetFileType
MapViewOfFile
CreateFileMappingW
DuplicateHandle
WriteFile
UnmapViewOfFile
SystemTimeToFileTime
GetLocalTime
GetStartupInfoW
DeleteFileW
GetCommandLineW
GetModuleHandleW
GetCurrentProcess
WritePrivateProfileStringA
EnterCriticalSection
LeaveCriticalSection
lstrlenA
OutputDebugStringW
DebugBreak
GetCurrentThreadId
WideCharToMultiByte
CreateFileW
InterlockedDecrement
lstrlenW
CloseHandle
InterlockedIncrement
GetFileSize
ReadFile
FileTimeToDosDateTime

user32

PostThreadMessageW
wvsprintfW
LoadStringW
IsDialogMessageW
EndPaint
ScreenToClient
GetDlgItem
CallWindowProcW
IsWindowEnabled
GetSysColor
GetFocus
DrawFocusRect
FillRect
GetDlgCtrlID
GetClassInfoExW
LoadCursorW
wsprintfW
RegisterClassExW
InvalidateRect
PtInRect
SetCursor
SetCapture
GetCapture
GetWindowLongW
GetCursorPos
CharNextW
SetRectEmpty
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
CreateDialogParamW
ShowWindow
CreateWindowExW
DrawTextW
ReleaseDC
CreateCursor
GetDC
OffsetRect
EnumChildWindows
SetWindowTextW
EnumWindows
GetClassNameW
GetWindowTextLengthW
GetWindowTextW
SetWindowLongW
DefWindowProcW
DestroyWindow
IsWindow
SetFocus
GetSystemMetrics
GetWindow
GetWindowRect
CharLowerW
SendMessageW
UpdateWindow
RegisterWindowMessageA
EndDialog
DestroyCursor
GetParent
SetWindowPos
LoadImageW
SystemParametersInfoW
GetClientRect
ReleaseCapture
MapWindowPoints
BeginPaint

gdi32

GetStockObject
DeleteDC
GetObjectW
SetTextColor
SelectObject
GetBkColor
ExtTextOutW
CreateFontIndirectW
SetBkMode
DeleteObject
SetBkColor
CreateSolidBrush

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

ShellExecuteW

ole32

CoInitialize
CoUninitialize

comctl32

InitCommonControlsEx
_TrackMouseEvent

msvcp60

?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Xlen@std@@YAXXZ
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_Xran@std@@YAXXZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??0logic_error@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
??_7out_of_range@std@@6B@
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcrt

realloc
iswdigit
wcschr
memmove
wcslen
iswspace
wcsstr
_wcsicmp
_wtoi
??2@YAPAXI@Z
_ftol
__CxxFrameHandler
wcsrchr
malloc
free
wcscpy
wcscat
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
_CxxThrowException
_purecall
exit
mktime
strncpy
_exit
_XcptFilter
_wcmdln
__wgetmainargs
_initterm
_tzset
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
_controlfp
__dllonexit
_onexit
_stricmp
wcscmp

wininet

InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestExW
InternetWriteFile
InternetCloseHandle

mxhttprq

SetAutoClose
MxHttpRequestByCallBack
CreateAsynHttpClient
Init
SetlocalPath
Finalize

shlwapi

PathRemoveFileSpecW
PathAddBackslashW

psapi

GetModuleFileNameExW

mxcrashcatch

SelLanIniFile
Uninstall
Install

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/MxFav.dll
.dll windows:4 windows x86 arch:x86

ff64ffe1dbf0da409344fe58f2b7241c

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

dc:fc:22:94:f0:3e:10:e3:e4:5c:f0:69:34:d5:5d:37:ee:7f:c5:eb
Signer

Actual PE Digest

dc:fc:22:94:f0:3e:10:e3:e4:5c:f0:69:34:d5:5d:37:ee:7f:c5:eb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

maxzlib

uncompress
compress2

mxsk

CreateMxPsObj
DeleteMxPsObj

mfc42

ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord2396
ord2915
ord3663
ord2841
ord858
ord535
ord537
ord665
ord1979
ord6385
ord5186
ord354
ord2107
ord5450
ord5440
ord6383
ord6394
ord826
ord600
ord1578
ord6467
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord5199
ord1089
ord3922
ord5731
ord269
ord2512
ord2554
ord4486
ord6375
ord4274
ord540
ord860
ord2818
ord939
ord800
ord825
ord1182
ord1577
ord1168
ord1575
ord1176
ord823
ord1116

msvcrt

strncpy
_mbscmp
_CxxThrowException
rand
srand
time
fclose
fprintf
printf
vsprintf
strrchr
??1type_info@@UAE@XZ
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
atoi
memmove
_beginthreadex
sprintf
__CxxFrameHandler
_purecall
fopen

kernel32

WaitForSingleObject
CloseHandle
SetEvent
DeleteCriticalSection
CreateEventA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WaitForMultipleObjects
GetLastError
ResetEvent
GetModuleFileNameA
CreateMutexA
ReleaseMutex
OutputDebugStringA
GetLocalTime
DebugBreak
FatalExit
LocalFree
LocalAlloc
TerminateThread

user32

wsprintfA
MessageBoxA
PostMessageA

msvcp60

?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??_7?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_7?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??1ios_base@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Xlen@std@@YAXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Xran@std@@YAXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ

wininet

InternetCloseHandle
HttpSendRequestA
HttpOpenRequestA
InternetReadFileExA
InternetSetStatusCallback
InternetConnectA
InternetOpenA
InternetQueryOptionA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

Exports

Exports

CreateMaxFavObj
CreateMaxSsObj
DeleteMaxFavObj
DeleteMaxSsObj
Md4

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/MxHttpRq.dll
.dll windows:4 windows x86 arch:x86

0235c9ce0cd883ac81f61a214f75c4a8

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a8:21:02:6c:95:0c:4a:90:d9:eb:64:3b:ae:4e:bd:d6:9c:6f:b4:3a
Signer

Actual PE Digest

a8:21:02:6c:95:0c:4a:90:d9:eb:64:3b:ae:4e:bd:d6:9c:6f:b4:3a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
GetLastError
SystemTimeToFileTime
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
HeapDestroy
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
InitializeCriticalSection
GetLocalTime
CreateEventA
CloseHandle
WriteFile
SetFilePointer
DeleteFileA
CreateFileA
InterlockedIncrement
OutputDebugStringA
ReadFile
GetFileSize
ResetEvent
WaitForMultipleObjects
SetEvent
DebugBreak
InterlockedExchangeAdd
InterlockedExchange
TerminateThread
CreateThread
WaitForSingleObject
CompareStringW
CompareStringA
GetLocaleInfoW
SetConsoleCtrlHandler
SetStdHandle
LoadLibraryA
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
SetUnhandledExceptionFilter
FlushFileBuffers
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
GetProcAddress
GetOEMCP
GetACP
Sleep
RtlUnwind
HeapFree
TlsSetValue
TlsGetValue
ExitThread
GetTimeZoneInformation
GetSystemTime
GetCommandLineA
GetVersion
RaiseException
ExitProcess
FatalAppExitA
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
TlsAlloc
TlsFree
SetLastError
GetCurrentThread
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
SetEnvironmentVariableA

user32

RegisterWindowMessageA
CharNextA
CharLowerA
SendMessageA
wvsprintfA
LoadStringA
IsWindow
DestroyWindow

wininet

InternetCanonicalizeUrlW
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpQueryInfoA
InternetCloseHandle
InternetCanonicalizeUrlA
InternetCrackUrlA
HttpSendRequestA
HttpSendRequestExA
HttpAddRequestHeadersA
InternetReadFileExA
InternetWriteFile
HttpEndRequestA
InternetSetStatusCallback

winmm

timeGetTime

shlwapi

PathCreateFromUrlW

Exports

Exports

Abort
AbortAll
AddHeader
CloseAsynClientHandle
CreateAsynHttpClient
Finalize
GetContentType
GetDataLengthLimit
GetDownloadData
GetEtag
GetGroupID
GetLastModified
GetNamedDataLength
GetPara
GetRequestHeaderValue
GetResponseCode
GetResponseHeaderValue
GetTotalReadDataLength
GetURL
Init
MxHttpRequest
MxHttpRequestByCallBack
SetAutoClose
SetDataLengthLimit
SetNoCache
SetNoMemory
SetPara
SetTimeout
SetTotalThreadCount
SetlocalPath

Sections

.text
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/MxProxy2.dll
.dll windows:4 windows x86 arch:x86

86fe3ec8ee9d7083a8b811f8500e0b1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
GetLastError
GetACP
lstrlenA
InterlockedIncrement
InterlockedDecrement
SetEvent
WaitForSingleObject
CloseHandle
ResetEvent
WaitForMultipleObjects
CreateEventA
ResumeThread
Sleep
GetTickCount
WideCharToMultiByte
lstrlenW
GetOEMCP
LeaveCriticalSection
GetCurrentThreadId
GetModuleFileNameA
GetLocalTime
OutputDebugStringA
FatalExit
DebugBreak
InterlockedExchange
GetFileSize
ReadFile
CreateFileA
VirtualProtect
VirtualAlloc
VirtualFree
LocalFree
GetVersionExA
GetSystemInfo
VirtualQuery
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetFileAttributesA
MultiByteToWideChar

user32

PostMessageA
wsprintfA
GetParent
GetGuiResources
MessageBoxA
SendMessageA
GetClassNameA

advapi32

RegQueryValueExA
RegNotifyChangeKeyValue
RegCloseKey
RegOpenKeyExA

ole32

CoTaskMemAlloc
CoGetClassObject
CoCreateInstance
CreateStreamOnHGlobal

oleaut32

VariantInit
SysAllocString
GetErrorInfo
SetErrorInfo
VariantChangeType
CreateErrorInfo
VariantCopy
SysStringByteLen
SysAllocStringByteLen
SysFreeString
VariantClear
SysAllocStringLen
LoadRegTypeLi

msvcp60

??0bad_alloc@std@@QAE@PBD@Z
??1bad_alloc@std@@UAE@XZ
??0bad_alloc@std@@QAE@ABV01@@Z
??_7logic_error@std@@6B@
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADPAD0@Z
wctype
??_7bad_alloc@std@@6B@
?setf@ios_base@std@@QAEHHH@Z
?setf@ios_base@std@@QAEHH@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIID@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??1logic_error@std@@UAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?assign@?$char_traits@D@std@@SAXAADABD@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXPADPBD1@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PAD0PBD1@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?what@logic_error@std@@UBEPBDXZ
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBD@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBD@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IABV12@@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?empty@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE_NXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0ABV?$allocator@D@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGIABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?width@ios_base@std@@QAEHH@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBDI@Z
?_Xlen@std@@YAXXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z

ws2_32

htons
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAEventSelect
gethostbyname
closesocket
send
recv
WSAConnect
WSAResetEvent
WSACreateEvent
WSACloseEvent
bind
WSAGetLastError
socket
select
accept
inet_addr
listen

wininet

DeleteUrlCacheEntry
UnlockUrlCacheEntryStream
ReadUrlCacheEntryStream
RetrieveUrlCacheEntryStreamA
InternetCrackUrlA
InternetSetOptionA

urlmon

UrlMkGetSessionOption
UrlMkSetSessionOption
CoInternetGetSession

msvcrt

sprintf
_stricmp
_adjust_fdiv
malloc
_initterm
?terminate@@YAXXZ
_onexit
__dllonexit
??1type_info@@UAE@XZ
_isctype
??0exception@@QAE@ABQBD@Z
memmove
??1exception@@UAE@XZ
isspace
free
__RTDynamicCast
wcstoul
vsprintf
strrchr
printf
fprintf
_wcsicmp
strcpy
srand
wcsstr
_beginthreadex
??2@YAPAXI@Z
__CxxFrameHandler
memset
difftime
time
_CxxThrowException
_except_handler3
toupper
tolower
??0exception@@QAE@ABV0@@Z
memcmp
wcslen
fclose
fopen
fread
fseek
ftell
strlen
_purecall
memcpy
strncpy
rand

Exports

Exports

?CreateProxy2Obj@@YA_NPAPAX@Z
?DeleteProxy2Obj@@YAXPAPAX@Z
RegexMatch
RegexSubstitute

Sections

.text
Size: 728KB - Virtual size: 724KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/MxSk.dll
.dll windows:4 windows x86 arch:x86

f4fadf9628fdf04d7a1ebafe006ba3f6

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6e:b0:f6:c2:78:d0:07:99:b7:fe:e7:8e:7a:64:e1:ec:da:61:2b:ff
Signer

Actual PE Digest

6e:b0:f6:c2:78:d0:07:99:b7:fe:e7:8e:7a:64:e1:ec:da:61:2b:ff

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

send
select
htons
socket
setsockopt
WSAEventSelect
WSAConnect
WSAGetLastError
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
recv
WSAResetEvent
WSASetEvent
WSACloseEvent
WSACreateEvent
gethostbyname
inet_addr

mfc42

ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4274
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord537
ord924
ord800
ord2915
ord825
ord823
ord269
ord826
ord600
ord1578
ord6467
ord1255
ord1253
ord1570
ord1116
ord1197
ord1243
ord342
ord1182
ord1577
ord1168
ord1575
ord1176
ord2982

msvcrt

memmove
_purecall
tolower
strspn
malloc
_beginthreadex
memchr
_CxxThrowException
time
rand
srand
sprintf
fclose
fprintf
fopen
printf
vsprintf
strncpy
strrchr
__dllonexit
_onexit
??1type_info@@UAE@XZ
free
_initterm
_adjust_fdiv
__CxxFrameHandler

kernel32

ResetEvent
GetProcAddress
LoadLibraryA
GetVersionExA
CreateEventA
CloseHandle
WaitForSingleObject
SetEvent
GetLastError
WaitForMultipleObjects
InitializeCriticalSection
DeleteCriticalSection
ResumeThread
LeaveCriticalSection
EnterCriticalSection
Sleep
OutputDebugStringA
GetLocalTime
DebugBreak
FatalExit
GetModuleFileNameA
LocalFree
LocalAlloc
FreeLibrary

user32

wsprintfA
MessageBoxA
GetDesktopWindow

msvcp60

??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??0ios_base@std@@IAE@XZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??_7?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??_7?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@

wininet

InternetOpenA
InternetReadFileExA
InternetErrorDlg
HttpQueryInfoA
HttpSendRequestA
InternetSetOptionA
HttpOpenRequestA
InternetConnectA
InternetCloseHandle
InternetSetStatusCallback

Exports

Exports

CreateMxPsObj
CreateMxPwObj
CreateMxSkObj
DeleteMxPsObj
DeleteMxPwObj
DeleteMxSkObj

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/MxUI.dll
.dll windows:4 windows x86 arch:x86

e03dbf1d9b2548717e2b645453b93825

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3f:21:af:bd:ae:1e:90:8c:fb:d5:fc:2e:79:b8:43:5e:3a:26:83:fc
Signer

Actual PE Digest

3f:21:af:bd:ae:1e:90:8c:fb:d5:fc:2e:79:b8:43:5e:3a:26:83:fc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsBadReadPtr
GetOEMCP
GetACP
ReadFile
SetUnhandledExceptionFilter
FlushFileBuffers
GetTimeZoneInformation
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
WriteFile
FatalAppExitA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleHandleA
GetCurrentThread
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
HeapSize
HeapReAlloc
GetCurrentProcess
IsBadCodePtr
SetStdHandle
CreateFileA
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
SetConsoleCtrlHandler
CompareStringA
CompareStringW
SetEnvironmentVariableA
FindResourceW
FindResourceA
LoadResource
LockResource
SizeofResource
Sleep
FreeLibrary
LoadLibraryA
GetProcAddress
GetTempPathA
GetTempFileNameA
GetLocaleInfoA
GetCurrentThreadId
GetTickCount
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
LeaveCriticalSection
TerminateProcess
ExitProcess
RaiseException
GetVersion
GetCommandLineA
HeapAlloc
DeleteFileA
HeapFree
RtlUnwind
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
MulDiv
CloseHandle
SetEvent
InterlockedExchange
WideCharToMultiByte
SystemTimeToFileTime
GetLocalTime
GetSystemTime
GetDateFormatW
FileTimeToSystemTime
GetThreadLocale
GetLocaleInfoW
GetLastError
GetVersionExA
CreateThread
CreateEventA
ExitThread
WaitForSingleObject
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileW
SetEndOfFile
SetFilePointer
UnmapViewOfFile
FlushViewOfFile
GetCPInfo
SetThreadLocale
GetNumberFormatW
GetCurrencyFormatW
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleFileNameA
GetSystemDefaultLCID

user32

GetAncestor
GetDesktopWindow
UnregisterClassW
RegisterClassW
RegisterClassExW
UnregisterClassA
RegisterClassExA
IsWindowVisible
GetActiveWindow
CreateWindowExW
RegisterWindowMessageA
SetForegroundWindow
GetDC
ScrollDC
ScrollWindowEx
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
SetScrollInfo
ShowWindow
PostQuitMessage
SystemParametersInfoA
EndDialog
GetWindow
CreateWindowExA
SetWindowTextA
SetWindowPos
DialogBoxIndirectParamA
DestroyWindow
AdjustWindowRectEx
GetMessageA
TranslateMessage
DispatchMessageA
LoadCursorFromFileA
DestroyIcon
SetCursor
LoadCursorA
CreateCursor
DefWindowProcW
IsWindowEnabled
GetWindowPlacement
MoveWindow
PostMessageA
GetWindowThreadProcessId
WindowFromPoint
GetCursorPos
GetFocus
DrawFocusRect
DrawTextA
DrawTextW
InvertRect
CharLowerBuffW
CharUpperBuffW
GetSysColorBrush
DrawEdge
DrawFrameControl
DrawIconEx
CreateIconFromResourceEx
GetKeyState
MessageBeep
RegisterClipboardFormatW
CloseClipboard
EmptyClipboard
OpenClipboard
EnumClipboardFormats
CountClipboardFormats
SetClipboardData
GetClipboardData
IsClipboardFormatAvailable
LoadStringW
GetCaretBlinkTime
GetDoubleClickTime
GetScrollInfo
GetWindowDC
InflateRect
OffsetRect
GetClassLongA
FillRect
ReleaseDC
GetAsyncKeyState
GetSysColor
UpdateWindow
GetDlgCtrlID
SetTimer
ClientToScreen
GetSystemMetrics
GetCapture
ReleaseCapture
GetClientRect
BeginPaint
EndPaint
InvalidateRect
ScreenToClient
DefWindowProcA
IsWindowUnicode
SetWindowLongA
SetCapture
SetFocus
PeekMessageA
GetParent
IsWindow
MapWindowPoints
GetWindowLongA
GetWindowRect
SendMessageA
NotifyWinEvent
KillTimer

gdi32

CombineRgn
ExcludeClipRect
SetTextColor
SetBkColor
CreateSolidBrush
SetWindowOrgEx
BitBlt
DeleteDC
CreateRectRgnIndirect
LPtoDP
CreateCompatibleBitmap
SelectObject
GetStockObject
GetMapMode
SetMapMode
GetWindowExtEx
SetWindowExtEx
GetTextMetricsA
GetDeviceCaps
IntersectClipRect
CreateCompatibleDC
GetKerningPairsA
GetGlyphOutlineW
GetCurrentObject
SetDIBitsToDevice
CreateDIBPatternBrushPt
StretchBlt
SetStretchBltMode
StretchDIBits
CreateDIBSection
GetTextAlign
GetPixel
SetPixel
RoundRect
CreateRectRgn
SelectClipRgn
CreateBitmap
CreatePatternBrush
TextOutA
TextOutW
GetTextExtentPoint32A
GetTextExtentPoint32W
RectVisible
PatBlt
Rectangle
GetWindowOrgEx
CreateHatchBrush
SetBrushOrgEx
CreatePen
SetTextAlign
SetBkMode
EnumFontFamiliesExW
EnumFontFamiliesExA
CreateFontA
GetViewportExtEx
SetViewportExtEx
DPtoLP
GetObjectA
GetClipBox
SaveDC
SetViewportOrgEx
SetLayout
RestoreDC
CreateDCA
DeleteObject

ole32

CoInitialize
CoCreateGuid

oleaut32

SysAllocStringLen

oleacc

LresultFromObject
AccessibleObjectFromWindow

winmm

timeGetDevCaps
timeSetEvent
timeGetTime
timeKillEvent

advapi32

IsTextUnicode

comctl32

ImageList_Draw
ImageList_GetIconSize

shell32

SHGetSpecialFolderPathA
SHGetFileInfoW

wininet

InternetCombineUrlA
InternetConnectA
HttpOpenRequestA
InternetCloseHandle
InternetReadFile
InternetSetOptionA
InternetQueryOptionA
InternetErrorDlg
HttpSendRequestA
HttpQueryInfoA
InternetOpenA
InternetGetLastResponseInfoA

msimg32

AlphaBlend

Exports

Exports

?HTMLayoutEnumResourcesEx@@YGIPAUHWND__@@P6GHPBGPBDPBEKPAX@ZPAPAX@Z
HTMLayoutAnimateElement
HTMLayoutAppendMasterCSS
HTMLayoutAttachEventHandler
HTMLayoutAttachEventHandlerEx
HTMLayoutCallBehaviorMethod
HTMLayoutClassNameA
HTMLayoutClassNameW
HTMLayoutClearAttributes
HTMLayoutClipboardCopy
HTMLayoutCloneElement
HTMLayoutCombineURL
HTMLayoutCommitUpdates
HTMLayoutControlGetType
HTMLayoutControlGetValue
HTMLayoutControlSetValue
HTMLayoutCreateElement
HTMLayoutDataReady
HTMLayoutDataReadyAsync
HTMLayoutDeclareElementType
HTMLayoutDeleteElement
HTMLayoutDetachElement
HTMLayoutDetachEventHandler
HTMLayoutDialog
HTMLayoutElementGetExpando
HTMLayoutElementSetExpando
HTMLayoutEnumElementStyles
HTMLayoutEnumResources
HTMLayoutEnumerate
HTMLayoutFindElement
HTMLayoutGetAttributeByName
HTMLayoutGetAttributeCount
HTMLayoutGetCharacterRect
HTMLayoutGetChildrenCount
HTMLayoutGetElementByUID
HTMLayoutGetElementHtml
HTMLayoutGetElementHwnd
HTMLayoutGetElementIndex
HTMLayoutGetElementInnerText
HTMLayoutGetElementInnerText16
HTMLayoutGetElementIntrinsicHeight
HTMLayoutGetElementIntrinsicWidths
HTMLayoutGetElementLocation
HTMLayoutGetElementState
HTMLayoutGetElementText
HTMLayoutGetElementType
HTMLayoutGetElementUID
HTMLayoutGetFocusElement
HTMLayoutGetGraphin
HTMLayoutGetMinHeight
HTMLayoutGetMinWidth
HTMLayoutGetNthAttribute
HTMLayoutGetNthChild
HTMLayoutGetParentElement
HTMLayoutGetRootElement
HTMLayoutGetScrollInfo
HTMLayoutGetSelectedHTML
HTMLayoutGetStyleAttribute
HTMLayoutHidePopup
HTMLayoutHttpRequest
HTMLayoutInit
HTMLayoutInsertElement
HTMLayoutIsElementEnabled
HTMLayoutIsElementVisible
HTMLayoutLoadFile
HTMLayoutLoadHtml
HTMLayoutLoadHtmlEx
HTMLayoutMoveElement
HTMLayoutMoveElementEx
HTMLayoutParseValue
HTMLayoutPostEvent
HTMLayoutProc
HTMLayoutProcND
HTMLayoutProcW
HTMLayoutProcessUIEvent
HTMLayoutRangeAdvancePos
HTMLayoutRangeCreate
HTMLayoutRangeFromPositions
HTMLayoutRangeFromSelection
HTMLayoutRangeInsertHtml
HTMLayoutRangeIsEmpty
HTMLayoutRangeRelease
HTMLayoutRangeReplace
HTMLayoutRangeToHtml
HTMLayoutRender
HTMLayoutRenderElement
HTMLayoutRequestElementData
HTMLayoutScrollToView
HTMLayoutSelectElements
HTMLayoutSelectElementsW
HTMLayoutSelectParent
HTMLayoutSelectParentW
HTMLayoutSelectionExist
HTMLayoutSendEvent
HTMLayoutSetAttributeByName
HTMLayoutSetCSS
HTMLayoutSetCallback
HTMLayoutSetCapture
HTMLayoutSetDataLoader
HTMLayoutSetElementHtml
HTMLayoutSetElementInnerText
HTMLayoutSetElementInnerText16
HTMLayoutSetElementState
HTMLayoutSetEventRoot
HTMLayoutSetHttpHeaders
HTMLayoutSetMasterCSS
HTMLayoutSetMediaType
HTMLayoutSetMode
HTMLayoutSetOption
HTMLayoutSetScrollPos
HTMLayoutSetStyleAttribute
HTMLayoutSetTimer
HTMLayoutSetTimerEx
HTMLayoutSetupDebugOutput
HTMLayoutShowPopup
HTMLayoutShowPopupAt
HTMLayoutSortElements
HTMLayoutSwapElements
HTMLayoutTrackPopupAt
HTMLayoutTraverseUIEvent
HTMLayoutUpdateElement
HTMLayoutUpdateElementEx
HTMLayoutUpdateView
HTMLayoutUpdateWindow
HTMLayoutVisitElements
HTMLayoutWindowAttachEventHandler
HTMLayoutWindowDetachEventHandler
HTMLayout_UnuseElement
HTMLayout_UseElement
HTMLiteAdvanceFocus
HTMLiteAttachEventHandler
HTMLiteCreateInstance
HTMLiteDestroyInstance
HTMLiteDetachEventHandler
HTMLiteFindElement
HTMLiteGetDocumentMinHeight
HTMLiteGetDocumentMinWidth
HTMLiteGetElementHTMLITE
HTMLiteGetFocusElement
HTMLiteGetNextFocusable
HTMLiteGetRootElement
HTMLiteGetTag
HTMLiteLoadHtmlFromFile
HTMLiteLoadHtmlFromMemory
HTMLiteMeasure
HTMLiteRender
HTMLiteRenderOnBitmap
HTMLiteSetCallback
HTMLiteSetDataReady
HTMLiteSetDataReadyAsync
HTMLiteSetMediaType
HTMLiteSetTag
HTMLiteTraverseUIEvent
HTMPrintCreateInstance
HTMPrintDestroyInstance
HTMPrintGetDocumentHeight
HTMPrintGetDocumentMinWidth
HTMPrintGetRootElement
HTMPrintGetTag
HTMPrintLoadHtmlFromFile
HTMPrintLoadHtmlFromFileW
HTMPrintLoadHtmlFromMemory
HTMPrintMeasure
HTMPrintRender
HTMPrintSetDataReady
HTMPrintSetHyperlinkAreaCallback
HTMPrintSetLoadDataCallback
HTMPrintSetMediaType
HTMPrintSetNextPageCallback
HTMPrintSetTag
ValueBinaryData
ValueBinaryDataSet
ValueClear
ValueCompare
ValueCopy
ValueElementsCount
ValueFloatData
ValueFloatDataSet
ValueFromString
ValueGetValueOfKey
ValueInit
ValueInt64Data
ValueInt64DataSet
ValueIntData
ValueIntDataSet
ValueInvoke
ValueNthElementKey
ValueNthElementValue
ValueNthElementValueSet
ValueSetValueToKey
ValueStringData
ValueStringDataSet
ValueToString
ValueType
_HTMLayoutUrlEscape@16
_HTMLayoutUrlUnescape@12
_HTMLiteGetElementByUID@12
_HTMPrintSetCallback@12
_ValueEnumElements@12
_ValueIsolate@4

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/MxUeip.dll
.dll windows:4 windows x86 arch:x86

b5b782883881f5f55a2583d52c3f9136

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c6:1e:c9:cf:69:f7:03:d4:bb:b9:df:51:79:1b:10:a4:f8:ad:18:52
Signer

Actual PE Digest

c6:1e:c9:cf:69:f7:03:d4:bb:b9:df:51:79:1b:10:a4:f8:ad:18:52

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileW
GetLocalTime
InterlockedDecrement
lstrlenW
DebugBreak
OutputDebugStringW
lstrlenA
FreeLibrary
GetProcAddress
LoadLibraryW
CloseHandle
WriteFile
SetFilePointer
CreateFileW
ReadFile
GetFileSize
InterlockedIncrement
MoveFileW
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
FileTimeToSystemTime
FileTimeToLocalFileTime
SetEndOfFile
GetLastError
FindClose
FindFirstFileW
SetFileTime
SetFileAttributesW
GetFileAttributesW
LockFile
UnlockFile
WideCharToMultiByte
MultiByteToWideChar
SystemTimeToFileTime
IsBadWritePtr
IsBadReadPtr
CreateDirectoryW
RemoveDirectoryW
FindNextFileW
CopyFileW
GetModuleFileNameW
GetModuleHandleW
GetCurrentProcess
LocalFree
FormatMessageW
Sleep
WaitForSingleObject
OpenProcess
TerminateProcess
GetCurrentProcessId
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceW
lstrcpynW
lstrcpyW
GetVolumeInformationW
GetFullPathNameW
LocalFileTimeToFileTime
TerminateThread
CreateEventW
SetEvent

user32

CharLowerW
GetCursorPos
SendMessageW
CharUpperW
IsRectEmpty
GetWindowTextW
CopyRect
RegisterWindowMessageA
wvsprintfW
CharNextW
LoadStringW
FindWindowW
FindWindowExW
GetForegroundWindow
GetWindowRect
SetRectEmpty

shell32

ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
SHFileOperationW

ws2_32

shutdown
closesocket
setsockopt
WSASetLastError
inet_addr
inet_ntoa
gethostname
gethostbyname
WSACleanup
WSAStartup
WSAGetLastError

psapi

GetModuleFileNameExW
EnumProcessModules
EnumProcesses
GetModuleBaseNameW

shlwapi

PathRemoveFileSpecW
PathAddBackslashW
PathFindFileNameW
PathFileExistsW

winmm

sndPlaySoundW

msvcp60

?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBGI@Z
??8std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@G@Z
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIPBGI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_Xlen@std@@YAXXZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?_Xran@std@@YAXXZ
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB

mxhttprq

SetlocalPath
Finalize
GetResponseCode
SetNoMemory
Init
CreateAsynHttpClient
SetAutoClose
MxHttpRequestByCallBack

msvcrt

swprintf
_wcsicmp
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
wcscmp
wcschr
memmove
wcsstr
wcsrchr
_itow
iswctype
_CxxThrowException
strtol
malloc
free
wcscat
swscanf
toupper
_waccess
wcslen
vswprintf
wcscpy
_wcslwr
localtime
gmtime
time
mktime
_beginthreadex
_wtoi
iswdigit
??2@YAPAXI@Z
__CxxFrameHandler

wininet

HttpSendRequestExW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetWriteFile

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

netapi32

Netbios

Exports

Exports

Count
IsQuery
IsSetted
SendData
Set
UeipInit

Sections

.text
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Plugin/AddToKaixin001/AddToKaixin001.htm
.html .js polyglot
$PLUGINSDIR/mx2_data/Plugin/AddToKaixin001/out.ico
$PLUGINSDIR/mx2_data/Plugin/AddToKaixin001/plugin.ini
$PLUGINSDIR/mx2_data/Plugin/ĵ.url
$PLUGINSDIR/mx2_data/Skin/Ƥĵ.url
$PLUGINSDIR/mx2_data/Temp/AList.xml
$PLUGINSDIR/mx2_data/Temp/MxUrlSec/alipay.list
$PLUGINSDIR/mx2_data/Temp/MxUrlSec/cnnic.list
$PLUGINSDIR/mx2_data/Temp/MxUrlSec/config.ini
$PLUGINSDIR/mx2_data/Temp/MxUrlSec/mx_safe_all.list
$PLUGINSDIR/mx2_data/Temp/MxUrlSec/mx_safe_sub.list
$PLUGINSDIR/mx2_data/Temp/MxUrlSec/old_black.list
$PLUGINSDIR/mx2_data/Temp/MxUrlSec/taobao.list
$PLUGINSDIR/mx2_data/Temp/MxUrlSec/youa.list
$PLUGINSDIR/mx2_data/Temp/MxVideoPopup/videoUrlRules.ini
$PLUGINSDIR/mx2_data/Temp/NList.xml
.xml
$PLUGINSDIR/mx2_data/Temp/PList.xml
$PLUGINSDIR/mx2_data/Temp/SList.xml
$PLUGINSDIR/mx2_data/Temp/sdurl.dat
$PLUGINSDIR/mx2_data/enablelog.reg
$PLUGINSDIR/mx2_data/http.DefaultIcon.imp
$PLUGINSDIR/mx2_data/http.shell.imp
$PLUGINSDIR/mx2_data/https.DefaultIcon.imp
$PLUGINSDIR/mx2_data/https.shell.imp
$PLUGINSDIR/mx2_data/maxzlib.dll
.dll windows:4 windows x86 arch:x86

58ebe63bde2e8d9e022f7f601830ac71

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:02:99:22:7c:f0:27:e8:e1:2b:bb:7a:75:d2:98:8b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

16/06/2008, 00:00

Not After

15/07/2009, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

66:9e:fd:ce:66:08:bf:19:23:90:9d:36:f2:12:9d:fa:7a:ac:c8:96
Signer

Actual PE Digest

66:9e:fd:ce:66:08:bf:19:23:90:9d:36:f2:12:9d:fa:7a:ac:c8:96

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_fdopen
fopen
_errno
malloc
sprintf
fwrite
fread
fclose
free
fprintf
fflush
fseek
fputc
strerror
clearerr
_initterm
_adjust_fdiv
_vsnprintf
ftell

kernel32

DisableThreadLibraryCalls

Exports

Exports

adler32
compress
compress2
compressBound
crc32
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
get_crc_table
gzclearerr
gzclose
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateInit2_
inflateInit_
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
uncompress
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/mxdb.dll
.dll windows:4 windows x86 arch:x86

9cb9c7b6a4d0beab81a932b3f1b67cd9

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:02:99:22:7c:f0:27:e8:e1:2b:bb:7a:75:d2:98:8b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

16/06/2008, 00:00

Not After

15/07/2009, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

b4:40:8d:d9:10:c7:bd:49:d0:64:00:c4:a1:d5:4a:91:f2:81:0c:be
Signer

Actual PE Digest

b4:40:8d:d9:10:c7:bd:49:d0:64:00:c4:a1:d5:4a:91:f2:81:0c:be

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

AreFileApisANSI
CloseHandle
GetLastError
ReadFile
SetFilePointer
WriteFile
SetEndOfFile
FlushFileBuffers
GetFileSize
LockFile
LockFileEx
UnlockFile
CreateFileA
CreateFileW
GetFileAttributesA
GetFileAttributesW
WideCharToMultiByte
DeleteFileW
GetTempPathA
GetTempPathW
GetFullPathNameA
GetFullPathNameW
LoadLibraryA
LoadLibraryW
FormatMessageA
GetProcAddress
FreeLibrary
GetCurrentProcessId
GetSystemTime
GetTickCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
MultiByteToWideChar
GetVersionExA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
DeleteCriticalSection
Sleep
InitializeCriticalSection
DeleteFileA
InterlockedIncrement
RtlUnwind
InterlockedDecrement
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
GetStringTypeA
GetStringTypeW
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleHandleA
GetTimeZoneInformation
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
SetStdHandle
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA

advapi32

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptDeriveKey
CryptDecrypt
CryptDestroyKey
CryptEncrypt
CryptAcquireContextA
CryptDuplicateKey

Exports

Exports

?CreateMxDbObj@@YA_NPAK@Z
?DeleteMxDbObj@@YAXPAK@Z

Sections

.text
Size: 304KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 4KB - Virtual size: 40B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/mxpp.dll
.dll windows:4 windows x86 arch:x86

47c8dac3f927e8595a4a4df4da2b6677

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6a:ef:4f:e2:4b:ee:d7:0d:f3:2f:3a:04:a3:4f:a2:b8:ef:1e:be:80
Signer

Actual PE Digest

6a:ef:4f:e2:4b:ee:d7:0d:f3:2f:3a:04:a3:4f:a2:b8:ef:1e:be:80

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord1199
ord5714
ord3953
ord823
ord1116
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord1578
ord600
ord826
ord269
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord825
ord4486
ord6375
ord4274
ord1247

msvcrt

__CxxFrameHandler
strncpy
_beginthreadex
_purecall
??1type_info@@UAE@XZ
free
_initterm
malloc
_adjust_fdiv
memmove
strncat
wcslen
_onexit
__dllonexit
_CxxThrowException
_stricmp

kernel32

TerminateThread
ResumeThread
SetEvent
CreateEventA
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
ReleaseMutex
DeleteCriticalSection
CloseHandle
InitializeCriticalSection
CreateMutexA
LocalFree
LocalAlloc

user32

PostMessageA

msvcp60

?_Xlen@std@@YAXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Xran@std@@YAXXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??_7?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ

mxsk

CreateMxSkObj
DeleteMxSkObj

Exports

Exports

CreateMcObj
CreatePpObj
DeleteMcObj
DeletePpObj

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/mxtool.dll
.dll windows:4 windows x86 arch:x86

1e1b4359ecfd77fe0126157cf089cd8d

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6f:27:41:b6:af:4a:6c:58:eb:1a:da:61:3a:d9:5a:bc:b7:d6:74:36
Signer

Actual PE Digest

6f:27:41:b6:af:4a:6c:58:eb:1a:da:61:3a:d9:5a:bc:b7:d6:74:36

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

maxzlib

get_crc_table
deflateEnd
deflate
deflateInit2_
inflateEnd
crc32
inflate
inflateInit2_

mfc42u

ord3171
ord6381
ord353
ord538
ord861
ord2795
ord3502
ord3175
ord6006
ord5438
ord3313
ord5647
ord3122
ord3611
ord2385
ord350
ord1971
ord922
ord535
ord858
ord6921
ord5596
ord940
ord942
ord6919
ord4272
ord4124
ord3178
ord5446
ord6390
ord2836
ord5436
ord6379
ord2099
ord1824
ord349
ord2910
ord1825
ord354
ord665
ord6920
ord6918
ord5568
ord6466
ord1560
ord4078
ord268
ord6867
ord5180
ord2593
ord5769
ord4172
ord6308
ord958
ord2912
ord941
ord2810
ord2754
ord5603
ord1083
ord823
ord2606
ord773
ord3658
ord540
ord501
ord800
ord3697
ord825
ord1194
ord269
ord826
ord600
ord1571
ord1250
ord1248
ord1563
ord1240
ord342
ord1179
ord1570
ord1165
ord1568
ord1173
ord4197
ord1115

msvcrt

_onexit
__dllonexit
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
wcscpy
strlen
??0exception@@QAE@ABV0@@Z
_ftol
ceil
_wcsicoll
_wcsicmp
wcscmp
wcslen
_waccess
_wchdir
_wutime
_wstat
_wsplitpath
realloc
malloc
localtime
mktime
_errno
wcsncpy
memmove
memcmp
qsort
wcscoll
abs
srand
rand
free
_purecall
time
memcpy
_CxxThrowException
__CxxFrameHandler
memset

kernel32

DeleteFileW
EnterCriticalSection
GetTickCount
lstrcpyW
GetModuleFileNameW
GetModuleHandleW
LocalAlloc
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
MoveFileW
MapViewOfFile
CreateFileMappingW
CloseHandle
UnmapViewOfFile
LocalFree
FormatMessageW
GetLastError
GetDiskFreeSpaceW
GetFileSize
CreateFileW
GetTempFileNameW
GetTempPathW
GetCurrentDirectoryW
SetFileAttributesW
GetFileAttributesW
GetDriveTypeW
SetVolumeLabelW
LeaveCriticalSection

user32

GetWindowRect
KillTimer
OemToCharBuffA
CharToOemBuffA
RegisterWindowMessageA
IsWindow
SetWindowPos
SetTimer
PostMessageW

msvcp60

??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
?str@?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_7out_of_range@std@@6B@
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??_D?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Exports

Exports

CreateAMObj
CreateMxZipObj
DeleteAMObj
MxFree

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/mxtool2.dll
.dll regsvr32 windows:4 windows x86 arch:x86

2c075f3139e26b85025b1b4ca628936b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:02:99:22:7c:f0:27:e8:e1:2b:bb:7a:75:d2:98:8b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

16/06/2008, 00:00

Not After

15/07/2009, 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

79:ed:d6:ec:43:d0:4b:2b:5f:11:0c:74:14:5e:08:63:f6:df:62:d5
Signer

Actual PE Digest

79:ed:d6:ec:43:d0:4b:2b:5f:11:0c:74:14:5e:08:63:f6:df:62:d5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

maxzlib

get_crc_table
deflateEnd
deflate
deflateInit2_
inflateEnd
crc32
inflate
inflateInit2_

mfc42

ord5442
ord3318
ord5651
ord3127
ord3616
ord2393
ord860
ord350
ord1979
ord922
ord535
ord858
ord6930
ord5572
ord2915
ord5600
ord939
ord941
ord6928
ord4277
ord4129
ord4202
ord5450
ord6394
ord2841
ord5440
ord6383
ord2107
ord1832
ord349
ord1833
ord354
ord665
ord6929
ord6927
ord4274
ord815
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord6010
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord1116
ord3953
ord2725
ord1131
ord6467
ord539
ord1567
ord268
ord1601
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord3180
ord3507
ord2803
ord537
ord353
ord6385
ord3176
ord3183
ord5186
ord2601
ord5773
ord4177
ord6312
ord958
ord2917
ord940
ord2818
ord2762
ord5607
ord1083
ord823
ord2614
ord773
ord3663
ord825
ord540
ord501
ord800
ord3702
ord1197
ord1243
ord342
ord1182
ord1577
ord1168
ord1575
ord1176
ord1089
ord561

msvcrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
??1type_info@@UAE@XZ
_mbsicoll
_mbsicmp
_mbscmp
_access
_chdir
_utime
_stat
_splitpath
realloc
malloc
localtime
mktime
__CxxFrameHandler
_CxxThrowException
memcpy
_purecall
free
rand
srand
strlen
abs
_errno
strncpy
memmove
memcmp
memset
qsort
_mbscoll
time

kernel32

GetTempPathA
GetCurrentDirectoryA
SetFileAttributesA
GetFileAttributesA
GetDriveTypeA
SetVolumeLabelA
DeleteFileA
MoveFileA
GetTempFileNameA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
LocalAlloc
CreateFileA
MapViewOfFile
CreateFileMappingA
CloseHandle
UnmapViewOfFile
LocalFree
FormatMessageA
GetLastError
CreateDirectoryA
GetFileSize
GetDiskFreeSpaceA

user32

CharToOemBuffA
OemToCharBuffA

oleaut32

SysStringByteLen
SysStringLen
LoadRegTypeLi
SysFreeString
SysAllocStringByteLen

atl

ord58
ord32
ord57
ord18
ord15
ord21
ord16
ord23
ord30

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/template/Download/images/check.png
.png
$PLUGINSDIR/mx2_data/template/Download/images/done.png
.png
$PLUGINSDIR/mx2_data/template/Download/images/error.png
.png
$PLUGINSDIR/mx2_data/template/Download/images/logo.png
.png
$PLUGINSDIR/mx2_data/template/Download/images/pause.png
.png
$PLUGINSDIR/mx2_data/template/Download/images/reset.png
.png
$PLUGINSDIR/mx2_data/template/Download/images/run.png
.png
$PLUGINSDIR/mx2_data/template/Download/images/search.png
.png
$PLUGINSDIR/mx2_data/template/Download/images/stop.png
.png
$PLUGINSDIR/mx2_data/template/Download/index.htm
.html
$PLUGINSDIR/mx2_data/template/Download/maxDownload.css
$PLUGINSDIR/mx2_data/template/Download/maxDownload.js
.js
$PLUGINSDIR/mx2_data/template/FeedView/feed.css
$PLUGINSDIR/mx2_data/template/FeedView/feed.js
.js
$PLUGINSDIR/mx2_data/template/FeedView/feed.xsl
.xml
$PLUGINSDIR/mx2_data/template/FeedView/images/feed.png
.png
$PLUGINSDIR/mx2_data/template/FeedView/images/go_top.png
.png
$PLUGINSDIR/mx2_data/template/History/images/add.png
.png
$PLUGINSDIR/mx2_data/template/History/images/arrow.png
.png
$PLUGINSDIR/mx2_data/template/History/images/calendar.png
.png
$PLUGINSDIR/mx2_data/template/History/images/delete.png
.png
$PLUGINSDIR/mx2_data/template/History/images/feed.png
.png
$PLUGINSDIR/mx2_data/template/History/images/keyword.png
.png
$PLUGINSDIR/mx2_data/template/History/images/logo.png
.png
$PLUGINSDIR/mx2_data/template/History/images/page.png
.png
$PLUGINSDIR/mx2_data/template/History/images/search.png
.png
$PLUGINSDIR/mx2_data/template/History/images/website.png
.png
$PLUGINSDIR/mx2_data/template/History/index.htm
.html
$PLUGINSDIR/mx2_data/template/History/maxHistory.css
$PLUGINSDIR/mx2_data/template/History/maxHistory.js
.js
$PLUGINSDIR/mx2_data/template/Options/css/arrow.png
.png
$PLUGINSDIR/mx2_data/template/Options/css/bg_sidebar.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/defcon_high.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/defcon_low.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/defcon_med.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_adhunter.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_advanced.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_download.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_fav.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_feed.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_filter.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_floatbutton.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_form.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_general.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_key.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_kwfw.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_mouse.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_nav.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_plugin.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_safety.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_sandbox.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_search.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_skin.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_startup.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_tab.png
.png
$PLUGINSDIR/mx2_data/template/Options/index.htm
.html
$PLUGINSDIR/mx2_data/template/Options/maxOptions.config.js
.js
$PLUGINSDIR/mx2_data/template/Options/maxOptions.css
$PLUGINSDIR/mx2_data/template/Options/maxOptions.js
.js
$PLUGINSDIR/mx2_data/template/ResumeSession/images/logo.png
.png
$PLUGINSDIR/mx2_data/template/ResumeSession/index.htm
.html
$PLUGINSDIR/mx2_data/template/ResumeSession/maxResumeSession.css
$PLUGINSDIR/mx2_data/template/ResumeSession/maxResumeSession.js
.js
$PLUGINSDIR/mx2_data/template/_shared/css/base.css
$PLUGINSDIR/mx2_data/template/_shared/css/base/bg_btn.png
.png
$PLUGINSDIR/mx2_data/template/_shared/css/base/bg_btn_active.png
.png
$PLUGINSDIR/mx2_data/template/_shared/css/base/bg_btn_hover.png
.png
$PLUGINSDIR/mx2_data/template/_shared/css/base/bg_header.png
.png
$PLUGINSDIR/mx2_data/template/_shared/css/base/bg_input_btn.png
.png
$PLUGINSDIR/mx2_data/template/_shared/css/base/bg_input_btn_hover.png
.png
$PLUGINSDIR/mx2_data/template/_shared/css/base/bg_input_text.png
.png
$PLUGINSDIR/mx2_data/template/_shared/css/base/bg_input_text_hover.png
.png
$PLUGINSDIR/mx2_data/template/_shared/css/base/bg_shadow.png
.png
$PLUGINSDIR/mx2_data/template/_shared/favicon.ico
$PLUGINSDIR/mx2_data/template/_shared/images/btn_apply.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_autorun.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_autorun_checked.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_check.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_check_checked.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_close.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_down.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_hide_sidebar.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_left.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_radio.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_radio_checked.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_reset.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_right.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_show_sidebar.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_up.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/direction_d.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/direction_l.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/direction_r.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/direction_u.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/key.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/link_out.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/mouse.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/mouse_both.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/mouse_left.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/mouse_mid.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/mouse_right.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/next.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/page.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/prev.png
.png
$PLUGINSDIR/mx2_data/template/_shared/js/func.js
.js
$PLUGINSDIR/mx2_data/template/_shared/js/maxAjaxManager.js
.js
$PLUGINSDIR/mx2_data/template/_shared/js/maxConfig.js
.js
$PLUGINSDIR/mx2_data/template/_shared/js/maxList.js
.js
$PLUGINSDIR/mx2_data/template/_shared/js/maxTable.js
.js
$PLUGINSDIR/mx2_data/template/_shared/js/maxXmlListParser.js
.js
$PLUGINSDIR/mx2_data/template/page/404/404.html
.html
$PLUGINSDIR/mx2_data/template/page/404/css/css.css
$PLUGINSDIR/mx2_data/template/page/404/images/blank.gif
.gif
$PLUGINSDIR/mx2_data/template/page/404/images/colFooter.gif
.gif
$PLUGINSDIR/mx2_data/template/page/404/images/expFooter.gif
.gif
$PLUGINSDIR/mx2_data/template/page/404/images/favicon.ico
$PLUGINSDIR/mx2_data/template/page/404/images/footerLogo.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/404/images/headBg.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/404/images/headBgRepeat.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/404/images/inputBg.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/404/images/listStyle.gif
.gif
$PLUGINSDIR/mx2_data/template/page/404/images/otherError.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/404/images/otherHeadBg.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/404/images/otherHeadBgRepeat.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/404/images/point.gif
.gif
$PLUGINSDIR/mx2_data/template/page/404/images/searchBg.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/404/js/error.js
.js
$PLUGINSDIR/mx2_data/template/page/PrivacyMode/images/blank.gif
.gif
$PLUGINSDIR/mx2_data/template/page/PrivacyMode/images/iepngfix.htc
.js
$PLUGINSDIR/mx2_data/template/page/PrivacyMode/images/innerBg.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/PrivacyMode/images/logo.png
.png
$PLUGINSDIR/mx2_data/template/page/PrivacyMode/images/pageBg.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/PrivacyMode/images/point.gif
.gif
$PLUGINSDIR/mx2_data/template/page/PrivacyMode/privacy.html
$PLUGINSDIR/mx2_data/template/page/PrivacyMode/privacy.js
.js
$PLUGINSDIR/mx2_data/template/page/unsafe/images/arrow.png
.png
$PLUGINSDIR/mx2_data/template/page/unsafe/images/arrowBG.png
.png
$PLUGINSDIR/mx2_data/template/page/unsafe/images/bodyBG.png
.png
$PLUGINSDIR/mx2_data/template/page/unsafe/images/conBg.png
.png
$PLUGINSDIR/mx2_data/template/page/unsafe/images/goBtn.png
.png
$PLUGINSDIR/mx2_data/template/page/unsafe/pg_unsafe.css
$PLUGINSDIR/mx2_data/template/page/unsafe/pg_unsafe.htm
.html
$PLUGINSDIR/mx2_data/template/page/unsafe/pg_unsafe.js
.js
$PLUGINSDIR/mx2_data/template/ui/pop_siteinfo/images/d.png
.png
$PLUGINSDIR/mx2_data/template/ui/pop_siteinfo/images/i.png
.png
$PLUGINSDIR/mx2_data/template/ui/pop_siteinfo/images/pb.png
.png
$PLUGINSDIR/mx2_data/template/ui/pop_siteinfo/images/pf.png
.png
$PLUGINSDIR/mx2_data/template/ui/pop_siteinfo/images/s.png
.png
$PLUGINSDIR/mx2_data/template/ui/pop_siteinfo/index.htm
$PLUGINSDIR/mx2_data/template/ui/pop_siteinfo/style.css
$_48_/$APPDATA/$_49_
$_48_/$DESKTOP/$_49_
$_48_/$DESKTOP/ȫ.ha
.html .vbs polyglot
$_48_/$STARTMENU/$_49_
$_48_/$SYSDIR/game.ico
$_48_/$SYSDIR/taobao.ico
$_48_/1.ha
.html .vbs polyglot
$_48_/1.html
$_48_/3.bat
$_48_/3.vbs
.vbs
$_48_/br.vbs
.vbs
$_48_/game.ico
$_48_/qq
.vbs
$_48_/qq.ico
$_48_/taobao.ico
Uninstall.exe
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
oem.ini
֮.exe
.exe windows:4 windows x86 arch:x86

529e31f77e52cbf0a3f800a64416df7b

Code Sign

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

25/04/2007, 00:00

Not After

09/07/2019, 18:40

Subject

CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

30/04/2007, 00:00

Not After

29/04/2012, 23:59

Subject

CN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

7f:43:34:d8:ea:88:95:32:91:21:c9:7d:8f:df:3a:d3
Certificate

Issuer

CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US

Not Before

06/07/2009, 00:00

Not After

06/07/2011, 23:59

Subject

CN=Beijing ShengjingWanwei Technology Co.\,Ltd.,OU=Class 3 - for Microsoft Authenticode Signing,O=Beijing ShengjingWanwei Technology Co.\,Ltd.,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutWrite
midiStreamClose
midiStreamOut

ws2_32

recv
WSARecv
WSAGetLastError
connect
closesocket
send

imm32

ImmNotifyIME
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
ImmDisableIME

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

kernel32

FileTimeToSystemTime
FileTimeToLocalFileTime
GetLongPathNameW
WriteProcessMemory
ReadProcessMemory
VirtualProtect
lstrcmpW
SearchPathW
LoadLibraryA
CreateThread
TlsGetValue
CreateProcessW
GetModuleHandleW
GetCurrentThread
HeapFree
HeapAlloc
HeapCreate
HeapDestroy
ReadFile
GetFileSize
TlsSetValue
DeviceIoControl
OpenProcess
GlobalFree
LockResource
SizeofResource
LoadResource
FindResourceW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetWindowsDirectoryW
GetProcessHeap
LocalFree
TerminateThread
GetExitCodeThread
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
CancelWaitableTimer
SetWaitableTimer
CreateWaitableTimerW
SetEndOfFile
SetFilePointer
GetFileTime
WriteFile
TlsFree
TlsAlloc
GetFileAttributesW
GetSystemDefaultLangID
GetUserDefaultLangID
EnumResourceLanguagesW
GetVersion
FreeResource
LocalAlloc
SetProcessWorkingSetSize
LoadLibraryExW
GlobalDeleteAtom
GlobalAddAtomW
CreateSemaphoreW
ReleaseSemaphore
FlushInstructionCache
FindFirstChangeNotificationW
CreateEventW
SetEvent
ResetEvent
lstrcmpiW
GetPrivateProfileIntW
SetFileAttributesW
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetCurrentProcessId
FreeLibrary
GetTempFileNameW
VirtualAlloc
VirtualFree
GetCurrentProcess
GetStartupInfoA
GetModuleHandleA
SetLastError
SuspendThread
SetThreadContext
GetThreadContext
ResumeThread
InterlockedCompareExchange
SetFileTime
GetLastError
WaitForMultipleObjects
FindNextChangeNotification
GetDiskFreeSpaceExW
CreateDirectoryW
InterlockedDecrement
lstrlenW
FindClose
FindNextFileW
WritePrivateProfileStringW
GetShortPathNameW
GetPrivateProfileStringW
FindFirstFileW
GetModuleFileNameW
CloseHandle
DeleteFileW
Sleep
GlobalUnlock
GlobalLock
GlobalAlloc
WideCharToMultiByte
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
lstrlenA
MultiByteToWideChar
FindCloseChangeNotification
GetTickCount
GetTempPathW
lstrcatW
GetLocaleInfoW
WaitForSingleObject
CopyFileW
RemoveDirectoryW
CreateMutexW
ReleaseMutex
GetSystemDirectoryW
IsBadWritePtr
IsBadReadPtr
MoveFileExW
MoveFileW
ExpandEnvironmentStringsW
CreateFileW
SystemTimeToFileTime
GetSystemTime
GetVersionExW
GetCommandLineW
VirtualQuery
SetUnhandledExceptionFilter
SetErrorMode
TerminateProcess

user32

GetMenuInfo
PostQuitMessage
IsMenu
GetMenuStringW
GetMenuItemID
keybd_event
MapVirtualKeyW
CheckMenuRadioItem
SubtractRect
EndMenu
IsChild
EnumChildWindows
IntersectRect
RemoveMenu
SetCursorPos
DialogBoxParamW
LoadImageW
SetWindowPos
GetWindowRect
ShowWindow
SetWindowLongW
GetDlgItem
LoadStringW
SendMessageW
SetWindowTextW
GetWindowTextW
PostMessageW
EndDialog
SetFocus
MessageBoxW
IsIconic
UnhookWindowsHookEx
IsWindowVisible
SetPropW
RemovePropW
ScreenToClient
GetPropW
CheckDlgButton
EnableWindow
CreateWindowExW
IsWindow
InflateRect
CopyRect
SetWindowsHookExW
CallNextHookEx
MenuItemFromPoint
SystemParametersInfoW
SetParent
SetActiveWindow
CopyIcon
DrawIconEx
MoveWindow
RegisterClassExW
CopyImage
GetForegroundWindow
DestroyIcon
CloseClipboard
GetClientRect
EndPaint
GetSysColor
IsDlgButtonChecked
DrawEdge
DrawTextW
FillRect
BeginPaint
DestroyWindow
SetForegroundWindow
GetParent
DefWindowProcW
ReleaseDC
GetDC
OffsetRect
CallWindowProcW
GetWindowLongW
GetComboBoxInfo
PtInRect
GetCursorPos
GetKeyState
InvalidateRect
GetWindowTextLengthW
GetSystemMetrics
RegisterClipboardFormatW
IsClipboardFormatAvailable
EnableMenuItem
GetSubMenu
LoadMenuW
GetAsyncKeyState
SetCursor
LoadCursorW
CharNextW
DrawIcon
LoadIconW
MapWindowPoints
GetDesktopWindow
SetDlgItemTextW
IsZoomed
SetWindowRgn
SetClipboardData
EmptyClipboard
OpenClipboard
WindowFromPoint
InsertMenuW
IsWindowEnabled
GetKeyboardLayoutNameW
LoadKeyboardLayoutW
LoadAcceleratorsW
TranslateAcceleratorW
DestroyAcceleratorTable
CreateAcceleratorTableW
CopyAcceleratorTableW
GetKeyNameTextW
GetClipboardData
GetMonitorInfoW
MonitorFromWindow
SetRect
RegisterHotKey
UnregisterHotKey
GetWindow
SetRectEmpty
TrackPopupMenu
TrackPopupMenuEx
GetWindowDC
GetMenuState
EqualRect
GetGUIThreadInfo
GetSystemMenu
GetMenuItemInfoW
SetMenuInfo
GetMenuItemCount
CheckMenuItem
GetSysColorBrush
DestroyMenu
FindWindowW
GetWindowPlacement
SetWindowPlacement
TrackMouseEvent
UpdateWindow
RegisterWindowMessageW
GetWindowModuleFileNameW
SetWindowLongA
SetMenuItemInfoW
EnumWindows
GetWindowThreadProcessId
FindWindowExW
GetMenu
SendMessageTimeoutW
EnumThreadWindows
GetClassNameW
GetMessagePos
SetCapture
ReleaseCapture
ShowCursor
KillTimer
ClientToScreen
SetTimer
RedrawWindow
GetFocus
DeleteMenu
GetAncestor
CreatePopupMenu
InsertMenuItemW
GetDlgItemTextW
LoadBitmapW
PeekMessageW
TranslateMessage
DispatchMessageW
CharUpperW
DdeGetData
DdeFreeDataHandle
DdeQueryStringW
DdeFreeStringHandle
DdeUninitialize
DdeInitializeW
DdeCreateStringHandleW
DdeNameService
GetMessageW
PostThreadMessageW
CharLowerW

gdi32

CreateRectRgnIndirect
FillRgn
GetDIBits
CreateDIBSection
MoveToEx
LineTo
CreateRoundRectRgn
CombineRgn
CreateRectRgn
SelectClipRgn
GetObjectW
GetTextMetricsW
SetBkColor
CreatePen
CreateCompatibleDC
CreateFontIndirectW
CreateCompatibleBitmap
BitBlt
DeleteDC
CreatePatternBrush
Rectangle
EnumFontsW
GetStockObject
SetTextColor
SetBkMode
SelectObject
CreateSolidBrush
DeleteObject

comdlg32

ChooseColorW
GetOpenFileNameW
GetSaveFileNameW

advapi32

RegDeleteKeyW
FreeSid
RegGetKeySecurity
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
GetUserNameA
RegOpenKeyExW
RegCreateKeyW
RegSetValueExW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
InitializeSecurityDescriptor
AddAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
RegEnumKeyW
RegQueryInfoKeyW
RegSetKeySecurity
RegCreateKeyExW
OpenProcessToken
GetTokenInformation
CopySid
SetSecurityDescriptorDacl

shell32

ExtractIconExW
ShellExecuteExW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
DoEnvironmentSubstW
SHChangeNotify
SHFreeNameMappings
SHAppBarMessage
SHGetPathFromIDListW
SHGetSpecialFolderLocation
DragQueryFileW
SHGetMalloc
SHGetDesktopFolder
SHBrowseForFolderW
Shell_NotifyIconW
SHGetSpecialFolderPathW

ole32

OleUninitialize
CoCreateGuid
CoGetInterfaceAndReleaseStream
CLSIDFromString
StringFromCLSID
CoTaskMemFree
CoGetClassObject
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
ReleaseStgMedium
RegisterDragDrop
CoGetMalloc
DoDragDrop
CoInitialize
CoCreateInstance
OleDraw
OleInitialize
RevokeDragDrop
OleDuplicateData
CreateStreamOnHGlobal
CLSIDFromProgID
OleSetContainedObject
CoMarshalInterThreadInterfaceInStream
OleRun
CoTaskMemAlloc
OleCreate

oleaut32

SysFreeString
SysAllocString
VariantClear
SysAllocStringLen
SysAllocStringByteLen
SafeArrayDestroy
SafeArrayAccessData
SafeArrayCreateVector
SysStringLen

wininet

HttpOpenRequestW
HttpSendRequestExW
InternetOpenW
InternetConnectW
InternetSetStatusCallbackW
InternetCloseHandle
InternetReadFileExA
InternetReadFile
HttpEndRequestW
FtpOpenFileW
InternetWriteFile
InternetGetLastResponseInfoW
FtpCommandW
InternetQueryOptionW
InternetSetOptionW
InternetCanonicalizeUrlW
FtpGetFileSize
UnlockUrlCacheEntryFileW
FindNextUrlCacheEntryW
FindFirstUrlCacheEntryA
UnlockUrlCacheEntryFileA
FindNextUrlCacheEntryA
FindCloseUrlCache
InternetSetOptionA
DeleteUrlCacheEntryA
HttpAddRequestHeadersA
InternetConnectA
CommitUrlCacheEntryA
HttpOpenRequestA
DeleteUrlCacheEntryW
InternetCrackUrlW
GetUrlCacheEntryInfoW
CommitUrlCacheEntryW
CreateUrlCacheEntryW
HttpQueryInfoW
InternetGetConnectedState
FindFirstUrlCacheEntryW

dsound

ord1

shlwapi

StrStrIA
PathMatchSpecA
UrlCanonicalizeW
PathFileExistsW
PathRemoveFileSpecW
SHEnumKeyExW
StrCpyNW
StrCmpW
PathIsUNCW
UrlIsW
SHQueryInfoKeyW
StrRetToBufW
SHDeleteValueW
SHDeleteKeyW
SHSetValueW
UrlGetPartW
SHAutoComplete
PathIsRootW
PathFindFileNameW
UrlCombineW
PathMatchSpecW
UrlIsOpaqueW
StrStrIW
PathCombineW
PathFindExtensionW
PathGetDriveNumberW
PathIsDirectoryW
PathIsURLW
SHGetValueW
SHEnumValueW
PathFindFileNameA

msvcrt

swscanf
fseek
ftell
fread
_wtol
_ltow
malloc
free
_wfopen
fwprintf
fclose
iswdigit
swprintf
vswprintf
wcsncmp
_ftol
_wtoi
_except_handler3
wcscat
_snprintf
_itow
wcschr
time
_wcsnicmp
_beginthreadex
memmove
wcscmp
_wcsicmp
wcsstr
??2@YAPAXI@Z
wcsrchr
wcsncpy
wcscpy
_snwprintf
wcslen
wcspbrk
__CxxFrameHandler
gmtime
wcsftime
localtime
_ui64tow
_wtoi64
_i64tow
wcsncat
fopen
fwrite
_purecall
mktime
fputs
strrchr
strncpy
strchr
iswspace
wcstod
realloc
strpbrk
strstr
sscanf
iswlower
atoi
sprintf
_strlwr
strncat
_CIpow
strncmp
_atoi64
fputws
wcstok
exit
scanf
printf
isalnum
toupper
towlower
towupper
_ismbslead
fprintf
_strnicmp
fgets
rewind
memset
memcpy
_CxxThrowException
__dllonexit
_onexit
_stricmp
?terminate@@YAXXZ
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
_controlfp
_wstrtime

urlmon

ObtainUserAgentString
CoInternetGetSession
CoInternetCombineUrl
CoGetClassObjectFromURL
RegisterBindStatusCallback
RevokeBindStatusCallback

netapi32

Netbios

gdiplus

GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipCreateImageAttributes
GdipSetInterpolationMode
GdipCreateFromHDC
GdipFree
GdipDisposeImage
GdipCloneImage
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToFile
GdiplusStartup
GdipAlloc
GdipLoadImageFromStream
GdipGetImageHeight
GdipDeleteGraphics
GdipDrawImageRectRectI
GdipGetImageWidth

wintrust

WinVerifyTrust
CryptCATAdminEnumCatalogFromHash
CryptCATAdminReleaseCatalogContext
CryptCATAdminReleaseContext
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminAcquireContext

comctl32

ImageList_DragEnter
ImageList_BeginDrag
ImageList_GetIconSize
ord16
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Duplicate
ImageList_GetImageCount
ImageList_AddMasked
InitCommonControlsEx
ImageList_Create
ImageList_Remove
ImageList_Destroy
ImageList_DrawEx
ImageList_GetImageInfo
ImageList_DragShowNolock
ImageList_DragMove
ImageList_EndDrag
ImageList_Add
ImageList_SetBkColor
ImageList_Draw

Sections

.text
Size: 876KB - Virtual size: 875KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 364KB - Virtual size: 361KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
֮.ini

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 3.6MB

.ndata Size: - Virtual size: 84KB

.rsrc Size: 22KB - Virtual size: 21KB

a648aeaa164b592c1e8892a10400b5ae

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 296B

.reloc Size: 1024B - Virtual size: 518B

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 784B

.data Size: 512B - Virtual size: 100B

.reloc Size: 512B - Virtual size: 470B

1e2884056e655f2b7bc5a904e352fc80

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1024B - Virtual size: 574B

d83f71e61ee459ee63ca3e829966a9dc

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Exports

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 3.6MB

.ndata
Size: - Virtual size: 84KB

.rsrc
Size: 22KB - Virtual size: 21KB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 296B

.reloc
Size: 1024B - Virtual size: 518B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 784B

.data
Size: 512B - Virtual size: 100B

.reloc
Size: 512B - Virtual size: 470B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 574B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 410B

.text
Size: 11KB - Virtual size: 10KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: - Virtual size: 193KB

.reloc
Size: 2KB - Virtual size: 1KB

04:00:00:00:00:01:23:9e:0f:ac:b3
Certificate

04:00:00:00:00:01:20:19:c1:90:66
Certificate

01:00:00:00:00:01:25:b0:b4:cc:01
Certificate

01:00:00:00:00:01:2a:22:5d:6d:d7
Certificate

04:00:00:00:00:01:1e:44:a5:ec:be
Certificate

cc:2f:76:ab:a4:76:cc:11:a7:d3:95:d1:0d:12:f3:46:0b:b7:3a:c2
Signer

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 48KB

.rsrc
Size: 16KB - Virtual size: 15KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB