456c5d280f68776b4d8f82642e7cbe6d_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

456c5d280f68776b4d8f82642e7cbe6d_JaffaCakes118
Size

4.8MB
MD5

456c5d280f68776b4d8f82642e7cbe6d
SHA1

dec9d93c0c4a0b32e7da0439c91da6c3fcd0c699
SHA256

981eae3257d11b6d3b586d72d86bd3177a90092436ad0efc8a9c0f756e85880e
SHA512

86d95d8c2185a31535ea7df6d2a35e270a503064ae64c8336f7435222c317503fb32915855308d13acef75dd936aa652e8b83f319ce6cf3999d7c386f79b8d03
SSDEEP

98304:fgY4EcktGSZ8jlfyt/JBhuW6FobThUM73FCEt+SrevWqCnOhtNT:fgYBccGtRq/JBgW6aThpY2cWqLj

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
456c5d280f68776b4d8f82642e7cbe6d_JaffaCakes118
unpack001/$PLUGINSDIR/mx2_data/Modules/MxDownloader/TaskManager.dll
unpack001/$PLUGINSDIR/mx2_data/Modules/MxDownloader/asyn_dns.dll
unpack001/$PLUGINSDIR/mx2_data/Modules/MxDownloader/download_interface.dll
unpack001/$PLUGINSDIR/mx2_data/Modules/MxMute/MxMute.dll
unpack001/$PLUGINSDIR/mx2_data/MxProxy2.dll

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

456c5d280f68776b4d8f82642e7cbe6d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/install_data/InstallLang/en.ini
$PLUGINSDIR/install_data/InstallLang/zh-cn.ini
$PLUGINSDIR/install_data/MxUI.dll
.dll windows:4 windows x86 arch:x86

e03dbf1d9b2548717e2b645453b93825

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06-07-2009 00:00

Not After

14-07-2012 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3f:21:af:bd:ae:1e:90:8c:fb:d5:fc:2e:79:b8:43:5e:3a:26:83:fc
Signer

Actual PE Digest

3f:21:af:bd:ae:1e:90:8c:fb:d5:fc:2e:79:b8:43:5e:3a:26:83:fc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsBadReadPtr
GetOEMCP
GetACP
ReadFile
SetUnhandledExceptionFilter
FlushFileBuffers
GetTimeZoneInformation
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
WriteFile
FatalAppExitA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleHandleA
GetCurrentThread
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
HeapSize
HeapReAlloc
GetCurrentProcess
IsBadCodePtr
SetStdHandle
CreateFileA
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
SetConsoleCtrlHandler
CompareStringA
CompareStringW
SetEnvironmentVariableA
FindResourceW
FindResourceA
LoadResource
LockResource
SizeofResource
Sleep
FreeLibrary
LoadLibraryA
GetProcAddress
GetTempPathA
GetTempFileNameA
GetLocaleInfoA
GetCurrentThreadId
GetTickCount
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
LeaveCriticalSection
TerminateProcess
ExitProcess
RaiseException
GetVersion
GetCommandLineA
HeapAlloc
DeleteFileA
HeapFree
RtlUnwind
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
MulDiv
CloseHandle
SetEvent
InterlockedExchange
WideCharToMultiByte
SystemTimeToFileTime
GetLocalTime
GetSystemTime
GetDateFormatW
FileTimeToSystemTime
GetThreadLocale
GetLocaleInfoW
GetLastError
GetVersionExA
CreateThread
CreateEventA
ExitThread
WaitForSingleObject
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileW
SetEndOfFile
SetFilePointer
UnmapViewOfFile
FlushViewOfFile
GetCPInfo
SetThreadLocale
GetNumberFormatW
GetCurrencyFormatW
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleFileNameA
GetSystemDefaultLCID

user32

GetAncestor
GetDesktopWindow
UnregisterClassW
RegisterClassW
RegisterClassExW
UnregisterClassA
RegisterClassExA
IsWindowVisible
GetActiveWindow
CreateWindowExW
RegisterWindowMessageA
SetForegroundWindow
GetDC
ScrollDC
ScrollWindowEx
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
SetScrollInfo
ShowWindow
PostQuitMessage
SystemParametersInfoA
EndDialog
GetWindow
CreateWindowExA
SetWindowTextA
SetWindowPos
DialogBoxIndirectParamA
DestroyWindow
AdjustWindowRectEx
GetMessageA
TranslateMessage
DispatchMessageA
LoadCursorFromFileA
DestroyIcon
SetCursor
LoadCursorA
CreateCursor
DefWindowProcW
IsWindowEnabled
GetWindowPlacement
MoveWindow
PostMessageA
GetWindowThreadProcessId
WindowFromPoint
GetCursorPos
GetFocus
DrawFocusRect
DrawTextA
DrawTextW
InvertRect
CharLowerBuffW
CharUpperBuffW
GetSysColorBrush
DrawEdge
DrawFrameControl
DrawIconEx
CreateIconFromResourceEx
GetKeyState
MessageBeep
RegisterClipboardFormatW
CloseClipboard
EmptyClipboard
OpenClipboard
EnumClipboardFormats
CountClipboardFormats
SetClipboardData
GetClipboardData
IsClipboardFormatAvailable
LoadStringW
GetCaretBlinkTime
GetDoubleClickTime
GetScrollInfo
GetWindowDC
InflateRect
OffsetRect
GetClassLongA
FillRect
ReleaseDC
GetAsyncKeyState
GetSysColor
UpdateWindow
GetDlgCtrlID
SetTimer
ClientToScreen
GetSystemMetrics
GetCapture
ReleaseCapture
GetClientRect
BeginPaint
EndPaint
InvalidateRect
ScreenToClient
DefWindowProcA
IsWindowUnicode
SetWindowLongA
SetCapture
SetFocus
PeekMessageA
GetParent
IsWindow
MapWindowPoints
GetWindowLongA
GetWindowRect
SendMessageA
NotifyWinEvent
KillTimer

gdi32

CombineRgn
ExcludeClipRect
SetTextColor
SetBkColor
CreateSolidBrush
SetWindowOrgEx
BitBlt
DeleteDC
CreateRectRgnIndirect
LPtoDP
CreateCompatibleBitmap
SelectObject
GetStockObject
GetMapMode
SetMapMode
GetWindowExtEx
SetWindowExtEx
GetTextMetricsA
GetDeviceCaps
IntersectClipRect
CreateCompatibleDC
GetKerningPairsA
GetGlyphOutlineW
GetCurrentObject
SetDIBitsToDevice
CreateDIBPatternBrushPt
StretchBlt
SetStretchBltMode
StretchDIBits
CreateDIBSection
GetTextAlign
GetPixel
SetPixel
RoundRect
CreateRectRgn
SelectClipRgn
CreateBitmap
CreatePatternBrush
TextOutA
TextOutW
GetTextExtentPoint32A
GetTextExtentPoint32W
RectVisible
PatBlt
Rectangle
GetWindowOrgEx
CreateHatchBrush
SetBrushOrgEx
CreatePen
SetTextAlign
SetBkMode
EnumFontFamiliesExW
EnumFontFamiliesExA
CreateFontA
GetViewportExtEx
SetViewportExtEx
DPtoLP
GetObjectA
GetClipBox
SaveDC
SetViewportOrgEx
SetLayout
RestoreDC
CreateDCA
DeleteObject

ole32

CoInitialize
CoCreateGuid

oleaut32

SysAllocStringLen

oleacc

LresultFromObject
AccessibleObjectFromWindow

winmm

timeGetDevCaps
timeSetEvent
timeGetTime
timeKillEvent

advapi32

IsTextUnicode

comctl32

ImageList_Draw
ImageList_GetIconSize

shell32

SHGetSpecialFolderPathA
SHGetFileInfoW

wininet

InternetCombineUrlA
InternetConnectA
HttpOpenRequestA
InternetCloseHandle
InternetReadFile
InternetSetOptionA
InternetQueryOptionA
InternetErrorDlg
HttpSendRequestA
HttpQueryInfoA
InternetOpenA
InternetGetLastResponseInfoA

msimg32

AlphaBlend

Exports

Exports

?HTMLayoutEnumResourcesEx@@YGIPAUHWND__@@P6GHPBGPBDPBEKPAX@ZPAPAX@Z
HTMLayoutAnimateElement
HTMLayoutAppendMasterCSS
HTMLayoutAttachEventHandler
HTMLayoutAttachEventHandlerEx
HTMLayoutCallBehaviorMethod
HTMLayoutClassNameA
HTMLayoutClassNameW
HTMLayoutClearAttributes
HTMLayoutClipboardCopy
HTMLayoutCloneElement
HTMLayoutCombineURL
HTMLayoutCommitUpdates
HTMLayoutControlGetType
HTMLayoutControlGetValue
HTMLayoutControlSetValue
HTMLayoutCreateElement
HTMLayoutDataReady
HTMLayoutDataReadyAsync
HTMLayoutDeclareElementType
HTMLayoutDeleteElement
HTMLayoutDetachElement
HTMLayoutDetachEventHandler
HTMLayoutDialog
HTMLayoutElementGetExpando
HTMLayoutElementSetExpando
HTMLayoutEnumElementStyles
HTMLayoutEnumResources
HTMLayoutEnumerate
HTMLayoutFindElement
HTMLayoutGetAttributeByName
HTMLayoutGetAttributeCount
HTMLayoutGetCharacterRect
HTMLayoutGetChildrenCount
HTMLayoutGetElementByUID
HTMLayoutGetElementHtml
HTMLayoutGetElementHwnd
HTMLayoutGetElementIndex
HTMLayoutGetElementInnerText
HTMLayoutGetElementInnerText16
HTMLayoutGetElementIntrinsicHeight
HTMLayoutGetElementIntrinsicWidths
HTMLayoutGetElementLocation
HTMLayoutGetElementState
HTMLayoutGetElementText
HTMLayoutGetElementType
HTMLayoutGetElementUID
HTMLayoutGetFocusElement
HTMLayoutGetGraphin
HTMLayoutGetMinHeight
HTMLayoutGetMinWidth
HTMLayoutGetNthAttribute
HTMLayoutGetNthChild
HTMLayoutGetParentElement
HTMLayoutGetRootElement
HTMLayoutGetScrollInfo
HTMLayoutGetSelectedHTML
HTMLayoutGetStyleAttribute
HTMLayoutHidePopup
HTMLayoutHttpRequest
HTMLayoutInit
HTMLayoutInsertElement
HTMLayoutIsElementEnabled
HTMLayoutIsElementVisible
HTMLayoutLoadFile
HTMLayoutLoadHtml
HTMLayoutLoadHtmlEx
HTMLayoutMoveElement
HTMLayoutMoveElementEx
HTMLayoutParseValue
HTMLayoutPostEvent
HTMLayoutProc
HTMLayoutProcND
HTMLayoutProcW
HTMLayoutProcessUIEvent
HTMLayoutRangeAdvancePos
HTMLayoutRangeCreate
HTMLayoutRangeFromPositions
HTMLayoutRangeFromSelection
HTMLayoutRangeInsertHtml
HTMLayoutRangeIsEmpty
HTMLayoutRangeRelease
HTMLayoutRangeReplace
HTMLayoutRangeToHtml
HTMLayoutRender
HTMLayoutRenderElement
HTMLayoutRequestElementData
HTMLayoutScrollToView
HTMLayoutSelectElements
HTMLayoutSelectElementsW
HTMLayoutSelectParent
HTMLayoutSelectParentW
HTMLayoutSelectionExist
HTMLayoutSendEvent
HTMLayoutSetAttributeByName
HTMLayoutSetCSS
HTMLayoutSetCallback
HTMLayoutSetCapture
HTMLayoutSetDataLoader
HTMLayoutSetElementHtml
HTMLayoutSetElementInnerText
HTMLayoutSetElementInnerText16
HTMLayoutSetElementState
HTMLayoutSetEventRoot
HTMLayoutSetHttpHeaders
HTMLayoutSetMasterCSS
HTMLayoutSetMediaType
HTMLayoutSetMode
HTMLayoutSetOption
HTMLayoutSetScrollPos
HTMLayoutSetStyleAttribute
HTMLayoutSetTimer
HTMLayoutSetTimerEx
HTMLayoutSetupDebugOutput
HTMLayoutShowPopup
HTMLayoutShowPopupAt
HTMLayoutSortElements
HTMLayoutSwapElements
HTMLayoutTrackPopupAt
HTMLayoutTraverseUIEvent
HTMLayoutUpdateElement
HTMLayoutUpdateElementEx
HTMLayoutUpdateView
HTMLayoutUpdateWindow
HTMLayoutVisitElements
HTMLayoutWindowAttachEventHandler
HTMLayoutWindowDetachEventHandler
HTMLayout_UnuseElement
HTMLayout_UseElement
HTMLiteAdvanceFocus
HTMLiteAttachEventHandler
HTMLiteCreateInstance
HTMLiteDestroyInstance
HTMLiteDetachEventHandler
HTMLiteFindElement
HTMLiteGetDocumentMinHeight
HTMLiteGetDocumentMinWidth
HTMLiteGetElementHTMLITE
HTMLiteGetFocusElement
HTMLiteGetNextFocusable
HTMLiteGetRootElement
HTMLiteGetTag
HTMLiteLoadHtmlFromFile
HTMLiteLoadHtmlFromMemory
HTMLiteMeasure
HTMLiteRender
HTMLiteRenderOnBitmap
HTMLiteSetCallback
HTMLiteSetDataReady
HTMLiteSetDataReadyAsync
HTMLiteSetMediaType
HTMLiteSetTag
HTMLiteTraverseUIEvent
HTMPrintCreateInstance
HTMPrintDestroyInstance
HTMPrintGetDocumentHeight
HTMPrintGetDocumentMinWidth
HTMPrintGetRootElement
HTMPrintGetTag
HTMPrintLoadHtmlFromFile
HTMPrintLoadHtmlFromFileW
HTMPrintLoadHtmlFromMemory
HTMPrintMeasure
HTMPrintRender
HTMPrintSetDataReady
HTMPrintSetHyperlinkAreaCallback
HTMPrintSetLoadDataCallback
HTMPrintSetMediaType
HTMPrintSetNextPageCallback
HTMPrintSetTag
ValueBinaryData
ValueBinaryDataSet
ValueClear
ValueCompare
ValueCopy
ValueElementsCount
ValueFloatData
ValueFloatDataSet
ValueFromString
ValueGetValueOfKey
ValueInit
ValueInt64Data
ValueInt64DataSet
ValueIntData
ValueIntDataSet
ValueInvoke
ValueNthElementKey
ValueNthElementValue
ValueNthElementValueSet
ValueSetValueToKey
ValueStringData
ValueStringDataSet
ValueToString
ValueType
_HTMLayoutUrlEscape@16
_HTMLayoutUrlUnescape@12
_HTMLiteGetElementByUID@12
_HTMPrintSetCallback@12
_ValueEnumElements@12
_ValueIsolate@4

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/install_data/maxzlib.dll
.dll windows:4 windows x86 arch:x86

58ebe63bde2e8d9e022f7f601830ac71

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:02:99:22:7c:f0:27:e8:e1:2b:bb:7a:75:d2:98:8b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

16-06-2008 00:00

Not After

15-07-2009 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

66:9e:fd:ce:66:08:bf:19:23:90:9d:36:f2:12:9d:fa:7a:ac:c8:96
Signer

Actual PE Digest

66:9e:fd:ce:66:08:bf:19:23:90:9d:36:f2:12:9d:fa:7a:ac:c8:96

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_fdopen
fopen
_errno
malloc
sprintf
fwrite
fread
fclose
free
fprintf
fflush
fseek
fputc
strerror
clearerr
_initterm
_adjust_fdiv
_vsnprintf
ftell

kernel32

DisableThreadLibraryCalls

Exports

Exports

adler32
compress
compress2
compressBound
crc32
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
get_crc_table
gzclearerr
gzclose
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateInit2_
inflateInit_
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
uncompress
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/install_data/mxtool.dll
.dll windows:4 windows x86 arch:x86

1e1b4359ecfd77fe0126157cf089cd8d

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06-07-2009 00:00

Not After

14-07-2012 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6f:27:41:b6:af:4a:6c:58:eb:1a:da:61:3a:d9:5a:bc:b7:d6:74:36
Signer

Actual PE Digest

6f:27:41:b6:af:4a:6c:58:eb:1a:da:61:3a:d9:5a:bc:b7:d6:74:36

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

maxzlib

get_crc_table
deflateEnd
deflate
deflateInit2_
inflateEnd
crc32
inflate
inflateInit2_

mfc42u

ord3171
ord6381
ord353
ord538
ord861
ord2795
ord3502
ord3175
ord6006
ord5438
ord3313
ord5647
ord3122
ord3611
ord2385
ord350
ord1971
ord922
ord535
ord858
ord6921
ord5596
ord940
ord942
ord6919
ord4272
ord4124
ord3178
ord5446
ord6390
ord2836
ord5436
ord6379
ord2099
ord1824
ord349
ord2910
ord1825
ord354
ord665
ord6920
ord6918
ord5568
ord6466
ord1560
ord4078
ord268
ord6867
ord5180
ord2593
ord5769
ord4172
ord6308
ord958
ord2912
ord941
ord2810
ord2754
ord5603
ord1083
ord823
ord2606
ord773
ord3658
ord540
ord501
ord800
ord3697
ord825
ord1194
ord269
ord826
ord600
ord1571
ord1250
ord1248
ord1563
ord1240
ord342
ord1179
ord1570
ord1165
ord1568
ord1173
ord4197
ord1115

msvcrt

_onexit
__dllonexit
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
wcscpy
strlen
??0exception@@QAE@ABV0@@Z
_ftol
ceil
_wcsicoll
_wcsicmp
wcscmp
wcslen
_waccess
_wchdir
_wutime
_wstat
_wsplitpath
realloc
malloc
localtime
mktime
_errno
wcsncpy
memmove
memcmp
qsort
wcscoll
abs
srand
rand
free
_purecall
time
memcpy
_CxxThrowException
__CxxFrameHandler
memset

kernel32

DeleteFileW
EnterCriticalSection
GetTickCount
lstrcpyW
GetModuleFileNameW
GetModuleHandleW
LocalAlloc
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
MoveFileW
MapViewOfFile
CreateFileMappingW
CloseHandle
UnmapViewOfFile
LocalFree
FormatMessageW
GetLastError
GetDiskFreeSpaceW
GetFileSize
CreateFileW
GetTempFileNameW
GetTempPathW
GetCurrentDirectoryW
SetFileAttributesW
GetFileAttributesW
GetDriveTypeW
SetVolumeLabelW
LeaveCriticalSection

user32

GetWindowRect
KillTimer
OemToCharBuffA
CharToOemBuffA
RegisterWindowMessageA
IsWindow
SetWindowPos
SetTimer
PostMessageW

msvcp60

??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
?str@?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_7out_of_range@std@@6B@
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??_D?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Exports

Exports

CreateAMObj
CreateMxZipObj
DeleteAMObj
MxFree

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Default/Filter/template.xml
$PLUGINSDIR/mx2_data/Default/Filter/template0x0804.xml
$PLUGINSDIR/mx2_data/Default/config/Config.ini
$PLUGINSDIR/mx2_data/Default/config/MFA2.dat
.xml
$PLUGINSDIR/mx2_data/Default/config/ProxyConfig.xml
$PLUGINSDIR/mx2_data/Default/config/SiteList.xml
$PLUGINSDIR/mx2_data/Default/config/System.dat
$PLUGINSDIR/mx2_data/Default/config/dmgr.ini
$PLUGINSDIR/mx2_data/Favicons/EABCDIFOCCAMFJCAECELCMBPCN.ico
$PLUGINSDIR/mx2_data/Favicons/EABCDIFOCHACFPCDFLAAGBBDCO.ico
$PLUGINSDIR/mx2_data/Favicons/EABCDIFOHBFOADHNAEELCMBPCN.ico
$PLUGINSDIR/mx2_data/Favicons/FOELCCBBDIBJFICLFJELCMBO.ico
$PLUGINSDIR/mx2_data/Language/Chinese/language.ini
$PLUGINSDIR/mx2_data/Language/English/Language.ini
$PLUGINSDIR/mx2_data/Language/InstallLang/en.ini
$PLUGINSDIR/mx2_data/Language/InstallLang/zh-cn.ini
$PLUGINSDIR/mx2_data/Maxthon.exe
.exe windows:4 windows x86 arch:x86

96a00c4610a71d269d4143d3155e1866

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06-07-2009 00:00

Not After

14-07-2012 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e6:9a:d9:82:9f:85:3f:70:21:17:92:32:c4:34:98:8f:31:c0:fb:2e
Signer

Actual PE Digest

e6:9a:d9:82:9f:85:3f:70:21:17:92:32:c4:34:98:8f:31:c0:fb:2e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

HttpAddRequestHeadersW
HttpSendRequestExW
HttpOpenRequestW
InternetCloseHandle
InternetCrackUrlW
FindFirstUrlCacheEntryW
FindNextUrlCacheEntryW
FindCloseUrlCache
DeleteUrlCacheEntryW
InternetGetCookieW
InternetConnectW
InternetOpenW
GetUrlCacheEntryInfoW
InternetSetOptionW
InternetCombineUrlW
InternetWriteFile
InternetCanonicalizeUrlW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

atl

ord42

ws2_32

closesocket
gethostname
listen
bind
htons
inet_addr
socket
recv
accept
gethostbyname
WSACleanup
WSAStartup
WSACancelBlockingCall
inet_ntoa

iphlpapi

GetAdaptersInfo
GetTcpStatistics

netapi32

Netbios

imm32

ImmReleaseContext
ImmGetCandidateListCountW
ImmGetContext
ImmSetCompositionFontW
ImmSetCompositionWindow
ImmNotifyIME
ImmSetCandidateWindow
ImmAssociateContext
ImmGetOpenStatus
ImmIsIME
ImmGetCandidateListW

winmm

timeGetTime
PlaySoundW

rpcrt4

UuidCreate

mxpp

CreatePpObj
DeletePpObj

mfc42u

ord438
ord4361
ord5340
ord4524
ord4538
ord5681
ord3269
ord439
ord5491
ord2078
ord6640
ord5024
ord2715
ord2382
ord3054
ord5094
ord5097
ord4461
ord4298
ord3345
ord975
ord5468
ord3398
ord2874
ord2873
ord4072
ord5233
ord2641
ord1658
ord4430
ord5248
ord4421
ord3364
ord3618
ord4237
ord4451
ord3701
ord5778
ord5777
ord4787
ord4331
ord4975
ord4146
ord5006
ord674
ord5278
ord4078
ord2444
ord6153
ord698
ord610
ord287
ord396
ord3432
ord1972
ord665
ord1971
ord6381
ord5180
ord354
ord6489
ord4053
ord3176
ord911
ord6135
ord5852
ord4182
ord5626
ord2440
ord5830
ord2036
ord3898
ord3806
ord6278
ord6168
ord4155
ord6316
ord1112
ord1113
ord5438
ord3313
ord1644
ord2229
ord3397
ord2447
ord3579
ord543
ord803
ord613
ord289
ord1099
ord772
ord3696
ord500
ord5602
ord5856
ord812
ord559
ord2127
ord2680
ord1761
ord6375
ord1105
ord6874
ord5679
ord1085
ord5597
ord6867
ord6655
ord1560
ord268
ord798
ord1989
ord6403
ord6388
ord5188
ord533
ord2813
ord1567
ord4197
ord539
ord690
ord1980
ord688
ord5201
ord6055
ord389
ord3332
ord5261
ord4370
ord4847
ord4992
ord6048
ord1767
ord5276
ord4419
ord3592
ord324
ord4229
ord1594
ord6376
ord4704
ord941
ord702
ord400
ord5592
ord3436
ord915
ord5630
ord4186
ord860
ord3975
ord542
ord802
ord6654
ord4273
ord6565
ord4272
ord2769
ord2757
ord2289
ord2355
ord4029
ord6771
ord5857
ord3716
ord795
ord2294
ord6266
ord2385
ord5349
ord5352
ord920
ord3805
ord3633
ord2630
ord6466
ord1151
ord384
ord686
ord501
ord773
ord1782
ord4761
ord3514
ord6418
ord5164
ord5160
ord5161
ord5162
ord5165
ord5166
ord5225
ord5163
ord5183
ord5182
ord3789
ord2912
ord6421
ord6311
ord4175
ord6386
ord6423
ord3317
ord6009
ord5772
ord2596
ord3175
ord3178
ord3171
ord3504
ord604
ord1083
ord2754
ord276
ord5603
ord5042
ord2899
ord4475
ord1639
ord2117
ord2118
ord4896
ord5044
ord6420
ord1962
ord398
ord700
ord3434
ord913
ord4184
ord5628
ord5590
ord6190
ord4327
ord6921
ord6919
ord3087
ord3693
ord765
ord2637
ord4050
ord1771
ord1863
ord6138
ord2248
ord1940
ord2388
ord3341
ord5296
ord5299
ord4074
ord4693
ord5303
ord565
ord817
ord1202
ord2718
ord1216
ord6363
ord6419
ord699
ord397
ord4118
ord5627
ord912
ord4183
ord5605
ord5639
ord6773
ord5589
ord3433
ord692
ord4219
ord465
ord859
ord4280
ord6920
ord1683
ord4433
ord2046
ord807
ord956
ord1137
ord1191
ord2520
ord5284
ord4425
ord5845
ord3810
ord3356
ord414
ord713
ord5801
ord857
ord1821
ord2293
ord5949
ord1764
ord6362
ord2405
ord2016
ord4214
ord2573
ord4395
ord3634
ord6139
ord3092
ord6004
ord3298
ord3282
ord6668
ord3909
ord6880
ord3995
ord4803
ord2362
ord6726
ord2403
ord2015
ord4213
ord2570
ord4392
ord3577
ord616
ord3312
ord6330
ord3626
ord683
ord2574
ord4396
ord3365
ord3635
ord693
ord1225
ord6898
ord3296
ord3993
ord3991
ord6918
ord2091
ord2809
ord6896
ord6003
ord6879
ord3281
ord3314
ord3605
ord2550
ord2579
ord4400
ord3389
ord3724
ord804
ord6777
ord4638
ord4212
ord2568
ord4391
ord3347
ord3572
ord283
ord6899
ord6699
ord2932
ord4055
ord1899
ord5155
ord5156
ord5154
ord4899
ord4736
ord4970
ord4942
ord4352
ord4371
ord4848
ord5283
ord4829
ord768
ord489
ord5886
ord4253
ord3694
ord3014
ord2508
ord361
ord4470
ord6732
ord6498
ord2291
ord6776
ord2478
ord4001
ord1869
ord3525
ord2431
ord1686
ord5614
ord994
ord4336
ord4681
ord4633
ord5670
ord2148
ord4850
ord4914
ord3128
ord5998
ord2129
ord1955
ord5207
ord2948
ord3863
ord5144
ord4699
ord4701
ord2871
ord2993
ord5645
ord4108
ord4655
ord4654
ord4762
ord4644
ord4897
ord4542
ord4515
ord3793
ord4982
ord4919
ord4924
ord4929
ord4653
ord4903
ord4902
ord4662
ord4661
ord4660
ord4642
ord4683
ord5017
ord4648
ord4637
ord4348
ord4774
ord4643
ord5286
ord4630
ord5054
ord4578
ord4365
ord4355
ord4350
ord4733
ord4735
ord4732
ord4403
ord4597
ord5002
ord4409
ord4986
ord4973
ord2480
ord3399
ord4533
ord4528
ord4943
ord2533
ord2949
ord2376
ord6366
ord2978
ord3143
ord3574
ord4460
ord2981
ord3371
ord3075
ord4076
ord4618
ord5273
ord723
ord423
ord3232
ord2719
ord2722
ord2721
ord3824
ord3941
ord2615
ord4244
ord1174
ord2679
ord2354
ord1834
ord529
ord796
ord2244
ord5996

msvcrt

iswxdigit
iswalnum
iswspace
iswdigit
iswprint
iswalpha
rand
wcstod
_CIpow
_wcslwr
calloc
_stricmp
_itoa
_controlfp
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
strncmp
_vsnwprintf
??1exception@@UAE@XZ
__p___argc
__p___wargv
_putenv
wcsncmp
strtod
sscanf
realloc
localeconv
_ltow
vswprintf
sprintf
strcat
_wcsnicmp
wcsrchr
swprintf
mktime
strncpy
_beginthreadex
wcsncpy
strcpy
_except_handler3
strcmp
malloc
free
wcstol
time
_ftol
swscanf
wcscpy
wcschr
wcslen
strlen
??0exception@@QAE@ABV0@@Z
abs
_CxxThrowException
memcpy
memmove
_wtoi
_wcsicmp
_wcsupr
wcsstr
_itow
wcscmp
memcmp
memset
_purecall
__CxxFrameHandler
qsort

kernel32

RaiseException
CompareStringW
GetExitCodeThread
CreateThread
SetThreadPriority
EnumResourceLanguagesW
GetVersionExW
GetModuleHandleA
LoadLibraryA
lstrcmpA
EnumResourceTypesW
EnumResourceNamesW
GetStartupInfoW
FindResourceA
SetFilePointer
GetVolumeInformationW
GetFileAttributesExW
GetProcessHeap
HeapAlloc
HeapFree
GetTimeFormatW
GetDateFormatW
GlobalMemoryStatus
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetShortPathNameW
HeapDestroy
GetCommandLineW
GlobalAddAtomW
GlobalFindAtomW
TerminateProcess
IsBadReadPtr
IsBadWritePtr
CreateProcessW
ExpandEnvironmentStringsW
FindAtomW
GlobalDeleteAtom
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetEnvironmentVariableW
SetProcessWorkingSetSize
ReleaseSemaphore
CreateSemaphoreW
GetWindowsDirectoryW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
GetLocalTime
GetCurrentDirectoryW
SetCurrentDirectoryW
GetTempFileNameW
GetUserDefaultLangID
GetSystemDefaultLangID
lstrcpynW
GetCurrentProcessId
QueryPerformanceFrequency
GetPrivateProfileStringW
GetTempPathW
QueryPerformanceCounter
CopyFileW
FindResourceW
SizeofResource
LoadResource
LockResource
InitializeCriticalSectionAndSpinCount
GetVersion
lstrcpyA
CreateFileA
GetFileSize
WriteFile
lstrcpyW
lstrcmpW
Sleep
ResetEvent
lstrcmpiW
SetEvent
lstrcatW
CreateEventW
GetUserDefaultLCID
GetPrivateProfileIntW
WaitForSingleObject
TerminateThread
FindFirstFileW
FindNextFileW
FindClose
CreateDirectoryW
LocalFree
OpenProcess
FreeLibrary
SetLastError
VirtualAlloc
SetThreadContext
GetThreadContext
FlushInstructionCache
ResumeThread
VirtualProtect
InterlockedCompareExchange
GetCurrentProcess
FormatMessageW
VirtualQuery
GetModuleFileNameW
CreateFileW
ReadFile
CloseHandle
GlobalSize
lstrlenA
WideCharToMultiByte
GetLastError
LoadLibraryW
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
GlobalAlloc
DeleteFileW
InterlockedExchange
MulDiv
GetFileAttributesW
GetTickCount
GlobalLock
GlobalUnlock
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
lstrlenW
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc

user32

GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
CopyAcceleratorTableW
LoadAcceleratorsW
DestroyAcceleratorTable
GetMenuState
GetTabbedTextExtentW
CheckMenuItem
GetClipboardFormatNameW
GetActiveWindow
GetWindowRect
GetClassInfoW
DefWindowProcW
LoadCursorW
RegisterWindowMessageW
EnableWindow
DrawFrameControl
SendMessageW
LoadImageW
InvalidateRect
DrawIconEx
DestroyIcon
GetKeyboardLayoutList
DrawTextW
CallNextHookEx
SetWindowsHookExW
mouse_event
MessageBeep
ShowCaret
CharUpperW
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
SetCursorPos
GetClassLongW
CreateIconIndirect
GetIconInfo
GetMenuDefaultItem
IsDialogMessageW
IsClipboardFormatAvailable
GetWindowRgn
GetDlgCtrlID
GetNextDlgTabItem
IsMenu
DrawStateW
GetLastActivePopup
GrayStringW
TabbedTextOutW
CreateAcceleratorTableW
CallWindowProcW
GetCursor
GetSysColorBrush
GetDoubleClickTime
PostMessageW
SetTimer
PtInRect
SetDlgItemTextW
CopyIcon
KillTimer
LockWindowUpdate
GetDCEx
InvertRect
GetKeyboardLayout
ActivateKeyboardLayout
TranslateAcceleratorW
CharNextW
UnregisterClassW
WaitForInputIdle
MonitorFromPoint
BringWindowToTop
MsgWaitForMultipleObjects
FindWindowExW
IntersectRect
SetMenuDefaultItem
GetSystemMenu
GetMenu
GetAsyncKeyState
CharLowerW
EnableMenuItem
DestroyMenu
TrackPopupMenu
GetTopWindow
FindWindowW
GetUpdateRect
BeginPaint
EndPaint
SetActiveWindow
SetMenu
InsertMenuW
LoadBitmapW
FillRect
MapVirtualKeyW
GetKeyNameTextW
RegisterHotKey
UnregisterHotKey
GetMessagePos
GetDlgItem
ModifyMenuW
GetMenuItemID
GetDesktopWindow
GetMenuItemCount
GetMenuItemInfoW
SetMenuItemInfoW
GetDlgItemTextW
GetClientRect
GetWindowTextW
GetCaretPos
EnumWindows
HideCaret
GetForegroundWindow
InSendMessage
LoadIconW
GetAncestor
GetMenuStringW
IsWindowEnabled
SetForegroundWindow
IsChild
EnumThreadWindows
GetWindowThreadProcessId
TranslateMessage
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
ChildWindowFromPoint
LoadStringW
RegisterWindowMessageA
wsprintfW
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
GetWindowDC
SetWindowTextW
GetWindowLongW
SetWindowLongW
IsIconic
RegisterClassExW
DestroyWindow
CreateWindowExW
SendMessageTimeoutW
GetMessageExtraInfo
DrawFocusRect
SetRectEmpty
GetWindowPlacement
GetSystemMetrics
SetWindowRgn
MapWindowPoints
RegisterClipboardFormatW
DeleteMenu
RemoveMenu
ScreenToClient
SetRect
InflateRect
SetWindowPos
SetParent
MoveWindow
ShowWindow
IsRectEmpty
IsZoomed
SystemParametersInfoW
OffsetRect
SetCapture
GetMessageW
GetCapture
DispatchMessageW
ReleaseCapture
IsWindowVisible
DrawEdge
IsWindow
RedrawWindow
GetParent
EqualRect
SetCursor
PeekMessageW
UpdateWindow
LoadMenuW
GetWindow
GetSubMenu
GetKeyState
GetDC
ReleaseDC
UnionRect
CreatePopupMenu
AppendMenuW
CopyRect
GetFocus
SetFocus
ClientToScreen
GetCursorPos
WindowFromPoint
GetClassNameW
SetLayeredWindowAttributes
GetSysColor
UnhookWindowsHookEx

gdi32

ExtCreateRegion
GetTextAlign
GetTextCharsetInfo
Ellipse
ExtFloodFill
CreatePatternBrush
CreatePolygonRgn
GetRgnBox
SetDIBits
GetDIBits
SetStretchBltMode
CreateBitmap
GetCurrentObject
PtInRegion
Polygon
EnumFontFamiliesExW
CreateDIBitmap
CreateDIBSection
CreateRectRgn
CombineRgn
GetWindowOrgEx
GetMapMode
SetBkColor
ExtTextOutW
RectVisible
GetBkColor
GetStockObject
GetObjectW
StretchBlt
DeleteObject
RoundRect
CreateRectRgnIndirect
CreateRoundRectRgn
SelectObject
GetDeviceCaps
GetBkMode
CreateFontIndirectW
GetTextMetricsW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateFontW
CreateSolidBrush
GetTextColor
SetTextColor
GetTextExtentPoint32W
GetBitmapBits
GetViewportOrgEx
GetPixel
PtVisible
CreatePen
PatBlt
TextOutW
DeleteDC
Escape
SetPixelV
SetPixel

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegEnumValueW
RegOpenKeyW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegRestoreKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyW
SetNamedSecurityInfoA
RegCloseKey

shell32

ShellExecuteExW
SHGetSpecialFolderPathW
SHChangeNotify
SHGetMalloc
ShellExecuteW
Shell_NotifyIconW
SHBrowseForFolderW
DragQueryFileW
SHGetSpecialFolderLocation
SHAppBarMessage
DragFinish
SHGetPathFromIDListW
SHFileOperationW
SHGetFileInfoW

comctl32

ImageList_EndDrag
ImageList_GetIcon
_TrackMouseEvent
ImageList_DragMove
ImageList_BeginDrag
ImageList_DragShowNolock
ImageList_AddMasked
ImageList_Destroy
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Add
ImageList_GetImageInfo
ImageList_Draw
PropertySheetW
ImageList_Remove
ImageList_Create
ImageList_ReplaceIcon

ole32

CoCreateInstance
CLSIDFromProgID
CreateStreamOnHGlobal
CoTaskMemAlloc
CLSIDFromString
CoRevokeClassObject
CoRegisterClassObject
StringFromCLSID
CoCreateGuid
StringFromGUID2
CoInitializeEx
CoMarshalInterThreadInterfaceInStream
CoTaskMemFree
CoUninitialize
CoGetInterfaceAndReleaseStream
CoLoadLibrary
OleRun
OleInitialize
OleUninitialize

oleaut32

SysStringLen
SysAllocString
VariantClear
SysAllocStringLen
RegisterTypeLi
LoadRegTypeLi
SysFreeString
SafeArrayCreate
SafeArrayPutElement
VariantChangeType
VariantCopy
LoadTypeLi
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
OleLoadPicturePath
VariantChangeTypeEx
GetErrorInfo
VariantInit
SysStringByteLen
SysAllocStringByteLen

urlmon

RegisterBindStatusCallback
CoInternetCreateZoneManager
CoInternetCreateSecurityManager
CreateURLMoniker
URLDownloadToFileW

msvcp60

?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIABV12@II@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??_7out_of_range@std@@6B@
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ

gdiplus

GdipSetPenEndCap
GdipSetPenLineJoin
GdipDrawLineI
GdipDeletePen
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipImageRotateFlip
GdipDeleteGraphics
GdipDeleteBrush
GdipCreateFromHDC
GdipGetImagePixelFormat
GdipAlloc
GdipSetPenStartCap
GdipFree
GdipCreateTexture
GdipFillRectangleI
GdipDrawImageRectI
GdipGetImageWidth
GdipGetImageHeight
GdipDisposeImage
GdipCloneBitmapAreaI
GdipCloneImage
GdipDrawImageI
GdipCreateHICONFromBitmap
GdipGetImageThumbnail
GdipCreateBitmapFromFile
GdipCreatePen1
GdipDrawImageRectRectI
GdipCreateBitmapFromFileICM
GdipSetSmoothingMode
GdipCreateFromHWND
GdipCreateFromHWNDICM
GdipFlush
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipReleaseDC
GdipGetDC
GdiplusStartup
GdiplusShutdown
GdipCloneBrush
GdipCreateHBITMAPFromBitmap

mxhttprq

GetResponseCode
GetDownloadData
Finalize
Init
CreateAsynHttpClient
SetAutoClose
SetNoMemory
SetlocalPath
MxHttpRequestByCallBack
AddHeader

winhttp

WinHttpOpen
WinHttpConnect
WinHttpOpenRequest
WinHttpSendRequest
WinHttpQueryOption
WinHttpCloseHandle

crypt32

CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertNameToStrW
CertGetCertificateChain
CertFindExtension
CryptDecodeObjectEx
CertFreeCertificateContext
CryptHashCertificate

shlwapi

PathIsNetworkPathW
UrlUnescapeW
StrStrW
StrCmpW
PathCompactPathExW
PathCreateFromUrlW
PathRemoveFileSpecW
PathFileExistsW
SHDeleteKeyW
StrFormatByteSizeW
PathCombineW

psapi

GetModuleFileNameExW

mxproxy2

?DeleteProxy2Obj@@YAXPAPAX@Z
?CreateProxy2Obj@@YA_NPAPAX@Z

mxui

HTMLayoutGetNthChild
HTMLayoutScrollToView
HTMLayoutDataReady
HTMLayoutProcND
HTMLayoutLoadHtml
HTMLayoutSetElementInnerText16
HTMLayoutGetAttributeByName
HTMLayoutGetRootElement
HTMLayout_UseElement
HTMLayoutSetAttributeByName
HTMLayoutUpdateElementEx
HTMLayout_UnuseElement
HTMLayoutSetElementState
HTMLayoutGetChildrenCount
HTMLayoutGetParentElement
HTMLayoutVisitElements
HTMLayoutAttachEventHandlerEx
HTMLayoutSetCallback
HTMLayoutGetElementIndex
HTMLayoutGetElementLocation
HTMLayoutSetElementHtml
HTMLayoutSelectElementsW
HTMLayoutUpdateElement

mxaccount

DeleteMxAccount
CreateMxAccount

Exports

Exports

?interfaceMap@CCustomControlSite@@1UAFX_INTERFACEMAP@@B

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 420KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 824KB - Virtual size: 823KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 220KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxCapScr/MxCapScr.dll
.dll windows:4 windows x86 arch:x86

eaf1890cd9fb56f7ff3a04bc1fbd6089

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:02:99:22:7c:f0:27:e8:e1:2b:bb:7a:75:d2:98:8b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

16-06-2008 00:00

Not After

15-07-2009 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

19:2c:d3:fd:d2:a4:ab:09:27:cc:1c:46:6b:d5:e7:89:06:27:dd:11
Signer

Actual PE Digest

19:2c:d3:fd:d2:a4:ab:09:27:cc:1c:46:6b:d5:e7:89:06:27:dd:11

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CloseHandle
WaitForSingleObject
GlobalFree
FreeResource
GlobalUnlock
GlobalAlloc
GlobalSize
LockResource
SizeofResource
LoadResource
FindResourceW
GlobalLock
FreeLibrary
GetProcAddress
LoadLibraryA
ReadFile
FlushFileBuffers
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
SetStdHandle
GetOEMCP
GetCPInfo
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
SetFilePointer
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleA
HeapSize
HeapAlloc
HeapReAlloc
GetCurrentProcess
TerminateProcess
ExitProcess
TlsFree
TlsAlloc
HeapFree
WritePrivateProfileStringW
GetPrivateProfileStringW
GetFileAttributesW
SetLastError
GetCurrentThreadId
GetACP
GetModuleHandleW
GetVersion
GetCommandLineA
ExitThread
TlsGetValue
TlsSetValue
CreateThread
GetLastError
RaiseException
GetLocalTime
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
Sleep

user32

GetSystemMetrics
DefWindowProcW
RedrawWindow
ShowCursor
SetCursor
RegisterClassExW
LoadCursorW
EndPaint
BeginPaint
DestroyWindow
GetCursorPos
PostQuitMessage
GetDC
SendMessageW
GetWindowRect
InvalidateRect
UnhookWindowsHookEx
GetWindowTextW
IsWindow
WindowFromPoint
SetWindowsHookExW
CallNextHookEx
PostThreadMessageW
CreateWindowExW
LoadStringW
GetForegroundWindow
GetDesktopWindow
SetWindowTextW
EnableWindow
GetDlgItem
IsDlgButtonChecked
GetDlgItemTextW
SetDlgItemTextW
CheckDlgButton
MessageBoxW
EnumChildWindows
EndDialog
CreateDialogParamW
GetClientRect
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
PostMessageW
SetTimer
SetWindowLongW
GetWindowLongW
ShowWindow
SetWindowPos
UpdateWindow
GetWindowDC
GetMessageW
TranslateAcceleratorW
TranslateMessage
UnregisterClassW
DispatchMessageW
LoadAcceleratorsW

gdi32

SelectObject
DeleteObject
GetDeviceCaps
BitBlt
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap

comdlg32

GetSaveFileNameW

shell32

ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW

ole32

CoTaskMemFree
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal
CoUninitialize

oleaut32

SysFreeString

gdiplus

GdipDrawImageRectI
GdipCreateLineBrushFromRectI
GdipDrawString
GdipGetPenWidth
GdipSetStringFormatTrimming
GdipLoadImageFromStream
GdipMeasureString
GdipCloneImage
GdipSaveImageToFile
GdipFlush
GdipGetImagePixelFormat
GdipCloneBitmapAreaI
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusShutdown
GdiplusStartup
GdipClonePen
GdipSetStringFormatAlign
GdipGetDC
GdipReleaseDC
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipFillRectangle
GdipDrawRectangleI
GdipFree
GdipCloneBrush
GdipAlloc
GdipCreateFromHDC
GdipDrawImagePointRectI
GdipCreatePen1
GdipDeletePen
GdipCreateRegionRectI
GdipCombineRegionRectI
GdipFillRegion
GdipDeleteRegion
GdipCreateFont
GdipDeleteFontFamily
GdipCreateStringFormat
GdipSetStringFormatLineAlign
GdipSetInterpolationMode
GdipDrawImageRectRect
GdipDrawRectangle
GdipDeleteStringFormat
GdipDeleteFont
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCreateSolidFill
GdipGetImageHeight
GdipGetImageWidth
GdipFillRectangleI
GdipDeleteBrush
GdipDeleteGraphics
GdipBitmapGetPixel

Exports

Exports

CapMulWeb
CapMulWebBegin
CapMulWebEnd
CapRegion
CapScreen
CapWeb
CapWindow
SetOption
SetProfile

Sections

.text
Size: 120KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxDownloader/MxDownloadServer.exe
.exe windows:4 windows x86 arch:x86

b18b6f3ec95b8acd827d5f205313f0ba

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:02:99:22:7c:f0:27:e8:e1:2b:bb:7a:75:d2:98:8b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

16-06-2008 00:00

Not After

15-07-2009 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

a8:48:94:d0:bd:9c:e8:05:45:4c:e6:8c:ab:3c:70:21:a7:be:f9:77
Signer

Actual PE Digest

a8:48:94:d0:bd:9c:e8:05:45:4c:e6:8c:ab:3c:70:21:a7:be:f9:77

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsDirectoryW

winmm

timeGetTime

rpcrt4

UuidCreate

wininet

InternetGetCookieA
FindNextUrlCacheEntryW
FindFirstUrlCacheEntryW
InternetCombineUrlW

mfc42u

ord3348
ord3825
ord3826
ord3820
ord3074
ord4075
ord4616
ord4418
ord3574
ord3566
ord3614
ord3688
ord809
ord641
ord1634
ord2406
ord2631
ord439
ord556
ord324
ord736
ord3658
ord3621
ord4229
ord3568
ord2859
ord472
ord4128
ord4292
ord5784
ord2855
ord5871
ord2371
ord6195
ord5491
ord4704
ord6211
ord1143
ord4215
ord2576
ord3649
ord2430
ord2858
ord1637
ord5276
ord1088
ord2423
ord4279
ord2114
ord2836
ord2914
ord3169
ord4037
ord3443
ord6451
ord2099
ord5446
ord5436
ord6379
ord6390
ord5155
ord5156
ord5154
ord4899
ord4736
ord4970
ord4942
ord4352
ord4371
ord4848
ord5283
ord4829
ord2567
ord6051
ord1768
ord4390
ord5286
ord3397
ord3569
ord609
ord567
ord2294
ord3087
ord6024
ord3714
ord793
ord2634
ord3090
ord4253
ord537
ord3092
ord2403
ord2015
ord4213
ord2570
ord4392
ord3577
ord616
ord2354
ord2362
ord2293
ord5949
ord3296
ord6667
ord6879
ord6898
ord3993
ord5977
ord3991
ord6003
ord3605
ord656
ord3871
ord1791
ord614
ord1165
ord1203
ord2615
ord290
ord1220
ord4221
ord2478
ord3998
ord446
ord743
ord3716
ord795
ord4219
ord1761
ord3703
ord781
ord2078
ord3312
ord6193
ord6376
ord3494
ord2507
ord355
ord4470
ord5438
ord4667
ord4269
ord6371
ord4480
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord4074
ord4692
ord5303
ord2971
ord5710
ord3733
ord815
ord561
ord6433
ord2613
ord5713
ord1131
ord1196
ord1202
ord2717
ord1229
ord4270
ord1921
ord613
ord4294
ord289
ord6871
ord1808
ord1166
ord1197
ord6655
ord6466
ord2637
ord6921
ord2719
ord2722
ord2721
ord1106
ord3253
ord2629
ord1008
ord2101
ord941
ord536
ord5679
ord6640
ord6874
ord6867
ord2574
ord4396
ord3635
ord693
ord4238
ord1899
ord489
ord768
ord3739
ord1900
ord1683
ord2520
ord5284
ord2046
ord4425
ord497
ord771
ord4254
ord4709
ord3470
ord4433
ord4118
ord3365
ord6266
ord6896
ord860
ord1941
ord818
ord2144
ord1230
ord2235
ord640
ord1569
ord1633
ord323
ord2372
ord4199
ord801
ord541
ord1225
ord1105
ord1940
ord5299
ord4693
ord5711
ord817
ord565
ord2718
ord6919
ord283
ord2746
ord5647
ord3122
ord3611
ord1989
ord5461
ord798
ord5188
ord350
ord533
ord4198
ord2440
ord6654
ord2606
ord3211
ord539
ord2755
ord2036
ord5830
ord1571
ord600
ord826
ord269
ord1971
ord665
ord6279
ord942
ord2756
ord4124
ord858
ord2910
ord700
ord4197
ord540
ord398
ord861
ord800
ord538
ord5674
ord755
ord470
ord5860
ord6057
ord5567
ord5575
ord5732
ord5790
ord5785
ord5869
ord6168
ord6017
ord6185
ord4324
ord6182
ord5752
ord6188
ord5755
ord2966
ord1891
ord3076
ord2980
ord3269
ord3131
ord4459
ord3254
ord3142
ord2977
ord5681
ord3592
ord4419
ord4621
ord3257
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1767
ord4073
ord6048
ord2506
ord4992
ord4847
ord4370
ord5261
ord5568
ord5590
ord5628
ord4184
ord913
ord6381
ord927
ord925
ord940
ord535
ord922
ord3434
ord6278
ord6868
ord4273
ord5706
ord2810
ord354
ord5180
ord5285
ord3313
ord823
ord825
ord1240
ord1173
ord5781

msvcrt

__CxxFrameHandler
_onexit
wcslen
wcschr
_itow
_controlfp
wcscmp
__dllonexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
_XcptFilter
_exit
strchr
free
_ltow
swscanf
_wtoi
_wtol
_atoi64
_wtoi64
sprintf
wcscpy
_ftol
realloc
malloc
_CIpow
exit
_wcsicmp
_ui64tow

kernel32

LocalAlloc
LocalFree
FindFirstFileW
GetDiskFreeSpaceExW
DeleteFileW
GetWindowsDirectoryW
GetSystemDirectoryW
CreateProcessW
GetLongPathNameW
GetCurrentProcessId
SystemTimeToFileTime
InterlockedExchange
ResetEvent
CreateEventW
CloseHandle
CreateDirectoryW
GetTempPathW
ResumeThread
SetEvent
lstrcatW
lstrcpyW
LoadLibraryW
GetProcAddress
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetShortPathNameW
FlushInstructionCache
GlobalAlloc
GlobalLock
GlobalUnlock
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
InterlockedExchangeAdd
CreateMutexA
GetLastError
GetCurrentThreadId
lstrcmpiW
GetVersion
WaitForSingleObject
DeleteCriticalSection
HeapDestroy
GetCommandLineW
WritePrivateProfileStringW
GetCurrentProcess
SetProcessWorkingSetSize
GetFileAttributesW
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetStartupInfoW

user32

SetActiveWindow
SetRect
RedrawWindow
GetCaretPos
FindWindowW
LoadStringW
CloseClipboard
GetClipboardData
OpenClipboard
RegisterClipboardFormatW
SetWindowLongW
IsWindowVisible
DrawIconEx
FillRect
SetWindowPos
LoadCursorW
GetDesktopWindow
GetWindowRect
PtInRect
GrayStringW
DrawTextW
TabbedTextOutW
GetClientRect
RegisterWindowMessageW
LoadImageW
ChangeClipboardChain
PostThreadMessageW
IsIconic
SetClipboardViewer
SetTimer
GetParent
BeginPaint
EndPaint
DestroyWindow
IsChild
GetFocus
SetFocus
GetClassInfoExW
wsprintfW
RegisterClassExW
CallWindowProcW
DefWindowProcW
GetDC
IntersectRect
EqualRect
OffsetRect
UnionRect
GetKeyState
ShowWindow
CreateWindowExW
GetClassInfoW
CharNextW
MessageBoxW
KillTimer
GetDlgItemTextW
GetSysColor
GetSysColorBrush
DrawIcon
DestroyIcon
EnableWindow
LoadMenuW
GetSubMenu
ModifyMenuW
RemoveMenu
InvalidateRect
CopyRect
FindWindowExW
GetSystemMetrics
SystemParametersInfoW
SetWindowRgn
LoadBitmapW
ReleaseDC
GetWindowDC
UpdateWindow
SetCursor
PostMessageW
SendMessageW
IsWindow
MoveWindow
GetCursorPos
ReleaseCapture
DispatchMessageW
GetMessageW
GetMenuItemCount
SetMenuDefaultItem
SetForegroundWindow
TrackPopupMenu
ScreenToClient
SetCapture
GetCapture
GetWindowLongW

gdi32

CreateFontIndirectW
CreateSolidBrush
CreatePen
GetTextExtentPoint32W
ExtCreatePen
GetObjectW
CombineRgn
CreateRectRgn
GetDIBits
GetBkMode
GetTextColor
CreateRectRgnIndirect
DeleteMetaFile
Escape
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
CreateMetaFileW
GetDeviceCaps
SetViewportOrgEx
SetMapMode
LPtoDP
CreateDCW
GetTextMetricsW
CreateBitmap
ExtTextOutW
TextOutW
RectVisible
PtVisible
BitBlt
DeleteObject
DeleteDC
CreateCompatibleDC
CloseMetaFile
SelectObject
CreateCompatibleBitmap

advapi32

RegCloseKey
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegOpenKeyExW

shell32

ShellExecuteW
SHBrowseForFolderW
ShellExecuteExW
SHGetPathFromIDListW
SHAppBarMessage

comctl32

_TrackMouseEvent

ole32

StringFromCLSID
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
CoRegisterClassObject
CoTaskMemAlloc
CreateDataAdviseHolder
CoTaskMemFree
OleLoadFromStream
WriteClassStm
CoRevokeClassObject
CoInitialize
CreateOleAdviseHolder
OleSaveToStream
CoCreateInstance

olepro32

ord250

oleaut32

SysAllocStringByteLen
SysAllocStringLen
LoadRegTypeLi
SysStringLen
SysStringByteLen
SysFreeString
SysAllocString
VariantClear
LoadTypeLi
RegisterTypeLi
VariantChangeType

msvcp60

??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 376KB - Virtual size: 375KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxDownloader/TaskManager.dll
.dll regsvr32 windows:4 windows x86 arch:x86

85de515e0b9fcd6f424d020d756462bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathCombineA
PathIsDirectoryA
PathIsUNCA
PathIsRootA

mfc42

ord2841
ord5450
ord6394
ord2107
ord5440
ord6383
ord1799
ord3262
ord4226
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3738
ord561
ord815
ord5500
ord1132
ord1131
ord6354
ord801
ord860
ord541
ord539
ord861
ord6283
ord6282
ord5608
ord6143
ord3811
ord858
ord924
ord3258
ord4278
ord4277
ord4021
ord2818
ord6883
ord1200
ord6673
ord940
ord5861
ord2820
ord6648
ord5431
ord3348
ord4351
ord2989
ord2625
ord297
ord619
ord2033
ord3443
ord3786
ord5860
ord500
ord1206
ord1223
ord446
ord743
ord4020
ord4129
ord2764
ord5683
ord6662
ord6929
ord1168
ord926
ord3988
ord6781
ord922
ord537
ord2614
ord2919
ord1193
ord2915
ord5572
ord941
ord535
ord823
ord3663
ord1601
ord825
ord290
ord540
ord614
ord800
ord3579
ord4424
ord4622
ord4080
ord269
ord826
ord600
ord1578
ord1255
ord3079
ord3825
ord3831
ord3830
ord3353
ord2976
ord3081
ord2985
ord3136
ord4465
ord3259
ord3147
ord2982
ord4003
ord2729
ord2730
ord6467
ord2727
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1575
ord1176
ord548
ord1116

msvcrt

_ismbcalpha
atol
strcpy
isalnum
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_ftol
_mbsnbcat
memmove
_mbsicmp
free
malloc
realloc
_mbsnbicmp
sprintf
_mbsnbcmp
sscanf
rand
memcmp
_CxxThrowException
_mbscmp
memcpy
memset
strlen
_mbsnbcpy
_mbsrchr
__CxxFrameHandler

kernel32

GetModuleFileNameA
LocalAlloc
FindFirstFileA
GetProcAddress
GetLastError
FreeLibrary
GetSystemTime
InterlockedIncrement
GetTickCount
MultiByteToWideChar
IsBadReadPtr
DeleteFileA
OutputDebugStringA
CopyFileA
CreateDirectoryA
LocalFree
FindClose

user32

SetTimer
KillTimer

ole32

StgIsStorageFile
CoUninitialize
StgCreateDocfile
CoTaskMemFree
CoInitialize
StgOpenStorage
CoCreateInstance

oleaut32

VariantCopy
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantClear
SysStringByteLen

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxDownloader/asyn_dns.dll
.dll windows:4 windows x86 arch:x86

3709b88712d1ac4dd47559a06934d584

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WritePrivateProfileStringA
CreateThread
GetCurrentThreadId
WaitForSingleObject
FindFirstFileA
ResetEvent
SetWaitableTimer
CreateWaitableTimerA
CancelWaitableTimer
GetLastError
FindClose
GetVersionExA
GetWindowsDirectoryA
GetTickCount
SetEvent
PostQueuedCompletionStatus
QueueUserAPC
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventA
InitializeCriticalSection
DisableThreadLibraryCalls
GetModuleFileNameA
GetModuleHandleA
RaiseException
GetOverlappedResult

ws2_32

WSAGetOverlappedResult
closesocket
WSACloseEvent
socket
WSACreateEvent
WSAEventSelect
recvfrom
htons
sendto
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAGetLastError
gethostbyname
inet_ntoa
inet_addr

iphlpapi

GetNetworkParams

msvcp60

?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1runtime_error@std@@UAE@XZ
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??_7runtime_error@std@@6B@
??0logic_error@std@@QAE@ABV01@@Z
??1logic_error@std@@UAE@XZ
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?_Xran@std@@YAXXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?what@runtime_error@std@@UBEPBDXZ
?_Doraise@runtime_error@std@@MBEXXZ
??0runtime_error@std@@QAE@ABV01@@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z

msvcrt

_purecall
?name@type_info@@QBEPBDXZ
__RTtypeid
free
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
atol
_ultoa
_ftol
pow
fopen
fread
fgetc
fclose
_strtime
_strdate
isalpha
isdigit
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
strncpy
??2@YAPAXI@Z
memset
memcpy
__CxxFrameHandler
strlen

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

adns_cancel
adns_commit
adns_get_complete_code
adns_get_host
adns_get_ip
adns_get_ip_count
adns_get_notify_handle
asyn_dns_cancel
asyn_dns_commit
asyn_dns_init
asyn_dns_uninit

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxDownloader/download_interface.dll
.dll regsvr32 windows:4 windows x86 arch:x86

450a0b39e35d5f2b0b10d218c688e656

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RemoveDirectoryA
FindFirstFileA
FindNextFileA
FindClose
ResetEvent
WaitForMultipleObjects
EnterCriticalSection
GetLastError
LoadLibraryA
GetProcAddress
FreeLibrary
WriteFileGather
ReadFileScatter
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateWaitableTimerA
SetWaitableTimer
CreateThread
GetSystemDirectoryA
GetFileAttributesExA
CompareFileTime
ReleaseMutex
CreateMutexA
QueueUserAPC
PostQueuedCompletionStatus
WaitForSingleObjectEx
GetQueuedCompletionStatus
LeaveCriticalSection
CancelIo
CreateIoCompletionPort
GetCurrentThreadId
WaitForMultipleObjectsEx
GetOverlappedResult
CreateEventA
SetEvent
WaitForSingleObject
GetTickCount
GetVolumeInformationA
CreateDirectoryA
GetFileAttributesA
DeleteFileA
MoveFileA
FlushFileBuffers
GetFileSize
SetEndOfFile
SetFilePointer
ReadFile
WriteFile
CloseHandle
CreateFileA
MultiByteToWideChar
WideCharToMultiByte
GetDiskFreeSpaceA
GetModuleHandleA
GetVersionExA
WritePrivateProfileStringA
GetModuleFileNameA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
VirtualAlloc
VirtualFree
GetSystemInfo
QueryPerformanceFrequency
QueryPerformanceCounter
CreateProcessA
DisableThreadLibraryCalls
DeleteCriticalSection
SetLastError
InitializeCriticalSection
RaiseException

ole32

CoUninitialize
CoInitializeEx
CoCreateInstance

ws2_32

WSACleanup
WSACloseEvent
WSACreateEvent
WSARecvFrom
WSAStartup
recvfrom
inet_ntoa
gethostbyname
WSAGetLastError
gethostname
inet_addr
WSAIoctl
WSASocketA
ntohs
WSAGetOverlappedResult
connect
htons
WSAEventSelect
WSAEnumNetworkEvents
getsockname
WSAWaitForMultipleEvents
accept
closesocket
shutdown
WSARecv
WSASend
setsockopt
socket
listen
bind
htonl
getpeername
sendto
WSASendTo

asyn_dns

ord2
ord3
ord4
ord1

msvcp60

??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??_7?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0ios_base@std@@IAE@XZ
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??1ios_base@std@@UAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Tidy@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXXZ
??_7?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@
??1locale@std@@QAE@XZ
??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@
?_Init@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXPBDIH@Z
?_Mode@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEHH@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??8std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0ABV?$allocator@D@1@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??9std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?nothrow@std@@3Unothrow_t@1@B
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z
??0bad_alloc@std@@QAE@ABV01@@Z
??1bad_alloc@std@@UAE@XZ
??0bad_alloc@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
??_7out_of_range@std@@6B@
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?assign@?$char_traits@D@std@@SAXAADABD@Z
?_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ
??_7bad_alloc@std@@6B@
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADPAD@Z
??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0logic_error@std@@QAE@ABV01@@Z
??1logic_error@std@@UAE@XZ
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Xran@std@@YAXXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0runtime_error@std@@QAE@ABV01@@Z
?_Doraise@runtime_error@std@@MBEXXZ
?what@runtime_error@std@@UBEPBDXZ
??_7logic_error@std@@6B@
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IABV12@II@Z
??1runtime_error@std@@UAE@XZ
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??_7runtime_error@std@@6B@
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ

msvcrt

fgets
malloc
realloc
exit
free
printf
_mbsnbicmp
_mbsstr
_mbsicmp
_itoa
_callnewh
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
mktime
memchr
abs
_strtime
_strdate
strtok
strrchr
_open
_read
_close
fseek
fwrite
fflush
fopen
fread
fclose
?what@exception@@UBEPBDXZ
tolower
_strnicmp
atoi
strchr
sscanf
??0exception@@QAE@XZ
__RTtypeid
?name@type_info@@QBEPBDXZ
memmove
__RTDynamicCast
_purecall
_ftol
rand
atof
log10
pow
_strlwr
memcmp
memset
isspace
isalpha
isdigit
strcmp
_snprintf
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_atoi64
atol
_ui64toa
_ultoa
_i64toa
sprintf
strncpy
_CxxThrowException
??0exception@@QAE@ABV0@@Z
memcpy
_putenv
__CxxFrameHandler
??2@YAPAXI@Z
time
srand
strlen
strstr

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

wininet

InternetGetCookieA
InternetQueryOptionA

user32

GetDesktopWindow

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

shell32

ShellExecuteA

mswsock

GetAcceptExSockaddrs
AcceptEx

iphlpapi

GetAdaptersInfo

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
add_emule_server
add_emule_server_byLink
cancel_speed_limit
connect_emule_server
create_continued_bt_task
create_continued_emule_task
create_continued_task
create_ed2k_link
create_new_bt_task
create_new_emule_task
create_new_task
create_predownload_task
create_upload_bt_task
create_upload_emule_task
debug_p2p_pipe_choke_remote
debug_p2p_pipe_query_info
debug_p2p_pipe_release_info
debug_p2p_pipe_simulate_remote_choke_local
delete_emule_server
delete_emule_temp_files
delete_task
delete_tempfile
fetch_server_connection_info
fix_pre_download_parameter
fix_task_parameter
get_bt_cfg_file_list
get_bt_data_file_list
get_bt_file_id
get_bt_file_info
get_bt_peer_info_list
get_bt_task_info
get_client_hash
get_connect_period
get_connector_parameter
get_credits_file
get_crypt_option
get_current_upload_speed
get_dht_status
get_download_bandwidth
get_ed2k_server_link
get_emule_hub_host
get_emule_hub_port
get_emule_kad_port
get_emule_listen_port
get_emule_peer_info_list
get_emule_server_count
get_emule_server_info
get_emule_server_list
get_emule_status
get_emule_task_AICH_hash
get_emule_task_bcid
get_emule_task_cid
get_emule_task_fileid
get_emule_task_gcid
get_emule_task_info
get_enrollsp1_info
get_failure_detail
get_final_filename
get_global_connection_limit
get_kademlia_node_hash
get_kadnode_file
get_last_modified
get_memory_pool_size
get_mod_version
get_nickname
get_origin_readbytes
get_peer_id
get_play_port
get_reconnect_period
get_secure_file
get_secureident_option
get_server_list_file
get_small_file_size
get_source_search_period
get_source_upmost
get_task_gcid
get_task_url
get_temp_file_list
get_thunder_peer_extern_credit
get_upnp_status
get_url_str
hold_connect_ranking
import_clients_credit
init
is_AICH_enable
is_bt_tempfile_exist
is_compress_enable
is_ed2k_enable
is_emule_temp_file_exist
is_kad_enable
is_nated
is_p2sp_enable
is_protocol_forbidded
is_registered
is_source_exchange_enable
is_support_dispatch_strategy
is_support_schema
is_tempfile_exist
notify_hub_bt_deleted
notify_hub_bt_moved
notify_hub_deleted
notify_hub_moved
on_playing
parse_ed2k_server_url
parse_ed2k_url
parse_filename
parse_seed_file
parse_url
query_new_connect_info
query_part_cid
query_resource_info
query_task_info
read_ie_proxy
register_client
release_bt_data_file_list
release_bt_peer_info_list
release_ed2k_link
release_peer_info_list
release_seed_file_info
release_temp_file_list
report_crack
report_crack_cancel
reset_bt_task_need_download_file
sametime_connecting_peers
set_AICH_enable
set_added_resource_count
set_bt_task_stat_para
set_client_hash
set_compress_enable
set_connector_parameter
set_cookie
set_crypt_option
set_cur_language
set_dht_switch
set_dispatch_strategy
set_ed2k_enable
set_emule_crypt_option
set_emule_hub_host
set_emule_hub_port
set_emule_kad_port
set_emule_listen_port
set_emule_server_priority
set_emule_switch
set_emule_task_stat_para
set_forbid_p2p_service
set_global_connection_limit
set_hub_proxy
set_iobuffer_size
set_kad_enable
set_kademlia_node_hash
set_last_modified
set_listen_port
set_nichname
set_p2sp_enable
set_pragma_send_strategy
set_product_identifier
set_proxy_info
set_recommend_info
set_ref_send_strategy
set_report_strategy
set_res_query_cid
set_res_use_strategy
set_retry_strategy
set_sametime_connecting_peers
set_secureident_option
set_source_exchange_enable
set_source_upmost
set_speed_limit
set_stat_ref_url
set_task_type
set_thread_num
set_thunder_peer_extern_credit
set_upload_speed_limit
set_upnp_switch
set_user_name
start_predownload_task
start_task
stop_batch_task
stop_emule_server
stop_task
uninit
update_datafile
url_info_to_str
verify_proxy

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 240KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxHistory/MxHistory.dll
.dll windows:4 windows x86 arch:x86

7e21011f062a2aa25c805d509fa39238

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06-07-2009 00:00

Not After

14-07-2012 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

07:a8:e8:ae:df:fc:aa:90:ce:b5:60:74:0c:c3:a4:9d:19:2e:4b:ca
Signer

Actual PE Digest

07:a8:e8:ae:df:fc:aa:90:ce:b5:60:74:0c:c3:a4:9d:19:2e:4b:ca

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
GetSystemTime
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
EnterCriticalSection
WaitForSingleObject
LeaveCriticalSection
CreateEventA
SetEvent
ResetEvent
FlushFileBuffers
GetLocaleInfoW
ReadFile
SetStdHandle
SetConsoleCtrlHandler
LoadLibraryA
Sleep
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
HeapAlloc
HeapFree
RaiseException
GetCommandLineA
GetVersion
HeapReAlloc
ExitProcess
FatalAppExitA
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
TerminateProcess
GetCurrentProcess
HeapSize
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetProcAddress
SetUnhandledExceptionFilter
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
UnhandledExceptionFilter
SetFilePointer
GetACP
GetOEMCP
SetEnvironmentVariableA

mxdb

?CreateMxDbObj@@YA_NPAK@Z
?DeleteMxDbObj@@YAXPAK@Z

wininet

InternetCrackUrlA
InternetCanonicalizeUrlA

Exports

Exports

CreateMxHis
DeleteMxHis

Sections

.text
Size: 196KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxMute/MxMute.dll
.dll windows:4 windows x86 arch:x86

50a27502567c0b14b6b8bfa5043bff34

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeKillEvent
timeEndPeriod
midiStreamRestart
midiStreamStop

kernel32

TlsAlloc
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
WriteFile
ReleaseMutex
GetCurrentThreadId
WaitForSingleObject
GetCurrentThread
VirtualProtect
VirtualQuery
CreateMutexA
GetVersionExA
VirtualAlloc
InterlockedCompareExchange
ResumeThread
FlushInstructionCache
GetCurrentProcess
GetThreadContext
SetThreadContext
GetLastError
SuspendThread
FreeLibrary
GetProcAddress
LoadLibraryA
SetLastError
GetModuleHandleA
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
HeapSize
MultiByteToWideChar
GetLocaleInfoA

user32

SetTimer
KillTimer

ole32

CoInitialize
CoCreateInstance

Exports

Exports

Mute

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxPageSearch/MxPageSearch.dll
.dll windows:4 windows x86 arch:x86

af2e6454b74babad00aac696be57c341

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:02:99:22:7c:f0:27:e8:e1:2b:bb:7a:75:d2:98:8b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

16-06-2008 00:00

Not After

15-07-2009 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

b6:bc:6c:f5:6c:da:bd:5e:2f:fd:fa:a0:88:a1:58:1c:e6:22:38:9b
Signer

Actual PE Digest

b6:bc:6c:f5:6c:da:bd:5e:2f:fd:fa:a0:88:a1:58:1c:e6:22:38:9b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls

user32

CharLowerW

oleaut32

SysFreeString
SysStringLen
SysAllocStringLen
VariantClear
SysAllocString

msvcp60

?find_first_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?swap@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXAAV12@@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z

msvcrt

_purecall
free
abs
memset
wcscmp
swprintf
_adjust_fdiv
malloc
_initterm
_onexit
__CxxFrameHandler
wcslen
??2@YAPAXI@Z
_wcsicmp
clock
__dllonexit

Exports

Exports

CreatePageSearch
DeletePageSearch

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxSandBox/MxSandBox.zip
.zip
collapse.css
crash.css
crash/icon_32_crash.png
.png
crash/popup_bg_rich.png
.png
crash/popup_bg_rich_1.png
.png
crash/popup_bg_rich_2.png
.png
crash/popup_bg_rich_3.png
.png
crash/popup_bg_rich_4.png
.png
crash/popup_close_fg.png
.png
crash/popup_close_fg_hover.png
.png
crash/s.png
.png
images/all.png
.png
images/bg.png
.png
images/bodyBg.png
.png
images/bugBg.png
.png
images/max.png
.png
images/point.png
.png
images/titleBg.png
.png
images/titleIcon.png
.png
page1.html
.html
page2.html
.html
page3.html
.html
page5.html
sandbox.css
$PLUGINSDIR/mx2_data/Modules/MxSandBox/MxSec.dll
.dll windows:4 windows x86 arch:x86

f4cdf616498e20ff5dc68a909f2ad61f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06-07-2009 00:00

Not After

14-07-2012 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

68:b7:43:76:67:68:dd:0c:a8:5a:c2:d4:66:b1:fb:60:ae:97:b5:a2
Signer

Actual PE Digest

68:b7:43:76:67:68:dd:0c:a8:5a:c2:d4:66:b1:fb:60:ae:97:b5:a2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAddAtomW
InterlockedExchange
FlushFileBuffers
RtlUnwind
GetSystemTimeAsFileTime
GetCommandLineA
RaiseException
HeapSize
ExitProcess
TerminateProcess
GlobalFindAtomW
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
Sleep
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GlobalDeleteAtom
GetVersionExA
GlobalFlags
lstrcmpW
GetThreadLocale
GetVersion
InterlockedIncrement
InterlockedDecrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
GlobalFree
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
SetLastError
LoadLibraryA
FreeLibrary
SuspendThread
SetThreadContext
GetThreadContext
FlushInstructionCache
ResumeThread
InterlockedCompareExchange
GetLastError
GlobalAlloc
GetModuleHandleA
GetCommandLineW
GetVersionExW
GetModuleFileNameW
GetTempPathW
GetLongPathNameW
SetUnhandledExceptionFilter
CopyFileW
CreateDirectoryW
GetFileType
SetFilePointer
GetLogicalDrives
QueryDosDeviceA
FindFirstFileW
GetFileAttributesW
CloseHandle
WriteFile
WideCharToMultiByte
VirtualAlloc
LoadLibraryW
GetProcAddress
VirtualProtect
WriteProcessMemory
GetCurrentThreadId
VirtualQuery
GetModuleFileNameA
ExitThread
GetProcessHeap
HeapAlloc
HeapReAlloc
HeapFree
GetCurrentThread
GetModuleHandleW
GetCurrentProcess
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
UnhandledExceptionFilter

user32

DestroyMenu
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CopyRect
DefWindowProcW
CallWindowProcW
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
SetWindowPos
SetWindowLongW
IsWindow
GetDlgItem
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
SetWindowsHookExW
CallNextHookEx
GetKeyState
ValidateRect
PostQuitMessage
GetWindowTextW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetWindowThreadProcessId
SendMessageW
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
MessageBoxW
GetParent
PeekMessageW
DispatchMessageW
TranslateMessage
UnregisterClassA

gdi32

DeleteDC
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
GetDeviceCaps
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
DeleteObject
PtVisible

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

OpenProcessToken
GetTokenInformation
GetUserNameW
LookupAccountNameW
LookupPrivilegeValueW
CreateRestrictedToken
ImpersonateLoggedOnUser
RegOpenKeyExW
RegCreateKeyExW

shell32

SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
SHGetPathFromIDListW

oleaut32

VariantInit
VariantChangeType
SysAllocStringLen
VariantClear

Exports

Exports

SandboxInitInstance
SetPrivacyMode
SetThreadCrToken
SetThreadSEHCheck

Sections

.text
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxSpeedDial/0x0804.zip
.zip
SD_Default9Grid.ini
SD_Statistic.ini
SpeedDial.ini
Thumbnail/Pic1.bmp
Thumbnail/Pic2.bmp
Thumbnail/Pic3.bmp
Thumbnail/Pic4.bmp
Thumbnail/Pic5.bmp
Thumbnail/Pic6.bmp
Thumbnail/Pic7.bmp
Thumbnail/Pic8.bmp
$PLUGINSDIR/mx2_data/Modules/MxSpeedDial/MxIeCore.dll
.dll windows:4 windows x86 arch:x86

1df84079db0a9917dd8f280443a51624

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06-07-2009 00:00

Not After

14-07-2012 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b7:f6:da:fa:41:54:d3:29:ab:41:7e:52:82:13:17:ed:07:79:8f:3a
Signer

Actual PE Digest

b7:f6:da:fa:41:54:d3:29:ab:41:7e:52:82:13:17:ed:07:79:8f:3a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualProtect
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
lstrcpyW
GlobalUnlock
GetProcAddress
GlobalAlloc
GetModuleFileNameW
GetVersionExW
HeapFree
HeapAlloc
GetProcessHeap
ReadFile
GetFileSize
GetCurrentThreadId
HeapDestroy
GetLastError
LoadLibraryW
CreateFileW
WriteFile
CloseHandle
FreeLibrary
lstrlenA
OutputDebugStringW
DebugBreak
lstrlenW
InterlockedDecrement
GlobalLock
InterlockedIncrement

user32

GetParent
GetClientRect
MessageBoxW
DestroyWindow
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
RegisterClipboardFormatW
SetRectEmpty
CopyRect
IsClipboardFormatAvailable
GetClipboardData
OpenClipboard
IsWindow
ShowWindow
IsWindowVisible
GetWindow
ReleaseDC
GetDC
EmptyClipboard
CloseClipboard
SetClipboardData
GetWindowDC
CharLowerW
IsRectEmpty
LoadImageW
SendMessageW
GetMenuStringW
GetWindowLongW
GetWindowRect
LoadMenuW
GetSubMenu
GetMenuItemCount
GetMenuItemID
EnableMenuItem
GetMenuState
RemoveMenu
SetMenuItemInfoW
TrackPopupMenu
PostMessageW
CharNextW
wvsprintfW
LoadStringW

gdi32

DeleteObject
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
GetDeviceCaps

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

ShellExecuteW
DragQueryFileW

ole32

CoGetInterfaceAndReleaseStream
CoCreateInstance
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemFree
CoUninitialize
CoInitialize
ReleaseStgMedium

oleaut32

SysAllocStringLen
VariantClear
SysAllocString
SysFreeString
SysStringLen
LoadRegTypeLi

msvcp60

??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Xlen@std@@YAXXZ
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z

wininet

FindNextUrlCacheEntryW
InternetCombineUrlW
FindFirstUrlCacheEntryW
FindCloseUrlCache
DeleteUrlCacheEntryW

msvcrt

__CxxFrameHandler
??2@YAPAXI@Z
wcslen
wcsstr
iswdigit
_wtoi
_CxxThrowException
wcscmp
_wcsncoll
_wcsicmp
_vsnwprintf
wcsncpy
free
malloc
wcsncmp
wcschr
wcscpy
iswctype
swscanf
_wcslwr
_itow
memmove
iswspace
realloc
_purecall
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
wcsrchr

shlwapi

PathCombineW
PathFileExistsW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

iphlpapi

GetAdaptersInfo

netapi32

Netbios

Exports

Exports

MxClearHistory
MxCreateBrowserCore
MxDestroyBrowserCore
MxInit
MxRunMessageLoop
MxSetLanguageIni

Sections

.text
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxSpeedDial/MxSpeedDial.dll
.dll windows:4 windows x86 arch:x86

abc0706d7d0129c8a84c46d01133e80e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06-07-2009 00:00

Not After

14-07-2012 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

dd:ae:c5:d8:9a:ba:ad:37:37:99:95:b6:b0:da:55:ca:13:3c:43:82
Signer

Actual PE Digest

dd:ae:c5:d8:9a:ba:ad:37:37:99:95:b6:b0:da:55:ca:13:3c:43:82

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WritePrivateProfileStringW
DeleteFileW
CloseHandle
CreateThread
WaitForSingleObject
WritePrivateProfileSectionW
GetPrivateProfileSectionW
WideCharToMultiByte
MultiByteToWideChar
GetLastError
CreateDirectoryW
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
SizeofResource
LockResource
LoadResource
FindResourceW
lstrcpynW
InterlockedDecrement
InterlockedIncrement
GetPrivateProfileIntW
lstrlenA
GetFullPathNameW
UnmapViewOfFile
FreeLibrary
LoadLibraryExW
ReadFile
GetFileSize
CreateFileW
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
GlobalUnlock
GlobalLock
GetProcAddress
LoadLibraryW
WriteFile
HeapDestroy
GetModuleFileNameW
GlobalAlloc
lstrcmpW
GetPrivateProfileStringW
GetFileAttributesW
FindFirstFileW
FindClose
EnterCriticalSection
LeaveCriticalSection
ResetEvent
SetEvent
CreateEventW
DeleteCriticalSection
lstrlenW
InitializeCriticalSection

user32

GetWindowLongW
SetWindowLongW
GetClassInfoExW
LoadCursorW
RegisterClassExW
DefWindowProcW
PtInRect
SetTimer
PostMessageW
wsprintfW
GetClientRect
CreateWindowExW
IsWindow
DestroyWindow
KillTimer
RegisterWindowMessageA
SystemParametersInfoW
GetMonitorInfoW
MonitorFromWindow
GetParent
LoadStringW
InflateRect
ScreenToClient
GetWindowRect
ShowWindow
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
CallWindowProcW
MoveWindow
ClientToScreen
PostQuitMessage
ReleaseDC
GetDC
RegisterWindowMessageW
GetWindow
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
GetSysColor
GetDlgItem
EndPaint
FillRect
BeginPaint
SetFocus
IsChild
GetFocus
SetWindowPos
GetClassNameW
RedrawWindow
GetDesktopWindow
CreateAcceleratorTableW
ReleaseCapture
SetCapture
InvalidateRect
InvalidateRgn
IsZoomed
OpenClipboard
SendMessageW
PostThreadMessageW

gdi32

DeleteDC
GetStockObject
GetDeviceCaps
CreateSolidBrush
BitBlt
GetObjectW
GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject

ole32

CoCreateInstance
CoTaskMemFree
CLSIDFromString
OleInitialize
OleUninitialize
CoUninitialize
CLSIDFromProgID
CreateStreamOnHGlobal
StringFromCLSID
CoTaskMemAlloc
OleLockRunning
CoInitialize

oleaut32

SysAllocString
VariantClear
SysStringLen
OleCreateFontIndirect
LoadRegTypeLi
SysFreeString
SysAllocStringLen

msvcp60

?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIABV12@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGIABV?$allocator@G@1@@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB

msvcrt

__CxxFrameHandler
_vsnprintf
_purecall
wcslen
??2@YAPAXI@Z
swprintf
memmove
_wtoi
wcscmp
wcsncpy
gmtime
time
_itow
free
malloc
_wcsicmp
wcsrchr
wcsncmp
wcscpy
_CxxThrowException
_wcsncoll
_ftol
_vsnwprintf
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_stricmp
memchr

mxui

HTMLayoutGetAttributeByName
HTMLayout_UseElement
HTMLayoutPostEvent
HTMLayoutSetElementState
HTMLayoutGetChildrenCount
HTMLayoutGetNthChild
ValueToString
HTMLayoutSelectElementsW
HTMLayoutDataReadyAsync
HTMLayoutInsertElement
HTMLayoutHidePopup
HTMLayoutSetStyleAttribute
HTMLayoutGetStyleAttribute
HTMLayoutWindowAttachEventHandler
HTMLayoutLoadHtmlEx
HTMLayoutSetCallback
HTMLayoutSetMediaType
HTMLayoutLoadHtml
HTMLayoutCombineURL
HTMLayoutLoadFile
HTMLayoutGetAttributeCount
HTMLayoutGetNthAttribute
HTMLayoutGetElementType
HTMLayoutDataReady
ValueStringData
ValueCopy
HTMLayout_UnuseElement
ValueIntDataSet
ValueInit
ValueClear
HTMLayoutCallBehaviorMethod
HTMLayoutUpdateElement
ValueIntData
HTMLayoutGetElementLocation
HTMLayoutSetElementHtml
HTMLayoutGetElementHtml
HTMLayoutGetRootElement
HTMLayoutSetElementInnerText16
HTMLayoutUpdateElementEx
HTMLayoutVisitElements
HTMLayoutGetElementInnerText16
HTMLayoutProcND
HTMLayoutClassNameW
HTMLayoutGetElementState
HTMLayoutSetAttributeByName
HTMLayoutSelectParent
HTMLayoutSelectElements
HTMLayoutScrollToView
HTMLayoutGetParentElement
HTMLayoutGetElementIndex

shlwapi

PathFileExistsW
PathCreateFromUrlW

wininet

InternetCombineUrlW
InternetCanonicalizeUrlW

mxtool

CreateMxZipObj
MxFree

Exports

Exports

CreateMxSDObject
DeleteMxSDObject

Sections

.text
Size: 264KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxSpeedDial/default.zip
.zip
SpeedDial.ini
$PLUGINSDIR/mx2_data/Modules/MxUpdate/MxUp.exe
.exe windows:4 windows x86 arch:x86

c14bc40d264709172420cbc79f7c8532

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06-07-2009 00:00

Not After

14-07-2012 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f2:10:12:82:7b:c9:ea:c3:ad:fc:80:bf:c0:73:5a:d7:2b:a7:ba:a2
Signer

Actual PE Digest

f2:10:12:82:7b:c9:ea:c3:ad:fc:80:bf:c0:73:5a:d7:2b:a7:ba:a2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
DeleteFileW
GetTempPathW
lstrlenW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
WriteFile
CreateFileW
GetTickCount
GetPrivateProfileIntW
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetFullPathNameW
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
GetFileAttributesW
lstrcpynW
InterlockedDecrement
FreeLibrary
LoadLibraryExW
FlushInstructionCache
GetCurrentProcess
InterlockedIncrement
lstrlenA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetFileSize
GetLastError
ReadFile
SetStdHandle
GetStringTypeW
GetStringTypeA
SetConsoleCtrlHandler
LoadLibraryA
LCMapStringW
LCMapStringA
SetFilePointer
IsBadCodePtr
IsBadReadPtr
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCommandLineA
GetCommandLineW
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameW
UnhandledExceptionFilter
CompareStringW
CompareStringA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetProcAddress
SetUnhandledExceptionFilter
HeapSize
TerminateProcess
ExitProcess
GetVersion
GetStartupInfoW
GetModuleHandleA
HeapAlloc
HeapReAlloc
HeapFree
RaiseException
RtlUnwind
FlushFileBuffers

user32

SetTimer
SetWindowPos
MessageBoxW
PostMessageW
RegisterWindowMessageA
ScreenToClient
InflateRect
SetFocus
LoadStringW
CallWindowProcW
SetWindowLongW
GetClassInfoExW
LoadCursorW
wsprintfW
RegisterClassExW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
CreateWindowExW
SystemParametersInfoW
MonitorFromRect
IsZoomed
FindWindowW
ShowWindow
DefWindowProcW
DestroyWindow
PtInRect
IsWindowVisible
IsWindow
PostQuitMessage
LoadImageW
SendMessageW
SetWindowTextW
MoveWindow
GetWindowLongW
GetParent
GetWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints

shell32

ShellExecuteExW
CommandLineToArgvW
SHAppBarMessage

ole32

CoInitialize
CoUninitialize

mxui

HTMLayoutGetAttributeByName
HTMLayoutUpdateElement
HTMLayoutSetAttributeByName
HTMLayoutGetRootElement
HTMLayoutUpdateElementEx
HTMLayoutSetElementInnerText16
HTMLayoutSetElementHtml
HTMLayoutGetElementLocation
ValueIntData
HTMLayoutCallBehaviorMethod
ValueClear
ValueInit
HTMLayoutIsElementVisible
HTMLayoutGetStyleAttribute
HTMLayoutGetElementState
ValueIntDataSet
HTMLayoutSelectElements
HTMLayoutVisitElements
ValueCopy
HTMLayoutDataReady
HTMLayoutLoadFile
HTMLayoutCombineURL
HTMLayoutLoadHtml
HTMLayoutSetMediaType
HTMLayoutSetCallback
HTMLayoutClassNameW
HTMLayoutGetElementType
HTMLayoutGetNthAttribute
HTMLayoutGetAttributeCount
HTMLayoutProcND
HTMLayoutLoadHtmlEx
HTMLayoutWindowAttachEventHandler
HTMLayout_UseElement
HTMLayoutSetStyleAttribute
HTMLayout_UnuseElement
HTMLayoutSetElementState

shlwapi

PathCreateFromUrlW
PathFileExistsW

wininet

InternetCombineUrlW
InternetCanonicalizeUrlW

mxtool

CreateMxZipObj
MxFree

mxhttprq

Init
GetResponseCode
GetDownloadData
CreateAsynHttpClient
MxHttpRequest
Finalize

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxUrlSec/mxurlsec.dll
.dll windows:4 windows x86 arch:x86

e35f6e227a151ce31a77d1e30c87b496

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06-07-2009 00:00

Not After

14-07-2012 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2e:b9:30:35:2d:e8:c4:05:a2:7b:fb:27:75:19:c6:9e:ba:f2:28:3d
Signer

Actual PE Digest

2e:b9:30:35:2d:e8:c4:05:a2:7b:fb:27:75:19:c6:9e:ba:f2:28:3d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
DeleteFileA
CloseHandle
Sleep
WaitForSingleObject
ReadFile
GetFileSizeEx
CreateFileA
WriteFile
CreateFileW
FindClose
WideCharToMultiByte
CreateDirectoryW
GetFileAttributesW
MultiByteToWideChar
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
CreateDirectoryA
GetFileAttributesA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
SetConsoleCtrlHandler
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetFilePointer
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
IsBadWritePtr
VirtualAlloc
VirtualFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
GetSystemTimeAsFileTime
GetLastError
CreateThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
RaiseException
HeapFree
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
InterlockedDecrement
InterlockedIncrement
GetProcAddress
TlsAlloc
TlsFree
SetLastError
GetCurrentThread
UnhandledExceptionFilter
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
SetUnhandledExceptionFilter
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
InterlockedExchange

user32

RegisterWindowMessageA
DestroyWindow
GetWindowLongA
SetWindowLongA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
IsWindow
SendMessageA
PostThreadMessageA
SetTimer
UnregisterClassA
CreateWindowExA
DefWindowProcA
RegisterClassExA

shell32

SHFileOperationA

shlwapi

StrStrW

mxhttprq

Finalize
Init
CreateAsynHttpClient
SetAutoClose
SetPara
SetlocalPath
SetNoMemory
SetTimeout
MxHttpRequestByCallBack
GetDownloadData
GetPara
GetResponseCode

Exports

Exports

MxUrlSecCreate
MxUrlSecDelete

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxVideoPopup/MxVideoPopup.dll
.dll windows:4 windows x86 arch:x86

bd8ee9b65e451b317c82655a71f1551b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06-07-2009 00:00

Not After

14-07-2012 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3d:fd:fe:10:61:b1:96:6b:bd:aa:ab:89:02:12:0c:2b:88:a6:7e:b9
Signer

Actual PE Digest

3d:fd:fe:10:61:b1:96:6b:bd:aa:ab:89:02:12:0c:2b:88:a6:7e:b9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
GlobalHandle
LockResource
LoadResource
FindResourceW
LeaveCriticalSection
EnterCriticalSection
lstrcpynW
GlobalUnlock
GlobalLock
lstrcpyA
CreateThread
FlushInstructionCache
GetCurrentProcess
GlobalAlloc
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
HeapDestroy
VirtualQuery
InterlockedCompareExchange
ResumeThread
GetThreadContext
SetThreadContext
GetLastError
SuspendThread
GetCurrentThread
VirtualAlloc
SetLastError
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
Sleep
FreeResource
GetStringTypeA
LCMapStringW
LCMapStringA
SetConsoleCtrlHandler
GetOEMCP
GetACP
GetCPInfo
UnhandledExceptionFilter
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
FatalAppExitA
IsBadWritePtr
WriteFile
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetModuleHandleA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
HeapReAlloc
TerminateProcess
ExitProcess
TlsGetValue
TlsFree
TlsAlloc
TlsSetValue
HeapFree
HeapAlloc
GetVersion
GetCommandLineA
RtlUnwind
WaitForSingleObject
lstrcpyW
lstrcmpiW
RaiseException
GetCurrentThreadId
lstrcmpW
CreateFileA
GetFileSize
ReadFile
CloseHandle
GetPrivateProfileStringA
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrcmpA
GetPrivateProfileIntA
DeleteFileA
MoveFileExA
GetModuleHandleW
FreeLibrary
LoadLibraryA
GetProcAddress
GetStringTypeW
VirtualProtect

user32

GetFocus
IsChild
RegisterWindowMessageW
PostMessageW
wsprintfA
SendMessageW
GetClassNameW
RedrawWindow
LoadBitmapW
DefWindowProcW
IsZoomed
IsWindow
GetDlgCtrlID
DispatchMessageW
TranslateMessage
GetDesktopWindow
CreateAcceleratorTableW
wsprintfW
ReleaseCapture
SetCapture
InvalidateRgn
SetWindowLongW
SetFocus
GetDC
BeginPaint
EndPaint
GetSysColor
GetWindowTextLengthW
GetWindowTextW
GetClassInfoExW
RegisterClassExW
GetCursorPos
ScreenToClient
ChildWindowFromPoint
TrackMouseEvent
CallWindowProcW
DestroyWindow
LoadCursorW
SetCursor
TrackPopupMenuEx
InvalidateRect
SetWindowTextW
LoadIconW
GetDlgItem
SetWindowPos
CreateWindowExW
GetWindow
SystemParametersInfoW
MapWindowPoints
GetClientRect
FillRect
PostQuitMessage
GetWindowLongW
SetParent
MoveWindow
GetSystemMenu
EnableMenuItem
IsIconic
RegisterClipboardFormatW
GetParent
ClientToScreen
GetWindowRect
SetRectEmpty
DrawTextW
CreateDialogIndirectParamW
ShowWindow
GetMessageW
ReleaseDC

gdi32

CreatePen
CreateSolidBrush
CreateFontIndirectW
GetStockObject
BitBlt
LineTo
DeleteObject
Rectangle
SetBkMode
SetTextColor
CreateCompatibleBitmap
GetDeviceCaps
GetObjectW
DeleteDC
StretchBlt
MoveToEx
CreateCompatibleDC
SelectObject

ole32

OleLockRunning
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
RegisterDragDrop
ReleaseStgMedium
CoCreateInstance

oleaut32

VariantClear
LoadRegTypeLi
SysStringLen
SysAllocString
SysFreeString
SysAllocStringLen
OleCreateFontIndirect

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ImageList_Draw

Exports

Exports

MxCreateVideoPopupObject
MxDestroyVideoPopupObject

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxWebBoost/MxWebBoost.dll
.dll windows:4 windows x86 arch:x86

ccbcaab6be8bd4b77ee9760cf1b76887

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:02:99:22:7c:f0:27:e8:e1:2b:bb:7a:75:d2:98:8b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

16-06-2008 00:00

Not After

15-07-2009 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f0:a9:dc:fb:6a:02:e1:3a:1b:4d:a2:20:b0:46:07:e7:0a:83:01:f2
Signer

Actual PE Digest

f0:a9:dc:fb:6a:02:e1:3a:1b:4d:a2:20:b0:46:07:e7:0a:83:01:f2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord324
ord825
ord3626
ord3663
ord693
ord2414
ord2302
ord4234
ord5981
ord6907
ord800
ord535
ord3301
ord1641
ord4710
ord2379
ord6199
ord3092
ord3996
ord2818
ord540
ord3998
ord4853
ord6905
ord6007
ord858
ord6888
ord6675
ord3573
ord755
ord5789
ord5873
ord5875
ord6021
ord470
ord4220
ord2584
ord3654
ord2438
ord6270
ord2863
ord1644
ord1146
ord823
ord860
ord537
ord3742
ord818
ord4275
ord6467
ord539
ord939
ord801
ord2915
ord5710
ord4129
ord2764
ord541
ord5683
ord924
ord926
ord922
ord6453
ord4277
ord4278
ord6663
ord4202
ord5572
ord2919
ord6883
ord3337
ord3811
ord551
ord6662
ord941
ord2614
ord1106
ord1948
ord2396
ord3346
ord5300
ord5303
ord4079
ord4699
ord5307
ord5289
ord5715
ord4622
ord565
ord817
ord6215
ord2864
ord501
ord773
ord2726
ord4226
ord538
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord5302
ord1776
ord4698
ord5714
ord3953
ord567
ord561
ord815
ord1200
ord1949
ord5607
ord1790
ord4767
ord3519
ord5170
ord5166
ord5167
ord5168
ord5171
ord5172
ord5229
ord5169
ord5189
ord5188
ord3794
ord2917
ord6425
ord6315
ord4180
ord6390
ord6427
ord3322
ord6013
ord5776
ord2604
ord5186
ord3180
ord3183
ord3176
ord3509
ord610
ord604
ord1083
ord2762
ord287
ord276
ord5048
ord2904
ord4481
ord6139
ord1646
ord2125
ord2126
ord2393
ord1567
ord268
ord4902
ord1269
ord5050
ord1970
ord2784
ord861
ord1206
ord1168
ord1223
ord5297
ord1649
ord1899
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord6172
ord5794
ord5736
ord5579
ord5571
ord6061
ord5864
ord5678
ord1187
ord1601
ord283
ord3571
ord2754
ord5785
ord1640
ord640
ord323
ord1228
ord641
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord4078
ord6055
ord2582
ord3619
ord3597
ord4425
ord5280
ord4407
ord1775
ord3640
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord3370
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord3738
ord4402
ord6052
ord2514
ord4998
ord4376
ord2725
ord5265

msvcrt

_mbsicmp
_i64toa
wcslen
malloc
_purecall
wcstoul
_CxxThrowException
sprintf
atof
strncpy
free
time
atoi
_mbscmp
__CxxFrameHandler
__RTDynamicCast
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
rand
atol
_atoi64

kernel32

LocalFree
GetModuleFileNameA
GetPrivateProfileStringA
GetProcAddress
QueryPerformanceFrequency
QueryPerformanceCounter
ReleaseMutex
OpenMutexA
CreateMutexA
IsBadWritePtr
IsBadReadPtr
ResetEvent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetSystemTime
InterlockedDecrement
InterlockedIncrement
lstrlenA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetCurrentThreadId
Sleep
WaitForSingleObject
TerminateThread
ResumeThread
CloseHandle
CreateEventA
DeleteFileA
SetEvent
InterlockedExchange
GetLastError
LocalAlloc

user32

SendMessageA
SetTimer
IsWindow
KillTimer
GetClientRect
FillRect
LoadBitmapA
LoadStringA
GrayStringA
DrawTextA
TabbedTextOutA
GetDesktopWindow
PostThreadMessageA
PostMessageA
RegisterWindowMessageA
EnableWindow
MessageBoxA
LoadMenuA
GetSubMenu
ModifyMenuA
GetCursorPos
UpdateWindow
GetSystemMetrics
GetWindowRect
CopyRect
GetSysColor
GetSysColorBrush

gdi32

CreateFontIndirectA
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
BitBlt
SetBoundsRect
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
SelectObject

ole32

CLSIDFromString
CoLoadLibrary
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemAlloc
CoInitializeEx
CoCreateGuid
StringFromCLSID

oleaut32

VariantChangeType
SetErrorInfo
GetErrorInfo
VariantInit
LoadRegTypeLi
SysAllocStringByteLen
VariantClear
SysAllocStringLen
SysFreeString
SysAllocString
CreateErrorInfo

msvcp60

??1_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Xlen@std@@YAXXZ
??0_Lockit@std@@QAE@XZ

mxdb

?DeleteMxDbObj@@YAXPAK@Z
?CreateMxDbObj@@YA_NPAK@Z

winmm

timeGetTime

Exports

Exports

CreateWbBstObj
DeleteWbBstObj

Sections

.text
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Modules/MxWin7/MxW7Wg.dll
.dll windows:5 windows x86 arch:x86

a513c6724d28c85705f3bc82dd348118

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06-07-2009 00:00

Not After

14-07-2012 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:1b:66:2b:d9:5f:b1:4f:3f:8d:dc:97:b7:3b:b1:3d:cc:01:55:c9
Signer

Actual PE Digest

2b:1b:66:2b:d9:5f:b1:4f:3f:8d:dc:97:b7:3b:b1:3d:cc:01:55:c9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\SVN\Modules\MxW7Widgets\Trunk\Source\Release\MxW7Wg.pdb

Imports

kernel32

GetFileSize
lstrlenA
InterlockedIncrement
InterlockedDecrement
OutputDebugStringW
WriteFile
ReadFile
CreateFileW
MultiByteToWideChar
lstrlenW
CloseHandle
DebugBreak
GetFullPathNameW
MapViewOfFile
UnmapViewOfFile
FindResourceW
FreeLibrary
LoadResource
LoadLibraryExW
GetCurrentProcess
K32GetModuleFileNameExW
WideCharToMultiByte
SizeofResource
LeaveCriticalSection
lstrcpynW
GetFileAttributesW
FlushInstructionCache
RaiseException
GetLastError
SetLastError
EnterCriticalSection
CreateFileMappingW
LockResource
OpenFileMappingW
GetCurrentThreadId
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
ExitProcess
Sleep
CompareStringW
GetModuleFileNameA
GetStdHandle
HeapSize
HeapReAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
RtlUnwind
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
VirtualAlloc
VirtualFree
GetModuleHandleA
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryA
InterlockedExchange
GetProcAddress
LocalAlloc

user32

SetRectEmpty
LoadStringW
wvsprintfW
UnregisterClassA
RegisterWindowMessageA
DestroyWindow
GetWindowRect
IsWindow
MessageBoxW
ScreenToClient
RegisterWindowMessageW
PostMessageW
IsZoomed
GetParent
LoadCursorW
GetClientRect
SetFocus
CharNextW
GetClassInfoExW
InflateRect
RegisterClassExW
GetWindowLongW
SystemParametersInfoW
MonitorFromWindow
SetWindowLongW
SetWindowPos
ShowWindow
CreateWindowExW
SendMessageW
GetMonitorInfoW
CallWindowProcW
DefWindowProcW
MonitorFromRect
CharLowerW

shell32

SHAppBarMessage

ole32

CoUninitialize
PropVariantClear
CoInitializeEx
CoCreateInstance

mxui

HTMLayoutSetElementInnerText16
ValueIntDataSet
HTMLayoutGetAttributeByName
HTMLayoutWindowAttachEventHandler
HTMLayoutGetRootElement
HTMLayoutGetElementLocation
HTMLayoutLoadHtml
HTMLayoutGetAttributeCount
ValueIntData
HTMLayoutGetParentElement
HTMLayoutSelectElements
ValueClear
HTMLayoutSetElementState
HTMLayout_UnuseElement
HTMLayoutUpdateElementEx
HTMLayoutGetElementType
ValueInit
HTMLayoutSetMediaType
HTMLayoutGetElementState
HTMLayoutLoadHtmlEx
HTMLayoutLoadFile
HTMLayoutVisitElements
HTMLayoutSetCallback
HTMLayoutProcND
HTMLayoutSetStyleAttribute
ValueCopy
HTMLayoutSetElementHtml
HTMLayoutCombineURL
HTMLayoutCallBehaviorMethod
HTMLayoutGetNthAttribute
HTMLayoutDataReady
HTMLayoutUpdateElement
HTMLayoutClassNameW
HTMLayout_UseElement

wininet

InternetCanonicalizeUrlW
InternetCombineUrlW

mxtool

MxFree
CreateMxZipObj

Exports

Exports

CreateJLMObj
CreateQuickActionObj
CreateTooltipObj
DeleteJLMObj
DeleteQuickActionObj
DeleteTooltipObj

Sections

.text
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/MxFav.dll
.dll windows:4 windows x86 arch:x86

ff64ffe1dbf0da409344fe58f2b7241c

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06-07-2009 00:00

Not After

14-07-2012 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

dc:fc:22:94:f0:3e:10:e3:e4:5c:f0:69:34:d5:5d:37:ee:7f:c5:eb
Signer

Actual PE Digest

dc:fc:22:94:f0:3e:10:e3:e4:5c:f0:69:34:d5:5d:37:ee:7f:c5:eb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

maxzlib

uncompress
compress2

mxsk

CreateMxPsObj
DeleteMxPsObj

mfc42

ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord2396
ord2915
ord3663
ord2841
ord858
ord535
ord537
ord665
ord1979
ord6385
ord5186
ord354
ord2107
ord5450
ord5440
ord6383
ord6394
ord826
ord600
ord1578
ord6467
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord5199
ord1089
ord3922
ord5731
ord269
ord2512
ord2554
ord4486
ord6375
ord4274
ord540
ord860
ord2818
ord939
ord800
ord825
ord1182
ord1577
ord1168
ord1575
ord1176
ord823
ord1116

msvcrt

strncpy
_mbscmp
_CxxThrowException
rand
srand
time
fclose
fprintf
printf
vsprintf
strrchr
??1type_info@@UAE@XZ
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
atoi
memmove
_beginthreadex
sprintf
__CxxFrameHandler
_purecall
fopen

kernel32

WaitForSingleObject
CloseHandle
SetEvent
DeleteCriticalSection
CreateEventA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WaitForMultipleObjects
GetLastError
ResetEvent
GetModuleFileNameA
CreateMutexA
ReleaseMutex
OutputDebugStringA
GetLocalTime
DebugBreak
FatalExit
LocalFree
LocalAlloc
TerminateThread

user32

wsprintfA
MessageBoxA
PostMessageA

msvcp60

?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??_7?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_7?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??1ios_base@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Xlen@std@@YAXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Xran@std@@YAXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ

wininet

InternetCloseHandle
HttpSendRequestA
HttpOpenRequestA
InternetReadFileExA
InternetSetStatusCallback
InternetConnectA
InternetOpenA
InternetQueryOptionA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

Exports

Exports

CreateMaxFavObj
CreateMaxSsObj
DeleteMaxFavObj
DeleteMaxSsObj
Md4

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/MxProxy2.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 728KB - Virtual size: 724KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/MxSk.dll
.dll windows:4 windows x86 arch:x86

f4fadf9628fdf04d7a1ebafe006ba3f6

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06-07-2009 00:00

Not After

14-07-2012 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6e:b0:f6:c2:78:d0:07:99:b7:fe:e7:8e:7a:64:e1:ec:da:61:2b:ff
Signer

Actual PE Digest

6e:b0:f6:c2:78:d0:07:99:b7:fe:e7:8e:7a:64:e1:ec:da:61:2b:ff

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

send
select
htons
socket
setsockopt
WSAEventSelect
WSAConnect
WSAGetLastError
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
recv
WSAResetEvent
WSASetEvent
WSACloseEvent
WSACreateEvent
gethostbyname
inet_addr

mfc42

ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4274
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord537
ord924
ord800
ord2915
ord825
ord823
ord269
ord826
ord600
ord1578
ord6467
ord1255
ord1253
ord1570
ord1116
ord1197
ord1243
ord342
ord1182
ord1577
ord1168
ord1575
ord1176
ord2982

msvcrt

memmove
_purecall
tolower
strspn
malloc
_beginthreadex
memchr
_CxxThrowException
time
rand
srand
sprintf
fclose
fprintf
fopen
printf
vsprintf
strncpy
strrchr
__dllonexit
_onexit
??1type_info@@UAE@XZ
free
_initterm
_adjust_fdiv
__CxxFrameHandler

kernel32

ResetEvent
GetProcAddress
LoadLibraryA
GetVersionExA
CreateEventA
CloseHandle
WaitForSingleObject
SetEvent
GetLastError
WaitForMultipleObjects
InitializeCriticalSection
DeleteCriticalSection
ResumeThread
LeaveCriticalSection
EnterCriticalSection
Sleep
OutputDebugStringA
GetLocalTime
DebugBreak
FatalExit
GetModuleFileNameA
LocalFree
LocalAlloc
FreeLibrary

user32

wsprintfA
MessageBoxA
GetDesktopWindow

msvcp60

??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??0ios_base@std@@IAE@XZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??_7?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??_7?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@

wininet

InternetOpenA
InternetReadFileExA
InternetErrorDlg
HttpQueryInfoA
HttpSendRequestA
InternetSetOptionA
HttpOpenRequestA
InternetConnectA
InternetCloseHandle
InternetSetStatusCallback

Exports

Exports

CreateMxPsObj
CreateMxPwObj
CreateMxSkObj
DeleteMxPsObj
DeleteMxPwObj
DeleteMxSkObj

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/MxUI.dll
.dll windows:4 windows x86 arch:x86

e03dbf1d9b2548717e2b645453b93825

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06-07-2009 00:00

Not After

14-07-2012 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3f:21:af:bd:ae:1e:90:8c:fb:d5:fc:2e:79:b8:43:5e:3a:26:83:fc
Signer

Actual PE Digest

3f:21:af:bd:ae:1e:90:8c:fb:d5:fc:2e:79:b8:43:5e:3a:26:83:fc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsBadReadPtr
GetOEMCP
GetACP
ReadFile
SetUnhandledExceptionFilter
FlushFileBuffers
GetTimeZoneInformation
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
WriteFile
FatalAppExitA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleHandleA
GetCurrentThread
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
HeapSize
HeapReAlloc
GetCurrentProcess
IsBadCodePtr
SetStdHandle
CreateFileA
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
SetConsoleCtrlHandler
CompareStringA
CompareStringW
SetEnvironmentVariableA
FindResourceW
FindResourceA
LoadResource
LockResource
SizeofResource
Sleep
FreeLibrary
LoadLibraryA
GetProcAddress
GetTempPathA
GetTempFileNameA
GetLocaleInfoA
GetCurrentThreadId
GetTickCount
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
LeaveCriticalSection
TerminateProcess
ExitProcess
RaiseException
GetVersion
GetCommandLineA
HeapAlloc
DeleteFileA
HeapFree
RtlUnwind
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
MulDiv
CloseHandle
SetEvent
InterlockedExchange
WideCharToMultiByte
SystemTimeToFileTime
GetLocalTime
GetSystemTime
GetDateFormatW
FileTimeToSystemTime
GetThreadLocale
GetLocaleInfoW
GetLastError
GetVersionExA
CreateThread
CreateEventA
ExitThread
WaitForSingleObject
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileW
SetEndOfFile
SetFilePointer
UnmapViewOfFile
FlushViewOfFile
GetCPInfo
SetThreadLocale
GetNumberFormatW
GetCurrencyFormatW
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleFileNameA
GetSystemDefaultLCID

user32

GetAncestor
GetDesktopWindow
UnregisterClassW
RegisterClassW
RegisterClassExW
UnregisterClassA
RegisterClassExA
IsWindowVisible
GetActiveWindow
CreateWindowExW
RegisterWindowMessageA
SetForegroundWindow
GetDC
ScrollDC
ScrollWindowEx
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
SetScrollInfo
ShowWindow
PostQuitMessage
SystemParametersInfoA
EndDialog
GetWindow
CreateWindowExA
SetWindowTextA
SetWindowPos
DialogBoxIndirectParamA
DestroyWindow
AdjustWindowRectEx
GetMessageA
TranslateMessage
DispatchMessageA
LoadCursorFromFileA
DestroyIcon
SetCursor
LoadCursorA
CreateCursor
DefWindowProcW
IsWindowEnabled
GetWindowPlacement
MoveWindow
PostMessageA
GetWindowThreadProcessId
WindowFromPoint
GetCursorPos
GetFocus
DrawFocusRect
DrawTextA
DrawTextW
InvertRect
CharLowerBuffW
CharUpperBuffW
GetSysColorBrush
DrawEdge
DrawFrameControl
DrawIconEx
CreateIconFromResourceEx
GetKeyState
MessageBeep
RegisterClipboardFormatW
CloseClipboard
EmptyClipboard
OpenClipboard
EnumClipboardFormats
CountClipboardFormats
SetClipboardData
GetClipboardData
IsClipboardFormatAvailable
LoadStringW
GetCaretBlinkTime
GetDoubleClickTime
GetScrollInfo
GetWindowDC
InflateRect
OffsetRect
GetClassLongA
FillRect
ReleaseDC
GetAsyncKeyState
GetSysColor
UpdateWindow
GetDlgCtrlID
SetTimer
ClientToScreen
GetSystemMetrics
GetCapture
ReleaseCapture
GetClientRect
BeginPaint
EndPaint
InvalidateRect
ScreenToClient
DefWindowProcA
IsWindowUnicode
SetWindowLongA
SetCapture
SetFocus
PeekMessageA
GetParent
IsWindow
MapWindowPoints
GetWindowLongA
GetWindowRect
SendMessageA
NotifyWinEvent
KillTimer

gdi32

CombineRgn
ExcludeClipRect
SetTextColor
SetBkColor
CreateSolidBrush
SetWindowOrgEx
BitBlt
DeleteDC
CreateRectRgnIndirect
LPtoDP
CreateCompatibleBitmap
SelectObject
GetStockObject
GetMapMode
SetMapMode
GetWindowExtEx
SetWindowExtEx
GetTextMetricsA
GetDeviceCaps
IntersectClipRect
CreateCompatibleDC
GetKerningPairsA
GetGlyphOutlineW
GetCurrentObject
SetDIBitsToDevice
CreateDIBPatternBrushPt
StretchBlt
SetStretchBltMode
StretchDIBits
CreateDIBSection
GetTextAlign
GetPixel
SetPixel
RoundRect
CreateRectRgn
SelectClipRgn
CreateBitmap
CreatePatternBrush
TextOutA
TextOutW
GetTextExtentPoint32A
GetTextExtentPoint32W
RectVisible
PatBlt
Rectangle
GetWindowOrgEx
CreateHatchBrush
SetBrushOrgEx
CreatePen
SetTextAlign
SetBkMode
EnumFontFamiliesExW
EnumFontFamiliesExA
CreateFontA
GetViewportExtEx
SetViewportExtEx
DPtoLP
GetObjectA
GetClipBox
SaveDC
SetViewportOrgEx
SetLayout
RestoreDC
CreateDCA
DeleteObject

ole32

CoInitialize
CoCreateGuid

oleaut32

SysAllocStringLen

oleacc

LresultFromObject
AccessibleObjectFromWindow

winmm

timeGetDevCaps
timeSetEvent
timeGetTime
timeKillEvent

advapi32

IsTextUnicode

comctl32

ImageList_Draw
ImageList_GetIconSize

shell32

SHGetSpecialFolderPathA
SHGetFileInfoW

wininet

InternetCombineUrlA
InternetConnectA
HttpOpenRequestA
InternetCloseHandle
InternetReadFile
InternetSetOptionA
InternetQueryOptionA
InternetErrorDlg
HttpSendRequestA
HttpQueryInfoA
InternetOpenA
InternetGetLastResponseInfoA

msimg32

AlphaBlend

Exports

Exports

?HTMLayoutEnumResourcesEx@@YGIPAUHWND__@@P6GHPBGPBDPBEKPAX@ZPAPAX@Z
HTMLayoutAnimateElement
HTMLayoutAppendMasterCSS
HTMLayoutAttachEventHandler
HTMLayoutAttachEventHandlerEx
HTMLayoutCallBehaviorMethod
HTMLayoutClassNameA
HTMLayoutClassNameW
HTMLayoutClearAttributes
HTMLayoutClipboardCopy
HTMLayoutCloneElement
HTMLayoutCombineURL
HTMLayoutCommitUpdates
HTMLayoutControlGetType
HTMLayoutControlGetValue
HTMLayoutControlSetValue
HTMLayoutCreateElement
HTMLayoutDataReady
HTMLayoutDataReadyAsync
HTMLayoutDeclareElementType
HTMLayoutDeleteElement
HTMLayoutDetachElement
HTMLayoutDetachEventHandler
HTMLayoutDialog
HTMLayoutElementGetExpando
HTMLayoutElementSetExpando
HTMLayoutEnumElementStyles
HTMLayoutEnumResources
HTMLayoutEnumerate
HTMLayoutFindElement
HTMLayoutGetAttributeByName
HTMLayoutGetAttributeCount
HTMLayoutGetCharacterRect
HTMLayoutGetChildrenCount
HTMLayoutGetElementByUID
HTMLayoutGetElementHtml
HTMLayoutGetElementHwnd
HTMLayoutGetElementIndex
HTMLayoutGetElementInnerText
HTMLayoutGetElementInnerText16
HTMLayoutGetElementIntrinsicHeight
HTMLayoutGetElementIntrinsicWidths
HTMLayoutGetElementLocation
HTMLayoutGetElementState
HTMLayoutGetElementText
HTMLayoutGetElementType
HTMLayoutGetElementUID
HTMLayoutGetFocusElement
HTMLayoutGetGraphin
HTMLayoutGetMinHeight
HTMLayoutGetMinWidth
HTMLayoutGetNthAttribute
HTMLayoutGetNthChild
HTMLayoutGetParentElement
HTMLayoutGetRootElement
HTMLayoutGetScrollInfo
HTMLayoutGetSelectedHTML
HTMLayoutGetStyleAttribute
HTMLayoutHidePopup
HTMLayoutHttpRequest
HTMLayoutInit
HTMLayoutInsertElement
HTMLayoutIsElementEnabled
HTMLayoutIsElementVisible
HTMLayoutLoadFile
HTMLayoutLoadHtml
HTMLayoutLoadHtmlEx
HTMLayoutMoveElement
HTMLayoutMoveElementEx
HTMLayoutParseValue
HTMLayoutPostEvent
HTMLayoutProc
HTMLayoutProcND
HTMLayoutProcW
HTMLayoutProcessUIEvent
HTMLayoutRangeAdvancePos
HTMLayoutRangeCreate
HTMLayoutRangeFromPositions
HTMLayoutRangeFromSelection
HTMLayoutRangeInsertHtml
HTMLayoutRangeIsEmpty
HTMLayoutRangeRelease
HTMLayoutRangeReplace
HTMLayoutRangeToHtml
HTMLayoutRender
HTMLayoutRenderElement
HTMLayoutRequestElementData
HTMLayoutScrollToView
HTMLayoutSelectElements
HTMLayoutSelectElementsW
HTMLayoutSelectParent
HTMLayoutSelectParentW
HTMLayoutSelectionExist
HTMLayoutSendEvent
HTMLayoutSetAttributeByName
HTMLayoutSetCSS
HTMLayoutSetCallback
HTMLayoutSetCapture
HTMLayoutSetDataLoader
HTMLayoutSetElementHtml
HTMLayoutSetElementInnerText
HTMLayoutSetElementInnerText16
HTMLayoutSetElementState
HTMLayoutSetEventRoot
HTMLayoutSetHttpHeaders
HTMLayoutSetMasterCSS
HTMLayoutSetMediaType
HTMLayoutSetMode
HTMLayoutSetOption
HTMLayoutSetScrollPos
HTMLayoutSetStyleAttribute
HTMLayoutSetTimer
HTMLayoutSetTimerEx
HTMLayoutSetupDebugOutput
HTMLayoutShowPopup
HTMLayoutShowPopupAt
HTMLayoutSortElements
HTMLayoutSwapElements
HTMLayoutTrackPopupAt
HTMLayoutTraverseUIEvent
HTMLayoutUpdateElement
HTMLayoutUpdateElementEx
HTMLayoutUpdateView
HTMLayoutUpdateWindow
HTMLayoutVisitElements
HTMLayoutWindowAttachEventHandler
HTMLayoutWindowDetachEventHandler
HTMLayout_UnuseElement
HTMLayout_UseElement
HTMLiteAdvanceFocus
HTMLiteAttachEventHandler
HTMLiteCreateInstance
HTMLiteDestroyInstance
HTMLiteDetachEventHandler
HTMLiteFindElement
HTMLiteGetDocumentMinHeight
HTMLiteGetDocumentMinWidth
HTMLiteGetElementHTMLITE
HTMLiteGetFocusElement
HTMLiteGetNextFocusable
HTMLiteGetRootElement
HTMLiteGetTag
HTMLiteLoadHtmlFromFile
HTMLiteLoadHtmlFromMemory
HTMLiteMeasure
HTMLiteRender
HTMLiteRenderOnBitmap
HTMLiteSetCallback
HTMLiteSetDataReady
HTMLiteSetDataReadyAsync
HTMLiteSetMediaType
HTMLiteSetTag
HTMLiteTraverseUIEvent
HTMPrintCreateInstance
HTMPrintDestroyInstance
HTMPrintGetDocumentHeight
HTMPrintGetDocumentMinWidth
HTMPrintGetRootElement
HTMPrintGetTag
HTMPrintLoadHtmlFromFile
HTMPrintLoadHtmlFromFileW
HTMPrintLoadHtmlFromMemory
HTMPrintMeasure
HTMPrintRender
HTMPrintSetDataReady
HTMPrintSetHyperlinkAreaCallback
HTMPrintSetLoadDataCallback
HTMPrintSetMediaType
HTMPrintSetNextPageCallback
HTMPrintSetTag
ValueBinaryData
ValueBinaryDataSet
ValueClear
ValueCompare
ValueCopy
ValueElementsCount
ValueFloatData
ValueFloatDataSet
ValueFromString
ValueGetValueOfKey
ValueInit
ValueInt64Data
ValueInt64DataSet
ValueIntData
ValueIntDataSet
ValueInvoke
ValueNthElementKey
ValueNthElementValue
ValueNthElementValueSet
ValueSetValueToKey
ValueStringData
ValueStringDataSet
ValueToString
ValueType
_HTMLayoutUrlEscape@16
_HTMLayoutUrlUnescape@12
_HTMLiteGetElementByUID@12
_HTMPrintSetCallback@12
_ValueEnumElements@12
_ValueIsolate@4

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/MxUeip.dll
.dll windows:4 windows x86 arch:x86

b5b782883881f5f55a2583d52c3f9136

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06-07-2009 00:00

Not After

14-07-2012 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c6:1e:c9:cf:69:f7:03:d4:bb:b9:df:51:79:1b:10:a4:f8:ad:18:52
Signer

Actual PE Digest

c6:1e:c9:cf:69:f7:03:d4:bb:b9:df:51:79:1b:10:a4:f8:ad:18:52

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileW
GetLocalTime
InterlockedDecrement
lstrlenW
DebugBreak
OutputDebugStringW
lstrlenA
FreeLibrary
GetProcAddress
LoadLibraryW
CloseHandle
WriteFile
SetFilePointer
CreateFileW
ReadFile
GetFileSize
InterlockedIncrement
MoveFileW
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
FileTimeToSystemTime
FileTimeToLocalFileTime
SetEndOfFile
GetLastError
FindClose
FindFirstFileW
SetFileTime
SetFileAttributesW
GetFileAttributesW
LockFile
UnlockFile
WideCharToMultiByte
MultiByteToWideChar
SystemTimeToFileTime
IsBadWritePtr
IsBadReadPtr
CreateDirectoryW
RemoveDirectoryW
FindNextFileW
CopyFileW
GetModuleFileNameW
GetModuleHandleW
GetCurrentProcess
LocalFree
FormatMessageW
Sleep
WaitForSingleObject
OpenProcess
TerminateProcess
GetCurrentProcessId
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceW
lstrcpynW
lstrcpyW
GetVolumeInformationW
GetFullPathNameW
LocalFileTimeToFileTime
TerminateThread
CreateEventW
SetEvent

user32

CharLowerW
GetCursorPos
SendMessageW
CharUpperW
IsRectEmpty
GetWindowTextW
CopyRect
RegisterWindowMessageA
wvsprintfW
CharNextW
LoadStringW
FindWindowW
FindWindowExW
GetForegroundWindow
GetWindowRect
SetRectEmpty

shell32

ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
SHFileOperationW

ws2_32

shutdown
closesocket
setsockopt
WSASetLastError
inet_addr
inet_ntoa
gethostname
gethostbyname
WSACleanup
WSAStartup
WSAGetLastError

psapi

GetModuleFileNameExW
EnumProcessModules
EnumProcesses
GetModuleBaseNameW

shlwapi

PathRemoveFileSpecW
PathAddBackslashW
PathFindFileNameW
PathFileExistsW

winmm

sndPlaySoundW

msvcp60

?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBGI@Z
??8std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@G@Z
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIPBGI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_Xlen@std@@YAXXZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?_Xran@std@@YAXXZ
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB

mxhttprq

SetlocalPath
Finalize
GetResponseCode
SetNoMemory
Init
CreateAsynHttpClient
SetAutoClose
MxHttpRequestByCallBack

msvcrt

swprintf
_wcsicmp
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
wcscmp
wcschr
memmove
wcsstr
wcsrchr
_itow
iswctype
_CxxThrowException
strtol
malloc
free
wcscat
swscanf
toupper
_waccess
wcslen
vswprintf
wcscpy
_wcslwr
localtime
gmtime
time
mktime
_beginthreadex
_wtoi
iswdigit
??2@YAPAXI@Z
__CxxFrameHandler

wininet

HttpSendRequestExW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetWriteFile

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

netapi32

Netbios

Exports

Exports

Count
IsQuery
IsSetted
SendData
Set
UeipInit

Sections

.text
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/Plugin/AddToKaixin001/AddToKaixin001.htm
.html .js polyglot
$PLUGINSDIR/mx2_data/Plugin/AddToKaixin001/out.ico
$PLUGINSDIR/mx2_data/Plugin/AddToKaixin001/plugin.ini
$PLUGINSDIR/mx2_data/Plugin/ĵ.url
$PLUGINSDIR/mx2_data/Skin/Ƥĵ.url
$PLUGINSDIR/mx2_data/Temp/AList.xml
$PLUGINSDIR/mx2_data/Temp/MxUrlSec/alipay.list
$PLUGINSDIR/mx2_data/Temp/MxUrlSec/cnnic.list
$PLUGINSDIR/mx2_data/Temp/MxUrlSec/config.ini
$PLUGINSDIR/mx2_data/Temp/MxUrlSec/mx_safe_all.list
$PLUGINSDIR/mx2_data/Temp/MxUrlSec/mx_safe_sub.list
$PLUGINSDIR/mx2_data/Temp/MxUrlSec/old_black.list
$PLUGINSDIR/mx2_data/Temp/MxUrlSec/taobao.list
$PLUGINSDIR/mx2_data/Temp/MxUrlSec/youa.list
$PLUGINSDIR/mx2_data/Temp/MxVideoPopup/videoUrlRules.ini
$PLUGINSDIR/mx2_data/Temp/NList.xml
.xml
$PLUGINSDIR/mx2_data/Temp/PList.xml
$PLUGINSDIR/mx2_data/Temp/SList.xml
$PLUGINSDIR/mx2_data/Temp/sdurl.dat
$PLUGINSDIR/mx2_data/maxzlib.dll
.dll windows:4 windows x86 arch:x86

58ebe63bde2e8d9e022f7f601830ac71

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:02:99:22:7c:f0:27:e8:e1:2b:bb:7a:75:d2:98:8b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

16-06-2008 00:00

Not After

15-07-2009 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

66:9e:fd:ce:66:08:bf:19:23:90:9d:36:f2:12:9d:fa:7a:ac:c8:96
Signer

Actual PE Digest

66:9e:fd:ce:66:08:bf:19:23:90:9d:36:f2:12:9d:fa:7a:ac:c8:96

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_fdopen
fopen
_errno
malloc
sprintf
fwrite
fread
fclose
free
fprintf
fflush
fseek
fputc
strerror
clearerr
_initterm
_adjust_fdiv
_vsnprintf
ftell

kernel32

DisableThreadLibraryCalls

Exports

Exports

adler32
compress
compress2
compressBound
crc32
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
get_crc_table
gzclearerr
gzclose
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateInit2_
inflateInit_
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
uncompress
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/mxdb.dll
.dll windows:4 windows x86 arch:x86

9cb9c7b6a4d0beab81a932b3f1b67cd9

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:02:99:22:7c:f0:27:e8:e1:2b:bb:7a:75:d2:98:8b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

16-06-2008 00:00

Not After

15-07-2009 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

b4:40:8d:d9:10:c7:bd:49:d0:64:00:c4:a1:d5:4a:91:f2:81:0c:be
Signer

Actual PE Digest

b4:40:8d:d9:10:c7:bd:49:d0:64:00:c4:a1:d5:4a:91:f2:81:0c:be

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

AreFileApisANSI
CloseHandle
GetLastError
ReadFile
SetFilePointer
WriteFile
SetEndOfFile
FlushFileBuffers
GetFileSize
LockFile
LockFileEx
UnlockFile
CreateFileA
CreateFileW
GetFileAttributesA
GetFileAttributesW
WideCharToMultiByte
DeleteFileW
GetTempPathA
GetTempPathW
GetFullPathNameA
GetFullPathNameW
LoadLibraryA
LoadLibraryW
FormatMessageA
GetProcAddress
FreeLibrary
GetCurrentProcessId
GetSystemTime
GetTickCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
MultiByteToWideChar
GetVersionExA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
DeleteCriticalSection
Sleep
InitializeCriticalSection
DeleteFileA
InterlockedIncrement
RtlUnwind
InterlockedDecrement
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
GetStringTypeA
GetStringTypeW
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleHandleA
GetTimeZoneInformation
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
SetStdHandle
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA

advapi32

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptDeriveKey
CryptDecrypt
CryptDestroyKey
CryptEncrypt
CryptAcquireContextA
CryptDuplicateKey

Exports

Exports

?CreateMxDbObj@@YA_NPAK@Z
?DeleteMxDbObj@@YAXPAK@Z

Sections

.text
Size: 304KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 4KB - Virtual size: 40B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/mxpp.dll
.dll windows:4 windows x86 arch:x86

47c8dac3f927e8595a4a4df4da2b6677

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06-07-2009 00:00

Not After

14-07-2012 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6a:ef:4f:e2:4b:ee:d7:0d:f3:2f:3a:04:a3:4f:a2:b8:ef:1e:be:80
Signer

Actual PE Digest

6a:ef:4f:e2:4b:ee:d7:0d:f3:2f:3a:04:a3:4f:a2:b8:ef:1e:be:80

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord1199
ord5714
ord3953
ord823
ord1116
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord1578
ord600
ord826
ord269
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord825
ord4486
ord6375
ord4274
ord1247

msvcrt

__CxxFrameHandler
strncpy
_beginthreadex
_purecall
??1type_info@@UAE@XZ
free
_initterm
malloc
_adjust_fdiv
memmove
strncat
wcslen
_onexit
__dllonexit
_CxxThrowException
_stricmp

kernel32

TerminateThread
ResumeThread
SetEvent
CreateEventA
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
ReleaseMutex
DeleteCriticalSection
CloseHandle
InitializeCriticalSection
CreateMutexA
LocalFree
LocalAlloc

user32

PostMessageA

msvcp60

?_Xlen@std@@YAXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Xran@std@@YAXXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??_7?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ

mxsk

CreateMxSkObj
DeleteMxSkObj

Exports

Exports

CreateMcObj
CreatePpObj
DeleteMcObj
DeletePpObj

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/mxtool.dll
.dll windows:4 windows x86 arch:x86

1e1b4359ecfd77fe0126157cf089cd8d

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

06-07-2009 00:00

Not After

14-07-2012 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6f:27:41:b6:af:4a:6c:58:eb:1a:da:61:3a:d9:5a:bc:b7:d6:74:36
Signer

Actual PE Digest

6f:27:41:b6:af:4a:6c:58:eb:1a:da:61:3a:d9:5a:bc:b7:d6:74:36

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

maxzlib

get_crc_table
deflateEnd
deflate
deflateInit2_
inflateEnd
crc32
inflate
inflateInit2_

mfc42u

ord3171
ord6381
ord353
ord538
ord861
ord2795
ord3502
ord3175
ord6006
ord5438
ord3313
ord5647
ord3122
ord3611
ord2385
ord350
ord1971
ord922
ord535
ord858
ord6921
ord5596
ord940
ord942
ord6919
ord4272
ord4124
ord3178
ord5446
ord6390
ord2836
ord5436
ord6379
ord2099
ord1824
ord349
ord2910
ord1825
ord354
ord665
ord6920
ord6918
ord5568
ord6466
ord1560
ord4078
ord268
ord6867
ord5180
ord2593
ord5769
ord4172
ord6308
ord958
ord2912
ord941
ord2810
ord2754
ord5603
ord1083
ord823
ord2606
ord773
ord3658
ord540
ord501
ord800
ord3697
ord825
ord1194
ord269
ord826
ord600
ord1571
ord1250
ord1248
ord1563
ord1240
ord342
ord1179
ord1570
ord1165
ord1568
ord1173
ord4197
ord1115

msvcrt

_onexit
__dllonexit
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
wcscpy
strlen
??0exception@@QAE@ABV0@@Z
_ftol
ceil
_wcsicoll
_wcsicmp
wcscmp
wcslen
_waccess
_wchdir
_wutime
_wstat
_wsplitpath
realloc
malloc
localtime
mktime
_errno
wcsncpy
memmove
memcmp
qsort
wcscoll
abs
srand
rand
free
_purecall
time
memcpy
_CxxThrowException
__CxxFrameHandler
memset

kernel32

DeleteFileW
EnterCriticalSection
GetTickCount
lstrcpyW
GetModuleFileNameW
GetModuleHandleW
LocalAlloc
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
MoveFileW
MapViewOfFile
CreateFileMappingW
CloseHandle
UnmapViewOfFile
LocalFree
FormatMessageW
GetLastError
GetDiskFreeSpaceW
GetFileSize
CreateFileW
GetTempFileNameW
GetTempPathW
GetCurrentDirectoryW
SetFileAttributesW
GetFileAttributesW
GetDriveTypeW
SetVolumeLabelW
LeaveCriticalSection

user32

GetWindowRect
KillTimer
OemToCharBuffA
CharToOemBuffA
RegisterWindowMessageA
IsWindow
SetWindowPos
SetTimer
PostMessageW

msvcp60

??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
?str@?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_7out_of_range@std@@6B@
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??_D?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Exports

Exports

CreateAMObj
CreateMxZipObj
DeleteAMObj
MxFree

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/mxtool2.dll
.dll regsvr32 windows:4 windows x86 arch:x86

2c075f3139e26b85025b1b4ca628936b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16-07-2004 00:00

Not After

15-07-2014 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:02:99:22:7c:f0:27:e8:e1:2b:bb:7a:75:d2:98:8b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

16-06-2008 00:00

Not After

15-07-2009 23:59

Subject

CN=Maxthon Asia Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Maxthon Asia Ltd,L=Hong Kong,ST=Hong Kong,C=HK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

79:ed:d6:ec:43:d0:4b:2b:5f:11:0c:74:14:5e:08:63:f6:df:62:d5
Signer

Actual PE Digest

79:ed:d6:ec:43:d0:4b:2b:5f:11:0c:74:14:5e:08:63:f6:df:62:d5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

maxzlib

get_crc_table
deflateEnd
deflate
deflateInit2_
inflateEnd
crc32
inflate
inflateInit2_

mfc42

ord5442
ord3318
ord5651
ord3127
ord3616
ord2393
ord860
ord350
ord1979
ord922
ord535
ord858
ord6930
ord5572
ord2915
ord5600
ord939
ord941
ord6928
ord4277
ord4129
ord4202
ord5450
ord6394
ord2841
ord5440
ord6383
ord2107
ord1832
ord349
ord1833
ord354
ord665
ord6929
ord6927
ord4274
ord815
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord6010
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord1116
ord3953
ord2725
ord1131
ord6467
ord539
ord1567
ord268
ord1601
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord3180
ord3507
ord2803
ord537
ord353
ord6385
ord3176
ord3183
ord5186
ord2601
ord5773
ord4177
ord6312
ord958
ord2917
ord940
ord2818
ord2762
ord5607
ord1083
ord823
ord2614
ord773
ord3663
ord825
ord540
ord501
ord800
ord3702
ord1197
ord1243
ord342
ord1182
ord1577
ord1168
ord1575
ord1176
ord1089
ord561

msvcrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
??1type_info@@UAE@XZ
_mbsicoll
_mbsicmp
_mbscmp
_access
_chdir
_utime
_stat
_splitpath
realloc
malloc
localtime
mktime
__CxxFrameHandler
_CxxThrowException
memcpy
_purecall
free
rand
srand
strlen
abs
_errno
strncpy
memmove
memcmp
memset
qsort
_mbscoll
time

kernel32

GetTempPathA
GetCurrentDirectoryA
SetFileAttributesA
GetFileAttributesA
GetDriveTypeA
SetVolumeLabelA
DeleteFileA
MoveFileA
GetTempFileNameA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
lstrlenW
LocalAlloc
CreateFileA
MapViewOfFile
CreateFileMappingA
CloseHandle
UnmapViewOfFile
LocalFree
FormatMessageA
GetLastError
CreateDirectoryA
GetFileSize
GetDiskFreeSpaceA

user32

CharToOemBuffA
OemToCharBuffA

oleaut32

SysStringByteLen
SysStringLen
LoadRegTypeLi
SysFreeString
SysAllocStringByteLen

atl

ord58
ord32
ord57
ord18
ord15
ord21
ord16
ord23
ord30

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/mx2_data/template/Download/images/check.png
.png
$PLUGINSDIR/mx2_data/template/Download/images/done.png
.png
$PLUGINSDIR/mx2_data/template/Download/images/error.png
.png
$PLUGINSDIR/mx2_data/template/Download/images/logo.png
.png
$PLUGINSDIR/mx2_data/template/Download/images/pause.png
.png
$PLUGINSDIR/mx2_data/template/Download/images/reset.png
.png
$PLUGINSDIR/mx2_data/template/Download/images/run.png
.png
$PLUGINSDIR/mx2_data/template/Download/images/search.png
.png
$PLUGINSDIR/mx2_data/template/Download/images/stop.png
.png
$PLUGINSDIR/mx2_data/template/Download/index.htm
.html
$PLUGINSDIR/mx2_data/template/Download/maxDownload.css
$PLUGINSDIR/mx2_data/template/Download/maxDownload.js
.js
$PLUGINSDIR/mx2_data/template/FeedView/feed.css
$PLUGINSDIR/mx2_data/template/FeedView/feed.js
.js
$PLUGINSDIR/mx2_data/template/FeedView/feed.xsl
.xml
$PLUGINSDIR/mx2_data/template/FeedView/images/feed.png
.png
$PLUGINSDIR/mx2_data/template/FeedView/images/go_top.png
.png
$PLUGINSDIR/mx2_data/template/History/images/add.png
.png
$PLUGINSDIR/mx2_data/template/History/images/arrow.png
.png
$PLUGINSDIR/mx2_data/template/History/images/calendar.png
.png
$PLUGINSDIR/mx2_data/template/History/images/delete.png
.png
$PLUGINSDIR/mx2_data/template/History/images/feed.png
.png
$PLUGINSDIR/mx2_data/template/History/images/keyword.png
.png
$PLUGINSDIR/mx2_data/template/History/images/logo.png
.png
$PLUGINSDIR/mx2_data/template/History/images/page.png
.png
$PLUGINSDIR/mx2_data/template/History/images/search.png
.png
$PLUGINSDIR/mx2_data/template/History/images/website.png
.png
$PLUGINSDIR/mx2_data/template/History/index.htm
.html
$PLUGINSDIR/mx2_data/template/History/maxHistory.css
$PLUGINSDIR/mx2_data/template/History/maxHistory.js
.js
$PLUGINSDIR/mx2_data/template/Options/css/arrow.png
.png
$PLUGINSDIR/mx2_data/template/Options/css/bg_sidebar.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/defcon_high.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/defcon_low.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/defcon_med.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_adhunter.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_advanced.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_download.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_fav.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_feed.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_filter.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_floatbutton.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_form.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_general.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_key.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_kwfw.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_mouse.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_nav.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_plugin.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_safety.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_sandbox.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_search.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_skin.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_startup.png
.png
$PLUGINSDIR/mx2_data/template/Options/images/page_tab.png
.png
$PLUGINSDIR/mx2_data/template/Options/index.htm
.html
$PLUGINSDIR/mx2_data/template/Options/maxOptions.config.js
.js
$PLUGINSDIR/mx2_data/template/Options/maxOptions.css
$PLUGINSDIR/mx2_data/template/Options/maxOptions.js
.js
$PLUGINSDIR/mx2_data/template/ResumeSession/images/logo.png
.png
$PLUGINSDIR/mx2_data/template/ResumeSession/index.htm
.html
$PLUGINSDIR/mx2_data/template/ResumeSession/maxResumeSession.css
$PLUGINSDIR/mx2_data/template/ResumeSession/maxResumeSession.js
.js
$PLUGINSDIR/mx2_data/template/_shared/css/base.css
$PLUGINSDIR/mx2_data/template/_shared/css/base/bg_btn.png
.png
$PLUGINSDIR/mx2_data/template/_shared/css/base/bg_btn_active.png
.png
$PLUGINSDIR/mx2_data/template/_shared/css/base/bg_btn_hover.png
.png
$PLUGINSDIR/mx2_data/template/_shared/css/base/bg_header.png
.png
$PLUGINSDIR/mx2_data/template/_shared/css/base/bg_input_btn.png
.png
$PLUGINSDIR/mx2_data/template/_shared/css/base/bg_input_btn_hover.png
.png
$PLUGINSDIR/mx2_data/template/_shared/css/base/bg_input_text.png
.png
$PLUGINSDIR/mx2_data/template/_shared/css/base/bg_input_text_hover.png
.png
$PLUGINSDIR/mx2_data/template/_shared/css/base/bg_shadow.png
.png
$PLUGINSDIR/mx2_data/template/_shared/favicon.ico
$PLUGINSDIR/mx2_data/template/_shared/images/btn_apply.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_autorun.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_autorun_checked.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_check.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_check_checked.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_close.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_down.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_hide_sidebar.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_left.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_radio.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_radio_checked.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_reset.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_right.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_show_sidebar.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/btn_up.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/direction_d.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/direction_l.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/direction_r.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/direction_u.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/key.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/link_out.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/mouse.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/mouse_both.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/mouse_left.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/mouse_mid.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/mouse_right.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/next.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/page.png
.png
$PLUGINSDIR/mx2_data/template/_shared/images/prev.png
.png
$PLUGINSDIR/mx2_data/template/_shared/js/func.js
.js
$PLUGINSDIR/mx2_data/template/_shared/js/maxAjaxManager.js
.js
$PLUGINSDIR/mx2_data/template/_shared/js/maxConfig.js
.js
$PLUGINSDIR/mx2_data/template/_shared/js/maxList.js
.js
$PLUGINSDIR/mx2_data/template/_shared/js/maxTable.js
.js
$PLUGINSDIR/mx2_data/template/_shared/js/maxXmlListParser.js
.js
$PLUGINSDIR/mx2_data/template/page/404/404.html
.html
$PLUGINSDIR/mx2_data/template/page/404/css/css.css
$PLUGINSDIR/mx2_data/template/page/404/images/blank.gif
.gif
$PLUGINSDIR/mx2_data/template/page/404/images/colFooter.gif
.gif
$PLUGINSDIR/mx2_data/template/page/404/images/expFooter.gif
.gif
$PLUGINSDIR/mx2_data/template/page/404/images/favicon.ico
$PLUGINSDIR/mx2_data/template/page/404/images/footerLogo.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/404/images/headBg.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/404/images/headBgRepeat.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/404/images/inputBg.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/404/images/listStyle.gif
.gif
$PLUGINSDIR/mx2_data/template/page/404/images/otherError.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/404/images/otherHeadBg.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/404/images/otherHeadBgRepeat.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/404/images/point.gif
.gif
$PLUGINSDIR/mx2_data/template/page/404/images/searchBg.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/404/js/error.js
.js
$PLUGINSDIR/mx2_data/template/page/PrivacyMode/images/blank.gif
.gif
$PLUGINSDIR/mx2_data/template/page/PrivacyMode/images/iepngfix.htc
.js
$PLUGINSDIR/mx2_data/template/page/PrivacyMode/images/innerBg.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/PrivacyMode/images/logo.png
.png
$PLUGINSDIR/mx2_data/template/page/PrivacyMode/images/pageBg.jpg
.jpg
$PLUGINSDIR/mx2_data/template/page/PrivacyMode/images/point.gif
.gif
$PLUGINSDIR/mx2_data/template/page/PrivacyMode/privacy.html
$PLUGINSDIR/mx2_data/template/page/PrivacyMode/privacy.js
.js
$PLUGINSDIR/mx2_data/template/page/unsafe/images/arrow.png
.png
$PLUGINSDIR/mx2_data/template/page/unsafe/images/arrowBG.png
.png
$PLUGINSDIR/mx2_data/template/page/unsafe/images/bodyBG.png
.png
$PLUGINSDIR/mx2_data/template/page/unsafe/images/conBg.png
.png
$PLUGINSDIR/mx2_data/template/page/unsafe/images/goBtn.png
.png
$PLUGINSDIR/mx2_data/template/page/unsafe/pg_unsafe.css
$PLUGINSDIR/mx2_data/template/page/unsafe/pg_unsafe.htm
.html
$PLUGINSDIR/mx2_data/template/page/unsafe/pg_unsafe.js
.js
$PLUGINSDIR/mx2_data/template/ui/pop_siteinfo/images/d.png
.png
$PLUGINSDIR/mx2_data/template/ui/pop_siteinfo/images/i.png
.png
$PLUGINSDIR/mx2_data/template/ui/pop_siteinfo/images/pb.png
.png
$PLUGINSDIR/mx2_data/template/ui/pop_siteinfo/images/pf.png
.png
$PLUGINSDIR/mx2_data/template/ui/pop_siteinfo/images/s.png
.png
$PLUGINSDIR/mx2_data/template/ui/pop_siteinfo/index.htm
$PLUGINSDIR/mx2_data/template/ui/pop_siteinfo/style.css

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 36KB

.rsrc Size: 53KB - Virtual size: 53KB

e03dbf1d9b2548717e2b645453b93825

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4Certificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

3f:21:af:bd:ae:1e:90:8c:fb:d5:fc:2e:79:b8:43:5e:3a:26:83:fcSigner

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

oleacc

winmm

advapi32

comctl32

shell32

wininet

msimg32

Exports

Exports

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 196KB - Virtual size: 195KB

.data Size: 152KB - Virtual size: 160KB

.rsrc Size: 48KB - Virtual size: 46KB

.reloc Size: 88KB - Virtual size: 85KB

58ebe63bde2e8d9e022f7f601830ac71

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

6d:02:99:22:7c:f0:27:e8:e1:2b:bb:7a:75:d2:98:8bCertificate

Extended Key Usages

Key Usages

66:9e:fd:ce:66:08:bf:19:23:90:9d:36:f2:12:9d:fa:7a:ac:c8:96Signer

Headers

File Characteristics

Imports

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 36KB

.rsrc
Size: 53KB - Virtual size: 53KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

3f:21:af:bd:ae:1e:90:8c:fb:d5:fc:2e:79:b8:43:5e:3a:26:83:fc
Signer

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 196KB - Virtual size: 195KB

.data
Size: 152KB - Virtual size: 160KB

.rsrc
Size: 48KB - Virtual size: 46KB

.reloc
Size: 88KB - Virtual size: 85KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

6d:02:99:22:7c:f0:27:e8:e1:2b:bb:7a:75:d2:98:8b
Certificate

66:9e:fd:ce:66:08:bf:19:23:90:9d:36:f2:12:9d:fa:7a:ac:c8:96
Signer

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 744B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 778B

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

6f:27:41:b6:af:4a:6c:58:eb:1a:da:61:3a:d9:5a:bc:b7:d6:74:36
Signer

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

10:98:81:60:86:21:3c:70:9e:83:59:4d:77:07:ea:d4
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

e6:9a:d9:82:9f:85:3f:70:21:17:92:32:c4:34:98:8f:31:c0:fb:2e
Signer