941b4b91aff96f60ec0320d49c19d935_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

941b4b91aff96f60ec0320d49c19d935_JaffaCakes118
Size

20.1MB
MD5

941b4b91aff96f60ec0320d49c19d935
SHA1

962f412ea87dffa92abc22c2a64dc42ad8a9bc45
SHA256

dd7bf83a1acb2ada6b1f7b7ef783114c2633932e72dcc9d6020627b33ca86867
SHA512

63efa46cab55edc4f6c7f6115830c6a4a2b99156169e311ed976f6ff1b65d4bd05b9353d2afb8be980a667075c7ed73227ce5413a317685d109fe6647897df3c
SSDEEP

393216:QNvXrBi/aCX8xQ6SSQGNarcl0SCd/nPwnvFylN7sFpHN9Mh78oXIxWBq:QdrB+aCmpvNarShw37iHb7oQ

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/$R0/Source/npaliedit.dll	acprotect

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/$R0/Source/npaliedit.dll	upx
static1/unpack001/$TEMP/SogouExplorer/wakeupse.exe	upx

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack006/npprintscreen.dll
unpack001/$PLUGINSDIR/FindProcDLL.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/KillProcDLL.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll

Files

941b4b91aff96f60ec0320d49c19d935_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b729b61eb1515fcf7b3e511e4e66258b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA

user32

ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 836KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$APPDATA/SogouExplorer/Extension/$R0
$APPDATA/SogouExplorer/Extension/com.sogou.privateSurf.sext
.zip
__key
__sign
backgroundpage.html
.js
default-big.png
.png
default.ico
manifest.xml
.xml
privacy_on.ico
thumbs.db
$APPDATA/SogouExplorer/Extension/com.sogou.quicklink.sext
.zip
__key
__sign
backgroundpage.html
default-big.png
.png
default.ico
manifest.xml
.xml
popup.html
.html .js polyglot
$APPDATA/SogouExplorer/Extension/com.sogou.secondAccount.sext
.zip
__key
__sign
backgroundpage.html
default-big.png
.png
default.ico
manifest.xml
.xml
$APPDATA/SogouExplorer/Extension/com.sogou.share.sext
.zip
__key
__sign
backgroundpage.html
.js
default-big.png
.png
default.ico
manifest.xml
.xml
qzone.png
.png
renren.png
.png
sina.png
sohu.ico
tencent.png
.png
thumbs.db
$APPDATA/SogouExplorer/Extension/com.sogou.snapTaker.sext
.zip
__key
__sign
background.html
.html
callback.html
.html
default-big.png
.png
default.ico
manifest.xml
.xml
npprintscreen.dll
.dll windows:4 windows x86 arch:x86

0ef4b752d5e8021e94272e0ace79747d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\develope\trunk\bin\MultiProcessDebug\Data\Extension\com.sogou.snapTaker\0.0.0.1\npPrintScreen.pdb

Imports

kernel32

GetProcAddress
GetModuleHandleA
RtlUnwind
GetProcessHeap
GetVersionExA
GetCommandLineA
CreateThread
ResumeThread
CloseHandle
ExitThread
HeapFree
HeapAlloc
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
WriteFile
GetStdHandle
GetModuleFileNameA
ExitProcess
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
TlsAlloc
TlsSetValue
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
LoadLibraryA
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
TlsFree
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
WideCharToMultiByte
FindResourceExW
MulDiv
GlobalLock
GetLastError
GlobalUnlock
GetVersionExW
FindResourceW
SizeofResource
LockResource
GlobalAlloc
GlobalFree
LoadResource
FlushInstructionCache
EnterCriticalSection
SetLastError
GetModuleHandleExW
LeaveCriticalSection
GetCurrentProcess
GetCurrentThreadId
RaiseException
TlsGetValue
IsProcessorFeaturePresent
InterlockedCompareExchange
CreateFileA
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapSize

user32

GetKeyState
IsRectEmpty
UnionRect
SetForegroundWindow
SetFocus
DispatchMessageW
GetWindowTextW
EmptyClipboard
CopyRect
CloseClipboard
GetWindowDC
SetCursor
InflateRect
GetWindowTextLengthW
DestroyWindow
UpdateWindow
GetMessageW
OpenClipboard
SetTimer
SetClipboardData
HideCaret
GetClipboardData
SetRectEmpty
ShowWindow
EnumDisplayMonitors
MonitorFromPoint
IsClipboardFormatAvailable
GetSystemMetrics
KillTimer
TranslateMessage
GetMonitorInfoW
PostQuitMessage
SetWindowTextW
GetWindowRect
IntersectRect
FindWindowW
DrawTextW
SetWindowPos
GetDesktopWindow
FillRect
SendMessageW
ReleaseCapture
PeekMessageW
GetCursorPos
IsWindowVisible
CreateWindowExW
PostMessageW
GetClientRect
IsWindow
EndPaint
ReleaseDC
InvalidateRect
ClientToScreen
BeginPaint
GetParent
SetCapture
GetDC
TrackMouseEvent
LoadCursorW
PtInRect
ScreenToClient
GetClassInfoExW
CallWindowProcW
RegisterClassExW
GetWindowLongW
RegisterHotKey
SetWindowLongW
DefWindowProcW
wsprintfW
UnregisterHotKey
UnregisterClassA

gdi32

GetBkMode
EnumFontFamiliesW
Ellipse
SetPixel
GetBitmapDimensionEx
SetTextColor
GetTextExtentExPointW
CreatePen
SetBkMode
LineTo
GetPixel
MoveToEx
CreateFontIndirectW
GetTextExtentPointW
StretchBlt
Rectangle
GetStockObject
GetDeviceCaps
GetCurrentObject
StrokeAndFillPath
EndPath
CreateCompatibleDC
DeleteObject
GetClipBox
GetObjectW
DeleteDC
SelectObject
BitBlt
SetViewportOrgEx
CreateCompatibleBitmap
CreateSolidBrush
StrokePath

comdlg32

GetSaveFileNameW
GetOpenFileNameW
ChooseColorW

ole32

CreateStreamOnHGlobal

gdiplus

GdipDisposeImageAttributes
GdipGetImageEncodersSize
GdipCreateBitmapFromStream
GdipSaveImageToFile
GdiplusStartup
GdipCloneImage
GdipCreateBitmapFromHBITMAP
GdipCreateHBITMAPFromBitmap
GdipGetImageEncoders
GdipDisposeImage
GdipCreateImageAttributes
GdipDeletePen
GdipAlloc
GdipAddPathLine2I
GdipDrawEllipseI
GdipFree
GdipCreateFromHDC
GdipDeleteBrush
GdipDeletePath
GdipFillEllipseI
GdipDeleteGraphics
GdipCreateSolidFill
GdipSetSmoothingMode
GdipSetPenLineJoin
GdipSetPenEndCap
GdipDrawPath
GdipCreatePen1
GdipSetPenWidth
GdipSetPenStartCap
GdipCloneBrush
GdipFillPath
GdipSetImageAttributesColorMatrix
GdipDrawImageRectRectI
GdipSaveImageToStream
GdipCreatePath

comctl32

ord17

msimg32

TransparentBlt
AlphaBlend

wininet

InternetConnectA
InternetSetOptionA
InternetCloseHandle
InternetReadFile
InternetQueryDataAvailable
HttpSendRequestA
HttpOpenRequestA
InternetOpenA
HttpQueryInfoA

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pop.html
.html .js polyglot
res/ajax-loader.gif
.gif
res/bg_rextop.jpg
.jpg
res/btn_at.gif
.gif
res/logo.png
.png
res/logo__.png
.png
res/oauth.css
script/background.js
.js
script/consumer.js
.js
script/contentscript.js
script/error_handler.js
.js
script/jquery-1.6.1.min.js
.js
script/md5-min.js
.js
script/oauth.js
.js
script/oauth_form.js
.js
script/oauth_observer.js
.js
script/oauth_observer_renren.js
.js
script/oauth_observer_sina.js
.js
script/oauth_observer_tencent.js
.js
script/oauth_worker.js
.js
script/oauth_worker_renren.js
.js
script/oauth_worker_tencent.js
.js
script/sha1.js
.js
script/tranfer_thumdata.js
.js
script/xml2json.js
.js
signin.html
.js
$APPDATA/SogouExplorer/Extension/com.sogou.translator.sext
.zip
translate.html
.html .js polyglot
__key
__sign
backgroundpage.html
.js
css/translate.css
default-big.png
.png
default.ico
google_translate.html
.html .js polyglot
images/ajax-loader.gif
.gif
images/btn_left.png
.png
images/btn_left_active.png
.png
images/btn_left_hover.png
.png
images/btn_mid.png
.png
images/btn_mid_active.png
.png
images/btn_mid_hover.png
.png
images/btn_right.png
.png
images/btn_right_active.png
.png
images/btn_right_hover.png
.png
images/change.png
.png
images/swap.png
.png
images/swap_hover.png
.png
images/thumbs.db
images/title_option_google.jpg
.jpg
images/title_option_youdao.jpg
.jpg
images/translate_logo.gif
.gif
js/before_googleapi.js
.js
js/before_youdaoapi.js
js/jquery.js
.js
js/translate.js
.js
js/translate.js_
.js
js/youdao_translate.js
.js
manifest.xml
.xml
translate.html
.html .js polyglot
translator.js
.js
youdao_translate.html
.html .js polyglot
$APPDATA/SogouExplorer/Extension/extension.ini
$APPDATA/SogouExplorer/FavIcon/FavorIcon.db
$APPDATA/SogouExplorer/LocalPage/Error404.zip
.zip
arrow.gif
.gif
bodybg.gif
.gif
error_ie.html
.js
error_wk.html
.html .js polyglot
ico404.gif
.gif
version
$APPDATA/SogouExplorer/LocalPage/MyFavorStartPage.zip
.zip
ajax_loader.gif
.gif
b10.jpg
.jpg
b20.jpg
.jpg
b30.jpg
.jpg
b40.jpg
.jpg
b50.jpg
.jpg
b60.jpg
.jpg
b70.jpg
.jpg
b80.jpg
.jpg
back_color_1.png
.png
back_color_2.png
.png
back_color_3.png
.png
back_color_4.png
.png
back_color_5.png
.png
back_color_6.png
.png
change_skin_back_big.png
.png
change_skin_btn.png
.png
city.js
.js
img/lst-close-bottom.png
.png
img/lst-close-center.png
.png
img/lst-close-top.png
.png
img/lst-hover.png
.png
img/page-footer.png
.png
img/site-nav/book.png
.png
img/site-nav/game.png
.png
img/site-nav/music.png
.png
img/site-nav/popular.png
.png
img/site-nav/sepr-01.png
.png
img/site-nav/sepr-02.png
.png
img/site-nav/sepr-03.png
.png
img/site-nav/sepr-04.png
.png
img/site-nav/sepr-05.png
.png
img/site-nav/sepr-06.png
.png
img/site-nav/shopping.png
.png
img/site-nav/video.png
.png
index1.html
.html .js polyglot
index2.html
.html .js polyglot
jquery.min.js
.js
loading.gif
.gif
loading.png
.png
loading_back.png
.png
logo_baidu.png
.png
logo_google.png
.png
logo_sogou.png
.png
logo_taobao.png
.png
my.css
new/change-city.png
.png
new/change_search_btn.png
.png
new/often-add.png
.png
new/often_block_back_hover.png
.png
new/search-input.png
.png
new/search_bar_back.png
.png
new/top-nav-bg.png
.png
new/weather-bg.png
.png
new/weather-btn.png
.png
often_block_back.png
.png
often_block_back_hover.png
.png
often_del.png
.png
often_del_act.png
.png
often_del_hover.png
.png
often_option.png
.png
often_option_act.png
.png
often_option_hover.png
.png
often_split.png
.png
plus.png
.png
sugg.css
sugg_ajaj.js
.js
version
webpage.png
.png
$APPDATA/SogouExplorer/LocalPage/PassportLogin.zip
.zip
$APPDATA/SogouExplorer/LocalPage/WKInspector.zip
.zip
$APPDATA/SogouExplorer/Skin/bluesky.setheme
.zip
$APPDATA/SogouExplorer/Skin/dolphin.setheme
.zip
$APPDATA/SogouExplorer/Skin/miss.setheme
.zip
$APPDATA/SogouExplorer/Skin/popo.setheme
.zip
$APPDATA/SogouExplorer/Skin/小清新.setheme
.zip
$APPDATA/SogouExplorer/Skin/搜狗浏览器 2010.seskin
.zip
$APPDATA/SogouExplorer/Skin/搜狗浏览器IE经典版.seskin
.zip
$APPDATA/SogouExplorer/Skin/搜狗浏览器‘Chrome’版.seskin
.zip
$APPDATA/SogouExplorer/Skin/搜狗浏览器水晶全透明版.seskin
.zip
$APPDATA/SogouExplorer/Skin/炫紫.setheme
.zip
$APPDATA/SogouExplorer/Skin/粉条纹.setheme
.zip
$APPDATA/SogouExplorer/Temp/sogouexplorerup.exe
.exe windows:4 windows x86 arch:x86

c67963258f594416b958bfc455aec22f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\SE\3.1_3624\bin\MultiProcessRelease\SogouExplorerUp.pdb

Imports

gdiplus

GdipFree
GdipDisposeImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdipCloneImage
GdipAlloc

kernel32

MoveFileExW
RaiseException
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
lstrlenW
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
SetLastError
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
CreateMutexW
CreateDirectoryW
GetTickCount
Sleep
CreateFileW
GetFileSize
ReadFile
WriteFile
FindFirstFileW
FindClose
WideCharToMultiByte
GetVersionExW
OpenProcess
CreateThread
MapViewOfFile
UnmapViewOfFile
lstrlenA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
LoadResource
SetConsoleCtrlHandler
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCurrentThread
TlsFree
TlsSetValue
TlsAlloc
CreateProcessW
CloseHandle
FindResourceW
CreateFileMappingW
SizeofResource
LockResource
GlobalAlloc
GlobalFree
EnterCriticalSection
LeaveCriticalSection
DeleteFileW
SetErrorMode
LoadLibraryW
InitializeCriticalSection
GetProcAddress
EnumSystemLocalesA
IsValidLocale
SetEndOfFile
TlsGetValue
GetModuleFileNameA
GetStdHandle
ExitProcess
GetModuleHandleA
HeapSize
FatalAppExitA
HeapCreate
HeapDestroy
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
UnhandledExceptionFilter
SetFilePointer
TerminateProcess
RtlUnwind
HeapReAlloc
GetThreadLocale
GetLocaleInfoA
GetStringTypeA
VirtualQuery
GetACP
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetVersionExA
QueueUserWorkItem
SetFilePointerEx
SetFileAttributesW
GetFileAttributesW
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
GetTimeZoneInformation
SetStdHandle
MoveFileW
AllocConsole
ResumeThread
SuspendThread
GetLocalTime
CreateEventW
SystemTimeToFileTime
SetEvent
InterlockedExchangeAdd
WaitForSingleObject
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA

user32

BeginPaint
EndPaint
SetWindowLongW
SystemParametersInfoW
MapWindowPoints
GetDlgItem
ShowWindow
GetClientRect
GetSystemMetrics
LoadImageW
GetParent
GetWindow
SetWindowPos
SetWindowTextW
wsprintfA
UnregisterClassA
GetMessageW
PeekMessageW
SetTimer
GetWindowLongW
SendMessageW
EndDialog
wsprintfW
PostThreadMessageW
GetWindowRect
CharNextW
GetLastInputInfo
PostMessageW
DefWindowProcW
GetActiveWindow
DialogBoxParamW
DestroyWindow

gdi32

SelectObject
DeleteDC
DeleteObject
CreateCompatibleDC

advapi32

AllocateAndInitializeSid
FreeSid
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
CheckTokenMembership
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW

shell32

ord155
SHGetPathFromIDListW
SHGetFolderLocation
ShellExecuteExW
ord165
SHGetFolderPathW

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize
CreateStreamOnHGlobal

oleaut32

VarUI4FromStr
SysFreeString

shlwapi

SHDeleteValueW
SHGetValueA
PathFileExistsW
SHSetValueW

comctl32

InitCommonControlsEx

msimg32

AlphaBlend

psapi

GetModuleFileNameExW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

wininet

InternetOpenA
InternetSetOptionW
InternetConnectW
HttpOpenRequestW
HttpAddRequestHeadersA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenW
InternetOpenUrlA
InternetGetCookieA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
InternetQueryDataAvailable
InternetSetOptionA
InternetQueryOptionA

ws2_32

__WSAFDIsSet
select
inet_addr
WSAStartup
recv
accept
ioctlsocket
listen
ntohs
WSACleanup
inet_ntoa
getsockname
WSAGetLastError
connect
htons
socket
gethostbyname
sendto
bind
send
closesocket
shutdown

Sections

.text
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/FindProcDLL.dll
.dll windows:4 windows x86 arch:x86

e26d7460d0c04056b9226a899477ba4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
CloseHandle
OpenProcess
LoadLibraryW
GetProcAddress
GetVersionExW
GlobalFree
lstrcpyW
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
VirtualAlloc
RtlUnwind
GetStringTypeA
GetStringTypeW
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
FlushFileBuffers

Exports

Exports

FindProc

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:5 windows x86 arch:x86

cd90e33ffbc335413a25300c682c83df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
GetModuleHandleW
GlobalLock
GlobalUnlock
GetCurrentDirectoryW
SetCurrentDirectoryW
GetPrivateProfileIntW
GetPrivateProfileStringW
lstrcatW
WritePrivateProfileStringW
lstrcpynW
lstrlenW
lstrcpyW
GlobalFree
GlobalAlloc

user32

OpenClipboard
DestroyIcon
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
SetWindowLongW
GetClientRect
SetWindowRgn
LoadIconW
LoadImageW
CreateWindowExW
MapDialogRect
GetClipboardData
GetWindowRect
CreateDialogParamW
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
SetCursor
DrawTextW
GetWindowLongW
DrawFocusRect
CallWindowProcW
PostMessageW
wsprintfW
CharNextW
MessageBoxW
CloseClipboard
GetDlgCtrlID
MapWindowPoints
SetWindowPos
PtInRect
GetWindowTextW
SetWindowTextW
SendMessageW
DestroyWindow

gdi32

SelectObject
CreateRectRgn
GetObjectW
CombineRgn
DeleteObject
CreateCompatibleDC
GetDIBits
SetTextColor

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
SHGetDesktopFolder

comdlg32

GetOpenFileNameW
CommDlgExtendedError
GetSaveFileNameW

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/KillProcDLL.dll
.dll windows:4 windows x86 arch:x86

d806a080e21508dd768fa70be247d2ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
CloseHandle
OpenProcess
FreeLibrary
LoadLibraryW
GetProcAddress
GetVersionExW
GlobalFree
lstrcpyW
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
WideCharToMultiByte
LCMapStringA
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
RtlUnwind
GetCPInfo
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
LoadLibraryA

Exports

Exports

KillProc

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:5 windows x86 arch:x86

6c41c5e4d44f55745b925cc4e42b7fab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
lstrlenW
FreeLibrary

user32

wsprintfW

ole32

CLSIDFromString
StringFromGUID2

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 899B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/io.ini
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:5 windows x86 arch:x86

9ea5bdc8c90dfcffe309465c26c89758

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
MulDiv
lstrlenW
HeapFree
GetProcessHeap
lstrcmpiW
HeapReAlloc
lstrcpynW
GetFileAttributesW
lstrcpyW
GetCurrentDirectoryW
SetCurrentDirectoryW
HeapAlloc
GlobalFree

user32

LoadCursorW
RemovePropW
DrawFocusRect
GetPropW
DrawTextW
GetWindowTextW
GetDlgItem
SetWindowLongW
SetWindowPos
CreateDialogParamW
MapWindowPoints
GetWindowRect
SetCursor
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
GetClientRect
CharPrevW
CallWindowProcW
SetPropW
DestroyWindow
MapDialogRect
CharNextW
SendMessageW
GetWindowLongW

gdi32

SetTextColor

shell32

SHGetPathFromIDListW
SHBrowseForFolderW

comdlg32

GetSaveFileNameW
CommDlgExtendedError
GetOpenFileNameW

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 590B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/overwriteinstall.ini
$PLUGINSDIR/setup1.bmp
$R0/Instlist
$R0/Source/Copy2App/Bin/flash_wk.dll
.dll regsvr32 windows:5 windows x86 arch:x86

487a7da859ea36f81e666d2e27cf55f7

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

15:e5:ac:0a:48:70:63:71:8e:39:da:52:30:1a:04:88
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

15/12/2010, 00:00

Not After

14/12/2012, 23:59

Subject

CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:84:00:07:aa:75:9b:43:1f:52:3d:60:ae:1b:f2:47:ac:5a:2b:06
Signer

Actual PE Digest

52:84:00:07:aa:75:9b:43:1f:52:3d:60:ae:1b:f2:47:ac:5a:2b:06

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

NPSWF32.pdb

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

winmm

timeGetTime
waveInStop
waveInAddBuffer
waveInStart
waveOutReset
waveOutOpen
mixerGetID
waveInGetDevCapsA
waveOutGetDevCapsA
waveOutMessage
waveInMessage
mixerClose
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetDevCapsA
mixerOpen
mixerGetControlDetailsA
waveOutRestart
waveOutPause
waveInGetPosition
mixerSetControlDetails
waveInGetNumDevs
waveOutGetNumDevs
waveInGetDevCapsW
waveOutGetDevCapsW
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutWrite
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
timeKillEvent
waveOutGetPosition
timeSetEvent
waveInOpen
waveInPrepareHeader
waveInReset
waveInUnprepareHeader
waveInClose
waveOutClose

wininet

InternetSetOptionW
InternetCloseHandle
InternetReadFile
HttpSendRequestW
HttpOpenRequestA
InternetConnectA
InternetOpenA

crypt32

CertFreeCertificateContext
CertVerifySubjectCertificateContext
CryptVerifyMessageSignature
CryptGetMessageCertificates
CertCreateCertificateContext
CertFindCertificateInStore
CertCloseStore

rpcrt4

RpcStringFreeA
UuidToStringA

oleaut32

LoadRegTypeLi
UnRegisterTypeLi
SysFreeString
SysAllocString
SysStringLen
LoadTypeLi
RegisterTypeLi

urlmon

CopyStgMedium

dsound

ord8

kernel32

SystemTimeToFileTime
GetSystemTime
GetFileSizeEx
CreateFileW
GetFileAttributesW
CreateDirectoryW
WideCharToMultiByte
DeleteFileA
WriteFile
CreateFileA
GetTempFileNameA
GetCurrentDirectoryA
CreateDirectoryA
GetEnvironmentVariableA
GlobalFree
FreeLibrary
GetProcessTimes
GetCurrentProcess
GlobalUnlock
GlobalLock
GetCurrentProcessId
GlobalSize
GlobalAlloc
GetSystemInfo
GetModuleHandleW
GetUserDefaultUILanguage
MoveFileExW
VirtualQuery
GetUserDefaultLangID
GetVersionExA
SetFilePointer
VerifyVersionInfoW
VerSetConditionMask
CreateProcessA
CreateThread
ReadFile
GetFileSize
FindResourceExA
FindResourceExW
SetUnhandledExceptionFilter
GetTempPathW
InterlockedIncrement
FindFirstFileW
GetTimeZoneInformation
ReleaseSemaphore
WaitForMultipleObjects
SetEvent
CreateSemaphoreW
GetTempFileNameW
GetSystemDirectoryW
ExpandEnvironmentStringsA
GetTempPathA
GetFileAttributesA
CreateMutexA
SetFilePointerEx
GetFileAttributesExW
GetFileInformationByHandle
GetVolumeInformationW
GetCurrentDirectoryW
SetCurrentDirectoryW
ExpandEnvironmentStringsW
OutputDebugStringA
RaiseException
UnmapViewOfFile
ReleaseMutex
MapViewOfFile
CreateFileMappingA
SetLastError
SetThreadPriority
GetSystemDirectoryA
TerminateThread
lstrcpyA
lstrlenA
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserAPC
OpenThread
SleepEx
EnumSystemLocalesW
HeapAlloc
GetProcessHeap
HeapFree
HeapSize
VirtualProtect
RtlUnwind
ExitProcess
GetCommandLineA
UnhandledExceptionFilter
GetStdHandle
TerminateProcess
IsDebuggerPresent
SetHandleCount
GetFileType
RemoveDirectoryW
DeleteFileW
FindNextFileW
FindClose
GetModuleFileNameA
FindResourceA
SizeofResource
LoadResource
LockResource
OpenFile
_lwrite
_lclose
FreeResource
LoadLibraryA
GetModuleFileNameW
lstrlenW
LCMapStringW
GetTickCount
GetModuleHandleA
GetCurrentThreadId
GetLocaleInfoW
GetEnvironmentVariableW
GetLastError
ResetEvent
WaitForSingleObject
CloseHandle
CreateEventW
GetVersionExW
LoadLibraryW
GetProcAddress
GetCurrentThread
SetThreadAffinityMask
IsDBCSLeadByte
GetACP
GetCPInfo
MultiByteToWideChar
ExitThread
InterlockedExchange
InterlockedCompareExchange
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetStartupInfoA
GetUserDefaultLCID
GetTimeFormatW
GetDateFormatW
CompareStringW
GetCurrencyFormatW
GetNumberFormatW
VirtualFree
VirtualAlloc
TlsGetValue
TlsSetValue
TlsFree
GetConsoleCP
GetConsoleMode
HeapCreate
HeapDestroy
HeapReAlloc
GetOEMCP
IsValidCodePage
LCMapStringA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
FlushFileBuffers
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateSemaphoreA
WriteConsoleW
GetStringTypeA
GetStringTypeW
CompareStringA
SetEnvironmentVariableA
SetEndOfFile
TlsAlloc
SwitchToThread
DeviceIoControl
GetVersion
InterlockedExchangeAdd
CancelWaitableTimer
SetWaitableTimer
CreateWaitableTimerA
InterlockedDecrement
CreateEventA

user32

CreateCaret
ShowCaret
DestroyCaret
EmptyClipboard
SetClipboardData
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
CloseClipboard
RegisterClipboardFormatW
IsWindow
GetMenuItemInfoW
RemoveMenu
SetMenuItemInfoW
InsertMenuItemW
DrawMenuBar
CreatePopupMenu
TrackPopupMenu
DestroyMenu
CreateMenu
SetMenuInfo
MapVirtualKeyW
WaitForInputIdle
GetForegroundWindow
MessageBoxA
DialogBoxParamW
SetWindowTextA
RedrawWindow
DialogBoxIndirectParamW
EndDialog
GetDesktopWindow
GetDlgItem
SetWindowTextW
SendMessageTimeoutW
CreateIconIndirect
SetRectEmpty
GetCursor
DestroyIcon
LoadImageW
GetPropW
SetPropW
SetCaretPos
GetClipboardFormatNameA
RegisterClipboardFormatA
CreateWindowExW
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExA
SetCapture
ReleaseCapture
GetSubMenu
SystemParametersInfoW
ScreenToClient
GetCapture
GetCursorPos
WindowFromPoint
GetParent
PeekMessageW
GetQueueStatus
KillTimer
SetTimer
IsWindowVisible
PostMessageW
SendMessageW
LoadIconW
RegisterClassW
GetFocus
GetTopWindow
GetKeyState
InvalidateRect
LoadCursorW
SetCursor
LoadStringW
MessageBoxW
SetWindowLongW
EnableMenuItem
CheckMenuItem
BeginPaint
GetClientRect
EndPaint
UnregisterClassA
SetFocus
MoveWindow
EnumDisplaySettingsW
GetSystemMetrics
GetWindowInfo
CopyRect
DefWindowProcW
SendInput
GetKeyboardLayout
FillRect
GetWindowLongW
GetWindowRect
UpdateLayeredWindow
GetDC
ReleaseDC
ClientToScreen
GetMonitorInfoW
SetRect
OffsetRect
MonitorFromWindow
GetDoubleClickTime
MapWindowPoints
RegisterClassA
PostMessageA
RegisterWindowMessageA
SendNotifyMessageW
GetWindowThreadProcessId

gdi32

StretchBlt
SetStretchBltMode
GetStretchBltMode
EnumFontFamiliesW
GetClipBox
GetSystemPaletteEntries
Rectangle
GetStockObject
StretchDIBits
LPtoDP
RectVisible
CreateSolidBrush
SetBkColor
ExtTextOutW
SelectPalette
RealizePalette
SelectObject
BitBlt
CreateDIBSection
GetICMProfileA
CreateDCA
SetPixel
DeleteDC
CreateCompatibleBitmap
GetTextMetricsW
EnumFontFamiliesA
SetBkMode
SetTextAlign
IntersectClipRect
SelectClipRgn
ExtTextOutA
SetTextColor
GetObjectW
GetDeviceCaps
CreateFontIndirectA
GetClipRgn
CreateRectRgn
GetTextAlign
GetBkMode
GetTextColor
SetTextCharacterExtra
GetTextExtentPoint32W
GetCurrentObject
GetBkColor
CreatePen
DPtoLP
GetTextExtentPoint32A
GetTextCharacterExtra
SetWorldTransform
SetGraphicsMode
GetWorldTransform
CreatePalette
StartDocW
EndDoc
StrokePath
ExtCreatePen
FillPath
GetDIBits
DeleteObject
CreateFontIndirectW
GdiFlush
CreateCompatibleDC
RestoreDC
SelectClipPath
PolyBezierTo
GetFontData
EnumFontFamiliesExW
LineTo
MoveToEx
EndPath
BeginPath
SaveDC
SetPolyFillMode
CreateBitmap
StartPage
EndPage

comdlg32

GetOpenFileNameW
CommDlgExtendedError
PrintDlgW
GetSaveFileNameW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegOpenKeyA
RegDeleteValueA
RegQueryValueExA
RegCreateKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

shell32

SHGetSpecialFolderLocation
SHAppBarMessage
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathA
SHGetFolderPathW
SHFileOperationW
SHGetDiskFreeSpaceExW

ole32

OleFlushClipboard
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CreateBindCtx
ReleaseStgMedium
OleUninitialize
PropVariantClear
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
OleInitialize
CoInitialize
CoUninitialize

mscms

CloseColorProfile
CreateColorTransformW
OpenColorProfileW
TranslateBitmapBits
DeleteColorTransform

ws2_32

inet_addr
WSACleanup
closesocket
WSAAsyncSelect
WSAGetLastError
WSAIoctl
socket
WSAStartup
setsockopt
recv
send
ntohs
getsockname
htons
WSACloseEvent
gethostbyname
inet_ntoa
htonl
ntohl
select
gethostname
connect
ioctlsocket
WSAEnumNetworkEvents
WSAEventSelect
WSACreateEvent
WSAAddressToStringA
bind
sendto
recvfrom
WSASetLastError
getservbyport
gethostbyaddr
WSASocketW
getservbyname

Exports

Exports

BrokerMainW
DllRegisterServer
DllUnregisterServer
FlashPlayer_10_3_183_11_FlashPlayer
Flash_DisableLocalSecurity
Flash_EnforceLocalSecurity
Java_ShockwaveFlash_CurrentFrame_stub
Java_ShockwaveFlash_FlashVersion_stub
Java_ShockwaveFlash_FrameLoaded_stub
Java_ShockwaveFlash_GetVariable_stub
Java_ShockwaveFlash_GotoFrame_stub
Java_ShockwaveFlash_IsPlaying_stub
Java_ShockwaveFlash_LoadMovie_stub
Java_ShockwaveFlash_Pan_stub
Java_ShockwaveFlash_PercentLoaded_stub
Java_ShockwaveFlash_Play_stub
Java_ShockwaveFlash_SetVariable_stub
Java_ShockwaveFlash_SetZoomRect_stub
Java_ShockwaveFlash_StopPlay_stub
Java_ShockwaveFlash_TCallFrame_stub
Java_ShockwaveFlash_TCallLabel_stub
Java_ShockwaveFlash_TCurrentFrame_stub
Java_ShockwaveFlash_TCurrentLabel_stub
Java_ShockwaveFlash_TGetProperty_stub
Java_ShockwaveFlash_TGotoFrame_stub
Java_ShockwaveFlash_TGotoLabel_stub
Java_ShockwaveFlash_TPlay_stub
Java_ShockwaveFlash_TSetProperty_stub
Java_ShockwaveFlash_TStopPlay_stub
Java_ShockwaveFlash_TotalFrames_stub
Java_ShockwaveFlash_Zoom_stub
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
native_ShockwaveFlash_CurrentFrame
native_ShockwaveFlash_FlashVersion
native_ShockwaveFlash_FrameLoaded
native_ShockwaveFlash_GetVariable
native_ShockwaveFlash_GotoFrame
native_ShockwaveFlash_IsPlaying
native_ShockwaveFlash_LoadMovie
native_ShockwaveFlash_Pan
native_ShockwaveFlash_PercentLoaded
native_ShockwaveFlash_Play
native_ShockwaveFlash_SetVariable
native_ShockwaveFlash_SetZoomRect
native_ShockwaveFlash_StopPlay
native_ShockwaveFlash_TCallFrame
native_ShockwaveFlash_TCallLabel
native_ShockwaveFlash_TCurrentFrame
native_ShockwaveFlash_TCurrentLabel
native_ShockwaveFlash_TGetProperty
native_ShockwaveFlash_TGotoFrame
native_ShockwaveFlash_TGotoLabel
native_ShockwaveFlash_TPlay
native_ShockwaveFlash_TSetProperty
native_ShockwaveFlash_TStopPlay
native_ShockwaveFlash_TotalFrames
native_ShockwaveFlash_Zoom
register_ShockwaveFlash
unregister_ShockwaveFlash
unuse_ShockwaveFlash
unuse_netscape_plugin_Plugin
use_ShockwaveFlash
use_netscape_plugin_Plugin

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/Copy2App/Bin/malurl.dat
$R0/Source/Copy2App/LocalPage/MyFavorStartPage.zip
.zip
$R0/Source/Copy2App/MetaSearch/metasearchupdate1
$R0/Source/Copy2App/MetaSearch/metasearchupdate2
$R0/Source/Copy2App/datapack1
$R0/Source/Copy2App/datapack2
$R0/Source/Copy2App/datapack3
$R0/Source/Copy2App/script.dat
$R0/Source/Copy2App/urlblack.dat
$R0/Source/NPComBrg310.dll
.dll windows:4 windows x86 arch:x86

608788008d62798ed5fd6d64b319bf28

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

29/01/1996, 00:00

Not After

01/08/2028, 23:59

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:0a:13:ad:b7:c1:1a:42:a7:6c:6c:16:53:66:4e:93
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

19/02/2009, 00:00

Not After

26/02/2012, 23:59

Subject

CN=iTrusChina Co.\,Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CA Center,O=iTrusChina Co.\,Ltd.,L=beijing,ST=beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

a3:46:3f:85:8c:6c:df:02:1c:36:bf:c7:5d:10:c3:51:98:86:4c:da
Signer

Actual PE Digest

a3:46:3f:85:8c:6c:df:02:1c:36:bf:c7:5d:10:c3:51:98:86:4c:da

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringA
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
RtlUnwind
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromProgID

oleaut32

SysAllocStringLen
SysFreeString
VariantTimeToSystemTime

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/Uninstall.exe
.exe windows:5 windows x86 arch:x86

bf95d1fc1d10de18b32654b123ad5e1f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
lstrcpynA
CloseHandle
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrlenW

user32

ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 452KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 788KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$R0/Source/accelerator.dll
.dll windows:4 windows x86 arch:x86

bce9f8ce3d104364be1d5361d679048a

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\Accelerator.pdb

Imports

sogouexplorer

ord2
ord1
ord614
ord615
ord489
ord568
ord51
ord1034
ord575
ord701
ord1033
ord729
ord437
ord433
ord536
ord659
ord696
ord697
ord571
ord490

kernel32

GetFileType
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCurrentProcess
FlushInstructionCache
GetTickCount
GetLastError
HeapReAlloc
HeapAlloc
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
VirtualFree
VirtualAlloc
HeapSize
TerminateProcess
IsDebuggerPresent
ExitProcess
RaiseException
Sleep
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetLocaleInfoA
InitializeCriticalSection
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode

user32

GetWindowLongW
GetCursorPos
SetWindowLongW
SetForegroundWindow
DefWindowProcW
PostMessageW
CallWindowProcW
SendMessageW
DestroyWindow
KillTimer
SetTimer

Exports

Exports

GetISE

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/avcodec-52.dll
.dll windows:4 windows x86 arch:x86

b81f3887820d778da0ea27fe675c6543

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetThreadContext
GetThreadPriority
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
OpenProcess
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSemaphore
ResetEvent
ResumeThread
SetEvent
SetLastError
SetThreadContext
SetThreadPriority
Sleep
SuspendThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte

msvcrt

__dllonexit
__lc_codepage
__mb_cur_max
_assert
_beginthreadex
_endthreadex
_errno
_ftime
_iob
_isctype
_pctype
_setjmp
_winmajor
abort
atan
calloc
ceil
cos
exit
exp
fflush
floor
fputc
free
frexp
fwrite
getenv
ldexp
localeconv
log
log10
longjmp
malloc
memcmp
memcpy
memmove
memset
pow
qsort
realloc
sin
sqrt
sscanf
strcmp
strlen
strtol
tan
toupper
vfprintf
wcslen

ws2_32

WSAGetLastError
WSASetLastError

avutil-50

av_base64_decode
av_base64_encode
av_d2q
av_default_item_name
av_find_opt
av_free
av_freep
av_gcd
av_get_cpu_flags
av_get_double
av_get_int
av_get_pix_fmt
av_get_q
av_get_string
av_log
av_log_get_level
av_malloc
av_mallocz
av_mul_q
av_next_option
av_opt_set_defaults
av_opt_set_defaults2
av_opt_show2
av_parse_and_eval_expr
av_pix_fmt_descriptors
av_realloc
av_reduce
av_rescale_rnd
av_reverse
av_set_double
av_set_int
av_set_q
av_set_string3
av_strdup
av_strlcat
av_strlcpy
ff_log2_tab
ff_sqrt_tab

Exports

Exports

MPV_common_defaults
MPV_common_end
MPV_common_init
MPV_common_init_mmx
MPV_decode_defaults
MPV_decode_mb
MPV_frame_end
MPV_frame_start
MPV_lowest_referenced_row
MPV_report_decode_progress
VP8_UVSSE
_get_output_format
_nm__av_pix_fmt_descriptors
_nm__av_reverse
_nm__ff_log2_tab
_nm__ff_sqrt_tab
aac_decoder
aac_latm_decoder
align_put_bits
audio_resample
audio_resample_close
audio_resample_init
av_audio_convert
av_audio_convert_alloc
av_audio_convert_free
av_audio_resample_init
av_bitstream_filter_close
av_bitstream_filter_filter
av_bitstream_filter_init
av_bitstream_filter_next
av_check_image_size
av_codec_next
av_destruct_packet
av_destruct_packet_nofree
av_dup_packet
av_fast_malloc
av_fast_realloc
av_fft_calc
av_fft_end
av_fft_init
av_fft_permute
av_fill_image_linesizes
av_fill_image_max_pixsteps
av_fill_image_pointers
av_find_opt@LIBAVCODEC_52
av_free_packet
av_get_bits_per_sample
av_get_bits_per_sample_fmt
av_get_bits_per_sample_format
av_get_codec_tag_string
av_get_double@LIBAVCODEC_52
av_get_image_linesize
av_get_int@LIBAVCODEC_52
av_get_pict_type_char
av_get_q@LIBAVCODEC_52
av_get_sample_fmt
av_get_sample_fmt_name
av_get_sample_fmt_string
av_get_string@LIBAVCODEC_52
av_hwaccel_next
av_image_check_size
av_image_copy
av_image_copy_plane
av_image_fill_linesizes
av_image_fill_max_pixsteps
av_image_fill_pointers
av_image_get_linesize
av_imdct_calc
av_imdct_half
av_init_packet
av_lockmgr_register
av_log_ask_for_sample
av_log_missing_feature
av_mdct_calc
av_mdct_end
av_mdct_init
av_new_packet
av_next_option@LIBAVCODEC_52
av_opt_set_defaults2@LIBAVCODEC_52
av_opt_set_defaults@LIBAVCODEC_52
av_opt_show
av_opt_show2@LIBAVCODEC_52
av_parse_video_frame_rate
av_parse_video_frame_size
av_parse_video_rate
av_parse_video_size
av_parser_change
av_parser_close
av_parser_init
av_parser_next
av_parser_parse
av_parser_parse2
av_picture_copy
av_picture_crop
av_picture_data_copy
av_picture_pad
av_rdft_calc
av_rdft_end
av_rdft_init
av_register_bitstream_filter
av_register_codec_parser
av_register_hwaccel
av_resample
av_resample_close
av_resample_compensate
av_resample_init
av_set_double@LIBAVCODEC_52
av_set_int@LIBAVCODEC_52
av_set_q@LIBAVCODEC_52
av_set_string
av_set_string2
av_set_string3@LIBAVCODEC_52
av_shrink_packet
av_xiphlacing
avcodec_align_dimensions
avcodec_align_dimensions2
avcodec_alloc_context
avcodec_alloc_context2
avcodec_alloc_context3
avcodec_alloc_frame
avcodec_channel_layout_num_channels
avcodec_check_dimensions
avcodec_close
avcodec_configuration
avcodec_copy_context
avcodec_decode_audio2
avcodec_decode_audio3
avcodec_decode_subtitle
avcodec_decode_subtitle2
avcodec_decode_video
avcodec_decode_video2
avcodec_default_execute
avcodec_default_execute2
avcodec_default_free_buffers
avcodec_default_get_buffer
avcodec_default_get_format
avcodec_default_reget_buffer
avcodec_default_release_buffer
avcodec_encode_audio
avcodec_encode_subtitle
avcodec_encode_video
avcodec_find_best_pix_fmt
avcodec_find_decoder
avcodec_find_decoder_by_name
avcodec_find_encoder
avcodec_find_encoder_by_name
avcodec_flush_buffers
avcodec_get_channel_layout
avcodec_get_channel_layout_string
avcodec_get_chroma_sub_sample
avcodec_get_context_defaults
avcodec_get_context_defaults2
avcodec_get_context_defaults3
avcodec_get_edge_width
avcodec_get_frame_defaults
avcodec_get_pix_fmt
avcodec_get_pix_fmt_loss
avcodec_get_pix_fmt_name
avcodec_get_sample_fmt
avcodec_get_sample_fmt_name
avcodec_guess_channel_layout
avcodec_init
avcodec_license
avcodec_open
avcodec_pix_fmt_string
avcodec_pix_fmt_to_codec_tag
avcodec_register
avcodec_register_all
avcodec_sample_fmt_string
avcodec_set_dimensions
avcodec_string
avcodec_thread_free
avcodec_thread_init
avcodec_version
avpicture_alloc
avpicture_deinterlace
avpicture_fill
avpicture_free
avpicture_get_size
avpicture_layout
avsubtitle_free
clamp_mvs
dsputil_init
dsputil_init_mmx
dsputil_init_pix_mmx
dsputil_static_init
dsputilenc_init_mmx
fdct_ifast
fdct_ifast248
ff_aac_codebook_vector_idx
ff_aac_codebook_vector_vals
ff_aac_codebook_vectors
ff_aac_kbd_long_1024
ff_aac_kbd_short_128
ff_aac_num_swb_1024
ff_aac_num_swb_128
ff_aac_parse_header
ff_aac_pow2sf_tab
ff_aac_pred_sfb_max
ff_aac_sbr_ctx_close
ff_aac_sbr_ctx_init
ff_aac_sbr_init
ff_aac_scalefactor_bits
ff_aac_scalefactor_code
ff_aac_spectral_bits
ff_aac_spectral_codes
ff_aac_spectral_sizes
ff_aac_tableinit
ff_add_hfyu_left_prediction_sse4
ff_add_hfyu_left_prediction_ssse3
ff_add_hfyu_median_prediction_mmx2
ff_add_pixels_clamped_mmx
ff_alloc_picture
ff_alternate_horizontal_scan
ff_alternate_vertical_scan
ff_avg_cavs_qpel16_mc00_mmx2
ff_avg_cavs_qpel8_mc00_mmx2
ff_avg_h264_chroma_mc2_mmx2
ff_avg_h264_chroma_mc4_3dnow
ff_avg_h264_chroma_mc4_mmx2
ff_avg_h264_chroma_mc4_ssse3
ff_avg_h264_chroma_mc8_3dnow_rnd
ff_avg_h264_chroma_mc8_mmx2_rnd
ff_avg_h264_chroma_mc8_ssse3_rnd
ff_avg_pixels16x16_c
ff_avg_pixels8x8_c
ff_avg_qpel16_mc11_old_c
ff_avg_qpel16_mc12_old_c
ff_avg_qpel16_mc13_old_c
ff_avg_qpel16_mc31_old_c
ff_avg_qpel16_mc32_old_c
ff_avg_qpel16_mc33_old_c
ff_avg_qpel8_mc11_old_c
ff_avg_qpel8_mc12_old_c
ff_avg_qpel8_mc13_old_c
ff_avg_qpel8_mc31_old_c
ff_avg_qpel8_mc32_old_c
ff_avg_qpel8_mc33_old_c
ff_avg_rv40_chroma_mc4_3dnow
ff_avg_rv40_chroma_mc4_mmx2
ff_avg_rv40_chroma_mc8_3dnow
ff_avg_rv40_chroma_mc8_mmx2
ff_avg_vc1_chroma_mc8_3dnow_nornd
ff_avg_vc1_chroma_mc8_mmx2_nornd
ff_avg_vc1_chroma_mc8_ssse3_nornd
ff_avg_vc1_mspel_mc00_mmx2
ff_block_permute
ff_bone
ff_check_alignment
ff_clean_intra_table_entries
ff_combine_frame
ff_copy_bits
ff_copy_pce_data
ff_copy_picture
ff_cos_1024
ff_cos_128
ff_cos_16
ff_cos_16384
ff_cos_2048
ff_cos_256
ff_cos_32
ff_cos_32768
ff_cos_4096
ff_cos_512
ff_cos_64
ff_cos_65536
ff_cos_8192
ff_cos_tabs
ff_cropTbl
ff_dct_common_init
ff_decode_sbr_extension
ff_deinterlace_line_inplace_mmx
ff_deinterlace_line_mmx
ff_dirac_parse_sequence_header
ff_dnxhd_init_mmx
ff_draw_horiz_band
ff_emulated_edge_mc
ff_er_add_slice
ff_er_frame_end
ff_er_frame_start
ff_faandct
ff_faandct248
ff_faanidct
ff_faanidct_add
ff_faanidct_put
ff_fdct248_islow
ff_fdct_mmx
ff_fdct_mmx2
ff_fdct_sse2
ff_fetch_timestamp
ff_fft_calc_c
ff_fft_calc_sse
ff_fft_dispatch_3dn
ff_fft_dispatch_3dn2
ff_fft_dispatch_interleave_3dn
ff_fft_dispatch_interleave_3dn2
ff_fft_dispatch_interleave_sse
ff_fft_dispatch_sse
ff_fft_end
ff_fft_init
ff_fft_init_mmx
ff_fft_permute_c
ff_fft_permute_sse
ff_fill_linesize
ff_fill_pointer
ff_find_hwaccel
ff_find_start_code
ff_find_unused_picture
ff_float_to_int16_c
ff_float_to_int16_interleave6_3dn2
ff_float_to_int16_interleave6_3dnow
ff_float_to_int16_interleave6_sse
ff_float_to_int16_interleave_c
ff_frame_rate_tab
ff_generate_sliding_window_mmcos
ff_get_plane_bytewidth
ff_gmc_c
ff_golomb_vlc_len
ff_h264_alloc_tables
ff_h264_biweight_16x16_mmx2
ff_h264_biweight_16x16_sse2
ff_h264_biweight_16x16_ssse3
ff_h264_biweight_16x8_mmx2
ff_h264_biweight_16x8_sse2
ff_h264_biweight_16x8_ssse3
ff_h264_biweight_4x2_mmx2
ff_h264_biweight_4x4_mmx2
ff_h264_biweight_4x8_mmx2
ff_h264_biweight_8x16_mmx2
ff_h264_biweight_8x16_sse2
ff_h264_biweight_8x16_ssse3
ff_h264_biweight_8x4_mmx2
ff_h264_biweight_8x4_sse2
ff_h264_biweight_8x4_ssse3
ff_h264_biweight_8x8_mmx2
ff_h264_biweight_8x8_sse2
ff_h264_biweight_8x8_ssse3
ff_h264_check_intra4x4_pred_mode
ff_h264_check_intra_pred_mode
ff_h264_chroma_qp
ff_h264_decode_end
ff_h264_decode_extradata
ff_h264_decode_init
ff_h264_decode_init_vlc
ff_h264_decode_mb_cabac
ff_h264_decode_mb_cavlc
ff_h264_decode_nal
ff_h264_decode_picture_parameter_set
ff_h264_decode_rbsp_trailing
ff_h264_decode_ref_pic_list_reordering
ff_h264_decode_ref_pic_marking
ff_h264_decode_sei
ff_h264_decode_seq_parameter_set
ff_h264_direct_dist_scale_factor
ff_h264_direct_ref_list_init
ff_h264_execute_ref_pic_marking
ff_h264_fill_default_ref_list
ff_h264_fill_mbaff_ref_list
ff_h264_filter_mb
ff_h264_filter_mb_fast
ff_h264_frame_start
ff_h264_free_context
ff_h264_get_slice_type
ff_h264_hl_decode_mb
ff_h264_idct8_add4_c
ff_h264_idct8_add4_mmx
ff_h264_idct8_add4_mmx2
ff_h264_idct8_add4_sse2
ff_h264_idct8_add_c
ff_h264_idct8_add_mmx
ff_h264_idct8_add_sse2
ff_h264_idct8_dc_add_c
ff_h264_idct8_dc_add_mmx2
ff_h264_idct_add16_c
ff_h264_idct_add16_mmx
ff_h264_idct_add16_mmx2
ff_h264_idct_add16_sse2
ff_h264_idct_add16intra_c
ff_h264_idct_add16intra_mmx
ff_h264_idct_add16intra_mmx2
ff_h264_idct_add16intra_sse2
ff_h264_idct_add8_c
ff_h264_idct_add8_mmx
ff_h264_idct_add8_mmx2
ff_h264_idct_add8_sse2
ff_h264_idct_add_c
ff_h264_idct_add_mmx
ff_h264_idct_dc_add_c
ff_h264_idct_dc_add_mmx2
ff_h264_init_cabac_states
ff_h264_lowres_idct_add_c
ff_h264_lowres_idct_put_c
ff_h264_lps_range
ff_h264_lps_state
ff_h264_mlps_state
ff_h264_mps_state
ff_h264_norm_shift
ff_h264_pred_direct_motion
ff_h264_pred_init
ff_h264_pred_init_x86
ff_h264_remove_all_refs
ff_h264_reset_sei
ff_h264_weight_16x16_mmx2
ff_h264_weight_16x16_sse2
ff_h264_weight_16x8_mmx2
ff_h264_weight_16x8_sse2
ff_h264_weight_4x2_mmx2
ff_h264_weight_4x4_mmx2
ff_h264_weight_4x8_mmx2
ff_h264_weight_8x16_mmx2
ff_h264_weight_8x16_sse2
ff_h264_weight_8x4_mmx2
ff_h264_weight_8x4_sse2
ff_h264_weight_8x8_mmx2
ff_h264_weight_8x8_sse2
ff_h264_write_back_intra_pred_mode
ff_h264dsp_init
ff_h264dsp_init_x86
ff_hadamard8_diff16_mmx
ff_hadamard8_diff16_mmx2
ff_hadamard8_diff16_sse2
ff_hadamard8_diff16_ssse3
ff_hadamard8_diff_mmx
ff_hadamard8_diff_mmx2
ff_hadamard8_diff_sse2
ff_hadamard8_diff_ssse3
ff_hwaccel_pixfmt_list_420
ff_idct_xvid_mmx
ff_idct_xvid_mmx2
ff_idct_xvid_sse2
ff_idct_xvid_sse2_add
ff_idct_xvid_sse2_put
ff_imdct_calc_c
ff_imdct_calc_sse
ff_imdct_half_c
ff_imdct_half_sse
ff_img_copy_plane
ff_init_block_index
ff_init_cabac_decoder
ff_init_cabac_encoder
ff_init_cabac_states
ff_init_ff_cos_tabs
ff_init_ff_sine_windows
ff_init_scantable
ff_interleaved_dirac_golomb_vlc_code
ff_interleaved_golomb_vlc_len
ff_interleaved_se_golomb_vlc_code
ff_interleaved_ue_golomb_vlc_code
ff_inverse
ff_is_hwaccel_pix_fmt
ff_jpeg_fdct_islow
ff_kbd_window_init
ff_lockmgr_cb
ff_log2_run
ff_match_2uint16
ff_mdct_calc_c
ff_mdct_end
ff_mdct_init
ff_mpa_alloc_tables
ff_mpa_bitrate_tab
ff_mpa_decode_header
ff_mpa_enwindow
ff_mpa_freq_tab
ff_mpa_l2_select_table
ff_mpa_quant_bits
ff_mpa_quant_steps
ff_mpa_sblimit_table
ff_mpa_synth_filter
ff_mpa_synth_init
ff_mpa_synth_window
ff_mpeg12_mbAddrIncrTable
ff_mpeg12_mbMotionVectorTable
ff_mpeg12_mbPatTable
ff_mpeg12_vlc_dc_chroma_bits
ff_mpeg12_vlc_dc_chroma_code
ff_mpeg12_vlc_dc_lum_bits
ff_mpeg12_vlc_dc_lum_code
ff_mpeg1_aspect
ff_mpeg1_dc_scale_table
ff_mpeg1_default_intra_matrix
ff_mpeg1_default_non_intra_matrix
ff_mpeg2_aspect
ff_mpeg2_dc_scale_table
ff_mpeg4audio_channels
ff_mpeg4audio_get_config
ff_mpeg4audio_sample_rates
ff_mpeg4video_split
ff_mpeg_flush
ff_mpeg_update_thread_context
ff_mpegaudio_decode_header
ff_parse1_close
ff_parse_close
ff_pb_0
ff_pb_1
ff_pb_1F
ff_pb_3
ff_pb_3F
ff_pb_4
ff_pb_7
ff_pb_80

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/avformat-52.dll
.dll windows:4 windows x86 arch:x86

03a6b54c1ad00f5289cec02326f63517

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__dllonexit
__lc_codepage
__mb_cur_max
_assert
_errno
_iob
_isctype
_pctype
_stricmp
_strnicmp
_winmajor
abort
atoi
calloc
fflush
fputc
free
fwrite
getenv
gmtime
localeconv
localtime
malloc
memchr
memcpy
memmove
memset
mktime
sscanf
strchr
strcmp
strcpy
strlen
strncmp
strrchr
strspn
strstr
strtol
time
toupper
vfprintf
wcslen

avcodec-52

av_destruct_packet
av_destruct_packet_nofree
av_dup_packet
av_fast_malloc
av_fast_realloc
av_free_packet
av_get_bits_per_sample
av_get_codec_tag_string
av_init_packet
av_new_packet
av_parse_video_rate
av_parse_video_size
av_parser_close
av_parser_init
av_parser_parse2
av_shrink_packet
av_xiphlacing
avcodec_alloc_context
avcodec_close
avcodec_decode_audio3
avcodec_decode_video2
avcodec_find_decoder
avcodec_get_frame_defaults
avcodec_open
avcodec_pix_fmt_to_codec_tag
avcodec_register_all
avcodec_set_dimensions
avcodec_string
ff_mpa_decode_header
ff_mpa_freq_tab
ff_mpeg4audio_get_config
ff_mpeg4audio_sample_rates
ff_mpegaudio_decode_header
ff_toupper4

avutil-50

av_compare_mod
av_compare_ts
av_crc
av_crc_get_table
av_d2q
av_d2str
av_free
av_freep
av_gcd
av_int2dbl
av_int2flt
av_log
av_malloc
av_mallocz
av_opt_set_defaults
av_realloc
av_reduce
av_rescale
av_rescale_q
av_rescale_rnd
av_strdup
av_strlcat
av_strlcatf
av_strlcpy
ff_log2_tab

Exports

Exports

_get_output_format
_nm__ff_log2_tab
_nm__ff_mpa_freq_tab
_nm__ff_mpeg4audio_sample_rates
av_add_index_entry
av_alloc_format_context
av_alloc_put_byte
av_close_input_file
av_close_input_stream
av_codec_get_id
av_codec_get_tag
av_destruct_packet@LIBAVFORMAT_52
av_destruct_packet_nofree@LIBAVFORMAT_52
av_dup_packet@LIBAVFORMAT_52
av_filename_number_test
av_find_default_stream_index
av_find_input_format
av_find_stream_info
av_free_packet@LIBAVFORMAT_52
av_gen_search
av_get_frame_filename
av_get_packet
av_gettime
av_guess_codec
av_guess_format
av_hex_dump
av_hex_dump_log
av_iformat_next
av_index_search_timestamp
av_init_packet@LIBAVFORMAT_52
av_interleave_packet_per_dts
av_interleaved_write_frame
av_match_ext
av_metadata_conv
av_metadata_free
av_metadata_get
av_metadata_set
av_metadata_set2
av_new_packet@LIBAVFORMAT_52
av_new_program
av_new_stream
av_oformat_next
av_open_input_file
av_open_input_stream
av_pkt_dump
av_pkt_dump_log
av_probe_input_format
av_probe_input_format2
av_protocol_next
av_read_frame
av_read_packet
av_read_pause
av_read_play
av_register_all
av_register_input_format
av_register_output_format
av_register_protocol
av_register_protocol2
av_seek_frame
av_seek_frame_binary
av_set_parameters
av_set_pts_info
av_update_cur_dts
av_url_read_fpause
av_url_read_fseek
av_url_read_pause
av_url_read_seek
av_url_split
av_write_frame
av_write_header
av_write_trailer
avf_sdp_create
avformat_alloc_context
avformat_configuration
avformat_license
avformat_seek_file
avformat_version
brktimegm
codec_movaudio_tags
codec_movvideo_tags
dump_format
ff_codec_bmp_tags
ff_codec_get_id
ff_codec_get_tag
ff_codec_movsubtitle_tags
ff_codec_wav_tags
ff_crc04C11DB7_update
ff_data_to_hex
ff_dynarray_add
ff_free_parser_state
ff_gen_syncpoint_search
ff_get_line
ff_get_v
ff_get_v_length
ff_get_wav_header
ff_hex_to_data
ff_id3v1_genre_str
ff_id3v1_read
ff_id3v2_match
ff_id3v2_metadata_conv
ff_id3v2_parse
ff_id3v2_read
ff_id3v2_tag_len
ff_id3v2_tags
ff_interleave_add_packet
ff_interleave_compare_dts
ff_metadata_conv
ff_metadata_conv_ctx
ff_metadata_demux_compat
ff_metadata_mux_compat
ff_mkv_codec_tags
ff_mkv_metadata_conv
ff_mkv_mime_tags
ff_mov_get_lpcm_codec_id
ff_mov_iso639_to_lang
ff_mov_lang_to_iso639
ff_mov_read_esds
ff_mov_read_stsd_entries
ff_mp4_obj_type
ff_mp4_read_descr_len
ff_new_chapter
ff_ntp_time
ff_ogm_audio_codec
ff_ogm_old_codec
ff_ogm_text_codec
ff_ogm_video_codec
ff_parse_key_value
ff_parse_specific_params
ff_probe_input_buffer
ff_program_add_stream_index
ff_put_v
ff_read_frame_flush
ff_reduce_index
ff_restore_parser_state
ff_rewind_with_probe_data
ff_rm_alloc_rmstream
ff_rm_codec_tags
ff_rm_free_rmstream
ff_rm_metadata
ff_rm_parse_packet
ff_rm_read_mdpr_codecdata
ff_rm_reorder_sipr_data
ff_rm_retrieve_cache
ff_sdp_write_media
ff_sipr_subpk_size
ff_skeleton_codec
ff_store_parser_state
ff_theora_codec
ff_url_join
ff_url_split
ff_vorbis_codec
ff_vorbis_comment
ff_vorbiscomment_length
ff_vorbiscomment_metadata_conv
ff_vorbiscomment_write
ff_wav_codec_get_id
ff_write_chained
find_info_tag
first_iformat
first_oformat
first_protocol
get_be16
get_be24
get_be32
get_be64
get_buffer
get_byte
get_checksum
get_le16
get_le24
get_le32
get_le64
get_partial_buffer
get_strz
guess_format
guess_stream_format
init_checksum
init_put_byte
matroska_demuxer
mktimegm
mov_demuxer
mp3_demuxer
ogg_demuxer
parse_date
parse_frame_rate
parse_image_size
pcm_read_seek
put_be16
put_be24
put_be32
put_be64
put_buffer
put_byte
put_flush_packet
put_le16
put_le24
put_le32
put_le64
put_strz
put_tag
rdt_demuxer
register_protocol
rm_demuxer
small_strptime
url_alloc
url_close
url_connect
url_exist
url_fclose
url_fdopen
url_feof
url_ferror
url_fget_max_packet_size
url_fgetc
url_fgets
url_fileno
url_filesize
url_fopen
url_fseek
url_fsize
url_fskip
url_ftell
url_get_file_handle
url_get_filename
url_get_max_packet_size
url_interrupt_cb
url_open
url_open_protocol
url_read
url_read_complete
url_resetbuf
url_seek
url_set_interrupt_cb
url_setbufsize
url_write
wav_demuxer

Sections

.text
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/avutil-50.dll
.dll windows:4 windows x86 arch:x86

4a52cacc510d2bd1ab71e6daf3d75ee3

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetConsoleScreenBufferInfo
GetLastError
GetModuleHandleA
GetProcAddress
GetStdHandle
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetConsoleTextAttribute
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

_close
_isatty
_open
_read
__dllonexit
__lc_codepage
__mb_cur_max
_assert
_errno
_iob
_isctype
_pctype
_winmajor
abort
acos
asin
atan
calloc
clock
cos
cosh
exp
fflush
floor
fputc
fputs
free
frexp
fwrite
getenv
ldexp
localeconv
log
malloc
memcpy
memset
pow
realloc
sin
sinh
sqrt
strchr
strcmp
strcpy
strlen
strspn
tan
tanh
toupper
vfprintf
wcslen

Exports

Exports

av_add_q
av_adler32_update
av_aes_crypt
av_aes_init
av_aes_size
av_base64_decode
av_base64_encode
av_bmg_get
av_compare_mod
av_compare_ts
av_crc
av_crc_get_table
av_crc_init
av_d2q
av_d2str
av_dbl2ext
av_dbl2int
av_default_item_name
av_des_crypt
av_des_init
av_div_q
av_eval_expr
av_evaluate_lls
av_ext2dbl
av_fifo_alloc
av_fifo_drain
av_fifo_free
av_fifo_generic_read
av_fifo_generic_write
av_fifo_realloc2
av_fifo_reset
av_fifo_size
av_fifo_space
av_find_nearest_q_idx
av_find_opt
av_flt2int
av_free
av_free_expr
av_freep
av_gcd
av_get_bits_per_pixel
av_get_cpu_flags
av_get_double
av_get_int
av_get_pix_fmt
av_get_q
av_get_random_seed
av_get_string
av_get_token
av_init_lls
av_int2dbl
av_int2flt
av_lfg_init
av_log
av_log_default_callback
av_log_get_level
av_log_level
av_log_set_callback
av_log_set_flags
av_log_set_level
av_lzo1x_decode
av_malloc
av_mallocz
av_md5_final
av_md5_init
av_md5_size
av_md5_sum
av_md5_update
av_memcpy_backptr
av_mul_q
av_nearer_q
av_next_option
av_opt_set_defaults
av_opt_set_defaults2
av_opt_show2
av_parse_and_eval_expr
av_parse_expr
av_pix_fmt_descriptors
av_rc4_crypt
av_rc4_init
av_read_image_line
av_realloc
av_reduce
av_rescale
av_rescale_q
av_rescale_rnd
av_reverse
av_set_double
av_set_int
av_set_options_string
av_set_q
av_set_string3
av_sha1_final
av_sha1_init
av_sha1_size
av_sha1_update
av_sha_final
av_sha_init
av_sha_size
av_sha_update
av_solve_lls
av_strdup
av_strerror
av_stristart
av_stristr
av_strlcat
av_strlcatf
av_strlcpy
av_strstart
av_strtod
av_sub_q
av_tree_destroy
av_tree_enumerate
av_tree_find
av_tree_insert
av_tree_node_size
av_update_lls
av_vlog
av_write_image_line
avutil_configuration
avutil_license
avutil_version
ff_get_cpu_flags_x86
ff_inverse
ff_log2_tab
ff_random_get_seed
ff_sqrt_tab

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/bseapi.dll
.dll windows:4 windows x86 arch:x86

1e7464d47e918b5d86e0ca05675a84a1

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:a4:bc:43:99:30:34:6b:95:69:4b:4c:7f:2b:98:1b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/06/2009, 00:00

Not After

21/06/2012, 23:59

Subject

CN=Zhuhai Kingsoft Software Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Zhuhai Kingsoft Software Co.\,Ltd,L=Zhuhai,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:2a:ab:14:c7:a5:26:c7:c3:cb:15:ea:6a:98:9a:d3:77:69:3a:81
Signer

Actual PE Digest

1d:2a:ab:14:c7:a5:26:c7:c3:cb:15:ea:6a:98:9a:d3:77:69:3a:81

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\KINGSOFT_DUBA\Build\Build_Src\kcloud\kcloud\product\win32\bseapi.pdb

Imports

kernel32

CloseHandle
LockResource
LoadResource
SizeofResource
GetLastError
MultiByteToWideChar
lstrlenA
LoadLibraryW
SetFilePointer
GetProcAddress
Sleep
CreateThread
GetModuleFileNameW
FreeLibrary
InterlockedExchange
WriteFile
WaitForSingleObject
TerminateThread
DeleteFileW
GetLocalTime
GetFileType
SetHandleCount
RtlUnwind
GetFileSize
CreateFileW
FindResourceW
FindResourceExW
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
FlushFileBuffers
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
CreateFileA
WriteConsoleW
ReadFile
lstrlenW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
LCMapStringW
FreeEnvironmentStringsA
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedIncrement
InterlockedDecrement
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
HeapCreate
VirtualFree
VirtualAlloc
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringA
GetStartupInfoA

user32

UnregisterClassA

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

ole32

CoUninitialize
CoInitialize
CoCreateGuid

winhttp

WinHttpOpen
WinHttpCloseHandle
WinHttpSendRequest
WinHttpConnect
WinHttpOpenRequest

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Exports

Exports

DllGetClassObject

Sections

.text
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/bsecore.dll
.dll windows:4 windows x86 arch:x86

e98161a1c3542b656da43c0892e09b60

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:a4:bc:43:99:30:34:6b:95:69:4b:4c:7f:2b:98:1b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/06/2009, 00:00

Not After

21/06/2012, 23:59

Subject

CN=Zhuhai Kingsoft Software Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Zhuhai Kingsoft Software Co.\,Ltd,L=Zhuhai,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7a:b7:fd:bd:51:6f:b6:10:eb:cb:f0:bc:95:cc:62:7d:d0:2b:07:60
Signer

Actual PE Digest

7a:b7:fd:bd:51:6f:b6:10:eb:cb:f0:bc:95:cc:62:7d:d0:2b:07:60

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\KINGSOFT_DUBA\Build\Build_Src\kcloud\kcloud\product\win32\bsecore.pdb

Imports

kernel32

InterlockedDecrement
IsBadReadPtr
GetCurrentProcess
EnterCriticalSection
GetLastError
DeleteCriticalSection
GetProcAddress
FreeLibrary
LocalFree
GetLogicalDriveStringsW
QueryDosDeviceW
InterlockedCompareExchange
MapViewOfFile
UnmapViewOfFile
InitializeCriticalSectionAndSpinCount
GetTickCount
DebugBreak
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
GetFileAttributesW
GetLongPathNameW
SearchPathW
GlobalAlloc
GlobalFree
TlsFree
TlsSetValue
VirtualProtect
TlsGetValue
TlsAlloc
SetLastError
VirtualFree
VirtualAlloc
CreateFileA
GetFileSize
GetModuleFileNameA
lstrlenA
GetModuleHandleA
ReadFile
FlushInstructionCache
CreateThread
GetSystemTimeAsFileTime
WaitForSingleObject
GetExitCodeThread
GetFileAttributesExW
CreateFileW
GetCurrentThreadId
GetCurrentProcessId
SetEvent
SetFilePointer
TerminateThread
SetEndOfFile
WriteFile
CreateFileMappingW
CreateEventW
Sleep
lstrcmpiA
LoadResource
LockResource
SizeofResource
FindResourceExW
FindResourceW
GetProcessHeap
HeapReAlloc
HeapAlloc
HeapFree
VirtualQuery
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
CloseHandle
LeaveCriticalSection
InitializeCriticalSection
InterlockedIncrement
GetModuleHandleW
LoadLibraryA
LoadLibraryW
ExitThread
GetThreadLocale
WriteConsoleW
GetCommandLineA
GetVersionExA
RaiseException
RtlUnwind
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
LCMapStringA
SetStdHandle
GetLocaleInfoW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapCreate
HeapDestroy
GetStdHandle
IsValidCodePage
GetOEMCP
GetACP
GetModuleFileNameW
WaitForMultipleObjects
GetPrivateProfileStringW
ExitProcess
HeapSize
GetCPInfo
LCMapStringW
TerminateProcess

user32

CharLowerA
UnregisterClassA

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

CommandLineToArgvW
SHGetSpecialFolderPathW

oleaut32

SysReAllocString
VariantClear

shlwapi

PathUnquoteSpacesW
PathFileExistsW
PathRemoveBlanksW
PathIsRootW
PathAppendW
StrStrIA
PathFindFileNameW
PathRemoveFileSpecW
PathIsDirectoryW

psapi

GetMappedFileNameW

imagehlp

ImageGetCertificateHeader

wininet

HttpQueryInfoA
InternetReadFile
InternetOpenW
InternetConnectA
HttpOpenRequestA
InternetSetOptionW
InternetCloseHandle
HttpAddRequestHeadersA
HttpSendRequestW
InternetCrackUrlA

Exports

Exports

DllGetClassObject

Sections

.text
Size: 272KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/bseupd.dll
.dll windows:4 windows x86 arch:x86

355c3c1aafb2c8b4bcd8e55e1b8dad96

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0b:a4:bc:43:99:30:34:6b:95:69:4b:4c:7f:2b:98:1b
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/06/2009, 00:00

Not After

21/06/2012, 23:59

Subject

CN=Zhuhai Kingsoft Software Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Zhuhai Kingsoft Software Co.\,Ltd,L=Zhuhai,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

ae:df:7e:08:0a:3e:79:b0:3d:1d:b4:5d:17:0a:e3:ed:d0:e2:52:8a
Signer

Actual PE Digest

ae:df:7e:08:0a:3e:79:b0:3d:1d:b4:5d:17:0a:e3:ed:d0:e2:52:8a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\KINGSOFT_DUBA\Build\Build_Src\kcloud\kcloud\product\win32\bseupd.pdb

Imports

kernel32

GetVersionExW
CopyFileW
MoveFileExW
SetLastError
LocalFree
GetFileAttributesExW
InitializeCriticalSection
DeleteCriticalSection
SetEndOfFile
SetFilePointer
GetFileAttributesW
CreateDirectoryW
WriteFile
SetFileAttributesW
GetProcAddress
MoveFileW
FreeLibrary
LoadLibraryW
Sleep
WaitForSingleObject
ResumeThread
GetSystemTimeAsFileTime
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
GetPrivateProfileStringW
DeleteFileW
FindResourceExW
ReadFile
GetFileSize
LoadResource
LockResource
SizeofResource
CreateFileW
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
FindResourceW
lstrlenW
CloseHandle
GetPrivateProfileIntW
GetLastError
GetSystemDirectoryW
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
IsValidLocale
FreeEnvironmentStringsW
GetEnvironmentStrings
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
FreeEnvironmentStringsA
WriteConsoleA
SetStdHandle
GetLocaleInfoW
LoadLibraryA
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
RtlUnwind
GetCPInfo
LCMapStringA
LCMapStringW
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapCreate
VirtualFree
VirtualAlloc
GetStdHandle
GetModuleFileNameA
ExitProcess
SetHandleCount

advapi32

AddAce
InitializeAcl
SetNamedSecurityInfoW
IsValidSid
GetNamedSecurityInfoW
GetLengthSid
CopySid
GetSidSubAuthority
InitializeSid
RegSetValueExW
GetSidLengthRequired
RegCreateKeyExW
GetAce
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
GetAclInformation

shell32

SHGetSpecialFolderPathW
ShellExecuteW

shlwapi

StrRChrW
StrCmpNIW
StrToIntW
PathFindFileNameW
StrCmpNW

wininet

InternetSetOptionW
InternetCrackUrlW
InternetConnectW
InternetReadFile
HttpAddRequestHeadersW
HttpSendRequestW
InternetOpenW
HttpOpenRequestW
InternetCloseHandle
HttpQueryInfoW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

user32

UnregisterClassA

Exports

Exports

CreateObject

Sections

.text
Size: 260KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/cmdlineparser.dll
.dll windows:4 windows x86 arch:x86

3b4e88ec0aabac1bd720997fc66996c9

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\CmdLineParser.pdb

Imports

sogouexplorer

ord95
ord676
ord730
ord24
ord536
ord594
ord103
ord87
ord19
ord18
ord23
ord88
ord84
ord104
ord82
ord62
ord99
ord91
ord92
ord14
ord504
ord83
ord13
ord36
ord78
ord491
ord456
ord492
ord49
ord757
ord721
ord693
ord763
ord576
ord483
ord597
ord746
ord57
ord595
ord3
ord97
ord90
ord94
ord77
ord764
ord101
ord96
ord98
ord72
ord765
ord93
ord85
ord89
ord523
ord26
ord627
ord558
ord561
ord737
ord29
ord470
ord461
ord44
ord10
ord552
ord7
ord669
ord38
ord521
ord30
ord74
ord617
ord1033
ord697
ord612
ord698
ord598
ord547
ord12
ord636
ord15
ord5
ord9
ord430
ord1
ord2
ord557
ord592
ord734
ord736
ord22
ord740
ord767
ord761
ord633
ord599
ord677
ord60
ord739
ord490
ord585
ord494
ord586
ord587
ord735
ord696
ord1034
ord685
ord637
ord534
ord672
ord638
ord643
ord525
ord657
ord50
ord51
ord488
ord472
ord52
ord560
ord533
ord27
ord509
ord39
ord462
ord56
ord4
ord42
ord625
ord591
ord71
ord55
ord25
ord466
ord6
ord75
ord556
ord69
ord46
ord53

kernel32

GetCurrentProcessId
WTSGetActiveConsoleSessionId
GetPriorityClass
GetThreadPriority
GetCurrentThread
SetPriorityClass
SetThreadPriority
GetModuleHandleW
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleFileNameW
ProcessIdToSessionId
FileTimeToLocalFileTime
GetPrivateProfileStringW
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
InterlockedExchange
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTimeZoneInformation
ExitProcess
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
GetStartupInfoA
GetFileType
SetHandleCount
RtlUnwind
GetModuleFileNameA
GetStdHandle
HeapSize
VirtualFree
HeapDestroy
DeleteCriticalSection
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetVersionExA
GetCommandLineA
GetModuleHandleA
VirtualAlloc
VirtualProtect
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GlobalMemoryStatus
FileTimeToDosDateTime
GetSystemInfo
GetProcessTimes
GetSystemTimeAsFileTime
VirtualQuery
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetTempPathW
GetFileAttributesW
SetFileAttributesW
GetFullPathNameW
MulDiv
GlobalFree
LocalFree
RaiseException
GetProcAddress
LoadLibraryW
GetCurrentThreadId
OpenProcess
TerminateProcess
GetCurrentProcess
FlushInstructionCache
CreateThread
WaitForSingleObject
Sleep
SetLastError
EnterCriticalSection
GetTickCount
CreateEventW
LeaveCriticalSection
CloseHandle
SetEvent
VirtualAllocEx
WriteProcessMemory
ReadProcessMemory
VirtualFreeEx
FindNextFileA
FindClose
CreateProcessW
FileTimeToSystemTime
FindFirstFileA
GetTempFileNameW
CreateDirectoryW
MoveFileW
FindFirstFileW
FindNextFileW
RemoveDirectoryW
DeleteFileW
CopyFileW
InitializeCriticalSection
SetErrorMode
MoveFileExW
CreateFileW
WriteFile
ReadFile
GetLastError
GetFileSize
SetFilePointer
CreateFileA
HeapAlloc
HeapFree
GetProcessHeap
GetSystemDirectoryA
lstrcatA
CopyFileA
DeviceIoControl
lstrcpyA
lstrlenA
FreeLibrary
GetVersionExW
LoadLibraryA
LocalAlloc
HeapReAlloc
GlobalAlloc

user32

EnumChildWindows
EnumWindows
GetClassNameW
IsWindowVisible
LoadImageW
GetWindowTextLengthW
GetWindowTextW
DrawTextW
DrawIconEx
ScreenToClient
GetDlgItem
SendNotifyMessageW
GetDC
ReleaseDC
LoadStringW
GetActiveWindow
DialogBoxParamW
MapWindowPoints
EndPaint
DrawIcon
BeginPaint
SetWindowPos
SetWindowLongW
GetWindowLongW
DefWindowProcW
CreateWindowExW
GetMessageW
DispatchMessageW
IsWindow
UnregisterClassA
CallWindowProcW
DestroyWindow
RegisterClassExW
GetParent
EndDialog
GetWindow
GetWindowRect
wsprintfA
IsCharAlphaNumericW
MessageBoxW
wsprintfW
GetClientRect
GetClassInfoExW
EqualRect
IntersectRect
SystemParametersInfoW
GetWindowThreadProcessId
FindWindowExW
LoadCursorW
FindWindowW
SendMessageW
CopyRect
PostQuitMessage
PostMessageW
DestroyIcon

gdi32

GetDeviceCaps
DeleteObject
SelectObject
SetBkColor
ExtTextOutW
GetClipBox
SetTextColor

advapi32

CryptImportKey
CryptVerifySignatureW
CryptHashData
CryptCreateHash
CryptAcquireContextW
CryptDestroyKey
CryptReleaseContext
GetLengthSid
IsValidSid
GetTokenInformation
SetTokenInformation
EqualSid
OpenProcessToken
SaferCreateLevel
SaferComputeTokenFromLevel
AllocateAndInitializeSid
FreeSid
SaferCloseLevel
CopySid
CreateProcessAsUserW
GetUserNameW
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegEnumKeyW
RegOpenCurrentUser
RegOpenKeyW

shell32

ExtractIconExA
ShellExecuteExW
SHGetFolderPathW
SHGetFolderPathA
CommandLineToArgvW
ord165

ole32

OleSetContainedObject
CoGetClassObject
CoInitializeSecurity
OleUninitialize
OleInitialize
CoFileTimeNow
CoCreateInstance
CoUninitialize
CoInitialize
CoInitializeEx

oleaut32

VarBstrCmp
SysStringLen
SysAllocString
SysFreeString
VariantClear
VariantInit

crypt32

CryptMsgGetParam
CryptQueryObject
CertCloseStore
CryptMsgClose
CertFreeCertificateContext
CertGetNameStringW
CertFindCertificateInStore

shlwapi

SHGetValueW
SHSetValueW
PathFileExistsW
StrStrIA
SHGetValueA
SHSetValueA
SHDeleteValueW

userenv

UnloadUserProfile

Exports

Exports

GetISE

Sections

.text
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/dialog.dll
.dll windows:4 windows x86 arch:x86

dda4ab3357d1bda3a6c110411ce2fd53

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\Dialog.pdb

Imports

sogouexplorer

ord101
ord98
ord450
ord406
ord738
ord430
ord675
ord61
ord80
ord484
ord431
ord421
ord475
ord603
ord477
ord528
ord570
ord754
ord602
ord55
ord75
ord73
ord751
ord443
ord750
ord510
ord68
ord52
ord48
ord43
ord627
ord591
ord60
ord620
ord46
ord71
ord530
ord532
ord499
ord542
ord768
ord438
ord753
ord752
ord720
ord573
ord628
ord547
ord607
ord632
ord662
ord669
ord479
ord14
ord658
ord457
ord144
ord695
ord487
ord703
ord526
ord78
ord659
ord718
ord563
ord13
ord552
ord562
ord143
ord25
ord28
ord453
ord441
ord556
ord494
ord488
ord737
ord525
ord698
ord1034
ord521
ord534
ord536
ord490
ord22
ord38
ord29
ord520
ord1033
ord527
ord540
ord674
ord83
ord611
ord64
ord616
ord437
ord45
ord21
ord650
ord652
ord497
ord735
ord401
ord687
ord452
ord74
ord647
ord516
ord482
ord621
ord589
ord726
ord93
ord86
ord102
ord100
ord90
ord96
ord561
ord7
ord486
ord613
ord719
ord747
ord741
ord442
ord446
ord574
ord742
ord451
ord700
ord743
ord445
ord447
ord18
ord422
ord418
ord414
ord645
ord39
ord1
ord2
ord425
ord723
ord725
ord724
ord661
ord554
ord424
ord469
ord596
ord680
ord429
ord543
ord538
ord426
ord745
ord65
ord503
ord600
ord402
ord480
ord6
ord681
ord515
ord682
ord415
ord569
ord404
ord444
ord489
ord505
ord696
ord506
ord697
ord704
ord27
ord683
ord492
ord512
ord535
ord522
ord507
ord551
ord710
ord714
ord716
ord715
ord713
ord614
ord524
ord541
ord49
ord550

kernel32

GlobalFree
FreeResource
FileTimeToSystemTime
FileTimeToLocalFileTime
GetPrivateProfileIntW
GetPrivateProfileStringA
GetFileTime
SearchPathW
GetThreadLocale
SetEndOfFile
QueryPerformanceCounter
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
InterlockedExchange
RtlUnwind
VirtualQuery
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
FlushFileBuffers
ReadFile
SetFilePointer
GetStartupInfoA
GetFileType
SetHandleCount
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
LCMapStringW
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleA
VirtualAlloc
DeleteCriticalSection
VirtualFree
HeapDestroy
GetVersionExA
GetCommandLineA
GetSystemTimeAsFileTime
ExitThread
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapAlloc
HeapFree
GetCurrentProcessId
OutputDebugStringW
GetLocalTime
GetSystemDefaultLCID
GetSystemInfo
WritePrivateProfileStringW
ExpandEnvironmentStringsW
GetModuleFileNameW
GetProcessHeap
LocalFree
LocalAlloc
TryEnterCriticalSection
InitializeCriticalSection
TerminateThread
LoadLibraryW
TerminateProcess
GetExitCodeProcess
MulDiv
GetNumberFormatW
GetLocaleInfoW
CreateDirectoryW
CreateFileW
GetFileAttributesW
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
RemoveDirectoryW
InterlockedDecrement
Sleep
MoveFileExW
GetTickCount
lstrlenW
GlobalUnlock
GlobalLock
FindFirstFileW
DeleteFileW
FindNextFileW
FindClose
GetLastError
GetProcAddress
SetLastError
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetVersionExW
CreateThread
CreateEventW
RaiseException
WaitForMultipleObjects
CloseHandle
FreeLibrary
SetCurrentDirectoryW
GetExitCodeThread
SetEvent
WaitForSingleObject
GetCurrentDirectoryW
GetModuleHandleW
GlobalAlloc

user32

ChildWindowFromPoint
EqualRect
UpdateLayeredWindow
GetMonitorInfoW
MonitorFromPoint
LoadStringW
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx
CheckRadioButton
IntersectRect
SetScrollPos
SetMenuItemInfoW
GetWindowThreadProcessId
AttachThreadInput
SetParent
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
RedrawWindow
IsWindowVisible
SetCaretPos
ScrollWindowEx
IsDialogMessageW
DestroyWindow
InflateRect
ShowScrollBar
SetForegroundWindow
RegisterHotKey
CharLowerBuffW
CharNextW
UnregisterHotKey
GetKeyNameTextW
GetKeyboardLayout
MapVirtualKeyExW
FillRect
GetSystemMetrics
DestroyIcon
CallWindowProcW
GetParent
GetDesktopWindow
ValidateRect
CreateWindowExW
GetClassInfoExW
RegisterClassExW
IsDlgButtonChecked
CheckDlgButton
UpdateWindow
CreateDialogParamW
ClientToScreen
GetTabbedTextExtentW
GetFocus
MessageBeep
InsertMenuW
CreatePopupMenu
PtInRect
GetClipboardData
SetClipboardData
GetKeyState
EmptyClipboard
IsClipboardFormatAvailable
CloseClipboard
OpenClipboard
GetScrollRange
RegisterClipboardFormatW
GetScrollPos
DestroyMenu
SetWindowLongW
GetActiveWindow
DialogBoxParamW
GetDC
IsWindowEnabled
ReleaseDC
IsWindow
UnregisterClassA
GetUpdateRect
GetCapture
DrawEdge
TrackPopupMenuEx
SetTimer
GetDlgItemTextW
KillTimer
DrawIconEx
MoveWindow
OffsetRect
wsprintfW
PostThreadMessageW
EnableWindow
PeekMessageW
ScreenToClient
GetWindowRect
ShowWindow
GetWindow
SystemParametersInfoW
MapWindowPoints
SetDlgItemTextW
GetDlgItem
SetFocus
GetWindowTextLengthW
CopyIcon
SetWindowTextW
InvalidateRect
DefWindowProcW
GetClientRect
GetWindowLongW
EndPaint
GetAncestor
BeginPaint
GetWindowTextW
SendMessageTimeoutW
SendMessageW
PostMessageW
TrackMouseEvent
GetDlgCtrlID
CopyRect
EndDialog
WindowFromPoint
DrawTextW
SetWindowPos
GetCursorPos
GetSysColor
ReleaseCapture
SetCursor
SetCapture
MessageBoxW
DestroyCursor
LoadCursorW
BringWindowToTop
GetWindowDC
DispatchMessageW
IsRectEmpty
UnionRect
SetRectEmpty
DrawFocusRect
AdjustWindowRectEx
GetMessageW
TranslateMessage
SetActiveWindow
GetSysColorBrush

gdi32

DeleteDC
CreateFontIndirectW
GetObjectW
CreateCompatibleDC
ExtTextOutW
SetTextColor
SetBkMode
SetBkColor
GetClipBox
SelectObject
CreateRectRgnIndirect
ExtSelectClipRgn
SelectClipRgn
CreateFontW
ExtCreatePen
GetTextMetricsA
GetTextExtentPointA
GetCurrentObject
DeleteObject
CreateDIBSection
RoundRect
SetPixel
StretchBlt
GetObjectType
TextOutW
LPtoDP
DPtoLP
SetWindowOrgEx
GetViewportOrgEx
SetROP2
GetTextExtentPointW
LineTo
GetTextExtentPoint32W
MoveToEx
EnumFontFamiliesExW
SetGraphicsMode
GetTextColor
GetBkColor
GetStockObject
Rectangle
CreateSolidBrush
CreatePen
BitBlt
CreateCompatibleBitmap
SetViewportOrgEx

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegSetValueExW
RegCloseKey
RegQueryValueExW
RegDeleteKeyW
RegCreateKeyExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyExW

shell32

SHChangeNotify
ord153
ord25
SHGetSpecialFolderLocation
SHGetDesktopFolder
ord155
ExtractIconExA
SHGetDiskFreeSpaceExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetSpecialFolderPathW
ExtractIconExW
ord165
SHGetFolderPathW
ShellExecuteExW

ole32

CoTaskMemAlloc
CoUninitialize
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal
OleSetContainedObject
OleDraw
CoTaskMemFree

oleaut32

SysStringByteLen
VariantCopy
VariantInit
VariantClear
VariantChangeType
SysAllocString
SysFreeString

shlwapi

SHDeleteKeyW
PathFileExistsW
SHSetValueW
SHDeleteValueW
SHOpenRegStream2W
PathAppendW
SHGetValueW

comctl32

ord413
ImageList_Destroy
ImageList_Create
ImageList_Add
ImageList_ReplaceIcon
ImageList_Draw
ImageList_DrawEx
ImageList_AddMasked
ImageList_GetImageCount
ord334
ord386
ord338
ImageList_GetIcon
FlatSB_GetScrollInfo
FlatSB_SetScrollPos
ImageList_Remove
ord412
ord410
FlatSB_SetScrollInfo

msimg32

AlphaBlend

Exports

Exports

GetISE

Sections

.text
Size: 544KB - Virtual size: 544KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/dialogcore.dll
.dll windows:4 windows x86 arch:x86

fb457570d695de7efb8527f6b9d62132

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\DialogCore.pdb

Imports

wininet

InternetGetCookieW

sogouexplorer

ord1034
ord760
ord535
ord52
ord60
ord589
ord436
ord536
ord556
ord580
ord29
ord28
ord65
ord591
ord1033
ord627
ord422
ord48
ord68
ord41
ord430
ord504
ord621
ord40
ord80
ord731
ord732
ord6
ord144
ord83
ord23
ord1
ord2
ord142

kernel32

WriteConsoleW
lstrlenA
CreateFileA
FlushFileBuffers
GetConsoleOutputCP
EnterCriticalSection
LeaveCriticalSection
ExpandEnvironmentStringsW
GetCurrentThreadId
RaiseException
GetVersionExW
GetDiskFreeSpaceW
GetCurrentProcess
GetDiskFreeSpaceExW
FlushInstructionCache
CloseHandle
GetLastError
CreateFileW
DeleteFileW
Sleep
SetLastError
GetTempFileNameW
GetProcAddress
LoadLibraryW
SetEvent
CreateEventW
CreateThread
WaitForSingleObject
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
ExitThread
HeapReAlloc
HeapAlloc
GetSystemTimeAsFileTime
GetCommandLineA
GetVersionExA
GetProcessHeap
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
HeapDestroy
VirtualFree
DeleteCriticalSection
VirtualAlloc
ExitProcess
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LoadLibraryA
GetLocaleInfoA
RtlUnwind
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA

user32

SetTimer
TranslateMessage
SetWindowTextW
TrackPopupMenu
DispatchMessageW
DestroyMenu
GetDC
LoadCursorW
MessageBoxW
IsWindowEnabled
DestroyCursor
SendMessageTimeoutW
IsWindow
DialogBoxParamW
GetClassInfoExW
PostQuitMessage
PeekMessageW
PostThreadMessageW
GetMessageW
CreateWindowExW
RegisterClassExW
SetDlgItemTextW
IsWindowVisible
FillRect
IsRectEmpty
SetScrollInfo
ClientToScreen
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
SetWindowLongW
GetWindowLongW
SetCursor
GetWindowTextLengthW
TrackMouseEvent
GetActiveWindow
SetWindowPos
GetWindowTextW
GetClientRect
GetDlgCtrlID
WindowFromPoint
GetCursorPos
SendMessageW
GetDlgItem
ReleaseCapture
GetParent
PostMessageW
KillTimer
SetCapture
SystemParametersInfoW
ShowWindow
MapWindowPoints
ReleaseDC
DrawTextW
SetForegroundWindow
GetWindowDC
GetAncestor
CopyRect
GetWindow
GetFocus
InvalidateRect
GetSysColor
DestroyIcon
SetMenuItemBitmaps
InsertMenuW
ScreenToClient
EndPaint
CreatePopupMenu
BeginPaint
DrawIconEx
UnregisterClassA
SetFocus
GetWindowRect
EndDialog
CallWindowProcW
DestroyWindow
DefWindowProcW

gdi32

GetClipBox
SetBkMode
CreateFontW
SelectObject
BitBlt
DeleteDC
ExtTextOutW
SetBkColor
DeleteObject
MoveToEx
SetTextColor
CreateFontIndirectW
CreateCompatibleBitmap
SetViewportOrgEx
CreateSolidBrush
GetObjectW
CreateCompatibleDC
CreatePen
LineTo

comdlg32

GetSaveFileNameW
GetOpenFileNameW

shell32

ord165
SHGetFolderPathW
SHGetFileInfoW
ExtractIconExW

oleaut32

VariantInit
SysAllocString
GetErrorInfo
VariantClear
SysFreeString

shlwapi

PathFileExistsW
wnsprintfW
PathAppendW

comctl32

ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

ole32

CoCreateInstance

Exports

Exports

GetISE

Sections

.text
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/download.dll
.dll windows:4 windows x86 arch:x86

19a09431c213f68be8c5d5d5ae2b03b9

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\Download.pdb

Imports

ws2_32

socket
sendto
connect
WSAGetLastError
closesocket
shutdown
send
recv
gethostbyname
WSAStartup
WSACleanup
ntohs
listen
ioctlsocket
getsockname
bind
__WSAFDIsSet
accept
inet_ntoa
htons
inet_addr
select

wininet

InternetReadFile
InternetQueryOptionA
InternetCrackUrlW
HttpSendRequestA
HttpOpenRequestA
InternetGetCookieW
InternetConnectA
InternetCrackUrlA
InternetQueryDataAvailable
InternetSetOptionA
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionW
InternetCloseHandle
InternetOpenA
InternetGetCookieA

credui

CredUIPromptForCredentialsW

oleacc

AccessibleObjectFromWindow
AccessibleChildren

urlmon

URLDownloadToFileW

sogouexplorer

ord519
ord518
ord16
ord72
ord141
ord143
ord7
ord45
ord6
ord535
ord65
ord142
ord60
ord28
ord529
ord621
ord548
ord144
ord737
ord659
ord697
ord438
ord696
ord22
ord29
ord39
ord523
ord140
ord591
ord525
ord81
ord495
ord52
ord74
ord21
ord549
ord75
ord68
ord449
ord48
ord490
ord492
ord629
ord489
ord578
ord520
ord409
ord769
ord536
ord749
ord501
ord733
ord1034
ord1033
ord556
ord138
ord93
ord86
ord102
ord103
ord89
ord94
ord90
ord96
ord98
ord101
ord87
ord95
ord63
ord73
ord20
ord44
ord139
ord575
ord85
ord1
ord2
ord626

kernel32

IsValidCodePage
CreateFileA
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
LoadLibraryA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
RtlUnwind
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
GetModuleFileNameA
HeapSize
ExitProcess
GetModuleHandleA
VirtualQuery
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
VirtualAlloc
VirtualFree
HeapDestroy
GetSystemTimeAsFileTime
GetProcessHeap
GetVersionExA
GetCommandLineA
HeapAlloc
HeapReAlloc
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapFree
CreateFileMappingW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
WriteFile
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
MoveFileExW
GetStdHandle
AllocConsole
ResumeThread
SuspendThread
ReadFile
DeleteFileW
CloseHandle
MoveFileW
CopyFileW
CreateEventW
CreateThread
WaitForSingleObject
SetEvent
Sleep
GetTickCount
CreateFileW
FindFirstFileW
GetSystemTime
SystemTimeToFileTime
FindNextFileW
LeaveCriticalSection
GetCurrentThreadId
RaiseException
GetCurrentProcess
FlushInstructionCache
SetLastError
EnterCriticalSection
GlobalUnlock
CreateDirectoryW
GlobalAlloc
GlobalLock
LoadLibraryW
GetProcAddress
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetVersionExW
GetLastError
ExpandEnvironmentStringsW
CreateProcessW
GetExitCodeProcess
InterlockedExchange
InterlockedExchangeAdd
GetLocalTime
InitializeCriticalSection
DeleteCriticalSection
GetFileSize
SetFilePointer

user32

GetForegroundWindow
PostQuitMessage
DestroyWindow
KillTimer
SetTimer
DestroyIcon
CopyIcon
GetParent
GetAncestor
GetFocus
FlashWindow
LoadImageW
GetActiveWindow
DialogBoxParamW
GetKeyState
DrawTextW
CopyRect
FindWindowExW
SetClipboardData
GetDesktopWindow
OpenClipboard
CloseClipboard
EmptyClipboard
InvalidateRect
SetWindowPos
RegisterWindowMessageW
GetSystemMetrics
MapWindowPoints
GetClientRect
GetWindowRect
SystemParametersInfoW
GetWindow
GetSysColor
DestroyCursor
SetFocus
SetWindowTextW
SendNotifyMessageW
GetScrollInfo
SetScrollInfo
SetCapture
GetWindowDC
ReleaseCapture
ReleaseDC
BeginPaint
EndPaint
GetCursorPos
CreateIconIndirect
GetIconInfo
TrackMouseEvent
GetWindowTextLengthW
GetDlgItem
GetDlgCtrlID
GetWindowTextW
DrawIcon
LoadIconW
EnableWindow
GetDC
SetDlgItemTextW
WindowFromPoint
GetClipboardData
EndDialog
DrawIconEx
IsIconic
IsWindowEnabled
SetForegroundWindow
BringWindowToTop
IsWindowVisible
ShowWindow
SetWindowLongW
GetClassInfoExW
RegisterClassExW
SendMessageW
DefWindowProcW
CallWindowProcW
GetWindowLongW
SetCursor
LoadCursorW
MessageBoxW
GetMessageW
PostThreadMessageW
PeekMessageW
PostMessageW
IsWindow
UnregisterClassA
CreateWindowExW

gdi32

GetCurrentObject
DeleteDC
CreateSolidBrush
ExtFloodFill
RoundRect
CreatePen
GetObjectW
SetViewportOrgEx
CreateDIBSection
CreateFontW
GetClipBox
BitBlt
ExtTextOutW
SelectObject
SetBkColor
SetTextColor
SetBkMode
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
GetTextColor

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegOpenKeyW
RegCloseKey
RegCreateKeyW
RegOpenKeyExW
RegQueryValueExW
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyExA
RegOpenCurrentUser
RegDeleteKeyW
RegQueryValueExA

shell32

SHGetFolderPathW
SHGetFolderPathA
ExtractIconExW
SHOpenFolderAndSelectItems
SHGetDesktopFolder
SHFileOperationW
SHGetFileInfoW
ord165
ExtractIconW
ShellExecuteExW

ole32

CoTaskMemFree
CoInitialize
CoCreateInstance

oleaut32

SysFreeString

shlwapi

wnsprintfW
SHGetValueW
ord14
PathFileExistsW
SHGetValueA

comctl32

ImageList_Create
ImageList_ReplaceIcon
ImageList_Destroy

msimg32

AlphaBlend

Exports

Exports

GetISE

Sections

.text
Size: 371KB - Virtual size: 370KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/dynamark.dll
.dll windows:4 windows x86 arch:x86

77cd3169d22a1418e1368ebc9922a0cb

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\Dynamark.pdb

Imports

ws2_32

__WSAFDIsSet
select
recv
send
closesocket
connect
htons
inet_addr
socket
WSAStartup
WSAGetLastError
inet_ntoa
gethostbyname

secur32

QueryContextAttributesW
DeleteSecurityContext
DecryptMessage
EncryptMessage
AcquireCredentialsHandleW
InitializeSecurityContextW
FreeCredentialsHandle

psapi

GetModuleFileNameExW

sogouexplorer

ord697
ord631
ord405
ord68
ord48
ord1
ord2
ord684
ord433
ord737
ord76
ord544
ord40
ord60
ord79
ord44
ord32
ord663
ord73
ord748
ord72
ord43
ord523
ord558
ord561
ord8
ord51
ord709
ord75
ord732
ord590
ord553
ord665
ord520
ord717
ord613
ord535
ord545
ord403
ord660
ord711
ord52
ord531
ord656
ord468
ord537
ord438
ord534
ord664
ord511
ord699
ord536
ord727
ord36
ord80
ord59
ord705
ord689
ord439
ord702
ord464
ord618
ord471
ord408
ord407
ord731
ord64
ord489
ord670
ord671
ord63
ord458
ord1033
ord493
ord57
ord1034
ord577
ord27
ord58
ord7
ord65
ord455
ord6
ord18
ord625
ord61
ord74
ord627
ord591
ord11
ord423
ord83
ord19
ord24
ord81
ord78
ord512
ord525
ord410
ord667
ord506
ord490
ord666
ord619
ord552
ord454
ord53
ord630
ord437
ord556
ord540

kernel32

SetEvent
LocalAlloc
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InterlockedExchange
InitializeCriticalSection
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetLocaleInfoW
GetLocaleInfoA
LoadLibraryA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
FlushFileBuffers
ReadFile
SetFilePointer
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
SetHandleCount
GetTimeZoneInformation
RtlUnwind
ExitProcess
HeapSize
VirtualAlloc
VirtualFree
HeapDestroy
DeleteCriticalSection
LCMapStringW
WideCharToMultiByte
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
GetStdHandle
WriteFile
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetProcessHeap
GetVersionExA
GetCommandLineA
HeapFree
HeapAlloc
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetPrivateProfileIntW
GetWindowsDirectoryW
FreeLibrary
QueryDosDeviceW
GetLogicalDriveStringsW
GetProcAddress
MultiByteToWideChar
GetLastError
OpenProcess
GetCurrentProcessId
CloseHandle
TerminateThread
WaitForSingleObject
Sleep
lstrcmpiW
CompareFileTime
SystemTimeToFileTime
GetSystemTime
RaiseException
CreateEventW
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
SetLastError
FlushInstructionCache
GetCurrentProcess
CreateThread
GetTickCount

user32

SetFocus
UnregisterClassA
MessageBoxW
PostThreadMessageW
PostMessageW
GetMessageW
DispatchMessageW
CallWindowProcW
SetWindowLongW
GetWindowLongW
DefWindowProcW
SendMessageW
MsgWaitForMultipleObjects
CreateWindowExW
RegisterClassExW
GetClassInfoExW
LoadCursorW
SetTimer
KillTimer
DestroyWindow
GetAsyncKeyState
IsWindow
SystemParametersInfoW
GetSystemMetrics
WindowFromPoint
GetWindowThreadProcessId
IsWindowEnabled
GetClassNameW
GetForegroundWindow
GetWindowRect
SetWindowPos
MonitorFromPoint
GetMonitorInfoW
IsWindowVisible
SetForegroundWindow
TrackMouseEvent
ShowWindowAsync

shlwapi

SHGetValueW
StrStrIA

Exports

Exports

GetISE

Sections

.text
Size: 400KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/extension.dll
.dll windows:4 windows x86 arch:x86

5f148ae188de6b12addaf5f8084002d2

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\Extension.pdb

Imports

sogouexplorer

ord25
ord557
ord589
ord536
ord68
ord48
ord7
ord51
ord535
ord63
ord57
ord12
ord44
ord515
ord760
ord621
ord52
ord74
ord6
ord82
ord49
ord759
ord14
ord47
ord612
ord509
ord461
ord470
ord460
ord504
ord73
ord75
ord1034
ord53
ord411
ord412
ord1033
ord1
ord2
ord520
ord514
ord690
ord71
ord13

kernel32

LocalAlloc
SetEndOfFile
CreateFileW
GetCurrentProcessId
GetLastError
CloseHandle
GetTickCount
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
SetEvent
CreateEventW
CreateThread
WaitForSingleObject
GetCurrentProcess
FlushInstructionCache
SetLastError
EnterCriticalSection
GetProcAddress
LoadLibraryW
LeaveCriticalSection
GetVersionExW
GetCurrentThreadId
RaiseException
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersionExA
HeapDestroy
VirtualFree
DeleteCriticalSection
VirtualAlloc
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
Sleep
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSection
RtlUnwind
FreeLibrary
InterlockedExchange
LoadLibraryA
MultiByteToWideChar
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
FlushFileBuffers
GlobalFree
GlobalAlloc
SearchPathW
GetProcessHeap
WriteConsoleW

user32

GetDC
CreateWindowExW
SetWindowContextHelpId
DestroyWindow
CallWindowProcW
GetCursorPos
GetForegroundWindow
LoadCursorW
UpdateLayeredWindow
DefWindowProcW
GetClassInfoExW
SetWindowPos
GetSystemMetrics
GetSysColor
SetWindowTextW
SetFocus
SetCursor
DrawTextW
GetParent
GetKeyState
ScreenToClient
EqualRect
IntersectRect
IsWindowVisible
SystemParametersInfoW
InvalidateRect
PeekMessageW
DispatchMessageW
DrawEdge
GetWindow
MapWindowPoints
GetMessageW
TranslateMessage
GetUpdateRect
BeginPaint
EndPaint
SetCapture
ReleaseCapture
TrackMouseEvent
RedrawWindow
GetCapture
UnregisterClassA
RegisterClassExW
SetTimer
SetWindowLongW
GetClientRect
OffsetRect
CopyRect
GetMonitorInfoW
MonitorFromWindow
SetParent
ShowWindow
KillTimer
SetForegroundWindow
GetWindowRect
GetAncestor
ReleaseDC
GetWindowDC
DestroyIcon
GetIconInfo
LoadImageW
CreateIconIndirect
IsWindow
SendMessageW
GetWindowLongW
GetWindowContextHelpId
PostMessageW
GetAsyncKeyState

gdi32

SelectObject
BitBlt
CreateFontW
DeleteObject
GetObjectW
CreateCompatibleBitmap
DeleteDC
StretchBlt
SetBkMode
CreateDIBSection
GetTextExtentPoint32W
CreateCompatibleDC
GetViewportOrgEx
GetTextColor
GetCurrentObject
ExtTextOutW
SetBkColor
SelectClipRgn
SetTextColor
GetStockObject
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SetViewportOrgEx

separser

ord174
ord147
ord422
ord433
ord105
ord408
ord423
ord261
ord262
ord272
ord241
ord418
ord406
??0CTuoAsyncRequestHolder@@QAE@XZ
??1CTuoAsyncRequestData@@MAE@XZ
??0CTuoAsyncRequestData@@QAE@PAVCTuoAsyncRequestHolder@@@Z
ord347
ord29
ord16
ord339
ord72
ord309
ord286
ord293
ord327
ord344
ord299
ord109
ord416
ord342
ord281
ord300
ord287
ord373
??1CTuoAsyncRequestHolder@@QAE@XZ
ord98
ord214
ord343
ord291
ord313
ord7
ord414
ord264
ord213
ord255
ord52
ord258
ord242
ord50
ord102
ord107
ord420
ord132
ord22
ord119
ord236
ord118
ord273
ord431
ord310
ord426
?OnRequestFromWndMessage@GlobalAsyncRequestManager@@SAXHJ@Z
ord151

msimg32

AlphaBlend

advapi32

CryptVerifySignatureW
CryptAcquireContextW
CryptCreateHash
CryptDestroyKey
CryptReleaseContext
CryptImportKey
CryptHashData

shell32

ord165

ole32

CreateStreamOnHGlobal

Exports

Exports

GetISE

Sections

.text
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/extensionui.dll
.dll windows:4 windows x86 arch:x86

467fb5c4fccc9b55891d8d5766e75b1e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\ExtensionUI.pdb

Imports

sogouexplorer

ord2
ord1
ord609
ord430
ord621
ord620
ord23
ord513
ord744
ord594
ord516
ord68
ord52
ord25
ord690
ord520
ord536
ord39
ord1034
ord433
ord74
ord509
ord498
ord61
ord13
ord71
ord49
ord44
ord6
ord12
ord458
ord437
ord73
ord489
ord514
ord51
ord658
ord60
ord1033
ord525
ord535
ord7
ord452
ord48
ord557

kernel32

LCMapStringA
GetStringTypeA
CreateFileW
SetEndOfFile
GetStringTypeW
GetConsoleMode
LCMapStringW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetModuleHandleW
SetLastError
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
FindResourceW
LoadResource
DeleteFileW
LockResource
SizeofResource
GetCurrentProcess
FlushInstructionCache
GetTickCount
CloseHandle
SetEvent
CreateEventW
CreateThread
WaitForSingleObject
lstrlenW
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetVersionExA
GetProcessHeap
HeapDestroy
VirtualFree
DeleteCriticalSection
VirtualAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSize
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
RtlUnwind
LoadLibraryA
MultiByteToWideChar
GetLocaleInfoA
SetFilePointer
GetConsoleCP

user32

LoadCursorW
AdjustWindowRect
DispatchMessageW
LoadImageW
AttachThreadInput
GetIconInfo
GetWindowThreadProcessId
GetWindowDC
SetParent
GetClientRect
TranslateMessage
ReleaseDC
SetFocus
SetTimer
ShowWindow
UpdateWindow
CopyIcon
GetSystemMetrics
RedrawWindow
EnableWindow
GetDC
OffsetRect
BeginPaint
EndPaint
GetDlgItem
IsDlgButtonChecked
MapWindowPoints
GetParent
DrawTextW
SystemParametersInfoW
EndDialog
GetWindow
MessageBoxW
GetMessageW
CreateWindowExW
GetClassInfoExW
SetWindowTextW
RegisterClassExW
KillTimer
CreateIconIndirect
GetAsyncKeyState
DrawIconEx
InvalidateRect
GetCursorPos
DestroyIcon
GetForegroundWindow
DefWindowProcW
ClientToScreen
DestroyWindow
ScreenToClient
SetWindowPos
GetWindowRect
CallWindowProcW
GetWindowLongW
PostMessageW
IsWindowVisible
UnregisterClassA
RegisterClassW
SetWindowLongW
SendMessageW
SetForegroundWindow
GetClassInfoW
DialogBoxParamW
BringWindowToTop
IsWindow
FindWindowW
GetDesktopWindow

gdi32

DeleteObject
CreateCompatibleDC
SelectObject
GetObjectW
DeleteDC
GetTextExtentPoint32W
SetBkMode
GetClipBox
StretchBlt

msimg32

AlphaBlend

advapi32

CryptHashData
CryptDestroyKey
CryptImportKey
CryptVerifySignatureW
CryptReleaseContext
CryptCreateHash
CryptAcquireContextW

shell32

ord165

Exports

Exports

GetISE

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/metasearch.dll
.dll windows:4 windows x86 arch:x86

530ec28093dad46af5c01b2cc09ff750

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\MetaSearch.pdb

Imports

sogouexplorer

ord1
ord44
ord703
ord557
ord16
ord72
ord7
ord459
ord509
ord53
ord2
ord458
ord73
ord56
ord4
ord534
ord25
ord71
ord55
ord535
ord6
ord68
ord556
ord498
ord1034
ord523
ord75
ord561
ord74
ord1033
ord48
ord52
ord504
ord57
ord612
ord427

kernel32

HeapSize
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEndOfFile
SetStdHandle
GetLocaleInfoW
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCurrentProcess
GlobalMemoryStatusEx
FlushInstructionCache
SetLastError
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetCurrentThreadId
CloseHandle
RaiseException
CreateEventW
CreateThread
WaitForSingleObject
CreateDirectoryW
WriteFile
CreateFileW
ReadFile
FreeLibrary
FormatMessageA
GetLastError
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetSystemTimeAsFileTime
AllocConsole
GetCurrentProcessId
SetConsoleCtrlHandler
FreeConsole
HeapReAlloc
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetModuleHandleA
ExitProcess
RtlUnwind
CreateProcessA
DuplicateHandle
MoveFileA
DeleteFileA
GetTimeFormatA
GetDateFormatA
InterlockedIncrement
InterlockedDecrement
GetCommandLineA
GetVersionExA
GetProcessHeap
DeleteCriticalSection
HeapDestroy
VirtualFree
VirtualAlloc
VirtualQuery
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
MultiByteToWideChar
InitializeCriticalSection
GetFileAttributesA
CreateFileA
CreatePipe
GetExitCodeProcess
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
GetTimeZoneInformation

user32

GetWindowLongW
GetIconInfo
FindWindowExW
GetWindowThreadProcessId
GetSystemMenu
DeleteMenu
DrawMenuBar
CreateWindowExW
LoadCursorW
DispatchMessageW
PeekMessageW
IsWindow
GetMessageW
GetClassInfoExW
PostMessageW
RegisterClassExW
KillTimer
DefWindowProcW
SetWindowLongW
SetTimer
CallWindowProcW
UnregisterClassA
SendMessageW

gdi32

GetDIBits
DeleteDC
CreateCompatibleDC
GetObjectW
DeleteObject

advapi32

RegCreateKeyW
RegCloseKey
RegOpenKeyW
RegOpenCurrentUser
RegQueryValueExW

Exports

Exports

GetISE

Sections

.text
Size: 253KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/networkdetect.dll
.dll windows:4 windows x86 arch:x86

5a4d441ef58e1a9ec25e8f4158e4204d

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\NetworkDetect.pdb

Imports

wininet

InternetReadFile
InternetCloseHandle
HttpQueryInfoW
InternetOpenW
InternetOpenUrlW

sogouexplorer

ord696
ord729
ord697
ord437
ord433
ord22
ord525
ord712
ord659
ord701
ord536
ord1034
ord524
ord548
ord27
ord520
ord489
ord719
ord490
ord613
ord560
ord1
ord2
ord1033

kernel32

SetHandleCount
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
SetFilePointer
RtlUnwind
InitializeCriticalSection
GetLocaleInfoA
MultiByteToWideChar
GetCurrentThreadId
GetPrivateProfileStringW
DeleteFileW
CreateThread
CloseHandle
GetCurrentProcess
FlushInstructionCache
HeapAlloc
GetProcessHeap
SetLastError
GetTickCount
EnterCriticalSection
HeapFree
LeaveCriticalSection
Sleep
RaiseException
CreateFileW
GetLastError
GetFileAttributesW
SetFileAttributesW
WriteFile
GetProcAddress
GetModuleHandleW
HeapReAlloc
GetCommandLineA
GetVersionExA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
HeapDestroy
VirtualFree
VirtualAlloc
HeapSize
TerminateProcess
IsDebuggerPresent
ExitProcess
VirtualQuery
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage

user32

UnregisterClassA
SetWindowLongW
GetWindowLongW
DefWindowProcW
CreateWindowExW
RegisterClassExW
PostMessageW
KillTimer
GetMessageW
GetClassInfoExW
DestroyWindow
TranslateMessage
DispatchMessageW
LoadCursorW
IsIconic
SetTimer
CallWindowProcW
SendMessageW
ShowWindow
SetActiveWindow
GetCursorPos
LoadImageW
GetSystemMetrics
SetForegroundWindow
PostThreadMessageW

shell32

ShellExecuteExW

Exports

Exports

GetISE

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/np-mswmp.dll
.dll windows:6 windows x86 arch:x86

6248bec906df433624b546a90f44da2b

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:53

Not After

16/09/2011, 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/09/2006, 01:55

Not After

16/09/2011, 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04/04/2006, 17:44

Not After

26/04/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/04/2006, 19:43

Not After

04/10/2007, 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

26:1e:cf:d6:29:79:85:bf:29:37:b7:99:a6:d1:c8:fd:22:5c:65:e3
Signer

Actual PE Digest

26:1e:cf:d6:29:79:85:bf:29:37:b7:99:a6:d1:c8:fd:22:5c:65:e3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

np-mswmp.pdb

Imports

msvcrt

??_U@YAPAXI@Z
iswspace
wcsspn
wcscspn
_wtoi
atoi
atof
memcpy
wcsstr
__CxxFrameHandler
_errno
_XcptFilter
_initterm
_amsg_exit
_adjust_fdiv
??1type_info@@UAE@XZ
?terminate@@YAXXZ
realloc
_unlock
__dllonexit
_lock
_onexit
memmove
mbtowc
__mb_cur_max
isleadbyte
_iob
_snprintf
_itoa
ferror
__badioinfo
__pioinfo
_fileno
_lseeki64
_write
_isatty
??2@YAPAXI@Z
_CxxThrowException
_vsnwprintf
??_V@YAXPAX@Z
memset
_CIpow
free
_mbsicmp
_wcsicmp
malloc
??3@YAXPAX@Z

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
RtlUnwind
OutputDebugStringA
InterlockedCompareExchange
Sleep
VirtualAlloc
VirtualFree
LoadLibraryA
GetProcAddress
GetVersion
InterlockedExchange
GetVersionExA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExW
MultiByteToWideChar
GetCurrentThreadId
GetModuleFileNameW
MulDiv
lstrcmpW
GetCurrentProcess
FlushInstructionCache
InterlockedDecrement
InterlockedIncrement
HeapSetInformation
GlobalAlloc
GlobalLock
GlobalUnlock
SetLastError
GetLastError
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
RaiseException
FormatMessageW
lstrlenW
LocalFree

user32

UnregisterClassA
CreateAcceleratorTableW
GetFocus
GetWindow
SetFocus
DestroyAcceleratorTable
GetDesktopWindow
BeginPaint
EndPaint
CallWindowProcW
FillRect
ReleaseCapture
GetClassNameW
GetDlgItem
IsChild
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
ClientToScreen
GetClientRect
SetWindowPos
CharNextW
GetSysColor
RegisterWindowMessageW
GetClassInfoExW
LoadCursorW
RegisterClassExW
GetWindowTextLengthW
SetWindowTextW
DefWindowProcW
MapWindowPoints
IsWindow
GetParent
ShowWindow
GetWindowRect
MoveWindow
PostMessageW
SendMessageW
SetWindowLongW
GetWindowLongW
CreateWindowExW
DestroyWindow
GetWindowTextW

oleaut32

VarBstrFromDate
VariantChangeType
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
SysStringByteLen
SysAllocStringByteLen
VariantClear
VariantInit
VarBstrCmp
SysAllocString
SysAllocStringLen
SysStringLen
SysFreeString

ole32

CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoCreateGuid
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc

gdi32

GetStockObject
GetObjectW
CreateSolidBrush
GetDeviceCaps
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
DeleteObject

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/npaliedit.dll
.dll regsvr32 windows:5 windows x86 arch:x86

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

34:99:06:35:8e:2a:07:ac:b5:76:1c:04:70:ac:6f:44
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

16/03/2010, 00:00

Not After

15/04/2011, 23:59

Subject

CN=Alipay.com Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Alipay.com Co.\,Ltd,L=Hangzhou,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:b5:9c:5c:2e:b9:44:9c:a5:1d:21:c4:ac:51:da:12:51:9e:ad:fb
Signer

Actual PE Digest

03:b5:9c:5c:2e:b9:44:9c:a5:1d:21:c4:ac:51:da:12:51:9e:ad:fb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllRegisterServer
DllUnregisterServer
NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

UPX0
Size: - Virtual size: 376KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$R0/Source/seframework.dll
.dll windows:4 windows x86 arch:x86

3be79f9188385573055c3271e725aacc

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\SEFramework.pdb

Imports

sogouexplorer

ord2
ord1

kernel32

GetOEMCP
SetEndOfFile
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
CloseHandle
GetTickCount
CreateEventW
InterlockedDecrement
SetEvent
Sleep
GetCurrentThreadId
GetLastError
GetLocalTime
WideCharToMultiByte
GetACP
CreateFileA
SetFilePointer
ExitProcess
GetEnvironmentStrings
GetCurrentProcessId
CreateEventA
CreateSemaphoreA
CreateMutexA
ReleaseSemaphore
DeleteCriticalSection
InitializeCriticalSection
TryEnterCriticalSection
ReleaseMutex
ResetEvent
WaitForMultipleObjects
WaitForMultipleObjectsEx
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
CreateThread
HeapAlloc
HeapFree
SetStdHandle
GetFileType
HeapReAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
HeapSize
WriteFile
GetStdHandle
GetModuleFileNameA
RaiseException
GetCPInfo
VirtualQuery
IsValidCodePage
VirtualFree
VirtualAlloc
HeapDestroy
RtlUnwind
SetHandleCount
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LoadLibraryA
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
ReadFile

ws2_32

freeaddrinfo
inet_ntoa
recv
send
shutdown
WSAGetLastError
closesocket
htons
socket
connect
gethostbyname
getaddrinfo
getsockname
ntohs
inet_addr
bind
listen
accept
ioctlsocket
WSAEventSelect
WSAEnumNetworkEvents
WSAStartup

Exports

Exports

copy_http_header
free_dns_all
free_http_content_buf
get_default_conn_pool
get_default_reactor
get_dns_cache
get_http_content
get_http_content0
initHttpdTask
init_framework
init_framework0
init_gunzip
logger_fini
logger_init
logger_log
logger_log_mask_get
logger_log_mask_set
make_http_connection_async
make_http_connection_sync
make_http_conversation
make_http_header
make_locker
make_site_handler
make_site_handler0
make_video_handler
post_http_content
post_http_content0
push_pingback
resolve_dns
resolve_dns_all
resolve_dns_async
resolve_dns_sync
set_framework_log
set_framework_proxy
simple_log

Sections

.text
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/seinstallhelper.exe
.exe windows:4 windows x86 arch:x86

b067a51407e29284e470e00ef3bf6850

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\browser\trunk\src\InternalSolution\release\SEInstHelper.pdb

Imports

shlwapi

SHGetValueW
PathFileExistsW
StrCmpIW
SHSetValueW

wininet

InternetOpenUrlW
InternetOpenW
InternetCloseHandle

kernel32

SetLastError
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
MoveFileW
Process32NextW
WaitForSingleObject
CreateThread
SetEndOfFile
GetFileSize
WriteFile
TerminateProcess
FindFirstFileW
Sleep
CloseHandle
CopyFileW
MoveFileExW
ReadFile
SetFilePointer
FindNextFileW
CreateFileW
DeleteFileW
FindClose
GetLastError
OpenProcess
Process32FirstW
GetProcessId
CreateToolhelp32Snapshot
CreateDirectoryW
MultiByteToWideChar
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetCurrentProcess
WriteConsoleA
SetStdHandle
LoadLibraryA
HeapReAlloc
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetSystemTimeAsFileTime
GetVersionExA
GetProcessHeap
GetStartupInfoW
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
InitializeCriticalSection
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

shell32

SHGetFolderPathW
CommandLineToArgvW

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$R0/Source/seliteui.dll
.dll windows:4 windows x86 arch:x86

3b66b2974d9f345d3d76ee0a3d88093c

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\SELiteUI.pdb

Imports

sogouexplorer

ord2
ord1
ord534
ord504
ord49
ord13
ord508
ord74
ord575
ord7
ord71
ord552
ord53
ord39
ord6
ord25
ord556
ord43
ord60
ord75
ord458
ord517
ord1034
ord1033
ord658

kernel32

GetDateFormatW
GetThreadLocale
GetLocalTime
GetLocaleInfoW
SystemTimeToFileTime
FileTimeToSystemTime
GetTimeZoneInformation
GetCurrencyFormatW
GetNumberFormatW
GetFileAttributesW
GetCPInfo
SetThreadLocale
GetFileSize
CreateFileMappingA
SetFilePointer
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
FlushViewOfFile
CreateFileW
GetModuleFileNameA
GetStringTypeW
GetStringTypeA
HeapReAlloc
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCommandLineA
GetProcessHeap
DeleteFileA
GetTimeFormatA
GetDateFormatA
RtlUnwind
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
HeapDestroy
VirtualFree
VirtualAlloc
HeapSize
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalAlloc
GetSystemTime
ExitThread
CreateEventA
Sleep
TlsFree
MulDiv
GetVersionExA
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
SetLastError
GetProcAddress
GetCurrentThreadId
RaiseException
GetCurrentProcess
FlushInstructionCache
GetModuleHandleW
FindResourceW
LoadResource
LockResource
SizeofResource
CreateDirectoryW
MultiByteToWideChar
WaitForSingleObject
CloseHandle
SetEvent
CreateEventW
CreateThread
InterlockedDecrement
FreeLibrary
FindResourceA
InterlockedIncrement
LoadLibraryA
TlsAlloc
TlsSetValue
GlobalFree
GlobalAlloc
GlobalLock
GetTickCount
DeleteCriticalSection
GlobalSize
GetLastError
TlsGetValue
GetLocaleInfoA
GlobalUnlock
InitializeCriticalSection
GetTempPathA
GetTempFileNameA
WideCharToMultiByte

user32

GetCaretBlinkTime
GetKeyState
MessageBeep
LoadStringW
AdjustWindowRectEx
EnumClipboardFormats
GetClipboardData
CloseClipboard
RegisterClipboardFormatW
IsClipboardFormatAvailable
CountClipboardFormats
SetClipboardData
EmptyClipboard
OpenClipboard
GetSysColorBrush
DrawFrameControl
DrawEdge
GetWindowLongW
DefWindowProcW
GetClientRect
RegisterClassExW
SendMessageTimeoutA
InvertRect
DrawTextW
DrawTextA
DrawIconEx
CreateIconFromResourceEx
GetIconInfo
EndDeferWindowPos
PostMessageW
SetWindowPos
GetClassInfoExW
GetParent
LoadCursorW
CreateWindowExW
SetParent
ScrollDC
ScrollWindowEx
BeginDeferWindowPos
GetWindow
DeferWindowPos
SetScrollInfo
SetCaretPos
GetKeyboardLayout
DestroyCaret
CreateCaret
IsChild
CreateWindowExA
GetActiveWindow
PostQuitMessage
ShowWindow
InvalidateRect
MoveWindow
ClientToScreen
CallNextHookEx
GetAsyncKeyState
ScreenToClient
GetWindowRect
SetCapture
GetWindowPlacement
SetFocus
GetWindowLongA
MapWindowPoints
GetCursorPos
ReleaseCapture
DestroyIcon
IsWindowEnabled
CreateCursor
BeginPaint
GetWindowThreadProcessId
GetDlgCtrlID
GetFocus
SetWindowLongA
GetDoubleClickTime
SendMessageA
OffsetRect
LoadCursorFromFileA
NotifyWinEvent
FillRect
IsWindowUnicode
UnhookWindowsHookEx
EndPaint
DefWindowProcA
GetMessageA
GetScrollInfo
PeekMessageA
DispatchMessageA
GetDesktopWindow
GetCapture
InflateRect
GetSysColor
GetClassLongA
SetWindowsHookExA
GetWindowDC
WindowFromPoint
PostMessageA
UpdateWindow
RegisterClassExA
RegisterClassA
GetDC
UnregisterClassA
ReleaseDC
SystemParametersInfoA
LoadCursorA
RegisterWindowMessageA
RegisterClassW
GetSystemMetrics
SetForegroundWindow
IsWindow
SendMessageW
SetCursor
DestroyWindow
MessageBoxW
KillTimer
SetTimer
CallWindowProcW
SetWindowLongW
TranslateMessage

gdi32

GetTextExtentPoint32W
Rectangle
GetTextExtentExPointW
GetTextMetricsA
GetTextAlign
RectVisible
SetTextAlign
SetStretchBltMode
StretchDIBits
CreateDIBSection
StretchBlt
SetBrushOrgEx
GetDIBits
CreateDIBPatternBrushPt
GdiFlush
GetViewportExtEx
SetWindowExtEx
SetViewportExtEx
CreateSolidBrush
BitBlt
CreateCompatibleDC
SetViewportOrgEx
GetWindowExtEx
SaveDC
SetMapMode
CreateCompatibleBitmap
SetBkColor
SetWindowOrgEx
SetTextColor
CombineRgn
CreatePen
SelectObject
RestoreDC
CreateRectRgnIndirect
ExcludeClipRect
SetLayout
GetMapMode
GetObjectA
DPtoLP
GetClipBox
LPtoDP
GetStockObject
GetDeviceCaps
DeleteObject
GetTextExtentPoint32A
CreateBitmap
CreatePatternBrush
CreateHatchBrush
GetWindowOrgEx
TextOutA
SetPixel
TextOutW
GetPixel
PatBlt
IntersectClipRect
AddFontMemResourceEx
CreateFontA
EnumFontFamiliesExA
GetCurrentObject
GetGlyphOutlineW
GetKerningPairsA
DeleteDC
SetBkMode

comdlg32

GetOpenFileNameW

advapi32

IsTextUnicode

shell32

SHBrowseForFolderW
DragQueryFileW
ord74
SHGetFileInfoW
SHGetPathFromIDListW

ole32

CoInitialize
RevokeDragDrop
RegisterDragDrop
CoCreateGuid
ReleaseStgMedium
DoDragDrop

oleaut32

SysAllocStringLen

separser

ord415
ord428
ord269
ord52
ord7
ord394
ord299
ord344
ord109
ord416
ord420
ord29
ord16
ord147
ord347
ord236
ord287
ord313
ord300
ord151
ord342
ord281
ord50
ord242
ord98
ord327
ord310
ord343
ord286
ord387
ord277
ord309
ord214
ord386
ord381
ord293
ord22
?OnRequestFromWndMessage@GlobalAsyncRequestManager@@SAXHJ@Z
ord102
ord264
ord107
ord291
ord408
ord423
ord426
ord258
ord132
ord99
ord274
ord213
ord72
ord339
ord354
ord235
ord232
ord325
ord298
ord308
?GetRequest@GlobalAsyncRequestManager@@SAPAVCTuoAsyncRequestData@@H@Z
??0CTuoAsyncRequestData@@QAE@PAVCTuoAsyncRequestHolder@@@Z
?Delete@CTuoAsyncRequestData@@QAEXXZ
??1CTuoAsyncRequestData@@MAE@XZ
??0CTuoAsyncRequestHolder@@QAE@XZ
??1CTuoAsyncRequestHolder@@QAE@XZ
ord283
ord373
ord68
ord77
ord261
ord270
ord380
ord272
ord241
ord119
ord400
ord88
ord351
ord306
ord419
ord378
ord255

imm32

ImmGetCompositionStringW
ImmNotifyIME
ImmGetContext
ImmAssociateContextEx
ImmReleaseContext
ImmSetCandidateWindow
ImmIsIME

Exports

Exports

GetISE
InitPT

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/semenu.dll
.dll windows:4 windows x86 arch:x86

7aa4fb6e2cf2a9fadf540c8f1335b678

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\SEMenu.pdb

Imports

sogouexplorer

ord648
ord421
ord596
ord475
ord431
ord652
ord600
ord756
ord416
ord1033
ord496
ord1
ord2
ord477
ord602
ord516
ord469
ord512
ord603
ord23
ord1034
ord651
ord514
ord634
ord745
ord490
ord417
ord80
ord574
ord536
ord525
ord452
ord489

kernel32

FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
LCMapStringW
LCMapStringA
GetStringTypeW
GetVersionExW
GetCurrentProcess
FlushInstructionCache
SetLastError
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
RaiseException
GlobalUnlock
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
Sleep
HeapSize
ExitProcess
HeapDestroy
VirtualFree
DeleteCriticalSection
VirtualAlloc
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
MultiByteToWideChar
GetLocaleInfoA
InitializeCriticalSection
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
GetStringTypeA
SetStdHandle

user32

LoadCursorW
CallWindowProcW
BeginPaint
DestroyWindow
EndPaint
ShowWindow
GetWindowLongW
SetLayeredWindowAttributes
SetTimer
MapVirtualKeyExW
GetKeyboardLayout
GetKeyNameTextW
PeekMessageW
DrawIconEx
CharNextW
SetWindowLongW
CharLowerBuffW
KillTimer
DrawTextW
GetWindowRect
DefWindowProcW
GetCursorPos
ScreenToClient
WindowFromPoint
CreateWindowExW
IntersectRect
SetFocus
RegisterClassExW
EqualRect
GetClassNameW
InvalidateRect
GetKeyState
GetClassInfoExW
GetClientRect
SystemParametersInfoW
GetAsyncKeyState
CallNextHookEx
SetWindowsHookExW
WaitMessage
TranslateMessage
DispatchMessageW
UnhookWindowsHookEx
GetWindowThreadProcessId
OpenClipboard
CloseClipboard
IsClipboardFormatAvailable
RegisterClipboardFormatW
MessageBoxW
ClientToScreen
GetWindowDC
UnionRect
GetMonitorInfoW
MonitorFromPoint
GetDesktopWindow
GetDC
SetWindowPos
ReleaseDC
SetRectEmpty
IsRectEmpty
LoadStringW
GetAncestor
CopyRect
IsMenu
DestroyMenu
LoadMenuW
PostMessageW
IsWindowVisible
SendMessageW
GetMenuItemInfoW
GetMenuItemCount
IsWindow
UnregisterClassA

gdi32

DeleteDC
CreateCompatibleDC
SetBkColor
ExtTextOutW
GetClipBox
DeleteObject
CreateDIBSection
CreatePen
SetViewportOrgEx
SelectObject
MoveToEx
LineTo
BitBlt
GetObjectW
SetTextColor
CreateSolidBrush
Rectangle
SetBkMode

msimg32

AlphaBlend

Exports

Exports

GetISE

Sections

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/separser.dll
.dll windows:4 windows x86 arch:x86

324d8003ff5e5a90913e95c05e5d0837

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\SEParser.pdb

Imports

sogouexplorer

ord575
ord1034
ord1
ord2
ord1033

kernel32

GetModuleHandleA
LocalAlloc
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetProcAddress
GetCurrentProcess
FlushInstructionCache
SizeofResource
LoadResource
LockResource
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
CloseHandle
FindResourceW
InterlockedExchangeAdd
WaitForSingleObject
DeleteCriticalSection
GetThreadContext
GetCurrentThreadId
EnterCriticalSection
OutputDebugStringA
GetCurrentThread
CreateFileA
VirtualFree
TlsAlloc
GetTempFileNameA
GetSystemTimeAsFileTime
LeaveCriticalSection
CreateSemaphoreA
OpenThread
IsBadWritePtr
GetCurrentProcessId
TryEnterCriticalSection
GetFileType
GetThreadTimes
GetTempPathA
TlsGetValue
GetTimeZoneInformation
TlsFree
SuspendThread
ReleaseSemaphore
ResumeThread
DeleteFileA
InitializeCriticalSection
GetStdHandle
TlsSetValue
GetLastError
GetSystemInfo
WideCharToMultiByte
LoadLibraryW
IsDebuggerPresent
Sleep
VirtualProtect
VirtualAlloc
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
HeapAlloc
ExitProcess
ExitThread
CreateThread
GetCommandLineA
GetVersionExA
GetProcessHeap
RaiseException
WriteFile
GetModuleFileNameA
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapSize
HeapDestroy
HeapReAlloc
SetHandleCount
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeLibrary
InterlockedExchange
LoadLibraryA
RtlUnwind
MultiByteToWideChar
ReadFile
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

DefWindowProcW
SetWindowLongW
CallWindowProcW
GetWindowLongW

Exports

Exports

??0CTuoAsyncRequestData@@QAE@PAVCTuoAsyncRequestHolder@@@Z
??0CTuoAsyncRequestHolder@@QAE@XZ
??1CTuoAsyncRequestData@@MAE@XZ
??1CTuoAsyncRequestHolder@@QAE@XZ
?Delete@CTuoAsyncRequestData@@QAEXXZ
?GetRequest@GlobalAsyncRequestManager@@SAPAVCTuoAsyncRequestData@@H@Z
?OnRequestFromWndMessage@GlobalAsyncRequestManager@@SAXHJ@Z
InitPT

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 820KB - Virtual size: 819KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/sewizard.dll
.dll windows:4 windows x86 arch:x86

5f66d7176a0bc87c11c858470b8be985

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\SEWizard.pdb

Imports

sogouexplorer

ord520
ord635
ord543
ord1034
ord490
ord489
ord646
ord673
ord525
ord589
ord432
ord669
ord492
ord1
ord2
ord621
ord39
ord559
ord482
ord452
ord536
ord661
ord469
ord659
ord697
ord516
ord572
ord616
ord27
ord647
ord74
ord481
ord540
ord512
ord1033
ord30

kernel32

CloseHandle
GetProcAddress
FindResourceW
SizeofResource
LockResource
LoadResource
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FindClose
FindFirstFileW
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
lstrlenW
VirtualAlloc
HeapReAlloc
LoadLibraryA
InitializeCriticalSection
RtlUnwind
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
FindResourceExW
LoadLibraryW
SearchPathW
FindNextFileW
FreeResource
GlobalAlloc
GlobalFree
Sleep
GetLastError
GetModuleHandleW
GetCurrentThreadId
RaiseException
SetLastError
FlushInstructionCache
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
GetSystemTimeAsFileTime

user32

DialogBoxParamW
GetActiveWindow
DrawEdge
SetCapture
EndPaint
IsWindowEnabled
CallWindowProcW
BeginPaint
AdjustWindowRectEx
GetMenu
ReleaseCapture
GetDlgCtrlID
GetCapture
LoadCursorW
SetCursor
PtInRect
DefWindowProcW
ClientToScreen
CreateWindowExW
UpdateWindow
DrawFocusRect
InvalidateRect
InflateRect
SetFocus
SystemParametersInfoW
GetSysColorBrush
BringWindowToTop
GetAncestor
IsWindow
MoveWindow
SetForegroundWindow
LoadImageW
DestroyWindow
GetWindow
CreateDialogParamW
MapWindowPoints
KillTimer
SetTimer
ScreenToClient
GetWindowRect
DrawIconEx
PostMessageW
DestroyIcon
SetDlgItemTextW
OffsetRect
wsprintfW
CopyRect
EndDialog
GetSystemMetrics
ReleaseDC
GetDC
EnableWindow
ShowWindow
GetDlgItem
GetClientRect
DrawTextW
GetWindowLongW
SendMessageW
SetWindowPos
EqualRect
PeekMessageW
DispatchMessageW
IntersectRect
GetSysColor
IsRectEmpty
SetRectEmpty
IsWindowVisible
UnionRect
GetCursorPos
RegisterClassExW
GetClassInfoExW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
FillRect
GetWindowDC
GetDesktopWindow
GetKeyState
GetMessageW
TranslateMessage
TrackMouseEvent
RedrawWindow
GetUpdateRect
UpdateLayeredWindow
UnregisterClassA
GetParent
SetWindowLongW

gdi32

ExtTextOutW
SetBkColor
CreateFontIndirectW
GetObjectW
CreateCompatibleDC
GetTextMetricsW
DeleteDC
SelectObject
DeleteObject
CreateSolidBrush
CreateFontW
SetTextColor
GetStockObject
BitBlt
GetTextExtentPoint32W
GetTextColor
GetCurrentObject
GetViewportOrgEx
CreateCompatibleBitmap
CreateDIBSection
LineTo
MoveToEx
ExtCreatePen
SetViewportOrgEx
ExtSelectClipRgn
CreateRectRgnIndirect
GetClipBox
SelectClipRgn
SetBkMode

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

ExtractIconExW

shlwapi

SHDeleteValueW
SHGetValueW
PathFileExistsW

comctl32

ImageList_AddMasked
_TrackMouseEvent
ImageList_Destroy
ImageList_Draw
ImageList_Create
ImageList_GetIconSize
ImageList_GetIcon

msimg32

AlphaBlend

gdiplus

GdipDeleteBrush
GdipCreateSolidFill
GdipFillRectangleI
GdipDrawLineI
GdipDeletePen
GdipCreatePen1
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage

ole32

CreateStreamOnHGlobal

Exports

Exports

GetISE

Sections

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 411KB - Virtual size: 410KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/sgrepairtool.exe
.exe windows:4 windows x86 arch:x86

1173ee5fd07a0d23079957742e37b3e4

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\se_src\branches\3.2_4508\bin\AllLibRelease\SGRepairTool.pdb

Imports

gdiplus

GdipFillRectangleI
GdipCreateFromHDC
GdipDeleteGraphics
GdipCreateSolidFill
GdipDeleteBrush
GdipCreatePen1
GdipDeletePen
GdipCreateHBITMAPFromBitmap
GdipDrawLineI
GdipCreateBitmapFromStream
GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage
GdiplusStartup

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

ws2_32

shutdown
WSAStartup
socket
gethostbyname
__WSAFDIsSet
select
inet_addr
htons
connect
send
recv
WSACleanup
WSAGetLastError
closesocket

wininet

DeleteUrlCacheEntryW
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetQueryOptionW
FindCloseUrlCache
HttpQueryInfoA
InternetReadFile
InternetCrackUrlA
InternetQueryOptionA
InternetSetOptionA
InternetQueryDataAvailable
FindNextUrlCacheEntryW
FindFirstUrlCacheEntryW
InternetSetOptionW
InternetGetCookieA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA

kernel32

GetCurrentThreadId
CreateEventW
GetLastError
ExpandEnvironmentStringsW
GetCurrentProcess
CloseHandle
DeleteFileW
CreateFileW
WriteFile
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
TerminateProcess
Sleep
Process32NextW
CopyFileW
GetModuleFileNameW
WaitForSingleObject
GetTickCount
LoadLibraryW
GetProcAddress
CreateProcessW
FreeLibrary
GetSystemInfo
FindFirstFileW
SetEvent
FindNextFileW
FindClose
GlobalFree
RemoveDirectoryW
GetVersionExW
GetSystemDefaultLCID
GetCurrentProcessId
WaitForMultipleObjects
SetUnhandledExceptionFilter
GetModuleHandleW
FindResourceW
SizeofResource
LockResource
LoadResource
GlobalAlloc
FlushInstructionCache
SearchPathW
SetLastError
EnterCriticalSection
RaiseException
QueryPerformanceCounter
InitializeCriticalSection
DeleteCriticalSection
GetFileSize
ReadFile
MultiByteToWideChar
WideCharToMultiByte
InterlockedExchangeAdd
CreateThread
InterlockedExchange
SetFilePointer
GetLocalTime
SystemTimeToFileTime
GetStdHandle
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
CreateDirectoryW
CreateFileMappingW
MoveFileW
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
HeapReAlloc
UnhandledExceptionFilter
IsDebuggerPresent
ExitThread
GetStartupInfoW
GetSystemTimeAsFileTime
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
HeapDestroy
HeapCreate
GetModuleHandleA
HeapSize
ExitProcess
InterlockedIncrement
GetModuleFileNameA
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
CreateFileA
GetProcessHeap
HeapFree
GetVersionExA
InterlockedCompareExchange
InterlockedDecrement
LeaveCriticalSection
VirtualQuery

user32

GetWindow
GetSystemMetrics
DrawIconEx
SetWindowTextW
SetWindowLongW
SetFocus
RegisterClassExW
GetWindowLongW
CallWindowProcW
SetWindowPos
GetClientRect
DrawFocusRect
GetKeyState
DestroyWindow
DefWindowProcW
ScreenToClient
GetCursorPos
LoadCursorW
DrawTextW
GetWindowRect
IntersectRect
SetCursor
RedrawWindow
OffsetRect
SystemParametersInfoW
EqualRect
GetParent
CreateWindowExW
PostQuitMessage
LoadImageW
GetSysColor
CopyRect
wsprintfW
BringWindowToTop
MessageBoxW
PostMessageW
ReleaseDC
GetDC
UpdateLayeredWindow
EndPaint
PostThreadMessageW
ShowWindow
IsWindowVisible
IsWindow
TrackMouseEvent
ReleaseCapture
MapWindowPoints
InvalidateRect
SetCapture
DrawEdge
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
SetPropW
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
GetPropW
FindWindowW
UnregisterClassA
BeginPaint
GetUpdateRect
SetTimer
GetCapture
KillTimer
SendMessageW

gdi32

BitBlt
GetCurrentObject
GetTextColor
GetTextExtentPoint32W
GetViewportOrgEx
CreateCompatibleDC
SelectClipRgn
SetViewportOrgEx
ExtSelectClipRgn
CreateRectRgnIndirect
GetClipBox
GetStockObject
CreateDIBSection
DeleteDC
DeleteObject
CreatePen
CreateFontW
ExtTextOutW
SetBkColor
SetTextColor
SetBkMode
SelectObject
RestoreDC
CreateFontIndirectW
GetObjectW
SaveDC

advapi32

FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegCloseKey
RegCreateKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegDeleteKeyW
RegEnumValueW
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW

shell32

SHChangeNotify
ShellExecuteExW
ShellExecuteW

ole32

CreateStreamOnHGlobal
CoInitialize
CoUninitialize

shlwapi

SHSetValueW
SHGetValueW
SHGetValueA
StrCmpIW
PathFileExistsW
PathAppendW

msimg32

AlphaBlend

Sections

.text
Size: 396KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$R0/Source/skinmanager.dll
.dll windows:4 windows x86 arch:x86

72f1ea7a121965fb7770da6ef327d44e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\SkinManager.pdb

Imports

gdiplus

GdipCloneImage
GdipCreateBitmapFromFile
GdipFree
GdipAlloc
GdipCreateBitmapFromStream
GdipCreateHBITMAPFromBitmap
GdipGetImagePixelFormat
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipSaveImageToStream
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipDeleteGraphics
GdipDisposeImage

sogouexplorer

ord612
ord561
ord535
ord627
ord591
ord525
ord72
ord437
ord639
ord458
ord74
ord7
ord39
ord696
ord698
ord60
ord489
ord492
ord559
ord46
ord25
ord6
ord47
ord589
ord9
ord5
ord15
ord536
ord1033
ord520
ord1034
ord52
ord53
ord30
ord613
ord658
ord719
ord75
ord433
ord1
ord2
ord70

kernel32

FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
ReadFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
MultiByteToWideChar
LoadLibraryA
RtlUnwind
InitializeCriticalSection
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
FlushInstructionCache
SetLastError
RaiseException
GetModuleHandleW
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GlobalAlloc
CreateThread
FindFirstFileW
FindNextFileW
FindClose
ReadDirectoryChangesW
CloseHandle
CreateFileW
GetVersionExW
CreateDirectoryW
CopyFileW
DeleteFileW
GetModuleHandleExW
GetProcAddress
LoadLibraryW
GetFullPathNameW
GetLastError
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
GetCommandLineA
GetVersionExA
GetProcessHeap
HeapDestroy
VirtualFree
DeleteCriticalSection
VirtualAlloc
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
Sleep
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA

user32

GetClassInfoW
RegisterClassW
IsWindow
BringWindowToTop
SetForegroundWindow
SetWindowLongW
GetWindowLongW
GetIconInfo
GetWindowDC
GetDesktopWindow
ReleaseDC
PostMessageW
DestroyIcon
LoadImageW
SetWindowPos
MapWindowPoints
GetClientRect
GetParent
GetWindowRect
SystemParametersInfoW
GetWindow
IsWindowEnabled
MessageBoxW
EnableWindow
EndDialog
GetDlgItem
GetSystemMetrics
SetDlgItemTextW
PostThreadMessageW
MsgWaitForMultipleObjectsEx
PeekMessageW
CreateDialogParamW
GetWindowTextW
DestroyWindow
SetTimer
GetWindowTextLengthW
KillTimer
SetWindowTextW
CallWindowProcW
DefWindowProcW
GetForegroundWindow
SetFocus
GetCursorPos
MonitorFromPoint
GetMonitorInfoW
ShowOwnedPopups
IsIconic
LoadIconW
RedrawWindow
BeginPaint
EndPaint
ScreenToClient
DialogBoxParamW
FindWindowW
ShowWindow
IsWindowVisible
GetActiveWindow
FillRect
UnregisterClassA
SendMessageW

gdi32

GetStockObject
GetClipBox
CreateCompatibleBitmap
GetObjectW
GetBitmapBits
BitBlt
SelectObject
CreateCompatibleDC
DeleteDC
CreateDIBSection
DeleteObject

comdlg32

GetSaveFileNameW
GetOpenFileNameW

shell32

SHGetPathFromIDListW
SHCreateDirectoryExW
SHBrowseForFolderW
SHFileOperationW

ole32

CreateStreamOnHGlobal

shlwapi

PathIsDirectoryW

msimg32

AlphaBlend

Exports

Exports

GetISE

Sections

.text
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/snapshoter.dll
.dll windows:4 windows x86 arch:x86

bc6b063faab698ba460ea3abddba3666

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\Snapshoter.pdb

Imports

winmm

waveOutWrite
midiStreamOut
PlaySoundW
PlaySoundA

wininet

InternetOpenW
InternetSetOptionW
InternetCloseHandle

gdiplus

GdipFree
GdipCloneImage
GdipAlloc
GdipDisposeImage
GdipSaveImageToStream
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDeleteGraphics
GdipCreateFromHDC
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP

sogouexplorer

ord694
ord428
ord579
ord420
ord1033
ord688
ord707
ord760
ord485
ord589
ord27
ord68
ord48
ord1
ord2
ord1034

kernel32

FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
CreateThread
TerminateProcess
GetCurrentProcess
FlushInstructionCache
GetSystemTimeAsFileTime
SetFileTime
MulDiv
SetLastError
EnterCriticalSection
CreateFileW
GetFileSize
CloseHandle
LeaveCriticalSection
WriteFile
GetCurrentThreadId
RaiseException
CreateProcessA
CreateProcessW
GetLastError
HeapReAlloc
HeapAlloc
GetCommandLineA
HeapFree
GetVersionExA
GetProcessHeap
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
HeapDestroy
VirtualFree
VirtualAlloc
HeapSize
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
ExitProcess
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
MultiByteToWideChar
GetCurrentProcessId
InitializeCriticalSection
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTickCount

user32

UnregisterClassA
CreateWindowExA
SendMessageW
GetClassNameW
DestroyWindow
CreateWindowExW
PostMessageW
KillTimer
SetTimer
PrintWindow
ShowWindow
GetSystemMetrics
GetAncestor
GetMessageW
DispatchMessageW
GetWindow
GetDesktopWindow
RegisterClassExW
GetClientRect
SetWindowPos
MessageBoxA
GetClassInfoExW
GetDC
PostQuitMessage
GetWindowDC
LoadCursorW
ReleaseDC
SetWindowLongW
GetWindowLongW
DefWindowProcW
CallWindowProcW

gdi32

SetBkColor
SelectObject
CreateDIBSection
DeleteObject
GetDeviceCaps
CreateCompatibleDC
DeleteDC
ExtTextOutW

ole32

CoGetClassObject
OleDraw
OleInitialize
OleSetContainedObject
CreateStreamOnHGlobal

oleaut32

VariantClear
VariantInit

Exports

Exports

GetISE

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/sogouexplorer.dll
.dll windows:4 windows x86 arch:x86

f3778d6cb82c1b279ac40bffd096ae51

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\SogouExplorer.pdb

Imports

kernel32

InitializeCriticalSection
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InterlockedExchange
LoadLibraryA
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
OpenProcess
GetVersionExW
CreateProcessW
WaitForMultipleObjects
LoadLibraryExW
CreateDirectoryW
GetModuleFileNameW
GetCurrentDirectoryW
GlobalAlloc
GlobalFree
FindResourceW
SizeofResource
LockResource
LoadResource
OutputDebugStringA
QueueUserWorkItem
CreateFileW
ReadFile
lstrlenA
lstrlenW
InitializeCriticalSectionAndSpinCount
VirtualProtect
ResumeThread
GetThreadContext
SetThreadContext
VirtualQuery
InterlockedCompareExchange
FlushInstructionCache
LoadLibraryW
FindFirstFileW
FindClose
GetFileSize
MapViewOfFile
CreateFileMappingA
lstrcmpiA
SearchPathW
GetExitCodeProcess
OutputDebugStringW
GetSystemTimeAsFileTime
WTSGetActiveConsoleSessionId
UnmapViewOfFile
CreateFileMappingW
GlobalAddAtomW
GetTempFileNameW
HeapAlloc
GlobalMemoryStatusEx
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetLocalTime
GetSystemTime
SystemTimeToFileTime
GetPrivateProfileStringW
GlobalLock
GlobalUnlock
OpenFileMappingW
FindResourceExW
CompareFileTime
CopyFileW
TerminateThread
DeleteFileW
MoveFileExW
GetPriorityClass
GetFullPathNameW
GetProcessTimes
GetSystemInfo
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
SetFileAttributesW
GetFileTime
SetFilePointer
RemoveDirectoryW
lstrcpyW
LocalFree
IsBadReadPtr
FindResourceA
ResetEvent
OpenFileMappingA
LocalAlloc
IsProcessorFeaturePresent
GetThreadLocale
lstrcpyA
lstrcpynA
ExpandEnvironmentStringsW
CreateFileA
SetEndOfFile
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetConsoleMode
GetConsoleCP
GetFileAttributesW
LockFileEx
GetDiskFreeSpaceW
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
RaiseException
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentThread
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
GetModuleHandleA
HeapSize
VirtualAlloc
VirtualFree
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetProcessHeap
GetVersionExA
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
HeapFree
SetUnhandledExceptionFilter
ProcessIdToSessionId
UnhandledExceptionFilter
FormatMessageW
UnlockFile
LockFile
UnlockFileEx
GetFileAttributesExW
HeapReAlloc
FreeLibrary
GetModuleHandleW
WaitForSingleObject
CreateThread
CreateEventW
GetTickCount
GetCurrentProcess
TerminateProcess
CreateMutexW
GetLastError
CloseHandle
Sleep
SetProcessWorkingSetSize
SetEvent

user32

SetPropW
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
GetDlgItem
GetCursor
SetScrollInfo
GetScrollInfo
GetScrollPos
GetScrollRange
IsClipboardFormatAvailable
GetClipboardData
SetWindowContextHelpId
MessageBeep
RegisterClipboardFormatW
SetScrollPos
IsRectEmpty
GetSysColor
PostThreadMessageW
WaitMessage
SendNotifyMessageW
ActivateKeyboardLayout
CreateDialogIndirectParamA
CreateDialogIndirectParamW
MessageBoxExA
MessageBoxExW
MessageBoxIndirectA
MessageBoxIndirectW
CreateWindowExA
CreateDialogParamA
CreateDialogParamW
RegisterClassA
RegisterClassW
RegisterClassExA
MsgWaitForMultipleObjectsEx
EnumWindows
EndMenu
GetKeyboardLayout
MsgWaitForMultipleObjects
SetMenuDefaultItem
InflateRect
GetMenuContextHelpId
SetMenuContextHelpId
SetMenuInfo
GetMenuItemInfoW
GetMenuItemCount
InsertMenuItemW
InsertMenuW
GetMenuInfo
DeleteMenu
SendInput
UnregisterClassA
GetCapture
GetSystemMenu
SetWindowRgn
SetParent
EqualRect
GetWindow
ClientToScreen
MonitorFromPoint
ReleaseCapture
GetAncestor
CopyRect
UpdateLayeredWindow
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
DestroyCursor
TrackMouseEvent
SetWindowPos
SetCursor
AppendMenuW
DestroyMenu
CreatePopupMenu
TrackPopupMenu
LoadIconW
GetWindowTextLengthW
GetWindowTextW
EnableMenuItem
GetKeyState
EnumDisplayMonitors
EnableWindow
GetPropW
UnionRect
GetDlgCtrlID
CopyIcon
GetWindowContextHelpId
EnumThreadWindows
GetForegroundWindow
ChildWindowFromPoint
RedrawWindow
EndDeferWindowPos
DeferWindowPos
InvalidateRect
BeginDeferWindowPos
GetFocus
GetParent
GetClassNameW
IsWindowEnabled
GetActiveWindow
ShowWindowAsync
GetTopWindow
GetLastActivePopup
UnregisterHotKey
RegisterHotKey
SetFocus
SetCapture
AttachThreadInput
ShowOwnedPopups
GetCursorPos
ScreenToClient
GetWindowRect
PtInRect
DrawIconEx
DrawTextW
GetSystemMetrics
CreateIconIndirect
RegisterWindowMessageW
PeekMessageW
CreateWindowExW
SetForegroundWindow
BringWindowToTop
ShowWindow
IsIconic
IsWindowVisible
GetClassInfoExW
DestroyWindow
GetWindowLongW
UpdateWindow
PostQuitMessage
CallWindowProcW
DefWindowProcW
RegisterClassExW
SetWindowLongW
MonitorFromWindow
OffsetRect
LoadCursorW
SetTimer
GetWindowPlacement
IntersectRect
GetMonitorInfoW
MonitorFromRect
TranslateMessage
SystemParametersInfoW
GetMessageW
LoadImageW
KillTimer
DispatchMessageW
DestroyIcon
EndPaint
BeginPaint
wsprintfA
SendMessageW
GetIconInfo
GetClientRect
WindowFromPoint
SetWindowTextW
AllowSetForegroundWindow
GetWindowThreadProcessId
FindWindowW
GetDesktopWindow
GetWindowDC
CreateIconFromResourceEx
PrintWindow
ReleaseDC
GetDC
MessageBoxW
PostMessageW
wsprintfW
GetLastInputInfo
GetAsyncKeyState
FindWindowExW
SendMessageTimeoutW
IsWindow

advapi32

RegOpenKeyExW
RegCloseKey
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegOpenKeyW
RegOpenCurrentUser
RegCreateKeyW
RegSetValueExW
RegEnumValueW
RegDeleteValueW
RegNotifyChangeKeyValue
RegQueryValueExW

ole32

CoCreateInstance
StringFromGUID2
CoRevokeClassObject
CoRegisterClassObject
CoDosDateTimeToFileTime
OleUninitialize
OleInitialize
CoInitialize
CreateStreamOnHGlobal
CoCreateGuid

shell32

ShellExecuteW
ShellExecuteExW
SHFileOperationW
Shell_NotifyIconW
ord155
SHGetPathFromIDListW
SHGetFolderLocation
SHGetFolderPathW
SHGetFolderPathA
ord165
CommandLineToArgvW

oleaut32

SafeArrayGetUBound
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayUnaccessData
SysAllocString
SysFreeString

shlwapi

SHGetValueA
SHSetValueA
SHGetValueW
SHSetValueW
StrStrIW
StrCmpW
StrCmpIW
SHDeleteValueW
SHDeleteKeyW
PathFileExistsW

comctl32

ImageList_Destroy
ImageList_Create

gdi32

CreateCompatibleBitmap
BitBlt
GetPixel
CreateCompatibleDC
GetDIBits
CreateFontW
GetObjectW
CreateDIBSection
DeleteObject
DeleteDC
SelectObject
GetBitmapBits
GetCurrentObject
GetTextColor
GetStockObject
StretchBlt
SetBitmapBits
GetTextExtentPoint32W
SetTextColor
SetBkMode
CreatePen
MoveToEx
LineTo
SetBkColor
ExtTextOutW
CreateRoundRectRgn
SetViewportOrgEx
GetClipBox
SelectClipRgn
CreateRectRgn
CombineRgn
SetWindowOrgEx
DPtoLP
LPtoDP
IntersectClipRect
RoundRect
CreateSolidBrush
SaveDC
RestoreDC
PatBlt
GetDeviceCaps

msimg32

AlphaBlend

uxtheme

CloseThemeData
OpenThemeData

Exports

Exports

_

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 381KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/sogouexplorer.exe
.exe windows:5 windows x86 arch:x86

8bbfe70a73b60a62df013fee93bdc654

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
LoadLibraryW
TerminateProcess
GetProcAddress
GetCommandLineW

Sections

.text
Size: 512B - Virtual size: 127B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 234B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$R0/Source/sogouexplorerup.exe
.exe windows:4 windows x86 arch:x86

c67963258f594416b958bfc455aec22f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\SE\3.1_3624\bin\MultiProcessRelease\SogouExplorerUp.pdb

Imports

gdiplus

GdipFree
GdipDisposeImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdipCloneImage
GdipAlloc

kernel32

MoveFileExW
RaiseException
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
lstrlenW
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
SetLastError
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
CreateMutexW
CreateDirectoryW
GetTickCount
Sleep
CreateFileW
GetFileSize
ReadFile
WriteFile
FindFirstFileW
FindClose
WideCharToMultiByte
GetVersionExW
OpenProcess
CreateThread
MapViewOfFile
UnmapViewOfFile
lstrlenA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
LoadResource
SetConsoleCtrlHandler
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCurrentThread
TlsFree
TlsSetValue
TlsAlloc
CreateProcessW
CloseHandle
FindResourceW
CreateFileMappingW
SizeofResource
LockResource
GlobalAlloc
GlobalFree
EnterCriticalSection
LeaveCriticalSection
DeleteFileW
SetErrorMode
LoadLibraryW
InitializeCriticalSection
GetProcAddress
EnumSystemLocalesA
IsValidLocale
SetEndOfFile
TlsGetValue
GetModuleFileNameA
GetStdHandle
ExitProcess
GetModuleHandleA
HeapSize
FatalAppExitA
HeapCreate
HeapDestroy
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
UnhandledExceptionFilter
SetFilePointer
TerminateProcess
RtlUnwind
HeapReAlloc
GetThreadLocale
GetLocaleInfoA
GetStringTypeA
VirtualQuery
GetACP
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetVersionExA
QueueUserWorkItem
SetFilePointerEx
SetFileAttributesW
GetFileAttributesW
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
GetTimeZoneInformation
SetStdHandle
MoveFileW
AllocConsole
ResumeThread
SuspendThread
GetLocalTime
CreateEventW
SystemTimeToFileTime
SetEvent
InterlockedExchangeAdd
WaitForSingleObject
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA

user32

BeginPaint
EndPaint
SetWindowLongW
SystemParametersInfoW
MapWindowPoints
GetDlgItem
ShowWindow
GetClientRect
GetSystemMetrics
LoadImageW
GetParent
GetWindow
SetWindowPos
SetWindowTextW
wsprintfA
UnregisterClassA
GetMessageW
PeekMessageW
SetTimer
GetWindowLongW
SendMessageW
EndDialog
wsprintfW
PostThreadMessageW
GetWindowRect
CharNextW
GetLastInputInfo
PostMessageW
DefWindowProcW
GetActiveWindow
DialogBoxParamW
DestroyWindow

gdi32

SelectObject
DeleteDC
DeleteObject
CreateCompatibleDC

advapi32

AllocateAndInitializeSid
FreeSid
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
CheckTokenMembership
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW

shell32

ord155
SHGetPathFromIDListW
SHGetFolderLocation
ShellExecuteExW
ord165
SHGetFolderPathW

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize
CreateStreamOnHGlobal

oleaut32

VarUI4FromStr
SysFreeString

shlwapi

SHDeleteValueW
SHGetValueA
PathFileExistsW
SHSetValueW

comctl32

InitCommonControlsEx

msimg32

AlphaBlend

psapi

GetModuleFileNameExW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

wininet

InternetOpenA
InternetSetOptionW
InternetConnectW
HttpOpenRequestW
HttpAddRequestHeadersA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenW
InternetOpenUrlA
InternetGetCookieA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
InternetQueryDataAvailable
InternetSetOptionA
InternetQueryOptionA

ws2_32

__WSAFDIsSet
select
inet_addr
WSAStartup
recv
accept
ioctlsocket
listen
ntohs
WSACleanup
inet_ntoa
getsockname
WSAGetLastError
connect
htons
socket
gethostbyname
sendto
bind
send
closesocket
shutdown

Sections

.text
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$R0/Source/sogouipfilterinst.dll
.dll windows:4 windows x86 arch:x86

b14b00fbc9d0e47aee1e3f8d5ccb4548

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

f:\se_src\branches\3.2_4508\bin\AllLibRelease\sogouipfilter.pdb

Imports

ws2_32

ntohs
WSAGetLastError
sendto
htons
WSAEnumNetworkEvents
WSASetLastError
getpeername
getsockname
WSAStartup
gethostbyname
gethostname
recvfrom
setsockopt
WSAEventSelect
WSACreateEvent
bind
closesocket
socket
WSCGetProviderPath
WSCWriteProviderOrder
WSCInstallProvider
WSCDeinstallProvider
WSCEnumProtocols
inet_ntoa

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

SetFilePointer
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
GetTempPathW
FindFirstFileA
FindNextFileA
MultiByteToWideChar
OutputDebugStringW
CreateProcessW
FindClose
GetEnvironmentVariableW
CreateFileW
ReadFile
DeleteFileW
OutputDebugStringA
CreateToolhelp32Snapshot
Process32FirstW
CloseHandle
WideCharToMultiByte
Process32NextW
CreateEventW
WriteFile
GetLastError
LoadLibraryW
CreateMutexA
GetProcAddress
InterlockedIncrement
WaitForSingleObject
InterlockedDecrement
SetEvent
GetEnvironmentVariableA
GetConsoleCP
EnterCriticalSection
LeaveCriticalSection
Module32FirstW
Module32NextW
lstrcpyW
lstrlenW
LoadLibraryA
FreeLibrary
GlobalAlloc
GlobalFree
ExpandEnvironmentStringsA
VirtualAlloc
InterlockedExchange
GetCurrentProcessId
VirtualProtect
GetModuleHandleW
GetCurrentProcess
GetVersionExW
GetFileSize
CopyFileW
GetTickCount
MoveFileExW
Sleep
lstrcmpiA
lstrcmpiW
DeviceIoControl
ExpandEnvironmentStringsW
LoadResource
LockResource
SizeofResource
FindResourceW
FindResourceExW
GetModuleFileNameA
WaitForMultipleObjects
GetCurrentThreadId
FreeLibraryAndExitThread
OpenMutexA
ReleaseMutex
GetConsoleMode
GetStdHandle
SetStdHandle
FlushFileBuffers
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
CreateFileA
InitializeCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
ExitProcess
HeapSize
HeapReAlloc
InterlockedCompareExchange
DeleteCriticalSection
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
ExitThread
CreateThread
GetCommandLineA
GetVersionExA
GetProcessHeap
RtlUnwind
RaiseException
GetCPInfo
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount

advapi32

RegQueryValueExW
DeleteService
ChangeServiceConfigW
CreateServiceW
CloseServiceHandle
StartServiceW
ControlService
OpenServiceW
OpenSCManagerW
QueryServiceStatusEx
RegQueryValueExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegSetValueExW
RegCreateKeyW
RegOpenKeyW

ole32

CoInitialize
CoUninitialize

imagehlp

ImageDirectoryEntryToData

shlwapi

SHGetValueA
SHSetValueW

user32

UnregisterClassA

Exports

Exports

CheckBandwidthEffect
CheckNetMon
CheckProcList
CrashDumpReport
FuncSwitch
GetDispatcherByCallStack
GetTuotuoString1
InstallFilter
IsInstalled
IsWorking
LANModeSwitch
SetProtectStrength
SetSEInfo
UninstallFilter
WSPStartup
WSPStartup2
WSPStartup3

Sections

.text
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PrePostH
Size: 4KB - Virtual size: 95B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SHAREDC
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.SHAREDD
Size: 4KB - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/sogounet.dll
.dll windows:4 windows x86 arch:x86

1fdb6e9f02e5c6e540d9cbe28c275310

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\SogouNet.pdb

Imports

ws2_32

WSAEventSelect
listen
shutdown
WSAEnumNetworkEvents
getpeername
connect
gethostbyname
WSACreateEvent
WSACleanup
recvfrom
sendto
getaddrinfo
freeaddrinfo
select
ioctlsocket
inet_addr
ntohl
accept
setsockopt
WSACloseEvent
WSAStartup
recv
send
htons
socket
bind
ntohs
WSAWaitForMultipleEvents
getsockname
closesocket
WSAGetLastError
inet_ntoa

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

sogouexplorer

ord556
ord75
ord74
ord42
ord561
ord560
ord525
ord523
ord534
ord558
ord44
ord73
ord139
ord140
ord138
ord6
ord72
ord39
ord1
ord2
ord40

kernel32

TlsFree
SetEndOfFile
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetLocaleInfoW
GetLocaleInfoA
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LoadLibraryA
InterlockedExchange
LCMapStringW
MultiByteToWideChar
LCMapStringA
FlushFileBuffers
ReadFile
SetFilePointer
GetConsoleMode
GetConsoleCP
VirtualAlloc
VirtualFree
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
RtlUnwind
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InterlockedDecrement
SetLastError
InterlockedIncrement
GetProcessHeap
GetVersionExA
GetCommandLineA
CreateDirectoryW
GetFileAttributesW
MoveFileW
GetTickCount
GetLastError
CreateThread
CreateEventW
SetEvent
CloseHandle
GetTempFileNameW
CreateWaitableTimerW
SetWaitableTimer
CancelWaitableTimer
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetModuleFileNameA
Sleep
OpenEventA
WaitForMultipleObjects
ResetEvent
GetProcAddress
GetModuleHandleA
GetModuleHandleW
GetDriveTypeW
CreateFileW
CreateIoCompletionPort
GetQueuedCompletionStatus
WideCharToMultiByte
DeleteFileW
FindFirstFileW
RemoveDirectoryW
FindNextFileW
FindClose
GetFileSize
PostQueuedCompletionStatus
CreateWaitableTimerA
CreateEventA
GetCurrentThreadId
SuspendThread
ResumeThread
AllocConsole
GetStdHandle
MoveFileExW
GetLocalTime
TlsAlloc
WriteFile
VirtualQuery
TlsGetValue
TlsSetValue
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
ExitThread
HeapReAlloc
HeapAlloc
ExitProcess

user32

GetMessageW
MsgWaitForMultipleObjectsEx
KillTimer
MsgWaitForMultipleObjects
PostMessageW
CharUpperA
PeekMessageW
SetTimer
PostThreadMessageW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegCloseKey
RegOpenKeyW

seframework

make_locker
logger_log
resolve_dns_sync
make_site_handler0
copy_http_header
get_dns_cache
get_http_content0
free_http_content_buf
push_pingback
make_video_handler
make_http_conversation
resolve_dns
resolve_dns_async
logger_init
set_framework_log
logger_log_mask_set
init_framework
resolve_dns_all
free_dns_all
get_http_content
initHttpdTask
simple_log
post_http_content

shlwapi

PathFileExistsW
PathRemoveFileSpecA
PathAddBackslashA
SHGetValueA

Exports

Exports

GetISE

Sections

.text
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/tridentcore.dll
.dll windows:4 windows x86 arch:x86

dbfc3a2368d21598d21a261b1defbf04

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\TridentCore.pdb

Imports

wininet

InternetSetCookieExA
InternetSetCookieA
InternetQueryOptionW
InternetSetOptionW
InternetOpenW
InternetCloseHandle
InternetCombineUrlW
InternetGetCookieW
CommitUrlCacheEntryA
InternetSetOptionExA
InternetSetOptionExW
InternetSetOptionA
InternetErrorDlg
InternetSetCookieExW
InternetGetCookieExW
InternetConnectW
InternetSetStatusCallbackA
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoA
InternetReadFile
InternetCrackUrlW
HttpAddRequestHeadersA
HttpSendRequestA
InternetCombineUrlA

ws2_32

connect
WSASetLastError
closesocket
inet_ntoa
htons
getaddrinfo
gethostbyname

psapi

GetModuleInformation

urlmon

CoGetClassObjectFromURL
CoInternetGetSession
RegisterBindStatusCallback

sogouexplorer

ord565
ord593
ord420
ord533
ord504
ord428
ord678
ord22
ord26
ord68
ord48
ord737
ord57
ord21
ord7
ord535
ord579
ord581
ord74
ord72
ord52
ord25
ord654
ord525
ord655
ord60
ord759
ord605
ord656
ord529
ord688
ord760
ord589
ord27
ord1034
ord485
ord625
ord591
ord627
ord438
ord1033
ord65
ord679
ord601
ord624
ord502
ord81
ord584
ord515
ord583
ord534
ord61
ord55
ord78
ord63
ord608
ord75
ord556
ord51
ord436
ord692
ord514
ord557
ord143
ord141
ord16
ord580
ord1
ord2
ord6

kernel32

CreateFileA
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetThreadLocale
InterlockedExchange
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
RtlUnwind
HeapSize
ExitProcess
VirtualAlloc
VirtualFree
HeapDestroy
LCMapStringW
WideCharToMultiByte
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetModuleFileNameA
GetStdHandle
GetProcessHeap
GetVersionExA
GetCommandLineA
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapReAlloc
HeapAlloc
HeapFree
GetTempFileNameW
SetFilePointer
CopyFileW
DeleteFileW
WaitForSingleObject
CreateEventW
SetEvent
QueryPerformanceFrequency
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
LocalAlloc
InterlockedCompareExchange
OutputDebugStringA
WriteFile
GetLastError
GetCurrentThreadId
EnterCriticalSection
FindResourceW
LeaveCriticalSection
GetCurrentProcess
SizeofResource
FlushInstructionCache
LockResource
GetCurrentProcessId
LoadResource
RaiseException
FindResourceExW
GlobalAlloc
OpenFileMappingW
GetVersionExW
MapViewOfFile
GlobalLock
MulDiv
UnmapViewOfFile
CreateFileW
GetFileSize
CloseHandle
MultiByteToWideChar
lstrlenW
GetModuleHandleW
GetTickCount
GetModuleFileNameW
LoadLibraryExW
FreeLibrary
InitializeCriticalSection
DeleteCriticalSection
lstrcmpiW
GlobalFree
InterlockedIncrement
InterlockedDecrement
Sleep
FindFirstFileW
FindClose
GlobalUnlock
CreateFileMappingW
LoadLibraryW
GetProcAddress
CreateThread
SetLastError
VirtualQuery
IsBadWritePtr
VirtualProtect

user32

CharNextW
GetMessageW
IsWindow
MessageBoxW
IsWindowVisible
PeekMessageW
GetWindowLongW
BringWindowToTop
SetForegroundWindow
GetAsyncKeyState
GetKeyState
GetFocus
GetClassNameW
GetWindowThreadProcessId
SendMessageTimeoutW
MapWindowPoints
CallWindowProcW
EnableMenuItem
DefWindowProcW
TrackPopupMenuEx
GetMenuContextHelpId
UpdateWindow
ShowWindow
OffsetRect
EqualRect
FindWindowExW
ScreenToClient
SetPropW
InvalidateRect
EnumThreadWindows
WaitMessage
PostThreadMessageW
GetClassInfoExW
LoadCursorW
CreateWindowExW
RegisterClassExW
SendNotifyMessageW
SetCursor
CharLowerBuffW
DestroyCursor
LoadImageW
TranslateMessage
DispatchMessageW
GetPropW
DestroyWindow
GetWindowDC
PostMessageW
GetDC
IsWindowEnabled
KillTimer
SetWindowPos
GetWindow
GetWindowRect
GetAncestor
GetCursorPos
GetSystemMetrics
PrintWindow
SendMessageW
GetClientRect
SetWindowLongW
ReleaseDC
UnregisterClassA
SetTimer

gdi32

SetBkColor
BitBlt
GetObjectW
ExtTextOutW
SelectObject
CreateDIBSection
DeleteObject
DeleteDC
CreateCompatibleDC
GetDeviceCaps

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegCloseKey
RegEnumValueA
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegOpenKeyW
RegCreateKeyExA
RegQueryValueExW

shell32

ord165
DragQueryFileW

ole32

CoUnmarshalInterface
CoGetInterfaceAndReleaseStream
RevokeDragDrop
RegisterDragDrop
CoTaskMemRealloc
OleUninitialize
CoTaskMemFree
CoGetClassObject
OleInitialize
CoTaskMemAlloc
OleDraw
CoMarshalInterface
CreateStreamOnHGlobal
CoGetMarshalSizeMax
CoMarshalInterThreadInterfaceInStream
OleSetContainedObject
CoCreateInstance

oleaut32

SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SysAllocStringLen
LoadRegTypeLi
LoadTypeLibEx
SysStringLen
VarBstrCmp
SafeArrayCreate
VariantCopy
SysFreeString
VarUI4FromStr
VariantClear
VariantInit
SysAllocString
DispGetParam

crypt32

CertDuplicateCertificateContext
CertGetNameStringW

shlwapi

StrStrIW
SHGetValueW
PathFindExtensionW

Exports

Exports

Initialize

Sections

.text
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/Source/webkitcore.dll
.dll windows:4 windows x86 arch:x86

a0faa9d05b9ab9e962c5bd6439cf84e4

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\sogou_webkit_14_32\webkit\Release\WebkitCore.pdb

Imports

wininet

InternetCombineUrlW

ws2_32

getsockopt
ntohs
htons
gethostbyaddr
gethostbyname
gethostname
WSAGetLastError
getaddrinfo
htonl
inet_addr
inet_ntoa
getservbyname
getservbyport
ntohl
WSASetLastError
WSASendTo
WSARecvFrom
WSAGetOverlappedResult
WSAResetEvent
WSAEnumNetworkEvents
WSASend
WSARecv
WSAEventSelect
WSASocketW
WSAIoctl
WSACreateEvent
WSACloseEvent
freeaddrinfo
getnameinfo
recvfrom
sendto
send
recv
connect
accept
select
__WSAFDIsSet
setsockopt
getpeername
getsockname
shutdown
listen
bind
socket
ioctlsocket
closesocket
WSAStartup

comctl32

_TrackMouseEvent

sogouexplorer

ord1
ord755
ord2
ord7
ord564
ord593
ord529
ord688
ord655
ord656
ord657
ord579
ord438
ord654
ord760
ord536
ord535
ord1033
ord1034
ord525
ord557
ord556
ord61
ord74
ord488
ord515
ord608
ord624
ord494
ord555
ord770
ord48
ord436
ord605
ord692
ord514
ord485
ord68
ord428
ord420
ord52

separser

ord89
ord407
ord131
ord400
ord88
ord346
ord230
ord367
ord371
ord370
ord44
ord366
ord421
ord390
ord417
ord94
ord264
ord242
ord408
ord50
ord213
ord102
ord107
ord18
ord166
ord449
ord305
ord3
ord33
ord357
ord135
ord321
ord297
ord307
ord17
ord1
ord418
ord402
ord331
ord326
ord332
ord183
ord186
ord223
ord274
ord353
ord47
ord73
ord227
ord174
ord241
ord277
ord256
ord425
ord410
ord427
ord412
ord415
ord312
ord246
ord284
ord232
ord354
ord105
ord29
ord204
ord120
ord188
ord197
ord113
ord252
ord46
ord276
ord23
ord9
ord98
ord214
ord95
ord36
ord35
ord56
ord300
ord433
ord273
ord431
ord414
ord117
ord160
ord424
ord34
ord318
ord304
ord26
ord280
ord217
ord339
ord72
ord13
ord27
ord14
ord313
ord416
ord109
ord283
ord344
ord293
ord285
ord394
ord342
ord289
ord281
ord133
ord234
ord392
ord82
ord340
ord374
ord383
ord382
ord343
ord123
ord125
ord121
ord206
ord159
ord187
ord148
ord127
ord161
ord86
ord201
ord144
ord384
ord41
ord248
ord45
ord85
ord397
ord399
ord189
ord403
ord337
ord389
ord10
ord55
ord104
ord76
ord92
ord211
ord87
ord341
ord202
ord150
ord8
ord333
ord334
ord39
ord40
ord377
ord16
ord28
ord15
ord310
ord99
ord420
ord119
ord423
ord426
ord287
ord52
ord406
ord229
ord355
ord75
ord22
ord7
ord176
ord376
ord299
ord210
ord288
ord103
ord315
ord108
ord96
ord405
ord361
ord80
ord145
ord411
ord51
ord57
ord215
ord114
ord118
ord225
ord268
ord254
ord269
ord250
ord136
ord279
ord393
ord237
ord325
ord235
ord328
ord306
ord317
ord78
ord413
ord270
ord261
ord236
ord258
ord298
ord378
ord386
ord221
ord347
ord430
ord350
ord77
ord110
ord381
ord345
ord151
ord351
ord147
ord373
ord372
ord387
ord226
ord177
ord278
ord308
ord238
ord175
ord388
ord68
ord141
ord231
ord272
ord380
ord70
ord132
ord216
ord153
ord106
ord262
ord422
ord247
ord122
ord358
ord69
ord257
ord360
ord137
ord327
ord294
ord291
ord143
ord185
ord255
ord149
ord286
ord195
ord266
ord192
ord419

kernel32

SetFileAttributesA
ExitThread
SetInformationJobObject
CreateJobObjectW
AssignProcessToJobObject
CreateNamedPipeW
ConnectNamedPipe
GetPrivateProfileStringW
GlobalSize
GetThreadLocale
GetDiskFreeSpaceW
GetFullPathNameW
GetFileAttributesA
UnlockFileEx
LockFileEx
AreFileApisANSI
GetTempPathA
GetTempFileNameA
GetDriveTypeW
GlobalDeleteAtom
GlobalAddAtomW
GetFileSizeEx
CancelIo
FormatMessageW
UnlockFile
LockFile
CreateDirectoryA
MoveFileA
FindFirstFileA
GetFullPathNameA
GetDriveTypeA
DeleteFileA
ReleaseSemaphore
ResumeThread
SetThreadPriority
CreateSemaphoreA
CreateFileMappingA
GetSystemTime
GetEnvironmentVariableA
GetLocalTime
GetDateFormatW
GetTimeFormatW
GlobalMemoryStatus
GetLogicalDrives
GetComputerNameA
GetVolumeInformationA
GetDiskFreeSpaceA
MulDiv
GetModuleHandleExW
GetCurrentDirectoryA
GetExitCodeThread
GetSystemPowerStatus
GetWindowsDirectoryW
GetSystemDirectoryW
RtlCaptureStackBackTrace
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
RtlUnwind
LoadLibraryA
InterlockedExchange
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
SetFilePointer
GetConsoleMode
GetConsoleCP
ReadFile
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
VirtualFree
HeapDestroy
GetModuleFileNameA
GetStdHandle
SetEnvironmentVariableA
GetModuleHandleA
GetProcessHeap
GetVersionExA
GetCommandLineA
HeapReAlloc
HeapAlloc
TerminateProcess
HeapFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
OpenFileMappingW
WideCharToMultiByte
IsDebuggerPresent
GetCurrentThread
FreeLibrary
SetThreadExecutionState
CreateThread
InitializeCriticalSection
WinExec
lstrcmpiW
CompareStringW
LockResource
GlobalFree
GlobalUnlock
SizeofResource
GlobalAlloc
GlobalLock
LoadResource
FindResourceW
GetCurrentProcessId
lstrcmpiA
lstrcmpW
Sleep
CreateEventW
DebugBreak
OutputDebugStringW
CreateFileMappingW
InterlockedIncrement
UnmapViewOfFile
MapViewOfFile
GetFileAttributesW
GetACP
VirtualProtect
VirtualAlloc
VirtualQuery
GetVersionExW
GetModuleHandleW
lstrlenW
MultiByteToWideChar
InterlockedDecrement
GetNativeSystemInfo
QueueUserWorkItem
GetFileInformationByHandle
SetFileTime
SetFilePointerEx
lstrlenA
GetTickCount
FlushFileBuffers
CreateFileW
SetEndOfFile
LocalAlloc
GetSystemDirectoryA
CreateSemaphoreW
OpenThread
ResetEvent
PulseEvent
WriteFile
SetEvent
WaitForMultipleObjects
OpenProcess
GetExitCodeProcess
GlobalMemoryStatusEx
GetLastError
InterlockedCompareExchange
DuplicateHandle
GetProcAddress
LoadLibraryW
GetCurrentThreadId
EnterCriticalSection
SetLastError
RaiseException
FlushInstructionCache
LeaveCriticalSection
CloseHandle
WaitForSingleObject
GetCurrentProcess
GetUserDefaultLangID
GetDiskFreeSpaceExW
ExpandEnvironmentStringsW
LoadLibraryExW
InterlockedExchangeAdd
GetFileSize
GetTempFileNameW
GetLongPathNameW
GetLogicalDriveStringsW
GetCurrencyFormatW
GetNumberFormatW
SystemTimeToTzSpecificLocalTime
GetCurrentDirectoryW
GetTempPathW
FindFirstFileW
FindNextFileW
CreateDirectoryW
FindClose
RemoveDirectoryW
SetCurrentDirectoryW
GetFileAttributesExW
CompareStringA
CreateFileA
GetTimeZoneInformation
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ExitProcess
CopyFileW
ReplaceFileW
MoveFileExW
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcpynW
SystemTimeToFileTime
LocalFileTimeToFileTime
QueryPerformanceFrequency
GetCommandLineW
LocalFree
UnregisterWaitEx
RegisterWaitForSingleObject
TryEnterCriticalSection
InitializeCriticalSectionAndSpinCount
FormatMessageA
OutputDebugStringA
CreateMutexW
GetModuleFileNameW
DeleteFileW
ReleaseMutex
GetSystemInfo
GetProcessId
CreateProcessW
GetLocaleInfoW

user32

MessageBeep
CharUpperW
WaitMessage
GetQueueStatus
MsgWaitForMultipleObjectsEx
CallMsgFilterW
PostQuitMessage
UnregisterClassW
wsprintfW
GetCaretBlinkTime
RegisterClassW
DrawFrameControl
InvertRect
IntersectRect
IsRectEmpty
CharLowerW
EnumDisplayDevicesW
GetDCEx
IsIconic
AdjustWindowRect
SendDlgItemMessageW
DestroyIcon
GetWindowTextLengthW
DrawTextW
SetRectEmpty
PtInRect
DrawFocusRect
OffsetRect
SetRect
GetWindowTextW
DrawStateW
GetDlgItem
CreateDialogParamW
UpdateWindow
GetDlgCtrlID
SetWindowTextW
LoadIconW
CreateDialogIndirectParamW
EndDialog
GetDlgItemTextW
DrawEdge
SetTimer
GetWindowDC
KillTimer
IsWindowEnabled
TrackPopupMenuEx
GetClassNameW
GetSysColor
SendMessageCallbackW
CreatePopupMenu
GetMenuItemCount
MapWindowPoints
EnableWindow
DestroyMenu
SetScrollInfo
CheckMenuItem
CharNextW
AppendMenuW
EnableMenuItem
GetKeyState
AttachThreadInput
CallNextHookEx
PostThreadMessageW
SetWindowsHookExW
UnhookWindowsHookEx
LoadStringW
MsgWaitForMultipleObjects
GetSystemMetrics
InflateRect
FrameRect
UnregisterClassA
EqualRect
DrawIcon
EnumDisplaySettingsW
GetDoubleClickTime
TranslateMessage
PeekMessageW
DispatchMessageW
GetActiveWindow
EndPaint
DestroyWindow
SendNotifyMessageW
SetCursor
GetUpdateRgn
SetWindowRgn
RealChildWindowFromPoint
RemovePropW
RegisterWindowMessageW
IsChild
NotifyWinEvent
SetCapture
GetFocus
GetParent
GetMessageTime
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
RegisterClipboardFormatW
SetClipboardData
CloseClipboard
OpenClipboard
TrackMouseEvent
IsHungAppWindow
LoadCursorW
WindowFromPoint
SetParent
GetClientRect
SetFocus
BeginPaint
GetClassInfoExW
SetPropW
GetUpdateRect
GetCapture
GetForegroundWindow
RegisterClassExW
InvalidateRect
RedrawWindow
GetDesktopWindow
GetCursorPos
EnumChildWindows
CreateWindowExW
DeferWindowPos
ReleaseCapture
ScrollWindowEx
BeginDeferWindowPos
EndDeferWindowPos
GetPropW
CallWindowProcW
DefWindowProcW
EnumThreadWindows
MoveWindow
GetWindowRect
SetWindowPos
ClientToScreen
ScreenToClient
GetWindowLongW
SendMessageW
GetWindow
SystemParametersInfoW
FillRect
GetAsyncKeyState
GetDC
ScrollDC
ReleaseDC
PostMessageW
SetForegroundWindow
DialogBoxParamW
GetAncestor
SetWindowLongW
ShowWindow
IsWindowVisible
SendMessageTimeoutW
IsWindow
GetWindowThreadProcessId
MessageBoxW
GetClipboardSequenceNumber
GetKeyboardLayoutList
CreateCaret
GetKeyboardState
SetCaretPos
DestroyCaret
GetKeyboardLayout
MonitorFromWindow
GetMonitorInfoW
CreateIconIndirect
SendInput
RealGetWindowClassW
DefWindowProcA
SetWindowLongA
GetCursor
TrackPopupMenu
GetGuiResources
SetDlgItemTextW
GetSysColorBrush

gdi32

GetOutlineTextMetricsW
LPtoDP
GetClipBox
GetGraphicsMode
SetViewportOrgEx
SetWindowOrgEx
SetPixelFormat
GetTextColor
EnumFontFamiliesW
EnumFontFamiliesExW
GetCharWidthI
GetGlyphIndicesW
GetFontData
GetGlyphOutlineW
GdiFlush
StrokeAndFillPath
StrokePath
GetStretchBltMode
CreateSolidBrush
SetTextColor
CreateFontIndirectW
SetBkMode
SetBkColor
ExtTextOutW
CreateFontW
GetTextFaceW
GetCurrentObject
GetRegionData
GetDIBits
CreateCompatibleBitmap
GdiAlphaBlend
GetObjectW
SetGraphicsMode
EnumEnhMetaFile
GetWorldTransform
PlayEnhMetaFileRecord
SetWorldTransform
GetStockObject
BitBlt
DeleteDC
CreateDIBSection
GetDeviceCaps
DeleteObject
SelectObject
CreateCompatibleDC
StretchDIBits
CreatePen
ExtCreatePen
SetMiterLimit
CreateRectRgnIndirect
PathToRegion
SelectClipRgn
SetPolyFillMode
BeginPath
PolyBezier
AbortPath
EndPath
SetStretchBltMode
SetBrushOrgEx
GetFontUnicodeRanges
CreateRectRgn
SetTextAlign
SetArcDirection
SetDCBrushColor
SetDCPenColor
SetROP2
CreateDCW
EndDoc
SetAbortProc
StartDocW
CancelDC
Rectangle
ModifyWorldTransform
StartPage
EndPage
GetEnhMetaFileHeader
GdiComment
GetEnhMetaFileBits
PlayEnhMetaFile
CloseEnhMetaFile
SetEnhMetaFileBits
GetEnhMetaFileW
CreateEnhMetaFileW
DeleteEnhMetaFile
ExtEscape
SetMapMode
GetTextMetricsW
GetTextExtentPoint32W
SaveDC
IntersectClipRect
RestoreDC
StretchBlt
CreateBitmap
SetRectRgn
CombineRgn
SwapBuffers
RemoveFontMemResourceEx
AddFontMemResourceEx
ChoosePixelFormat
SetDIBits

comdlg32

GetOpenFileNameW
PrintDlgExW
PrintDlgW
GetSaveFileNameW

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueExA
RegOpenKeyExA
CryptGetUserKey
CryptSignHashW
CryptContextAddRef
InitializeSecurityDescriptor
RegCloseKey
RegOpenKeyExW
SetSecurityDescriptorDacl
GetLengthSid
CopySid
AllocateAndInitializeSid
TraceEvent
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableFlags
RegQueryValueExW
CryptGetKeyParam
CryptDestroyKey
CryptSetKeyParam
CryptDuplicateKey
CryptDecrypt
CryptReleaseContext
CryptDestroyHash
CryptImportKey
CryptAcquireContextW
CryptGetHashParam
CryptHashData
CryptSetHashParam
CryptCreateHash
CryptExportKey
CryptGenKey
CryptDuplicateHash
GetTokenInformation
OpenProcessToken
RegQueryInfoKeyW
RegEnumKeyExW
RegCreateKeyExW
RegSetValueExW
RegNotifyChangeKeyValue
ConvertSidToStringSidW
GetTraceEnableLevel

shell32

SHGetSpecialFolderPathW
ShellExecuteExW
DragQueryFileW
DragFinish
SHFileOperationW
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteA
SHGetFileInfoW
ShellExecuteW

ole32

ProgIDFromCLSID
CoTaskMemAlloc
CLSIDFromString
ReleaseStgMedium
RegisterDragDrop
CreateBindCtx
StringFromGUID2
OleDuplicateData
CoCreateGuid
CLSIDFromProgID
RevokeDragDrop
DoDragDrop
OleUninitialize
OleInitialize
CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree

oleaut32

SafeArrayGetUBound
SafeArrayLock
VariantInit
SafeArrayCreate
SafeArrayUnlock
SafeArrayDestroy
SafeArrayGetLBound
VariantClear
SysAllocString
SysFreeString
VariantChangeType
GetErrorInfo
VariantCopyInd

shlwapi

PathGetCharTypeW
UrlCreateFromPathA
PathFileExistsA
UrlCreateFromPathW
PathIsUNCW
PathFileExistsW
PathFindExtensionW
PathRemoveExtensionW
PathIsUNCA
PathFindFileNameW

rpcrt4

RpcStringFreeW
UuidCreateSequential
UuidToStringW

winhttp

WinHttpGetIEProxyConfigForCurrentUser

dhcpcsvc

DhcpRequestParams
DhcpCApiInitialize

setupapi

SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDriverInfoList
SetupDiEnumDriverInfoW
SetupDiBuildDriverInfoList
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW

imm32

ImmGetCompositionStringW
ImmAssociateContextEx
ImmNotifyIME
ImmGetContext
ImmReleaseContext
ImmSetCandidateWindow
ImmIsIME

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

msimg32

AlphaBlend

usp10

ScriptXtoCP
ScriptGetProperties
ScriptBreak
ScriptTextOut
ScriptJustify
ScriptGetFontProperties
ScriptCPtoX
ScriptItemize
ScriptShape
ScriptPlace
ScriptFreeCache

psapi

GetProcessMemoryInfo

winmm

timeEndPeriod
timeGetTime
waveOutGetNumDevs
waveInGetNumDevs
waveInMessage
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
waveOutOpen
waveOutRestart
waveOutPause
waveOutReset
waveOutClose
waveInPrepareHeader
waveInUnprepareHeader
waveInAddBuffer
waveInOpen
waveInStart
waveInReset
waveInClose
timeBeginPeriod

secur32

InitializeSecurityContextW
QuerySecurityPackageInfoW
FreeCredentialsHandle
DeleteSecurityContext
FreeContextBuffer
QueryContextAttributesW
EncryptMessage
DecryptMessage
AcquireCredentialsHandleW

crypt32

CertFreeCertificateContext
CryptDecodeObjectEx
CertFindExtension
CertAddCertificateContextToStore
CertSerializeCertificateStoreElement
CryptHashCertificate
CertNameToStrW
CertVerifyCertificateChainPolicy
CertGetCertificateChain
CertDuplicateCertificateContext
CertOpenSystemStoreW
CertCreateCertificateChainEngine
CertSetCertificateContextProperty
CertGetCertificateContextProperty
CertVerifyTimeValidity
CertGetIntendedKeyUsage
CertFindChainInStore
CryptAcquireCertificatePrivateKey
CertAddEncodedCertificateToStore
CertCloseStore
CertOpenStore
CryptSignAndEncodeCertificate
CertFreeCertificateChainEngine
CertFreeCertificateChain
CertAddSerializedElementToStore
CryptExportPublicKeyInfoEx

iphlpapi

GetAdaptersAddresses

urlmon

CreateURLMoniker
RegisterBindStatusCallback
CoInternetCreateSecurityManager

winspool.drv

EnumPrintersW
OpenPrinterW
DocumentPropertiesW
GetPrinterW
ClosePrinter

Exports

Exports

ImportCookieFromFile
Initialize

Sections

.text
Size: 14.6MB - Virtual size: 14.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 288KB - Virtual size: 455KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.unwante
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 600KB - Virtual size: 598KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 844KB - Virtual size: 842KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0/seinstallhelper.exe
.exe windows:4 windows x86 arch:x86

b067a51407e29284e470e00ef3bf6850

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\browser\trunk\src\InternalSolution\release\SEInstHelper.pdb

Imports

shlwapi

SHGetValueW
PathFileExistsW
StrCmpIW
SHSetValueW

wininet

InternetOpenUrlW
InternetOpenW
InternetCloseHandle

kernel32

SetLastError
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
MoveFileW
Process32NextW
WaitForSingleObject
CreateThread
SetEndOfFile
GetFileSize
WriteFile
TerminateProcess
FindFirstFileW
Sleep
CloseHandle
CopyFileW
MoveFileExW
ReadFile
SetFilePointer
FindNextFileW
CreateFileW
DeleteFileW
FindClose
GetLastError
OpenProcess
Process32FirstW
GetProcessId
CreateToolhelp32Snapshot
CreateDirectoryW
MultiByteToWideChar
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetCurrentProcess
WriteConsoleA
SetStdHandle
LoadLibraryA
HeapReAlloc
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetSystemTimeAsFileTime
GetVersionExA
GetProcessHeap
GetStartupInfoW
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
InitializeCriticalSection
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

shell32

SHGetFolderPathW
CommandLineToArgvW

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$TEMP/SogouExplorer/cmdlineparser.dll
.dll windows:4 windows x86 arch:x86

3b4e88ec0aabac1bd720997fc66996c9

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\CmdLineParser.pdb

Imports

sogouexplorer

ord95
ord676
ord730
ord24
ord536
ord594
ord103
ord87
ord19
ord18
ord23
ord88
ord84
ord104
ord82
ord62
ord99
ord91
ord92
ord14
ord504
ord83
ord13
ord36
ord78
ord491
ord456
ord492
ord49
ord757
ord721
ord693
ord763
ord576
ord483
ord597
ord746
ord57
ord595
ord3
ord97
ord90
ord94
ord77
ord764
ord101
ord96
ord98
ord72
ord765
ord93
ord85
ord89
ord523
ord26
ord627
ord558
ord561
ord737
ord29
ord470
ord461
ord44
ord10
ord552
ord7
ord669
ord38
ord521
ord30
ord74
ord617
ord1033
ord697
ord612
ord698
ord598
ord547
ord12
ord636
ord15
ord5
ord9
ord430
ord1
ord2
ord557
ord592
ord734
ord736
ord22
ord740
ord767
ord761
ord633
ord599
ord677
ord60
ord739
ord490
ord585
ord494
ord586
ord587
ord735
ord696
ord1034
ord685
ord637
ord534
ord672
ord638
ord643
ord525
ord657
ord50
ord51
ord488
ord472
ord52
ord560
ord533
ord27
ord509
ord39
ord462
ord56
ord4
ord42
ord625
ord591
ord71
ord55
ord25
ord466
ord6
ord75
ord556
ord69
ord46
ord53

kernel32

GetCurrentProcessId
WTSGetActiveConsoleSessionId
GetPriorityClass
GetThreadPriority
GetCurrentThread
SetPriorityClass
SetThreadPriority
GetModuleHandleW
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleFileNameW
ProcessIdToSessionId
FileTimeToLocalFileTime
GetPrivateProfileStringW
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
InterlockedExchange
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTimeZoneInformation
ExitProcess
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
GetStartupInfoA
GetFileType
SetHandleCount
RtlUnwind
GetModuleFileNameA
GetStdHandle
HeapSize
VirtualFree
HeapDestroy
DeleteCriticalSection
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetVersionExA
GetCommandLineA
GetModuleHandleA
VirtualAlloc
VirtualProtect
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GlobalMemoryStatus
FileTimeToDosDateTime
GetSystemInfo
GetProcessTimes
GetSystemTimeAsFileTime
VirtualQuery
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetTempPathW
GetFileAttributesW
SetFileAttributesW
GetFullPathNameW
MulDiv
GlobalFree
LocalFree
RaiseException
GetProcAddress
LoadLibraryW
GetCurrentThreadId
OpenProcess
TerminateProcess
GetCurrentProcess
FlushInstructionCache
CreateThread
WaitForSingleObject
Sleep
SetLastError
EnterCriticalSection
GetTickCount
CreateEventW
LeaveCriticalSection
CloseHandle
SetEvent
VirtualAllocEx
WriteProcessMemory
ReadProcessMemory
VirtualFreeEx
FindNextFileA
FindClose
CreateProcessW
FileTimeToSystemTime
FindFirstFileA
GetTempFileNameW
CreateDirectoryW
MoveFileW
FindFirstFileW
FindNextFileW
RemoveDirectoryW
DeleteFileW
CopyFileW
InitializeCriticalSection
SetErrorMode
MoveFileExW
CreateFileW
WriteFile
ReadFile
GetLastError
GetFileSize
SetFilePointer
CreateFileA
HeapAlloc
HeapFree
GetProcessHeap
GetSystemDirectoryA
lstrcatA
CopyFileA
DeviceIoControl
lstrcpyA
lstrlenA
FreeLibrary
GetVersionExW
LoadLibraryA
LocalAlloc
HeapReAlloc
GlobalAlloc

user32

EnumChildWindows
EnumWindows
GetClassNameW
IsWindowVisible
LoadImageW
GetWindowTextLengthW
GetWindowTextW
DrawTextW
DrawIconEx
ScreenToClient
GetDlgItem
SendNotifyMessageW
GetDC
ReleaseDC
LoadStringW
GetActiveWindow
DialogBoxParamW
MapWindowPoints
EndPaint
DrawIcon
BeginPaint
SetWindowPos
SetWindowLongW
GetWindowLongW
DefWindowProcW
CreateWindowExW
GetMessageW
DispatchMessageW
IsWindow
UnregisterClassA
CallWindowProcW
DestroyWindow
RegisterClassExW
GetParent
EndDialog
GetWindow
GetWindowRect
wsprintfA
IsCharAlphaNumericW
MessageBoxW
wsprintfW
GetClientRect
GetClassInfoExW
EqualRect
IntersectRect
SystemParametersInfoW
GetWindowThreadProcessId
FindWindowExW
LoadCursorW
FindWindowW
SendMessageW
CopyRect
PostQuitMessage
PostMessageW
DestroyIcon

gdi32

GetDeviceCaps
DeleteObject
SelectObject
SetBkColor
ExtTextOutW
GetClipBox
SetTextColor

advapi32

CryptImportKey
CryptVerifySignatureW
CryptHashData
CryptCreateHash
CryptAcquireContextW
CryptDestroyKey
CryptReleaseContext
GetLengthSid
IsValidSid
GetTokenInformation
SetTokenInformation
EqualSid
OpenProcessToken
SaferCreateLevel
SaferComputeTokenFromLevel
AllocateAndInitializeSid
FreeSid
SaferCloseLevel
CopySid
CreateProcessAsUserW
GetUserNameW
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegEnumKeyW
RegOpenCurrentUser
RegOpenKeyW

shell32

ExtractIconExA
ShellExecuteExW
SHGetFolderPathW
SHGetFolderPathA
CommandLineToArgvW
ord165

ole32

OleSetContainedObject
CoGetClassObject
CoInitializeSecurity
OleUninitialize
OleInitialize
CoFileTimeNow
CoCreateInstance
CoUninitialize
CoInitialize
CoInitializeEx

oleaut32

VarBstrCmp
SysStringLen
SysAllocString
SysFreeString
VariantClear
VariantInit

crypt32

CryptMsgGetParam
CryptQueryObject
CertCloseStore
CryptMsgClose
CertFreeCertificateContext
CertGetNameStringW
CertFindCertificateInStore

shlwapi

SHGetValueW
SHSetValueW
PathFileExistsW
StrStrIA
SHGetValueA
SHSetValueA
SHDeleteValueW

userenv

UnloadUserProfile

Exports

Exports

GetISE

Sections

.text
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$TEMP/SogouExplorer/seinstallhelper.exe
.exe windows:4 windows x86 arch:x86

b067a51407e29284e470e00ef3bf6850

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\browser\trunk\src\InternalSolution\release\SEInstHelper.pdb

Imports

shlwapi

SHGetValueW
PathFileExistsW
StrCmpIW
SHSetValueW

wininet

InternetOpenUrlW
InternetOpenW
InternetCloseHandle

kernel32

SetLastError
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
MoveFileW
Process32NextW
WaitForSingleObject
CreateThread
SetEndOfFile
GetFileSize
WriteFile
TerminateProcess
FindFirstFileW
Sleep
CloseHandle
CopyFileW
MoveFileExW
ReadFile
SetFilePointer
FindNextFileW
CreateFileW
DeleteFileW
FindClose
GetLastError
OpenProcess
Process32FirstW
GetProcessId
CreateToolhelp32Snapshot
CreateDirectoryW
MultiByteToWideChar
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetCurrentProcess
WriteConsoleA
SetStdHandle
LoadLibraryA
HeapReAlloc
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetSystemTimeAsFileTime
GetVersionExA
GetProcessHeap
GetStartupInfoW
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
InitializeCriticalSection
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

shell32

SHGetFolderPathW
CommandLineToArgvW

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$TEMP/SogouExplorer/sogouexplorer.dll
.dll windows:4 windows x86 arch:x86

f3778d6cb82c1b279ac40bffd096ae51

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\se_src\branches\3.2_4508\bin\AllLibRelease\SogouExplorer.pdb

Imports

kernel32

InitializeCriticalSection
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InterlockedExchange
LoadLibraryA
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
OpenProcess
GetVersionExW
CreateProcessW
WaitForMultipleObjects
LoadLibraryExW
CreateDirectoryW
GetModuleFileNameW
GetCurrentDirectoryW
GlobalAlloc
GlobalFree
FindResourceW
SizeofResource
LockResource
LoadResource
OutputDebugStringA
QueueUserWorkItem
CreateFileW
ReadFile
lstrlenA
lstrlenW
InitializeCriticalSectionAndSpinCount
VirtualProtect
ResumeThread
GetThreadContext
SetThreadContext
VirtualQuery
InterlockedCompareExchange
FlushInstructionCache
LoadLibraryW
FindFirstFileW
FindClose
GetFileSize
MapViewOfFile
CreateFileMappingA
lstrcmpiA
SearchPathW
GetExitCodeProcess
OutputDebugStringW
GetSystemTimeAsFileTime
WTSGetActiveConsoleSessionId
UnmapViewOfFile
CreateFileMappingW
GlobalAddAtomW
GetTempFileNameW
HeapAlloc
GlobalMemoryStatusEx
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetLocalTime
GetSystemTime
SystemTimeToFileTime
GetPrivateProfileStringW
GlobalLock
GlobalUnlock
OpenFileMappingW
FindResourceExW
CompareFileTime
CopyFileW
TerminateThread
DeleteFileW
MoveFileExW
GetPriorityClass
GetFullPathNameW
GetProcessTimes
GetSystemInfo
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
SetFileAttributesW
GetFileTime
SetFilePointer
RemoveDirectoryW
lstrcpyW
LocalFree
IsBadReadPtr
FindResourceA
ResetEvent
OpenFileMappingA
LocalAlloc
IsProcessorFeaturePresent
GetThreadLocale
lstrcpyA
lstrcpynA
ExpandEnvironmentStringsW
CreateFileA
SetEndOfFile
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetConsoleMode
GetConsoleCP
GetFileAttributesW
LockFileEx
GetDiskFreeSpaceW
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
RaiseException
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentThread
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
GetModuleHandleA
HeapSize
VirtualAlloc
VirtualFree
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetProcessHeap
GetVersionExA
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
HeapFree
SetUnhandledExceptionFilter
ProcessIdToSessionId
UnhandledExceptionFilter
FormatMessageW
UnlockFile
LockFile
UnlockFileEx
GetFileAttributesExW
HeapReAlloc
FreeLibrary
GetModuleHandleW
WaitForSingleObject
CreateThread
CreateEventW
GetTickCount
GetCurrentProcess
TerminateProcess
CreateMutexW
GetLastError
CloseHandle
Sleep
SetProcessWorkingSetSize
SetEvent

user32

SetPropW
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
GetDlgItem
GetCursor
SetScrollInfo
GetScrollInfo
GetScrollPos
GetScrollRange
IsClipboardFormatAvailable
GetClipboardData
SetWindowContextHelpId
MessageBeep
RegisterClipboardFormatW
SetScrollPos
IsRectEmpty
GetSysColor
PostThreadMessageW
WaitMessage
SendNotifyMessageW
ActivateKeyboardLayout
CreateDialogIndirectParamA
CreateDialogIndirectParamW
MessageBoxExA
MessageBoxExW
MessageBoxIndirectA
MessageBoxIndirectW
CreateWindowExA
CreateDialogParamA
CreateDialogParamW
RegisterClassA
RegisterClassW
RegisterClassExA
MsgWaitForMultipleObjectsEx
EnumWindows
EndMenu
GetKeyboardLayout
MsgWaitForMultipleObjects
SetMenuDefaultItem
InflateRect
GetMenuContextHelpId
SetMenuContextHelpId
SetMenuInfo
GetMenuItemInfoW
GetMenuItemCount
InsertMenuItemW
InsertMenuW
GetMenuInfo
DeleteMenu
SendInput
UnregisterClassA
GetCapture
GetSystemMenu
SetWindowRgn
SetParent
EqualRect
GetWindow
ClientToScreen
MonitorFromPoint
ReleaseCapture
GetAncestor
CopyRect
UpdateLayeredWindow
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
DestroyCursor
TrackMouseEvent
SetWindowPos
SetCursor
AppendMenuW
DestroyMenu
CreatePopupMenu
TrackPopupMenu
LoadIconW
GetWindowTextLengthW
GetWindowTextW
EnableMenuItem
GetKeyState
EnumDisplayMonitors
EnableWindow
GetPropW
UnionRect
GetDlgCtrlID
CopyIcon
GetWindowContextHelpId
EnumThreadWindows
GetForegroundWindow
ChildWindowFromPoint
RedrawWindow
EndDeferWindowPos
DeferWindowPos
InvalidateRect
BeginDeferWindowPos
GetFocus
GetParent
GetClassNameW
IsWindowEnabled
GetActiveWindow
ShowWindowAsync
GetTopWindow
GetLastActivePopup
UnregisterHotKey
RegisterHotKey
SetFocus
SetCapture
AttachThreadInput
ShowOwnedPopups
GetCursorPos
ScreenToClient
GetWindowRect
PtInRect
DrawIconEx
DrawTextW
GetSystemMetrics
CreateIconIndirect
RegisterWindowMessageW
PeekMessageW
CreateWindowExW
SetForegroundWindow
BringWindowToTop
ShowWindow
IsIconic
IsWindowVisible
GetClassInfoExW
DestroyWindow
GetWindowLongW
UpdateWindow
PostQuitMessage
CallWindowProcW
DefWindowProcW
RegisterClassExW
SetWindowLongW
MonitorFromWindow
OffsetRect
LoadCursorW
SetTimer
GetWindowPlacement
IntersectRect
GetMonitorInfoW
MonitorFromRect
TranslateMessage
SystemParametersInfoW
GetMessageW
LoadImageW
KillTimer
DispatchMessageW
DestroyIcon
EndPaint
BeginPaint
wsprintfA
SendMessageW
GetIconInfo
GetClientRect
WindowFromPoint
SetWindowTextW
AllowSetForegroundWindow
GetWindowThreadProcessId
FindWindowW
GetDesktopWindow
GetWindowDC
CreateIconFromResourceEx
PrintWindow
ReleaseDC
GetDC
MessageBoxW
PostMessageW
wsprintfW
GetLastInputInfo
GetAsyncKeyState
FindWindowExW
SendMessageTimeoutW
IsWindow

advapi32

RegOpenKeyExW
RegCloseKey
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegOpenKeyW
RegOpenCurrentUser
RegCreateKeyW
RegSetValueExW
RegEnumValueW
RegDeleteValueW
RegNotifyChangeKeyValue
RegQueryValueExW

ole32

CoCreateInstance
StringFromGUID2
CoRevokeClassObject
CoRegisterClassObject
CoDosDateTimeToFileTime
OleUninitialize
OleInitialize
CoInitialize
CreateStreamOnHGlobal
CoCreateGuid

shell32

ShellExecuteW
ShellExecuteExW
SHFileOperationW
Shell_NotifyIconW
ord155
SHGetPathFromIDListW
SHGetFolderLocation
SHGetFolderPathW
SHGetFolderPathA
ord165
CommandLineToArgvW

oleaut32

SafeArrayGetUBound
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayUnaccessData
SysAllocString
SysFreeString

shlwapi

SHGetValueA
SHSetValueA
SHGetValueW
SHSetValueW
StrStrIW
StrCmpW
StrCmpIW
SHDeleteValueW
SHDeleteKeyW
PathFileExistsW

comctl32

ImageList_Destroy
ImageList_Create

gdi32

CreateCompatibleBitmap
BitBlt
GetPixel
CreateCompatibleDC
GetDIBits
CreateFontW
GetObjectW
CreateDIBSection
DeleteObject
DeleteDC
SelectObject
GetBitmapBits
GetCurrentObject
GetTextColor
GetStockObject
StretchBlt
SetBitmapBits
GetTextExtentPoint32W
SetTextColor
SetBkMode
CreatePen
MoveToEx
LineTo
SetBkColor
ExtTextOutW
CreateRoundRectRgn
SetViewportOrgEx
GetClipBox
SelectClipRgn
CreateRectRgn
CombineRgn
SetWindowOrgEx
DPtoLP
LPtoDP
IntersectClipRect
RoundRect
CreateSolidBrush
SaveDC
RestoreDC
PatBlt
GetDeviceCaps

msimg32

AlphaBlend

uxtheme

CloseThemeData
OpenThemeData

Exports

Exports

_

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 381KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$TEMP/SogouExplorer/sogouexplorer.exe
.exe windows:5 windows x86 arch:x86

8bbfe70a73b60a62df013fee93bdc654

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
LoadLibraryW
TerminateProcess
GetProcAddress
GetCommandLineW

Sections

.text
Size: 512B - Virtual size: 127B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 234B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$TEMP/SogouExplorer/wakeupse.exe
.exe windows:4 windows x86 arch:x86

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 272KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 209KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Appdata/Bin/flash_wk.dll
.dll regsvr32 windows:5 windows x86 arch:x86

487a7da859ea36f81e666d2e27cf55f7

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

15:e5:ac:0a:48:70:63:71:8e:39:da:52:30:1a:04:88
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

15/12/2010, 00:00

Not After

14/12/2012, 23:59

Subject

CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:84:00:07:aa:75:9b:43:1f:52:3d:60:ae:1b:f2:47:ac:5a:2b:06
Signer

Actual PE Digest

52:84:00:07:aa:75:9b:43:1f:52:3d:60:ae:1b:f2:47:ac:5a:2b:06

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

NPSWF32.pdb

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

winmm

timeGetTime
waveInStop
waveInAddBuffer
waveInStart
waveOutReset
waveOutOpen
mixerGetID
waveInGetDevCapsA
waveOutGetDevCapsA
waveOutMessage
waveInMessage
mixerClose
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetDevCapsA
mixerOpen
mixerGetControlDetailsA
waveOutRestart
waveOutPause
waveInGetPosition
mixerSetControlDetails
waveInGetNumDevs
waveOutGetNumDevs
waveInGetDevCapsW
waveOutGetDevCapsW
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutWrite
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
timeKillEvent
waveOutGetPosition
timeSetEvent
waveInOpen
waveInPrepareHeader
waveInReset
waveInUnprepareHeader
waveInClose
waveOutClose

wininet

InternetSetOptionW
InternetCloseHandle
InternetReadFile
HttpSendRequestW
HttpOpenRequestA
InternetConnectA
InternetOpenA

crypt32

CertFreeCertificateContext
CertVerifySubjectCertificateContext
CryptVerifyMessageSignature
CryptGetMessageCertificates
CertCreateCertificateContext
CertFindCertificateInStore
CertCloseStore

rpcrt4

RpcStringFreeA
UuidToStringA

oleaut32

LoadRegTypeLi
UnRegisterTypeLi
SysFreeString
SysAllocString
SysStringLen
LoadTypeLi
RegisterTypeLi

urlmon

CopyStgMedium

dsound

ord8

kernel32

SystemTimeToFileTime
GetSystemTime
GetFileSizeEx
CreateFileW
GetFileAttributesW
CreateDirectoryW
WideCharToMultiByte
DeleteFileA
WriteFile
CreateFileA
GetTempFileNameA
GetCurrentDirectoryA
CreateDirectoryA
GetEnvironmentVariableA
GlobalFree
FreeLibrary
GetProcessTimes
GetCurrentProcess
GlobalUnlock
GlobalLock
GetCurrentProcessId
GlobalSize
GlobalAlloc
GetSystemInfo
GetModuleHandleW
GetUserDefaultUILanguage
MoveFileExW
VirtualQuery
GetUserDefaultLangID
GetVersionExA
SetFilePointer
VerifyVersionInfoW
VerSetConditionMask
CreateProcessA
CreateThread
ReadFile
GetFileSize
FindResourceExA
FindResourceExW
SetUnhandledExceptionFilter
GetTempPathW
InterlockedIncrement
FindFirstFileW
GetTimeZoneInformation
ReleaseSemaphore
WaitForMultipleObjects
SetEvent
CreateSemaphoreW
GetTempFileNameW
GetSystemDirectoryW
ExpandEnvironmentStringsA
GetTempPathA
GetFileAttributesA
CreateMutexA
SetFilePointerEx
GetFileAttributesExW
GetFileInformationByHandle
GetVolumeInformationW
GetCurrentDirectoryW
SetCurrentDirectoryW
ExpandEnvironmentStringsW
OutputDebugStringA
RaiseException
UnmapViewOfFile
ReleaseMutex
MapViewOfFile
CreateFileMappingA
SetLastError
SetThreadPriority
GetSystemDirectoryA
TerminateThread
lstrcpyA
lstrlenA
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserAPC
OpenThread
SleepEx
EnumSystemLocalesW
HeapAlloc
GetProcessHeap
HeapFree
HeapSize
VirtualProtect
RtlUnwind
ExitProcess
GetCommandLineA
UnhandledExceptionFilter
GetStdHandle
TerminateProcess
IsDebuggerPresent
SetHandleCount
GetFileType
RemoveDirectoryW
DeleteFileW
FindNextFileW
FindClose
GetModuleFileNameA
FindResourceA
SizeofResource
LoadResource
LockResource
OpenFile
_lwrite
_lclose
FreeResource
LoadLibraryA
GetModuleFileNameW
lstrlenW
LCMapStringW
GetTickCount
GetModuleHandleA
GetCurrentThreadId
GetLocaleInfoW
GetEnvironmentVariableW
GetLastError
ResetEvent
WaitForSingleObject
CloseHandle
CreateEventW
GetVersionExW
LoadLibraryW
GetProcAddress
GetCurrentThread
SetThreadAffinityMask
IsDBCSLeadByte
GetACP
GetCPInfo
MultiByteToWideChar
ExitThread
InterlockedExchange
InterlockedCompareExchange
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetStartupInfoA
GetUserDefaultLCID
GetTimeFormatW
GetDateFormatW
CompareStringW
GetCurrencyFormatW
GetNumberFormatW
VirtualFree
VirtualAlloc
TlsGetValue
TlsSetValue
TlsFree
GetConsoleCP
GetConsoleMode
HeapCreate
HeapDestroy
HeapReAlloc
GetOEMCP
IsValidCodePage
LCMapStringA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
FlushFileBuffers
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateSemaphoreA
WriteConsoleW
GetStringTypeA
GetStringTypeW
CompareStringA
SetEnvironmentVariableA
SetEndOfFile
TlsAlloc
SwitchToThread
DeviceIoControl
GetVersion
InterlockedExchangeAdd
CancelWaitableTimer
SetWaitableTimer
CreateWaitableTimerA
InterlockedDecrement
CreateEventA

user32

CreateCaret
ShowCaret
DestroyCaret
EmptyClipboard
SetClipboardData
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
CloseClipboard
RegisterClipboardFormatW
IsWindow
GetMenuItemInfoW
RemoveMenu
SetMenuItemInfoW
InsertMenuItemW
DrawMenuBar
CreatePopupMenu
TrackPopupMenu
DestroyMenu
CreateMenu
SetMenuInfo
MapVirtualKeyW
WaitForInputIdle
GetForegroundWindow
MessageBoxA
DialogBoxParamW
SetWindowTextA
RedrawWindow
DialogBoxIndirectParamW
EndDialog
GetDesktopWindow
GetDlgItem
SetWindowTextW
SendMessageTimeoutW
CreateIconIndirect
SetRectEmpty
GetCursor
DestroyIcon
LoadImageW
GetPropW
SetPropW
SetCaretPos
GetClipboardFormatNameA
RegisterClipboardFormatA
CreateWindowExW
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExA
SetCapture
ReleaseCapture
GetSubMenu
SystemParametersInfoW
ScreenToClient
GetCapture
GetCursorPos
WindowFromPoint
GetParent
PeekMessageW
GetQueueStatus
KillTimer
SetTimer
IsWindowVisible
PostMessageW
SendMessageW
LoadIconW
RegisterClassW
GetFocus
GetTopWindow
GetKeyState
InvalidateRect
LoadCursorW
SetCursor
LoadStringW
MessageBoxW
SetWindowLongW
EnableMenuItem
CheckMenuItem
BeginPaint
GetClientRect
EndPaint
UnregisterClassA
SetFocus
MoveWindow
EnumDisplaySettingsW
GetSystemMetrics
GetWindowInfo
CopyRect
DefWindowProcW
SendInput
GetKeyboardLayout
FillRect
GetWindowLongW
GetWindowRect
UpdateLayeredWindow
GetDC
ReleaseDC
ClientToScreen
GetMonitorInfoW
SetRect
OffsetRect
MonitorFromWindow
GetDoubleClickTime
MapWindowPoints
RegisterClassA
PostMessageA
RegisterWindowMessageA
SendNotifyMessageW
GetWindowThreadProcessId

gdi32

StretchBlt
SetStretchBltMode
GetStretchBltMode
EnumFontFamiliesW
GetClipBox
GetSystemPaletteEntries
Rectangle
GetStockObject
StretchDIBits
LPtoDP
RectVisible
CreateSolidBrush
SetBkColor
ExtTextOutW
SelectPalette
RealizePalette
SelectObject
BitBlt
CreateDIBSection
GetICMProfileA
CreateDCA
SetPixel
DeleteDC
CreateCompatibleBitmap
GetTextMetricsW
EnumFontFamiliesA
SetBkMode
SetTextAlign
IntersectClipRect
SelectClipRgn
ExtTextOutA
SetTextColor
GetObjectW
GetDeviceCaps
CreateFontIndirectA
GetClipRgn
CreateRectRgn
GetTextAlign
GetBkMode
GetTextColor
SetTextCharacterExtra
GetTextExtentPoint32W
GetCurrentObject
GetBkColor
CreatePen
DPtoLP
GetTextExtentPoint32A
GetTextCharacterExtra
SetWorldTransform
SetGraphicsMode
GetWorldTransform
CreatePalette
StartDocW
EndDoc
StrokePath
ExtCreatePen
FillPath
GetDIBits
DeleteObject
CreateFontIndirectW
GdiFlush
CreateCompatibleDC
RestoreDC
SelectClipPath
PolyBezierTo
GetFontData
EnumFontFamiliesExW
LineTo
MoveToEx
EndPath
BeginPath
SaveDC
SetPolyFillMode
CreateBitmap
StartPage
EndPage

comdlg32

GetOpenFileNameW
CommDlgExtendedError
PrintDlgW
GetSaveFileNameW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegOpenKeyA
RegDeleteValueA
RegQueryValueExA
RegCreateKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

shell32

SHGetSpecialFolderLocation
SHAppBarMessage
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathA
SHGetFolderPathW
SHFileOperationW
SHGetDiskFreeSpaceExW

ole32

OleFlushClipboard
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CreateBindCtx
ReleaseStgMedium
OleUninitialize
PropVariantClear
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
OleInitialize
CoInitialize
CoUninitialize

mscms

CloseColorProfile
CreateColorTransformW
OpenColorProfileW
TranslateBitmapBits
DeleteColorTransform

ws2_32

inet_addr
WSACleanup
closesocket
WSAAsyncSelect
WSAGetLastError
WSAIoctl
socket
WSAStartup
setsockopt
recv
send
ntohs
getsockname
htons
WSACloseEvent
gethostbyname
inet_ntoa
htonl
ntohl
select
gethostname
connect
ioctlsocket
WSAEnumNetworkEvents
WSAEventSelect
WSACreateEvent
WSAAddressToStringA
bind
sendto
recvfrom
WSASetLastError
getservbyport
gethostbyaddr
WSASocketW
getservbyname

Exports

Exports

BrokerMainW
DllRegisterServer
DllUnregisterServer
FlashPlayer_10_3_183_11_FlashPlayer
Flash_DisableLocalSecurity
Flash_EnforceLocalSecurity
Java_ShockwaveFlash_CurrentFrame_stub
Java_ShockwaveFlash_FlashVersion_stub
Java_ShockwaveFlash_FrameLoaded_stub
Java_ShockwaveFlash_GetVariable_stub
Java_ShockwaveFlash_GotoFrame_stub
Java_ShockwaveFlash_IsPlaying_stub
Java_ShockwaveFlash_LoadMovie_stub
Java_ShockwaveFlash_Pan_stub
Java_ShockwaveFlash_PercentLoaded_stub
Java_ShockwaveFlash_Play_stub
Java_ShockwaveFlash_SetVariable_stub
Java_ShockwaveFlash_SetZoomRect_stub
Java_ShockwaveFlash_StopPlay_stub
Java_ShockwaveFlash_TCallFrame_stub
Java_ShockwaveFlash_TCallLabel_stub
Java_ShockwaveFlash_TCurrentFrame_stub
Java_ShockwaveFlash_TCurrentLabel_stub
Java_ShockwaveFlash_TGetProperty_stub
Java_ShockwaveFlash_TGotoFrame_stub
Java_ShockwaveFlash_TGotoLabel_stub
Java_ShockwaveFlash_TPlay_stub
Java_ShockwaveFlash_TSetProperty_stub
Java_ShockwaveFlash_TStopPlay_stub
Java_ShockwaveFlash_TotalFrames_stub
Java_ShockwaveFlash_Zoom_stub
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
native_ShockwaveFlash_CurrentFrame
native_ShockwaveFlash_FlashVersion
native_ShockwaveFlash_FrameLoaded
native_ShockwaveFlash_GetVariable
native_ShockwaveFlash_GotoFrame
native_ShockwaveFlash_IsPlaying
native_ShockwaveFlash_LoadMovie
native_ShockwaveFlash_Pan
native_ShockwaveFlash_PercentLoaded
native_ShockwaveFlash_Play
native_ShockwaveFlash_SetVariable
native_ShockwaveFlash_SetZoomRect
native_ShockwaveFlash_StopPlay
native_ShockwaveFlash_TCallFrame
native_ShockwaveFlash_TCallLabel
native_ShockwaveFlash_TCurrentFrame
native_ShockwaveFlash_TCurrentLabel
native_ShockwaveFlash_TGetProperty
native_ShockwaveFlash_TGotoFrame
native_ShockwaveFlash_TGotoLabel
native_ShockwaveFlash_TPlay
native_ShockwaveFlash_TSetProperty
native_ShockwaveFlash_TStopPlay
native_ShockwaveFlash_TotalFrames
native_ShockwaveFlash_Zoom
register_ShockwaveFlash
unregister_ShockwaveFlash
unuse_ShockwaveFlash
unuse_netscape_plugin_Plugin
use_ShockwaveFlash
use_netscape_plugin_Plugin

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Appdata/Bin/malurl.dat
Appdata/Extension/$R0
Appdata/Extension/com.sogou.privateSurf.sext
.zip
Appdata/Extension/com.sogou.quicklink.sext
.zip
Appdata/Extension/com.sogou.secondAccount.sext
.zip
Appdata/Extension/com.sogou.share.sext
.zip
Appdata/Extension/com.sogou.snapTaker.sext
.zip
Appdata/Extension/com.sogou.translator.sext
.zip
Appdata/Extension/extension.ini
Appdata/FavIcon/FavorIcon.db
Appdata/MetaSearch/metasearchupdate1
Appdata/MetaSearch/metasearchupdate2
Appdata/Skin/bluesky.setheme
.zip
Appdata/Skin/dolphin.setheme
.zip
Appdata/Skin/miss.setheme
.zip
Appdata/Skin/popo.setheme
.zip
Appdata/Skin/小清新.setheme
.zip
Appdata/Skin/搜狗浏览器 2010.seskin
.zip
Appdata/Skin/搜狗浏览器IE经典版.seskin
.zip
Appdata/Skin/搜狗浏览器‘Chrome’版.seskin
.zip
Appdata/Skin/搜狗浏览器水晶全透明版.seskin
.zip
Appdata/Skin/炫紫.setheme
.zip
Appdata/Skin/粉条纹.setheme
.zip
Appdata/datapack1
Appdata/datapack2
Appdata/datapack3
Appdata/recommand_bookmark.htm
Appdata/script.dat
Appdata/urlblack.dat
FlashIcon.ico
Instlist
LocalPage/Error404.zip
.zip
LocalPage/MyFavorStartPage.zip
.zip
LocalPage/PassportLogin.zip
.zip
LocalPage/WKInspector.zip
.zip
Skin/搜狗浏览器 2010.seskin
.zip
UserInstruct/download.swf
UserInstruct/passport.swf
UserInstruct/passport_20.swf
UserInstruct/swichcore.swf
UserInstruct/tabscroll.swf
UserInstruct/videoExtract.swf
UserInstruct/videoOnTop.swf
browser.conf
changelog.txt
datapack1
datapack2
datapack3
importfavfile
license
metasearchdic
recommand_bookmark.htm
sogounetopt.sys
.sys windows:6 windows x86 arch:x86

f4303c92b16ab5be231f4b83cc37977e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

10/07/2009, 00:00

Not After

14/07/2012, 23:59

Subject

CN=Sogou.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D,O=Sogou.com,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\se_src\branches\3.2_4508\src\bandwidthdriver\netoptdriver\netoptdriver\objfre_wxp_x86\i386\SogouNetopt.pdb

Imports

ntoskrnl.exe

RtlInitUnicodeString
RtlCopyUnicodeString
RtlAppendUnicodeToString
ZwReadFile
ZwOpenFile
RtlAppendUnicodeStringToString
memset
strncpy
KeServiceDescriptorTable
MmGetSystemRoutineAddress
KeDelayExecutionThread
IofCompleteRequest
IoDeleteSymbolicLink
IoCreateSymbolicLink
IoDeleteDevice
MmIsAddressValid
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
ZwUnmapViewOfSection
_stricmp
ZwMapViewOfSection
ZwCreateSection
IoFreeMdl
MmUnlockPages
MmMapLockedPagesSpecifyCache
MmProbeAndLockPages
IoAllocateMdl
MmUnmapLockedPages
ZwOpenKey
MmLockPagableDataSection
wcsncpy
ZwQuerySymbolicLinkObject
ZwOpenSymbolicLinkObject
RtlCompareUnicodeString
KeQueryTimeIncrement
KeTickCount
_alldiv
_allmul
KeUnstackDetachProcess
RtlEqualUnicodeString
KeStackAttachProcess
PsLookupProcessByProcessId
ObfDereferenceObject
ZwFreeVirtualMemory
ProbeForWrite
ZwAllocateVirtualMemory
ZwOpenProcess
memcpy
ObReferenceObjectByHandle
_strnicmp
RtlFreeUnicodeString
KeAcquireInStackQueuedSpinLockAtDpcLevel
KeReleaseInStackQueuedSpinLockFromDpcLevel
memmove
KeBugCheckEx
ZwQueryValueKey
ZwClose
ExAllocatePoolWithTag
ExFreePoolWithTag
RtlGetVersion
MmUnlockPagableImageSection
ZwPulseEvent
RtlUnwind
ZwSetSecurityObject
ObOpenObjectByPointer
IoDeviceObjectType
IoCreateDevice
RtlGetDaclSecurityDescriptor
RtlGetSaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
_snwprintf
RtlLengthSecurityDescriptor
SeCaptureSecurityDescriptor
SeExports
IoIsWdmVersionAvailable
_wcsnicmp
RtlAddAccessAllowedAce
RtlLengthSid
wcschr
RtlAbsoluteToSelfRelativeSD
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
ZwCreateKey
ZwSetValueKey

hal

KeAcquireInStackQueuedSpinLock
KeReleaseInStackQueuedSpinLock
KeGetCurrentIrql

ndis.sys

NdisRegisterProtocol
NdisDeregisterProtocol

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

fakeWahR
Size: 128B - Virtual size: 107B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

fakeWSPS
Size: 128B - Virtual size: 81B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
webkit_plugins_file.xml

Sharing

General

Malware Config

Signatures

Files

b729b61eb1515fcf7b3e511e4e66258b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6Certificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 409KB

.ndata Size: - Virtual size: 836KB

.rsrc Size: 19KB - Virtual size: 18KB

0ef4b752d5e8021e94272e0ace79747d

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

ole32

gdiplus

comctl32

msimg32

wininet

Exports

Exports

Sections

.text Size: 168KB - Virtual size: 167KB

.rdata Size: 48KB - Virtual size: 44KB

.data Size: 12KB - Virtual size: 16KB

.rsrc Size: 120KB - Virtual size: 118KB

.reloc Size: 16KB - Virtual size: 13KB

c67963258f594416b958bfc455aec22f

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6Certificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

PDB Paths

Imports

gdiplus

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 409KB

.ndata
Size: - Virtual size: 836KB

.rsrc
Size: 19KB - Virtual size: 18KB

.text
Size: 168KB - Virtual size: 167KB

.rdata
Size: 48KB - Virtual size: 44KB

.data
Size: 12KB - Virtual size: 16KB

.rsrc
Size: 120KB - Virtual size: 118KB

.reloc
Size: 16KB - Virtual size: 13KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

72:d3:ce:02:eb:71:f7:99:ec:b5:f8:bb:79:66:28:a6
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

.text
Size: 432KB - Virtual size: 431KB

.rdata
Size: 80KB - Virtual size: 76KB

.data
Size: 12KB - Virtual size: 19KB

.rsrc
Size: 20KB - Virtual size: 19KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 7KB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 1024B - Virtual size: 17KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 2KB