2636e0a83215d843cb4e1108617d1e03_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2636e0a83215d843cb4e1108617d1e03_JaffaCakes118
Size

5.2MB
MD5

2636e0a83215d843cb4e1108617d1e03
SHA1

12783d8e2967454484d3d6270806c657830ce5ec
SHA256

bb1733ffd863fd5727e82950e67525d05875f3019700dc1ac5b81d16e3fa562d
SHA512

dde2b0f9ab10d62038c0cf3d745d798f341782d11b84b906a862a26fc31da78ab37af5a5ac47c7c094d7362917a22cbd9a9a034f1b8d28abc8a7edf021a958ab
SSDEEP

98304:+ZEY+yFIc5vkJCoWaETo7sG1FI4XGjb6IE88dEmMPR97n9GQjlJ:+ZFFIcAC9w1FI4WH6tpamqnn4Qj

Score

3^/10

Malware Config

Signatures

Unsigned PE 9 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/inetc.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/components/RadioWMPCore.dll
unpack001/$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/components/RadioWMPCoreGecko19.dll
unpack001/CMenu.dll
unpack001/ap.dll
unpack001/desktop.dll

Files

2636e0a83215d843cb4e1108617d1e03_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b729b61eb1515fcf7b3e511e4e66258b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:01
Certificate

Issuer

OU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\, Inc.,C=US

Not Before

16/11/2006, 01:54

Not After

16/11/2026, 01:54

Subject

SERIALNUMBER=07969287,CN=Go Daddy Secure Certification Authority,OU=http://certificates.godaddy.com/repository,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

27:dd:e5:5d:2f:33:7f
Certificate

Issuer

SERIALNUMBER=07969287,CN=Go Daddy Secure Certification Authority,OU=http://certificates.godaddy.com/repository,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

28/10/2010, 14:33

Not After

27/10/2011, 13:30

Subject

CN=New IT Limited,O=New IT Limited,L=Nicosia,ST=Nicosia,C=CY

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

ec:0b:c5:15:4a:ec:d4:69:f8:15:d1:bf:91:c8:2f:47:be:37:07:4e
Signer

Actual PE Digest

ec:0b:c5:15:4a:ec:d4:69:f8:15:d1:bf:91:c8:2f:47:be:37:07:4e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA

user32

ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation

advapi32

RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 948KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/4sharedTlbr.exe
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

37:36:da:15:af:64:76:32:cc:e6:1c:d4:1b:65:77:dd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

17/02/2010, 00:00

Not After

29/03/2013, 23:59

Subject

CN=Conduit Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Conduit Ltd.,ST=Israel,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:5 windows x86 arch:x86

cd90e33ffbc335413a25300c682c83df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
GetModuleHandleW
GlobalLock
GlobalUnlock
GetCurrentDirectoryW
SetCurrentDirectoryW
GetPrivateProfileIntW
GetPrivateProfileStringW
lstrcatW
WritePrivateProfileStringW
lstrcpynW
lstrlenW
lstrcpyW
GlobalFree
GlobalAlloc

user32

OpenClipboard
DestroyIcon
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
SetWindowLongW
GetClientRect
SetWindowRgn
LoadIconW
LoadImageW
CreateWindowExW
MapDialogRect
GetClipboardData
GetWindowRect
CreateDialogParamW
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
SetCursor
DrawTextW
GetWindowLongW
DrawFocusRect
CallWindowProcW
PostMessageW
wsprintfW
CharNextW
MessageBoxW
CloseClipboard
GetDlgCtrlID
MapWindowPoints
SetWindowPos
PtInRect
GetWindowTextW
SetWindowTextW
SendMessageW
DestroyWindow

gdi32

SelectObject
CreateRectRgn
GetObjectW
CombineRgn
DeleteObject
CreateCompatibleDC
GetDIBits
SetTextColor

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
SHGetDesktopFolder

comdlg32

GetOpenFileNameW
CommDlgExtendedError
GetSaveFileNameW

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:5 windows x86 arch:x86

039bcbc605477e8e87ec550c2e60e748

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary

user32

wsprintfW

ole32

CLSIDFromString
StringFromGUID2

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/inetc.dll
.dll windows:4 windows x86 arch:x86

3c93218dab2ce0bad6fd3f1bbe880f06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

wcschr
_adjust_fdiv
malloc
_initterm
free
strlen
strchr
strrchr
wcsrchr
wcstoul
memset
wcsstr
wcstol

kernel32

DeleteFileW
WideCharToMultiByte
CreateFileA
CreateThread
WaitForSingleObject
TerminateThread
GetModuleHandleW
MulDiv
lstrcpyW
GlobalAlloc
LoadLibraryW
GetProcAddress
lstrcmpiW
lstrlenW
WriteFile
ReadFile
lstrcmpW
lstrcpynW
GetLastError
CreateFileW
GlobalFree
CloseHandle
SleepEx
SetFilePointer
GetTickCount
lstrcatW
GetFileSize

user32

MessageBoxW
GetParent
ShowWindow
SetWindowLongW
IsWindow
SetWindowTextW
SendDlgItemMessageW
GetDlgItem
PostMessageW
GetWindowTextW
SendMessageW
SetDlgItemTextW
SetWindowPos
SystemParametersInfoW
GetClientRect
GetWindowRect
SetTimer
LoadIconW
DestroyWindow
KillTimer
UpdateWindow
RedrawWindow
DispatchMessageW
TranslateMessage
IsDialogMessageW
GetMessageW
IsWindowVisible
EnableWindow
CreateDialogParamW
FindWindowExW
wsprintfA
wsprintfW
GetWindowLongW

wininet

HttpSendRequestW
HttpSendRequestExW
HttpQueryInfoW
FtpCreateDirectoryW
FtpOpenFileW
InternetGetLastResponseInfoW
InternetSetFilePointer
InternetSetOptionW
InternetQueryOptionW
HttpAddRequestHeadersA
InternetCloseHandle
InternetErrorDlg
HttpAddRequestHeadersW
HttpOpenRequestW
HttpEndRequestW
InternetConnectW
InternetCrackUrlW
InternetOpenW
InternetReadFile
InternetWriteFile

comctl32

ord17

Exports

Exports

get
head
post
put

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:5 windows x86 arch:x86

9ea5bdc8c90dfcffe309465c26c89758

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
MulDiv
lstrlenW
HeapFree
GetProcessHeap
lstrcmpiW
HeapReAlloc
lstrcpynW
GetFileAttributesW
lstrcpyW
GetCurrentDirectoryW
SetCurrentDirectoryW
HeapAlloc
GlobalFree

user32

LoadCursorW
RemovePropW
DrawFocusRect
GetPropW
DrawTextW
GetWindowTextW
GetDlgItem
SetWindowLongW
SetWindowPos
CreateDialogParamW
MapWindowPoints
GetWindowRect
SetCursor
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
GetClientRect
CharPrevW
CallWindowProcW
SetPropW
DestroyWindow
MapDialogRect
CharNextW
SendMessageW
GetWindowLongW

gdi32

SetTextColor

shell32

SHGetPathFromIDListW
SHBrowseForFolderW

comdlg32

GetSaveFileNameW
CommDlgExtendedError
GetOpenFileNameW

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 590B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/setup.ini
$PLUGINSDIR/toolbar.bmp
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/META-INF/manifest.mf
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/META-INF/zigbert.rsa
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/META-INF/zigbert.sf
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/chrome.manifest
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/chrome/4shared.com.jar
.zip
content/AIOWindow.xul
.js .xml polyglot
content/ScrollbarBindings.xml
.xml
content/about.xul
.xml
content/aboutCE.xul
.xml
content/aboutTabs.htm
.html
content/alert-bindings.xml
.xml
content/alertAbout.xul
.xml
content/alertMain.xul
.xml
content/alertPreview.xul
.xml
content/alertSettings.xul
.xml
content/app-added-tooltip-bindings.xml
.js .xml polyglot
content/app-toolbar-button-rtl.xml
.js .xml polyglot
content/app-toolbar-button.xml
.js .xml polyglot
content/autocomplete-menulist.xml
.js .xml polyglot
content/bgAIOWin.xul
.js .xml polyglot
content/chat-menu-button.xml
.js .xml polyglot
content/chevronDialog.xul
.js .xml polyglot
content/chevronDialogFF3.xul
.js .xml polyglot
content/contents.rdf
.xml
content/ctoolbar.js
.js
content/dialogsWindow.xul
.js .xml polyglot
content/dialogsWindowWithoutTransparent.xul
.js .xml polyglot
content/enAddEdit.xul
.js .xml polyglot
content/enConfirm.xul
.js .xml polyglot
content/enSettings.xul
.js .xml polyglot
content/enTestAccount.xul
.xml
content/engineOverlay.xul
.js .xml polyglot
content/extensions-uninstall-overlay.xul
.xml
content/fbSettings.xul
.xml
content/feed-bindings.xml
.js .xml polyglot
content/gadgets-bindings.xml
.js .xml polyglot
content/manageMenu.xul
.xml
content/menu-items-bindings.xml
.xml
content/multicommunity.xul
.xml
content/multicommunity_detected.xul
.js .xml polyglot
content/multicommunity_download.xul
.xml
content/myStuffError.xul
.xml
content/options.xul
.xml
content/optionsCE.xul
.xml
content/popup.xul
.js .xml polyglot
content/popup_chat.xul
.js .xml polyglot
content/radio.xml
.xml
content/radio_addEdit.xul
.js .xml polyglot
content/radio_menu.xul
.xml
content/radio_search.xul
.xml
content/radio_volume.xul
.xml
content/toolbarOverlay.xul
.js .xml polyglot
content/toolbarbutton-mirrored-icon.xml
.js .xml polyglot
content/truste.xul
.xml
content/twitter-bindings.xml
.js .xml polyglot
content/uninstall.xul
.xml
content/uninstallEngine.xul
.xml
content/wait.xul
.xml
content/weather.xul
.xml
content/weatherRTL.xul
.js .xml polyglot
skin/AIO/ajax-loader2.gif
.gif
skin/AIO/arrow.png
.png
skin/AOL_load.gif
.gif
skin/about/icon.png
.png
skin/about_bg.png
.png
skin/about_icon.png
.png
skin/alert/AboutTitleBarImage.gif
.gif
skin/alert/BottomStrip.gif
.gif
skin/alert/CloseButtonAll.gif
.gif
skin/alert/NextAll.gif
.gif
skin/alert/OptionsTitleBarImage.gif
.gif
skin/alert/PrevAll.gif
.gif
skin/alert/SettingsButtonAll.gif
.gif
skin/alert/TopStrip.gif
.gif
skin/alert/TrayIcon.ico
skin/alert/TrayIconAnimated.gif
.gif
skin/alert/TrayIconBlocked.ico
skin/alert/about.css
skin/alert/aboutAll.gif
.gif
skin/alert/alert.css
skin/alert/alert24px.png
.png
skin/alert/btn.gif
.gif
skin/alert/btn_dn.gif
.gif
skin/alert/btn_hover.gif
.gif
skin/alert/dot.gif
.gif
skin/alert/faqAll.gif
.gif
skin/alert/feedbackAll.gif
.gif
skin/alert/preview.css
skin/alert/privacyAll.gif
.gif
skin/alert/settings.css
skin/alert/viewRecentTitleBarImage.gif
.gif
skin/appDetection/appDetection.css
skin/appDetection/icon.png
.png
skin/appView/MinimizeButton.png
.png
skin/appView/MinimizeButton_RTL.png
.png
skin/appView/digits/+.png
.png
skin/appView/digits/0.png
.png
skin/appView/digits/1.png
.png
skin/appView/digits/2.png
.png
skin/appView/digits/3.png
.png
skin/appView/digits/4.png
.png
skin/appView/digits/5.png
.png
skin/appView/digits/6.png
.png
skin/appView/digits/7.png
.png
skin/appView/digits/8.png
.png
skin/appView/digits/9.png
.png
skin/appView/digits/right.png
.png
skin/appView/dropDown/menu-button-clicked.png
.png
skin/appView/dropDown/menu-button-clicked_RTL.png
.png
skin/appView/dropDown/menu-button-hover.png
.png
skin/appView/dropDown/menu-button-hover_RTL.png
.png
skin/appView/facebook_loader.gif
.gif
skin/appView/fallback24.png
.png
skin/appView/hover_gloss_options.png
.png
skin/appView/minimize-gadget.png
.png
skin/appView/notification1Digit.png
.png
skin/appView/notification2Digits.png
.png
skin/appView/notification3Digits.png
.png
skin/appView/notification4Digits.png
.png
skin/appView/notificationBGImage1Digit.png
.png
skin/appView/notificationBGImage2Digits.png
.png
skin/appView/notificationBGImage3Digits.png
.png
skin/autocomplete.css
skin/bg_about.gif
.gif
skin/blank.png
.png
skin/block.png
.png
skin/chat/HasUsersOnline.gif
.gif
skin/chevron.png
.png
skin/chevron_rtl.png
.png
skin/contents.rdf
.xml
skin/devider.gif
.gif
skin/dialogHeader.gif
.gif
skin/ebdialogstyle.css
skin/ebtoolbarbuttonstyleLinux.css
skin/ebtoolbarbuttonstyleMac.css
skin/ebtoolbarbuttonstyleWinXP.css
skin/ebtoolbarstyle.css
skin/email.png
.png
skin/emailnew.png
.png
skin/emailnewsmall.png
.png
skin/enSound.wav
skin/engine_icon.png
.png
skin/expand.png
.png
skin/facebook/component_icon_big.png
.png
skin/facebook/facebook.css
skin/facebook/facebook_logo.png
.png
skin/facebook/faq.png
.png
skin/facebook/faq_over.png
.png
skin/facebook/privacy.png
.png
skin/facebook/privacy_over.png
.png
skin/facebook/separator_line.jpg
.jpg
skin/feed.css
skin/feedRTL_bg.png
.png
skin/feed_bg.png
.png
skin/feed_comment_all.png
.png
skin/feed_delete_all.png
.png
skin/feed_env_read.png
.png
skin/feed_env_unread.png
.png
skin/feed_read_all.png
.png
skin/feed_refresh_all.png
.png
skin/feed_unread_all.png
.png
skin/floatingToolbar.css
skin/gadgets/MyStuff.png
.png
skin/gadgets/MyStuffBlinkAndHighlight.gif
.gif
skin/gadgets/MyStuffHighlight.png
.png
skin/gadgets/chat/Close.gif
.gif
skin/gadgets/chat/CloseHover.gif
.gif
skin/gadgets/chat/ClosePressed.gif
.gif
skin/gadgets/chat/EditDown.gif
.gif
skin/gadgets/chat/EditDownHover.gif
.gif
skin/gadgets/chat/EditDownPressed.gif
.gif
skin/gadgets/chat/EditUp.gif
.gif
skin/gadgets/chat/EditUpHover.gif
.gif
skin/gadgets/chat/EditUpPressed.gif
.gif
skin/gadgets/chat/GadgetWindow.css
skin/gadgets/chat/Minimized.gif
.gif
skin/gadgets/chat/MinimizedHover.gif
.gif
skin/gadgets/chat/MinimizedPressed.gif
.gif
skin/gadgets/chat/WindowTop.gif
.gif
skin/gadgets/gadget/Close.gif
.gif
skin/gadgets/gadget/CloseHover.gif
.gif
skin/gadgets/gadget/ClosePressed.gif
.gif
skin/gadgets/gadget/GadgetWindow.css
skin/gadgets/gadget/Minimize.png
.png
skin/gadgets/gadget/MinimizeHover.png
.png
skin/gadgets/gadget/MinimizePressed.png
.png
skin/gadgets/gadget/WindowTop.gif
.gif
skin/gadgets/gadget/thumb/bg-shadow-bottom-left.png
.png
skin/gadgets/gadget/thumb/bg-shadow-bottom-right.png
.png
skin/gadgets/gadget/thumb/bg-shadow-bottom.png
.png
skin/gadgets/gadget/thumb/bg-shadow-left.png
.png
skin/gadgets/gadget/thumb/bg-shadow-right.png
.png
skin/gadgets/gadget/thumb/bg-shadow-top-left.png
.png
skin/gadgets/gadget/thumb/bg-shadow-top-right.png
.png
skin/gadgets/gadget/thumb/bg-shadow-top.png
.png
skin/gadgets/gadget/thumb/bg.png
.png
skin/gadgets/gadget/thumb/close.png
.png
skin/gadgets/gadget/thumb/close_hover.png
.png
skin/gadgets/gadget/thumb/close_pressed.png
.png
skin/gadgets/gadget/thumb/hovered-bg.png
.png
skin/gadgets/gadget/thumb/minimized.css
skin/go_btn.gif
.gif
skin/go_btnRTL.gif
.gif
skin/highlighter.png
.png
skin/highlighterDisabled.png
.png
skin/highlighterSearchTerm.png
.png
skin/highlighter_chevron.png
.png
skin/loading.gif
.gif
skin/manage.gif
.gif
skin/mc_add_active.png
.png
skin/mc_add_candidate.png
.png
skin/mc_add_flashing.gif
.gif
skin/mc_add_inactive.png
.png
skin/mc_community.png
.png
skin/mc_community_dialog.png
.png
skin/mc_community_dialog_over.png
.png
skin/mc_community_selected.png
.png
skin/mc_community_starred.png
.png
skin/mc_options.png
.png
skin/mc_search.png
.png
skin/mc_tooltip_addTo.gif
.gif
skin/mc_tooltip_addTo_dn.gif
.gif
skin/mc_tooltip_addTo_over.gif
.gif
skin/mc_tooltip_close.gif
.gif
skin/mc_tooltip_close_dn.gif
.gif
skin/mc_tooltip_close_over.gif
.gif
skin/mc_tooltip_next.gif
.gif
skin/mc_tooltip_next_dis.gif
.gif
skin/mc_tooltip_next_dn.gif
.gif
skin/mc_tooltip_next_over.gif
.gif
skin/mc_tooltip_prev.gif
.gif
skin/mc_tooltip_prev_dis.gif
.gif
skin/mc_tooltip_prev_dn.gif
.gif
skin/mc_tooltip_prev_over.gif
.gif
skin/mc_tooltip_separator.gif
.gif
skin/minibrowser.png
.png
skin/multicommunityDialog_bg.png
.png
skin/myGadgets_detect_x.png
.png
skin/myGadgets_detect_x_dn.png
.png
skin/myGadgets_detect_x_hover.png
.png
skin/myStuff/add.png
.png
skin/myStuff/myStuff.css
skin/myStuff/options.png
.png
skin/myStuff/plus-icon.png
.png
skin/radio/Podcast.png
.png
skin/radio/RadioCombo.gif
.gif
skin/radio/RadioEqualizerLoading.gif
.gif
skin/radio/RadioEqualizerPause.gif
.gif
skin/radio/RadioEqualizerPlay.gif
.gif
skin/radio/RadioEqualizerReal.ico
skin/radio/RadioEqualizerSilent.gif
.gif
skin/radio/RadioError.gif
.gif
skin/radio/RadioErrow.ico
skin/radio/RadioErrowRTL.ico
skin/radio/RadioImgChev.ico
skin/radio/RadioMaxi.gif
.gif
skin/radio/RadioMaxi_dn.gif
.gif
skin/radio/RadioMaxi_on.gif
.gif
skin/radio/RadioMini.gif
.gif
skin/radio/RadioMini_dn.gif
.gif
skin/radio/RadioMini_on.gif
.gif
skin/radio/RadioPause.gif
.gif
skin/radio/RadioPauseChev.ico
skin/radio/RadioPause_dn.gif
.gif
skin/radio/RadioPause_on.gif
.gif
skin/radio/RadioPlay.gif
.gif
skin/radio/RadioPlayChev.ico
skin/radio/RadioPlay_dn.gif
.gif
skin/radio/RadioPlay_on.gif
.gif
skin/radio/RadioSliderBG.gif
.gif
skin/radio/RadioSliderBall.gif
.gif
skin/radio/RadioStop.gif
.gif
skin/radio/RadioStopChev.ico
skin/radio/RadioStop_dn.gif
.gif
skin/radio/RadioStop_on.gif
.gif
skin/radio/RadioStrip.gif
.gif
skin/radio/RadioTooltipPlaying.gif
.gif
skin/radio/RadioTooltipStopped.gif
.gif
skin/radio/RadioVolume.gif
.gif
skin/radio/RadioVolume_dn.gif
.gif
skin/radio/RadioVolume_on.gif
.gif
skin/radio/RealLogo.png
.png
skin/radio/WMPLogo.png
.png
skin/radio/default_radio_skin.xml
.xml
skin/radio/default_skin.xml
.xml
skin/radio/defaultskin/RadioImgChev.ico
skin/radio/defaultskin/RadioPlayChev.ico
skin/radio/defaultskin/RadioStopChev.ico
skin/radio/defaultskin/display.gif
.gif
skin/radio/defaultskin/equalizer_buffering.gif
.gif
skin/radio/defaultskin/equalizer_error.gif
.gif
skin/radio/defaultskin/equalizer_playing.gif
.gif
skin/radio/defaultskin/equalizer_stopped.gif
.gif
skin/radio/defaultskin/equalizer_stopped1.gif
.gif
skin/radio/defaultskin/maxi.png
.png
skin/radio/defaultskin/maxi_dn.png
.png
skin/radio/defaultskin/maxi_over.png
.png
skin/radio/defaultskin/minimize.png
.png
skin/radio/defaultskin/minimize_dn.png
.png
skin/radio/defaultskin/minimize_over.png
.png
skin/radio/defaultskin/pause.gif
.gif
skin/radio/defaultskin/pause_dn.gif
.gif
skin/radio/defaultskin/pause_over.gif
.gif
skin/radio/defaultskin/play.gif
.gif
skin/radio/defaultskin/play_dn.gif
.gif
skin/radio/defaultskin/play_over.gif
.gif
skin/radio/defaultskin/slider.gif
.gif
skin/radio/defaultskin/slider_bg.png
.png
skin/radio/defaultskin/slider_dn.gif
.gif
skin/radio/defaultskin/slider_over.gif
.gif
skin/radio/defaultskin/stop.png
.png
skin/radio/defaultskin/stop_dn.png
.png
skin/radio/defaultskin/stop_over.png
.png
skin/radio/defaultskin/vol.gif
.gif
skin/radio/defaultskin/vol_dn.gif
.gif
skin/radio/defaultskin/vol_over.gif
.gif
skin/resize.gif
.gif
skin/scrollbar/down-active.png
.png
skin/scrollbar/down.png
.png
skin/scrollbar/horizontal-background.png
.png
skin/scrollbar/horizontal-gripper.png
.png
skin/scrollbar/horizontal-thumb-end.png
.png
skin/scrollbar/horizontal-thumb-start.png
.png
skin/scrollbar/horizontal-thumb.png
.png
skin/scrollbar/left-active.png
.png
skin/scrollbar/left.png
.png
skin/scrollbar/right-active.png
.png
skin/scrollbar/right.png
.png
skin/scrollbar/slider.gif
.gif
skin/scrollbar/up-active.png
.png
skin/scrollbar/up.png
.png
skin/scrollbar/vertical-background.png
.png
skin/scrollbar/vertical-gripper.png
.png
skin/scrollbar/vertical-thumb-end.png
.png
skin/scrollbar/vertical-thumb-start.png
.png
skin/scrollbar/vertical-thumb.png
.png
skin/scrollbars.css
skin/searchBox-suggest.xml
.js .xml polyglot
skin/separator.png
.png
skin/settings.png
.png
skin/small_arrow.png
.png
skin/small_arrowRTL.png
.png
skin/splitter.ico
skin/star.png
.png
skin/truste_about.gif
.gif
skin/truste_welcome.gif
.gif
skin/twitter/twitter.css
skin/twitter/twitterRTL_bg.png
.png
skin/twitter/twitter_bg.png
.png
skin/twitter/twitter_chevron.gif
.gif
skin/twitter/twitter_no_img.png
.png
skin/uninstall/bg_uninstall.gif
.gif
skin/uninstall/uninstall.css
skin/uninstall/uninstall_Toolbar.png
.png
skin/v.png
.png
skin/warning.png
.png
skin/weather.png
.png
skin/weather_bg.png
.png
skin/weather_bg_rtl.png
.png
skin/weather_bullet.png
.png
skin/weather_close.png
.png
skin/weather_close_dn.png
.png
skin/weather_na.png
.png
skin/welcome-rtl/app-store-icon.png
.png
skin/welcome-rtl/arrow.png
.png
skin/welcome-rtl/bottom.png
.png
skin/welcome-rtl/corner_ld.png
.png
skin/welcome-rtl/corner_lup.png
.png
skin/welcome-rtl/corner_rd.png
.png
skin/welcome-rtl/corner_rup.png
.png
skin/welcome-rtl/divider.png
.png
skin/welcome-rtl/emailNotifier.gif
.gif
skin/welcome-rtl/facebook.png
.png
skin/welcome-rtl/grad_dn.png
.png
skin/welcome-rtl/left.png
.png
skin/welcome-rtl/radio.gif
.gif
skin/welcome-rtl/right.png
.png
skin/welcome-rtl/upper_border.png
.png
skin/welcome-rtl/weather.gif
.gif
skin/welcome-rtl/welcomeDialog.css
skin/welcome.bmp
skin/welcome/app-store-icon.png
.png
skin/welcome/arrow.png
.png
skin/welcome/bottom.png
.png
skin/welcome/corner_ld.png
.png
skin/welcome/corner_lup.png
.png
skin/welcome/corner_rd.png
.png
skin/welcome/corner_rup.png
.png
skin/welcome/divider.png
.png
skin/welcome/emailNotifier.gif
.gif
skin/welcome/facebook.png
.png
skin/welcome/grad_dn.png
.png
skin/welcome/left.png
.png
skin/welcome/radio.gif
.gif
skin/welcome/right-click.gif
.gif
skin/welcome/right.png
.png
skin/welcome/upper_border.png
.png
skin/welcome/weather.gif
.gif
skin/welcome/welcomeDialog.css
skin/welcome/welcomeDialogCE.css
skin/x.png
.png
skin/x_default.gif
.gif
skin/x_rollover.gif
.gif
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/components/ConduitAutoCompleteSearch.js
.js
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/components/ConduitAutoCompleteSearch.xpt
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/components/ConduitToolbar.idl
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/components/ConduitToolbar.js
.js
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/components/ConduitToolbar.xpt
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/components/RadioWMPCore.dll
.dll windows:5 windows x86 arch:x86

25497a4fa71f8718a89727dc7c65afdc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Conduit\RnD\Client\FF\Devs\3.2.0\FirefoxXPIGenerator\XPISource\components\RadioWMPCore.pdb

Imports

xpcom

NS_CStringContainerFinish
NS_CStringContainerInit
NS_CStringContainerInit2
NS_GetServiceManager
NS_Alloc

mozalloc

moz_xmalloc
moz_free

kernel32

TlsAlloc
HeapSize
WideCharToMultiByte
LeaveCriticalSection
MultiByteToWideChar
EnterCriticalSection
GetModuleHandleA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryA
RtlUnwind
WriteFile
HeapReAlloc
VirtualAlloc
GetLocaleInfoA
GetLastError
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
RaiseException
TlsSetValue
TlsFree
SetLastError
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime

ole32

CoCreateInstance

oleaut32

SysFreeString

nspr4

PR_AtomicIncrement
PR_AtomicDecrement

Exports

Exports

NSGetModule
NSModule

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/components/RadioWMPCore.xpt
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/components/RadioWMPCoreGecko19.dll
.dll windows:5 windows x86 arch:x86

a50dc75f0f339366da4f56137bf8807f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Conduit\RnD\Client\FF\Dev-2.5.2\FirefoxXPIGenerator\XPISource\components\RadioWMPCore.pdb

Imports

xpcom

NS_GetServiceManager
NS_Alloc

kernel32

SetLastError
WideCharToMultiByte
LeaveCriticalSection
MultiByteToWideChar
EnterCriticalSection
GetModuleHandleA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryA
HeapSize
RtlUnwind
WriteFile
HeapReAlloc
VirtualAlloc
GetLocaleInfoA
GetLastError
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RaiseException
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime

ole32

CoCreateInstance

oleaut32

SysFreeString

nspr4

PR_AtomicDecrement
PR_AtomicIncrement

Exports

Exports

NSGetModule

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/defaults/alertSettingsComponent.xml
.xml
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/defaults/appContextMenu.xml
.xml
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/defaults/engineContextMenu.xml
.xml
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/defaults/engineSettings.json
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/defaults/fbAlert.js
.html .js polyglot
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/defaults/getAppsContextMenu.xml
.xml
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/defaults/postAppsContextMenu.xml
.xml
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/defaults/toolbarContextMenu.xml
.xml
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/defaults/unsharedAppsContextMenu.xml
.xml
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/install.rdf
.xml
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/lib/xpcom.js
.js
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/searchplugin/conduit.PNG
.png
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/searchplugin/conduit.gif
.gif
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/searchplugin/conduit.ico
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/searchplugin/conduit.src
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/searchplugin/conduit.xml
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/setup.ini
$PLUGINSDIR/{09ec805c-cb2e-4d53-b0d3-a75a428b81c7}/version.txt
CMenu.dll
.dll regsvr32 windows:5 windows x86 arch:x86

c36bab9e5b8c79a8230c78f737fce553

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
CreateErrorInfo
GetErrorInfo
SetErrorInfo
RegisterTypeLib
LoadTypeLibEx
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegFlushKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
SetMenuItemBitmaps
SendMessageW
PostThreadMessageW
MessageBoxW
LoadStringW
LoadImageW
InsertMenuW
GetSystemMetrics
FindWindowW
CharUpperBuffW

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQueryEx
VirtualQuery
SignalObjectAndWait
SetEvent
SetErrorMode
ResetEvent
MultiByteToWideChar
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GetVersionExW
GetThreadLocale
GetStdHandle
GetShortPathNameW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcess
GetCPInfo
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindFirstFileW
FindClose
EnumCalendarInfoW
EnterCriticalSection
DeleteCriticalSection
CreateEventW
CompareStringW
CloseHandle
Sleep

ole32

IsEqualGUID
CoTaskMemFree
StringFromCLSID
ReleaseStgMedium
CoTaskMemFree
StringFromCLSID
CoLockObjectExternal
CoDisconnectObject
CoRevokeClassObject
CoRegisterClassObject
CoUninitialize
CoInitialize
IsEqualGUID

shell32

ShellExecuteW
DragQueryFileW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ap.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelFlags
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttribute
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetInfo
BASS_ChannelGetLength
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelGetTags
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelLock
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttribute
BASS_ChannelSetDSP
BASS_ChannelSetDevice
BASS_ChannelSetFX
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttribute
BASS_ChannelStop
BASS_ChannelUpdate
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXReset
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetConfigPtr
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceInfo
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicLoad
BASS_Pause
BASS_PluginFree
BASS_PluginGetInfo
BASS_PluginLoad
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceInfo
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleGetChannels
BASS_SampleGetData
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SampleSetData
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetConfigPtr
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamPutData
BASS_StreamPutFileData
BASS_Update
_

Sections

Size: 92KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
checkUpdate.exe
.exe windows:5 windows x86 arch:x86

50042a78a1978f2dcdf3c09be6e1ee99

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:01
Certificate

Issuer

OU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\, Inc.,C=US

Not Before

16/11/2006, 01:54

Not After

16/11/2026, 01:54

Subject

SERIALNUMBER=07969287,CN=Go Daddy Secure Certification Authority,OU=http://certificates.godaddy.com/repository,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

27:dd:e5:5d:2f:33:7f
Certificate

Issuer

SERIALNUMBER=07969287,CN=Go Daddy Secure Certification Authority,OU=http://certificates.godaddy.com/repository,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

28/10/2010, 14:33

Not After

27/10/2011, 13:30

Subject

CN=New IT Limited,O=New IT Limited,L=Nicosia,ST=Nicosia,C=CY

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:55:96:27:72:6f:a1:d9:0f:c7:2c:63:7c:c8:3a:d3:cc:29:a4:23
Signer

Actual PE Digest

05:55:96:27:72:6f:a1:d9:0f:c7:2c:63:7c:c8:3a:d3:cc:29:a4:23

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegFlushKey
RegCloseKey

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClassLongW
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassLongW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
ClientToScreen
CheckMenuItem
CharUpperBuffW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
ActivateKeyboardLayout

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrcpyW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualAlloc
SwitchToThread
SizeofResource
SignalObjectAndWait
SetThreadLocale
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
MultiByteToWideChar
MulDiv
LockResource
LoadResource
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GlobalFindAtomW
GlobalDeleteAtom
GlobalAddAtomW
GetVersionExW
GetVersion
GetTickCount
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetExitCodeThread
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject
StretchBlt
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RestoreDC
Rectangle
RectVisible
RealizePalette
PlayEnhMetaFile
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
FrameRgn
ExcludeClipRect
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
BitBlt

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

ole32

OleUninitialize
OleInitialize

comctl32

InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create

wininet

InternetReadFile
InternetOpenW
InternetConnectW
InternetCloseHandle
HttpSendRequestW
HttpOpenRequestW

shell32

ShellExecuteW

Sections

.text
Size: 416KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 20KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 60B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
desktop.dll
.dll regsvr32 windows:5 windows x86 arch:x86

15492209f6093308ad5bd75f1fd89c81

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
CreateErrorInfo
GetErrorInfo
SetErrorInfo
DispGetIDsOfNames
RegisterTypeLib
LoadTypeLibEx
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegFlushKey
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
SetForegroundWindow
SendMessageW
ReleaseDC
PostThreadMessageW
MessageBoxW
LoadStringW
LoadIconW
GetSystemMetrics
GetSysColor
GetDC
FindWindowW
CharUpperBuffW

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQueryEx
VirtualQuery
SignalObjectAndWait
SetEvent
SetErrorMode
ResetEvent
MultiByteToWideChar
MulDiv
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GetVersionExW
GetThreadLocale
GetStdHandle
GetShortPathNameW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcess
GetCPInfo
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindFirstFileW
FindClose
EnumCalendarInfoW
EnterCriticalSection
DeleteCriticalSection
CreateEventW
CompareStringW
CloseHandle
Sleep

gdi32

UnrealizeObject
SetTextColor
SetROP2
SetBkMode
SetBkColor
SelectPalette
SelectObject
MoveToEx
GetTextMetricsW
GetSystemPaletteEntries
GetStockObject
GetDeviceCaps
GetCurrentPositionEx
DeleteObject
DeleteDC
CreatePenIndirect
CreatePalette
CreateFontIndirectW
CreateBrushIndirect

ole32

IsEqualGUID
CoTaskMemFree
StringFromCLSID
CoLockObjectExternal
CoDisconnectObject
CoRevokeClassObject
CoRegisterClassObject
CoUninitialize
CoInitialize
IsEqualGUID

shell32

ShellExecuteW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
desktop.exe
.exe windows:5 windows x86 arch:x86

b666e6930720923ecedf5661400e068a

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:01
Certificate

Issuer

OU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\, Inc.,C=US

Not Before

16/11/2006, 01:54

Not After

16/11/2026, 01:54

Subject

SERIALNUMBER=07969287,CN=Go Daddy Secure Certification Authority,OU=http://certificates.godaddy.com/repository,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

27:dd:e5:5d:2f:33:7f
Certificate

Issuer

SERIALNUMBER=07969287,CN=Go Daddy Secure Certification Authority,OU=http://certificates.godaddy.com/repository,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

28/10/2010, 14:33

Not After

27/10/2011, 13:30

Subject

CN=New IT Limited,O=New IT Limited,L=Nicosia,ST=Nicosia,C=CY

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1c:e6:b0:04:50:7f:ed:07:85:0a:8d:85:01:06:61:2d:61:f8:c0:d2
Signer

Actual PE Digest

1c:e6:b0:04:50:7f:ed:07:85:0a:8d:85:01:06:61:2d:61:f8:c0:d2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
CreateErrorInfo
GetErrorInfo
SetErrorInfo
GetActiveObject
SysFreeString
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopyInd
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegFlushKey
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetKeyboardState
SetForegroundWindow
SetFocus
SetCursor
SetClipboardData
SetClassLongW
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
IsCharAlphaNumericW
IsCharAlphaW
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessageTime
GetMessagePos
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DeferWindowPos
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharUpperBuffW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BeginPaint
BeginDeferWindowPos
CharUpperBuffA
CharUpperA
AdjustWindowRectEx
ActivateKeyboardLayout

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
DeleteFileW
CreateFileW
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrcpynW
lstrcpyW
lstrcmpW
WritePrivateProfileStringW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualProtect
VirtualAlloc
SwitchToThread
SuspendThread
SleepEx
Sleep
SizeofResource
SignalObjectAndWait
SetThreadPriority
SetThreadLocale
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
SetCurrentDirectoryW
ResumeThread
ResetEvent
RemoveDirectoryW
ReadFile
ReadDirectoryChangesW
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
MultiByteToWideChar
MulDiv
MoveFileW
LockResource
LoadResource
LoadLibraryW
LeaveCriticalSection
IsValidLocale
InitializeCriticalSection
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalSize
GlobalHandle
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetVersion
GetUserDefaultLCID
GetTimeZoneInformation
GetTickCount
GetThreadLocale
GetTempPathW
GetSystemDefaultLangID
GetSystemDefaultLCID
GetStdHandle
GetProcAddress
GetPrivateProfileStringW
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesExW
GetFileAttributesW
GetExitCodeThread
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetComputerNameW
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumCalendarInfoW
EnterCriticalSection
DeleteFileW
DeleteCriticalSection
CreateThread
CreateFileW
CreateEventW
CreateDirectoryW
CopyFileW
CompareStringA
CompareStringW
CloseHandle
Sleep

msimg32

GradientFill
AlphaBlend

gdi32

UnrealizeObject
StretchDIBits
StretchBlt
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetTextAlign
SetStretchBltMode
SetROP2
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SelectClipRgn
SaveDC
RoundRect
RestoreDC
ResizePalette
Rectangle
RectVisible
RealizePalette
PtInRegion
Polyline
Polygon
PlayEnhMetaFile
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
LPtoDP
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetViewportOrgEx
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetTextAlign
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetNearestPaletteIndex
GetNearestColor
GetMapMode
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
FrameRgn
FillRgn
ExtTextOutW
ExcludeClipRect
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgn
CreatePolygonRgn
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateEnhMetaFileW
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
CombineRgn
CloseEnhMetaFile
BitBlt

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

ole32

CreateStreamOnHGlobal
IsAccelerator
OleDraw
OleSetMenuDescriptor
OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
ProgIDFromCLSID
StringFromCLSID
CoCreateInstance
CoGetClassObject
CoUninitialize
CoInitialize
IsEqualGUID
IsEqualGUID
CLSIDFromString
CoTaskMemFree
StringFromCLSID
CoCreateGuid
CoUninitialize
CoInitialize

comctl32

InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls

wininet

HttpSendRequestExW
InternetAttemptConnect
HttpEndRequestW
InternetWriteFile
InternetSetOptionW
InternetReadFile
InternetQueryOptionW
InternetQueryDataAvailable
InternetOpenW
InternetGetCookieW
InternetErrorDlg
InternetCrackUrlW
InternetConnectW
InternetCloseHandle
HttpSendRequestW
HttpQueryInfoW
HttpOpenRequestW
HttpAddRequestHeadersW

shell32

Shell_NotifyIconW
ShellExecuteW
DragQueryFileW
DragFinish
DragAcceptFiles
SHGetPathFromIDListW
SHGetMalloc
SHGetDesktopFolder
SHBrowseForFolderW
SHGetMalloc

comdlg32

GetOpenFileNameW

ap

BASS_ChannelSetSync
BASS_ChannelGetPosition
BASS_ChannelSetPosition
BASS_ChannelGetLength
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelIsActive
BASS_ChannelBytes2Seconds
BASS_StreamGetFilePosition
BASS_StreamFree
BASS_StreamCreateURL
BASS_Free
BASS_Init
BASS_ErrorGetCode
BASS_GetVersion
BASS_SetConfigPtr
BASS_SetConfig

netapi32

Netbios

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 27KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 76B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
down_all.htm
.html .js polyglot
down_link.htm
.html .js polyglot
language/chinese.xml
language/french.xml
language/german.xml
language/indonesian.xml
language/italian.xml
language/japanese.xml
language/korean.xml
language/malay.xml
language/polish.xml
language/portuguese.xml
language/russian.xml
language/spain.xml
language/thai.xml
language/turkish.xml
language/vietnamese.xml
license.txt
readme.txt
uninstall.exe.nsis

Sharing

General

Malware Config

Signatures

Files

b729b61eb1515fcf7b3e511e4e66258b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

03:01Certificate

Key Usages

27:dd:e5:5d:2f:33:7fCertificate

Extended Key Usages

Key Usages

ec:0b:c5:15:4a:ec:d4:69:f8:15:d1:bf:91:c8:2f:47:be:37:07:4eSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 409KB

.ndata Size: - Virtual size: 948KB

.rsrc Size: 40KB - Virtual size: 39KB

81638d02019c0bfcaaf23a9c69f2f12c

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

37:36:da:15:af:64:76:32:cc:e6:1c:d4:1b:65:77:ddCertificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 512B - Virtual size: 510B

.rdata Size: 1024B - Virtual size: 533B

.data Size: 512B - Virtual size: 20B

.rsrc Size: 2.6MB - Virtual size: 2.6MB

cd90e33ffbc335413a25300c682c83df

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 1024B - Virtual size: 17KB

.rsrc Size: 512B - Virtual size: 152B

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

03:01
Certificate

27:dd:e5:5d:2f:33:7f
Certificate

ec:0b:c5:15:4a:ec:d4:69:f8:15:d1:bf:91:c8:2f:47:be:37:07:4e
Signer

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 409KB

.ndata
Size: - Virtual size: 948KB

.rsrc
Size: 40KB - Virtual size: 39KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

37:36:da:15:af:64:76:32:cc:e6:1c:d4:1b:65:77:dd
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

.text
Size: 512B - Virtual size: 510B

.rdata
Size: 1024B - Virtual size: 533B

.data
Size: 512B - Virtual size: 20B

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 1024B - Virtual size: 17KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 963B

.data
Size: 512B - Virtual size: 64B

.reloc
Size: 1024B - Virtual size: 588B

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 5KB - Virtual size: 6KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: - Virtual size: 48B

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 590B

.text
Size: 68KB - Virtual size: 68KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 5KB - Virtual size: 7KB

.reloc
Size: 6KB - Virtual size: 5KB