d71fdcc638eb73473c75750ddfc452fe_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d71fdcc638eb73473c75750ddfc452fe_JaffaCakes118
Size

7.9MB
MD5

d71fdcc638eb73473c75750ddfc452fe
SHA1

f68b4c90c9fd4c5b90c00b27a1b715b999721fb8
SHA256

910a4ffb447270cb632dbe2e919be86bfc0c3147f1d08c3ea0a2c979d439b1c2
SHA512

088aff0991c9be28f34d66a9dc546ddde85e6f4a6671227590b8e2c921db8ac9fb607f4463ee7974a6c642049d4970daf91d4756ebd0cd79d7b6be208bd89b04
SSDEEP

196608:WZzd6iGRnX8zv6GWkhKSMk9LSvtTxqOx2nqYBZ:czdInsznWkwSMk9LSdQaRYBZ

Score

3^/10

qr link

Malware Config

Signatures

One or more HTTP URLs in qr code identified
Detects presence of HTTP links in QR codes.
qr link

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/msvcr80.dll

Files

d71fdcc638eb73473c75750ddfc452fe_JaffaCakes118
.7z
2345Explorer.exe
.exe windows:4 windows x86 arch:x86

767add0a5f574391ab7ce7526933359a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

23/05/2013, 00:00

Not After

22/05/2016, 23:59

Subject

CN=2345.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=总办,O=2345.com,L=上海,ST=上海,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

39:56:7d:02:28:d7:6a:bc:6e:b9:d1:13:a8:ef:60:45:59:3d:00:35
Signer

Actual PE Digest

39:56:7d:02:28:d7:6a:bc:6e:b9:d1:13:a8:ef:60:45:59:3d:00:35

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\2345\Coral\trunk\public\Bin\Win32\Release\pdb\2345Explorer.pdb

Imports

kernel32

GetCurrentProcessId
GetProcAddress
LoadLibraryW
LoadLibraryExW
ReadFile
SetFilePointer
GetModuleFileNameW
EnterCriticalSection
GetComputerNameW
CreateFileW
LoadLibraryA
GetFileAttributesExW
GetModuleHandleW
SetEndOfFile
FreeLibrary
DeleteCriticalSection
GetVersionExW
GetFileSizeEx
LeaveCriticalSection
CloseHandle
WriteFile
GetFileAttributesW
ExpandEnvironmentStringsW
InitializeCriticalSection
DeleteFileW
SetFileAttributesW
GetLastError
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
Sleep
HeapSize
VirtualAlloc
HeapReAlloc
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW

ole32

OleUninitialize
OleInitialize
CoTaskMemFree

Exports

Exports

CheckFile
GetConfigValue
Term

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2345ExplorerReg.exe
.exe windows:4 windows x86 arch:x86

74cb78a18e97b6ca876d6d27aee24dd8

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

23/05/2013, 00:00

Not After

22/05/2016, 23:59

Subject

CN=2345.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=总办,O=2345.com,L=上海,ST=上海,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a4:1c:ae:d2:c8:8c:e9:13:54:d4:ef:4c:80:f2:8a:c7:ef:45:a2:dc
Signer

Actual PE Digest

a4:1c:ae:d2:c8:8c:e9:13:54:d4:ef:4c:80:f2:8a:c7:ef:45:a2:dc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

i:\Arthur\public\Bin\Win32\Release\pdb\2345Explorer.pdb

Imports

kernel32

GetCurrentProcessId
GetProcAddress
LoadLibraryW
OutputDebugStringW
GetCurrentThreadId
WriteFile
DeleteFileW
GetFileAttributesW
SetFilePointer
SetFileAttributesW
ReadFile
CreateFileW
GetFileAttributesExW
SetEndOfFile
CloseHandle
DeleteCriticalSection
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
EnterCriticalSection
GetFileSizeEx
ExpandEnvironmentStringsW
LoadLibraryA
GetVersionExW
FreeLibrary
GetComputerNameW
GetModuleHandleW
MapViewOfFile
UnmapViewOfFile
GetLastError
CreateFileMappingW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
Sleep
HeapSize
VirtualAlloc
HeapReAlloc
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW

ole32

CoTaskMemFree
OleInitialize
OleUninitialize

Exports

Exports

CheckFile
GetConfigValue
Term

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
2345王牌浏览器免责声明.txt
Addon/Capture.addon
.dll windows:4 windows x86 arch:x86

30e07d82f814d58262d6ff0b0476e0f4

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

23/05/2013, 00:00

Not After

22/05/2016, 23:59

Subject

CN=2345.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=总办,O=2345.com,L=上海,ST=上海,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5d:23:31:7a:bd:56:54:02:15:0e:66:e2:2c:17:19:17:3f:3f:fb:3c
Signer

Actual PE Digest

5d:23:31:7a:bd:56:54:02:15:0e:66:e2:2c:17:19:17:3f:3f:fb:3c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetConsoleMode
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
GetStartupInfoA
GetFileType
SetHandleCount
Sleep
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
RtlUnwind
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CreateFileA
FlushFileBuffers
lstrcmpW
GetTickCount
GetVersionExW
CreateDirectoryW
lstrcpynW
LockResource
SizeofResource
GetLastError
CreateMutexW
RaiseException
SetLastError
FlushInstructionCache
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
FindResourceW
GetCurrentThreadId
FindResourceExW
GetLocalTime
CloseHandle
FreeEnvironmentStringsA
LoadResource
DeleteCriticalSection
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapSize
GetProcessHeap
LoadLibraryA
GetProcAddress
InterlockedCompareExchange
InitializeCriticalSection

user32

SetWindowLongW
IsWindow
OpenClipboard
GetWindowLongW
EmptyClipboard
SetClipboardData
CloseClipboard
IsRectEmpty
SetRect
GetSystemMetrics
EnumDisplayDevicesW
EnumDisplaySettingsW
LoadStringW
SetWindowPos
GetActiveWindow
GetParent
FillRect
PtInRect
SetRectEmpty
LoadImageW
LoadCursorW
GetCursorPos
SetCursor
SystemParametersInfoW
ChildWindowFromPointEx
EqualRect
DialogBoxParamW
GetWindowRect
SetFocus
GetClientRect
MapWindowPoints
PostMessageW
EndDialog
EndPaint
BeginPaint
SetForegroundWindow
ShowWindow
InvalidateRgn
GetKeyState
UnionRect
CreateWindowExW
DrawTextW
IntersectRect
CopyRect
UnregisterClassA
GetFocus
EnableWindow
ReleaseDC
GetDC
SetWindowTextW
MoveWindow
DrawTextExW
GetWindowTextW
GetWindowTextLengthW
InvalidateRect
RedrawWindow
CallWindowProcW
DefWindowProcW
SendMessageW
GetDlgItem
ScreenToClient
GetWindow
IsWindowVisible
GetTopWindow

gdi32

CreateRectRgn
EnumFontsW
CombineRgn
StretchBlt
GetPixel
CreateFontW
SetBkMode
GetTextMetricsW
CreateFontIndirectW
GetStockObject
SetTextColor
Rectangle
GetObjectW
LineTo
MoveToEx
CreatePen
CreateSolidBrush
DeleteObject
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateDCW
SelectClipRgn

comdlg32

GetOpenFileNameW
GetSaveFileNameW

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW

shlwapi

PathFileExistsW
StrCmpW

msimg32

AlphaBlend

gdiplus

GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipFree
GdipAlloc
GdipCloneImage
GdipSaveImageToFile
GdipCreateFromHDC
GdipDrawCurveI
GdipDeleteGraphics
GdipSetPenMode
GdipFillPolygonI
GdipGetSmoothingMode
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSetPenEndCap
GdipSetPenStartCap
GdipCreateSolidFill
GdipDrawEllipseI
GdipDeletePen
GdipDeleteBrush
GdipDrawRectangleI
GdipCreatePen1
GdipDrawLineI
GdipSetPenDashStyle
GdipSetSmoothingMode

Exports

Exports

ScreenShotConfDlg
ScreenshotRun

Sections

.text
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Config/FavIcon/1860F34853BBC50F66BF81B679989830.ico
Config/FavIcon/1860F34853BBC50F66BF81B679989830.ico.jpg
.jpg
Config/FavIcon/3D6A8AC8F2013B0D7A1EA53076E96320.ico
Config/FavIcon/3D6A8AC8F2013B0D7A1EA53076E96320.ico.jpg
.jpg
Config/FavIcon/6E086A7049DD129DF69051413AC6AB3A.ico
Config/FavIcon/6E086A7049DD129DF69051413AC6AB3A.ico.jpg
.jpg
Config/FavIcon/81C6AF03AC3E2B181DD99A3C1AFD1AA3.ico
Config/FavIcon/81C6AF03AC3E2B181DD99A3C1AFD1AA3.ico.jpg
.jpg
Config/FavIcon/85131C29C8F7B398A345BD7F1A51DAB1.ico
Config/FavIcon/85131C29C8F7B398A345BD7F1A51DAB1.ico.jpg
.jpg
Config/FavIcon/8FDEAD446A8D607C20207D38D669E349.ico
Config/FavIcon/8FDEAD446A8D607C20207D38D669E349.ico.jpg
.jpg
Config/FavIcon/DA3E6E24050AA14E8FD334F6DA0AE9F1.ico
Config/FavIcon/DA3E6E24050AA14E8FD334F6DA0AE9F1.ico.jpg
.jpg
Config/FavIcon/F2A7BED2A1035F9E4EC022B3ECA481A8.ico
Config/FavIcon/F2A7BED2A1035F9E4EC022B3ECA481A8.ico.jpg
.jpg
Config/FavIcon/default_page.ico
Config/FavIcon/home.ico
Config/FavIcon/private.ico
Config/FavIcon/recovery.ico
Config/FavIcon/taskmanager.ico
Config/Install.data
Config/MobileScanner.png
.png
- http://ie.2345.com/apk/qrcode.htm?iehome
Config/Users/Default/SystemUrl.data
Config/Users/Default/head_default.png
.png
Config/Users/Default/login_head_default.png
.png
Coral.dll
.dll windows:4 windows x86 arch:x86

549ab8ad530c2caf419516fe9d2a4bf3

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

23/05/2013, 00:00

Not After

22/05/2016, 23:59

Subject

CN=2345.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=总办,O=2345.com,L=上海,ST=上海,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a5:bc:59:74:b3:a2:32:26:02:f5:73:1e:22:04:61:a7:ea:98:f8:45
Signer

Actual PE Digest

a5:bc:59:74:b3:a2:32:26:02:f5:73:1e:22:04:61:a7:ea:98:f8:45

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\2345\Coral\trunk\public\Bin\Win32\Release\pdb\Coral.pdb

Imports

kernel32

SuspendThread
TerminateThread
OpenThread
GetExitCodeThread
GetFileAttributesW
CreateDirectoryW
RemoveDirectoryW
CopyFileW
GetFileTime
ReadFile
CreateFileW
SetFilePointer
SetEndOfFile
GetFileSize
WriteFile
FindNextFileW
FindFirstFileW
FindClose
GetFullPathNameW
GetTempPathW
GetTempFileNameW
MoveFileExW
GetWindowsDirectoryW
GetLongPathNameW
SetFileAttributesW
MoveFileW
GetSystemInfo
HeapAlloc
GetProcessHeap
HeapFree
QueryDosDeviceW
TerminateProcess
LocalFree
LocalAlloc
GlobalUnlock
GlobalLock
ResetEvent
WriteProcessMemory
ReleaseMutex
ReadProcessMemory
FileTimeToSystemTime
GetFileAttributesExW
SystemTimeToTzSpecificLocalTime
GlobalMemoryStatusEx
SetPriorityClass
SetProcessPriorityBoost
CreateNamedPipeW
DisconnectNamedPipe
ConnectNamedPipe
SetUnhandledExceptionFilter
LoadLibraryA
GetModuleHandleExW
GetCurrentThread
CreateDirectoryA
GetOverlappedResult
CancelIo
PeekNamedPipe
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
GetUserDefaultLangID
ExpandEnvironmentStringsW
VirtualFree
VirtualAlloc
VirtualQuery
LoadLibraryExA
VirtualProtect
SetThreadContext
InterlockedCompareExchange
GetThreadContext
InterlockedExchangeAdd
GetModuleFileNameW
CloseHandle
GetThreadLocale
GetLocaleInfoA
IsProcessorFeaturePresent
GetVersionExA
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
InterlockedExchange
CreateMutexW
WideCharToMultiByte
GetACP
VirtualFreeEx
ResumeThread
MultiByteToWideChar
InitializeCriticalSection
GetModuleHandleW
SizeofResource
LoadResource
DeleteCriticalSection
DisableThreadLibraryCalls
FindResourceW
LoadLibraryExW
lstrcmpiW
GetLastError
DeleteFileW
OutputDebugStringW
OpenProcess
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
SetLastError
LeaveCriticalSection
RaiseException
lstrlenW
FlushInstructionCache
GlobalAddAtomW
GetVersionExW
GetCurrentProcess
GlobalDeleteAtom
CreateEventW
SetEvent
GetCurrentThreadId
GetCurrentProcessId
LoadLibraryW
GetProcAddress
FreeLibrary
Sleep
GetPrivateProfileStringW
GetTickCount
WaitForMultipleObjects
GetLocalTime
CreateProcessW
WaitForSingleObject
VirtualAllocEx

user32

GetWindowThreadProcessId
IsWindowEnabled
AllowSetForegroundWindow
IsWindowVisible
UnregisterClassA
InvalidateRect
CloseClipboard
GetClipboardData
GetActiveWindow
SetForegroundWindow
IsWindow
MessageBoxW
GetSystemMetrics
FindWindowExW
GetCursorPos
UnregisterClassW
SetPropW
GetClassNameW
FindWindowW
RegisterClassW
SystemParametersInfoW
EnumWindows
GetPropW
ScreenToClient
CharNextW
ShowWindowAsync
SendMessageTimeoutW
KillTimer
SetTimer
CreateWindowExW
PtInRect
CreatePopupMenu
SendMessageW
GetClassInfoExW
GetMonitorInfoW
TrackPopupMenuEx
CallWindowProcW
PostQuitMessage
DestroyMenu
DefWindowProcW
GetWindowLongW
AppendMenuW
RegisterClassExW
GetClientRect
SetWindowLongW
TranslateMessage
LoadMenuW
LoadCursorW
MessageBeep
MapWindowPoints
DispatchMessageW
DestroyIcon
PostMessageW
LoadAcceleratorsW
RemoveMenu
GetMenuItemCount
PostThreadMessageW
GetMenuItemInfoW
MonitorFromPoint
UnregisterHotKey
LoadStringA
SetWindowPos
DestroyWindow
PeekMessageW
ShowWindow
LoadStringW
GetMessageW
RegisterHotKey
SetFocus
GetWindowRect
LoadImageW
OpenClipboard

advapi32

AddAce
RegEnumKeyW
RegGetKeySecurity
RegCreateKeyW
RegNotifyChangeKeyValue
RegOpenKeyExW
RegDeleteValueW
RegCloseKey
RegDeleteKeyW
RegQueryInfoKeyW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryValueExW
GetLengthSid
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetTokenInformation
InitializeSecurityDescriptor
FreeSid
RegSetKeySecurity
AllocateAndInitializeSid
CopySid
OpenProcessToken
EqualSid

shell32

ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHChangeNotify
SHGetFolderPathW
ShellExecuteExW

ole32

StringFromGUID2
CoCreateGuid
CoUninitialize
CoInitializeEx
OleUninitialize
OleInitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CoRegisterClassObject
CoRevokeClassObject
CreateStreamOnHGlobal
CoUnmarshalInterface

oleaut32

VarUI4FromStr
SysFreeString
SysAllocString

msvcr80

swprintf_s
strstr
_localtime64
_mktime64
_wrename
_time64
memmove
_beginthreadex
wcsstr
_errno
towlower
_vsnwprintf_s
towupper
wcschr
malloc
_recalloc
_wcsnicmp
swscanf
memchr
_wcsdup
strncpy_s
vswprintf_s
wcsncpy_s
memcpy
isalnum
rand
free
_invalid_parameter_noinfo
??_V@YAXPAX@Z
memcpy_s
toupper
_waccess
_wcsicmp
strchr
_vswprintf_c_l
__RTDynamicCast
wcsncpy
_wtof
isdigit
calloc
wcsrchr
_wtoi
_CxxThrowException
__CxxFrameHandler3
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
strncpy
tolower
memset
swscanf_s
_stricmp
??3@YAXPAX@Z
_purecall
memmove_s
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ

shlwapi

PathFileExistsW

gdiplus

GdiplusShutdown
GdiplusStartup
GdipCreateHICONFromBitmap
GdipCreateBitmapFromFile
GdipDisposeImage
GdipLoadImageFromFile
GdipImageGetFrameDimensionsCount
GdipAlloc
GdipFree
GdipCloneImage

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

Exports

Exports

CoralCreateObject

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CoralApp.dll
.dll windows:4 windows x86 arch:x86

db0f94ba3f8aad42b01152966253a77c

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

23/05/2013, 00:00

Not After

22/05/2016, 23:59

Subject

CN=2345.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=总办,O=2345.com,L=上海,ST=上海,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

50:ab:bf:0d:39:fb:b2:b3:c6:66:f1:80:43:59:e6:49:c1:7e:07:63
Signer

Actual PE Digest

50:ab:bf:0d:39:fb:b2:b3:c6:66:f1:80:43:59:e6:49:c1:7e:07:63

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\2345\Coral\trunk\public\Bin\Win32\Release\pdb\CoralApp.pdb

Imports

gdiplus

GdipCloneBrush
GdipSetSmoothingMode
GdipDisposeImage
GdiplusShutdown
GdipCreateBitmapFromScan0
GdipFillRectangleI
GdipDisposeImageAttributes
GdipCreateSolidFill
GdipDeleteGraphics
GdipCreateHBITMAPFromBitmap
GdipCloneImage
GdipCreateImageAttributes
GdipDrawImageRectRectI
GdipSetImageAttributesColorKeys
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipGetImageWidth
GdipGetImageHeight
GdipAlloc
GdipFree
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipDeleteBrush

kernel32

GetCurrentThreadId
InterlockedExchangeAdd
CreateDirectoryW
GetFileAttributesW
RemoveDirectoryW
ResumeThread
CreateEventW
ResetEvent
ReleaseMutex
CreateMutexW
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
GetLongPathNameW
CreateFileW
SetFileAttributesW
GetFullPathNameW
GetTempPathW
SetEndOfFile
GetFileSize
WriteFile
SetFilePointer
ReadFile
GetEnvironmentVariableW
GetCurrentProcessId
Sleep
SetUnhandledExceptionFilter
LocalFree
LoadResource
GetVersionExW
SetEvent
HeapAlloc
GetProcessHeap
HeapFree
ExpandEnvironmentStringsW
GetComputerNameW
GetFileSizeEx
GetFileAttributesExW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
SetLastError
GetShortPathNameW
IsBadWritePtr
IsBadReadPtr
IsBadStringPtrW
MulDiv
OpenProcess
WideCharToMultiByte
GetVersionExA
GetThreadLocale
GetLocaleInfoA
FormatMessageW
GetACP
GetSystemTimeAsFileTime
GetTickCount
SizeofResource
MultiByteToWideChar
RaiseException
TerminateProcess
DeleteCriticalSection
FindResourceW
SetErrorMode
EnterCriticalSection
InterlockedIncrement
InterlockedExchange
GetModuleHandleW
GetModuleFileNameW
LeaveCriticalSection
DisableThreadLibraryCalls
lstrcmpiW
GetLastError
GetCurrentProcess
InterlockedDecrement
lstrlenW
InitializeCriticalSection
LocalAlloc
LoadLibraryW
CreateProcessW
CloseHandle
WaitForMultipleObjects
WaitForSingleObject
FreeLibrary
LoadLibraryExW
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
InterlockedCompareExchange
GetProcAddress

user32

DrawTextW
GetKeyNameTextW
EqualRect
FillRect
MapVirtualKeyExW
SetCapture
WaitMessage
GetCapture
MonitorFromRect
MonitorFromPoint
GetKeyboardLayout
DrawIconEx
GetMonitorInfoW
TranslateMessage
GetKeyState
SystemParametersInfoW
ReleaseCapture
DispatchMessageW
GetSystemMetrics
PeekMessageW
GetClassNameW
WindowFromPoint
GetDesktopWindow
CopyRect
GetMenuStringW
SetWindowLongW
UpdateWindow
SetRect
GetUpdateRect
DestroyIcon
InsertMenuW
GetDC
IsRectEmpty
IntersectRect
BeginPaint
PtInRect
DeleteMenu
InflateRect
GetCursorPos
SetMenuItemInfoW
InvalidateRect
UpdateLayeredWindow
GetMenuItemCount
LoadMenuW
PostMessageW
RegisterClassExW
ClientToScreen
LoadCursorW
ReleaseDC
DefWindowProcW
SendMessageW
SetTimer
DestroyMenu
GetClientRect
RemovePropW
AppendMenuW
CreateWindowExW
ScreenToClient
IsIconic
GetWindowRect
EndPaint
IsMenu
GetSubMenu
GetMenuItemInfoW
SetRectEmpty
IsWindow
KillTimer
IsWindowVisible
GetWindowLongW
GetDlgItem
FindWindowExA
GetWindowThreadProcessId
SetWindowPos
ShowWindow
GetClassNameA
CharNextW
DestroyWindow
MessageBoxW
UnregisterClassA
CreatePopupMenu

gdi32

DeleteObject
MoveToEx
CreateRectRgn
ExtCreatePen
CreateCompatibleDC
DeleteDC
LineTo
BitBlt
SelectClipRgn
SelectObject
CreateFontIndirectW
CreateDIBSection
GetTextExtentPointW
SetTextColor
SetBkMode
CreatePen
CreateSolidBrush
GetObjectW
CreateCompatibleBitmap

advapi32

GetLengthSid
CopySid
AllocateAndInitializeSid
RegSetKeySecurity
FreeSid
InitializeSecurityDescriptor
GetTokenInformation
RegQueryValueExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegQueryInfoKeyW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegCloseKey
InitializeAcl
RegEnumKeyW
AddAce
SetSecurityDescriptorDacl

shell32

SHChangeNotify
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHFileOperationW
ord155
SHGetFileInfoW

ole32

CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
OleInitialize
OleUninitialize
CLSIDFromString
RegisterDragDrop
RevokeDragDrop

oleaut32

SysAllocString
VariantClear
VarUI4FromStr
SysFreeString
VariantInit

msvcr80

_errno
_recalloc
wcsncpy_s
malloc
?_type_info_dtor_internal_method@type_info@@QAEXXZ
??_V@YAXPAX@Z
_wcsdup
free
_invalid_parameter_noinfo
?what@exception@std@@UBEPBDXZ
??3@YAXPAX@Z
_purecall
memmove_s
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
memcpy_s
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
wcsstr
wcschr
towlower
towupper
_vsnwprintf_s
_wrename
_beginthreadex
wcscpy_s
_vswprintf_c_l
_waccess
_wcsicmp
wcsncmp
isalnum
memchr
_wtoi
wcsrchr
wcsncpy
__RTDynamicCast
_wcsupr
swprintf_s
_CxxThrowException
__CxxFrameHandler3
_unlock
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
__dllonexit
memset
memmove
tolower
_adjust_fdiv
memcpy

comctl32

_TrackMouseEvent

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Exports

Exports

CheckInitApp
GetGlobalInstance
LoadCoralApp

Sections

.text
Size: 338KB - Virtual size: 337KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CoralDb.dll
.dll windows:4 windows x86 arch:x86

4a2969bf878373b45d849d3ff69074ba

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

23/05/2013, 00:00

Not After

22/05/2016, 23:59

Subject

CN=2345.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=总办,O=2345.com,L=上海,ST=上海,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b0:c0:bf:c2:12:13:54:3d:0e:d0:73:b1:90:f8:d4:e0:21:c3:ff:81
Signer

Actual PE Digest

b0:c0:bf:c2:12:13:54:3d:0e:d0:73:b1:90:f8:d4:e0:21:c3:ff:81

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\2345\Coral\trunk\public\Bin\Win32\Release\pdb\CoralDb.pdb

Imports

kernel32

DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
TryEnterCriticalSection
ReadFile
CreateFileW
SetFilePointer
WriteFile
GetFileSize
SetEndOfFile
WideCharToMultiByte
GetACP
MultiByteToWideChar
FindNextFileW
FindClose
FindFirstFileW
GetFullPathNameW
lstrlenW
GetTempFileNameW
GetTempPathW
MoveFileExW
GetWindowsDirectoryW
GetLongPathNameW
DeleteFileW
MoveFileW
SetFileAttributesW
HeapFree
GetProcessHeap
HeapAlloc
GetSystemInfo
GetVersionExW
LocalFree
LocalAlloc
CreateProcessW
GetCurrentProcess
CreateFileMappingW
MapViewOfFile
WaitForSingleObject
GetUserDefaultLangID
GetCurrentThreadId
InterlockedCompareExchange
GetSystemTime
GetSystemTimeAsFileTime
AreFileApisANSI
GetDiskFreeSpaceA
FormatMessageA
DeleteFileA
FlushFileBuffers
SystemTimeToFileTime
QueryPerformanceCounter
HeapSize
GetFullPathNameA
GetFileAttributesExW
FormatMessageW
LockFileEx
HeapReAlloc
OutputDebugStringA
HeapDestroy
CreateFileA
GetDiskFreeSpaceW
UnlockFile
GetFileAttributesA
GetVersionExA
HeapCreate
LockFile
HeapCompact
HeapValidate
LoadLibraryA
WaitForSingleObjectEx
OutputDebugStringW
CreateFileMappingA
GetCurrentProcessId
UnlockFileEx
GetTempPathA
CloseHandle
CreateMutexW
ReleaseMutex
CopyFileW
CreateDirectoryW
RemoveDirectoryW
GetFileAttributesW
LoadLibraryExW
FreeLibrary
GetModuleFileNameW
InterlockedExchangeAdd
FreeResource
LockResource
LoadResource
FindResourceW
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryW
GetTickCount
Sleep
GetLastError
GetSystemDefaultLangID
GetModuleHandleW
UnmapViewOfFile
CreateEventW
ResetEvent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedExchange
InterlockedDecrement
InterlockedIncrement

user32

LoadStringW

advapi32

RegCreateKeyExW
RegSetValueExW
AddAce
GetTokenInformation
InitializeSecurityDescriptor
GetLengthSid
AllocateAndInitializeSid
OpenProcessToken
CopySid
SetSecurityDescriptorDacl
RegSetKeySecurity
InitializeAcl
FreeSid
RegQueryValueExW
RegEnumKeyW
RegCloseKey
RegOpenKeyExW
RegQueryInfoKeyW

shell32

SHGetPathFromIDListW
SHFileOperationW
SHGetSpecialFolderLocation

ole32

CoTaskMemFree
StringFromGUID2
CoCreateGuid

msvcr80

_wcsdup
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
memcpy_s
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??2@YAPAXI@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
_purecall
memmove_s
??_V@YAXPAX@Z
??3@YAXPAX@Z
malloc
??0exception@std@@QAE@XZ
free
_localtime64_s
wcstok_s
_snwprintf_s
wcscpy_s
_time64
_wtoi
fclose
fread
fopen_s
strtok_s
strchr
calloc
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
strncpy_s
wcsncpy_s
strstr
wcscspn
_wcsnicmp
_waccess
towlower
towupper
_vsnwprintf_s
wcsstr
wcschr
_errno
_localtime64
_mktime64
swprintf_s
memmove
tolower
memchr
isalnum
_vswprintf_c_l
sscanf
swscanf_s
vswprintf_s
swscanf
memset
wcsrchr
strncmp
qsort
_endthreadex
realloc
_msize
_beginthreadex
_CxxThrowException
__CxxFrameHandler3
__crtLCMapStringA
__pctype_func
isupper
___lc_codepage_func
___lc_handle_func
memcpy
_calloc_crt
setlocale
islower
abort
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

Exports

Exports

CoralCreateObject

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 226KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CoralDownload.dll
.dll windows:4 windows x86 arch:x86

52e09792be9bf4fcf51bc1df203596c5

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

23/05/2013, 00:00

Not After

22/05/2016, 23:59

Subject

CN=2345.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=总办,O=2345.com,L=上海,ST=上海,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

9c:16:c3:14:c8:ba:b6:05:c6:35:48:c7:57:48:fd:62:60:c7:77:f9
Signer

Actual PE Digest

9c:16:c3:14:c8:ba:b6:05:c6:35:48:c7:57:48:fd:62:60:c7:77:f9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\2345\Coral\trunk\public\Bin\Win32\Release\pdb\CoralDownload.pdb

Imports

rpcrt4

UuidCreateSequential

kernel32

GetProcAddress
CreateDirectoryW
RemoveDirectoryW
LoadLibraryW
CreateMutexW
ReleaseMutex
CreateEventW
SetEvent
ResetEvent
ResumeThread
GetACP
WideCharToMultiByte
SetEndOfFile
GetFileSize
ReadFile
SetFilePointer
GetTempPathW
GetFullPathNameW
GetTempFileNameW
MoveFileExW
GetWindowsDirectoryW
DeleteFileW
GetLongPathNameW
SetFileAttributesW
MoveFileW
FindClose
FindFirstFileW
GetSystemInfo
QueryPerformanceFrequency
QueryPerformanceCounter
GlobalLock
GlobalUnlock
GetFileAttributesW
GetVolumeInformationW
GetDiskFreeSpaceW
CreateFileMappingW
WriteFile
UnmapViewOfFile
SystemTimeToFileTime
ExpandEnvironmentStringsW
VirtualFree
VirtualAlloc
MultiByteToWideChar
DeleteCriticalSection
RaiseException
InterlockedIncrement
LeaveCriticalSection
InitializeCriticalSection
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleW
EnterCriticalSection
SizeofResource
Sleep
GetThreadLocale
GetLocaleInfoA
GetVersionExA
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchangeAdd
TryEnterCriticalSection
CreateFileW
CloseHandle
WaitForSingleObjectEx
WaitForSingleObject
GetTickCount
SwitchToThread
lstrlenW
CompareStringW
FlushInstructionCache
GetCurrentProcess
GetVersionExW
lstrcmpiW
WaitForMultipleObjects
GetCurrentProcessId
WaitForMultipleObjectsEx
OutputDebugStringW
GetLocalTime
SetLastError
InterlockedExchange
InterlockedDecrement
LoadResource
GetCurrentThreadId
FreeLibrary
GetLastError
FindResourceW
MapViewOfFile
DisableThreadLibraryCalls

user32

GetWindow
SetCapture
EnableWindow
CloseClipboard
GetClipboardData
OpenClipboard
MessageBoxW
GetMonitorInfoW
PtInRect
SetForegroundWindow
MonitorFromWindow
LoadStringW
DialogBoxParamW
GetMessageW
PeekMessageW
DispatchMessageW
SetTimer
KillTimer
PostThreadMessageW
TranslateMessage
IsWindowVisible
GetDlgCtrlID
DestroyIcon
CallWindowProcW
UpdateWindow
DestroyWindow
SetCursor
IsWindowEnabled
EndPaint
SetFocus
GetCursorPos
SendMessageW
GetWindowTextW
SetWindowTextW
GetDlgItem
GetWindowTextLengthW
LoadCursorW
GetClassNameW
GetFocus
EndDialog
GetSystemMetrics
DefWindowProcW
SetPropW
ReleaseDC
RedrawWindow
GetDesktopWindow
IsWindow
InvalidateRect
SystemParametersInfoW
ShowWindow
OffsetRect
GetParent
GetClientRect
LoadImageW
CreateWindowExW
ScreenToClient
PostMessageW
GetSysColor
GetDC
GetWindowRect
MoveWindow
SetWindowPos
SetWindowLongW
GetCapture
GetWindowLongW
FillRect
SetRectEmpty
DrawTextW
BeginPaint
CharNextW
MapWindowPoints
DrawFocusRect
UnregisterClassA
ReleaseCapture

gdi32

SelectObject
SetBkMode
DeleteObject
CreateFontIndirectW
DeleteDC
SetTextColor
GetStockObject
GetObjectW

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegEnumKeyW
OpenProcessToken
RegDeleteKeyW
RegCreateKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
InitializeSecurityDescriptor
FreeSid
RegSetKeySecurity
InitializeAcl
GetTokenInformation
SetSecurityDescriptorDacl
AddAce
CopySid
GetLengthSid
AllocateAndInitializeSid

shell32

SHGetPathFromIDListW
ShellExecuteW
SHGetFileInfoW
SHGetSpecialFolderLocation

ole32

StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
OleInitialize
OleUninitialize
CoCreateGuid

oleaut32

VarBstrCat
SysStringLen
SysAllocStringLen
VarUI4FromStr
SysFreeString

msvcr80

islower
__uncaught_exception
_calloc_crt
___lc_handle_func
___lc_codepage_func
isupper
__pctype_func
__crtLCMapStringA
setlocale
__CxxFrameHandler3
_CxxThrowException
sscanf
strcmp
modf
memcpy
sprintf_s
strlen
strpbrk
memset
localeconv
strcspn
_free_locale
_stricmp
_malloc_crt
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
abort
isalnum
_localtime64
strstr
tolower
memmove
_beginthreadex
wcsstr
_errno
towlower
_vsnwprintf_s
towupper
wcschr
_strtoui64
vswprintf_s
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z
_invalid_parameter_noinfo
memmove_s
memcpy_s
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
_wtoi
??_V@YAXPAX@Z
wcscpy_s
malloc
_recalloc
wcsncpy_s
free
__RTDynamicCast
memchr
_vswprintf_c_l
calloc
sprintf
_swprintf
_wtoi64
atol
swscanf
swprintf_s

shlwapi

UrlUnescapeA
SHAutoComplete

comctl32

_TrackMouseEvent

Exports

Exports

CoralCreateObject

Sections

.text
Size: 684KB - Virtual size: 684KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CoralExtract.dll
.dll windows:4 windows x86 arch:x86

b2f8424728f7bf8183440fd46ebbfa9b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

23/05/2013, 00:00

Not After

22/05/2016, 23:59

Subject

CN=2345.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=总办,O=2345.com,L=上海,ST=上海,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e4:dd:8f:29:db:0d:ff:4d:4f:4a:4c:4b:b6:f4:a8:b0:f0:b2:18:57
Signer

Actual PE Digest

e4:dd:8f:29:db:0d:ff:4d:4f:4a:4c:4b:b6:f4:a8:b0:f0:b2:18:57

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\rczip\bin\Win32\release\pdb\Extract7z.pdb

Imports

kernel32

GetProcAddress
VirtualAlloc
GetModuleHandleW
VirtualFree
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
InterlockedExchangeAdd
GetVersionExW
GetLastError
CreateFileW
CloseHandle
SetFilePointer
ReadFile
FreeLibrary
LoadLibraryW
GetCurrentProcessId
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
GetSystemTimeAsFileTime
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
LCMapStringA
LCMapStringW
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetFileAttributesW
CreateDirectoryW
DeleteFileW
FindFirstFileW
FindClose
FindNextFileW
LocalFree
FormatMessageW
GetFileSize
lstrlenW
GetFullPathNameW
SetFileTime
SetFileAttributesW
GetTempFileNameW
MoveFileW
SetEndOfFile
FindResourceW
WaitForMultipleObjects
CreateEventW
WaitForSingleObject
SetEvent
ResetEvent
CreateThread
ExitThread
ResumeThread

user32

LoadStringW

Exports

Exports

ExtractArchive

Sections

.text
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CoralHtmlWnd.dll
.dll windows:4 windows x86 arch:x86

66514c2d5c0da0fc4d58681997d0592e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

23/05/2013, 00:00

Not After

22/05/2016, 23:59

Subject

CN=2345.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=总办,O=2345.com,L=上海,ST=上海,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e7:4e:46:75:fa:2a:72:72:a9:49:a2:78:4f:72:d2:d6:2d:cf:4c:9e
Signer

Actual PE Digest

e7:4e:46:75:fa:2a:72:72:a9:49:a2:78:4f:72:d2:d6:2d:cf:4c:9e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\2345\Coral\trunk\public\Bin\Win32\Release\pdb\CoralHtmlWnd.pdb

Imports

kernel32

GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
RtlUnwind
ExitProcess
HeapSize
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
LCMapStringW
GetTimeZoneInformation
GetLocaleInfoA
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA
FileTimeToLocalFileTime
GetTickCount
lstrlenA
FileTimeToSystemTime
GlobalGetAtomNameW
GetFileTime
GetFileAttributesW
GlobalFlags
GetModuleHandleA
WritePrivateProfileStringW
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetThreadLocale
FreeResource
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GlobalFree
GlobalUnlock
FormatMessageW
lstrlenW
MulDiv
InterlockedDecrement
GetCurrentProcessId
GlobalDeleteAtom
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
WideCharToMultiByte
CompareStringA
MultiByteToWideChar
GlobalLock
lstrcmpW
GlobalAlloc
GlobalAddAtomW
FindResourceW
LoadResource
LockResource
SizeofResource
LoadLibraryExW
LoadLibraryExA
SetLastError
VirtualQuery
SetThreadContext
GetThreadContext
ResumeThread
SuspendThread
GetCurrentThreadId
VirtualAlloc
VirtualFree
ExpandEnvironmentStringsW
LoadLibraryW
FreeLibrary
GetModuleFileNameW
GetLastError
FlushInstructionCache
HeapCreate
HeapDestroy
GetCurrentThread
GetCurrentProcess
GetProcessHeap
HeapAlloc
CloseHandle
HeapFree
GetSystemInfo
GetVersionExW
InterlockedCompareExchange
VirtualProtect
GetProcAddress
GetModuleHandleW
LocalAlloc
LocalFree
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
InterlockedExchangeAdd
InterlockedExchange
InterlockedIncrement
RaiseException
LCMapStringA
Sleep

user32

InflateRect
UnpackDDElParam
ReuseDDElParam
LoadMenuW
DestroyMenu
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorW
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
CharUpperW
UnregisterClassW
GetDesktopWindow
InvalidateRgn
ReleaseDC
GetDC
SetRect
CopyAcceleratorTableW
SetWindowContextHelpId
MapDialogRect
CharNextW
ReleaseCapture
LoadCursorW
SetCapture
SetTimer
ClientToScreen
SetWindowRgn
DrawIcon
FillRect
IsRectEmpty
FindWindowW
SystemParametersInfoW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
GetMenuItemInfoW
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
SetActiveWindow
DispatchMessageW
GetMessageW
UnregisterClassA
TranslateMessage
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetMenu
CreateWindowExW
GetClassInfoExW
RegisterClassW
GetSysColor
ScreenToClient
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatW
PostThreadMessageW
AdjustWindowRectEx
RedrawWindow
GetClientRect
IsWindow
EqualRect
InvalidateRect
GetClassInfoW
EnableWindow
GetActiveWindow
SendMessageW
PostQuitMessage
PostMessageW
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuW
GetParent
GetFocus
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
GetCursorPos
PeekMessageW
GetKeyState
IsWindowVisible
CallNextHookEx
SetWindowsHookExW
SetCursor
ShowOwnedPopups
MessageBoxW
IsWindowEnabled
GetLastActivePopup
GetWindowLongW
GetWindowThreadProcessId
UnhookWindowsHookEx
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindow
GetMenuItemID
GetMenuItemCount
GetSubMenu
KillTimer

gdi32

CreateCompatibleBitmap
CreateFontIndirectW
GetTextExtentPoint32W
CreateSolidBrush
CreateCompatibleDC
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
GetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
GetMapMode
GetViewportExtEx
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetRgnBox
CreateRectRgnIndirect
GetTextColor
GetBkColor
GetStockObject
Ellipse
LPtoDP
CreateEllipticRgn
GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
BitBlt

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegQueryValueW
RegOpenKeyW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyW
AddAce
RegSetKeySecurity
FreeSid
OpenProcessToken
InitializeSecurityDescriptor
RegCloseKey
InitializeAcl
GetTokenInformation
GetLengthSid
SetSecurityDescriptorDacl
AllocateAndInitializeSid
CopySid
RegOpenKeyExW

shell32

DragQueryFileW
DragFinish

shlwapi

PathFindFileNameW
PathFindExtensionW
PathStripToRootW
PathIsUNCW

oledlg

OleUIBusyW

ole32

OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
CoTaskMemAlloc
OleInitialize
CoRevokeClassObject
CoTaskMemFree
CoGetClassObject
CoCreateInstance
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysFreeString
VariantInit
VariantClear
SysAllocStringLen
SysAllocString
VariantChangeType
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
VariantCopy

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

Exports

Exports

CoralCreateObject

Sections

.text
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CoralRender.dll
.dll windows:4 windows x86 arch:x86

b660d54651ed4389c0be65aedf1299ca

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

23/05/2013, 00:00

Not After

22/05/2016, 23:59

Subject

CN=2345.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=总办,O=2345.com,L=上海,ST=上海,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:4f:61:de:03:19:47:ee:3e:53:a5:5a:b7:e3:95:1e:52:c4:cf:40
Signer

Actual PE Digest

52:4f:61:de:03:19:47:ee:3e:53:a5:5a:b7:e3:95:1e:52:c4:cf:40

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\2345\Coral\trunk\public\Bin\Win32\Release\pdb\CoralRender.pdb

Imports

gdiplus

GdipCreateBitmapFromFile
GdipCloneImage
GdipLoadImageFromStream
GdipFree
GdipAlloc
GdipDisposeImage
GdipCreateHICONFromBitmap

kernel32

GetCurrentProcess
TerminateProcess
GlobalUnlock
FreeResource
GlobalLock
GlobalAlloc
GlobalFree
LockResource
InterlockedExchange
GetACP
WideCharToMultiByte
InterlockedExchangeAdd
ResumeThread
WaitForSingleObject
ResetEvent
CreateEventW
SetEvent
GetCurrentThread
GetVersionExW
ReadFile
LocalAlloc
LocalFree
WaitNamedPipeW
SetNamedPipeHandleState
CreateFileW
CreateDirectoryA
CreateDirectoryW
GetFileAttributesW
SetFileAttributesW
GetCurrentProcessId
PeekNamedPipe
CancelIo
WriteFile
GetOverlappedResult
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
InterlockedCompareExchange
Sleep
FlushInstructionCache
VirtualAlloc
VirtualProtect
LoadLibraryExW
GetThreadContext
SetThreadContext
VirtualQuery
SetLastError
LoadLibraryExA
CreateMutexW
ReleaseMutex
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetProcessPriorityBoost
GetTickCount
GetPriorityClass
SetPriorityClass
OpenProcess
LoadLibraryW
CloseHandle
WaitForMultipleObjects
lstrcmpiW
LoadResource
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
GetProcAddress
GetCurrentThreadId
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
DeleteCriticalSection
EnterCriticalSection
RaiseException
LeaveCriticalSection
SizeofResource
InitializeCriticalSection
FreeLibrary
lstrlenW
GetLastError
FindResourceW
VirtualFree
DisableThreadLibraryCalls
SuspendThread

user32

KillTimer
PeekMessageW
DispatchMessageW
GetMessageW
LoadIconW
DestroyIcon
CharNextW
DestroyWindow
IsWindow
GetParent
AllowSetForegroundWindow
GetForegroundWindow
GetClassNameW
UnregisterClassA
PostMessageW
ShowWindowAsync
PostThreadMessageW
SystemParametersInfoW
LoadImageW
GetClassNameA
GetWindowThreadProcessId
GetDlgItem
FindWindowExA
TranslateMessage

gdi32

DeleteObject
CreateFontIndirectW

advapi32

RegCreateKeyExW
RegCreateKeyW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegSetValueExW

shell32

SHGetFolderPathW

ole32

CoCreateGuid
StringFromGUID2
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoUnmarshalInterface
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance

oleaut32

VarUI4FromStr

msvcr80

_CxxThrowException
__CxxFrameHandler3
_unlock
__dllonexit
_encode_pointer
memcpy
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_malloc_crt
_stricmp
memset
swprintf_s
_wcsicmp
_wcsnicmp
wcsncpy
strncpy
strstr
strchr
towlower
_vsnwprintf_s
towupper
wcschr
_beginthreadex
??3@YAXPAX@Z
??2@YAPAXI@Z
_invalid_parameter_noinfo
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
memmove_s
memcpy_s
malloc
free
_recalloc
??_V@YAXPAX@Z
wcsncpy_s
_purecall
_errno
memmove

shlwapi

PathFileExistsW

comctl32

ImageList_Create
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_GetImageCount
ImageList_GetIcon

winmm

mixerSetControlDetails
mixerClose
mixerOpen
mixerGetLineControlsW
mixerGetLineInfoW
mixerGetControlDetailsW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

Exports

Exports

CoralCreateObject

Sections

.text
Size: 253KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CoralTrident.dll
.dll windows:4 windows x86 arch:x86

b564472382c45c437b4131956fd15270

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

23/05/2013, 00:00

Not After

22/05/2016, 23:59

Subject

CN=2345.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=总办,O=2345.com,L=上海,ST=上海,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

77:00:dd:dc:7d:e5:ba:34:4c:0b:5a:64:1b:43:95:aa:fd:ce:dd:ad
Signer

Actual PE Digest

77:00:dd:dc:7d:e5:ba:34:4c:0b:5a:64:1b:43:95:aa:fd:ce:dd:ad

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\2345\Coral\trunk\public\Bin\Win32\Release\pdb\CoralTrident.pdb

Imports

gdiplus

GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipSaveImageToFile
GdipFree
GdipAlloc
GdipGetImageEncodersSize
GdiplusStartup
GdipCloneBrush
GdipFillRectangleI
GdipCreateSolidFill
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromScan0
GdipDeleteBrush
GdipGetImageGraphicsContext
GdipDrawImageRectRect
GdipDrawImagePointRect
GdipCreateBitmapFromStream
GdipCreateHICONFromBitmap
GdipCreateHBITMAPFromBitmap
GdipGetImageEncoders
GdipDisposeImage
GdipCreateFromHDC
GdiplusShutdown
GdipGraphicsClear
GdipGetImageThumbnail
GdipCreateBitmapFromFile
GdipGetImageHeight
GdipDrawImageRectI
GdipSetCompositingQuality
GdipGetImageWidth
GdipDrawImagePointRectI

kernel32

lstrcmpiW
SetEvent
WaitForMultipleObjects
GetACP
GetTickCount
LoadLibraryA
Sleep
GetCurrentProcessId
GetProcAddress
InterlockedExchangeAdd
SwitchToThread
ResetEvent
CloseHandle
WaitForSingleObject
CreateEventW
OpenThread
ResumeThread
GetFileAttributesW
LoadLibraryW
CreateDirectoryW
WideCharToMultiByte
GetExitCodeThread
SuspendThread
TerminateThread
FindClose
FindFirstFileW
GetFullPathNameW
FindResourceW
CreateFileW
ReadFile
SetFilePointer
GetFileSize
GetCurrentThread
LocalAlloc
LocalFree
FreeResource
GetModuleHandleW
VirtualProtect
InterlockedCompareExchange
GetSystemDefaultLangID
lstrcpynA
GetSystemInfo
GetProcessHeap
HeapAlloc
HeapFree
HeapDestroy
HeapCreate
GetComputerNameW
GetFileAttributesExW
GetFileSizeEx
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetUserDefaultLangID
VirtualFree
VirtualAlloc
GetThreadContext
SetThreadContext
VirtualQuery
LoadLibraryExA
FindResourceExW
GetVersionExW
SizeofResource
LockResource
LoadResource
lstrlenW
MulDiv
GlobalUnlock
InitializeCriticalSection
lstrcmpW
GlobalLock
GetModuleFileNameW
InterlockedIncrement
GetLastError
InterlockedDecrement
DeleteCriticalSection
GlobalAlloc
InterlockedExchange
RaiseException
LeaveCriticalSection
FlushInstructionCache
SetLastError
GetCurrentProcess
EnterCriticalSection
GetCurrentThreadId
FreeLibrary
LoadLibraryExW
DisableThreadLibraryCalls
GlobalFree
MultiByteToWideChar
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetVersionExA
IsProcessorFeaturePresent
GetLocaleInfoA
GetThreadLocale
HeapReAlloc
HeapSize
ReleaseMutex
CreateMutexW

user32

AppendMenuW
CheckMenuItem
GetMenuState
InsertMenuW
CreatePopupMenu
EnableMenuItem
IsMenu
GetSubMenu
SetForegroundWindow
LoadMenuW
CharUpperBuffW
OffsetRect
DeleteMenu
ActivateKeyboardLayout
EnableWindow
GetTopWindow
SendMessageTimeoutW
GetKeyboardLayout
EndMenu
DrawTextW
CharLowerBuffW
SetMenuItemInfoW
GetMenuItemID
GetMenuItemInfoW
GetMenuStringW
GetMenuItemCount
DestroyMenu
SetWindowsHookExW
CallNextHookEx
UnhookWindowsHookEx
SetWindowRgn
GetNextDlgGroupItem
GetPropW
IsWindowEnabled
SetActiveWindow
AttachThreadInput
CopyRect
GetIconInfo
LoadImageW
KillTimer
GetClassNameA
IsRectEmpty
UnionRect
GetKeyState
DrawIconEx
SendDlgItemMessageW
AllowSetForegroundWindow
EndDialog
EmptyClipboard
SetClipboardData
WindowFromPoint
MonitorFromRect
GetMonitorInfoW
MonitorFromPoint
GetWindowPlacement
GetCursorPos
PtInRect
SetCursor
GetForegroundWindow
LoadStringW
MessageBoxW
FindWindowExA
PeekMessageW
GetWindowThreadProcessId
PostMessageW
ShowWindow
IsWindowVisible
EnumDisplaySettingsW
SetRect
EnumDisplayDevicesW
GetSysColor
DefWindowProcW
RegisterWindowMessageW
GetWindowTextW
GetFocus
ReleaseCapture
GetClassNameW
ReleaseDC
IsChild
MoveWindow
EndPaint
DestroyAcceleratorTable
BeginPaint
SetClassLongW
DestroyWindow
GetWindowTextLengthW
GetClassLongW
SendMessageW
InvalidateRect
PostQuitMessage
GetClientRect
ClientToScreen
CharNextW
GetParent
SetWindowTextW
FillRect
GetWindowLongW
GetWindow
CreateAcceleratorTableW
InvalidateRgn
ScreenToClient
SetFocus
GetDesktopWindow
RedrawWindow
SetCapture
GetDC
GetDlgItem
CallWindowProcW
TranslateMessage
CreateWindowExW
GetSystemMetrics
GetWindowRect
SetWindowLongW
PostThreadMessageW
RegisterClassExW
SetWindowPos
SetTimer
GetClassInfoExW
IsWindow
DispatchMessageW
GetMessageW
LoadCursorW
FindWindowExW
CloseClipboard
OpenClipboard
UnregisterClassA
SystemParametersInfoW
DestroyIcon

gdi32

GetDeviceCaps
DeleteObject
CreateDIBSection
CreateCompatibleDC
BitBlt
SetViewportOrgEx
BeginPath
CreateCompatibleBitmap
GetStockObject
GetObjectW
DeleteDC
SelectObject
SetTextColor
SetBkMode
CreateFontIndirectW
EnumFontFamiliesExW
StretchBlt
ExtTextOutW
SetBkColor
LineTo
PathToRegion
ArcTo
MoveToEx
EndPath
CreateSolidBrush

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegCreateKeyExW
RegDeleteValueW
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyW
AddAce
OpenProcessToken
AllocateAndInitializeSid
GetLengthSid
SetSecurityDescriptorDacl
CopySid
InitializeAcl
RegSetKeySecurity
GetTokenInformation
FreeSid
InitializeSecurityDescriptor
RegDeleteKeyW
RegSetValueExW
RegEnumKeyExW

shell32

DragQueryFileW

ole32

CoGetInterfaceAndReleaseStream
CLSIDFromProgID
CoCreateInstance
CoTaskMemAlloc
CreateStreamOnHGlobal
CoMarshalInterThreadInterfaceInStream
CoGetClassObject
OleLockRunning
OleUninitialize
OleInitialize
CLSIDFromString
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CreateBindCtx
CoLoadLibrary
ReleaseStgMedium
CoMarshalInterface

oleaut32

GetErrorInfo
VarUI4FromStr
SafeArrayCreate
SafeArrayPutElement
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayAccessData
SysAllocStringByteLen
VariantChangeType
LoadTypeLibEx
VarBstrCmp
SysStringByteLen
SysStringLen
LoadTypeLi
OleCreateFontIndirect
LoadRegTypeLi
DispCallFunc
VariantCopy
VariantInit
VariantClear
SysAllocString
SysAllocStringLen
SysFreeString

msvcr80

wcscspn
_resetstkoflw
_purecall
??_V@YAXPAX@Z
swprintf_s
_recalloc
free
malloc
_wtoi
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
memcpy_s
memmove_s
??2@YAPAXI@Z
??3@YAXPAX@Z
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
wcsspn
ldiv
??1bad_cast@std@@UAE@XZ
?terminate@@YAXXZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
wcscpy_s
memchr
_vswprintf_c_l
wcsncpy_s
wcschr
_errno
towlower
towupper
_vsnwprintf_s
_beginthreadex
_time64
memmove
toupper
strstr
tolower
strchr
_itow
isalnum
_wcsnicmp
swscanf
wcsncmp
_wtof
isdigit
_mkgmtime64
wcsrchr
wcsncpy
_CxxThrowException
__CxxFrameHandler3
___mb_cur_max_l_func
___lc_codepage_func
___lc_handle_func
setlocale
__crtGetStringTypeW
__pctype_func
memcpy
_calloc_crt
wcsstr
_wcsicmp
__crtLCMapStringW
_create_locale
_ui64toa_s
_free_locale
_malloc_crt
abort
_wcslwr
memset

shlwapi

PathFileExistsW
PathFindExtensionW
StrCmpNIW

comctl32

_TrackMouseEvent

msimg32

AlphaBlend

oleacc

AccessibleObjectFromPoint

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

imm32

ImmGetContext
ImmReleaseContext
ImmNotifyIME

Exports

Exports

CoralCreateObject

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CoralUI.dll
.dll windows:4 windows x86 arch:x86

7a743e99d0063fee42475f24a10fc11f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

23/05/2013, 00:00

Not After

22/05/2016, 23:59

Subject

CN=2345.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=总办,O=2345.com,L=上海,ST=上海,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

b7:f5:07:33:c8:f8:03:cc:9f:00:59:da:f7:c8:c8:ba:b2:09:61:5a
Signer

Actual PE Digest

b7:f5:07:33:c8:f8:03:cc:9f:00:59:da:f7:c8:c8:ba:b2:09:61:5a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\2345\Coral\trunk\public\Bin\Win32\Release\pdb\CoralUI.pdb

Imports

gdiplus

GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipCreateFromHDC
GdipGetImageGraphicsContext
GdipFree
GdipDrawImageRectI
GdipAlloc
GdipGetImageHeight
GdiplusStartup
GdipDisposeImage
GdipCreateBitmapFromFile
GdipGetImageThumbnail
GdipGetImageWidth
GdipGetImagePixelFormat
GdipDrawImageRectRect
GdipDrawImagePointRect
GdipDrawImageI
GdipSetCompositingQuality
GdipGetImageEncodersSize
GdipCreateBitmapFromStream
GdipSaveImageToFile
GdipCreateHICONFromBitmap
GdipGetImageEncoders
GdipDrawImagePointRectI
GdipReleaseDC
GdipDeleteBrush
GdipSetSmoothingMode
GdipDrawCurve2I
GdipBitmapUnlockBits
GdipCloneBitmapAreaI
GdipCloneBrush
GdipGetDC
GdipGetImagePalette
GdipGetImagePaletteSize
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdiplusShutdown
GdipLoadImageFromStream
GdipCreateSolidFill
GdipSetPenEndCap
GdipFillRectangleI
GdipSetPenLineJoin
GdipCreatePen1
GdipSetPenStartCap
GdipDeletePen
GdipBitmapLockBits
GdipGraphicsClear

kernel32

CreateDirectoryW
RemoveDirectoryW
ReadFile
CreateFileW
SetFilePointer
CloseHandle
GetFileSize
WriteFile
FormatMessageW
ResetEvent
CreateEventW
WaitForSingleObject
SetEvent
ResumeThread
QueryPerformanceCounter
FindClose
FindNextFileW
FileTimeToSystemTime
GetTempFileNameW
GetWindowsDirectoryW
MoveFileExW
DeleteFileW
GetLongPathNameW
SetFileAttributesW
MoveFileW
GetTempPathW
GetFullPathNameW
GetSystemInfo
CreateProcessW
HeapAlloc
GetProcessHeap
HeapFree
FindResourceExW
GetSystemDefaultLangID
GetCurrentThread
VirtualFree
VirtualAlloc
ExpandEnvironmentStringsW
GetLogicalDriveStringsW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
GetUserDefaultLangID
VirtualProtect
SuspendThread
GetThreadContext
SetThreadContext
VirtualQuery
InterlockedCompareExchange
LoadLibraryExA
WritePrivateProfileStringW
GetPrivateProfileStringW
GlobalFree
IsBadWritePtr
Sleep
MulDiv
InitializeCriticalSection
GetModuleFileNameW
MultiByteToWideChar
InterlockedIncrement
LoadLibraryExW
GetLastError
DeleteCriticalSection
DisableThreadLibraryCalls
GetTickCount
lstrcmpW
CompareStringW
lstrcmpiW
LocalAlloc
LocalFree
GetProcAddress
FreeLibrary
LoadLibraryW
GetFileAttributesW
InterlockedExchange
GetVersionExW
GetFileAttributesExW
GetModuleHandleW
SizeofResource
FindResourceW
LockResource
FreeResource
LoadResource
GlobalAlloc
GlobalLock
GlobalUnlock
InterlockedExchangeAdd
lstrlenW
RaiseException
EnterCriticalSection
FlushInstructionCache
GetCurrentProcess
LeaveCriticalSection
InterlockedDecrement
SetLastError
GetCurrentThreadId
WideCharToMultiByte
GetACP
lstrcpyW
SwitchToThread
QueryPerformanceFrequency
LoadLibraryA
IsProcessorFeaturePresent
GetVersionExA
GetLocaleInfoA
GetThreadLocale
HeapDestroy
HeapReAlloc
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcessId
GetSystemTimeAsFileTime
FindFirstFileW

user32

GetPropW
GetClassLongW
SetPropW
UpdateLayeredWindow
RegisterClipboardFormatW
SetForegroundWindow
GetTopWindow
FindWindowW
IsMenu
MessageBeep
GetSystemMenu
TrackPopupMenuEx
RemoveMenu
TranslateAcceleratorW
MonitorFromPoint
LoadStringA
AppendMenuW
GetMenuItemCount
EndMenu
GetMenuItemInfoW
FlashWindowEx
IsRectEmpty
IsZoomed
CreatePopupMenu
SetActiveWindow
GetLastActivePopup
AttachThreadInput
BringWindowToTop
IsHungAppWindow
InvalidateRgn
SetTimer
DestroyAcceleratorTable
PostThreadMessageW
KillTimer
ClientToScreen
CreateAcceleratorTableW
GetDesktopWindow
WindowFromPoint
GetAsyncKeyState
SendMessageTimeoutW
IsChild
LoadStringW
TranslateMessage
PostQuitMessage
MessageBoxW
SetMenuItemInfoW
GetMessageW
RegisterWindowMessageW
GetWindowPlacement
DispatchMessageW
SetWindowPlacement
IsIconic
SetCapture
GetCapture
IsWindowEnabled
SetRectEmpty
DrawFocusRect
DialogBoxParamW
ReleaseCapture
SetDlgItemTextW
UnhookWindowsHookEx
GetClassNameW
CreateDialogParamW
CallNextHookEx
SendDlgItemMessageW
EnableWindow
MoveWindow
LoadIconW
EndDialog
GetActiveWindow
MapWindowPoints
GetWindow
EqualRect
MenuItemFromPoint
ShowCaret
DeleteMenu
GetSysColorBrush
GetDoubleClickTime
InsertMenuW
GetMenuItemID
GetMenuStringW
GetMenuState
ModifyMenuW
DrawTextW
GetDlgCtrlID
LoadBitmapW
GetSysColor
GetDlgItem
GetSystemMetrics
LoadImageW
DestroyIcon
CharLowerBuffW
CharNextW
GetKeyboardLayout
GetKeyNameTextW
MapVirtualKeyExW
HideCaret
SetCaretPos
GetCaretPos
GetSubMenu
PeekMessageW
SetWindowTextW
OffsetRect
GetClipboardData
GetWindowDC
EmptyClipboard
SetClipboardData
SwitchToThisWindow
AllowSetForegroundWindow
UnionRect
DrawIconEx
GetIconInfo
GetMenuItemRect
FindWindowExW
AdjustWindowRectEx
SetParent
IntersectRect
RemovePropW
InflateRect
SetScrollInfo
GetScrollInfo
SetCursorPos
SetMenuInfo
GetMenu
GetMessagePos
GetNextDlgTabItem
IsDialogMessageW
FrameRect
SetWindowsHookExW
SendMessageW
DestroyMenu
InvalidateRect
SetCursor
SetWindowRgn
OpenClipboard
LoadMenuW
CopyRect
IsClipboardFormatAvailable
GetWindowTextW
EnableMenuItem
GetKeyState
UpdateWindow
CloseClipboard
GetClassInfoW
SetRect
RedrawWindow
GetParent
FillRect
GetWindowTextLengthW
SetFocus
EndPaint
GetFocus
BeginPaint
ScreenToClient
GetWindowThreadProcessId
GetDC
GetClientRect
ReleaseDC
GetMonitorInfoW
MonitorFromWindow
SystemParametersInfoW
ShowWindow
GetClassInfoExW
RegisterClassExW
LoadCursorW
CreateWindowExW
SetWindowPos
GetForegroundWindow
GetCursorPos
CallWindowProcW
DefWindowProcW
GetWindowRect
SetWindowLongW
IsWindowVisible
GetWindowLongW
IsWindow
PtInRect
PostMessageW
DestroyWindow
UnregisterClassA
SetMenu
DrawMenuBar
DrawEdge
SetClassLongW
LoadAcceleratorsW

gdi32

GetDeviceCaps
SetViewportOrgEx
ExtCreatePen
OffsetWindowOrgEx
SetWindowOrgEx
MoveToEx
GetTextColor
CreateCompatibleBitmap
SetDIBColorTable
GetBkColor
CreatePolygonRgn
ExtTextOutW
CreateFontIndirectW
GetTextMetricsW
CreateDIBSection
GetObjectW
StretchBlt
CreateCompatibleDC
GetDIBits
CreateSolidBrush
SetBkMode
TextOutW
GetStockObject
SetTextAlign
CreateRectRgnIndirect
SetTextColor
SetBkColor
SelectClipRgn
SelectObject
GetTextExtentPoint32W
DeleteObject
BitBlt
CreateDCW
GetCurrentObject
SetDIBits
IntersectClipRect
CreateRectRgn
EndPath
ArcTo
PathToRegion
BeginPath
EnumFontFamiliesExW
GetBkMode
PatBlt
CreatePatternBrush
CreateBitmap
RestoreDC
SaveDC
CreatePen
LineTo
DeleteDC

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

FreeSid
InitializeSecurityDescriptor
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegSetValueExW
RegQueryInfoKeyW
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
AddAce
RegEnumKeyW
GetTokenInformation
InitializeAcl
SetSecurityDescriptorDacl
GetLengthSid
OpenProcessToken
CopySid
AllocateAndInitializeSid
RegSetKeySecurity
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteW
SHGetDesktopFolder
SHGetFileInfoW

ole32

OleDuplicateData
ReleaseStgMedium
DoDragDrop
RevokeDragDrop
RegisterDragDrop
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
CreateStreamOnHGlobal
CLSIDFromString
OleLockRunning
OleInitialize
CLSIDFromProgID
OleUninitialize
CoGetClassObject
PropVariantClear
CoInitialize
CoUninitialize
CoCreateGuid

oleaut32

DispCallFunc
OleCreateFontIndirect
LoadRegTypeLi
SysStringByteLen
SysAllocStringLen
VariantInit
LoadTypeLi
SysStringLen
VariantClear
VarUI4FromStr
SysAllocString
SysFreeString

shlwapi

SHAutoComplete
PathFindExtensionW
SHStrDupW

comctl32

ImageList_SetBkColor
InitCommonControlsEx
_TrackMouseEvent
ImageList_Destroy
ImageList_LoadImageW
ImageList_ReplaceIcon
ImageList_Draw
ImageList_GetImageCount
ImageList_Create
ImageList_GetIcon
InitializeFlatSB
FlatSB_ShowScrollBar
FlatSB_SetScrollProp
FlatSB_EnableScrollBar

msimg32

AlphaBlend
GradientFill

msvcr80

wcscspn
_wcsdup
swscanf
isalnum
strchr
toupper
tolower
_beginthreadex
_wrename
memmove
_localtime64
_mktime64
_time64
memchr
wcsspn
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
memmove_s
memcpy_s
?what@exception@std@@UBEPBDXZ
wcsstr
??_V@YAXPAX@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
_recalloc
swprintf_s
__RTDynamicCast
_swprintf
free
malloc
calloc
_resetstkoflw
wcsncpy_s
wcsrchr
_wcsicmp
_wtoi
wcscpy_s
vswprintf_s
_vswprintf_c_l
wcsncpy
strncpy_s
_localtime64_s
_wcsnicmp
ldiv
memset
_CxxThrowException
__CxxFrameHandler3
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
wcschr
towupper
_vsnwprintf_s
towlower
_errno
memcpy
_CIsqrt
_CIacos

winmm

timeKillEvent
timeSetEvent

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

imm32

ImmNotifyIME
ImmReleaseContext
ImmGetCompositionStringW
ImmGetContext
ImmAssociateContext

Exports

Exports

CoralCreateObject

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 401KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CoralUI2.dll
.dll windows:4 windows x86 arch:x86

0e00e064214de55a654654c2061d924d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

23/05/2013, 00:00

Not After

22/05/2016, 23:59

Subject

CN=2345.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=总办,O=2345.com,L=上海,ST=上海,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

88:76:5a:2a:e8:25:7f:19:ac:37:7b:f8:c4:49:63:0e:92:e9:62:d6
Signer

Actual PE Digest

88:76:5a:2a:e8:25:7f:19:ac:37:7b:f8:c4:49:63:0e:92:e9:62:d6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\DirectUI\SVNServer\DirectUI\bin\win32\release_unicode\pdb\CoralUI2.pdb

Imports

kernel32

InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
Sleep
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetLastError
FlushInstructionCache
GetCurrentThreadId
ExpandEnvironmentStringsW
lstrcatW
GetFileAttributesW
SetFilePointer
EnterCriticalSection
GetCurrentProcess
ReadFile
LoadLibraryA
lstrcpyW
FreeResource
MulDiv
CopyFileW
DeleteFileW
GetTickCount
CreateEventW
lstrlenA
GetCurrentDirectoryW
WideCharToMultiByte
GetModuleHandleW
FindResourceW
lstrcmpiW
GetLastError
LoadLibraryExW
MultiByteToWideChar
RaiseException
LoadResource
SizeofResource
DisableThreadLibraryCalls
InterlockedIncrement
DeleteCriticalSection
FreeLibrary
InitializeCriticalSection
GetVersionExW
IsBadReadPtr
GetProcAddress
LoadLibraryW
GlobalLock
GlobalUnlock
WriteFile
CreateFileW
GlobalAlloc
GlobalFree
CloseHandle
InterlockedDecrement
lstrlenW
GetModuleFileNameW
LeaveCriticalSection
GetVersionExA

user32

IsZoomed
SetActiveWindow
UnregisterClassA
GetKeyState
GetIconInfo
DrawIconEx
IsWindow
BeginDeferWindowPos
EnableWindow
UpdateWindow
GetCapture
GetParent
IsWindowVisible
CreateWindowExW
DestroyWindow
GetDlgItem
PostMessageW
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
SendMessageW
MessageBoxW
RedrawWindow
SetFocus
SetWindowPos
GetDC
SetPropW
SetRectEmpty
GetWindow
RemovePropW
DestroyCursor
GetSystemMetrics
InflateRect
KillTimer
SetTimer
ShowWindow
SetParent
BringWindowToTop
GetWindowLongW
SetWindowLongW
CallWindowProcW
GetSystemMenu
CloseWindow
SetCapture
SetWindowTextW
GetSubMenu
MoveWindow
GetClientRect
GetActiveWindow
GetDlgCtrlID
InvalidateRect
LockWindowUpdate
IsWindowEnabled
ReleaseDC
LoadCursorW
SetCursor
CharNextW
CopyRect
GetMonitorInfoW
ReleaseCapture
IntersectRect
DrawTextExW
EnableMenuItem
SetWindowRgn
GetClassNameW
EndDeferWindowPos
ScreenToClient
GetDesktopWindow
OffsetRect
UpdateLayeredWindow
GetTopWindow
ClientToScreen
GetPropW
IsRectEmpty
PtInRect
EndPaint
MonitorFromWindow
GetCursorPos
GetClassLongW
SystemParametersInfoW
EqualRect
BeginPaint
GetSysColor
DrawTextW
UnionRect
DestroyMenu
ModifyMenuW
DeleteMenu
SetRect
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
AppendMenuW
DrawFrameControl
FillRect
LoadStringW
EndDialog
DialogBoxParamW
LoadImageW
GetFocus
TrackPopupMenuEx
UnhookWindowsHookEx
MonitorFromPoint
RemoveMenu
WindowFromPoint
GetWindowDC
SetWindowsHookExW
CallNextHookEx
GetMessagePos
LoadMenuW
DeferWindowPos
GetDoubleClickTime
DestroyIcon
GetForegroundWindow
RegisterClassExW
SetForegroundWindow
GetWindowThreadProcessId
GetClassInfoExW
IsIconic
FindWindowW
GetAsyncKeyState
GetMenuStringW
IsMenu
CreatePopupMenu
InsertMenuW
DefWindowProcW

gdi32

CreateRectRgn
GetClipBox
CreateBitmap
CreatePatternBrush
CombineRgn
PtInRegion
CreateCompatibleBitmap
CreateRectRgnIndirect
SetRectRgn
OffsetRgn
PolyBezierTo
LineTo
MoveToEx
EndPath
SetBkMode
SetTextColor
GetViewportOrgEx
ExtCreateRegion
GetWindowOrgEx
BeginPath
GetRegionData
FillPath
PatBlt
PolyDraw
GetPath
WidenPath
CreateFontIndirectW
CreatePen
SetDIBits
CreateICW
ExtTextOutW
GetCurrentObject
SaveDC
SetROP2
RestoreDC
SetWindowOrgEx
IntersectClipRect
Rectangle
SetViewportOrgEx
SelectClipRgn
CreateDIBSection
CreateCompatibleDC
DeleteObject
DeleteDC
BitBlt
GetDIBits
RealizePalette
GetDeviceCaps
SelectObject
SelectPalette
CreateDCW
GetObjectW
SetBkColor
CreateSolidBrush
GetStockObject

advapi32

RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW

shell32

ShellExecuteW

ole32

OleUninitialize
OleInitialize
CoCreateGuid
CoFreeUnusedLibraries
CreateStreamOnHGlobal
StringFromGUID2
CoUninitialize
CoInitialize
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CLSIDFromString

oleaut32

VariantClear
VarBstrCmp
VarUI4FromStr
SysAllocStringLen
VariantCopy
VarBstrCat
SysStringByteLen
SysAllocStringByteLen
SafeArrayRedim
SafeArrayPutElement
SafeArrayGetElement
SafeArrayGetLBound
SysAllocString
SafeArrayCreate
SafeArrayGetUBound
SafeArrayDestroy
OleTranslateColor
VariantChangeType
VariantInit
LoadRegTypeLi
SysFreeString
SysStringLen
LoadTypeLi

comctl32

ImageList_GetImageInfo
ImageList_Destroy
ImageList_GetImageCount
ImageList_GetIcon
ImageList_LoadImageW
_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipCloneBitmapAreaI
GdipFillPieI
GdipCreateTexture
GdipCreateHICONFromBitmap
GdipSetCompositingMode
GdipDrawImageRectRectI
GdipDrawImageI
GdipCreateBitmapFromScan0
GdipSetSmoothingMode
GdipMeasureString
GdipBitmapUnlockBits
GdipDeleteFont
GdipBitmapLockBits
GdipDrawString
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipCreateBitmapFromFile
GdipSetTextRenderingHint
GdipGetImageWidth
GdipSetInterpolationMode
GdipSetStringFormatTrimming
GdipCreateStringFormat
GdipSetStringFormatHotkeyPrefix
GdipGetImageHeight
GdipGetStringFormatFlags
GdipGetImageGraphicsContext
GdipSetCompositingQuality
GdipCreateBitmapFromStream
GdipSetStringFormatFlags
GdipCreateFontFromLogfontW
GdipCreateHBITMAPFromBitmap
GdipSetStringFormatLineAlign
GdipCreateLineBrushFromRectWithAngleI
GdipDisposeImage
GdipDrawImageRectI
GdipCloneImage
GdipCreateBitmapFromHBITMAP
GdipFree
GdipCreateFromHDC
GdipDeleteBrush
GdipDeleteGraphics
GdipFillRectangleI
GdipCloneBrush
GdipAlloc
GdipCreateSolidFill

msvcr80

swprintf_s
fwrite
ftell
wcscpy_s
wcscat_s
strncpy_s
fclose
fseek
_wfopen_s
wcsncpy_s
malloc
_resetstkoflw
calloc
_purecall
memmove_s
memcpy_s
_recalloc
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??2@YAPAXI@Z
free
??_V@YAXPAX@Z
??3@YAXPAX@Z
fread
_wtoi
strstr
__RTDynamicCast
_wcsicmp
vswprintf_s
_waccess
atoi
_snwprintf_s
wcstoul
wcschr
_beginthreadex
toupper
strchr
sprintf_s
atof
memset
__CxxFrameHandler3
_CxxThrowException
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
floor
memcpy

rpcrt4

UuidFromStringW

Exports

Exports

CloseSkin
GetSkinFileBytes
OpenSkin

Sections

.text
Size: 918KB - Virtual size: 917KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 238KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CoralUpdate.dll
.dll windows:4 windows x86 arch:x86

7bd07fec012521c1f4701e16b946e6d3

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

23/05/2013, 00:00

Not After

22/05/2016, 23:59

Subject

CN=2345.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=总办,O=2345.com,L=上海,ST=上海,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5a:0b:aa:3d:e4:da:e6:14:0f:57:38:a6:f8:fc:4e:89:1a:3a:27:c1
Signer

Actual PE Digest

5a:0b:aa:3d:e4:da:e6:14:0f:57:38:a6:f8:fc:4e:89:1a:3a:27:c1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\2345\Coral\trunk\public\Bin\Win32\Release\pdb\CoralUpdate.pdb

Imports

gdiplus

GdiplusShutdown
GdiplusStartup

kernel32

GetTickCount
LoadLibraryW
GetProcAddress
DeleteFileW
WritePrivateProfileStringW
GetPrivateProfileIntW
WaitForSingleObject
InterlockedExchangeAdd
GetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
GetACP
WideCharToMultiByte
ResumeThread
GetFullPathNameW
GetTempPathW
SetFileTime
GetWindowsDirectoryW
GetCurrentDirectoryW
GetLongPathNameW
SetFileAttributesW
FindNextFileW
FindFirstFileW
FindClose
ReadFile
SetFilePointer
SetEndOfFile
GetFileSize
CreateEventW
SetEvent
ResetEvent
FormatMessageW
LocalFree
GetComputerNameW
ExpandEnvironmentStringsW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
GetShortPathNameW
GetFileAttributesExW
EnterCriticalSection
GetVersionExW
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcessId
LocalAlloc
OpenProcess
TerminateProcess
QueryDosDeviceW
lstrlenA
DisableThreadLibraryCalls
lstrcmpiW
MoveFileW
FreeLibrary
DeviceIoControl
GetThreadLocale
GetLocaleInfoA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetVersionExA
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedCompareExchange
GetLastError
WriteFile
SizeofResource
LoadResource
InitializeCriticalSection
GetCurrentThreadId
CreateFileW
InterlockedDecrement
CloseHandle
InterlockedIncrement
Sleep
lstrlenW
GetTempFileNameW
SetLastError
GetCurrentProcess
GetModuleFileNameW
FindResourceW
FlushInstructionCache
GetModuleHandleW
InterlockedExchange
MultiByteToWideChar
LeaveCriticalSection
LoadLibraryExW
CreateMutexW
DeleteCriticalSection
RaiseException
LockResource

user32

GetClassInfoExW
PeekMessageW
OffsetRect
SetFocus
SetWindowRgn
DialogBoxParamW
LoadStringW
EndDialog
GetWindowLongW
IsWindowVisible
SetWindowPos
GetParent
SetWindowLongW
KillTimer
GetWindow
PostQuitMessage
SetWindowTextW
GetWindowRect
MessageBoxW
TranslateMessage
DefWindowProcW
UnregisterClassA
DestroyIcon
GetDC
ReleaseDC
CallWindowProcW
GetClientRect
MapWindowPoints
SetTimer
SystemParametersInfoW
ShowWindowAsync
IsWindow
GetSystemMetrics
ShowWindow
RegisterClassExW
DispatchMessageW
DestroyWindow
CreateWindowExW
CharNextW
LoadCursorW
LoadImageW
GetMessageW
SendMessageW

gdi32

DeleteObject
GetTextExtentPoint32W
SelectObject
CreatePolygonRgn

advapi32

RegDeleteValueW
AddAce
RegEnumKeyW
RegGetKeySecurity
SetSecurityDescriptorDacl
GetLengthSid
EqualSid
OpenProcessToken
CopySid
AllocateAndInitializeSid
RegSetKeySecurity
FreeSid
InitializeSecurityDescriptor
GetTokenInformation
InitializeAcl
AddAccessAllowedAce
GetUserNameW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW

shell32

SHGetSpecialFolderLocation
ShellExecuteExW
ord155
SHChangeNotify
SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitializeSecurity
OleInitialize
OleUninitialize
CoSetProxyBlanket
CoTaskMemRealloc
CoUninitialize

oleaut32

SysAllocString
VarUI4FromStr
SysFreeString
VariantClear
VariantInit

msvcr80

_encode_pointer
_lock
_onexit
memcpy
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
memset
_localtime64
_vsnwprintf
swscanf_s
sscanf
__dllonexit
_unlock
?terminate@@YAXXZ
__CxxFrameHandler3
_CxxThrowException
_wcsicmp
wcsrchr
_localtime64_s
_vswprintf_c_l
swprintf_s
??3@YAXPAX@Z
??2@YAPAXI@Z
_invalid_parameter_noinfo
??_V@YAXPAX@Z
_time64
_purecall
memcpy_s
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
memmove_s
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
wcsncpy_s
??0exception@std@@QAE@ABV01@@Z
free
vswprintf_s
_recalloc
malloc
__RTDynamicCast
_wtoi
srand
rand
_wrename
_errno
towupper
_vsnwprintf_s
wcschr
towlower
_beginthreadex

comctl32

InitCommonControlsEx

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Exports

Exports

CoralCreateObject

Sections

.text
Size: 339KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lang/CoralLang_chs.dll
.dll windows:4 windows x86 arch:x86

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

23/05/2013, 00:00

Not After

22/05/2016, 23:59

Subject

CN=2345.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=总办,O=2345.com,L=上海,ST=上海,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

fd:31:fe:d0:ef:45:9c:4b:4d:70:25:db:9a:c4:e1:5e:f4:64:89:df
Signer

Actual PE Digest

fd:31:fe:d0:ef:45:9c:4b:4d:70:25:db:9a:c4:e1:5e:f4:64:89:df

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\2345\Coral\trunk\public\build_temp\Win32\Release\CoralLang_chs\CoralLang_chs.pdb

Sections

.rdata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Microsoft.VC80.CRT.manifest
Skins/Coral.dui
.zip
objects.xml
.xml
plugin.xml
.xml
shareres.xml
.xml
Skins/Coral.skn
.zip
3btn_Button.png
.png
Address_BtnAuthHarm.png
.png
Address_BtnAuthSafe.png
.png
Address_IconHarmLock.png
.png
Address_IconSafeLock.png
.png
Address_UIRenderToggleIEAdvancedMode.png
.png
Address_UIRenderToggleIENormalMode.png
.png
AdsBlockTip.png
.png
Bubble_AdsBlockOther.png
.png
Bubble_AdsBlockPopup.png
.png
Bubble_AdsBlockText.png
.png
Bubble_AdsBlockTip.png
.png
Bubble_AuthCenter_HarmBG.png
.png
Bubble_AuthCenter_SafeBG.png
.png
Bubble_Desktop_BG.png
.png
Bubble_Desktop_CloseBtn.png
.png
Bubble_Devide.png
.png
Bubble_FavFeature.png
.png
Bubble_FavSynSucc.png
.png
Bubble_FavSyncFail.png
.png
Bubble_LocalFavFail.png
.png
Bubble_LocalFavSucc.png
.png
Bubble_PwdMgrLoginError.png
.png
Bubble_PwdMgrLoginFail.png
.png
Bubble_PwdMgrLoginSucc.png
.png
Bubble_UserLoginFail.png
.png
Bubble_UserLoginSucc.png
.png
Bubble_UserLogout.png
.png
Bubble_Video2.png
.png
Bubbles.png
.png
Bubbles_ModeChange.png
.png
Bubbles_up.png
.png
Close_Btn.png
.png
Coral_Logo.png
.png
Down_Bottom_Border.png
.png
Down_DelList.png
.png
Down_Left_Border.png
.png
Down_Right_Border.png
.png
Download_Background.png
.png
Download_Button.png
.png
Download_SysButton.png
.png
Expand_Menu.png
.png
FavSearchReturn.png
.png
FindBar_Status_Image.png
.png
Find_Next.png
.png
Find_Prev.png
.png
Findbar_Resault_Icon.png
.png
Findbar_Select item_big.png
.png
Findbar_select item_small.png
.png
Float 2.png
.png
Float.png
.png
FloatBanner_BG.png
.png
FloatBanner_CloseBtn.png
.png
FloatBanner_IconWarning.png
.png
FullScreenExitButton.png
.png
LeftRight.png
.png
Left_Border.png
.png
Logged_Default.png
.png
Login.png
.png
Main_Background.png
.png
Main_Bottom_Border.png
.png
ManualUpdate_Background.png
.png
ManualUpdate_BottomLine.png
.png
ManualUpdate_Button.png
.png
ManualUpdate_Checking.png
.png
ManualUpdate_DefButton.png
.png
ManualUpdate_MsgBoxBG.png
.png
ManualUpdate_NotifyIcon_Ask.png
.png
ManualUpdate_NotifyIcon_Info.png
.png
ManualUpdate_NotifyIcon_Succ.png
.png
ManualUpdate_ProgressBG.png
.png
ManualUpdate_ProgressBright.png
.png
ManualUpdate_ProgressPos.png
.png
ManualUpdate_SysBtn_Close.png
.png
ManualUpdate_SysBtn_Min.png
.png
ManualUpdate_TopLine.png
.png
ModePanelBg.png
.png
ModePanelText.png
.png
ProgressBar_bule.png
.png
Rebar_Background.png
.png
Right.png
.png
RightPic.png
.png
Right_Border.png
.png
ScreenshotBar.png
.png
ScrollBar_Bk.png
.png
Searchbar_list_btn.png
.png
SideBarSplitterBar.png
.png
SideBar_Topbar.png
.png
StatusBar_Background.png
.png
System_Button.png
.png
Tab_Thumb.png
.png
UIRenderMode_Advance.png
.png
UIRenderMode_Normal.png
.png
UIRenderMode_Unknown.png
.png
UserLanding.png
.png
UserPanel_Async_Btn.png
.png
UserPanel_Background.png
.png
UserPanel_Icons.png
.png
UserPanel_Text.png
.png
UserPanel_Waiting16.png
.png
aboutdlg_bbs_icon_hover.png
.png
aboutdlg_bbs_icon_normal.png
.png
aboutdlg_bg.png
.png
aboutdlg_email_icon_hover.png
.png
aboutdlg_email_icon_normal.png
.png
aboutdlg_home_icon_hover.png
.png
aboutdlg_home_icon_normal.png
.png
add.png
.png
add_btn.png
.png
addressBar_bg.png
.png
addressbar_list_btn.png
.png
back_bar.png
.png
back_forward.png
.png
cal.png
.png
coral_skin_config.txt
coral_skin_description.txt
default_page.png
.png
delete.png
.png
done.png
.png
down_Logo.png
.png
down_arrow.png
.png
download-14.png
.png
download.png
.png
download_btn.png
.png
download_item_btn_bg.png
.png
download_item_btn_open_Folder.png
.png
download_item_btn_open_Folder_dissable.png
.png
download_item_btn_open_file.png
.png
download_item_btn_open_file_dissable.png
.png
download_list_bg.png
.png
download_list_bg_ie.png
.png
download_mgr_search_btn.png
.png
droplist_close.png
.png
droplist_item.png
.png
edit.png
.png
fav.png
.png
fav_backup.png
.png
fav_left.png
.png
fav_login.png
.png
fav_modify.png
.png
favorites.png
.png
find.png
.png
findbar_backgroung.png
.png
findbar_bg.png
.png
fivebtn.png
.png
folder.png
.png
go_btn.png
.png
headPic_edit.png
.png
headPic_hot.png
.png
headPic_offline.png
.png
head_default.png
.png
headpic_loading16.png
.png
history.png
.png
history_search_btn.png
.png
history_site.png
.png
history_toolbar.png
.png
home.png
.png
menubar_selecte_item.png
.png
more_btn.png
.png
more_list_btn.png
.png
most_left.png
.png
msg_ico.png
.png
new_tab.png
.png
no_traces_btn.png
.png
non-trace_tab.png
.png
notice.png
.png
objects.xml
.xml
on_arrow.png
.png
on_right_bar.png
.png
outevery.png
.png
pen.png
.png
pen_selecte_highlight.png
.png
pic_mask.png
.png
promptBar_tint_bg.png
.png
promptBar_tint_button.png
.png
promptBar_tint_close.png
.png
prop.xml
.xml
refresh.png
.png
right_bar.png
.png
rightbar.png
.png
safe1.png
.png
search_btn.png
.png
search_del.png
.png
search_on.png
.png
searchbar.png
.png
searchbar_bg.png
.png
select item.png
.png
select item_small.png
.png
select-item.png
.png
selecte_item.png
.png
set_btn.png
.png
setting_msgIco.png
.png
shareres.xml
.xml
sidebar_bg.png
.png
sidebar_bg_right.png
.png
sidebar_btn.png
.png
sidebar_favorite_searchbar_bg.png
.png
sidebar_history_searchbar_bg.png
.png
sidebar_searchbar_bg.png
.png
sidebar_view_bg.png
.png
sitebar.png
.png
size-contrl.png
.png
statusbar_select_item.png
.png
statusbar_zoomlist_arrow.png
.png
stop.png
.png
tab1.png
.png
tab2.png
.png
tab_background.png
.png
tab_close_btn_small.png
.png
tab_item.png
.png
tab_item_list.png
.png
tab_loading.png
.png
tab_open_recent.png
.png
tab_show_recent.png
.png
tab_states.png
.png
tick.png
.png
voice1.png
.png
voice2.png
.png
waite.png
.png
waiting_ico.png
.png
zoom.png
.png
Skins/Coral.xml
.xml
Skins/CoralIE.skn
.zip
3btn_Button.png
.png
Address_BtnAuthHarm.png
.png
Address_BtnAuthSafe.png
.png
Address_IconHarmLock.png
.png
Address_IconSafeLock.png
.png
Address_UIRenderToggleIEAdvancedMode.png
.png
Address_UIRenderToggleIENormalMode.png
.png
AdsBlockTip.png
.png
Bubble_AdsBlockOther.png
.png
Bubble_AdsBlockPopup.png
.png
Bubble_AdsBlockText.png
.png
Bubble_AdsBlockTip.png
.png
Bubble_AuthCenter_HarmBG.png
.png
Bubble_AuthCenter_SafeBG.png
.png
Bubble_Desktop_BG.png
.png
Bubble_Desktop_CloseBtn.png
.png
Bubble_Devide.png
.png
Bubble_FavFeature.png
.png
Bubble_FavSynSucc.png
.png
Bubble_FavSyncFail.png
.png
Bubble_LocalFavFail.png
.png
Bubble_LocalFavSucc.png
.png
Bubble_PwdMgrLoginError.png
.png
Bubble_PwdMgrLoginFail.png
.png
Bubble_PwdMgrLoginSucc.png
.png
Bubble_UserLoginFail.png
.png
Bubble_UserLoginSucc.png
.png
Bubble_UserLogout.png
.png
Bubble_Video2.png
.png
Bubbles.png
.png
Bubbles_ModeChange.png
.png
Bubbles_up.png
.png
Close_Btn.png
.png
Coral_Logo.png
.png
Down_Bottom_Border.png
.png
Down_DelList.png
.png
Down_Left_Border.png
.png
Down_Right_Border.png
.png
Download_Background.png
.png
Download_Button.png
.png
Download_SysButton.png
.png
Expand_Menu.png
.png
FavSearchReturn.png
.png
FindBar_Status_Image.png
.png
Find_Next.png
.png
Find_Prev.png
.png
Findbar_Resault_Icon.png
.png
Findbar_Select item_big.png
.png
Findbar_select item_small.png
.png
Float 2.png
.png
Float.png
.png
FloatBanner_BG.png
.png
FloatBanner_CloseBtn.png
.png
FloatBanner_IconWarning.png
.png
FullScreenExitButton.png
.png
LeftRight.png
.png
Left_Border.png
.png
Logged_Default.png
.png
Login.png
.png
Main_Background.png
.png
Main_Bottom_Border.png
.png
ManualUpdate_Background.png
.png
ManualUpdate_BottomLine.png
.png
ManualUpdate_Button.png
.png
ManualUpdate_Checking.png
.png
ManualUpdate_DefButton.png
.png
ManualUpdate_MsgBoxBG.png
.png
ManualUpdate_NotifyIcon_Ask.png
.png
ManualUpdate_NotifyIcon_Info.png
.png
ManualUpdate_NotifyIcon_Succ.png
.png
ManualUpdate_ProgressBG.png
.png
ManualUpdate_ProgressBright.png
.png
ManualUpdate_ProgressPos.png
.png
ManualUpdate_SysBtn_Close.png
.png
ManualUpdate_SysBtn_Min.png
.png
ManualUpdate_TopLine.png
.png
ModePanelBg.png
.png
ModePanelText.png
.png
ProgressBar_bule.png
.png
Rebar_Background.png
.png
Right.png
.png
RightPic.png
.png
Right_Border.png
.png
ScreenshotBar.png
.png
ScrollBar_Bk.png
.png
Searchbar_list_btn.png
.png
SideBarSplitterBar.png
.png
SideBar_Topbar.png
.png
StatusBar_Background.png
.png
System_Button.png
.png
Tab_Thumb.png
.png
UIRenderMode_Advance.png
.png
UIRenderMode_Normal.png
.png
UIRenderMode_Unknown.png
.png
UserLanding.png
.png
UserPanel_Async_Btn.png
.png
UserPanel_Background.png
.png
UserPanel_Icons.png
.png
UserPanel_Text.png
.png
UserPanel_Waiting16.png
.png
aboutdlg_bbs_icon_hover.png
.png
aboutdlg_bbs_icon_normal.png
.png
aboutdlg_bg.png
.png
aboutdlg_email_icon_hover.png
.png
aboutdlg_email_icon_normal.png
.png
aboutdlg_home_icon_hover.png
.png
aboutdlg_home_icon_normal.png
.png
add.png
.png
add_btn.png
.png
addressBar_bg.png
.png
addressbar_list_btn.png
.png
adressbar_list_btn.png
.png
back_bar.png
.png
back_forward.png
.png
cal.png
.png
coral_skin_config.txt
coral_skin_description.txt
default_page.png
.png
delete.png
.png
done.png
.png
down_Logo.png
.png
down_arrow.png
.png
download-14.png
.png
download.png
.png
download_btn.png
.png
download_item_btn_bg.png
.png
download_item_btn_open_Folder.png
.png
download_item_btn_open_Folder_dissable.png
.png
download_item_btn_open_file.png
.png
download_item_btn_open_file_dissable.png
.png
download_list_bg.png
.png
download_list_bg_ie.png
.png
download_mgr_search_btn.png
.png
droplist_close.png
.png
droplist_item.png
.png
edit.png
.png
fav.png
.png
fav_backup.png
.png
fav_left.png
.png
fav_login.png
.png
fav_modify.png
.png
favorites.png
.png
find.png
.png
findbar_backgroung.png
.png
findbar_bg.png
.png
fivebtn.png
.png
folder.png
.png
go_btn.png
.png
headPic_edit.png
.png
headPic_hot.png
.png
headPic_hover.png
.png
headPic_offline.png
.png
head_default.png
.png
headpic_loading16.png
.png
history.png
.png
history_search_btn.png
.png
history_site.png
.png
history_toolbar.png
.png
home.png
.png
menubar_selecte_item.png
.png
more_btn.png
.png
more_list_btn.png
.png
most_left.png
.png
new_tab.png
.png
no_traces_btn.png
.png
non-trace_tab.png
.png
notice.png
.png
objects.xml
.xml
on_arrow.png
.png
on_right_bar.png
.png
outevery.png
.png
pen.png
.png
pen_selecte_highlight.png
.png
pic_mask.png
.png
prop.xml
.xml
refresh.png
.png
right_bar.png
.png
rightbar.png
.png
safe1.png
.png
search_btn.png
.png
search_del.png
.png
search_on.png
.png
searchbar.png
.png
searchbar_bg.png
.png
select item.png
.png
select item_small.png
.png
select-item.png
.png
selecte_item.png
.png
set_btn.png
.png
shareres.xml
.xml
sidebar_bg.png
.png
sidebar_bg_right.png
.png
sidebar_btn.png
.png
sidebar_favorite_searchbar_bg.png
.png
sidebar_history_searchbar_bg.png
.png
sidebar_searchbar_bg.png
.png
sidebar_view_bg.png
.png
sitebar.png
.png
size-contrl.png
.png
statusbar_select_item.png
.png
statusbar_zoomlist_arrow.png
.png
stop.png
.png
tab1.png
.png
tab2.png
.png
tab_background.png
.png
tab_close_btn_small.png
.png
tab_item.png
.png
tab_item_list.png
.png
tab_loading.png
.png
tab_open_recent.png
.png
tab_show_recent.png
.png
tab_states.png
.png
tick.png
.png
voice1.png
.png
voice2.png
.png
waite.png
.png
zoom.png
.png
Skins/Growth.skn
.zip
3btn_Button.png
.png
Address_BtnAuthHarm.png
.png
Address_BtnAuthSafe.png
.png
Address_IconHarmLock.png
.png
Address_IconSafeLock.png
.png
Address_UIRenderToggleIEAdvancedMode.png
.png
Address_UIRenderToggleIENormalMode.png
.png
AdsBlockTip.png
.png
Bubble_AdsBlockOther.png
.png
Bubble_AdsBlockPopup.png
.png
Bubble_AdsBlockText.png
.png
Bubble_AdsBlockTip.png
.png
Bubble_AuthCenter_HarmBG.png
.png
Bubble_AuthCenter_SafeBG.png
.png
Bubble_Desktop_BG.png
.png
Bubble_Desktop_CloseBtn.png
.png
Bubble_Devide.png
.png
Bubble_FavFeature.png
.png
Bubble_FavSynSucc.png
.png
Bubble_FavSyncFail.png
.png
Bubble_LocalFavFail.png
.png
Bubble_LocalFavSucc.png
.png
Bubble_PwdMgrLoginError.png
.png
Bubble_PwdMgrLoginFail.png
.png
Bubble_PwdMgrLoginSucc.png
.png
Bubble_UserLoginFail.png
.png
Bubble_UserLoginSucc.png
.png
Bubble_UserLogout.png
.png
Bubble_Video2.png
.png
Bubbles.png
.png
Bubbles_ModeChange.png
.png
Bubbles_up.png
.png
Close_Btn.png
.png
Coral_Logo.png
.png
Down_Bottom_Border.png
.png
Down_DelList.png
.png
Down_Left_Border.png
.png
Down_Right_Border.png
.png
Download_Background.png
.png
Download_Button.png
.png
Download_SysButton.png
.png
Expand_Menu.png
.png
FavSearchReturn.png
.png
FindBar_Status_Image.png
.png
Find_Next.png
.png
Find_Prev.png
.png
Findbar_Resault_Icon.png
.png
Findbar_Select item_big.png
.png
Findbar_select item_small.png
.png
Float 2.png
.png
Float.png
.png
FloatBanner_BG.png
.png
FloatBanner_CloseBtn.png
.png
FloatBanner_IconWarning.png
.png
FullScreenExitButton.png
.png
LeftRight.png
.png
Left_Border.png
.png
Logged_Default.png
.png
Login.png
.png
Main_Background.png
.png
Main_Bottom_Border.png
.png
ManualUpdate_Background.png
.png
ManualUpdate_BottomLine.png
.png
ManualUpdate_Button.png
.png
ManualUpdate_Checking.png
.png
ManualUpdate_DefButton.png
.png
ManualUpdate_MsgBoxBG.png
.png
ManualUpdate_NotifyIcon_Ask.png
.png
ManualUpdate_NotifyIcon_Info.png
.png
ManualUpdate_NotifyIcon_Succ.png
.png
ManualUpdate_ProgressBG.png
.png
ManualUpdate_ProgressBright.png
.png
ManualUpdate_ProgressPos.png
.png
ManualUpdate_SysBtn_Close.png
.png
ManualUpdate_SysBtn_Min.png
.png
ManualUpdate_TopLine.png
.png
ModePanelBg.png
.png
ModePanelText.png
.png
ProgressBar_bule.png
.png
Rebar_Background.png
.png
Right.png
.png
RightPic.png
.png
Right_Border.png
.png
ScreenshotBar.png
.png
ScrollBar_Bk.png
.png
Searchbar_list_btn.png
.png
SideBarSplitterBar.png
.png
SideBar_Topbar.png
.png
StatusBar_Background.png
.png
System_Button.png
.png
Tab_Thumb.png
.png
UIRenderMode_Advance.png
.png
UIRenderMode_Normal.png
.png
UIRenderMode_Unknown.png
.png
UserLanding.png
.png
UserPanel_Async_Btn.png
.png
UserPanel_Background.png
.png
UserPanel_Icons.png
.png
UserPanel_Text.png
.png
UserPanel_Waiting16.png
.png
aboutdlg_bbs_icon_hover.png
.png
aboutdlg_bbs_icon_normal.png
.png
aboutdlg_bg.png
.png
aboutdlg_email_icon_hover.png
.png
aboutdlg_email_icon_normal.png
.png
aboutdlg_home_icon_hover.png
.png
aboutdlg_home_icon_normal.png
.png
add.png
.png
add_btn.png
.png
addressBar_bg.png
.png
addressbar_list_btn.png
.png
back_bar.png
.png
back_forward.png
.png
cal.png
.png
coral_skin_config.txt
coral_skin_description.txt
default_page.png
.png
delete.png
.png
done.png
.png
down_Logo.png
.png
down_arrow.png
.png
download-14.png
.png
download.png
.png
download_btn.png
.png
download_item_btn_bg.png
.png
download_item_btn_open_Folder.png
.png
download_item_btn_open_Folder_dissable.png
.png
download_item_btn_open_file.png
.png
download_item_btn_open_file_dissable.png
.png
download_list_bg.png
.png
download_list_bg_ie.png
.png
download_mgr_search_btn.png
.png
droplist_close.png
.png
droplist_item.png
.png
edit.png
.png
fav.png
.png
fav_backup.png
.png
fav_left.png
.png
fav_login.png
.png
fav_modify.png
.png
favorites.png
.png
find.png
.png
findbar_backgroung.png
.png
findbar_bg.png
.png
fivebtn.png
.png
folder.png
.png
go_btn.png
.png
headPic_edit.png
.png
headPic_hot.png
.png
headPic_hover.png
.png
headPic_offline.png
.png
head_default.png
.png
headpic_loading16.png
.png
history.png
.png
history_search_btn.png
.png
history_site.png
.png
history_toolbar.png
.png
home.png
.png
menubar_selecte_item.png
.png
more_btn.png
.png
more_list_btn.png
.png
most_left.png
.png
new_tab.png
.png
no_traces_btn.png
.png
non-trace_tab.png
.png
notice.png
.png
objects.xml
.xml
on_arrow.png
.png
on_right_bar.png
.png
outevery.png
.png
pen.png
.png
pen_selecte_highlight.png
.png
pic_mask.png
.png
prop.xml
.xml
refresh.png
.png
right_bar.png
.png
rightbar.png
.png
safe1.png
.png
search_btn.png
.png
search_del.png
.png
search_on.png
.png
searchbar.png
.png
searchbar_bg.png
.png
select item.png
.png
select item_small.png
.png
select-item.png
.png
selecte_item.png
.png
set_btn.png
.png
shareres.xml
.xml
sidebar_bg.png
.png
sidebar_bg_right.png
.png
sidebar_btn.png
.png
sidebar_favorite_searchbar_bg.png
.png
sidebar_history_searchbar_bg.png
.png
sidebar_searchbar_bg.png
.png
sidebar_view_bg.png
.png
sitebar.png
.png
size-contrl.png
.png
statusbar_select_item.png
.png
statusbar_zoomlist_arrow.png
.png
stop.png
.png
tab1.png
.png
tab2.png
.png
tab_background.png
.png
tab_close_btn_small.png
.png
tab_item.png
.png
tab_item_list.png
.png
tab_loading.png
.png
tab_open_recent.png
.png
tab_show_recent.png
.png
tab_states.png
.png
tick.png
.png
voice1.png
.png
voice2.png
.png
waite.png
.png
zoom.png
.png
Skins/Pink.skn
.zip
3btn_Button.png
.png
Address_BtnAuthHarm.png
.png
Address_BtnAuthSafe.png
.png
Address_IconHarmLock.png
.png
Address_IconSafeLock.png
.png
Address_UIRenderToggleIEAdvancedMode.png
.png
Address_UIRenderToggleIENormalMode.png
.png
AdsBlockTip.png
.png
Bubble_AdsBlockOther.png
.png
Bubble_AdsBlockPopup.png
.png
Bubble_AdsBlockText.png
.png
Bubble_AdsBlockTip.png
.png
Bubble_AuthCenter_HarmBG.png
.png
Bubble_AuthCenter_SafeBG.png
.png
Bubble_Desktop_BG.png
.png
Bubble_Desktop_CloseBtn.png
.png
Bubble_Devide.png
.png
Bubble_FavFeature.png
.png
Bubble_FavSynSucc.png
.png
Bubble_FavSyncFail.png
.png
Bubble_LocalFavFail.png
.png
Bubble_LocalFavSucc.png
.png
Bubble_PwdMgrLoginError.png
.png
Bubble_PwdMgrLoginFail.png
.png
Bubble_PwdMgrLoginSucc.png
.png
Bubble_UserLoginFail.png
.png
Bubble_UserLoginSucc.png
.png
Bubble_UserLogout.png
.png
Bubble_Video2.png
.png
Bubbles.png
.png
Bubbles_ModeChange.png
.png
Bubbles_up.png
.png
Close_Btn.png
.png
Coral_Logo.png
.png
Down_Bottom_Border.png
.png
Down_DelList.png
.png
Down_Left_Border.png
.png
Down_Right_Border.png
.png
Download_Background.png
.png
Download_Button.png
.png
Download_SysButton.png
.png
Expand_Menu.png
.png
FavSearchReturn.png
.png
FindBar_Status_Image.png
.png
Find_Next.png
.png
Find_Prev.png
.png
Findbar_Resault_Icon.png
.png
Findbar_Select item_big.png
.png
Findbar_select item_small.png
.png
Float 2.png
.png
Float.png
.png
FloatBanner_BG.png
.png
FloatBanner_CloseBtn.png
.png
FloatBanner_IconWarning.png
.png
FullScreenExitButton.png
.png
LeftRight.png
.png
Left_Border.png
.png
Logged_Default.png
.png
Login.png
.png
Main_Background.png
.png
Main_Bottom_Border.png
.png
ManualUpdate_Background.png
.png
ManualUpdate_BottomLine.png
.png
ManualUpdate_Button.png
.png
ManualUpdate_Checking.png
.png
ManualUpdate_DefButton.png
.png
ManualUpdate_MsgBoxBG.png
.png
ManualUpdate_NotifyIcon_Ask.png
.png
ManualUpdate_NotifyIcon_Info.png
.png
ManualUpdate_NotifyIcon_Succ.png
.png
ManualUpdate_ProgressBG.png
.png
ManualUpdate_ProgressBright.png
.png
ManualUpdate_ProgressPos.png
.png
ManualUpdate_SysBtn_Close.png
.png
ManualUpdate_SysBtn_Min.png
.png
ManualUpdate_TopLine.png
.png
ModePanelBg.png
.png
ModePanelText.png
.png
ProgressBar_bule.png
.png
Rebar_Background.png
.png
Right.png
.png
RightPic.png
.png
Right_Border.png
.png
ScreenshotBar.png
.png
ScrollBar_Bk.png
.png
Searchbar_list_btn.png
.png
SideBarSplitterBar.png
.png
SideBar_Topbar.png
.png
StatusBar_Background.png
.png
System_Button.png
.png
Tab_Thumb.png
.png
UIRenderMode_Advance.png
.png
UIRenderMode_Normal.png
.png
UIRenderMode_Unknown.png
.png
UserLanding.png
.png
UserPanel_Async_Btn.png
.png
UserPanel_Background.png
.png
UserPanel_Icons.png
.png
UserPanel_Text.png
.png
UserPanel_Waiting16.png
.png
aboutdlg_bbs_icon_hover.png
.png
aboutdlg_bbs_icon_normal.png
.png
aboutdlg_bg.png
.png
aboutdlg_email_icon_hover.png
.png
aboutdlg_email_icon_normal.png
.png
aboutdlg_home_icon_hover.png
.png
aboutdlg_home_icon_normal.png
.png
add.png
.png
add_btn.png
.png
addressBar_bg.png
.png
addressbar_list_btn.png
.png
back_bar.png
.png
back_forward.png
.png
cal.png
.png
coral_skin_config.txt
coral_skin_description.txt
default_page.png
.png
delete.png
.png
done.png
.png
down_Logo.png
.png
down_arrow.png
.png
download-14.png
.png
download.png
.png
download_btn.png
.png
download_item_btn_bg.png
.png
download_item_btn_open_Folder.png
.png
download_item_btn_open_Folder_dissable.png
.png
download_item_btn_open_file.png
.png
download_item_btn_open_file_dissable.png
.png
download_list_bg.png
.png
download_list_bg_ie.png
.png
download_mgr_search_btn.png
.png
droplist_close.png
.png
droplist_item.png
.png
edit.png
.png
fav.png
.png
fav_backup.png
.png
fav_left.png
.png
fav_login.png
.png
fav_modify.png
.png
favorites.png
.png
find.png
.png
findbar_backgroung.png
.png
findbar_bg.png
.png
fivebtn.png
.png
folder.png
.png
go_btn.png
.png
headPic_edit.png
.png
headPic_hot.png
.png
headPic_hover.png
.png
headPic_offline.png
.png
head_default.png
.png
headpic_loading16.png
.png
history.png
.png
history_search_btn.png
.png
history_site.png
.png
history_toolbar.png
.png
home.png
.png
menubar_selecte_item.png
.png
more_btn.png
.png
more_list_btn.png
.png
most_left.png
.png
new_tab.png
.png
no_traces_btn.png
.png
non-trace_tab.png
.png
notice.png
.png
objects.xml
.xml
on_arrow.png
.png
on_right_bar.png
.png
outevery.png
.png
pen.png
.png
pen_selecte_highlight.png
.png
pic_mask.png
.png
prop.xml
.xml
refresh.png
.png
right_bar.png
.png
rightbar.png
.png
safe1.png
.png
search_btn.png
.png
search_del.png
.png
search_on.png
.png
searchbar.png
.png
searchbar_bg.png
.png
select item.png
.png
select item_small.png
.png
select-item.png
.png
selecte_item.png
.png
set_btn.png
.png
shareres.xml
.xml
sidebar_bg.png
.png
sidebar_bg_right.png
.png
sidebar_btn.png
.png
sidebar_favorite_searchbar_bg.png
.png
sidebar_history_searchbar_bg.png
.png
sidebar_searchbar_bg.png
.png
sidebar_view_bg.png
.png
sitebar.png
.png
size-contrl.png
.png
statusbar_select_item.png
.png
statusbar_zoomlist_arrow.png
.png
stop.png
.png
tab1.png
.png
tab2.png
.png
tab_background.png
.png
tab_close_btn_small.png
.png
tab_item.png
.png
tab_item_list.png
.png
tab_loading.png
.png
tab_open_recent.png
.png
tab_show_recent.png
.png
tab_states.png
.png
tick.png
.png
voice1.png
.png
voice2.png
.png
waite.png
.png
zoom.png
.png
StartPage/OFLH.data
StartPage/blank.htm
.html
StartPage/coral404.htm
.html .js polyglot
StartPage/css/home.css
StartPage/css/incognito.css
StartPage/css/jquery.loadmask.css
StartPage/css/search.css
StartPage/fancybox/jquery.fancybox-1.3.4.css
StartPage/fancybox/jquery.fancybox-1.3.4.js
.js
StartPage/images/Wallpaper_01.jpg
.jpg
StartPage/images/Wallpaper_01_1366.jpg
.jpg
StartPage/images/Wallpaper_02.jpg
.jpg
StartPage/images/Wallpaper_02_1366.jpg
.jpg
StartPage/images/Wallpaper_03.jpg
.jpg
StartPage/images/Wallpaper_03_1366.jpg
.jpg
StartPage/images/Wallpaper_04.jpg
.jpg
StartPage/images/Wallpaper_04_1366.jpg
.jpg
StartPage/images/Wallpaper_Default.jpg
.jpg
StartPage/images/Wallpaper_pre_01.bmp
StartPage/images/Wallpaper_pre_02.bmp
StartPage/images/Wallpaper_pre_03.bmp
StartPage/images/Wallpaper_pre_04.bmp
StartPage/images/Wallpaper_pre_Default.bmp
StartPage/images/add.png
.png
StartPage/images/add_bg.png
.png
StartPage/images/add_hover.png
.png
StartPage/images/all_search_icon_baidu.gif
.gif
StartPage/images/bdBG.png
.png
StartPage/images/bg_404.png
.png
StartPage/images/blank.gif
.gif
StartPage/images/btn_sprite.png
.png
StartPage/images/close_tab.png
.png
StartPage/images/close_tab2.png
.png
StartPage/images/dd_dot.png
.png
StartPage/images/detail_bg.png
.png
StartPage/images/detail_btn.png
.png
StartPage/images/error/404_1.jpg
.jpg
StartPage/images/error/404_2.jpg
.jpg
StartPage/images/error/btn.jpg
.jpg
StartPage/images/gradient_bg.png
.png
StartPage/images/gradient_bottom.png
.png
StartPage/images/gradient_top.png
.png
StartPage/images/grid_load.png
.png
StartPage/images/guide_ie.gif
.gif
StartPage/images/home/2345_big.jpg
.jpg
StartPage/images/home/ai_taobao_big.jpg
.jpg
StartPage/images/home/baidu_big.jpg
.jpg
StartPage/images/home/book_big.jpg
.jpg
StartPage/images/home/dongman_big.jpg
.jpg
StartPage/images/home/fenghuang_big.jpg
.jpg
StartPage/images/home/game.2345.com.jpg
.jpg
StartPage/images/home/game2_big.jpg
.jpg
StartPage/images/home/game_big.jpg
.jpg
StartPage/images/home/qq_big.jpg
.jpg
StartPage/images/home/sina_big.jpg
.jpg
StartPage/images/home/sohu_big.jpg
.jpg
StartPage/images/home/taobao_big.jpg
.jpg
StartPage/images/home/tv_big.jpg
.jpg
StartPage/images/home/weibo_big.jpg
.jpg
StartPage/images/hot.png
.png
StartPage/images/ico_360.gif
.gif
StartPage/images/ico_ie.gif
.gif
StartPage/images/ico_sogo.gif
.gif
StartPage/images/ico_tt.gif
.gif
StartPage/images/iconBg.png
.png
StartPage/images/iconMap.png
.png
StartPage/images/icon_game.png
.png
StartPage/images/icon_goods.png
.png
StartPage/images/icon_inquiry.png
.png
StartPage/images/icon_movie.png
.png
StartPage/images/icon_music.png
.png
StartPage/images/icon_news.png
.png
StartPage/images/icon_novel.png
.png
StartPage/images/icon_weather.png
.png
StartPage/images/incognito/bgrx.jpg
.jpg
StartPage/images/incognito/main.jpg
.jpg
StartPage/images/incognito/main_search_bg1.png
.png
StartPage/images/incognito/main_search_bg2.png
.png
StartPage/images/incognito/main_search_bigicon_baidu.png
.png
StartPage/images/incognito/main_search_bigicon_google.png
.png
StartPage/images/incognito/main_search_bigicon_sogou.png
.png
StartPage/images/incognito/main_search_bigicon_soso.png
.png
StartPage/images/incognito/main_search_button_bg1.png
.png
StartPage/images/incognito/main_search_button_bg2.png
.png
StartPage/images/incognito/main_search_button_bg3.png
.png
StartPage/images/informantCenter/closeA.png
.png
StartPage/images/informantCenter/popA.png
.png
StartPage/images/list_bg.png
.png
StartPage/images/loading.gif
.gif
StartPage/images/main_bottombar_report.gif
.gif
StartPage/images/main_bottombar_report2.gif
.gif
StartPage/images/main_bottombar_report3.gif
.gif
StartPage/images/main_content_error.jpg
.jpg
StartPage/images/main_grid_bar_bj.gif
.gif
StartPage/images/main_grid_bar_blank.gif
.gif
StartPage/images/main_grid_bar_blank_hover.gif
.gif
StartPage/images/main_grid_bar_edit.gif
.gif
StartPage/images/main_grid_bar_edit_hover.gif
.gif
StartPage/images/main_grid_bar_remove.gif
.gif
StartPage/images/main_grid_bar_remove2.png
.png
StartPage/images/main_grid_bar_remove_hover.gif
.gif
StartPage/images/main_grid_item1.png
.png
StartPage/images/main_grid_item2.png
.png
StartPage/images/main_grid_item22.png
.png
StartPage/images/main_grid_item2_hover1.png
.png
StartPage/images/main_grid_item_add.jpg
.jpg
StartPage/images/main_grid_item_hover1.png
.png
StartPage/images/main_grid_item_loading.gif
.gif
StartPage/images/main_search_bg1.png
.png
StartPage/images/main_search_bg2.png
.png
StartPage/images/main_search_bg_search.png
.png
StartPage/images/main_search_bigicon_baidu.png
.png
StartPage/images/main_search_bigicon_google.png
.png
StartPage/images/main_search_bigicon_sogou.png
.png
StartPage/images/main_search_bigicon_soso.png
.png
StartPage/images/main_search_button_bg1.png
.png
StartPage/images/main_search_button_bg2.png
.png
StartPage/images/main_search_button_bg3.png
.png
StartPage/images/main_search_xl_arrow.png
.png
StartPage/images/main_search_xl_background1.gif
.gif
StartPage/images/main_search_xl_background2.gif
.gif
StartPage/images/page_white.png
.png
StartPage/images/popup_dialog_background.gif
.gif
StartPage/images/popup_dialog_background.png
.png
StartPage/images/popup_dialog_close.gif
.gif
StartPage/images/popup_dialog_close2.gif
.gif
StartPage/images/popup_dialog_edit_background.gif
.gif
StartPage/images/popup_dialog_edit_background2.gif
.gif
StartPage/images/popup_dialog_edit_bg.gif
.gif
StartPage/images/popup_dialog_edit_bg1.gif
.gif
StartPage/images/popup_dialog_edit_bg2.gif
.gif
StartPage/images/popup_dialog_list_button.gif
.gif
StartPage/images/popup_dialog_list_button2.gif
.gif
StartPage/images/popup_dialog_list_button3.gif
.gif
StartPage/images/popup_dialog_list_icon.gif
.gif
StartPage/images/popup_dialog_list_icon1.gif
.gif
StartPage/images/popup_dialog_list_icon2.gif
.gif
StartPage/images/popup_dialog_list_icon3.gif
.gif
StartPage/images/popup_dialog_list_icon4.gif
.gif
StartPage/images/popup_dialog_list_icon4_2.gif
.gif
StartPage/images/popup_dialog_list_tit.gif
.gif
StartPage/images/popup_dialog_list_tit2.gif
.gif
StartPage/images/popup_dialog_list_tit_hover.gif
.gif
StartPage/images/popup_dialog_list_tit_hover2.gif
.gif
StartPage/images/popup_dialog_preview_but.gif
.gif
StartPage/images/popup_dialog_preview_but2.gif
.gif
StartPage/images/preview_plus.bmp
StartPage/images/quan.gif
.gif
StartPage/images/search/main_search_icon_baidu.png
.png
StartPage/images/search/main_search_icon_bing.png
.png
StartPage/images/search/main_search_icon_dbaidu.png
.png
StartPage/images/search/main_search_icon_dgoogle.png
.png
StartPage/images/search/main_search_icon_gdangdang.png
.png
StartPage/images/search/main_search_icon_gjingdong.png
.png
StartPage/images/search/main_search_icon_gjyjo.png
.png
StartPage/images/search/main_search_icon_google.png
.png
StartPage/images/search/main_search_icon_gpaipai.png
.png
StartPage/images/search/main_search_icon_gtaobao.png
.png
StartPage/images/search/main_search_icon_ibaidu.png
.png
StartPage/images/search/main_search_icon_igoogle.png
.png
StartPage/images/search/main_search_icon_isoso.png
.png
StartPage/images/search/main_search_icon_mbaidu.png
.png
StartPage/images/search/main_search_icon_mgoogle.png
.png
StartPage/images/search/main_search_icon_msoso.png
.png
StartPage/images/search/main_search_icon_none.png
.png
StartPage/images/search/main_search_icon_sogou.png
.png
StartPage/images/search/main_search_icon_soso.png
.png
StartPage/images/search/main_search_icon_vbaidu.png
.png
StartPage/images/search/main_search_icon_vgoogle.png
.png
StartPage/images/search/main_search_icon_vsoso.png
.png
StartPage/images/search/main_search_icon_vtudou.png
.png
StartPage/images/search/main_search_icon_vyouku.png
.png
StartPage/images/search/main_search_icon_wbaidu.png
.png
StartPage/images/search/main_search_icon_wsoso.png
.png
StartPage/images/search/main_search_icon_wwiki.png
.png
StartPage/images/search/main_search_icon_xduote.png
.png
StartPage/images/search/main_search_icon_xshooter.png
.png
StartPage/images/search/main_search_icon_xverycd.png
.png
StartPage/images/search/main_search_icon_xxunlei.png
.png
StartPage/images/search/main_search_icon_yahoo.png
.png
StartPage/images/search/main_search_icon_youdao.png
.png
StartPage/images/search/main_search_logo_baidu.png
.png
StartPage/images/search/main_search_logo_bing.png
.png
StartPage/images/search/main_search_logo_dbaidu.png
.png
StartPage/images/search/main_search_logo_dgoogle.png
.png
StartPage/images/search/main_search_logo_gdangdang.png
.png
StartPage/images/search/main_search_logo_gjingdong.png
.png
StartPage/images/search/main_search_logo_gjyjo.png
.png
StartPage/images/search/main_search_logo_google.png
.png
StartPage/images/search/main_search_logo_gpaipai.png
.png
StartPage/images/search/main_search_logo_gtaobao.png
.png
StartPage/images/search/main_search_logo_ibaidu.png
.png
StartPage/images/search/main_search_logo_igoogle.png
.png
StartPage/images/search/main_search_logo_isoso.png
.png
StartPage/images/search/main_search_logo_mbaidu.png
.png
StartPage/images/search/main_search_logo_mgoogle.png
.png
StartPage/images/search/main_search_logo_msoso.png
.png
StartPage/images/search/main_search_logo_none.png
.png
StartPage/images/search/main_search_logo_sogou.png
.png
StartPage/images/search/main_search_logo_soso.png
.png
StartPage/images/search/main_search_logo_vbaidu.png
.png
StartPage/images/search/main_search_logo_vgoogle.png
.png
StartPage/images/search/main_search_logo_vsoso.png
.png
StartPage/images/search/main_search_logo_vtudou.png
.png
StartPage/images/search/main_search_logo_vyouku.png
.png
StartPage/images/search/main_search_logo_wbaidu.png
.png
StartPage/images/search/main_search_logo_wsoso.png
.png
StartPage/images/search/main_search_logo_wwiki.png
.png
StartPage/images/search/main_search_logo_xduote.png
.png
StartPage/images/search/main_search_logo_xshooter.png
.png
StartPage/images/search/main_search_logo_xverycd.png
.png
StartPage/images/search/main_search_logo_xxunlei.png
.png
StartPage/images/search/main_search_logo_yahoo.png
.png
StartPage/images/search/main_search_logo_youdao.png
.png
StartPage/images/search_baidu.png
.png
StartPage/images/search_google.png
.png
StartPage/images/search_sogou.png
.png
StartPage/images/sprite_0718.png
.png
StartPage/images/switch_bj.gif
.gif
StartPage/images/switch_combar_icon1.gif
.gif
StartPage/images/switch_widbar_icon2.gif
.gif
StartPage/images/wico_163.gif
.gif
StartPage/images/wico_2345.gif
.gif
StartPage/images/wico_baidu.gif
.gif
StartPage/images/wico_fenghuang.gif
.gif
StartPage/images/wico_google.gif
.gif
StartPage/images/wico_qq.gif
.gif
StartPage/images/wico_sina.gif
.gif
StartPage/images/wico_sogo.gif
.gif
StartPage/images/wico_sohu.gif
.gif
StartPage/images/wico_soso.gif
.gif
StartPage/incognito.htm
.html
StartPage/index.htm
.html .js polyglot
StartPage/js/coral_clickcount.js
.js
StartPage/js/coral_commom.js
.js
StartPage/js/coral_lib_min.js
.js
StartPage/js/coral_myfav.js
.js
StartPage/js/coral_se.js
.js
StartPage/js/coral_search.js
.js
StartPage/js/index.js
.js
StartPage/js/jquery.loadmask.js
.js
StartPage/js/move.js
.js
StartPage/js/png.js
.js
StartPage/js/zoom.js
.js
StartPage/malice.htm
.html .js polyglot
StartPage/pie/pie.htc
.js
StartPage/pop_edit.html
.js
StartPage/recovery.htm
.html .js polyglot
StartPage/search.htm
.html
Uninstall.exe
.exe windows:5 windows x86 arch:x86

b729b61eb1515fcf7b3e511e4e66258b

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

23/05/2013, 00:00

Not After

22/05/2016, 23:59

Subject

CN=2345.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=总办,O=2345.com,L=上海,ST=上海,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

fa:53:0a:68:17:95:e9:d7:d5:75:b8:9a:e0:5c:d8:ba:14:9c:d9:c0
Signer

Actual PE Digest

fa:53:0a:68:17:95:e9:d7:d5:75:b8:9a:e0:5c:d8:ba:14:9c:d9:c0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA

user32

ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/FileInfo.dll
.dll windows:4 windows x86 arch:x86

60a6a76a4a2f513656c08155184aa9fe

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

7d:58:56:94:3e:86:fa:49:d6:76:26:67:c1:cb:d4:54
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/06/2014, 00:00

Not After

02/09/2017, 23:59

Subject

CN=2345.com,OU=桌面软件事业部,O=2345.com,L=shanghai,ST=shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c3:c3:f3:fe:b7:49:a9:5d:ad:49:24:1c:94:ba:3f:3e:3f:e6:8b:d0
Signer

Actual PE Digest

c3:c3:f3:fe:b7:49:a9:5d:ad:49:24:1c:94:ba:3f:3e:3f:e6:8b:d0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

g:\FileInfo\FileInfoCoral\Release\FileInfo.pdb

Imports

kernel32

WaitForMultipleObjects
lstrcpyW
GlobalAlloc
WideCharToMultiByte
lstrcpynW
MultiByteToWideChar
GlobalFree
LoadLibraryW
GetProcAddress
CreateProcessW
GetFileSize
SetFilePointer
WriteFile
CreateFileW
FreeLibrary
ExpandEnvironmentStringsW
GetFileAttributesW
GetModuleFileNameW
OpenProcess
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LoadLibraryA
GetConsoleMode
GetConsoleCP
InitializeCriticalSection
HeapSize
GetLocaleInfoA
CreateToolhelp32Snapshot
GetCurrentProcessId
CloseHandle
Process32FirstW
TerminateProcess
Process32NextW
MulDiv
GetStringTypeW
GetStringTypeA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime

user32

GetClientRect
EndPaint
GetParent
GetPropW
BeginPaint
LoadCursorW
SetWindowLongW
SetCursor
CallWindowProcW
FillRect
GetClassNameA
GetWindowLongW
SendMessageW
DrawTextW
SetPropW
wsprintfW
IsWindow
PostMessageW
FindWindowW
ReleaseDC
GetDC
DefWindowProcW

gdi32

SetBkMode
SelectObject
GetDeviceCaps
SetTextColor

advapi32

DuplicateTokenEx
AdjustTokenPrivileges

shell32

ShellExecuteExW

Exports

Exports

CheckInstallTime
CheckUserID_01
CheckUserID_02
CreateLowIntegrityProcess
DPIScaleX
DPIScaleY
FindProc
GetSpreadUserID
GetSpreadUserID2
GetSpreadUserID3
GetSpreadUserID4
IsUrl2345
KillProc
RegisterUrlLink

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/RCPicPlugin.dll
.dll windows:4 windows x86 arch:x86

5834ffa2c2cb1b4ba4092d243f9e333e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

23/05/2013, 00:00

Not After

22/05/2016, 23:59

Subject

CN=2345.com,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=总办,O=2345.com,L=上海,ST=上海,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

17:56:7e:ce:b5:9a:dc:88:30:a6:b4:d8:90:ba:05:5d:fc:08:bc:d3
Signer

Actual PE Digest

17:56:7e:ce:b5:9a:dc:88:30:a6:b4:d8:90:ba:05:5d:fc:08:bc:d3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Arthur\root\Publish\coral\private\2345ExplorerSetup\RCSetup\Bin\Win32\Release\pdb\RCPicPlugin.pdb

Imports

gdiplus

GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipCreateSolidFill
GdipGetImagePaletteSize
GdiplusShutdown
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCloneImage
GdipDrawImageRectRect
GdipRestoreGraphics
GdipBitmapLockBits
GdipGetMatrixElements
GdipScaleWorldTransform
GdipDrawImagePointRectI
GdipReleaseDC
GdipDeleteMatrix
GdipGetRegionHRgn
GdipSaveGraphics
GdipTransformPointsI
GdipSetClipRectI
GdipDeleteRegion
GdipCreateRegion
GdipCloneBitmapAreaI
GdipGetClip
GdipBitmapUnlockBits
GdipTranslateWorldTransform
GdipCreateMatrix
GdipGetWorldTransform
GdipGraphicsClear
GdipGetDC
GdipDrawString
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipSetTextRenderingHint
GdipDrawImageRectRectI
GdipCreateImageAttributes
GdipCreateStringFormat
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipSetStringFormatLineAlign
GdipCreateFontFromLogfontW
GdipMeasureString
GdipDeleteFont
GdipFillRectangleI
GdipGetImagePixelFormat
GdipSetPixelOffsetMode
GdipGetImageWidth
GdipDisposeImage
GdipGetImageHeight
GdiplusStartup
GdipAlloc
GdipFree
GdipGetImageGraphicsContext
GdipDeleteBrush
GdipCreateFromHDC

kernel32

InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetSystemTimeAsFileTime
CreateThread
ExitThread
GetVersionExA
GetCommandLineA
VirtualQuery
lstrlenW
lstrcpyW
GlobalAlloc
WideCharToMultiByte
lstrcpynW
MultiByteToWideChar
GlobalFree
SetEndOfFile
FreeLibrary
GetProcAddress
DeleteCriticalSection
CloseHandle
GetVersionExW
EnterCriticalSection
LeaveCriticalSection
FindClose
GetFileAttributesW
LoadLibraryA
GetComputerNameW
ReadFile
GetModuleFileNameW
GetModuleHandleW
CreateFileW
GetACP
WriteFile
InitializeCriticalSection
FindFirstFileW
SetFilePointer
GetFileSizeEx
LoadLibraryW
RaiseException
GetVersion
SetErrorMode
FindResourceW
SizeofResource
FlushInstructionCache
LockResource
GetCurrentThreadId
LoadResource
GetCurrentProcess
SetLastError
lstrcatW
HeapFree
GetProcessHeap
HeapAlloc
InterlockedDecrement
DeviceIoControl
GetLastError
GlobalUnlock
GlobalLock
CreateDirectoryW
DeleteFileW
GetVolumeInformationW
GetDiskFreeSpaceW
ResumeThread
CreateEventW
ResetEvent
SetEvent
InterlockedExchangeAdd
GetFullPathNameW
SetFileAttributesW
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
VirtualProtect
VirtualAlloc
GetModuleHandleA
GetSystemInfo
HeapSize
ExitProcess
GetCPInfo
GetOEMCP
IsValidCodePage
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetModuleFileNameA
RtlUnwind
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
FlushFileBuffers
CreateFileA
InterlockedCompareExchange
IsProcessorFeaturePresent
lstrlenA
TerminateProcess
FreeResource

user32

SetCursor
SendMessageA
GetWindowTextLengthW
SetForegroundWindow
InvalidateRect
IsWindow
GetDC
DispatchMessageW
SetActiveWindow
DestroyWindow
CreateWindowExW
SetRect
GetActiveWindow
MapWindowPoints
RegisterClassExW
GetWindow
TranslateMessage
GetMessageW
EnableWindow
SystemParametersInfoW
GetDesktopWindow
LoadCursorW
PeekMessageW
GetClassInfoExW
RedrawWindow
SetWindowPos
SetRectEmpty
SetWindowRgn
GetWindowTextW
SetClassLongW
GetWindowRect
IsWindowEnabled
SetWindowLongW
LoadIconW
CopyRect
EndPaint
GetWindowLongW
GetDlgCtrlID
PostMessageW
OffsetRect
GetKeyState
CallWindowProcW
MoveWindow
BeginPaint
CharNextW
ShowWindow
PtInRect
TrackMouseEvent
ReleaseCapture
DefWindowProcW
SetWindowTextW
GetDlgItem
SendMessageW
wsprintfW
CharPrevW
GetClientRect
UnregisterClassA
SetCapture
ReleaseDC
ScreenToClient
IsRectEmpty
InflateRect
GetParent
UnionRect

gdi32

SelectClipRgn
SetGraphicsMode
SetWorldTransform
SetArcDirection
SetStretchBltMode
SetBrushOrgEx
SetBkMode
SetDCBrushColor
CreateSolidBrush
EnumFontsW
GetStockObject
CreateFontIndirectW
GetObjectW
CreateCompatibleDC
SetBkColor
SelectObject
SetViewportOrgEx
BitBlt
CreatePolygonRgn
SetTextColor
SetROP2
DeleteDC
SetDCPenColor
CreateCompatibleBitmap
ExtTextOutW
DeleteObject

advapi32

RegEnumKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
GetUserNameW

shell32

SHGetFileInfoW
SHGetPathFromIDListW
ShellExecuteW
SHGetSpecialFolderLocation
SHBrowseForFolderW

ole32

OleInitialize
OleUninitialize
CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
CreateStreamOnHGlobal
CoTaskMemFree

oleaut32

SysAllocString
VariantInit
VariantClear
SysFreeString

shlwapi

StrToIntA

comctl32

InitCommonControlsEx

wininet

InternetReadFile
HttpOpenRequestW
InternetConnectW
HttpEndRequestW
HttpSendRequestExW
InternetCloseHandle
HttpQueryInfoW
InternetWriteFile
InternetCrackUrlW
InternetOpenW
InternetSetOptionW

Exports

Exports

CheckSignerInfo
GetCheckValue
GetInstDir
GetInstallResult
GetSkinSelected
Init
IsDefaultExplorer
OnRepair
OnSetup
OnSetupPost
OnUninstall
PopInt
PopString
PushInt
PushString
SaveStatisticsInfo
SendInstallStat
SetProgress
SetRTL
SetStepCount
ShowInstall
ShowUnInstall
UpdateStatisticsInfo

Sections

.text
Size: 312KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 716KB - Virtual size: 713KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:5 windows x86 arch:x86

039bcbc605477e8e87ec550c2e60e748

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08/11/2006, 00:00

Not After

07/11/2021, 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

7d:58:56:94:3e:86:fa:49:d6:76:26:67:c1:cb:d4:54
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

04/06/2014, 00:00

Not After

02/09/2017, 23:59

Subject

CN=2345.com,OU=桌面软件事业部,O=2345.com,L=shanghai,ST=shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3a:76:7a:70:e7:05:c3:f0:07:37:70:9c:21:6c:e5:ec:85:9a:34:b3
Signer

Actual PE Digest

3a:76:7a:70:e7:05:c3:f0:07:37:70:9c:21:6c:e5:ec:85:9a:34:b3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary

user32

wsprintfW

ole32

CLSIDFromString
StringFromGUID2

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
UserCenter/css/p_login.css
UserCenter/css/sign.css
UserCenter/images/lg_retry.png
.png
UserCenter/images/lg_sprite.png
.png
UserCenter/images/retry_banner.png
.png
UserCenter/images/retry_banner2.png
.png
UserCenter/images/sign_btnbg.png
.png
UserCenter/images/sign_btnbg_h.png
.png
UserCenter/images/sign_delbtn.png
.png
UserCenter/images/sign_dropbtn.png
.png
UserCenter/images/yzm.png
.png
UserCenter/regRetry.htm
.html .js polyglot
UserCenter/retry.htm
.html .js polyglot
msvcr80.dll
.dll windows:4 windows x86 arch:x86

7fecbc4a16a5dc85a5394a1df6217680

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcr80.i386.pdb

Imports

msvcrt

_getdrives

kernel32

GetStringTypeA
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetSystemDirectoryW
GetLongPathNameW
GetCurrentThreadId
TlsGetValue
DebugBreak
OutputDebugStringA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
Sleep
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
VirtualAlloc
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteConsoleW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
InitializeCriticalSection
MultiByteToWideChar
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
SetLocalTime
GetStringTypeW
LoadLibraryW
GetLocaleInfoA
GetLocaleInfoW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
RtlUnwind
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
SetStdHandle
CreateFileA
CompareStringA
CompareStringW
Beep
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
RaiseException
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
CreateProcessW
HeapValidate
HeapCompact
HeapWalk
VirtualProtect
GetSystemInfo
VirtualQuery
IsDBCSLeadByteEx
ReadConsoleA
ReadConsoleW
SetConsoleMode
SetEndOfFile
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
LockFile
UnlockFile
CreatePipe
ReadFile
CreateFileW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_typeid@std@@QAE@ABV01@@Z
??0bad_typeid@std@@QAE@PBD@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1__non_rtti_object@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_typeid@std@@UAE@XZ
??1exception@std@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??2@YAPAXIHPBDH@Z
??3@YAXPAX@Z
??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z
??4bad_cast@std@@QAEAAV01@ABV01@@Z
??4bad_typeid@std@@QAEAAV01@ABV01@@Z
??4exception@std@@QAEAAV01@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
??9type_info@@QBE_NABV0@@Z
??_7__non_rtti_object@std@@6B@
??_7bad_cast@std@@6B@
??_7bad_typeid@std@@6B@
??_7exception@@6B@
??_7exception@std@@6B@
??_Fbad_cast@std@@QAEXXZ
??_Fbad_typeid@std@@QAEXXZ
??_U@YAPAXI@Z
??_U@YAPAXIHPBDH@Z
??_V@YAXPAX@Z
?_Name_base@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Name_base_internal@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Type_info_dtor@type_info@@CAXPAV1@@Z
?_Type_info_dtor_internal@type_info@@CAXPAV1@@Z
?_ValidateExecute@@YAHP6GHXZ@Z
?_ValidateRead@@YAHPBXI@Z
?_ValidateWrite@@YAHPAXI@Z
?_inconsistency@@YAXXZ
?_invalid_parameter@@YAXPBG00II@Z
?_is_exception_typeof@@YAHABVtype_info@@PAU_EXCEPTION_POINTERS@@@Z
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
?_open@@YAHPBDHH@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZH@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?_sopen@@YAHPBDHHH@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?_wopen@@YAHPB_WHH@Z
?_wsopen@@YAHPB_WHHH@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZH@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZH@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?swprintf@@YAHPAGIPBGZZ
?swprintf@@YAHPA_WIPB_WZZ
?terminate@@YAXXZ
?unexpected@@YAXXZ
?vswprintf@@YAHPA_WIPB_WPAD@Z
?what@exception@std@@UBEPBDXZ
@_calloc_crt@8
@_malloc_crt@4
@_realloc_crt@8
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CRT_RTC_INITW
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_Getdays
_Getmonths
_Gettnames
_HUGE
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_Strftime
_XcptFilter
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CppXcptFilter
__CxxCallUnwindDelDtor
__CxxCallUnwindDtor
__CxxCallUnwindStdDelDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__STRINGTOLD_L
__TypeMatch
___fls_getvalue@4
___fls_setvalue@8
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___mb_cur_max_l_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__clean_type_info_names_internal
__control87_2
__create_locale
__crtCompareStringA
__crtCompareStringW
__crtGetLocaleInfoW
__crtGetStringTypeW
__crtLCMapStringA
__crtLCMapStringW
__daylight
__dllonexit
__doserrno
__dstbias
__fpecode
__free_locale
__get_app_type
__get_current_locale
__get_flsindex
__get_tlsindex
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__lc_clike
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv
__lconv_init
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_atanf
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_log10f
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osplatform
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__set_app_type
__set_flsgetvalue
__setlc_active
__setusermatherr
__strncnt
__swprintf_l
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__unDNameHelper
__uncaught_exception
__unguarded_readlc_active
__vswprintf_l
__wargv
__wcserror
__wcserror_s
__wcsncnt
__wgetmainargs
__winitenv
_abnormal_termination
_abs64
_access
_access_s
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_amsg_exit
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_crt
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_commode
_configthreadlocale
_control87
_controlfp
_controlfp_s
_copysign
_cprintf
_cprintf_l
_cprintf_p
_cprintf_p_l
_cprintf_s
_cprintf_s_l
_cputs
_cputws
_creat
_create_locale
_crt_debugger_hook
_cscanf
_cscanf_l
_cscanf_s
_cscanf_s_l
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_cwait
_cwprintf
_cwprintf_l
_cwprintf_p
_cwprintf_p_l
_cwprintf_s
_cwprintf_s_l
_cwscanf
_cwscanf_l
_cwscanf_s
_cwscanf_s_l
_daylight
_decode_pointer
_difftime32
_difftime64
_dosmaperr
_dstbias
_dup
_dup2
_dupenv_s
_ecvt
_ecvt_s
_encode_pointer
_encoded_null
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_except_handler4_common
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fclose_nolock
_fcloseall
_fcvt
_fcvt_s
_fdopen
_fflush_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filbuf
_filelength
_filelengthi64
_fileno
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_free_locale
_freea
_freea_s
_freefls
_fscanf_l
_fscanf_s_l
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_ftell_nolock
_ftelli64
_ftelli64_nolock
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_ftol
_fullpath
_futime32
_futime64
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwrite_nolock
_fwscanf_l
_fwscanf_s_l
_gcvt
_gcvt_s
_get_amblksiz
_get_current_locale
_get_daylight
_get_doserrno
_get_dstbias
_get_errno
_get_fmode
_get_heap_handle
_get_invalid_parameter_handler
_get_osfhandle
_get_osplatform
_get_osver
_get_output_format
_get_pgmptr
_get_printf_count_output
_get_purecall_handler
_get_sbh_threshold
_get_terminate
_get_timezone
_get_tzname
_get_unexpected
_get_winmajor
_get_winminor
_get_winver
_get_wpgmptr
_getch
_getch_nolock
_getche
_getche_nolock
_getcwd
_getdcwd
_getdcwd_nolock
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp

Sections

.text
Size: 396KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

767add0a5f574391ab7ce7526933359a

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78Certificate

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

39:56:7d:02:28:d7:6a:bc:6e:b9:d1:13:a8:ef:60:45:59:3d:00:35Signer

Headers

File Characteristics

PDB Paths

Imports

kernel32

shell32

ole32

Exports

Exports

Sections

.text Size: 81KB - Virtual size: 81KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 74KB - Virtual size: 74KB

74cb78a18e97b6ca876d6d27aee24dd8

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78Certificate

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

a4:1c:ae:d2:c8:8c:e9:13:54:d4:ef:4c:80:f2:8a:c7:ef:45:a2:dcSigner

Headers

File Characteristics

PDB Paths

Imports

kernel32

shell32

ole32

Exports

Exports

Sections

.text Size: 84KB - Virtual size: 83KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 11KB - Virtual size: 10KB

30e07d82f814d58262d6ff0b0476e0f4

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78Certificate

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78Certificate

Extended Key Usages

Key Usages

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

39:56:7d:02:28:d7:6a:bc:6e:b9:d1:13:a8:ef:60:45:59:3d:00:35
Signer

.text
Size: 81KB - Virtual size: 81KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 74KB - Virtual size: 74KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

a4:1c:ae:d2:c8:8c:e9:13:54:d4:ef:4c:80:f2:8a:c7:ef:45:a2:dc
Signer

.text
Size: 84KB - Virtual size: 83KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 11KB - Virtual size: 10KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

5d:23:31:7a:bd:56:54:02:15:0e:66:e2:2c:17:19:17:3f:3f:fb:3c
Signer

.text
Size: 128KB - Virtual size: 125KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 8KB - Virtual size: 14KB

.rsrc
Size: 132KB - Virtual size: 129KB

.reloc
Size: 12KB - Virtual size: 10KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

63:b4:d4:81:05:76:53:2e:1b:10:b9:9d:39:89:4c:78
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

a5:bc:59:74:b3:a2:32:26:02:f5:73:1e:22:04:61:a7:ea:98:f8:45
Signer

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 257KB - Virtual size: 257KB

.data
Size: 36KB - Virtual size: 43KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 109KB - Virtual size: 109KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate