Warning! We are currently in recovery mode. The complete archive is not available.

Sample details: 4d8e29ef3f41c4efe06c6d24846026a3 --

Hashes
MD5: 4d8e29ef3f41c4efe06c6d24846026a3
SHA1: 409f5677c724705cd895e960174ef5026ba4e593
SHA256: eb40d92a70636cc66ebd20f67d1489b119a8578dd32912b28680df4ede8d9b14
SSDEEP: 6144:fsaYy0HpJF4kAZRZplWtQ4cAZJoaKje0a:WrJxAZRZpwtQ4cYJjT
Details
File Type: PE32
Yara Hits
YRP/Visual_Cpp_2005_DLL_Microsoft | YRP/Visual_Cpp_2003_DLL_Microsoft | YRP/IsPE32 | YRP/IsDLL | YRP/IsWindowsGUI | YRP/HasOverlay | YRP/HasDigitalSignature | YRP/HasRichSignature | YRP/domain | YRP/IP | YRP/url | YRP/contentis_base64 | YRP/Browsers | YRP/Dropper_Strings | YRP/anti_dbg | YRP/create_com_service | YRP/screenshot | YRP/win_registry | YRP/win_files_operation | YRP/VC8_Random |
Parent Files
03b86ff9156ef616341a0b28e32c415a
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
AABBG;
GGAAHu
GGCCHu
PPPPPPP
SSVSSW
|Gj{Xf;E
P([_^]
u8SSSSSSS
u6SSSSSSS
FH+FDj
FH+FDj
FH+FDj
 tfh(<
FH+FDj
FH+FDj
PPPPPPP
0WWWWW
0WWWWW
@@BBf;
@@BBf;
QQSVWd
_VVVVV
@@f90u
f90t3W
AAf91u
0WWWWW
0WWWWW
AAFFf;
0WWWWW
AAFFf;
v	N+D$
URPQQhhj
_VVVVV
9} tM9}$uC9}(uC3
9E vNPQ
9u(v(VS
9u wx3
^WWWWW
s[S;7|G;w
tR99u2
0A@@Ju
0SSSSS
^WWWWW
^SSSSS
^SSSSS
>:u8FV
VVVVVQRSSj
_VVVVV
^WWWWW
;t$,v-
UQPXY]Y[
j@j ^V
>=Yt1j
< tK<	tG
t"SS9]
HHtXHHt
>If90t
HHtYHHt
0SSSSS
0SSSSS
PPPPPPPP
PPPPPPPP
0SSSSS
v	N+D$
_VVVVV
tGHt.Ht&
^SSSSS
8VVVVV
t+WWVPV
^SSSSS
j"^SSSSS
<+t(<-t$:
+t HHt
SUVWtE
PQSUVW
+D$(PU
|2	#uA
L$4_^][3
PQSUVW
PQSUVW
PQSUVW
PQSUVW
{,t&j	h
tg<<ucj
t-<>t.j
PQSUVW
L$,PQS
PQSUVW
<<tkj0
T$(WQRV
tw8D$$t
L$(WSQV
G<[]_3
D$0SPWj
T$0SRPj	
D$0SPVj
<'u#Wj
<"u#Wj
PQSUVW
T$0RQWj
t>8Y,u9
<at9<rt,<wt
tGHt.Ht&
^SSSSS
8VVVVV
?bad allocation
RegDeleteKeyExW
IDS_QZIP_TITLE
KuaiZip.exe
-fixassoc
UpdateChecker.exe
Update.exe
KZReport.exe
KZMount2.exe
-InstallDriver
SYSTEM\CurrentControlSet\services\KuaiZipDrive2
DisplayName
{AAA0C5B8-933F-4200-93AD-B143D7FFF9F3}
Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers
KzShlobj2
Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\KzShlobj2
kzipshell.run
..\X86\
FUnRegisterTypeLibForUser
RegisterTypeLibForUser
AQueryInterface
GetFactory
IDS_UNMOUNT
IDS_ADD_TO_DEST
IDS_QUICK_MOUNT
IDS_MOUNT_TO_NEW_DRIVE
IDS_RAPIDSHARE
IDS_TEST_ARCHIVE
IDS_SEMIL
IDS_SCOMPTO
IDS_SCOMPEMAIL
IDS_ADD_TO_NEW
IDS_SMART_EXTRACT_MORE
IDS_SMART_EXTRACT
IDS_EXTRACT_TO2
IDS_EXTRACT_HERE
IDS_EXTRACT
IDS_OPEN_WITH_KUAIYA
Shell.CM_BROWSE_ARCHIVE
Shell.CM_EXTRACT_TO
Shell.CM_EXTRACT_HERE
Shell.CM_EXTRACT_TO_FOLDER
Shell.CM_SMART_EXTRACT
Shell.CM_COMPRESS_TO
Shell.CM_COMPRESS_DESTFMT
Shell.CM_COMPRESS_FILE_EMAIL
Shell.CM_COMPRESS_EMAIL
Shell.CM_TEST_ARCHIVE
Shell.CM_CONVERT_TO_MOU
Shell.CM_COMPRESS_ZIP_ARC
Shell.CM_MOUNT_TO_NEW_DRIVE
Shell.CM_MOUNT_TO
Shell.CM_QUICK_MOUNT
Shell.CM_UNMOUNT
Shell.CM_INSERT_IMG
Shell.CM_EJECT_IMG
Shell.CM_ATTACH_UNMOUNT
Shell.CM_SENDTO_EVERBOX
Shell.CM_NEWCONFG_STRART
string too long
invalid string position
Unknown exception
CorExitProcess
runtime error 
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program: 
bad exception
EncodePointer
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
GAIsProcessorFeaturePresent
KERNEL32
(null)
`h````
xpxxxx
`h`hhh
xppwpp
 Complete Object Locator'
 Class Hierarchy Descriptor'
 Base Class Array'
 Base Class Descriptor at (
 Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
 delete[]
 new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
 delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
1#QNAN
1#SNAN
CONOUT$
<!--%s-->
standalone="%s" 
encoding="%s" 
version="%s" 
<?xml 
&#x%02X;
%s='%s'
%s="%s"
<![CDATA[
standalone="
encoding="
version="
&apos;
&quot;
standalone
encoding
version
Error parsing CDATA.
Error null (0) or unexpected EOF found in input stream.
Error document empty.
Error parsing Declaration.
Error parsing Comment.
Error parsing Unknown.
Error reading end tag.
Error: empty tag.
Error reading Attributes.
Error reading Element value.
Failed to read Element name
Error parsing Element.
Memory allocation failed.
Failed to open file
No error
UTF-16LE
UNICODE
bad allocation
language
Software\Kuaizip2
\language\
language
Software\Kuaizip2
language\
bad allocation
bad allocation
ADVAPI32.DLL
RegDeleteKeyExA
HKEY_CLASSES_ROOT
HKEY_CURRENT_CONFIG
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_PERFORMANCE_DATA
(UNKNOWN)
HKEY_CLASSES_ROOT
HKEY_CURRENT_CONFIG
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_PERFORMANCE_DATA
Error. Filename is null.
Error. Open failed. %s
Error. Buffer is null.
Error. Open write failed.
Software\KuaiZip2\Install
Software\KuaiZip2\Install
InstallDate
Software\KuaiZip2\Install
Version
Software\KuaiZip2\Install
InstallCount
Software\KuaiZip2\Install
Software\KuaiZip2\Install
\X86\KuaiZip.exe
%04d/%02d/%02d %02d:%02d:%02d.%03d
%04d/%02d/%02d
%02d:%02d:%02d.%03d
WorkerW
chrome.exe
firefox.exe
iexplore.exe
360chrome.exe
sogouexplorer.exe
qqbrowser.exe
liebao.exe
baidubrowser.exe
2345chrome.exe
Juzi.exe
theworld.exe
360SE.exe
safari.exe
maxthon.exe
opera.exe
rccb.exe
bad allocation
Software\KuaiZip2\Report\offline\
/kuaizipreport/online?code=
online
/kuaizipreport/install?code=
install
/kuaizipreport/uninstall?code=
uninstall
/kuaizipreport/updateinstall?code=
install
/kuaizipreport/active?code=
active
userclick.
/kuaizipreport/userclick?code=
/kuaizipreport/fileoperate?code=
fileoperate.
/kuaizipreport/kunbang?code=
/kuaizipreport/kunbang?code=
/kuaizipreport/stat?code=
vector<T> too long
map/set<T> too long
invalid map/set<T> iterator
lstrlenW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
GetLastError
GetProcAddress
GetModuleHandleW
lstrcmpiW
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
LockResource
FindResourceExW
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcatW
lstrcpyW
lstrcmpW
CloseHandle
TerminateThread
EnterCriticalSection
LeaveCriticalSection
ResumeThread
CreateThread
SetThreadLocale
GetThreadLocale
GetVersion
lstrcpynW
WideCharToMultiByte
GetFileAttributesW
GetTickCount
SetFilePointer
ReadFile
CreateFileW
CreateEventW
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
SetEvent
WaitForSingleObject
GlobalUnlock
GlobalLock
GetDriveTypeW
LoadLibraryW
GetTempFileNameW
CreateDirectoryW
GetTempPathW
KERNEL32.dll
CharNextW
wsprintfW
CharLowerW
CharLowerBuffW
LoadBitmapW
LoadImageW
ReleaseDC
SetMenuItemInfoW
DestroyIcon
SetMenuItemBitmaps
InsertMenuItemW
InsertMenuW
CreateMenu
USER32.dll
SetBitmapBits
GetBitmapBits
GetObjectW
DeleteObject
CreateDIBSection
GDI32.dll
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegCreateKeyW
RegOpenKeyW
RegQueryValueExW
RegQueryValueW
ADVAPI32.dll
ShellExecuteExW
SHGetPathFromIDListW
DragQueryFileW
SHELL32.dll
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
ReleaseStgMedium
ole32.dll
OLEAUT32.dll
PathFindFileNameW
PathAppendW
PathCombineW
PathRemoveFileSpecW
StrCmpNIW
PathFindExtensionW
PathRemoveBackslashW
PathRenameExtensionW
SHLWAPI.dll
timeKillEvent
WINMM.dll
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetModuleFileNameA
GetModuleHandleExA
TerminateProcess
GetNativeSystemInfo
LoadLibraryA
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
VirtualFree
VirtualAlloc
HeapCreate
ExitProcess
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeZoneInformation
GetModuleHandleA
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
LCMapStringA
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyA
RegOpenKeyA
RegQueryValueA
RegCreateKeyExA
ShellExecuteA
PathFindFileNameA
KZipShell.DLL
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
.?AVCAtlException@ATL@@
.?AV?$CComObject@VCContextMenuExt@@@ATL@@
.?AVCContextMenuExt@@
.?AV?$CComObjectRootEx@VCComSingleThreadModel@ATL@@@ATL@@
.?AVCComObjectRootBase@ATL@@
.?AV?$CComCoClass@VCContextMenuExt@@$1?CLSID_ContextMenuExt@@3U_GUID@@B@ATL@@
.?AUIContextMenuExt@@
.?AUIUnknown@@
.?AUIShellExtInit@@
.?AUIContextMenu@@
.?AVCRegObject@ATL@@
.?AUIRegistrarBase@@
.?AVCComClassFactory@ATL@@
.?AUIClassFactory@@
.?AV?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@
.?AVCQZipShellModule@@
.?AV?$CAtlDllModuleT@VCQZipShellModule@@@ATL@@
.?AV?$CAtlModuleT@VCQZipShellModule@@@ATL@@
.?AVCAtlModule@ATL@@
.?AU_ATL_MODULE70@ATL@@
.?AV?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@
.?AV?$CComObject@VCKzShlobj@@@ATL@@
.?AVCKzShlobj@@
.?AV?$CComCoClass@VCKzShlobj@@$1?CLSID_KzShlobj@@3U_GUID@@B@ATL@@
.?AV?$IDispatchImpl@UIKzShlobj@@$1?IID_IKzShlobj@@3U_GUID@@B$1?LIBID_QZipShellLib@@3U3@B$00$0A@VCComTypeInfoHolder@ATL@@@ATL@@
.?AUIKzShlobj@@
.?AUIDispatch@@
.?AUIShellIconOverlayIdentifier@@
.?AV?$CComContainedObject@VCKzShlobj@@@ATL@@
.?AV?$CComAggObject@VCKzShlobj@@@ATL@@
.?AV?$CComObject@VCDragDropMenu@@@ATL@@
.?AVCDragDropMenu@@
.?AV?$CComCoClass@VCDragDropMenu@@$1?CLSID_DragDropMenu@@3U_GUID@@B@ATL@@
.?AUIDragDropMenu@@
.?AVCExplorerMenu@@
.?AV?$CComObject@VCKYDropHandler@@@ATL@@
.?AVCKYDropHandler@@
.?AV?$CComCoClass@VCKYDropHandler@@$1?CLSID_KYDropHandler@@3U_GUID@@B@ATL@@
.?AUIKYDropHandler@@
.?AUIPersistFile@@
.?AUIPersist@@
.?AUIDropTarget@@
.?AVtype_info@@
.?AVbad_exception@std@@
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVTiXmlAttribute@@
.?AVTiXmlComment@@
.?AVTiXmlDeclaration@@
.?AVTiXmlText@@
.?AVTiXmlUnknown@@
.?AVTiXmlElement@@
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
.?AVexception@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVbad_alloc@std@@
.?AVTiXmlBase@@
.?AVTiXmlNode@@
.?AVTiXmlDocument@@
.?AVout_of_range@std@@
	NoRemove AppID
		'%APPID%' = s 'QZipShell2'
		'QZipShell2.DLL'
			val AppID = s '%APPID%'
PADHKCR
	QZipShell2.ContextMenuExt.1 = s 'ContextMenuExt Class'
		CLSID = s '{6ADF19E3-77A3-4395-ADB4-9FD7D351EB3F}'
	QZipShell2.ContextMenuExt = s 'ContextMenuExt Class'
		CLSID = s '{6ADF19E3-77A3-4395-ADB4-9FD7D351EB3F}'
		CurVer = s 'QZipShell2.ContextMenuExt.1'
	NoRemove CLSID
		ForceRemove {6ADF19E3-77A3-4395-ADB4-9FD7D351EB3F} = s 'ContextMenuExt Class'
			ProgID = s 'QZipShell2.ContextMenuExt.1'
			VersionIndependentProgID = s 'QZipShell2.ContextMenuExt'
			InprocServer32 = s '%MODULE%'
				val ThreadingModel = s 'Apartment'
			'TypeLib' = s '{86C4C3BA-4EA4-4CF8-98B9-6B07B477B836}'
    NoRemove *
        NoRemove ShellEx
        {
            NoRemove ContextMenuHandlers
            {
                ForceRemove KZipShell2Ext = s '{6ADF19E3-77A3-4395-ADB4-9FD7D351EB3F}'
            }
        }
    }	
    NoRemove lnkfile
        NoRemove ShellEx
        {
            NoRemove ContextMenuHandlers
            {
                ForceRemove KZipShell2Ext = s '{6ADF19E3-77A3-4395-ADB4-9FD7D351EB3F}'
            }
        }
    }	
	QZipShell2.DragDropMenu.1 = s 'DragDropMenu Class'
		CLSID = s '{3DCCD550-7586-40D2-A51D-D2F98EC06B3D}'
	QZipShell2.DragDropMenu = s 'DragDropMenu Class'
		CLSID = s '{3DCCD550-7586-40D2-A51D-D2F98EC06B3D}'
		CurVer = s 'QZipShell2.DragDropMenu.1'
	NoRemove CLSID
		ForceRemove {3DCCD550-7586-40D2-A51D-D2F98EC06B3D} = s 'DragDropMenu Class'
			ProgID = s 'QZipShell2.DragDropMenu.1'
			VersionIndependentProgID = s 'QZipShell2.DragDropMenu'
			InprocServer32 = s '%MODULE%'
				val ThreadingModel = s 'Apartment'
			'TypeLib' = s '{86C4C3BA-4EA4-4CF8-98B9-6B07B477B836}'
	NoRemove Directory
		NoRemove shellex
			NoRemove DragDropHandlers
				ForceRemove HardLink2ShlExt = s '{3DCCD550-7586-40D2-A51D-D2F98EC06B3D}'
	NoRemove Folder
		NoRemove shellex
			NoRemove DragDropHandlers
				ForceRemove HardLink2ShlExt = s '{3DCCD550-7586-40D2-A51D-D2F98EC06B3D}'
	NoRemove Drive
		NoRemove shellex
			NoRemove DragDropHandlers
				ForceRemove HardLink2ShlExt = s '{3DCCD550-7586-40D2-A51D-D2F98EC06B3D}'
PADHKCR
	QZipShell2.PropertyExt.1 = s 'PropertyExt Class'
		CLSID = s '{2FB831EA-DA68-4A66-8E31-A2D976A6296D}'
	QZipShell2.PropertyExt = s 'PropertyExt Class'
		CLSID = s '{2FB831EA-DA68-4A66-8E31-A2D976A6296D}'
		CurVer = s 'QZipShell2.PropertyExt.1'
	NoRemove CLSID
		ForceRemove {2FB831EA-DA68-4A66-8E31-A2D976A6296D} = s 'PropertyExt Class'
			ProgID = s 'QZipShell2.PropertyExt.1'
			VersionIndependentProgID = s 'QZipShell2.PropertyExt'
			InprocServer32 = s '%MODULE%'
				val ThreadingModel = s 'Apartment'
			'TypeLib' = s '{86C4C3BA-4EA4-4CF8-98B9-6B07B477B836}'
	NoRemove *
		NoRemove shellex
			NoRemove PropertySheetHandlers
				{2FB831EA-DA68-4A66-8E31-A2D976A6296D}
	QZipShell2.KYDropHandler.1 = s 'KYDropHandler Class'
		CLSID = s '{C9487131-EF4C-40D9-BA70-E85356CAF67F}'
	QZipShell2.KYDropHandler = s 'KYDropHandler Class'
		CLSID = s '{C9487131-EF4C-40D9-BA70-E85356CAF67F}'
		CurVer = s 'QZipShell2.KYDropHandler.1'
	NoRemove CLSID
		ForceRemove {C9487131-EF4C-40D9-BA70-E85356CAF67F} = s 'KYDropHandler Class'
			ProgID = s 'QZipShell2.KYDropHandler.1'
			VersionIndependentProgID = s 'QZipShell2.KYDropHandler'
			InprocServer32 = s '%MODULE%'
				val ThreadingModel = s 'Apartment'
			'TypeLib' = s '{86C4C3BA-4EA4-4CF8-98B9-6B07B477B836}'
	NoRemove KuaiZip.kz
		shellex
			DropHandler = s '{C9487131-EF4C-40D9-BA70-E85356CAF67F}'
	NoRemove KuaiZip.zip
		shellex
			DropHandler = s '{C9487131-EF4C-40D9-BA70-E85356CAF67F}'
PAHKCR
	QZipShell2.KzShlobj.1 = s 'KzShlobj Class'
		CLSID = s '{AAA0C5B8-933F-4200-93AD-B143D7FFF9F3}'
	QZipShell2.KzShlobj = s 'KzShlobj Class'
		CLSID = s '{AAA0C5B8-933F-4200-93AD-B143D7FFF9F3}'
		CurVer = s 'QZipShell2.KzShlobj.1'
	NoRemove CLSID
		ForceRemove {AAA0C5B8-933F-4200-93AD-B143D7FFF9F3} = s 'KzShlobj Class'
			ProgID = s 'QZipShell2.KzShlobj.1'
			VersionIndependentProgID = s 'QZipShell2.KzShlobj'
			ForceRemove 'Programmable'
			InprocServer32 = s '%MODULE%'
				val ThreadingModel = s 'Apartment'
			'TypeLib' = s '{86C4C3BA-4EA4-4CF8-98B9-6B07B477B836}'
  SOFTWARE
    Microsoft
       Windows
      {
        CurrentVersion
        {
          Explorer
          {
            ShellIconOverlayIdentifiers
            {
             ForceRemove KzShlobj2 = s '{AAA0C5B8-933F-4200-93AD-B143D7FFF9F3}'       
            }
          }
        }
      }
stdole2.tlbWWW
QZipShellLib
ContextMenuExtWWd
^IContextMenuExtW
DragDropMenu,
IDragDropMenuWWW
PropertyExtW
VIPropertyExtX
8N)KYDropHandlerWWW
IKYDropHandlerWW 
KzShlobj
qIKzShlobjWWW
QZipShell22 1.0 Type LibraryWW
ContextMenuExt ClassWW
IContextMenuExt InterfaceW
DragDropMenu Class
IDragDropMenu InterfaceWWW
PropertyExt ClassW
IPropertyExt Interface
KYDropHandler ClassWWW
IKYDropHandler InterfaceWW
KzShlobj Class
IKzShlobj 
Created by MIDL version 7.00.0500 at Tue Jul 26 11:09:23 2016
H~ZVU"
Wg~a$?
k|0sH6=?
^Rt"zo
J}?`Gu
F|yq&m
nz}v?re
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
      <requestedPrivileges>
        <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
      </requestedPrivileges>
    </security>
  </trustInfo>
  <dependency>
    <dependentAssembly>
      <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>
    </dependentAssembly>
  </dependency>
</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
2f3{5f6y6\7p7
3F4Y4<5P5
6\7F8X8
8&?6?b?
5O6Z6`6i6p6u6{6
9"9&9,90969:9@9D9J9T9^9t9
;_;k;x;
0 1%1W1^1e1k1
<H=M=`=
2B2J2P2u2z2
9,9;9B9Y9l9
9+:^:}:
<(=\=g=}=
21282o2x2
5	5+52585
8S8Z8g8
:=:C:d:
; <+<2<;<
=<>W>t>
?G?Y?q?
$0.0?0
0+101K1P1^1x1
3G3X3i3z3
4 4&4i4n4
6%7*7[7
7>8a9g9p9w9
<,=A=P=Z=e=|=
0<0H0n0
1G1M1S1f1
3#3@3Q3b3s3
3c4i4o4
4	515=5D5N5U5r5
5$6)6;6}6
9!949O9e9
9 :<:i:
;";8;?;\;u;
<&<;<P<e<z<
="=7=L=a=v=
>3>H>]>r>
?/?D?Y?n?
0(0H0U0u0
1#1,1E1U1Z1a1h1u1
2)2/2<2B2O2U2b2
2&3:3D3\3
5&535d5
8>8d8t8
001C1W1n1
272D2V2/4>4R4X4b4g4n4x4
405?5Y5_5d5n5u5
<+=D=x=
>(?=?U?
2%22272
7	8+888P8`8p8
=+=;=]=k=u=
3)3g3|3
7&7A7H7O7|9
9-:?:L:
:>;D<s<~<
<f=q=x=
?M?X?_?
0#424k4
7K8f8{8
8	9[9z9
=#=-=[=
=4>U>]>
8f8m8t8{8
8C9J9Q9X9e9
>*>:>N>k>
J0T0q0
0$1*121?1S1l1w1
23282O2
v1z1~1
5-5S5q5x5|5
5V6a6|6
7 7$7(7,707z7
8#8)8-83878<8B8F8L8P8V8Z8`8d8}8
;G<"=4=
>8>?>W>
5)51575}5
?O?V?`?
1F3T3Z3t3y3
4!4&4.444>4E4Y4`4f4t4{4
<&<2<;<C<M<S<Y<m<v<
<U=]=p={=
>)>i>v>
0 0`0e0
3X4]4o4
5%5+51575>5E5L5S5Z5a5h5p5x5
6&636F6
748-9v9
3!3(3O3U3`3l3
4#4)464@4G4_4n4u4
4 5&5P5V5r5
5*6M6W6
7!767D7O7V7q7v7~7
8)8.898>8I8N8[8i8o8|8
8&919\9g9
;,===w=
121N1W1]1f1k1z1
7M7S7_7
758;8t8}8
9#9`9i9u9
: :$:M:s:
;-<4<8<<<@<D<H<L<P<
7':+:/:3:7:;:?:C:
6!6%6)6-61656
>;>L>Q>W>h>m>z>
2)21272=2
3&3/3=3K3
4!4.4A4N4p4N:
2'3-363=3\3
3E4_4h4
5\6b6|6
7'7<7F7l7
899Y9I:r:
393I3v3~3
4"4C4I4{4
5$5L5e5
5:6@6d6
7P7[7e7v7
749E9M9S9X9^9
:!:(:_:
; ;A;F;
=)=1=9=E=i=q=
<5<Z<=>
90=0A0E0I0M0Q0U0
>D?Q?q?
3Y3b3w3
4$4k4p4
4A5J5P5
676=6L6R6a6g6u6~6
;);0;`;
?-?I?Q?
1"2/2H2f2
=H=X=s=
1;1I1Q1^1|1
3r4B7Y7
6D8J8O8U8\8n8
0g1m1y1
3[3#505>5n5
829":::>=
>7>E>r>
>C?T?~?
0,0G0]0
1$1)181>1L1R1`1e1w1
2E2[2%3?3a3
424F4`4
535G5c5r5
8+9B9Y9o9
:":@:V:i:{:
>">=>U>
>#?0?E?|?
3*484P4g4
9l9p9t9x9
1,1]1q1
;W<^<e<
0S1d1}1
3/4P4\4
7(777V7s7
3-3@3R3
747?7V7{7
*0f0u0
232F2P2l2
5&686s6
7*8E8p8
<$=?=w=
=5>F>R>\>b>f>r>|>
?%?/?;?G?Q?[?e?o?y?
3 3$3(3,303<3@3D3H3T3X3
3(40484@4H4P4X4`4h4p4x4
6 6$606<6
7074787<7@7D7H7
7L9P9T9
; ;$;(;,;0;4;8;<;@;D;P;\;
7 7$787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
T0X0\0`0d0h0l0p0t0x0|0
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,10141
?t?x?|?
0 0$0(0,0004080<0P0T0X0\0`0d0h0l0p0t0x0|0
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
3 3$3(3,30343
4 484H4L4P4T4X4\4`4d4h4l4p4x4
545D5H5P5h5l5
6 6$6,6D6H6`6d6|6
7 7$7(707H7L7d7t7x7|7
8,8<8@8D8L8d8h8
949D9H9L9P9X9p9
: :8:H:L:\:`:d:h:l:p:t:x:|:
; ;8;<;T;d;h;p;
< <0<4<8<@<X<h<l<p<x<
=$=(=8=<=L=P=T=X=\=d=|=
>(>8><>@>D>H>L>P>T>X>\>`>d>l>
? ?(?@?P?T?d?h?x?|?
0 0$0(0,0004080<0@0D0L0d0h0
1$14181<1@1H1`1d1|1
2$24282H2L2\2`2p2t2
3,303@3D3H3P3h3x3|3
4,404@4D4H4L4T4l4|4
5 5054585<5D5\5l5p5
6(686<6L6P6T6X6`6x6
9L9P9X9d9
: :,:4:X:l:
;(;@;H;T;|;
<4<@<`<h<p<|<
=8=\=h=p=
>,>@>P>d>l>
?$?D?P?p?|?
0@0L0T0l0t0
1$1,141<1D1L1T1\1h1
2 2H2\2d2
343<3H3h3t3
4$4,484\4|4
505H5P5X5`5h5t5
6$6,646<6H6h6p6x6
7 7(70787@7H7P7X7`7h7p7x7
848X8d8l8
9,909P9p9
:0:P:\:x:
; ;$;<;@;P;t;
<$<8<X<d<
=(=H=h=
>(>D>H>h>
?(?H?h?t?
0$000P0X0`0l0
1(101<1\1h1
2$2,282X2`2h2t2
3<3D3L3T3\3d3l3x3
5 5$5,545<5P5X5\5d5l5t5
686@6H6P6\6|6
7$7D7L7X7|7
808<8\8d8l8t8|8
9,949<9D9L9T9\9d9l9x9
; ;4;@;H;`;l;
<$<D<P<
=(=4=T=`=
0 0$0(0H0|0
2(3H3h3
485P5h5
6 6$6(64686<6@6p6
7$7,747<7D7L7T7\7d7l7t7|7
9@9P9p9
;$;,;4;<;D;L;T;
3@4D4H4L4P4T4X4\4`4d4x4
4H7L7P7T7X7\7`7d7h7l7p7t7x7|7
8 8$8(8,8084888<8H8
=0=<=H=T=`=p=t=x=|=
=,>H>h>
WoSign CA Limited1'0%
WoSign Class 3 Code Signing CA0
160713091251Z
170713091251Z0
Shanghai1
Shanghai1604
-Shanghai Guangle Network Technology Co., Ltd.1604
-Shanghai Guangle Network Technology Co., Ltd.0
Ph!\i@N.
'http://ocsp1.wosign.com/class3/code/ca106
*http://aia1.wosign.com/class3.code.ca1.cer07
&http://crls1.wosign.com/ca1-code-3.crl0O
http://www.wosign.com/policy/0
WoSign CA Limited1*0(
!Certification Authority of WoSign0
090808010005Z
240808010005Z0O1
WoSign CA Limited1$0"
WoSign Time Stamping Signer0
dS`Q4H
http://crls1.wosign.com/ca1.crl0g
http://ocsp1.wosign.com/ca10.
"http://aia1.wosign.com/ca1-tsa.cer0
=].'KF
WoSign CA Limited1*0(
!Certification Authority of WoSign0
090808010005Z
240808010005Z0R1
WoSign CA Limited1'0%
WoSign Class 3 Code Signing CA0
%DEe3F
http://crls1.wosign.com/ca1.crl0o
http://ocsp1.wosign.com/ca106
*http://aia1.wosign.com/ca1-class3-code.cer0
http://www.wosign.com/policy/0
cbf^W	
>'H7G^
WoSign CA Limited1'0%
WoSign Class 3 Code Signing CA
WoSign CA Limited1*0(
!Certification Authority of WoSign
160727063502Z0#