632493e000925f29c255af6c61073bcb_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

632493e000925f29c255af6c61073bcb_JaffaCakes118
Size

14.0MB
MD5

632493e000925f29c255af6c61073bcb
SHA1

32ed21cf675146b7876d8dbdd1a46c85a427b68f
SHA256

714ab6dbc0013d8ace4afd403a2b95706461fcacde96d4f834382bb936d3a70d
SHA512

61f6bf69c76c036d687c9244092a77290f041064dc04c1827b0bbae993cad920c25a0f39a2312cedbc680fa8ace625dfadaf9e4f4b7fe045f1756822033e3e09
SSDEEP

393216:DpkhnXpAq02BDEd38OsA9JLpycxA7C2xgen:DWnXpA8438hAZycxoCIvn

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/MediaInfo/MediaInfo.exe	upx

Unsigned PE 57 IoCs

Checks for missing Authenticode signature.

resource
632493e000925f29c255af6c61073bcb_JaffaCakes118
unpack001/$PLUGINSDIR/ExecDos.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$TEMPImg/Installer.exe
unpack002/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/CABSetup.dll
unpack003/$PLUGINSDIR/InetLoad.dll
unpack003/$PLUGINSDIR/InstallOptions.dll
unpack003/$PLUGINSDIR/ScrollLicense.dll
unpack003/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/UserInfo.dll
unpack004/Helper.dll
unpack004/ImageConversion.dll
unpack004/RSSReader_plugin.dll
unpack004/RadioPlugin.dll
unpack004/SearchComponent.dll
unpack004/Toolbar.dll
unpack004/TroubleShooter.exe
unpack004/bookmarksplugin.dll
unpack004/emailchecker_plugin.dll
unpack004/gedit.exe
unpack004/msgboxplugin.dll
unpack004/weatherplugin.dll
unpack003/$PLUGINSDIR/gplunger.dll
unpack003/$PLUGINSDIR/nsExec.dll
unpack003/$PLUGINSDIR/nsisFirewall.dll
unpack003/$PLUGINSDIR/textreplace.dll
unpack003/$PLUGINSDIR/unicode.dll
unpack002/$TEMPImg/VerControl.exe
unpack002/$TEMPImg/askToolbarInstaller-1.9.1.0.exe
unpack005/$PLUGINSDIR/ExecDos.dll
unpack005/$PLUGINSDIR/System.dll
unpack005/Uninst.exe
unpack002/$TEMPImg/chk.exe
unpack002/Uninst.exe
unpack006/$PLUGINSDIR/Processes.dll
unpack001/DGMPGDec/DGDecode.dll
unpack001/DGMPGDec/DGIndex.exe
unpack001/DGMPGDec/DGVfapi.vfp
unpack001/Engine/MediaCellEngine.exe
unpack001/Engine/MediaCellInfo.exe
unpack001/MediaCelliPhoneConverter.exe
unpack001/MediaInfo/MediaInfo.exe
unpack001/Uninst.exe
unpack008/$PLUGINSDIR/Processes.dll
unpack001/Uninstal.exe
unpack001/Vobsub/VSFilter.dll
unpack001/Vobsub/vobsub.dll
unpack001/apbarSp.infima.exe
unpack001/ask_already_installed.exe
unpack001/register_ask.exe
unpack001/register_no_ask.exe
unpack001/sseexec.dat
unpack001/success.exe
unpack001/tools/register.exe
unpack001/tools/register_y.exe

NSIS installer 13 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/$TEMPImg/Installer.exe	nsis_installer_1
static1/unpack001/$TEMPImg/Installer.exe	nsis_installer_2
static1/unpack002/$TEMPImg/PazeraToolbar.exe	nsis_installer_1
static1/unpack002/$TEMPImg/askToolbarInstaller-1.9.1.0.exe	nsis_installer_1
static1/unpack002/$TEMPImg/askToolbarInstaller-1.9.1.0.exe	nsis_installer_2
static1/unpack005/Uninst.exe	nsis_installer_1
static1/unpack005/Uninst.exe	nsis_installer_2
static1/unpack002/Uninst.exe	nsis_installer_1
static1/unpack002/Uninst.exe	nsis_installer_2
static1/unpack001/Uninst.exe	nsis_installer_1
static1/unpack001/Uninst.exe	nsis_installer_2

Files

632493e000925f29c255af6c61073bcb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ExecDos.dll
.dll windows:4 windows x86 arch:x86

2dfc6a992d004b736e85c64219a88b4a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
TerminateProcess
Sleep
lstrcatA
lstrcmpiA
ReadFile
GetExitCodeProcess
PeekNamedPipe
CreateFileA
FlushFileBuffers
WriteFile
lstrlenA
CloseHandle
CreateProcessA
DuplicateHandle
GetCurrentProcess
CreatePipe
GlobalAlloc
lstrcpynA
GetExitCodeThread
WaitForSingleObject
lstrcpyA
CreateThread

user32

wsprintfA
GetClassNameA
GetDlgItem
FindWindowExA
SendMessageA

Exports

Exports

exec
isdone
wait

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/iOClean.ini
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-wizard.bmp
$TEMPImg/Installer.exe
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$TEMPImg/FVM.exe
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

59:ab:9b:2e:e6:79:14:b7:df:4c:47:95:40:de:c5:61
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/01/2007, 00:00

Not After

23/03/2010, 23:59

Subject

CN=Conduit Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Conduit Ltd.,ST=Israel,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$TEMPImg/PazeraToolbar.exe
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Code Sign

3d:f8:af:7b:51:bb:b2:8e:d5:80:38:2d:fa:a1:6e:37
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

27/04/2009, 00:00

Not After

26/04/2012, 23:59

Subject

CN=FreeCause\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=FreeCause\, Inc.,L=Boston,ST=Massachusetts,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/CABSetup.dll
.dll windows:4 windows x86 arch:x86

5070fa13a62547a5beae58004a204cbb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
lstrcpyA
lstrcpynA
GlobalAlloc
HeapFree
lstrcatA
lstrlenA
lstrcmpA
HeapAlloc
GetProcessHeap
CloseHandle
ReleaseMutex
WaitForSingleObject
OpenMutexA
WriteFile
GetFileAttributesA
GetLastError
ReadFile
CreateFileA
lstrcmpiA
GetNumberFormatA
GetLocaleInfoA
CreateDirectoryA
GetTickCount
Sleep
GetExitCodeProcess
CreateProcessA
FindClose
FindNextFileA
FindFirstFileA
CreateMutexA

user32

CreateWindowExA
MapWindowPoints
GetWindowRect
GetDlgItem
CallWindowProcA
wvsprintfA
SetDlgItemTextA
GetDlgItemTextA
GetWindowLongA
wsprintfA
FindWindowExA
SetForegroundWindow
MoveWindow
FindWindowA
GetDesktopWindow
DestroyWindow
EnableWindow
SetWindowLongA
ShowWindow
SendMessageA
UpdateWindow

setupapi

SetupIterateCabinetA
SetupPromptForDiskA

Exports

Exports

BuildSetupFiles
DataSetSize
Extract

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InetLoad.dll
.dll windows:4 windows x86 arch:x86

24a4a671f5cc294ce3543d18a1e873cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

strchr
_adjust_fdiv
malloc
_initterm
free
memset
strstr
strtol
strncmp
strtoul
time
strrchr

kernel32

GlobalFree
lstrcpynA
CreateThread
WaitForSingleObject
TerminateThread
GetModuleHandleA
lstrcpyA
GlobalAlloc
LoadLibraryA
GetProcAddress
lstrcmpiA
CreateFileA
lstrcmpA
lstrlenA
MulDiv
WriteFile
lstrcatA
GetLastError
DeleteFileA
CloseHandle
SleepEx

user32

GetDlgItem
SendMessageA
SetWindowTextA
wsprintfA
GetWindowTextA
RegisterWindowMessageA
CallWindowProcA
PostMessageA
DestroyWindow
EnableWindow
GetWindowLongA
CreateWindowExA
GetWindowRect
GetClientRect
ShowWindow
IsWindowVisible
GetFocus
MessageBoxA
SendDlgItemMessageA
SetDlgItemTextA
SetTimer
LoadIconA
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
IsWindow
CreateDialogParamA
FindWindowExA
RedrawWindow
SetWindowLongA

wininet

InternetErrorDlg
InternetSetFilePointer
HttpQueryInfoA
InternetQueryOptionA
HttpSendRequestA
HttpAddRequestHeadersA
InternetSetOptionA
HttpOpenRequestA
FtpOpenFileA
InternetGetLastResponseInfoA
InternetConnectA
InternetCrackUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle

comctl32

ord17

Exports

Exports

load

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

57354bdeea3dfae6e948101add87501a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
GetPrivateProfileIntA
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
MultiByteToWideChar
GlobalAlloc

user32

GetDlgCtrlID
GetClientRect
SetWindowRgn
MapWindowPoints
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadIconA

gdi32

SetTextColor
GetObjectA
SelectObject
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
CreateCompatibleDC

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ScrollLicense.dll
.dll windows:4 windows x86 arch:x86

674bbf1e72dbf6f2664d8aea288261e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiA
lstrlenW
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameA
GetLastError
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
IsDBCSLeadByte
LCMapStringW
LCMapStringA
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
GetOEMCP
GetCPInfo
GetStringTypeW
GetStringTypeA
InterlockedDecrement
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
SetUnhandledExceptionFilter
TerminateProcess
GetProcAddress
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
IsBadWritePtr
InterlockedIncrement
lstrlenA
CompareStringA
HeapAlloc
GlobalFree
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GlobalAlloc
lstrcpynA
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
GetCommandLineA
GetCurrentThreadId
HeapReAlloc
VirtualQuery
GetSystemInfo
lstrcpyA
GetSystemTimeAsFileTime
RtlUnwind
VirtualProtect
VirtualAlloc

user32

SetWindowLongA
DrawTextA
SendMessageA
UpdateWindow
IsWindowEnabled
GetSysColor
GetFocus
DrawFocusRect
FillRect
EndPaint
BeginPaint
GetDlgCtrlID
GetCursorPos
ScreenToClient
SetCursor
DestroyWindow
InvalidateRect
PtInRect
SetFocus
SetCapture
GetWindowLongA
ReleaseCapture
GetCapture
FindWindowExA
GetDlgItem
CallWindowProcA
SetRectEmpty
GetClassNameA
LoadCursorA
OffsetRect
ReleaseDC
GetDC
DefWindowProcA
CharNextA
SetWindowPos
IsWindow
GetParent
GetClientRect
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
CreateWindowExA

gdi32

SetBkMode
SetTextColor
GetStockObject
DeleteDC
DeleteObject
SelectObject
GetObjectA
CreateFontIndirectA

advapi32

RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA

shell32

ShellExecuteA

ole32

CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc

oleaut32

VarUI4FromStr

comctl32

_TrackMouseEvent

Exports

Exports

Set
Unload

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

4ec328f99bdd944fc98d8a5cf11f7a62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/UserInfo.dll
.dll windows:4 windows x86 arch:x86

48cfa0ea7e353e4a7dd23572da8374ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersion
GetCurrentThread
GetCurrentProcess
GetLastError
GlobalFree
CloseHandle
lstrcpynA
GlobalAlloc

advapi32

OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
GetUserNameA
OpenThreadToken

Exports

Exports

GetAccountType
GetName

Sections

.text
Size: 1024B - Virtual size: 573B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 45B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/dca.ini
$PLUGINSDIR/frtb_static_files.cab
.cab
Helper.dll
.dll regsvr32 windows:5 windows x86 arch:x86

34a3df05d2cc08ee3da4457ce628c357

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\Helper.pdb

Imports

shlwapi

PathStripPathW
PathRemoveFileSpecW
UrlIsW
PathFileExistsW
PathAppendW

rpcrt4

UuidFromStringA

wininet

HttpQueryInfoA
HttpSendRequestW
HttpAddRequestHeadersW
InternetSetStatusCallbackW
HttpOpenRequestA
InternetConnectW
InternetOpenW
InternetCloseHandle
InternetCrackUrlW
InternetReadFile

urlmon

ObtainUserAgentString
IsValidURL

url

InetIsOffline

kernel32

GetStringTypeW
GetStringTypeA
LCMapStringA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
InitializeCriticalSectionAndSpinCount
CreateThread
WaitForSingleObject
GetExitCodeThread
TerminateThread
GetVersionExW
LoadLibraryW
GetProcAddress
InterlockedDecrement
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
ReleaseMutex
SetEvent
SwitchToThread
CreateEventW
CloseHandle
DeleteFileW
MoveFileW
lstrlenW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
SetLastError
RaiseException
GetVersion
FreeLibrary
lstrlenA
MultiByteToWideChar
GetModuleFileNameW
GetFileSize
ReadFile
CreateFileW
CreateMutexA
GetModuleHandleW
lstrcmpiW
GetLastError
LoadLibraryExW
GetLocaleInfoA
DisableThreadLibraryCalls
SetThreadPriority
ResumeThread
CreateSemaphoreW
ReleaseSemaphore
WriteFile
Sleep
IsBadReadPtr
GetTimeZoneInformation
GetModuleHandleA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
HeapCreate
GetStartupInfoA
GetFileType
SetEndOfFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
VirtualQuery
CompareStringA
CompareStringW
GetStdHandle
SetHandleCount
SetFilePointer
ExitProcess
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RtlUnwind
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GlobalAddAtomA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
HeapSize
HeapReAlloc
HeapAlloc
SetEnvironmentVariableA
InterlockedIncrement
HeapFree
GetProcessHeap
HeapDestroy

user32

GetWindowLongW
SetWindowLongW
DefWindowProcW
LoadCursorW
GetClassInfoExW
RegisterClassExW
SendMessageTimeoutW
CreateWindowExW
SendMessageW
PostMessageW
KillTimer
SetTimer
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
CharNextW
CallWindowProcW
FindWindowW
UnregisterClassA
IsWindow
MessageBoxW

advapi32

RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
GetUserNameW

shell32

DoEnvironmentSubstW

ole32

CoInitialize
CoUninitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance

oleaut32

VariantCopy
VariantInit
VariantClear
VariantChangeType
LoadRegTypeLi
UnRegisterTypeLi
LoadTypeLi
SysStringLen
RegisterTypeLi
VarUI4FromStr
SysAllocString
SysFreeString

dnsapi

DnsQuery_W

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetDownloadManager
GetHelperObject
IsUnicode
StaticCallJS

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARED
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ImageConversion.dll
.dll windows:5 windows x86 arch:x86

44781c6895de7935eaa213d8ae356e35

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetCurrentThreadId
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
SetStdHandle
GetSystemTimeAsFileTime
CloseHandle
CreateFileA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
MultiByteToWideChar
ReadFile
GetModuleHandleA
SetFilePointer
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetEndOfFile
GetProcessHeap
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
RaiseException

Exports

Exports

ConvertToBMP
UnpackGzip

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RSSReader_plugin.dll
.dll windows:5 windows x86 arch:x86

a654a29e2f99af5247506fac6ee4864b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\RSSReader_plugin.pdb

Imports

wininet

InternetCrackUrlW

shlwapi

PathAppendW
PathFileExistsW
PathRemoveFileSpecW

urlmon

URLDownloadToCacheFileW

kernel32

LoadLibraryExW
GetModuleFileNameW
InterlockedIncrement
LoadLibraryW
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
Sleep
OutputDebugStringW
SetLastError
lstrcpyW
CompareStringW
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetModuleHandleA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetLastError
LCMapStringA
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetTimeZoneInformation
HeapCreate
ExitProcess
GetModuleFileNameA
GetStdHandle
WriteFile
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RtlUnwind
GetCommandLineA
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GlobalAddAtomA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
HeapSize
HeapReAlloc
HeapAlloc
HeapDestroy
GetProcessHeap
HeapFree
lstrlenA
RaiseException
lstrcmpiW
FreeLibrary
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
CloseHandle
ReadFile
GetFileSize
CreateFileW
VirtualQuery
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
lstrlenW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
CompareStringA
SetEnvironmentVariableA
SetHandleCount

user32

FillRect
OffsetRect
DrawTextW
ReleaseDC
GetDC
GetWindowTextLengthW
CreateWindowExW
LoadCursorW
GetClassNameW
ScreenToClient
GetCapture
SetCursor
PtInRect
InvalidateRect
EndPaint
BeginPaint
DestroyIcon
SetRectEmpty
DestroyWindow
CreateDialogParamW
EndDialog
DialogBoxParamW
GetActiveWindow
SetCapture
UpdateWindow
IsWindowEnabled
CheckRadioButton
IsDlgButtonChecked
DispatchMessageW
TranslateMessage
PeekMessageW
GetCursorPos
IsWindow
CheckDlgButton
GetDlgCtrlID
SendMessageW
CallWindowProcW
DefWindowProcW
SetWindowLongW
SetActiveWindow
GetSysColor
GetDlgItemTextW
SetFocus
EnumChildWindows
GetWindowTextW
SetWindowTextW
GetWindow
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
GetClientRect
MapWindowPoints
SetWindowPos
MessageBoxW
GetDlgItem
EnableWindow
SetDlgItemTextW
CharNextW
SetTimer
PostMessageW
KillTimer
UnregisterClassA
GetFocus
DrawFocusRect
FindWindowW
ReleaseCapture

gdi32

GetObjectW
GetStockObject
CreateSolidBrush
SetBkMode
DeleteObject
SetTextColor
CreateFontIndirectW
SelectObject

advapi32

RegEnumKeyExW
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegCloseKey

ole32

CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance

oleaut32

VariantInit
VariantClear
SysStringLen
SysAllocStringByteLen
VarUI4FromStr
VarBstrCmp
SysAllocString
SysFreeString

comctl32

ImageList_DragMove
ImageList_EndDrag
ImageList_DragLeave
ImageList_Create
ImageList_Destroy
ImageList_LoadImageW
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_DragEnter
_TrackMouseEvent
ImageList_BeginDrag

Exports

Exports

GetDownloadManager
IsUnicode
PlugCreate
PlugInit
PlugInvoke
PlugTerm

Sections

.text
Size: 251KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RadioPlugin.dll
.dll windows:5 windows x86 arch:x86

8e37a09dc6394fe8978f45de107c05a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\RadioPlugin.pdb

Imports

urlmon

URLDownloadToFileW
URLDownloadToCacheFileW
IsValidURL

wininet

InternetCloseHandle
InternetOpenA
InternetConnectW
HttpOpenRequestW
HttpSendRequestA
HttpQueryInfoW
InternetCrackUrlW

kernel32

GetModuleFileNameW
OutputDebugStringA
InterlockedDecrement
InterlockedIncrement
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
lstrcmpW
Sleep
GetTickCount
lstrlenA
MultiByteToWideChar
FreeLibrary
LoadLibraryExW
lstrcmpiW
GlobalFree
WideCharToMultiByte
GlobalReAlloc
LoadLibraryA
GetFullPathNameW
FindFirstFileW
GetVersionExW
lstrcpynW
CompareStringW
FindClose
FindNextFileW
lstrcpyW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
LoadLibraryW
GetCPInfo
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
HeapCreate
RtlUnwind
GetCommandLineA
CreateThread
ResumeThread
CloseHandle
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GlobalAddAtomA
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetLastError
GetFileAttributesW
GetVersion
GetProcAddress
GetModuleHandleW
GetModuleHandleA
SetLastError
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
GetTimeZoneInformation
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
CompareStringA
SetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetACP
VirtualQuery

user32

GetAncestor
SetActiveWindow
SetRect
DispatchMessageW
TranslateMessage
GetWindowThreadProcessId
SetWindowsHookExW
CallNextHookEx
DrawTextW
GetMessageW
UnhookWindowsHookEx
OffsetRect
GetWindowRect
MessageBoxW
ShowWindow
WindowFromPoint
GetCursorPos
GetCapture
PostMessageW
FindWindowW
LoadImageW
UpdateWindow
EnableWindow
SetWindowRgn
SetParent
KillTimer
DestroyIcon
CopyRect
GetMonitorInfoW
MapWindowPoints
SetDlgItemTextW
GetDlgItemTextW
CheckRadioButton
GetActiveWindow
CreateDialogParamW
IsDlgButtonChecked
EnumChildWindows
EndDialog
SystemParametersInfoW
PtInRect
AdjustWindowRectEx
DrawFocusRect
GetSystemMetrics
InflateRect
DrawEdge
IsWindowEnabled
SetTimer
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
BeginPaint
EndPaint
IsChild
GetFocus
GetWindow
IsWindow
GetClassNameW
GetSysColor
CharNextW
SetWindowPos
RedrawWindow
GetClassInfoExW
CreateWindowExW
DestroyWindow
CreateAcceleratorTableW
ClientToScreen
GetParent
ScreenToClient
MoveWindow
SetCapture
ReleaseCapture
FillRect
GetClientRect
InvalidateRgn
InvalidateRect
GetDC
ReleaseDC
GetDesktopWindow
DestroyAcceleratorTable
LoadCursorW
RegisterClassExW
GetDlgItem
GetDlgCtrlID
SendMessageW
CallWindowProcW
DefWindowProcW
GetWindowLongW
SetWindowLongW
SetFocus
UnregisterClassA
SetCursor
DialogBoxParamW
SetRectEmpty
MonitorFromWindow
GetMenu

gdi32

CreateDIBSection
ExtCreateRegion
CombineRgn
StretchBlt
CreateRectRgnIndirect
GetTextExtentPoint32W
SetTextColor
SetBkMode
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
GetStockObject
GetObjectW
CreateFontIndirectW
DeleteObject
GetDeviceCaps

advapi32

RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
RegCreateKeyExW
RegQueryValueExW

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc

ole32

CLSIDFromString
CLSIDFromProgID
CoGetClassObject
CoCreateInstance
OleInitialize
OleLockRunning
StringFromGUID2
CoTaskMemAlloc
OleUninitialize
CoUnmarshalInterface
CoTaskMemRealloc
CoTaskMemFree
CoMarshalInterface
CoInitialize
CoUninitialize
CreateStreamOnHGlobal

oleaut32

VariantInit
VarBstrCmp
VarUI4FromStr
DispCallFunc
SysAllocStringLen
VariantClear
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
SysAllocString
SysFreeString
SysStringLen

shlwapi

PathIsDirectoryW
PathFileExistsW
PathAppendW
PathStripPathW
UrlEscapeW
PathRemoveFileSpecW
PathFindExtensionW
PathRemoveExtensionW

Exports

Exports

IsUnicode
LaunchRadioServer
PlugCreate
PlugInit
PlugInvoke
PlugTerm

Sections

.text
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SearchComponent.dll
.dll windows:5 windows x86 arch:x86

6299116dafc34c4ef19d19e43b8d6694

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\SearchComponent.pdb

Imports

urlmon

IsValidURL

kernel32

WaitForSingleObject
ReleaseMutex
CloseHandle
SetEvent
CreateEventW
CreateMutexW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
SetLastError
RaiseException
FreeLibrary
lstrlenW
GetProcAddress
GetModuleHandleW
lstrcmpiW
GetLastError
LoadLibraryExW
InterlockedDecrement
InterlockedIncrement
CreateFileW
GetFileSize
ReadFile
CompareStringW
CompareStringA
CreateFileA
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
MultiByteToWideChar
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
SetEnvironmentVariableA
GetModuleFileNameW
HeapSize
GetStringTypeA
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetTimeZoneInformation
GetModuleHandleA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
lstrlenA
WideCharToMultiByte
HeapFree
GetProcessHeap
HeapDestroy
HeapAlloc
HeapReAlloc
VirtualQuery
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
GlobalAddAtomA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
ResumeThread
CreateThread
GetCommandLineA
RtlUnwind
GetSystemTimeAsFileTime
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapCreate
Sleep
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW

user32

CharNextW
CreateWindowExW
GetWindowLongW
SetWindowLongW
DefWindowProcW
LoadCursorW
GetClassInfoExW
RegisterClassExW
SendMessageW
SendMessageTimeoutW
SetTimer
KillTimer
DispatchMessageW
GetMessageW
CallWindowProcW
UnregisterClassA
IsWindow
FindWindowW

advapi32

RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW

ole32

CoInitialize
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoTaskMemRealloc

oleaut32

VariantClear
VarUI4FromStr
SysFreeString
SysAllocString

shlwapi

UrlEscapeW

Exports

Exports

IsUnicode
PlugCreate
PlugInit
PlugInvoke
PlugTerm

Sections

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARED
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Toolbar.dll
.dll regsvr32 windows:5 windows x86 arch:x86

be7add6560b15c5bc3f7a0b1f583a08e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\Toolbar.pdb

Imports

urlmon

ObtainUserAgentString
IsValidURL
URLDownloadToFileW

wininet

InternetConnectA
InternetOpenA
InternetCrackUrlA
InternetCrackUrlW
InternetGetConnectedState
InternetSetCookieW
InternetGetCookieW
FindCloseUrlCache
FindNextUrlCacheEntryW
InternetQueryOptionW
FindFirstUrlCacheEntryW
InternetCloseHandle
InternetErrorDlg
HttpQueryInfoA
HttpSendRequestW
HttpOpenRequestA
InternetConnectW
InternetOpenW
InternetSetOptionW
HttpAddRequestHeadersA
DeleteUrlCacheEntryW
InternetReadFile

shlwapi

PathIsRelativeW
PathFindFileNameW
UrlUnescapeW
SHDeleteKeyW
SHCopyKeyW
PathIsDirectoryW
PathStripPathW
UrlIsW
PathRemoveFileSpecW
PathFileExistsW
PathAppendW

rpcrt4

UuidFromStringW
UuidToStringW
UuidCreate
RpcStringFreeW

setupapi

SetupIterateCabinetW

dbghelp

SymGetSymFromAddr
SymCleanup
SymLoadModule
SymInitialize
SymSetOptions
SymFunctionTableAccess
StackWalk
SymGetLineFromAddr
SymGetModuleBase
SymGetOptions

winmm

PlaySoundW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

kernel32

RtlUnwind
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetTimeZoneInformation
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
WideCharToMultiByte
lstrlenW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
lstrcmpiW
LoadLibraryW
SetLastError
GetModuleFileNameW
OutputDebugStringA
LoadLibraryExW
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
Sleep
lstrcpyW
HeapFree
GetProcessHeap
GlobalAlloc
lstrcmpW
MulDiv
GlobalUnlock
GlobalLock
lstrlenA
DeleteFileW
CopyFileW
GlobalFree
GlobalHandle
GetCurrentProcessId
LocalFree
FindNextFileW
FindClose
WaitForSingleObject
IsDebuggerPresent
CreateMutexA
CloseHandle
GetFullPathNameW
FindFirstFileW
GetFileAttributesExW
GetVersionExW
GetCurrentThread
CreateDirectoryW
RemoveDirectoryW
MoveFileW
CreateMutexW
WriteFile
CreateFileW
LoadLibraryA
DisableThreadLibraryCalls
lstrcatW
GlobalDeleteAtom
GlobalAddAtomW
GlobalGetAtomNameW
ResumeThread
SetThreadPriority
CreateThread
LocalAlloc
GetFileTime
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetEvent
CreateEventW
OutputDebugStringW
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
Module32NextW
Module32FirstW
TerminateProcess
GetShortPathNameW
GlobalGetAtomNameA
GetTickCount
ReadFile
GetFileSize
QueueUserWorkItem
SetUnhandledExceptionFilter
HeapAlloc
IsBadWritePtr
ReadProcessMemory
lstrcpynW
IsBadCodePtr
IsBadReadPtr
WinExec
TerminateThread
OpenThread
SetFileAttributesW
CreateProcessW
MoveFileExW
DebugBreak
SetCurrentDirectoryW
UnhandledExceptionFilter
GlobalAddAtomA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
InterlockedExchange
HeapDestroy
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
VirtualQuery
ExitThread
GetCommandLineA
HeapCreate
ExitProcess
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
LCMapStringA
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc
HeapSize
ReleaseMutex
InterlockedCompareExchange

user32

EnableWindow
CheckDlgButton
CheckRadioButton
IsDlgButtonChecked
SetParent
EnumWindows
SetRect
SubtractRect
GetLayeredWindowAttributes
AnimateWindow
SendMessageTimeoutW
SetLastErrorEx
DialogBoxParamW
wsprintfW
GetActiveWindow
LoadBitmapW
SetActiveWindow
AppendMenuW
ValidateRect
GetWindowRgnBox
RemoveMenu
GetMenuItemCount
CreatePopupMenu
IsMenu
LoadCursorFromFileW
DestroyCursor
UpdateWindow
LoadImageW
OffsetRect
FrameRect
GetWindowDC
CopyRect
MapWindowPoints
GetMessagePos
GetSystemMetrics
GetIconInfo
SetCursor
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
GetWindowThreadProcessId
MessageBoxW
GetKeyState
CreateAcceleratorTableW
GetFocus
DestroyAcceleratorTable
GetDesktopWindow
BeginPaint
EndPaint
DrawTextW
ReleaseCapture
GetDlgItem
IsChild
SetCapture
InvalidateRgn
ScreenToClient
MoveWindow
GetSysColor
DialogBoxIndirectParamW
IsRectEmpty
CharUpperBuffW
SetWindowsHookExW
SetDlgItemTextW
SetWindowContextHelpId
MapDialogRect
EndDialog
GetMessageW
EnumChildWindows
CallNextHookEx
UnhookWindowsHookEx
SetLayeredWindowAttributes
PeekMessageW
TranslateMessage
UpdateLayeredWindow
GetAncestor
ClientToScreen
EnumThreadWindows
GetParent
GetClassNameW
PostMessageW
CreateWindowExW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
DefWindowProcW
LoadCursorW
IsWindow
GetWindow
SetFocus
KillTimer
SetTimer
RedrawWindow
IsWindowVisible
ShowWindow
InvalidateRect
ReleaseDC
GetDC
GetClientRect
GetWindowRect
SetWindowPos
SendMessageW
GetWindowLongW
SetWindowLongW
DestroyWindow
CharLowerBuffW
CharNextW
CreateDialogParamW
MonitorFromWindow
GetMonitorInfoW
SystemParametersInfoW
AdjustWindowRectEx
GetDlgCtrlID
IsWindowEnabled
GetMenu
PtInRect
GetMenuItemInfoW
GetCapture
GetAsyncKeyState
TrackPopupMenu
GetCursorPos
DestroyMenu
DrawEdge
DestroyIcon
FillRect
SetWindowRgn
UnregisterClassA
FindWindowW
DispatchMessageW

gdi32

SetBkMode
SelectObject
DeleteObject
GetTextExtentPointW
MoveToEx
LineTo
CreateRectRgnIndirect
RestoreDC
SaveDC
CombineRgn
GetPixel
TextOutW
CreateBrushIndirect
StretchBlt
SetBkColor
SetTextColor
SetViewportOrgEx
CreatePatternBrush
GetTextMetricsW
CreateRectRgn
SelectClipRgn
CreateSolidBrush
CreatePen
GetObjectW
ExcludeClipRect
CreateFontIndirectW
ExtTextOutW
DeleteDC
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
GetDeviceCaps
CreateDIBSection
CreateFontW
GetTextExtentPoint32W

shell32

SHFileOperationW
ShellExecuteW
DragQueryFileW
DoEnvironmentSubstW

ole32

OleDraw
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
StringFromGUID2
OleLockRunning
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
CoCreateGuid
OleInitialize
OleUninitialize
CoInitialize
ReleaseStgMedium
CoUninitialize
RegisterDragDrop

oleaut32

SysStringLen
SysFreeString
VarUI4FromStr
LoadRegTypeLi
LoadTypeLi
VarBstrCmp
VariantInit
VariantClear
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
VariantCopy
VariantChangeType
OleCreateFontIndirect
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
CreateDispTypeInfo
DispCallFunc
DispGetIDsOfNames
DispInvoke
SafeArrayDestroy
SafeArrayCreateVector
UnRegisterTypeLi
RegisterTypeLi
VarBstrCat

Exports

Exports

AttachProxyInstance
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
FixTypeLib
TBCOM_GetComponent
ToolbarUpdateProc
raw_CheckRedirection
raw_IsWellFormedXML
raw_ParseIndependentVars
raw_ReportError

Sections

.text
Size: 957KB - Virtual size: 956KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 313KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHARED
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TroubleShooter.exe
.exe windows:5 windows x86 arch:x86

7e560e1cf79aa015363d94a640ecdbbb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetProcAddress
lstrlenW
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetStartupInfoW
GetLastError
HeapFree
HeapAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

user32

MessageBoxW

advapi32

RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegCreateKeyW

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
aboutTabs.7.js
.js
aboutTabs.8.js
.js
audio.bmp
banner_container.html
.html .js polyglot
blockcursor.cur
blocksound.wav
bookmark_off.bmp
bookmark_on.bmp
bookmarksplugin.dll
.dll windows:5 windows x86 arch:x86

e563b5e0ac42ca459ba9f51cfd361743

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\bookmarksplugin.pdb

Imports

kernel32

GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
LoadLibraryW
lstrlenA
FindClose
SetLastError
GetFullPathNameW
FindFirstFileW
lstrcpyW
FindNextFileW
GetPrivateProfileStringW
GetCurrentProcessId
CreateMutexW
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
LCMapStringA
InterlockedIncrement
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetTimeZoneInformation
GetModuleHandleA
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
CloseHandle
GetConsoleMode
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
LoadLibraryExW
MultiByteToWideChar
GetLastError
EnterCriticalSection
RaiseException
LeaveCriticalSection
GetConsoleCP
WideCharToMultiByte
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ExitProcess
Sleep
HeapCreate
TlsFree
TlsSetValue
VirtualQuery
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
lstrcmpiW
GetModuleHandleW
GetProcAddress
lstrlenW
FreeLibrary
FindResourceExW
FindResourceW
LoadResource
LockResource
SetFilePointer
SizeofResource
HeapFree
GetProcessHeap
HeapDestroy
HeapAlloc
HeapReAlloc
HeapSize
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
GlobalAddAtomA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
RtlUnwind
GetSystemTimeAsFileTime
WriteFile

user32

IsDlgButtonChecked
CheckDlgButton
ReleaseCapture
UpdateWindow
ShowCursor
SetCapture
SetFocus
GetCursorPos
CallWindowProcW
DefWindowProcW
SendDlgItemMessageW
DestroyIcon
EnableWindow
FindWindowW
ShowWindow
LoadImageW
EndDialog
GetWindowTextLengthW
GetWindow
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
GetClientRect
MapWindowPoints
SetWindowPos
GetDlgItem
SetDlgItemTextW
EnumChildWindows
GetWindowTextW
SetWindowTextW
SetTimer
KillTimer
SetWindowLongW
DialogBoxParamW
PostMessageW
CharNextW
UnregisterClassA
IsWindow
SendMessageW

advapi32

RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegEnumValueW
RegDeleteKeyW

shell32

SHGetSpecialFolderPathW

ole32

CoTaskMemAlloc
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree

oleaut32

SysAllocString
VariantClear
SysStringLen
SysFreeString
VarUI4FromStr

shlwapi

PathRemoveFileSpecW
PathAppendW

comctl32

ImageList_Create
ImageList_LoadImageW
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Destroy
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_EndDrag

Exports

Exports

??4Cbookmarksplugin@@QAEAAV0@ABV0@@Z
IsUnicode
PlugCreate
PlugInit
PlugInvoke
PlugTerm

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bubble_permissions.html
build
caching_banner.html
.html .js polyglot
chevron.bmp
component.xsl
efolder.bmp
email.bmp
email2.bmp
emailchecker_plugin.dll
.dll windows:5 windows x86 arch:x86

12417e76af468159503b8e5ed44b08c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\emailchecker_plugin.pdb

Imports

wsock32

closesocket
send
recv
connect
inet_ntoa
WSACleanup
htons
gethostbyname
socket
WSAStartup

wininet

InternetGetCookieA
InternetReadFile
HttpQueryInfoA
HttpSendRequestW
HttpAddRequestHeadersA
InternetSetOptionW
InternetQueryOptionW
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetCrackUrlA
InternetCloseHandle
InternetSetCookieW

kernel32

FindResourceW
FindResourceExW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
lstrlenW
WideCharToMultiByte
GetLastError
lstrlenA
MultiByteToWideChar
InterlockedDecrement
GetProcAddress
LoadLibraryW
GetModuleFileNameW
FreeLibrary
GetModuleHandleW
lstrcmpiW
LoadLibraryExW
InterlockedIncrement
CreateEventW
CreateThread
SetThreadPriority
ResumeThread
WaitForSingleObject
SetEvent
CloseHandle
SetLastError
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
lstrcmpW
TerminateThread
ResetEvent
Sleep
CreateMutexW
ReleaseMutex
GetThreadPriority
GetCurrentThread
GetStringTypeW
GetStringTypeA
LCMapStringA
SetFilePointer
GetLocaleInfoA
GetModuleHandleA
GetTimeZoneInformation
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
LoadResource
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSectionAndSpinCount
GetStartupInfoA
SetHandleCount
GetConsoleMode
GetConsoleCP
GetFileType
SetStdHandle
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
WriteFile
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RtlUnwind
GetCommandLineA
VirtualQuery
GetSystemInfo
VirtualProtect
ExitProcess
ExitThread
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
InterlockedCompareExchange
GetProcessHeap
HeapFree
GlobalAddAtomA
LockResource
SizeofResource
SetEnvironmentVariableA
CompareStringW
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
GetConsoleOutputCP
WriteConsoleA
WriteConsoleW
FlushFileBuffers
ReadFile
CreateFileA
CompareStringA
GetEnvironmentStringsW

user32

SetTimer
PostMessageW
MsgWaitForMultipleObjects
KillTimer
GetParent
DialogBoxParamW
IsDlgButtonChecked
CheckDlgButton
EnableWindow
GetActiveWindow
SendMessageW
GetClientRect
GetDlgItem
FindWindowW
UnregisterClassA
SetDlgItemTextW
SetWindowLongW
GetFocus
CharNextW
GetWindowLongW
DefWindowProcW
CallWindowProcW
PostThreadMessageW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
RegisterClassExW
LoadCursorW
DestroyAcceleratorTable
GetDesktopWindow
CheckRadioButton
ShowWindow
SendDlgItemMessageW
EndDialog
GetDlgItemTextW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
MapWindowPoints
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
BeginPaint
EndPaint
IsChild
ReleaseDC
SetFocus
GetWindow
IsWindow
GetClassNameW
GetSysColor
SetWindowPos
RedrawWindow
GetClassInfoExW
CreateWindowExW
DestroyWindow
CreateAcceleratorTableW
ClientToScreen
ScreenToClient
MoveWindow
SetCapture
ReleaseCapture
FillRect
InvalidateRgn
InvalidateRect
GetDC

gdi32

CreateCompatibleBitmap
SelectObject
DeleteObject
CreateCompatibleDC
DeleteDC
GetStockObject
GetObjectW
GetDeviceCaps
BitBlt
CreateSolidBrush

advapi32

RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
RegCloseKey
RegCreateKeyExW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW

ole32

OleUninitialize
CoGetClassObject
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoUninitialize
CreateStreamOnHGlobal
StringFromGUID2
OleLockRunning
OleInitialize
CLSIDFromString
CLSIDFromProgID

oleaut32

VariantChangeType
VariantCopy
VarBstrCmp
SysAllocStringLen
VariantClear
LoadTypeLi
LoadRegTypeLi
SysStringLen
OleCreateFontIndirect
VarUI4FromStr
SysFreeString
SysAllocString
VariantInit

shlwapi

PathAppendW
PathRemoveFileSpecW

crypt32

CertCloseStore

secur32

EncryptMessage
FreeContextBuffer
DeleteSecurityContext
AcquireCredentialsHandleW
QueryContextAttributesW
DecryptMessage
InitializeSecurityContextW
ApplyControlToken
FreeCredentialsHandle

Exports

Exports

IsUnicode
PlugCreate
PlugInit
PlugInvoke
PlugTerm

Sections

.text
Size: 313KB - Virtual size: 313KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
facebook.feature
fbrss.xsl
ff.xsl
folder.bmp
gedit.exe
.exe windows:5 windows x86 arch:x86

a795589b34089fa942ee977fd356efd0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidFromStringA

shlwapi

PathFileExistsA

kernel32

FlushFileBuffers
GetLastError
DeleteFileA
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCommandLineA
RaiseException
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
HeapAlloc
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointer
ReadFile
InterlockedCompareExchange
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
CloseHandle
GetACP
GetOEMCP
IsValidCodePage
HeapSize
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
LoadLibraryA
GetLocaleInfoW
CreateFileW
SetEndOfFile
GetProcessHeap

Sections

.text
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
iefavelem.bmp
images/msgbox/down.gif
.gif
images/msgbox/hr.bmp
images/msgbox/mark.png
.png
images/msgbox/mark_do.png
.png
images/msgbox/mark_na.png
.png
images/msgbox/navbg.bmp
images/msgbox/refresh.png
.png
images/msgbox/refresh_do.png
.png
images/msgbox/refresh_na.png
.png
images/msgbox/trash.png
.png
images/msgbox/trash_do.png
.png
images/msgbox/trash_na.png
.png
images/msgbox/unmark.png
.png
images/msgbox/unmark_do.png
.png
images/msgbox/unmark_na.png
.png
images/msgbox/up.gif
.gif
images/ticker/left.gif
images/ticker/right.gif
images/weather/0.bmp
images/weather/1.bmp
images/weather/10.bmp
images/weather/11.bmp
images/weather/12.bmp
images/weather/13.bmp
images/weather/14.bmp
images/weather/15.bmp
images/weather/16.bmp
images/weather/17.bmp
images/weather/18.bmp
images/weather/19.bmp
images/weather/2.bmp
images/weather/20.bmp
images/weather/21.bmp
images/weather/22.bmp
images/weather/23.bmp
images/weather/24.bmp
images/weather/25.bmp
images/weather/26.bmp
images/weather/27.bmp
images/weather/28.bmp
images/weather/29.bmp
images/weather/3.bmp
images/weather/30.bmp
images/weather/31.bmp
images/weather/32.bmp
images/weather/33.bmp
images/weather/34.bmp
images/weather/35.bmp
images/weather/36.bmp
images/weather/37.bmp
images/weather/38.bmp
images/weather/39.bmp
images/weather/4.bmp
images/weather/40.bmp
images/weather/41.bmp
images/weather/42.bmp
images/weather/43.bmp
images/weather/44.bmp
images/weather/45.bmp
images/weather/46.bmp
images/weather/47.bmp
images/weather/5.bmp
images/weather/6.bmp
images/weather/7.bmp
images/weather/8.bmp
images/weather/9.bmp
images/weather/hr.bmp
images/weather/na.bmp
images/weather/png/0.png
.png
images/weather/png/1.png
.png
images/weather/png/10.png
.png
images/weather/png/11.png
.png
images/weather/png/12.png
.png
images/weather/png/13.png
.png
images/weather/png/14.png
.png
images/weather/png/15.png
.png
images/weather/png/16.png
.png
images/weather/png/17.png
.png
images/weather/png/18.png
.png
images/weather/png/19.png
.png
images/weather/png/2.png
.png
images/weather/png/20.png
.png
images/weather/png/21.png
.png
images/weather/png/22.png
.png
images/weather/png/23.png
.png
images/weather/png/24.png
.png
images/weather/png/25.png
.png
images/weather/png/26.png
.png
images/weather/png/27.png
.png
images/weather/png/28.png
.png
images/weather/png/29.png
.png
images/weather/png/3.png
.png
images/weather/png/30.png
.png
images/weather/png/31.png
.png
images/weather/png/32.png
.png
images/weather/png/33.png
.png
images/weather/png/34.png
.png
images/weather/png/35.png
.png
images/weather/png/36.png
.png
images/weather/png/37.png
.png
images/weather/png/38.png
.png
images/weather/png/39.png
.png
images/weather/png/4.png
.png
images/weather/png/40.png
.png
images/weather/png/41.png
.png
images/weather/png/42.png
.png
images/weather/png/43.png
.png
images/weather/png/44.png
.png
images/weather/png/45.png
.png
images/weather/png/46.png
.png
images/weather/png/47.png
.png
images/weather/png/5.png
.png
images/weather/png/6.png
.png
images/weather/png/7.png
.png
images/weather/png/8.png
.png
images/weather/png/9.png
.png
images/weather/png/na.png
.png
location.xsl
magglass.ico
manage_bookmarks.html
.html .js polyglot
marquee.html
marquee_permissions.html
messaging.bmp
minus.bmp
msgbox_bubble.tmpl
.html .js polyglot
msgbox_openmsg.tmpl
.html
msgboxplugin.dll
.dll windows:5 windows x86 arch:x86

f5bf42725c49d4c113e19d01bba98d36

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\msgboxplugin.pdb

Imports

kernel32

GlobalLock
GlobalAlloc
MulDiv
lstrcmpW
FreeLibrary
GetModuleHandleW
lstrcmpiW
LoadLibraryExW
WaitForSingleObject
CreateEventW
CloseHandle
CreateThread
SetThreadPriority
ResumeThread
SetEvent
CreateDirectoryW
CopyFileW
TerminateThread
ResetEvent
GetCurrentProcessId
GetFullPathNameW
GetFileSize
FindFirstFileW
WriteFile
Sleep
ReadFile
CreateFileW
FindClose
FindNextFileW
GetFileAttributesExW
lstrcpyW
lstrlenA
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GlobalUnlock
GetStringTypeW
GetStringTypeA
LCMapStringA
GetConsoleMode
GetConsoleCP
GetProcAddress
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetTimeZoneInformation
GetModuleHandleA
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapCreate
ExitProcess
GetModuleFileNameA
GetStdHandle
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RtlUnwind
GetCommandLineA
ExitThread
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FlushInstructionCache
GetCurrentProcess
SetLastError
RaiseException
GetCurrentThreadId
GetLastError
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryW
GetModuleFileNameW
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
FindResourceExW
EnterCriticalSection
FindResourceW
LoadResource
LockResource
TerminateProcess
GlobalAddAtomA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
SizeofResource
InterlockedDecrement
LeaveCriticalSection
SetFilePointer
VirtualQuery

user32

EndPaint
FindWindowW
UnregisterClassA
KillTimer
PostMessageW
SetTimer
RegisterClassExW
LoadCursorW
DefWindowProcW
SetWindowLongW
GetWindowLongW
DestroyAcceleratorTable
GetDesktopWindow
ReleaseDC
GetDC
InvalidateRect
CallWindowProcW
InvalidateRgn
GetClientRect
FillRect
ReleaseCapture
SetCapture
MoveWindow
ScreenToClient
GetParent
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
PostThreadMessageW
SetForegroundWindow
ShowWindow
ClientToScreen
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
MapWindowPoints
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
BeginPaint
DestroyIcon
IsChild
GetFocus
SetFocus
GetWindow
GetDlgItem
SendMessageW
IsWindow
GetClassNameW
GetSysColor
CharNextW
SetWindowPos
RedrawWindow
GetClassInfoExW
CreateWindowExW
DestroyWindow
CreateAcceleratorTableW

gdi32

CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
BitBlt
DeleteDC
GetStockObject
GetObjectW
GetDeviceCaps
CreateSolidBrush

advapi32

RegSetValueExW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW

ole32

CoTaskMemRealloc
CoTaskMemFree
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
CoCreateInstance
CreateStreamOnHGlobal
OleLockRunning
StringFromGUID2
CoTaskMemAlloc
OleUninitialize
CoInitialize
CoUninitialize

oleaut32

VariantClear
SysAllocString
VariantChangeType
OleCreateFontIndirect
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysAllocStringLen
DispCallFunc
VarUI4FromStr
VarBstrCmp
VariantInit
SysFreeString
VariantCopy

shlwapi

PathAppendW
PathRemoveFileSpecW

comctl32

ImageList_GetIcon
ImageList_Destroy
ImageList_LoadImageW

wininet

InternetCrackUrlA
InternetOpenA
InternetConnectA
HttpOpenRequestA
InternetQueryOptionW
InternetSetOptionW
HttpAddRequestHeadersA
HttpSendRequestW
HttpQueryInfoA
InternetReadFile
InternetCloseHandle

Exports

Exports

IsUnicode
PlugCreate
PlugInit
PlugInvoke
PlugTerm

Sections

.text
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
offline.html
.html .js polyglot
plus.bmp
podcast.bmp
podcast.xsl
radio.bmp
resize.bmp
rssfeed.bmp
search.xsl
skins/radio/gray03/Equalizer1.bmp
skins/radio/gray03/Equalizer2.bmp
skins/radio/gray03/Equalizer3.bmp
skins/radio/gray03/Equalizer4.bmp
skins/radio/gray03/Equalizer5.bmp
skins/radio/gray03/Equalizer6.bmp
skins/radio/gray03/btn_dropdwn_down.bmp
skins/radio/gray03/btn_dropdwn_over.bmp
skins/radio/gray03/btn_dropdwn_up.bmp
skins/radio/gray03/btn_max_down.bmp
skins/radio/gray03/btn_max_over.bmp
skins/radio/gray03/btn_max_up.bmp
skins/radio/gray03/btn_min_down.bmp
skins/radio/gray03/btn_min_over.bmp
skins/radio/gray03/btn_min_up.bmp
skins/radio/gray03/btn_pause_down.bmp
skins/radio/gray03/btn_pause_over.bmp
skins/radio/gray03/btn_pause_up.bmp
skins/radio/gray03/btn_play_down.bmp
skins/radio/gray03/btn_play_over.bmp
skins/radio/gray03/btn_play_up.bmp
skins/radio/gray03/btn_playcntrl_over.bmp
skins/radio/gray03/btn_playcntrl_up.bmp
skins/radio/gray03/btn_stop_down.bmp
skins/radio/gray03/btn_stop_over.bmp
skins/radio/gray03/btn_stop_up.bmp
skins/radio/gray03/btn_volcntrl_over.bmp
skins/radio/gray03/btn_volcntrl_up.bmp
skins/radio/gray03/playcntrl_bg.bmp
skins/radio/gray03/radio.bmp
skins/radio/gray03/radio_mask.bmp
skins/radio/gray03/radio_minimalized.bmp
skins/radio/gray03/radio_minimalized_mask.bmp
skins/radio/gray03/station.bmp
skins/radio/gray03/vol_01.bmp
skins/radio/gray03/vol_02.bmp
skins/radio/gray03/vol_03.bmp
skins/radio/gray03/volslide_bg.bmp
skins/radio/gray03/volslide_track.bmp
star_on.gif
.gif
update_progress.html
.html .js polyglot
version.txt
version.xsl
weather_bubble.tmpl
.html .js polyglot
weatherplugin.dll
.dll windows:5 windows x86 arch:x86

36574711ddac880ec666c66830955202

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\weatherplugin.pdb

Imports

kernel32

lstrlenA
MultiByteToWideChar
RaiseException
GetProcAddress
LoadLibraryW
GetModuleFileNameW
InitializeCriticalSection
DeleteCriticalSection
GetFullPathNameW
GetFileSize
FindFirstFileW
InterlockedDecrement
GetModuleHandleW
WriteFile
Sleep
CopyFileW
ReadFile
CreateFileW
SetLastError
FindClose
FindNextFileW
GetFileAttributesExW
CloseHandle
lstrcpyW
FreeLibrary
lstrcmpiW
GetLastError
LoadLibraryExW
InterlockedIncrement
CreateEventW
CreateThread
SetThreadPriority
ResumeThread
SetEvent
CreateDirectoryW
ResetEvent
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WideCharToMultiByte
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetModuleHandleA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
TerminateThread
WaitForSingleObject
lstrlenW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
VirtualQuery
HeapCreate
ExitProcess
TlsFree
TlsSetValue
TlsAlloc
GetCurrentThreadId
FlushInstructionCache
WriteConsoleA
GetCurrentProcess
TlsGetValue
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GlobalAddAtomA
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree

user32

SetWindowTextW
GetDlgItem
CallWindowProcW
DefWindowProcW
GetWindowLongW
SetWindowLongW
UnregisterClassA
FindWindowW
CheckRadioButton
SetDlgItemTextW
GetWindowTextW
EnumChildWindows
SetTimer
KillTimer
GetParent
SendMessageW
CreateWindowExW
LoadCursorW
GetClassInfoExW
RegisterClassExW
IsWindow
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
PostThreadMessageW
CharNextW
DestroyWindow
PostMessageW
ShowWindow
IsDlgButtonChecked
GetDlgItemTextW
GetActiveWindow

advapi32

RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
RegDeleteValueW

ole32

CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemRealloc
CoTaskMemFree

oleaut32

VariantClear
SysAllocString
VarBstrCmp
VarUI4FromStr
VariantInit
SysFreeString

shlwapi

PathAppendW
PathRemoveFileSpecW
PathIsDirectoryW
PathFileExistsW
UrlEscapeW

comctl32

PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW

wininet

InternetCrackUrlA
InternetReadFile
HttpQueryInfoA
HttpSendRequestW
HttpAddRequestHeadersA
InternetSetOptionW
InternetQueryOptionW
HttpOpenRequestA
InternetConnectA
InternetCloseHandle
InternetOpenA

Exports

Exports

IsUnicode
PlugCreate
PlugInit
PlugInvoke
PlugTerm

Sections

.text
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/gplunger.dll
.dll windows:5 windows x86 arch:x86

bb24ab9fddb167f7754f91e378a2b052

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
OpenProcess
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcessId
CreateProcessW
GetNativeSystemInfo
CreateFileW
InitializeCriticalSection
LocalFree
GetLocaleInfoW
CreateFileA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
CloseHandle
GetTempFileNameA
FreeLibrary
WideCharToMultiByte
lstrlenW
GetProcAddress
LoadLibraryA
MultiByteToWideChar
lstrlenA
GlobalAlloc
lstrcpynA
lstrcpyA
GlobalFree
InterlockedDecrement
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
GetLocaleInfoA
GetUserDefaultLCID
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
InterlockedCompareExchange
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
RtlUnwind
RaiseException
HeapCreate
HeapDestroy
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointer
ReadFile
Sleep
FlushFileBuffers
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
HeapSize
SetEndOfFile

user32

MessageBoxA
SendMessageA
GetDlgItem
IsWindow
CallWindowProcA
DefWindowProcA
GetWindowLongA
SetWindowLongA
CallNextHookEx
UnhookWindowsHookEx
GetWindowThreadProcessId
SetWindowsHookExA
FindWindowA

advapi32

GetSidSubAuthority
GetSidSubAuthorityCount
RegSetValueExA
RegDeleteValueA
RegQueryValueExA
RegCloseKey
SetSecurityInfo
SetEntriesInAclA
EqualSid
GetTokenInformation
OpenProcessToken
GetExplicitEntriesFromAclA
GetSecurityInfo
RegOpenKeyExA
DuplicateTokenEx

shell32

DoEnvironmentSubstW
DoEnvironmentSubstA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

GetErrorInfo
SysStringLen
SysFreeString
VariantClear
SysAllocString

shlwapi

UrlEscapeA
PathAppendA

Exports

Exports

addSearch
delSearch
getRequiredPluginsList
justDoIt
launchProtectedIE
parseToolbarVars
urlEncode

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsExec.dll
.dll windows:4 windows x86 arch:x86

053c8c5da7b5f6a2513024b82859e1b0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
lstrcpynA
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
PeekNamedPipe
GetTickCount
CreateProcessA
GetStartupInfoA
CreatePipe
GetVersionExA
GlobalLock
DeleteFileA
lstrcmpiA
TerminateProcess
lstrcatA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
CloseHandle
CopyFileA
GetTempFileNameA
GlobalFree
GlobalAlloc
GetModuleFileNameA
ExitProcess
WaitForSingleObject
GetCommandLineA
Sleep
lstrlenA
GetExitCodeProcess

user32

SendMessageA
OemToCharBuffA
CharNextA
wsprintfA
CharPrevA
FindWindowExA

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

Exec
ExecToLog
ExecToStack

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsisFirewall.dll
.dll windows:4 windows x86 arch:x86

1a4c99175e8891c64634680f4f238d51

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GlobalFree
lstrcpyA
lstrcpynA
GlobalAlloc
InterlockedDecrement
lstrlenA
MultiByteToWideChar
LocalFree

user32

wsprintfA

ole32

OleRun
CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString

oleaut32

VariantClear
GetErrorInfo
SysFreeString
SysAllocString

msvcrt

??2@YAPAXI@Z
_onexit
__dllonexit
_initterm
free
??1type_info@@UAE@XZ
_CxxThrowException
_adjust_fdiv
??3@YAXPAX@Z
malloc
__CxxFrameHandler

Exports

Exports

AddAuthorizedApplication
RemoveAuthorizedApplication

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/options.ini
$PLUGINSDIR/textreplace.dll
.dll windows:4 windows x86 arch:x86

c9b875d3f7604775d782afcb308d92df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
lstrcpynA
GlobalFree
CloseHandle
GlobalAlloc
GetFileSize
SetFilePointer
ReadFile
CreateFileA
WriteFile
SetFileAttributesA
GetFileAttributesA
CopyFileA
lstrcmpiA

user32

CharUpperA

Exports

Exports

_FillReadBuffer
_FindInFile
_FreeReadBuffer
_ReplaceInFile
_Unload

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 669B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/unicode.dll
.dll windows:4 windows x86 arch:x86

05f29a3dc3b7096bfdca7ddbd6b47dd0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
lstrcpyA
lstrcpynA
GlobalAlloc
lstrcmpiA
WriteFile
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
ReadFile
GetFileSize
CreateFileA
GetLastError

Exports

Exports

FileAnsi2Unicode
FileUnicode2Ansi
FileUnicode2UTF8
UnicodeType
__FileAnsi2Unicode
__FileUnicode2Ansi
__FileUnicode2UTF8

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ToolbarUpdate.exe
.exe windows:4 windows x86 arch:x86

b4785ab5f09590fd79c781ce7cb4fba2

Code Sign

5d:4f:0e:20:54:2b:7a:df:3f:cf:49:cc:6e:ca:c6:df
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

04/04/2008, 00:00

Not After

25/04/2009, 23:59

Subject

CN=FreeCause\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=FreeCause\, Inc.,L=Boston,ST=Massachusetts,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Work\.Current\Freecause\Trunk\SVN.Trunk\package\ToolbarUpdate.pdb

Imports

shlwapi

PathFileExistsA
UrlIsA
PathRemoveFileSpecA
PathIsDirectoryA

setupapi

SetupIterateCabinetA

kernel32

FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetModuleFileNameA
GetProcAddress
InterlockedDecrement
lstrlenA
InterlockedIncrement
CloseHandle
ReadFile
GetFileSize
CreateFileA
CreateDirectoryA
SetLastError
SetFileAttributesA
GlobalAddAtomA
DeleteFileA
GetLastError
LoadLibraryA
CopyFileA
Sleep
FreeLibrary
GetEnvironmentStringsW
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
QueryPerformanceCounter
GetFileType
WriteFile
ExitProcess
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
VirtualAlloc
IsDebuggerPresent
RtlUnwind
HeapFree
HeapAlloc
GetFileAttributesA
GetCommandLineA
GetProcessHeap
GetStartupInfoA
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree

user32

GetCursorPos
LoadStringA
LoadImageA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DispatchMessageA
DestroyMenu
DefWindowProcA
UnregisterClassA
TrackPopupMenu
KillTimer
PostMessageA
SetTimer
GetWindowLongA
CreatePopupMenu
AppendMenuA
MessageBoxA
PostQuitMessage
FindWindowA
IsWindow
SendMessageA

gdi32

GetStockObject

shell32

Shell_NotifyIconA

ole32

CoInitialize

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Uninst.exe.nsis
default.xml
.xml
icons.bmp
images/amazon.bmp
images/ebay.bmp
images/email.bmp
images/email2.bmp
images/wikipedia.bmp
images/yahoo.bmp
localization.xml
patch.bat
settings
ticker.html
.html .js polyglot
$TEMPImg/VerControl.exe
.exe windows:4 windows x86 arch:x86

514a9a1e5bae119ec76c5ca238859d46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

FindCloseUrlCache
FindFirstUrlCacheEntryW
DeleteUrlCacheEntryW
FindNextUrlCacheEntryW

kernel32

GetFileAttributesW
GetFileTime
HeapAlloc
RtlUnwind
HeapFree
GetProcessHeap
GetStartupInfoW
RaiseException
HeapReAlloc
ExitProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
GetModuleFileNameA
FileTimeToLocalFileTime
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
SetErrorMode
GetTickCount
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringW
FileTimeToSystemTime
lstrlenA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcessId
CloseHandle
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetModuleHandleA
GetThreadLocale
InterlockedIncrement
WideCharToMultiByte
InterlockedDecrement
GetModuleFileNameW
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryW
FreeLibrary
CompareStringW
LoadLibraryA
lstrcmpW
GetModuleHandleW
GetProcAddress
GetVersionExA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
MulDiv
SetLastError
GetLastError
MultiByteToWideChar
Sleep
FindResourceW
LoadResource
LockResource
SizeofResource
GetCPInfo

user32

GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatW
PostThreadMessageW
CopyAcceleratorTableW
UnregisterClassW
DestroyMenu
LoadCursorW
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
SetCursor
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
CharNextW
IsWindowEnabled
MoveWindow
SetWindowTextW
IsDialogMessageW
CharUpperW
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetClientRect
GetMenu
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetWindowLongW
ReleaseCapture
SetCapture
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetActiveWindow
ShowWindow
SetWindowLongW
SetTimer
PostMessageW
EnableWindow
GetParent
GetWindowRect
SendMessageW
UnregisterClassA
SetFocus

gdi32

SetWindowExtEx
ScaleWindowExtEx
RectVisible
ExtSelectClipRgn
DeleteDC
CreateRectRgnIndirect
GetRgnBox
GetMapMode
PtVisible
GetWindowExtEx
GetViewportExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
GetDeviceCaps
CreateBitmap
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetTextColor
GetBkColor
GetStockObject
GetObjectW
SetBkColor
SetTextColor
GetClipBox
TextOutW

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shlwapi

PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
OleFlushClipboard
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject

oleaut32

VariantClear
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
OleCreateFontIndirect
VariantChangeType
SafeArrayCreate
SafeArrayPutElement
SafeArrayDestroy
SafeArrayCreateVector
VariantInit
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
SysAllocString
SysStringLen
SysAllocStringLen
SysFreeString

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$TEMPImg/askToolbarInstaller-1.9.1.0.exe
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ExecDos.dll
.dll windows:5 windows x86 arch:x86

b997a221e444f5e6463b28778735cf2b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
Sleep
lstrcatA
lstrcmpiA
TerminateProcess
ReadFile
GetExitCodeProcess
PeekNamedPipe
CreateFileA
FlushFileBuffers
WriteFile
lstrlenA
CloseHandle
CreateProcessA
DuplicateHandle
GetCurrentProcess
CreatePipe
GetProcAddress
GetModuleHandleA
GlobalAlloc
GetExitCodeThread
WaitForSingleObject
CreateThread
lstrcpyA
lstrcpynA

user32

wsprintfA
GetClassNameA
GetDlgItem
FindWindowExA
SendMessageA

Exports

Exports

exec
isdone
wait

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 290B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$TEMPImg/ApnIC.dll
.dll windows:5 windows x86 arch:x86

0a90a95f9366c4237127aaf88551ac12

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09:65:f2:ac:72:36:c7:e1:bd:ca:44:ed:13:9b:27:3a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

20/06/2011, 00:00

Not After

18/06/2014, 23:59

Subject

CN=Ask.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Distribution,O=Ask.com,L=Oakland,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

eb:87:6b:1d:2a:a4:30:37:8b:ba:87:95:fb:37:01:34:87:41:e4:fc
Signer

Actual PE Digest

eb:87:6b:1d:2a:a4:30:37:8b:ba:87:95:fb:37:01:34:87:41:e4:fc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\hudson\jobs\APN_Stub1.0\workspace\AskStub\Release\APNIC.pdb

Imports

kernel32

lstrcmpW
lstrcatW
GetLastError
CloseHandle
GetCurrentProcess
GetProcAddress
LoadLibraryW
GetVersionExW
CreateDirectoryW
GetTempPathW
DeleteFileW
GetLocalTime
GetFileTime
CreateFileW
lstrlenA
FormatMessageW
InterlockedDecrement
GetModuleHandleW
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
GetSystemDefaultLangID
HeapSize
GetLocaleInfoA
GetCurrentProcessId
lstrlenW
LocalFree
lstrcmpiW
lstrcpyW
WriteConsoleW
SetStdHandle
LoadLibraryA
CreateFileA
SetEndOfFile
TlsFree
SetLastError
GetPrivateProfileStringW
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
TlsSetValue
TlsAlloc
TlsGetValue
HeapAlloc
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
ExitProcess
SetFilePointer
ReadFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WriteFile
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetStringTypeA
IsValidCodePage
GetOEMCP
GetACP
GetModuleHandleA
HeapReAlloc
VirtualAlloc
VirtualFree
HeapDestroy
InterlockedIncrement
InterlockedCompareExchange
InterlockedExchange
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetProcessHeap
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
LCMapStringA
LCMapStringW
HeapCreate

advapi32

RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumValueW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey

shell32

SHGetFolderPathW

ole32

CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

SysAllocString
SysFreeString

shlwapi

SHDeleteKeyW
PathFileExistsW
StrStrIW

wininet

HttpEndRequestW
InternetReadFile
HttpSendRequestW
HttpOpenRequestW
InternetSetOptionW
InternetCloseHandle
InternetConnectW
InternetCrackUrlW
InternetOpenW
HttpSendRequestExW
HttpQueryInfoW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

rpcrt4

UuidCreate
UuidToStringW
RpcStringFreeW

Exports

Exports

DoCheckInstall
DoCheckOverInstall
DoPostInstall
DoPreCheck
DoPreInstall
GetPayloadPath
VolatileStoreClearMacroData

Sections

.text
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$TEMPImg/ApnStub.exe
.exe windows:5 windows x86 arch:x86

86fb79068ef3ff29722239f60c6b67f4

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

28:6f:8a:30:e2:ea:c6:96:5b:93:6f:82:6a:05:30:5d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/06/2008, 00:00

Not After

17/06/2011, 23:59

Subject

CN=Ask.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Distribution,O=Ask.com,L=Oakland,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f0:94:ef:8e:10:5c:c7:23:d5:68:01:fb:14:da:13:e3:cb:ed:ab:64
Signer

Actual PE Digest

f0:94:ef:8e:10:5c:c7:23:d5:68:01:fb:14:da:13:e3:cb:ed:ab:64

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\hudson\jobs\AskStub\workspace\AskStub\Release\APNStub.pdb

Imports

msi

ord224

crypt32

CertFreeCertificateContext
CertGetNameStringW

urlmon

IsValidURL
URLDownloadToFileW

kernel32

SetEnvironmentVariableA
GetStartupInfoW
CompareStringW
CompareStringA
CreateFileA
lstrlenW
GetTempPathW
lstrcatW
DeleteFileW
lstrcpyW
GetTickCount
Sleep
GetModuleFileNameW
GetTempFileNameW
FindFirstFileW
GetNativeSystemInfo
SetFilePointer
GetCurrentProcess
CompareFileTime
CreateDirectoryW
WriteFile
WideCharToMultiByte
GetVersionExW
ReadFile
CreateFileW
MultiByteToWideChar
FlushFileBuffers
GetLastError
FindClose
IsWow64Process
GetSystemInfo
FindNextFileW
CloseHandle
GetSystemTime
FreeLibrary
WaitForSingleObject
LoadLibraryW
FormatMessageW
GetExitCodeProcess
SetLastError
GetProcAddress
LocalFree
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetConsoleMode
GetConsoleCP
HeapSize
LCMapStringW
IsValidCodePage
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
GetFullPathNameW
GetModuleHandleA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCurrentDirectoryA
HeapAlloc
RaiseException
GetDriveTypeA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeZoneInformation
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP

user32

wsprintfW
MessageBoxW
GetForegroundWindow

shell32

ShellExecuteExW

ole32

IIDFromString
CoInitializeEx
CoCreateInstance

rpcrt4

UuidToStringW
RpcStringFreeW
UuidCreate

wininet

InternetOpenW
InternetCrackUrlW
InternetConnectW
InternetCloseHandle
HttpSendRequestA
HttpQueryInfoW
HttpOpenRequestW
HttpAddRequestHeadersA

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$TEMPImg/ApnToolbarInstaller.exe
.exe windows:5 windows x86 arch:x86

710deed9ec637659e39599bbee51e458

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09:65:f2:ac:72:36:c7:e1:bd:ca:44:ed:13:9b:27:3a
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

20/06/2011, 00:00

Not After

18/06/2014, 23:59

Subject

CN=Ask.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Distribution,O=Ask.com,L=Oakland,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

da:df:41:df:98:05:be:4f:3d:23:a8:55:63:bd:27:a7:1a:e0:5a:98
Signer

Actual PE Digest

da:df:41:df:98:05:be:4f:3d:23:a8:55:63:bd:27:a7:1a:e0:5a:98

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\hudson\jobs\ToolbarCore_Staging\workspace\build\ToolbarCore\toolbar\ie\src\toolbar\wrapper\Release\externalwrapper.pdb

Imports

shlwapi

PathFileExistsW
StrStrIW
StrCmpNIW
SHDeleteValueW

msi

ord92
ord113
ord163
ord160
ord20
ord125
ord159
ord8
ord70
ord205
ord32
ord118

kernel32

GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetCommandLineW
FileTimeToDosDateTime
GetTempFileNameW
lstrlenA
FindResourceW
LoadResource
WaitForSingleObject
GetTickCount
WriteFile
WideCharToMultiByte
SizeofResource
GetExitCodeProcess
CreateFileW
MultiByteToWideChar
lstrlenW
GetTempPathW
FindFirstFileA
GetLastError
FindClose
GetLocalTime
lstrcmpiW
CloseHandle
SetEndOfFile
DeleteFileW
LocalFree
CreateFileA
SetFilePointer
ReadFile
GetVersionExW
CreateDirectoryW
GetPrivateProfileStringW
GetFileTime
InterlockedDecrement
GetSystemDefaultLangID
FreeLibrary
GetCurrentProcess
GetModuleHandleW
LoadLibraryW
GetProcAddress
GetSystemInfo
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
GetSystemTimeAsFileTime
GetCPInfo
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
FileTimeToLocalFileTime
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapAlloc
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
GetModuleFileNameW
GetStringTypeA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
SetHandleCount
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapReAlloc
VirtualAlloc
VirtualFree
LCMapStringA
LCMapStringW
RtlUnwind
RaiseException
HeapCreate
InterlockedIncrement
InterlockedCompareExchange
InterlockedExchange
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetProcessHeap
GetStartupInfoW

user32

GetSystemMetrics

advapi32

RegCloseKey
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegQueryValueExW

shell32

ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW
SHGetSpecialFolderPathW
SHCreateDirectoryExW

ole32

CoCreateInstance
OleInitialize
OleUninitialize
CoUninitialize
CoInitialize

oleaut32

SysFreeString
VariantInit
SysAllocString

wininet

InternetCanonicalizeUrlW
InternetSetOptionW
HttpEndRequestW
HttpSendRequestExW
InternetCloseHandle
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestW
HttpQueryInfoW
InternetReadFile
InternetCrackUrlW
InternetOpenW
HttpSendRequestW
InternetConnectW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

rpcrt4

UuidToStringW
RpcStringFreeW
UuidCreate

urlmon

URLDownloadToFileW

Sections

.text
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Installer.ico
Uninst.exe
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$TEMPImg/chk.exe
.exe windows:4 windows x86 arch:x86

514a9a1e5bae119ec76c5ca238859d46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

FindCloseUrlCache
FindFirstUrlCacheEntryW
DeleteUrlCacheEntryW
FindNextUrlCacheEntryW

kernel32

GetFileAttributesW
GetFileTime
HeapAlloc
RtlUnwind
HeapFree
GetProcessHeap
GetStartupInfoW
RaiseException
HeapReAlloc
ExitProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
GetModuleFileNameA
FileTimeToLocalFileTime
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
SetErrorMode
GetTickCount
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringW
FileTimeToSystemTime
lstrlenA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcessId
CloseHandle
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetModuleHandleA
GetThreadLocale
InterlockedIncrement
WideCharToMultiByte
InterlockedDecrement
GetModuleFileNameW
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryW
FreeLibrary
CompareStringW
LoadLibraryA
lstrcmpW
GetModuleHandleW
GetProcAddress
GetVersionExA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
MulDiv
SetLastError
GetLastError
MultiByteToWideChar
Sleep
FindResourceW
LoadResource
LockResource
SizeofResource
GetCPInfo

user32

GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatW
PostThreadMessageW
CopyAcceleratorTableW
UnregisterClassW
DestroyMenu
LoadCursorW
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
SetCursor
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
CharNextW
IsWindowEnabled
MoveWindow
SetWindowTextW
IsDialogMessageW
CharUpperW
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetClientRect
GetMenu
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetWindowLongW
ReleaseCapture
SetCapture
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetActiveWindow
ShowWindow
SetWindowLongW
SetTimer
PostMessageW
EnableWindow
GetParent
GetWindowRect
SendMessageW
UnregisterClassA
SetFocus

gdi32

SetWindowExtEx
ScaleWindowExtEx
RectVisible
ExtSelectClipRgn
DeleteDC
CreateRectRgnIndirect
GetRgnBox
GetMapMode
PtVisible
GetWindowExtEx
GetViewportExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
GetDeviceCaps
CreateBitmap
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetTextColor
GetBkColor
GetStockObject
GetObjectW
SetBkColor
SetTextColor
GetClipBox
TextOutW

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shlwapi

PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
OleFlushClipboard
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject

oleaut32

VariantClear
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
OleCreateFontIndirect
VariantChangeType
SafeArrayCreate
SafeArrayPutElement
SafeArrayDestroy
SafeArrayCreateVector
VariantInit
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
SysAllocString
SysStringLen
SysAllocStringLen
SysFreeString

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Uninst.exe
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/Processes.dll
.dll windows:4 windows x86 arch:x86

f5edecae12589e705677a6e272ad0394

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
FreeLibrary
OpenProcess
CloseHandle
TerminateProcess
GlobalFree
lstrcpyA
GetCommandLineA
GetVersionExA
ExitProcess
GetModuleHandleA
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
UnhandledExceptionFilter
DisableThreadLibraryCalls
WriteFile
SetFilePointer
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
GetLocaleInfoA
VirtualProtect
GetSystemInfo

user32

FindWindowA
GetDesktopWindow
wsprintfA
UpdateWindow

Exports

Exports

FindDevice
FindProcess
KillProcess

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$TEMPImg/ioClean.ini
CREDITS.txt
Copy of VEMODE.hta
.html .js polyglot
DGMPGDec/COPYING.txt
DGMPGDec/Changes.txt
DGMPGDec/DGDecode.dll
.dll windows:4 windows x86 arch:x86

adf02f89cfd29d9adf428c1fa940ac04

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedIncrement
OutputDebugStringA
InterlockedDecrement
lstrlenA

user32

DrawTextA

gdi32

SetMapMode
GdiFlush
DeleteObject
DeleteDC
CreateCompatibleDC
CreateDIBSection
SelectObject
SetBkColor
SetTextColor
CreateFontA

msvcrt

_adjust_fdiv
_initterm
malloc
free
_ftol
_CIpow
_read
_lseeki64
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_atoi64
realloc
sscanf
calloc
_open
fscanf
strncmp
fgets
fopen
_except_handler3
_close
fclose
_purecall
sprintf
atoi
strncpy
time
vsprintf
__dllonexit
_onexit

Exports

Exports

??0CMPEG2Decoder@@QAE@XZ
??4CMPEG2Decoder@@QAEAAV0@ABV0@@Z
?Add_Block@CMPEG2Decoder@@AAEXHHHHH@Z
?Clear_Block@CMPEG2Decoder@@AAEXH@Z
?Close@CMPEG2Decoder@@QAEXXZ
?CopyPlane@CMPEG2Decoder@@IAEXPAEH0HHH@Z
?Copyall@CMPEG2Decoder@@IAEXPAUYV12PICT@@0@Z
?Copyeven@CMPEG2Decoder@@IAEXPAUYV12PICT@@0@Z
?Copyodd@CMPEG2Decoder@@IAEXPAUYV12PICT@@0@Z
?Copyoddeven@CMPEG2Decoder@@IAEXPAUYV12PICT@@00@Z
?Decode@CMPEG2Decoder@@QAEXKPAUYV12PICT@@@Z
?Decode_MPEG1_Intra_Block@CMPEG2Decoder@@AAEXHQAH@Z
?Decode_MPEG1_Non_Intra_Block@CMPEG2Decoder@@AAEXH@Z
?Decode_MPEG2_Intra_Block@CMPEG2Decoder@@AAEXHQAH@Z
?Decode_MPEG2_Non_Intra_Block@CMPEG2Decoder@@AAEXH@Z
?Decode_Picture@CMPEG2Decoder@@IAEXPAUYV12PICT@@@Z
?Dual_Prime_Arithmetic@CMPEG2Decoder@@AAEXQAY01HPAHHH@Z
?Fill_Buffer@CMPEG2Decoder@@IAEXXZ
?Fill_Next@CMPEG2Decoder@@IAEXXZ
?Flush_Buffer@CMPEG2Decoder@@IAEXI@Z
?Flush_Buffer_All@CMPEG2Decoder@@IAEXI@Z
?Get_B_macroblock_type@CMPEG2Decoder@@AAEHXZ
?Get_Bits@CMPEG2Decoder@@IAEII@Z
?Get_Bits_All@CMPEG2Decoder@@IAEII@Z
?Get_Byte@CMPEG2Decoder@@IAEIXZ
?Get_Chroma_DC_dct_diff@CMPEG2Decoder@@AAEHXZ
?Get_D_macroblock_type@CMPEG2Decoder@@AAEHXZ
?Get_Hdr@CMPEG2Decoder@@IAEHXZ
?Get_I_macroblock_type@CMPEG2Decoder@@AAEHXZ
?Get_Luma_DC_dct_diff@CMPEG2Decoder@@AAEHXZ
?Get_P_macroblock_type@CMPEG2Decoder@@AAEHXZ
?Get_Short@CMPEG2Decoder@@IAEIXZ
?Get_coded_block_pattern@CMPEG2Decoder@@AAEHXZ
?Get_dmvector@CMPEG2Decoder@@AAEHXZ
?Get_macroblock_address_increment@CMPEG2Decoder@@AAEHXZ
?Get_macroblock_type@CMPEG2Decoder@@AAEHXZ
?Get_motion_code@CMPEG2Decoder@@AAEHXZ
?InitializeLuminanceFilter@CMPEG2Decoder@@QAEXHH@Z
?Initialize_Buffer@CMPEG2Decoder@@IAEXXZ
?LuminanceFilter@CMPEG2Decoder@@QAEXPAEHHH@Z
?Next_File@CMPEG2Decoder@@IAEXXZ
?Next_PVA_Packet@CMPEG2Decoder@@IAEXXZ
?Next_Packet@CMPEG2Decoder@@IAEXXZ
?Next_Transport_Packet@CMPEG2Decoder@@IAEXXZ
?Open@CMPEG2Decoder@@QAEHPBD@Z
?Show_Bits@CMPEG2Decoder@@IAEII@Z
?Update_Picture_Buffers@CMPEG2Decoder@@AAEXXZ
?assembleFrame@CMPEG2Decoder@@IAEXQAPAEHPAUYV12PICT@@@Z
?copyright_extension@CMPEG2Decoder@@AAEXXZ
?decode_macroblock@CMPEG2Decoder@@AAEXPAH00QAY111HQAHQAY01H2@Z
?decode_motion_vector@CMPEG2Decoder@@AAEXPAHHHHH@Z
?extension_and_user_data@CMPEG2Decoder@@AAEXXZ
?extra_bit_information@CMPEG2Decoder@@AAEHXZ
?form_prediction@CMPEG2Decoder@@AAEXQAPAEH0HHHHHHHHHH@Z
?form_predictions@CMPEG2Decoder@@AAEXHHHHQAY111HQAY01HQAH@Z
?group_of_pictures_header@CMPEG2Decoder@@AAEXXZ
?macroblock_modes@CMPEG2Decoder@@AAEXPAH000000@Z
?motion_compensation@CMPEG2Decoder@@AAEXHHHQAY111HQAY01HQAHH@Z
?motion_vector@CMPEG2Decoder@@AAEXPAH0HHHHH@Z
?motion_vectors@CMPEG2Decoder@@AAEXQAY111HQAHQAY01HHHHHHHH@Z
?next_start_code@CMPEG2Decoder@@IAEXXZ
?picture_coding_extension@CMPEG2Decoder@@AAEXXZ
?picture_data@CMPEG2Decoder@@AAEXXZ
?picture_display_extension@CMPEG2Decoder@@AAEXXZ
?picture_header@CMPEG2Decoder@@AAEXXZ
?quant_matrix_extension@CMPEG2Decoder@@AAEXXZ
?sequence_display_extension@CMPEG2Decoder@@AAEXXZ
?sequence_extension@CMPEG2Decoder@@AAEXXZ
?sequence_header@CMPEG2Decoder@@IAEXXZ
?skipped_macroblock@CMPEG2Decoder@@AAEXQAHQAY111HPAHQAY01H2@Z
?slice@CMPEG2Decoder@@AAEXHI@Z
?slice_header@CMPEG2Decoder@@IAEHXZ
_AvisynthPluginInit2@4
_closeVideo_SC@0
_closeVideo_SCMI@4
_getFrame_SC@4
_getFrame_SCMI@8
_getRGBFrame_SC@4
_getRGBFrame_SCMI@8
_openMPEG2Source_SC@4
_openMPEG2Source_SCMI@8
closeVideo
closeVideoMI
getFrame
getFrameMI
getRGBFrame
getRGBFrameMI
openMPEG2Source
openMPEG2SourceMI

Sections

.text
Size: 172KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DGMPGDec/DGDecodeManual.html
.html
DGMPGDec/DGIndex.exe
.exe windows:4 windows x86 arch:x86

240e8aac7932ba1247500895b2d1ef5e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ddraw

DirectDrawCreate

winmm

mmioDescend
mmioClose
mmioGetInfo
mmioOpenA
timeGetTime
mmioRead
mmioAscend

kernel32

GetCurrentProcess
ExitThread
OutputDebugStringA
Sleep
GetACP
LCMapStringW
LCMapStringA
GetCPInfo
FlushFileBuffers
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
TlsGetValue
SetLastError
ResumeThread
GetCurrentThreadId
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
InterlockedIncrement
InterlockedDecrement
SetEndOfFile
GetProcAddress
WriteFile
GetStdHandle
SetHandleCount
SetStdHandle
InitializeCriticalSection
LeaveCriticalSection
SetPriorityClass
SuspendThread
GetModuleFileNameA
GetCurrentDirectoryA
WaitForSingleObject
CreateThread
GetOEMCP
LoadLibraryA
TlsAlloc
RaiseException
EnterCriticalSection
GetVersion
GetCommandLineA
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsSetValue
DeleteFileA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
GetLocalTime
GetLastError
ReadFile
SetFilePointer
ExitProcess
TerminateProcess
CloseHandle
GetFileType
CreateFileA
FindFirstFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFullPathNameA
GetDriveTypeA
HeapAlloc
HeapFree
DeleteCriticalSection
GetTimeZoneInformation
GetSystemTime

user32

DefWindowProcA
MessageBoxA
DrawMenuBar
GetClientRect
CreateDialogParamA
LoadIconA
LoadCursorA
RegisterClassExA
GetWindowLongA
MessageBeep
SendDlgItemMessageA
EndDialog
IsIconic
GetWindowRect
ReleaseDC
PostQuitMessage
GetDC
GetMenu
LoadImageA
IsWindowEnabled
BeginPaint
EndPaint
SetFocus
DialogBoxParamA
GetSubMenu
SetDlgItemTextA
EnableWindow
EnableMenuItem
SetForegroundWindow
SetWindowTextA
GetSystemMetrics
LoadAcceleratorsA
LoadStringA
CreateWindowExA
DeleteMenu
CheckMenuItem
DestroyWindow
MoveWindow
ShowWindow
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
SendMessageA
GetDlgItemTextA

gdi32

GetPixel
SetPixel
CreateSolidBrush
DeleteObject
CreateCompatibleDC
SelectObject
GetObjectA
BitBlt
DeleteDC
SetDIBitsToDevice

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA

shell32

DragAcceptFiles
DragQueryFileA
DragFinish
ShellExecuteA

Sections

.text
Size: 276KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DGMPGDec/DGIndex.ini
DGMPGDec/DGIndexManual.html
.html
DGMPGDec/DGVfapi.txt
DGMPGDec/DGVfapi.vfp
.dll windows:4 windows x86 arch:x86

dc55df82b2689a79a8e07f86d6c0577a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
InterlockedIncrement
InterlockedDecrement
OutputDebugStringA
LoadLibraryA
FreeLibrary
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
HeapFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
GetCPInfo
GetStringTypeA
GetStringTypeW
SetFilePointer
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
SetStdHandle
FlushFileBuffers
CloseHandle

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Exports

Exports

vfGetPluginFunc
vfGetPluginInfo

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DGMPGDec/QuickStart.html
Engine/MediaCellEngine.exe
.exe windows:4 windows x86 arch:x86

84fea567b9c0a0768d6274d600db0301

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CloseHandle
CreateSemaphoreA
CreateThread
ExitProcess
FindAtomA
GetAtomNameA
ReleaseSemaphore
SetUnhandledExceptionFilter
Sleep
WaitForSingleObject

msvcrt

_close
_open
_read
_setmode
_strdup
_tempnam
_unlink
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_beginthreadex
_cexit
_filbuf
_ftime
_iob
_isctype
_lseeki64
_onexit
_open
_pctype
_setjmp
_setmode
_snprintf
_stricmp
_vsnprintf
abort
asin
atan
atexit
atof
atoi
calloc
ceil
cos
cosh
exit
exp
fclose
fflush
fgetc
floor
fopen
fprintf
fputc
fputs
fread
free
frexp
fscanf
fseek
ftell
fwrite
gmtime
ldexp
localtime
log
log10
longjmp
malloc
memchr
memcpy
memmove
memset
mktime
perror
pow
printf
putchar
puts
qsort
rand
realloc
rename
signal
sin
sinh
sprintf
sqrt
srand
sscanf
strchr
strcmp
strcpy
strcspn
strlen
strncpy
strpbrk
strrchr
strstr
strtod
strtok
strtol
strtoul
tan
tanh
time
tolower
toupper
vfprintf
vsprintf

Sections

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 779KB - Virtual size: 779KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Engine/MediaCellInfo.exe
.exe windows:4 windows x86 arch:x86

8d9d808640434191a9aa2e5c9a8c6e54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CloseHandle
CreateSemaphoreA
CreateThread
ExitProcess
FindAtomA
GetAtomNameA
GetTempFileNameA
GetTempPathA
ReleaseSemaphore
SetUnhandledExceptionFilter
Sleep
WaitForSingleObject

msvcrt

_close
_open
_read
_setmode
_strdup
_tempnam
_unlink
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_beginthreadex
_cexit
_filbuf
_ftime
_iob
_isctype
_lseeki64
_onexit
_open
_pctype
_setjmp
_setmode
_snprintf
_stricmp
_vsnprintf
abort
acos
asin
atan
atexit
atof
atoi
calloc
ceil
cos
cosh
exit
exp
fclose
fflush
fgetc
floor
fopen
fprintf
fputc
fputs
fread
free
frexp
fscanf
fseek
ftell
fwrite
gmtime
ldexp
localtime
log
log10
longjmp
malloc
memchr
memcpy
memmove
memset
mktime
perror
pow
printf
putchar
puts
qsort
rand
realloc
rename
signal
sin
sinh
sprintf
sqrt
srand
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strlen
strncpy
strpbrk
strrchr
strstr
strtod
strtok
strtol
strtoul
tan
tanh
time
tolower
toupper
vfprintf
vsprintf

Sections

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 748KB - Virtual size: 748KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
License.txt
MediaCell.ico
MediaCellEngine.log
MediaCelliPhoneConverter.exe
.exe windows:4 windows x86 arch:x86

198d1766cf9d8a9fb453b39438400b53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
GetWindowsDirectoryA
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
ReadFile
MultiByteToWideChar
LCMapStringA
GetStringTypeW

shell32

ShellExecuteA

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MediaCelliPhoneConverter.url
MediaInfo/MediaInfo.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 900KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 439KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SSEun.dat
Uninst.exe
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/Processes.dll
.dll windows:4 windows x86 arch:x86

f5edecae12589e705677a6e272ad0394

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
FreeLibrary
OpenProcess
CloseHandle
TerminateProcess
GlobalFree
lstrcpyA
GetCommandLineA
GetVersionExA
ExitProcess
GetModuleHandleA
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
UnhandledExceptionFilter
DisableThreadLibraryCalls
WriteFile
SetFilePointer
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
SetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
GetLocaleInfoA
VirtualProtect
GetSystemInfo

user32

FindWindowA
GetDesktopWindow
wsprintfA
UpdateWindow

Exports

Exports

FindDevice
FindProcess
KillProcess

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Uninstal.exe
.exe windows:4 windows x86 arch:x86

aa63262a51ced48e4eb3425d55979426

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetTempPathA
GetModuleFileNameA
GetShortPathNameA
GetVersionExA
CompareStringW
CompareStringA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
GetTimeZoneInformation
RtlUnwind
LocalFree
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
CreateProcessA
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
FreeLibrary
LoadLibraryA
GetProcAddress
GetExitCodeProcess
GetCurrentDirectoryA
GetFileType
SetCurrentDirectoryA
lstrcatA
lstrlenA
WinExec
CloseHandle
SetFilePointer
GetSystemDirectoryA
WriteFile
ReadFile
CreateFileA
GetLastError
GetEnvironmentVariableA
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
GetWindowsDirectoryA
FreeEnvironmentStringsW
SetFileAttributesA
GetFileAttributesA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapCompact
HeapAlloc
HeapReAlloc
HeapFree
RemoveDirectoryA
DeleteFileA
FindFirstFileA
FindNextFileA
SetEnvironmentVariableA

user32

SendMessageA
GetWindow
GetSystemMetrics
CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassA
CreateDialogParamA
GetDlgItem
DestroyWindow
PostQuitMessage
DefWindowProcA
CharToOemA
DialogBoxParamA
EndDialog
SetDlgItemTextA
TranslateMessage
DispatchMessageA
GetMessageA
IsDialogMessageA
SetWindowLongA
SetWindowTextA
MessageBoxA
wsprintfA
PeekMessageA

gdi32

DeleteObject
RemoveFontResourceA
GetObjectA
CreateFontIndirectA
GetStockObject

advapi32

RegSetValueExA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueA
RegOpenKeyA
RegCloseKey

shell32

SHGetPathFromIDListA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetMalloc

ole32

OleUninitialize
OleInitialize

comctl32

ord17

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VEMODE.hta
.js
VEMODE.htm
.html .js polyglot
Vobsub/VSFilter.dll
.dll regsvr32 windows:4 windows x86 arch:x86

b76ab1e775224829590499c1569f51df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesA
GetFileSize
GetFileTime
DeleteFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetThreadLocale
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
HeapAlloc
HeapReAlloc
VirtualProtect
VirtualQuery
RtlUnwind
GetCommandLineA
GetProcessHeap
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
SetStdHandle
GetFileType
HeapSize
HeapDestroy
HeapCreate
GetStdHandle
GetACP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
lstrcmpA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
DebugBreak
GetFullPathNameA
GetTempFileNameA
GetTempPathA
IsDBCSLeadByteEx
CreateFileA
GetVolumeInformationA
FindFirstFileA
FindNextFileA
FindClose
GetCurrentProcessId
SetErrorMode
DisableThreadLibraryCalls
GetVersionExA
GetTickCount
GetCurrentThread
FreeLibrary
VirtualAlloc
CreateSemaphoreA
GetCurrentThreadId
GetCurrentProcess
DuplicateHandle
VirtualFree
GetSystemInfo
ReleaseSemaphore
ResetEvent
InterlockedDecrement
InterlockedIncrement
GetStartupInfoA
GetModuleFileNameA
LoadLibraryA
lstrcpynA
OutputDebugStringA
GetModuleFileNameW
SetLastError
LoadLibraryW
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
SetThreadPriority
WaitForMultipleObjects
FindNextChangeNotification
Sleep
TerminateThread
FindCloseChangeNotification
FindFirstChangeNotificationA
MulDiv
CreateThread
SetEvent
CreateEventA
WaitForSingleObject
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
FindResourceA
LoadResource
LockResource
SizeofResource
lstrlenA
CompareStringW
CompareStringA
LeaveCriticalSection
EnterCriticalSection
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
HeapFree

user32

GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
SetActiveWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
GetKeyState
IsWindowVisible
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
PtInRect
GetDlgCtrlID
CallWindowProcA
SetWindowPos
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
GetWindowThreadProcessId
GetParent
GetLastActivePopup
IsWindowEnabled
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
CharLowerBuffA
UnionRect
SetRectEmpty
SetRect
IsRectEmpty
CopyRect
MessageBoxA
EqualRect
DefWindowProcA
ShowWindow
MoveWindow
GetWindowLongA
PeekMessageA
RegisterWindowMessageA
GetCursorPos
GetMessageA
TranslateMessage
DispatchMessageA
LoadIconA
DestroyIcon
SystemParametersInfoA
UnhookWindowsHookEx
PostQuitMessage
LoadCursorA
GetSysColorBrush
UnregisterClassA
SetCursor
ValidateRect
DestroyMenu
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
GetMenu
TabbedTextOutA
CallNextHookEx
SetForegroundWindow
SetTimer
PostMessageA
AppendMenuA
CreatePopupMenu
GetSysColor
GetClientRect
InvalidateRect
SetWindowLongA
GetDlgItem
GetDesktopWindow
GetWindowRect
DestroyWindow
CreateDialogParamA
EnableWindow
SendMessageA
GetDC
ReleaseDC
DrawTextA
CharUpperA
IntersectRect
OffsetRect
GetTopWindow

gdi32

PtVisible
RectVisible
TextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
GetDeviceCaps
SetWindowExtEx
GetStockObject
RestoreDC
SaveDC
ScaleWindowExtEx
TranslateCharsetInfo
SelectObject
SetTextColor
SetBkMode
SetMapMode
ScaleViewportExtEx
GetObjectA
ExtTextOutA
CreateBitmap
SetBkColor
GetClipBox
CloseFigure
EndPath
GetPath
AbortPath
BeginPath
GetTextExtentPoint32W
TextOutW
GetTextMetricsA
AddFontResourceA
CreateFontIndirectA
DeleteDC
CreateCompatibleDC
CreateDIBSection
DeleteObject

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegEnumKeyA
RegDeleteValueA
RegOpenKeyA
RegCreateKeyExA
RegCreateKeyA
RegSetValueA
RegSetValueExA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueA

shell32

SHGetPathFromIDListA
ShellExecuteA
Shell_NotifyIconA
SHBrowseForFolderA

shlwapi

PathRemoveFileSpecA
PathStripToRootA
PathFindExtensionA
PathFindFileNameA
PathIsUNCA
UrlUnescapeA

ole32

CLSIDFromString
StringFromGUID2
CoFreeUnusedLibraries
CoInitialize
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc

oleaut32

SysFreeString
VariantChangeType
SysAllocStringByteLen
VarBstrCmp
SysStringLen
OleCreatePropertyFrame
VariantClear
VariantInit
SysAllocString

wininet

InternetCloseHandle
InternetGetLastResponseInfoA
InternetOpenA
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetQueryDataAvailable
InternetSetStatusCallback
InternetOpenUrlA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA

Exports

Exports

DirectVobSub
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VirtualdubFilterModuleDeinit
VirtualdubFilterModuleInit2
_AvisynthPluginInit2@4
_AvisynthPluginInit@4

Sections

.text
Size: 580KB - Virtual size: 577KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_TEXT64
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Vobsub/vobsub.dll
.dll windows:4 windows x86 arch:x86

440dd73ebc9dced95efe7c587395f883

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathFindFileNameW
PathFindExtensionW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

mfc42u

ord5059
ord1720
ord5257
ord2438
ord2116
ord5273
ord2977
ord3142
ord3254
ord4459
ord3131
ord3257
ord2980
ord3076
ord2971
ord3825
ord3826
ord3820
ord3074
ord4075
ord4621
ord4419
ord3592
ord765
ord656
ord609
ord641
ord567
ord324
ord6195
ord5977
ord2634
ord2294
ord4229
ord1105
ord2631
ord4704
ord4370
ord1165
ord2371
ord2637
ord790
ord616
ord795
ord793
ord6466
ord6398
ord1197
ord3517
ord3516
ord4124
ord5679
ord6279
ord6278
ord537
ord812
ord4272
ord2756
ord941
ord5858
ord2810
ord922
ord5461
ord559
ord798
ord5188
ord533
ord4312
ord1924
ord5462
ord6403
ord2912
ord1989
ord2800
ord964
ord6313
ord4177
ord5444
ord3313
ord6006
ord5774
ord2598
ord3175
ord3178
ord3171
ord3506
ord532
ord6388
ord927
ord1560
ord5201
ord268
ord4197
ord861
ord3621
ord2406
ord5579
ord4040
ord2403
ord2015
ord4213
ord2570
ord4392
ord3577
ord1764
ord6362
ord2405
ord2016
ord4214
ord2573
ord4395
ord3634
ord692
ord2293
ord3744
ord942
ord940
ord3798
ord6140
ord925
ord2755
ord4273
ord6867
ord6868
ord3614
ord1634
ord2836
ord2099
ord3916
ord4183
ord536
ord2606
ord912
ord6654
ord6640
ord924
ord5852
ord6921
ord6919
ord4199
ord6865
ord6771
ord6655
ord6918
ord5589
ord3433
ord5627
ord2859
ord1808
ord3714
ord2290
ord2286
ord2354
ord2350
ord2291
ord6871
ord2508
ord361
ord2505
ord293
ord3871
ord1115
ord283
ord470
ord3716
ord2362
ord3494
ord2507
ord355
ord4269
ord6371
ord4480
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord4074
ord4692
ord5303
ord5285
ord5710
ord4616
ord3733
ord389
ord6113
ord3396
ord561
ord3948
ord2717
ord2914
ord353
ord665
ord6381
ord5180
ord354
ord610
ord6135
ord287
ord3785
ord2289
ord2355
ord3711
ord6107
ord6638
ord6399
ord3179
ord3087
ord4128
ord4292
ord2746
ord3084
ord4470
ord5142
ord3568
ord1194
ord1563
ord1248
ord1250
ord1571
ord600
ord826
ord269
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5276
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1767
ord4073
ord6048
ord2506
ord4992
ord4847
ord5261
ord3693
ord4418
ord3397
ord5286
ord1768
ord6051
ord3605
ord3569
ord4390
ord2567
ord699
ord397
ord3641
ord815
ord6390
ord5446
ord6379
ord5436
ord538
ord5706
ord823
ord540
ord858
ord535
ord800
ord825
ord3658
ord1240
ord342
ord1179
ord1570
ord1568
ord1173
ord6330
ord755

msvcrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
fwprintf
fwrite
_wremove
wcsncpy
memmove
_CxxThrowException
iswupper
_wcsnicmp
towlower
toupper
wcstod
wcsstr
iswspace
wcscmp
wcschr
swprintf
_CIfmod
wcstol
qsort
_wfindnext
fclose
__CxxFrameHandler
_wfindfirsti64
fread
_wfsopen
fgetpos
fsetpos
ftell
_findclose
_wfindfirst
realloc
malloc
fseek
_wfopen
_wcsicmp
wcstombs
_except_handler3
_ftol
_CIacos
free
_CIpow
iswalpha
iswdigit
swscanf
__RTDynamicCast
wcscat
wcslen
wcscpy
_purecall

kernel32

GetLocaleInfoW
lstrcpyW
CloseHandle
ConvertDefaultLocale
CreateFileW
LocalFree
LocalAlloc
EnumResourceLanguagesW
GetTempFileNameW
MultiByteToWideChar
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSection
IsDBCSLeadByteEx
EnterCriticalSection
LeaveCriticalSection
MulDiv
GetVersion
DebugBreak
GetTempPathW
WaitForSingleObject
GetModuleFileNameW
OutputDebugStringA
FreeLibrary
SetLastError
GetProcAddress
LoadLibraryW
GetModuleHandleA
DeviceIoControl
GetModuleHandleW
GetLastError

user32

ReleaseCapture
PtInRect
SetCapture
wsprintfW
GetDlgItem
GetWindowTextW
FillRect
IsChild
GetWindowRect
InvalidateRect
GetDC
ReleaseDC
EqualRect
MessageBoxW
CopyRect
IsRectEmpty
UnionRect
IntersectRect
SetRect
OffsetRect
EnableWindow
GetDlgCtrlID
SendMessageW
SetTimer
FrameRect

gdi32

GetDeviceCaps
TranslateCharsetInfo
DeleteDC
CreateCompatibleDC
SetBkMode
SetTextColor
SetMapMode
TextOutW
GetTextExtentPoint32W
CreateFontIndirectW
SelectObject
GetTextMetricsW
CloseFigure
EndPath
GetPath
AbortPath
BeginPath
CreateSolidBrush

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW

Exports

Exports

??0CBigFile@@QAE@XZ
??0CBufferedFile@@QAE@XZ
??0CCDecoder@@QAE@AAV0@@Z
??0CCDecoder@@QAE@VCString@@0@Z
??0CRenderedTextSubtitle@@QAE@AAV0@@Z
??0CRenderedTextSubtitle@@QAE@AAVCSimpleTextSubtitle@@@Z
??0CRenderedTextSubtitle@@QAE@XZ
??0CSTSStyleMap@@QAE@XZ
??0CSimpleTextSubtitle@@QAE@AAV0@@Z
??0CSimpleTextSubtitle@@QAE@XZ
??0CSubtitleEditorDlg@@QAE@AAVCSimpleTextSubtitle@@PAVCUIntArray@@PAVCWnd@@@Z
??0CVSApp@@QAE@XZ
??0CVobSubFile@@QAE@EP6A_NAAVCString@@N_N@Z@Z
??0CVobSubFilterDlg@@QAE@AAVCVobSubFile@@_NPAVCWnd@@@Z
??0CVobSubImage@@QAE@ABV0@@Z
??0CVobSubImage@@QAE@XZ
??0CubicEquation@@QAE@PAN@Z
??0Equation@@QAE@HPAN@Z
??0QuadricEquation@@QAE@PAN@Z
??0QuarticEquation@@QAE@PAN@Z
??0STSSegment@@QAE@ABV0@@Z
??0STSSegment@@QAE@HH@Z
??0STSSegment@@QAE@XZ
??0STSStyle@@QAE@ABV0@@Z
??0STSStyle@@QAE@XZ
??1CBigFile@@UAE@XZ
??1CBufferedFile@@UAE@XZ
??1CCDecoder@@UAE@XZ
??1CRenderedTextSubtitle@@UAE@XZ
??1CSTSStyleMap@@UAE@XZ
??1CSimpleTextSubtitle@@UAE@XZ
??1CSubtitleEditorDlg@@UAE@XZ
??1CVSApp@@UAE@XZ
??1CVobSubFile@@UAE@XZ
??1CVobSubFilterDlg@@UAE@XZ
??1CVobSubImage@@UAE@XZ
??1CubicEquation@@UAE@XZ
??1Equation@@UAE@XZ
??1QuadricEquation@@UAE@XZ
??1QuarticEquation@@UAE@XZ
??1STSSegment@@QAE@XZ
??1STSStyle@@QAE@XZ
??4CCDecoder@@QAEAAV0@AAV0@@Z
??4CRenderedTextSubtitle@@QAEAAV0@AAV0@@Z
??4CRenderedTextSubtitle@@QAEAAV0@AAVCSimpleTextSubtitle@@@Z
??4CSimpleTextSubtitle@@QAEAAV0@AAV0@@Z
??4CVobSubImage@@QAEAAV0@ABV0@@Z
??4STSSegment@@QAEXABV0@@Z
??4STSStyle@@QAEAAV0@ABV0@@Z
??4STSStyle@@QAEXAAUtagLOGFONTW@@@Z
??8STSStyle@@QAE_NAAV0@@Z
??BCVobSubFile@@QAE_NXZ
??_3@YAAAUtagLOGFONTA@@AAU0@AAVSTSStyle@@@Z
??_3@YAAAUtagLOGFONTW@@AAU0@AAVSTSStyle@@@Z
??_7CBigFile@@6B@
??_7CBufferedFile@@6B@
??_7CCDecoder@@6B@
??_7CRenderedTextSubtitle@@6B@
??_7CSTSStyleMap@@6B@
??_7CSimpleTextSubtitle@@6B@
??_7CSubtitleEditorDlg@@6B@
??_7CVSApp@@6B@
??_7CVobSubFile@@6B@
??_7CVobSubFilterDlg@@6B@
??_7CVobSubImage@@6B@
??_7CubicEquation@@6B@
??_7Equation@@6B@
??_7QuadricEquation@@6B@
??_7QuarticEquation@@6B@
??_FCVobSubFile@@QAEXXZ
?Add@CSimpleTextSubtitle@@QAEXVCString@@HH0000VCRect@@H@Z
?Add@CSimpleTextSubtitle@@QAEXVCString@@HH@Z
?AddFile@CBigFile@@UAE_NAAVCString@@@Z
?AddFile@CBufferedFile@@UAE_NAAVCString@@@Z
?AddFileBuffered@CBufferedFile@@UAE_NAAVCString@@@Z
?AddFileRAR@CBufferedFile@@UAE_NAAVCString@@@Z
?AddSegment@CVobSubImage@@AAEXAAUCOutline@@AAV?$CArray@EE@@AAV?$CArray@VCPoint@@AAV1@@@@Z
?AddStyle@CSimpleTextSubtitle@@QAEXVCString@@PAVSTSStyle@@@Z
?Alloc@CVobSubImage@@AAE_NHH@Z
?Append@CSimpleTextSubtitle@@QAEXAAV1@H@Z
?AppendWrite@CVobSubFile@@QAE_NVCString@@0_J@Z
?CalcAnimation@CRenderedTextSubtitle@@AAENNN_N@Z
?ChangeUnknownStylesToDefault@CSimpleTextSubtitle@@QAEXXZ
?CharSetLen@@3HA
?CharSetList@@3PAEA
?CharSetNames@@3PAPAGA
?ClearBorders@CVobSubImage@@QAEIXZ
?ClearImgCache@CVobSubFile@@QAEXXZ
?ClockBackward@CVobSubFile@@AAEXAAH0@Z
?ClockLfsr0Forward@CVobSubFile@@AAEXAAH@Z
?ClockLfsr1Forward@CVobSubFile@@AAEXAAH@Z
?ConfigDlg@CSimpleTextSubtitle@@QAE_NPAVCUIntArray@@PAUHWND__@@@Z
?ConfigDlg@CVobSubFile@@QAE_N_NPAUHWND__@@@Z
?ConvertToFrameBased@CSimpleTextSubtitle@@QAEXN@Z
?ConvertToSTS@CVobSubFile@@QAE_NAAVCSimpleTextSubtitle@@@Z
?ConvertToTimeBased@CSimpleTextSubtitle@@QAEXN@Z
?CopyStyles@CSimpleTextSubtitle@@QAE_NABVCSTSStyleMap@@_N@Z
?Create@CVobSubFile@@QAE_NVCString@@HHAAVCUIntArray@@1_N@Z
?CreateDefaultStyle@CSimpleTextSubtitle@@QAEXH_N@Z
?CreateSegments@CSimpleTextSubtitle@@QAEXXZ
?Decode@CVobSubImage@@QAE_NPAEHH_NHPAUtagRGBQUAD@@21@Z
?DecodeCC@CCDecoder@@QAEXPAEH_J@Z
?Decrypt@CVobSubFile@@AAEXPAEHH@Z
?Deinit@CRenderedTextSubtitle@@QAEXXZ
?DoDataExchange@CSubtitleEditorDlg@@MAEXPAVCDataExchange@@@Z
?DoDataExchange@CVobSubFilterDlg@@MAEXPAVCDataExchange@@@Z
?DrawPixels@CVobSubImage@@AAEXVCPoint@@HH@Z
?Empty@CRenderedTextSubtitle@@UAEXXZ
?Empty@CSimpleTextSubtitle@@UAEXXZ
?Empty@CVobSubFile@@QAEXXZ
?ExitInstance@CVSApp@@UAEHXZ
?ExtractCC@CCDecoder@@QAEXPAE_J@Z
?FindKey@CVobSubFile@@AAE_NXZ
?FindLfsr@CVobSubFile@@AAEHPBEH0AAH1@Z
?Free@CVobSubImage@@AAEXXZ
?FreeStyles@CSTSStyleMap@@QAEXXZ
?GetActualPal@CVobSubFile@@QAE_NPAUtagRGBQUAD@@AAH@Z
?GetChar@CBigFile@@UAEHXZ
?GetChar@CBufferedFile@@UAEHXZ
?GetCharSet@CSimpleTextSubtitle@@QAEHH@Z
?GetCustomPal@CVobSubFile@@QAE_NPAUtagRGBQUAD@@AAH@Z
?GetDefaultStyle@CSimpleTextSubtitle@@QAE_NAAVSTSStyle@@@Z
?GetDestrect@CVobSubFile@@QAEXAAVCRect@@@Z
?GetDestrect@CVobSubFile@@QAEXAAVCRect@@HH@Z
?GetFPS@CVobSubFile@@QBEMXZ
?GetFileVersion@@YA_KPBG@Z
?GetFrame@CVobSubFile@@QAE_NH@Z
?GetFrameByTimeStamp@CVobSubFile@@QAE_NH@Z
?GetFrameIdxByTimeStamp@CVobSubFile@@QAEHHPAH@Z
?GetImageRect@CVobSubFilterDlg@@IAE_NAAVCRect@@0@Z
?GetLangAlt@CVobSubFile@@QAE_NHAAVCString@@@Z
?GetLangAltL@CVobSubFile@@QAE_NHAAVCString@@@Z
?GetLangCount@CVobSubFile@@QAEHXZ
?GetLangCountL@CVobSubFile@@QAEHXZ
?GetLangIdx@CVobSubFile@@QAEHXZ
?GetLangIdxByShortName@CVobSubFile@@QAEHFH@Z
?GetLangIdxByShortNameL@CVobSubFile@@QAEHF@Z
?GetLangIdxL@CVobSubFile@@QAEHXZ
?GetLangInfo@CVobSubFile@@QAEHHAAVCString@@PAG@Z
?GetLangInfoL@CVobSubFile@@QAEHHAAVCString@@PAG@Z
?GetLength@CBigFile@@UAE_JXZ
?GetLength@CBufferedFile@@UAE_JXZ
?GetMBCSStr@CSimpleTextSubtitle@@QAE?AVCString@@H_N@Z
?GetMBCSStr@CSimpleTextSubtitle@@QAEXHPADH_N@Z
?GetMenuFileSize@CVobSubFile@@QAE_JXZ
?GetMessageMap@CSubtitleEditorDlg@@MBEPBUAFX_MSGMAP@@XZ
?GetMessageMap@CVobSubFilterDlg@@MBEPBUAFX_MSGMAP@@XZ
?GetNibble@CVobSubImage@@AAEEPAE@Z
?GetNumFiles@CBigFile@@UAE_JXZ
?GetNumFiles@CBufferedFile@@UAE_JXZ
?GetNumberOfRoots@Equation@@QAEHXZ
?GetOnlyShowForcedSubs@CVobSubFile@@QAE_NXZ
?GetOutlineList@CVobSubImage@@AAEPAV?$CList@PAUCOutline@@PAU1@@@AAVCPoint@@@Z
?GetPacket@CVobSubFile@@QAEPAEHAAH0@Z
?GetPacketInfo@CVobSubImage@@AAEXPAEHH@Z
?GetPosition@CBigFile@@UAE_JXZ
?GetPosition@CBufferedFile@@UAE_JXZ
?GetRuntimeClass@CSubtitleEditorDlg@@UBEPAUCRuntimeClass@@XZ
?GetSegment@CSimpleTextSubtitle@@QAEPBVSTSSegment@@H@Z
?GetSize@CVobSubFile@@QBE?AVCSize@@XZ
?GetStyle@CSimpleTextSubtitle@@QAEPAVSTSStyle@@H@Z
?GetSubtitle@CRenderedTextSubtitle@@AAEPAVCSubtitle@@H@Z
?GetTitle@CVobSubFile@@QAE?AVCString@@XZ
?GetUnicodeStr@CSimpleTextSubtitle@@QAE?AVCString@@H_N@Z
?GetUnicodeStr@CSimpleTextSubtitle@@QAEXHPAGH_N@Z
?GrabSegment@CVobSubImage@@AAEHHAAUCOutline@@0@Z
?Init@CRenderedTextSubtitle@@QAE_NVCSize@@@Z
?InitInstance@CVSApp@@UAEHXZ
?IsCustomPal@CVobSubFile@@QAE_NXZ
?IsEntryUnicode@CSimpleTextSubtitle@@QAE_NH@Z
?IsFontStyleEqual@STSStyle@@QAE_NAAV1@@Z
?IsForcedSub@CVobSubFile@@QAE_NH@Z
?IsolationAwareChooseColorW@CSubtitleEditorDlg@@QAEXH@Z
?LangL2P@CVobSubFile@@QAEHH@Z
?LangP2L@CVobSubFile@@QAEHH@Z
?LoadAppLangResourceDLL@CVSApp@@UAEPAUHINSTANCE__@@XZ
?MoveCursor@CCDecoder@@AAEXHH@Z
?OffsetCursor@CCDecoder@@AAEXHH@Z
?OnAboutBtn@CVobSubFilterDlg@@IAEXXZ
?OnAlignchk@CVobSubFilterDlg@@IAEXXZ
?OnBnClickedApply@CSubtitleEditorDlg@@IAEXXZ
?OnBnClickedButton1@CSubtitleEditorDlg@@IAEXXZ
?OnBnClickedButton2@CSubtitleEditorDlg@@IAEXXZ
?OnBnClickedButton3@CSubtitleEditorDlg@@IAEXXZ
?OnBnClickedButton4@CSubtitleEditorDlg@@IAEXXZ
?OnBnClickedButton5@CSubtitleEditorDlg@@IAEXXZ
?OnCbnEditchangeCombo3@CSubtitleEditorDlg@@IAEXXZ
?OnCbnEditchangeCombo4@CSubtitleEditorDlg@@IAEXXZ
?OnCbnEditchangeCombo5@CSubtitleEditorDlg@@IAEXXZ
?OnCbnSelchangeCombo5@CSubtitleEditorDlg@@IAEXXZ
?OnChangeEdit@CVobSubFilterDlg@@IAEXI@Z
?OnChanged@CRenderedTextSubtitle@@MAEXXZ
?OnChanged@CSimpleTextSubtitle@@MAEXXZ
?OnCheckCustomColors@CVobSubFilterDlg@@IAEXXZ
?OnColorButton@CVobSubFilterDlg@@IAEXI@Z
?OnCtlColor@CVobSubFilterDlg@@IAEPAUHBRUSH__@@PAVCDC@@PAVCWnd@@I@Z
?OnInitDialog@CSubtitleEditorDlg@@MAEHXZ
?OnInitDialog@CVobSubFilterDlg@@MAEHXZ
?OnLButtonDown@CVobSubFilterDlg@@IAEXIVCPoint@@@Z
?OnLButtonUp@CVobSubFilterDlg@@IAEXIVCPoint@@@Z
?OnMouseMove@CVobSubFilterDlg@@IAEXIVCPoint@@@Z
?OnOK@CSubtitleEditorDlg@@MAEXXZ
?OnOK@CVobSubFilterDlg@@MAEXXZ
?OnOpen@CVobSubFilterDlg@@IAEXXZ
?OnPaint@CSubtitleEditorDlg@@IAEXXZ
?OnPaint@CVobSubFilterDlg@@IAEXXZ
?OnRButtonDown@CVobSubFilterDlg@@IAEXIVCPoint@@@Z
?OnToolTipNotify@CVobSubFilterDlg@@IAEHIPAUtagNMHDR@@PAJ@Z
?OnTrCheck@CVobSubFilterDlg@@IAEXI@Z
?OnVScroll@CVobSubFilterDlg@@IAEXIIPAVCScrollBar@@@Z
?Open@CSimpleTextSubtitle@@QAE_NPAEHHVCString@@@Z
?Open@CSimpleTextSubtitle@@QAE_NPAVCStdioFile@@_NHVCString@@@Z
?Open@CSimpleTextSubtitle@@QAE_NVCString@@H0@Z
?Open@CVobSubFile@@QAE_NVCString@@_N@Z
?OpenNormal@CVobSubFile@@AAE_NVCString@@_N@Z
?OpenRAR@CVobSubFile@@AAE_NVCString@@@Z
?ParseEffect@CRenderedTextSubtitle@@AAEXPAVCSubtitle@@VCString@@@Z
?ParsePolygon@CRenderedTextSubtitle@@AAEPAGPAVCSubtitle@@PAGAAVSTSStyle@@@Z
?ParseString@CRenderedTextSubtitle@@AAEPAGPAVCSubtitle@@PAGAAVSTSStyle@@@Z
?ParseStyle@CRenderedTextSubtitle@@AAEPAGPAVCSubtitle@@PAGAAVSTSStyle@@2_N@Z
?Polygonize@CVobSubImage@@QAE_NAAV?$CArray@EE@@AAV?$CArray@VCPoint@@AAV1@@@H@Z
?Polygonize@CVobSubImage@@QAE_NAAVCString@@H@Z
?PreTranslateMessage@CSubtitleEditorDlg@@MAEHPAUtagMSG@@@Z
?PutChar@CCDecoder@@AAEXG@Z
?Read@CBigFile@@UAE_JPAXI@Z
?Read@CBufferedFile@@UAE_JPAXI@Z
?ReadBlock@CVobSubFile@@AAE_NPAE@Z
?ReadIdx@CVobSubFile@@QAE_NVCString@@AAH@Z
?ReadIfo@CVobSubFile@@QAE_NVCString@@_N@Z
?RefreshImage@CVobSubFilterDlg@@IAEXXZ
?RemoveAll@CBigFile@@UAEXXZ
?RemoveAll@CBufferedFile@@UAEXXZ
?Render@CRenderedTextSubtitle@@QAE_NAAUtagBITMAP@@HN@Z
?Render@CRenderedTextSubtitle@@QAE_NAAUtagBITMAP@@HNAAVCRect@@@Z
?Salt@CVobSubFile@@AAEXQBEAAH1@Z
?SaveAs@CSimpleTextSubtitle@@QAE_NVCString@@W4exttype@@N_N@Z
?SaveAs@CVobSubFile@@QAE_NVCString@@@Z
?SaveAsBMP@CVobSubFile@@QAE_NVCString@@H@Z
?SaveAsWinSubMux@CVobSubFile@@AAE_NAAVCStdioFile@@VCString@@@Z
?SaveDisp@CCDecoder@@AAEX_J@Z
?SearchSub@CSimpleTextSubtitle@@QAEHHN@Z
?SearchSubs@CSimpleTextSubtitle@@QAEPBVSTSSegment@@HNPAH0@Z
?Seek@CBigFile@@UAE_J_J0@Z
?Seek@CBufferedFile@@UAE_J_J0@Z
?SetAlignment@CVobSubFile@@QAEX_NHHHH@Z
?SetCallback@CVobSubFile@@QAEXP6A_NAAVCString@@N_N@Z@Z
?SetCustomPal@CVobSubFile@@QAEXPAUtagRGBQUAD@@H@Z
?SetCustomPal@CVobSubFile@@QAEX_N@Z
?SetDefault@STSStyle@@QAEXXZ
?SetDefaultStyle@CSimpleTextSubtitle@@QAE_NAAVSTSStyle@@@Z
?SetLangIdx@CVobSubFile@@QAEXH@Z
?SetLangIdxL@CVobSubFile@@QAEXH@Z
?SetMenuFileSize@CVobSubFile@@QAEX_J@Z
?SetOnlyShowForcedSubs@CVobSubFile@@QAEX_N@Z
?SetStr@CSimpleTextSubtitle@@QAEXHVCString@@@Z
?SetStylesToUnicode@CSimpleTextSubtitle@@QAEX_N@Z
?SetfAbort@CVobSubFile@@QAEXPA_N@Z
?SetupDialog@CVobSubFilterDlg@@IAEXXZ
?SetupLangCombo@CVobSubFilterDlg@@IAEXXZ
?Solve@CubicEquation@@UAEHXZ
?Solve@Equation@@UAEHXZ
?Solve@QuadricEquation@@UAEHXZ
?Solve@QuarticEquation@@UAEHXZ
?Sort@CSimpleTextSubtitle@@QAEX_N@Z
?SplitOutline@CVobSubImage@@AAEXAAUCOutline@@00@Z
?SubPosSortProc@CVobSubFile@@CAHPBX0@Z
?TranslateEnd@CSimpleTextSubtitle@@QAEHHN@Z
?TranslateSegmentEnd@CSimpleTextSubtitle@@QAEHHN@Z
?TranslateSegmentStart@CSimpleTextSubtitle@@QAEHHN@Z
?TranslateStart@CSimpleTextSubtitle@@QAEHHN@Z
?TrimSubImage@CVobSubImage@@AAEXXZ
?UpdateStyle@CSubtitleEditorDlg@@QAEXPAVSTSStyle@@_N@Z
?WriteIdx@CVobSubFile@@QAE_NVCString@@@Z
?_GetBaseClass@CSubtitleEditorDlg@@KGPAUCRuntimeClass@@XZ
?_GetBaseMessageMap@CSubtitleEditorDlg@@KGPBUAFX_MSGMAP@@XZ
?_GetBaseMessageMap@CVobSubFilterDlg@@KGPBUAFX_MSGMAP@@XZ
?_messageEntries@CSubtitleEditorDlg@@0QBUAFX_MSGMAP_ENTRY@@B
?_messageEntries@CVobSubFilterDlg@@0QBUAFX_MSGMAP_ENTRY@@B
?buildsturm@Equation@@AAEXPAUPoly@1@@Z
?classCSubtitleEditorDlg@CSubtitleEditorDlg@@2UCRuntimeClass@@B
?evalpoly@Equation@@AAENPAUPoly@1@N@Z
?exttypestr@@3PAPAGA
?find_lang@CVobSubFile@@SAHG@Z
?lang_tbl@CVobSubFile@@2PAUlang_type@1@A
?messageMap@CSubtitleEditorDlg@@1UAFX_MSGMAP@@B
?messageMap@CVobSubFilterDlg@@1UAFX_MSGMAP@@B
?modp@Equation@@AAEHPAUPoly@1@00@Z
?modrf@Equation@@AAE_NPAUPoly@1@NNPAN@Z
?numchanges@Equation@@AAEHPAUPoly@1@N@Z
?numroots@Equation@@AAEHPAUPoly@1@AAH1@Z
?sbisect@Equation@@AAEXPAUPoly@1@NNHHPAN@Z
?textsubConfigure@@YA_NPAUtextsubFilterData@@@Z
?vobsubCloseTextFile@@YAXPAVCStdioFile@@@Z
?vobsubDeInitMFD@@YAXPAUMyFilterData@@@Z
?vobsubFetch@@YA_NPAUMyFilterData@@AAVCRect@@H@Z
?vobsubGetSubFileNames@@YAXVCString@@AAVCStringArray@@AAV?$CArray@USubFile@@AAU1@@@@Z
?vobsubInitMFD@@YA_NPAUMyFilterData@@_N@Z
?vobsubOpenTextFile@@YAPAVCStdioFile@@VCString@@PA_N_N@Z
Configure
Cutter
Editor
Joiner
_AvisynthPluginInit@4

Sections

.text
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
apbarSp.infima.exe
.exe windows:4 windows x86 arch:x86

c922e147e9f3c3784bdc24731bb4e675

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriority
GetCurrentThread
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetExitCodeProcess
WaitForSingleObject
CloseHandle
CreateProcessA
GetPriorityClass
GetCurrentProcess
GetCommandLineA
lstrcmpiA
DeleteFileA
SetFileAttributesA
lstrcatA
MoveFileA
lstrcpyA
GetShortPathNameA
GetWindowsDirectoryA
GetUserDefaultLangID
GetModuleHandleA
GetStartupInfoA
ExitProcess
InitializeCriticalSection
DeleteCriticalSection
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
LeaveCriticalSection
EnterCriticalSection
ReadFile
GetFileSize
GetVersionExA
EnumResourceNamesA
SetCurrentDirectoryA
RemoveDirectoryA
GetModuleFileNameA
GetTempPathA
lstrlenA
GetProcAddress
CreateDirectoryA

user32

wsprintfA
CharNextA

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 476KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ask_already_installed.exe
.exe windows:4 windows x86 arch:x86

1266c5786142cd017e385a436ba42c30

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetReadFile
InternetOpenA
InternetOpenUrlA

kernel32

SetHandleCount
SetStdHandle
ReadFile
LoadLibraryA
MultiByteToWideChar
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
WideCharToMultiByte
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetLastError
SetFilePointer
FlushFileBuffers
CloseHandle
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cat.exe
config.xml
defaultConfig.xml
enc.bat
.bat .vbs
help.chm
.chm
images/bg_convertor.PNG
.png
images/bgrad.png
.png
images/convertor/browse.jpg
.jpg
images/convertor/browse_on.jpg
.jpg
images/convertor/close.jpg
.jpg
images/convertor/close_on.jpg
.jpg
images/convertor/enable.jpg
.jpg
images/convertor/enable_on.jpg
.jpg
images/convertor/minimize.jpg
.jpg
images/convertor/minimize_on.jpg
.jpg
images/convertor/psp_BWP_on.jpg
.jpg
images/convertor/psp_BW_on.jpg
.jpg
images/convertor/psp_FWP_on.jpg
.jpg
images/convertor/psp_FW_on.jpg
.jpg
images/convertor/start.jpg
.jpg
images/convertor/start_on.jpg
.jpg
images/convertor/video converter10.png
.png
images/enable.PNG
.png
images/iphone.PNG
.png
images/markin.jpg
.jpg
images/markout.jpg
.jpg
images/next.jpg
.jpg
images/pixel.png
.png
images/prev.jpg
.jpg
images/reel.jpg
.jpg
images/start_1.JPG
.jpg
images/start_on.jpg
.jpg
mediainfo.log
minfo.log
mmshot
register_ask.exe
.exe windows:4 windows x86 arch:x86

1266c5786142cd017e385a436ba42c30

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetReadFile
InternetOpenA
InternetOpenUrlA

kernel32

SetHandleCount
SetStdHandle
ReadFile
LoadLibraryA
MultiByteToWideChar
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
WideCharToMultiByte
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetLastError
SetFilePointer
FlushFileBuffers
CloseHandle
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
register_no_ask.exe
.exe windows:4 windows x86 arch:x86

1266c5786142cd017e385a436ba42c30

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetReadFile
InternetOpenA
InternetOpenUrlA

kernel32

SetHandleCount
SetStdHandle
ReadFile
LoadLibraryA
MultiByteToWideChar
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
WideCharToMultiByte
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetLastError
SetFilePointer
FlushFileBuffers
CloseHandle
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
shutdown.bat
sseexec.dat
.exe windows:4 windows x86 arch:x86

8f309569d284fc0c6ce47bf15469a7f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord588
ord698
MethCallEngine
ord516
ord517
ord519
ord669
ord593
ord300
ord594
ord595
ord303
ord304
ord598
ord306
ord521
ord309
ord631
ord632
ord525
ord526
EVENT_SINK_AddRef
ord527
ord529
DllFunctionCall
ord563
ord567
EVENT_SINK_Release
ord600
ord310
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
ord606
ord607
ord530
ord608
ord716
ord531
ord532
ord319
ord533
ProcCallEngine
ord535
ord536
ord537
ord645
ord648
ord571
ord681
ord576
ord577
ord685
ord578
ord100
ord579
ord320
ord321
ord616
ord617
ord618
ord619
ord546
ord580
ord581

Sections

.text
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
success.exe
.exe windows:4 windows x86 arch:x86

1266c5786142cd017e385a436ba42c30

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetReadFile
InternetOpenA
InternetOpenUrlA

kernel32

SetHandleCount
SetStdHandle
ReadFile
LoadLibraryA
MultiByteToWideChar
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
WideCharToMultiByte
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetLastError
SetFilePointer
FlushFileBuffers
CloseHandle
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tools/register.exe
.exe windows:4 windows x86 arch:x86

492138ce5716142bee4b8c6ddf19a2c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetReadFile
InternetOpenA
InternetOpenUrlA

kernel32

SetHandleCount
SetStdHandle
ReadFile
LoadLibraryA
MultiByteToWideChar
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapReAlloc
HeapSize
WideCharToMultiByte
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
GetLastError
SetFilePointer
FlushFileBuffers
CloseHandle
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tools/register_y.exe
.exe windows:4 windows x86 arch:x86

492138ce5716142bee4b8c6ddf19a2c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetReadFile
InternetOpenA
InternetOpenUrlA

kernel32

SetHandleCount
SetStdHandle
ReadFile
LoadLibraryA
MultiByteToWideChar
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapReAlloc
HeapSize
WideCharToMultiByte
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
GetLastError
SetFilePointer
FlushFileBuffers
CloseHandle
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vemode.cfg
vm.htj
.js
vmscreen.jpg

Sharing

General

Malware Config

Signatures

Files

7fa974366048f9c551ef45714595665e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 60KB

.rsrc Size: 3KB - Virtual size: 3KB

2dfc6a992d004b736e85c64219a88b4a

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1024B - Virtual size: 867B

.data Size: 512B - Virtual size: 172B

.reloc Size: 512B - Virtual size: 266B

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1KB - Virtual size: 1KB

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 784B

.data Size: 512B - Virtual size: 100B

.reloc Size: 1024B - Virtual size: 520B

7fa974366048f9c551ef45714595665e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 60KB

.rsrc
Size: 3KB - Virtual size: 3KB

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1024B - Virtual size: 867B

.data
Size: 512B - Virtual size: 172B

.reloc
Size: 512B - Virtual size: 266B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 784B

.data
Size: 512B - Virtual size: 100B

.reloc
Size: 1024B - Virtual size: 520B

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 56KB

.rsrc
Size: 28KB - Virtual size: 28KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 784B

.data
Size: 512B - Virtual size: 100B

.reloc
Size: 1024B - Virtual size: 520B

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

59:ab:9b:2e:e6:79:14:b7:df:4c:47:95:40:de:c5:61
Certificate

.text
Size: 512B - Virtual size: 510B

.rdata
Size: 1024B - Virtual size: 533B

.data
Size: 512B - Virtual size: 20B

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

3d:f8:af:7b:51:bb:b2:8e:d5:80:38:2d:fa:a1:6e:37
Certificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate