Warning! We are currently in recovery mode. The complete archive is not available.

Sample details: 68c5e9c5835e2ca6414e5f0d97a824b4 --

Hashes
MD5: 68c5e9c5835e2ca6414e5f0d97a824b4
SHA1: 0ec36eef9aaef2996a573d350b046461b73081ed
SHA256: 4707ee8aec3acb49d1525e4baf3402906bb54f420c8382eb1f598a3e423966e9
SSDEEP: 12288:bmJTG8TCE6da1+JQA6xxael1HeK8i3ntvZ85fSJ//2dlN+49:bgtTeQA6qi8U2KJ/+dl4C
Details
File Type: PE32
Yara Hits
YRP/Visual_Cpp_2005_DLL_Microsoft | YRP/Visual_Cpp_2003_DLL_Microsoft | YRP/Armadillo_v4x | YRP/IsPE32 | YRP/IsDLL | YRP/IsWindowsGUI | YRP/HasOverlay | YRP/HasDigitalSignature | YRP/HasRichSignature | YRP/domain | YRP/IP | YRP/url | YRP/contentis_base64 | YRP/WMI_strings | YRP/Check_OutputDebugStringA_iat | YRP/anti_dbg | YRP/create_com_service | YRP/win_mutex | YRP/win_registry | YRP/win_files_operation | YRP/MD5_Constants | YRP/BASE64_table | YRP/Str_Win32_Http_API |
Parent Files
0146b14dea4e6241e2b42e933a712b18
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
NTPWSQ
D$`SVW
\$89|$0r
D$(SVW
F@9^8u
;;8t`j
F@9^8u
F@9^8u
H$99tX
H 99t7
D$XSVW
t$<RPQVS
D$ j@P
RSPQWV
D$ j@P
RSPQWV
M QRPhX
L$$j@Q
PSQRWV
M QRPh\
L$$j@Q
PSQRWV
D$XjlP
D$lSQRVP
D$XjlP
D$lSQRVP
RSPQVW
D$xSVW
L$$j0Q
D$$j0PS
\$l9D$d
L$,SQV
09|$dr
D$HSVW
<+t'<-t#<0u
L$0)L$,V
D$XSVW
t$<RPQVS
D$ j@P
RSPQWV
D$ j@P
RSPQWV
M QRPhX
L$$j@Q
PSQRWV
M QRPh\
L$$j@Q
PSQRWV
D$XjlP
D$lSQRVP
D$XjlP
D$lSQRVP
RSPQVW
D$xSVW
L$,<-u
D$ SPW
T$$j0R
L$$j0QS
D$P9t$ds
|$P9t$ds
L$ SQW
09t$dr
D$HSVW
<+t'<-t#<0u
L$0)L$,WR
Nx9^pr
F\9^Tr
V@9^8r
SS@PQj
G$SV9G
D$xSVW
8_~tg9_ptb
FT;FPt
NT;NPu
FT;FPu
FT;FPt
NT;NPu
FT;FPu
qP9qTt#
rP9rTt#
BT;BPt*
JT;JPu
KT;KPt
KT;KPu
												
																																												
							
t,</t(
;8u"Qj
Ht2Ht 
f;A,s7
@(QRSV
@SVW_^[
QQSVWd
PPPPPPPP
u)jAXf;
t*=RCC
;7|G;p
tR99u2
uTVWhX
^SSSSS
HHtYHHt
.t|PVj@
j@j ^V
< tK<	tG
>:u8FV
VVVVVQRSSj
t"SS9] u
<at,<rt"<wt
URPQQh
v	N+D$
;t$,v-
UQPXY]Y[
t VV9u
F Pj*S
F$Pj+Sj
F(Pj,S
F,Pj-S
F0Pj.S
F4Pj/S
F8PjDS
F<PjES
F@PjFS
FDPjGS
FHPjHS
FLPjIS
FPPjJS
FTPjKS
FXPjLS
F\PjMS
F`PjNS
FdPjOS
FhPj8S
FlPj9S
FpPj:S
FtPj;S
FxPj<S
F|Pj=S
C PjPV
C$PjQV
C*PjTV
C+PjUV
C,PjVV
C-PjWV
C.PjRV
C/PjSV
CHPjPV
CLPjQV
v	N+D$
PPPPPPPP
tCHt(Ht 
<+t"<-t
+t HHt
SVWj>3
@SVWh4
@SVWh8
@SVWh8
@SVWh8
UnRegisterTypeLibForUser
RegisterTypeLibForUser
application/mozilla-npruntime-scriptable-plugin:.foo:Scriptability Demo Plugin
NPRuntimeTest
NPRuntime scriptability API test plugin
UPDATE
Updatedate
d:\devleop\yht-client\project\htproject\source\htwebassist\npapiimpl\../../HTUpdate/HTUpdateMgr.h
CRLUpdateMgr::RunUpdatePro
CRLUpdateMgr::RunUpdate
runBusiness
isEnoughActiveDay
getBaseInfo
getUserVersion
getUserQudao
getUserUuid
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
LEwQEwEDBwtF
CxMuOg5MGkJFFhg
DEBUG@
d:\devleop\yht-client\project\htproject\common\libcommon\filehelper.cpp
CFileHelper::GetParentDir
rff-ss1w
0123456789abcdef
bad allocation
Unknown exception
Access violation - no RTTI data!
Bad dynamic_cast!
(null)
`h````
xpxxxx
bad exception
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
CorExitProcess
`h`hhh
xppwpp
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
LC_TIME
LC_NUMERIC
LC_MONETARY
LC_CTYPE
LC_COLLATE
LC_ALL
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
UTF-16LE
UNICODE
 Complete Object Locator'
 Class Hierarchy Descriptor'
 Base Class Array'
 Base Class Descriptor at (
 Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
 delete[]
 new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
 delete
__unaligned
__restrict
__ptr64
__eabi
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
united-states
united-kingdom
trinidad & tobago
south-korea
south-africa
south korea
south africa
slovak
puerto-rico
pr-china
pr china
new-zealand
hong-kong
holland
great britain
england
britain
america
swedish-finland
spanish-venezuela
spanish-uruguay
spanish-puerto rico
spanish-peru
spanish-paraguay
spanish-panama
spanish-nicaragua
spanish-modern
spanish-mexican
spanish-honduras
spanish-guatemala
spanish-el salvador
spanish-ecuador
spanish-dominican republic
spanish-costa rica
spanish-colombia
spanish-chile
spanish-bolivia
spanish-argentina
portuguese-brazilian
norwegian-nynorsk
norwegian-bokmal
norwegian
italian-swiss
irish-english
german-swiss
german-luxembourg
german-lichtenstein
german-austrian
french-swiss
french-luxembourg
french-canadian
french-belgian
english-usa
english-us
english-uk
english-trinidad y tobago
english-south africa
english-nz
english-jamaica
english-ire
english-caribbean
english-can
english-belize
english-aus
english-american
dutch-belgian
chinese-traditional
chinese-singapore
chinese-simplified
chinese-hongkong
chinese
canadian
belgian
australian
american-english
american english
american
Norwegian-Nynorsk
1#QNAN
1#SNAN
generic
iostream
system
iostream stream error
bad function call
d:\devleop\yht-client\project\htproject\common\libcommon\regcommon.cpp
CRegCommon::ReadRegValue
CRegCommon::WriteRegValue
d:\devleop\yht-client\project\htproject\common\libcommon\idmanager.cpp
IdManager::IdManager
IdManager::Init
IdManager::GetUuid
SELECT SerialNumber,Product FROM Win32_BaseBoard WHERE (SerialNumber IS NOT NULL)
SELECT Manufacturer,Name,ProcessorId FROM Win32_Processor
SELECT MACAddress FROM Win32_NetworkAdapter WHERE (MACAddress IS NOT NULL) AND (NOT (PNPDeviceID LIKE 'ROOT%'))
SELECT Product FROM Win32_BaseBoard WHERE (Product IS NOT NULL)
SELECT SerialNumber FROM Win32_BIOS WHERE (SerialNumber IS NOT NULL)
SELECT ProcessorId FROM Win32_Processor WHERE (ProcessorId IS NOT NULL)
SELECT SerialNumber FROM Win32_BaseBoard WHERE (SerialNumber IS NOT NULL)
SELECT SerialNumber FROM Win32_DiskDrive WHERE (SerialNumber IS NOT NULL) AND (MediaType LIKE 'Fixed hard disk%')
SELECT PNPDeviceID FROM Win32_NetworkAdapter WHERE (MACAddress IS NOT NULL) AND (NOT (PNPDeviceID LIKE 'ROOT%'))
d:\devleop\yht-client\project\htproject\common\libcommon\wmi_devicequery.cpp
WMI_DeviceQuery_Init
WMI_DeviceQuery_Init :
\\.\PhysicalDrive%d
ERROR: Could not open IDE21201.VXD file
DiskId32
\\.\IDE21201.VXD
SCSIDISK
\\.\Scsi%d:
d:\devleop\yht-client\project\htproject\common\libcommon\diskid32.cpp
GetHardDriveComputerID
%02X%02X%02X%02X%02X%02X
Visual C++ CRT: Not enough memory to complete call to strerror.
Illegal byte sequence
Directory not empty
Function not implemented
No locks available
Filename too long
Resource deadlock avoided
Result too large
Domain error
Broken pipe
Too many links
Read-only file system
Invalid seek
No space left on device
File too large
Inappropriate I/O control operation
Too many open files
Too many open files in system
Invalid argument
Is a directory
Not a directory
No such device
Improper link
File exists
Resource device
Unknown error
Bad address
Permission denied
Not enough space
Resource temporarily unavailable
No child processes
Bad file descriptor
Exec format error
Arg list too long
No such device or address
Input/output error
Interrupted function call
No such process
No such file or directory
Operation not permitted
No error
 bad locale name
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
invalid string position
string too long
bad cast
map/set<T> too long
invalid map/set<T> iterator
haitao
\baseData.ini
SERVER
UserID
Version
2.1.0.0
instPath
CLIENT
LatestDate
LocalDay
ACTIVE
%04d%02d%02d
\htbusiness.ini
ED8FgdFFcFHv3CK8lvx
s-rr1403
SHGetKnownFolderPath
PathHelper.cpp
Catch Exception. Error message is: 
CPathHelper::GetPathFromCSIDL
ActiveDate
&version=
&uuid=
&channel=
HttpReport.cpp
http://
client/activate
&activateType=
CHttpReport::ActivateReport
vector<T> too long
CHttpHelper::RequestData
HttpHelper.cpp
/center/
?version=
CHttpHelper::SendReport
A valid JSON document must be either an array or an object value.
Syntax error: value, object or array expected.
Missing ':' after object member name
Missing ',' or '}' in object declaration
Missing '}' or object member name
Missing ',' or ']' in array declaration
' is not a number.
Empty escape sequence in string
Bad escape sequence in string
additional six characters expected to parse unicode surrogate pair.
expecting another \u token to begin the second half of a unicode surrogate pair
Bad unicode escape sequence in string: four digits expected.
Bad unicode escape sequence in string: hexadecimal digit expected.
deque<T> too long
Comments must start with /
Type is not convertible to string
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetProcAddress
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
GetLocalTime
CreateMutexW
SetThreadLocale
GetThreadLocale
MultiByteToWideChar
lstrlenW
GetModuleFileNameW
WideCharToMultiByte
GetTickCount
lstrlenA
DeleteFileA
CloseHandle
GetCurrentProcess
WTSGetActiveConsoleSessionId
CreateFileA
OutputDebugStringA
OutputDebugStringW
WaitForSingleObject
TerminateProcess
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateFileW
FindClose
FindFirstFileW
CreateDirectoryW
GetVersionExW
SetEvent
CreateEventW
LoadLibraryW
FreeLibrary
GlobalFree
KERNEL32.dll
CharNextW
USER32.dll
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ADVAPI32.dll
ShellExecuteExW
SHGetPathFromIDListW
SHGetFolderLocation
SHELL32.dll
CoCreateInstance
CoTaskMemFree
ole32.dll
OLEAUT32.dll
ATL100.DLL
StrStrIW
PathFileExistsW
SHLWAPI.dll
WinHttpCloseHandle
WinHttpOpen
WinHttpSetTimeouts
WinHttpCrackUrl
WinHttpConnect
WinHttpOpenRequest
WinHttpSetOption
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpWriteData
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpQueryDataAvailable
WinHttpReadData
WINHTTP.dll
GetModuleBaseNameA
PSAPI.DLL
WTSQueryUserToken
WTSAPI32.dll
HeapFree
RtlUnwind
EncodePointer
DecodePointer
GetCurrentThreadId
GetCommandLineA
GetSystemTimeAsFileTime
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
HeapReAlloc
HeapSize
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
ExitProcess
WriteFile
GetStdHandle
GetLocaleInfoW
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointer
FlushFileBuffers
GetStringTypeW
InterlockedExchange
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
SetStdHandle
SetEndOfFile
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
InterlockedCompareExchange
InitializeCriticalSection
DeviceIoControl
SetPriorityClass
MessageBoxA
RegSetValueExW
RegCreateKeyExW
CoSetProxyBlanket
CoInitializeSecurity
CoInitialize
CoUninitialize
GetAdaptersInfo
IPHLPAPI.DLL
LocalFree
htwebHelper.dll
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
NP_GetEntryPoints
NP_GetMIMEDescription
NP_Initialize
NP_Shutdown
.?AVCWebAssistModule@@
.?AV?$CAtlDllModuleT@VCWebAssistModule@@@ATL@@
.?AV?$CAtlModuleT@VCWebAssistModule@@@ATL@@
.?AVCAtlModule@ATL@@
.?AU_ATL_MODULE70@ATL@@
.?AVnsPluginInstanceBase@@
.?AVCPlugin@@
.?AVBindNative@@
.?AV?$_Impl_base0@U_NPVariant@@@tr1@std@@
.?AV?$_Impl_no_alloc0@U?$_Callable_obj@V?$_Bind@U_NPVariant@@U1@V?$_Bind1@U?$_Callable_pmf@Q8CPluginFunMnager@@AE?AU_NPVariant@@XZV1@$0A@@tr1@std@@PAVCPluginFunMnager@@@tr1@std@@@tr1@std@@$0A@@tr1@std@@U_NPVariant@@@tr1@std@@
.?AV?$_Bind@U_NPVariant@@U1@V?$_Bind1@U?$_Callable_pmf@Q8CPluginFunMnager@@AE?AU_NPVariant@@XZV1@$0A@@tr1@std@@PAVCPluginFunMnager@@@tr1@std@@@tr1@std@@
.?AVPFunManger@@
.?AVCPluginFunMnager@@
.?AV?$_JsSTDBindNativeFun@V?$function@$$A6A?AU_NPVariant@@XZ@tr1@std@@@@
.?AV?$_JsSTDBindNativeFun@V?$function@$$A6A?AU_NPVariant@@ABU1@0@Z@tr1@std@@@@
.?AV?$_JsSTDBindNativeFun@V?$function@$$A6A?AU_NPVariant@@ABU1@@Z@tr1@std@@@@
.?AV?$_JsSTDBindNativeFun@V?$function@$$A6AXABU_NPVariant@@@Z@tr1@std@@@@
.?AVCComClassFactory@ATL@@
.?AUIClassFactory@@
.?AUIUnknown@@
.?AV?$CComObjectRootEx@VCComMultiThreadModel@ATL@@@ATL@@
.?AVCComObjectRootBase@ATL@@
.?AV?$CComObjectCached@VCComClassFactory@ATL@@@ATL@@
.?AV?$CComObject@VCWebObject@@@ATL@@
.?AVCWebObject@@
.?AV?$CComObjectRootEx@VCComSingleThreadModel@ATL@@@ATL@@
.?AV?$CComCoClass@VCWebObject@@$1?CLSID_WebObject@@3U_GUID@@B@ATL@@
.?AV?$IObjectWithSiteImpl@VCWebObject@@@ATL@@
.?AUIObjectWithSite@@
.?AV?$IDispatchImpl@UIWebObject@@$1?IID_IWebObject@@3U_GUID@@B$1?LIBID_WebAssistLib@@3U3@B$00$0A@VCComTypeInfoHolder@ATL@@@ATL@@
.?AUIWebObject@@
.?AUIDispatch@@
.?AV?$IDispEventImpl@$00VCWebObject@@$1?DIID_DWebBrowserEvents2@@3U_GUID@@B$1?LIBID_SHDocVw@@3U3@B$00$00VCComTypeInfoHolder@ATL@@@ATL@@
.?AV?$IDispEventSimpleImpl@$00VCWebObject@@$1?DIID_DWebBrowserEvents2@@3U_GUID@@B@ATL@@
.?AV?$_IDispEventLocator@$00$1?DIID_DWebBrowserEvents2@@3U_GUID@@B@ATL@@
.?AV_IDispEvent@ATL@@
.?AVtype_info@@
.?AVbad_typeid@std@@
.?AV__non_rtti_object@std@@
.?AVbad_exception@std@@
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AV_Locimp@locale@std@@
.?AVerror_category@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AV_System_error_category@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVbad_function_call@tr1@std@@
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
.?AV_com_error@@
.?AVCHTConfigBase@@
.?AV?$codecvt@DDH@std@@
.?AV?$ctype@D@std@@
.?AUctype_base@std@@
.?AVcodecvt_base@std@@
.?AVfacet@locale@std@@
.?AV?$basic_ofstream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ifstream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_iostream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$_Iosb@H@std@@
.?AVios_base@std@@
.?AVruntime_error@std@@
.?AVexception@std@@
.?AVfailure@ios_base@std@@
.?AVsystem_error@std@@
.?AVbad_cast@std@@
.?AVbad_alloc@std@@
.?AVCBaseInfoConfig@@
.?AVCHTConfig@@
.?AV?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$ctype@_W@std@@
.?AV?$numpunct@_W@std@@
.?AV?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@
.?AV?$basic_ios@_WU?$char_traits@_W@std@@@std@@
.?AV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@
.?AV?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@
.?AV?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@
.?AV?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@
.?AV?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$numpunct@D@std@@
.?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AVCAtlException@ATL@@
.?AVDefaultValueAllocator@Json@@
.?AVValueAllocator@Json@@
HKLM {  
  NoRemove SOFTWARE {  
    NoRemove Microsoft {     
      NoRemove Windows {  
        NoRemove CurrentVersion {  
          NoRemove Explorer {  
            NoRemove 'Browser Helper Objects' {  
              ForceRemove '{8002EC7A-C61D-432C-975E-21D616D3B7E7}' = s '
                val 'NoExplorer' = d '1'  
              }  
            }  
          }  
        }  
      }  
    }  
}PAHKCR
	NoRemove CLSID
		ForceRemove {8002EC7A-C61D-432C-975E-21D616D3B7E7} = s '
			ForceRemove Programmable
			InprocServer32 = s '%MODULE%'
				val ThreadingModel = s 'Apartment'
			TypeLib = s '{A6ACF903-2824-4C82-BCB3-D5A39C8A93FA}'
			Version = s '1.0'
PAMSFT
stdole2.tlbWWW
?aWebAssistLib
	8KPWebObjectWWWd
WIWebObjectWWd
getUserUuidW
urresultWWd
getUserQudaod
getJsUrld
isEnoughActiveDayWWW
Created by MIDL version 7.00.0555 at Thu Mar 31 18:21:53 2016
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
    <security>
      <requestedPrivileges>
        <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
      </requestedPrivileges>
    </security>
  </trustInfo>
</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX
5\6f6{6
9.9F9X9
;F>U>&?5?
:c=i=3>9>
1&1C1V1
1&242K2
8m9v9F:V:p:w:
4(4B4F6X6
:&:F:X:{:
7!7(7V7h7
949X9f9t9{9
<I>X>f>
60H0b0i0p0
8 8A9L9
7+7F7P7W7
435>5f5u5
;/<8<{<
>F>U>w>
60E0e0
1%1g1v1
1&252[2
668E8V8
8&959Q9p9
>&>5>W>r>6?E?
3F3U3t3
7%8Q8\8
96:H:d:k:z:
:6;F;k;
5Z6a6j6u6|6
6&757f7
8$8C8g8n8
:%:3:>:~:
;&<9<N<V<h<v<
292@2V2
4+5:6R6
3@3f3x3
5E8f8x8
?+?2?G?O?U?Z?k?
9%9*9;9
2&2D2f3u3
364E4a4
4Y5k5|5
;)=8=F=
5F6X6{6
7M8Z8q8
5%5B5z5
6"6H6h6
:-:E:v:
=!>A>O>z>
?:?Q?m?
= =$=(=,=0=4=8=<=@=V=e=/?
54585<5@5
5V6f667F7V9h9 :+:D:O:f:u:
<m=<>@>D>H>L>P>T>X>\>
0 0$0(0,000	1
4&656G7
6 6$6(6,60646
=)=F=W=
4A7\7I8g8x9
="=&=4=]=f=l=r=v=
>5>=>B>H>L>Z>
?0?V?f?
3 3$3(3,3034383P3
4O5W5\5b5f5t5
6"6V6h6
8$9/9F9X9r9
<N<T<]<d<m<
> >&>,>1>6><>B>G>M>e>s>|>
>3?;?A?|?
0Q1]1L2S2Z2a2h2o2v2}2
3$3-363?3H3Q3Z3c3l3u3~3
4)454A4M4Y4e4q4|4
2C2a2p2
364H4q4
4\5t5e6
8(8&:8:
;&<5<b<x<
=&=L=k=
0050G0L0`0e0y0~0
4@4F4Z4g4m4}4
5&555<5c5s5
5C6	7;7L7t7}7
9F9a9j9x9
>+>6>A>L>]>&?8?
E0P0{0
7)747?7]7p7
708_8d8
8Y97:?:F:L:S:X:]:b:g:l:q:w:|:
<H<e<q<|<
=8=V=f=|=
>%>2>=>
525o5}5
3(3>3H3P3\3f3
>&>9>C>b>l>v>
364I4m4
=&?5?S?d?
0:1o1W4
747Q7`7
9$969T9
?<?A?F?]?
0/050_0t0
3?3]3d3h3l3p3t3x3|3
3B4M4h4o4t4x4|4
5f5l5p5t5x5
5,6D6K6S6X6\6`6
6:7@7D7H7L7
878i8p8t8x8|8
1!1,1M2
3)4]4c4i4~4
8+979|97;
1%121>1N1U1d1p1}1
292H2Q2u2
;&<`<)=
9?9[9~9
4m7q7u7y7}7
8.999?9d9j9o9
< <,<1<A<F<L<R<h<o<
=I=O=W=j=8>Y?
6&707;7R9G:N:Z:`:l:r:{:
<C=S=Y=e=k={=
>(>->2>8><>B>G>M>R>a>w>}>
0090E0
0`1h1{1
2 20262G2
5&5W5t5
3%6)6-6165696=6A6
7-888B8[8e8x8
;%;@;H;P;g;
<'=3=t=b>
!0<0M0
:<:F:R:^:j:u:
<)<G<k<
=9=^=i=x=
1'161;1\1a1
3!3-353=3I3r3z3d42696
7@7K7Q7W7]7e7
8:8R8q8
<&<.<8<E<M<S<Y<
='=/=7=@=I=W=e=
= >->F>S>f>s>
1,1[1b1l1~1
434#5L5
2	323d3
9-9W9h9u9|9
7%8?8H8p8u8z8
9R9W9^9c9j9o9}9
;*;/;8;B;M;
: :2:D:V:
= =2=D=~=
9L:b:l:v:
<6<_<s<
8!8%8)8-8185898=8A8E8I8M8Q8U8Y8]8a8
:8;K;c;
1c2p2E3O3
8X8x8L;n;
6Y7_7m7	8 8Z8
1N4R4V4Z4^4b4f4j4n4r4v4z4
0#2T2d2%3+373F3z3
9.9:9@9J9Z9x9
:.:::B:H:W:`:
<C<q<{<
?0?;?W?}?
3+54595?5H5N5j5
586H6X6h6u6
6&787m7
919:9@9F9
;8;A;G;M;
0X1\1`1d1h1v1
626M6a6
?g?l?u?{?
M0^0v0~0
4"5+5g5}5
5,6S6{6
7L8P8T8X8\8f8x8
>(>-><>i>
989Q9Y9p9
5/7R7r7
0$1W1}1
?#?(?2?C?H?R?c?h?r?
0"01070=0B0G0M0S0X0a0g0m0r0w0}0
1#1/1;1E1Z1o1s1}1
2)2J2O2Y2q2
3"3*3;3E3P3b3j3{3
4"4*4;4E4P4a4r4v4
5#5-575B5F5M5Q5X5\5b5l5v5
3 3$3(383<3@3D3H3L3P3T3X3\3`3l3p3t3x3|3
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;
;,<0<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
<D=H=L=P=@>D>x>|>
>t?x?|?
9$9,949<9
> >$>(>,>0>4>8><>
h5l5p5t5x5|5
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
5 5(50585@5H5P5X5`5h5p5x5
6 6(60686@6H6P6X6`6h6p6x6
7 7(707
8 8$8(8P8T8X8\8`8d8h8l8p8t8x8|8
0 040<0@0D0P0X0\0
(9,9094989<9@9D9H9L9P9T9
:,:0:H:X:\:`:d:h:p:
;0;@;D;L;d;t;x;
< <(<@<P<T<d<h<l<t<
= =0=4=D=H=L=T=l=|=
>(>,>4>L>\>`>d>l>
?0?@?D?T?X?\?`?d?h?l?p?t?x?|?
0$0<0L0P0T0\0t0x0
1 181H1L1P1X1p1t1
2$24282<2D2\2`2x2|2
3 3$3(303H3X3\3`3h3
4$4(484<4D4\4l4p4
5,5054585@5X5h5l5|5
6 686H6L6\6`6d6l6
7 70747D7H7L7T7l7|7
8 8084888@8X8h8l8|8
9 9$9,9D9T9X9h9l9p9t9|9
:,:0:4:<:T:d:h:x:|:
; ;(;@;P;T;d;h;l;p;t;x;
< <$<(<,<0<8<P<`<d<t<x<|<
= =0=4=D=H=L=P=T=\=t=
>,>0>@>D>L>d>t>x>
?4?8?P?`?d?t?x?|?
0,000@0D0H0P0h0x0|0
1 1$14181H1L1\1`1p1t1x1
2$2<2L2P2T2X2\2d2|2
3 30343<3T3d3h3x3|3
4 4$4,4D4T4X4h4l4p4x4
448@8`8l8
9<9D9L9T9\9d9l9t9|9
: :(:0:8:@:H:P:X:`:l:
;,;4;<;D;L;T;\;d;l;x;
<$<0<X<l<x<
=0=<=\=d=l=t=
>,>P>\>d>|>
? ?(?0?8?@?H?P?X?`?h?p?x?
 0@0H0P0X0`0h0p0x0
1 1@1H1T1t1
2 2(2<2H2P2h2p2
3 3(343T3\3d3p3
4 4(404D4L4P4T4\4p4
505P5p5
686X6t6x6
7 7(7X7`7d7|7
8 8,8H8h8
9(9H9h9
:(:H:h:
;0;P;l;p;x;
<(<0<8<@<D<H<P<d<l<t<|<
=,=4=<=D=L=T=\=d=p=
> >@>H>P>\>
? ?(?0?8?@?H?P?X?`?h?p?x?
0 0(00080@0H0P0X0`0h0p0x0
1$1,141<1D1L1T1\1d1l1t1|1
282D2h2
3 3(30383@3H3P3X3`3h3p3x3
40484L4T4X4`4h4p4
5 5$5,545<5X5h5
6 6,6L6T6\6d6l6x6
7(707H7P7X7`7h7t7
808<8\8h8
9 9@9L9l9x9
:$:0:P:X:d:
; ;,;4;L;X;
<0<<<\<d<p<
=$=,=4=<=H=h=p=|=
> >@>H>P>X>d>
? ?(?4?T?`?
0(0H0P0X0d0
1<1D1L1X1x1
2 2@2H2T2|2
3<3D3L3T3\3d3l3t3|3
4 4@4H4P4\4|4
5$5<5H5h5p5|5
6(6H6P6X6`6l6
7(7`7t7
8(8<8H8P8h8p8
989@9H9P9\9|9
:$:8:D:L:d:t:|:
; ;,;4;L;T;\;h;
<0<@<T<`<h<
< =0=@=T=h=t=|=
> >H>P>h>|>
?8?D?d?l?
0$0,0D0T0\0h0
1(181L1X1`1|1
2,2<2D2P2t2|2
3,343<3D3L3X3
4$4,444<4H4h4p4x4
505<5D5\5d5p5
6$6D6L6T6`6
7$7D7L7T7\7d7p7
8 8(808<8\8d8p8
989D9d9l9t9|9
:$:0:T:\:d:l:t:|:
;$;,;4;<;D;L;X;x;
< <,<T<\<d<|<
=$=,=4=<=D=L=T=\=d=l=t=|=
1$1@1D1H1L1P1T1X1\1`1d1h1l1p1
5<5@5D5H5T5X5\5`5
7,8H8`8
:$:(:H:h:
? ?h?l?p?t?x?|?
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
0(181H1X1h1
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
181T1t1
304L4h4
5 5@5X5
Western Cape1
Durbanville1
Thawte1
Thawte Certification1
Thawte Timestamping CA0
121221000000Z
201230235959Z0^1
Symantec Corporation100.
'Symantec Time Stamping Services CA - G20
http://ocsp.thawte.com0
.http://crl.thawte.com/ThawteTimestampingCA.crl0
TimeStamp-2048-10
Symantec Corporation100.
'Symantec Time Stamping Services CA - G20
121018000000Z
201229235959Z0b1
Symantec Corporation1402
+Symantec Time Stamping Services Signer - G40
http://ts-ocsp.ws.symantec.com07
+http://ts-aia.ws.symantec.com/tss-ca-g2.cer0<
+http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
TimeStamp-2048-20
WoSign CA Limited1'0%
WoSign Class 3 Code Signing CA0
160214060639Z
170314060639Z0
Shanghai1
Shanghai1<0:
3Shanghai  Zichou Liuhe Network Technology Co., Ltd.1<0:
3Shanghai  Zichou Liuhe Network Technology Co., Ltd.0
'http://ocsp1.wosign.com/class3/code/ca106
*http://aia1.wosign.com/class3.code.ca1.cer07
&http://crls1.wosign.com/ca1-code-3.crl0O
http://www.wosign.com/policy/0
\V	'-"
WoSign CA Limited1*0(
!Certification Authority of WoSign0
090808010005Z
240808010005Z0R1
WoSign CA Limited1'0%
WoSign Class 3 Code Signing CA0
%DEe3F
http://crls1.wosign.com/ca1.crl0o
http://ocsp1.wosign.com/ca106
*http://aia1.wosign.com/ca1-class3-code.cer0
http://www.wosign.com/policy/0
cbf^W	
>'H7G^
StartCom Ltd.1+0)
"Secure Digital Certificate Signing1)0'
 StartCom Certification Authority0
060917224636Z
191231235959Z0U1
WoSign CA Limited1*0(
!Certification Authority of WoSign0
TzQhnw
http://ocsp.startssl.com/ca00
$http://aia.startssl.com/certs/ca.crt02
!http://crl.startssl.com/sfsca.crl0
7CE[2.E
WoSign CA Limited1'0%
WoSign Class 3 Code Signing CA
Symantec Corporation100.
'Symantec Time Stamping Services CA - G2
160331102552Z0#
Cq]*E