Static | ZeroBOX

PE Compile Time

2014-05-30 16:40:04

PDB Path

c:\571\bar\Nature\industry\Son.pdb

PE Imphash

1bcf1a17040e578ef3e6fe0888b5a0a4

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000d2e7b 0x000d3000 5.64357184369
.data 0x000d4000 0x0001782c 0x00001600 3.91320304109
.idata 0x000ec000 0x00000d0e 0x00000e00 5.29299062625
.rsrc 0x000ed000 0x00000518 0x00000600 2.93540035637
.reloc 0x000ee000 0x0000270c 0x00002800 6.65386529971

Resources

Name Offset Size Language Sub-language File type
RT_STRING 0x000ed3c0 0x00000156 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x000ed0a0 0x00000320 LANG_ENGLISH SUBLANG_ENGLISH_US data

Imports

Library KERNEL32.dll:
0x10ec07c GetSystemTime
0x10ec080 GetTempPathA
0x10ec084 GetVersionExA
0x10ec088 GetCurrentDirectoryA
0x10ec08c VirtualProtect
0x10ec094 GetModuleHandleA
0x10ec098 LockResource
0x10ec0a0 GetVolumeInformationA
0x10ec0a4 OpenProcess
0x10ec0a8 GetDateFormatA
0x10ec0b0 FindResourceA
0x10ec0b4 CreateFileA
0x10ec0b8 EncodePointer
0x10ec0bc DecodePointer
0x10ec0c0 GetCommandLineA
0x10ec0c4 GetCurrentThreadId
0x10ec0c8 RaiseException
0x10ec0cc RtlUnwind
0x10ec0d0 IsDebuggerPresent
0x10ec0d8 EnterCriticalSection
0x10ec0dc LeaveCriticalSection
0x10ec0e0 IsValidCodePage
0x10ec0e4 GetACP
0x10ec0e8 GetOEMCP
0x10ec0ec GetCPInfo
0x10ec0f0 GetLastError
0x10ec0f4 SetLastError
0x10ec0f8 GetCurrentThread
0x10ec0fc MultiByteToWideChar
0x10ec100 ExitProcess
0x10ec104 GetModuleHandleExW
0x10ec108 GetProcAddress
0x10ec10c AreFileApisANSI
0x10ec110 WideCharToMultiByte
0x10ec114 HeapSize
0x10ec118 HeapFree
0x10ec11c HeapAlloc
0x10ec120 GetProcessHeap
0x10ec124 GetStdHandle
0x10ec128 GetFileType
0x10ec12c DeleteCriticalSection
0x10ec130 GetStartupInfoW
0x10ec134 GetModuleFileNameA
0x10ec138 GetCurrentProcessId
0x10ec154 CreateEventW
0x10ec158 Sleep
0x10ec15c GetCurrentProcess
0x10ec160 TerminateProcess
0x10ec164 TlsAlloc
0x10ec168 TlsGetValue
0x10ec16c TlsSetValue
0x10ec170 TlsFree
0x10ec174 GetTickCount
0x10ec178 GetModuleHandleW
0x10ec17c CreateSemaphoreW
0x10ec180 FatalAppExitA
0x10ec184 GetStringTypeW
0x10ec188 GetLocaleInfoW
0x10ec18c IsValidLocale
0x10ec190 GetUserDefaultLCID
0x10ec194 EnumSystemLocalesW
0x10ec198 GetDateFormatW
0x10ec19c GetTimeFormatW
0x10ec1a0 CompareStringW
0x10ec1a4 LCMapStringW
0x10ec1a8 WriteFile
0x10ec1ac GetModuleFileNameW
0x10ec1b0 SetConsoleCtrlHandler
0x10ec1b4 FreeLibrary
0x10ec1b8 LoadLibraryExW
0x10ec1bc HeapReAlloc
0x10ec1c0 FlushFileBuffers
0x10ec1c4 GetConsoleCP
0x10ec1c8 GetConsoleMode
0x10ec1cc SetFilePointerEx
0x10ec1d0 OutputDebugStringW
0x10ec1d4 CloseHandle
0x10ec1d8 SetStdHandle
0x10ec1dc WriteConsoleW
0x10ec1e0 CreateFileW
Library ADVAPI32.dll:
0x10ec004 RegOpenKeyExA
0x10ec008 LookupPrivilegeValueA
0x10ec014 CreateServiceA
0x10ec018 RegQueryValueExA
0x10ec01c RegSetValueExA
0x10ec020 GetTokenInformation
0x10ec024 RegCloseKey
0x10ec028 AdjustTokenPrivileges
0x10ec02c RegEnumKeyA
0x10ec030 ControlService
0x10ec034 FreeSid
0x10ec038 SetServiceStatus
0x10ec03c CloseServiceHandle
0x10ec040 OpenProcessToken
0x10ec048 DeleteService
0x10ec04c SetEntriesInAclA
Library COMCTL32.dll:
0x10ec058 None
0x10ec064 ImageList_Destroy
0x10ec068 None
0x10ec06c ImageList_Add
0x10ec070 CreateToolbarEx
0x10ec074 PropertySheetA

Exports

Ordinal Address Name
1 0x107f020 Paragraphbell
2 0x107e9f0 Sharptwo
!This program cannot be run in DOS mode.
~];V:<U
Rich:<U
`.data
.idata
@.rsrc
@.reloc
permission denied
file exists
no such device
filename too long
device or resource busy
io error
directory not empty
invalid argument
no space on device
no such file or directory
function not supported
no lock available
not enough memory
resource unavailable try again
cross device link
operation canceled
too many files open
permission_denied
address_in_use
address_not_available
address_family_not_supported
connection_already_in_progress
bad_file_descriptor
connection_aborted
connection_refused
connection_reset
destination_address_required
bad_address
host_unreachable
operation_in_progress
interrupted
invalid_argument
already_connected
too_many_files_open
message_size
filename_too_long
network_down
network_reset
network_unreachable
no_buffer_space
no_protocol_option
not_connected
not_a_socket
operation_not_supported
protocol_not_supported
wrong_protocol_type
timed_out
operation_would_block
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
destination address required
executable format error
file too large
host unreachable
identifier removed
illegal byte sequence
inappropriate io control operation
invalid seek
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no message available
no message
no protocol option
no stream resources
no such device or address
no such process
not a directory
not a socket
not a stream
not connected
not supported
operation in progress
operation not permitted
operation not supported
operation would block
owner dead
protocol error
protocol not supported
read only file system
resource deadlock would occur
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many links
too many symbolic link levels
value too large
wrong protocol type
xdigit
bad allocation
bad function call
regex_error(error_collate): The expression contained an invalid collating element name.
regex_error(error_ctype): The expression contained an invalid character class name.
regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape.
regex_error(error_backref): The expression contained an invalid back reference.
regex_error(error_brack): The expression contained mismatched [ and ].
regex_error(error_paren): The expression contained mismatched ( and ).
regex_error(error_brace): The expression contained mismatched { and }.
regex_error(error_badbrace): The expression contained an invalid range in a { expression }.
regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings.
regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine.
regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression.
regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level.
regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence.
regex_error(error_parse)
regex_error(error_syntax)
regex_error
Unknown exception
(null)
`h````
xpxxxx
`h`hhh
xppwpp
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
CorExitProcess
_hypot
_nextafter
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
CreateEventExW
CreateSemaphoreExW
SetThreadStackGuarantee
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
FlushProcessWriteBuffers
FreeLibraryWhenCallbackReturns
GetCurrentProcessorNumber
GetLogicalProcessorInformation
CreateSymbolicLinkW
SetDefaultDllDirectories
EnumSystemLocalesEx
CompareStringEx
GetDateFormatEx
GetLocaleInfoEx
GetTimeFormatEx
GetUserDefaultLocaleName
IsValidLocaleName
LCMapStringEx
GetCurrentPackageId
GetTickCount64
GetFileInformationByHandleExW
SetFileInformationByHandleW
bad exception
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
SystemFunction036
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
template-parameter-
generic-type-
`anonymous namespace'
`non-type-template-parameter
`template-parameter
`vtordispex{
`vtordisp{
`adjustor{
`local static destructor helper'
`template static data member constructor helper'
`template static data member destructor helper'
static
virtual
private:
protected:
public:
[thunk]:
extern "C"
short
unsigned
volatile
std::nullptr_t
<ellipsis>
,<ellipsis>
throw(
double
__int8
__int16
__int32
__int64
__int128
<unknown>
wchar_t
__w64
UNKNOWN
signed
volatile
`unknown ecsu'
union
struct
class
coclass
cointerface
volatile
const
cli::array<
cli::pin_ptr<
{flat}
MessageBoxW
GetActiveWindow
GetLastActivePopup
GetUserObjectInformationW
GetProcessWindowStation
1#SNAN
1#QNAN
generic
unknown error
iostream
iostream stream error
system
-]x!q<%"8
!!^=J8
OlAT`
|{t_3}
 !
aadV&Y
u4!v\{
|$PHcG
Z`[f?
=\wU~J
.-}ikm
ygig$
MELH#u
]HJV)"
BO'4aM
;LV@HE
jZDw&i
}eHHHH
Lr5v5$
>MHHT
j $HH`NH ` $
HH@H+,
`HHtHHL
;HH$%
%UU]HHE
LAHM$@
eL%pfP
71N/S"$
IR!!
Wl@jd:<s
[SL$HH
jLtX$$
(H9\EH
bJjn'%t
0tL@%LLz
Yuot$D
\HHDHf]
tBEGP"
DSm/. HD
L$0030h
_HKHHL
kHTME
5rG"'U
HM!ib9
0 HHH8
`;MHlY
[EHH.H
$lHLHH
7uh+*k
HT} .
D/5H}^f
iQAOih
\EHwu
O Hv.S
HtHLHL
RTLHH$}
HHH8HA
HLH~LH
uMHHHL
LLeHH
HU0MLH
@$HH0HH
F HD$]
$tLHH
=HJ3ut
DHHt$I
HM]EHA
AK'HL
@&3t|(
S\AHHH
H47H HM
E}-$Dc
H Hu$E
@HH0L
HH/D`L
HHA`HM
Hx$PnA
&HTH8Z
HM\LH
D_Hp}xD
H]HLDD
HH`
$EH H\$
[EP.HHH$H
$-DLH$
WD@;uI
H'DzDHO
HQtl$
HHpM35H
UMktH_
HH$@HH
H LH`\
HSHP6
@$EL'H
{+HHHx$HLH
IYHUHH$
$HctLt
7pHHHH
'tHH@$
0%@HWP%H
XSDHlS
0HHAH
tWHxL%H
H Hx[@8H
HH$ `[A
W;HEHH I
](`0HHu
A$/t$LH
0tP0ts
HHHHMH
;8 Wu'H
3H+J M
$MHtMHH
.]HHHtHHT
dUL*$`]H
A($HtA
<Ht{$C
E0Hf`0
uHHIX$
HHHW@H
HTDNHZ
`H;L$ 3
%eHHHM$
8C[H H7
HE@`LEHH
H\Dt0P;
$H$H@Hb HH$p`
Hx(HK_y
AHHHHDH
[.LHBA
U]HTS@W3
l/A)H4OQ
HAH$H}
iTHHM%
HHH1PHH
ID#'tTH`
OHH $tJ$
B7HD$$HA
HLIHHL
cL$,BMK
LH/CHp$$K
HH)0HV
HAHAHt
@xMHH%)
0HHHVAH
W$I$0$
LLLHH(
HHu%HA
_Hux~H
$HrHc H
DEPQ@E
VC0HNL
`$*$HP
H4%H%0H
LO@](t
H^g\[W
PH 0HI
t$0IyL
3H(HHH
AH HH3'
C HIHS
H$LME#
Z+DH Hi
8B Hk0
HuAUHHH
\UHH;P
L%HVrH
&Z`$G_
$$KHH0PH|
Tu@HH{y
)iP$IAd
JWCHpHy
WK[$LP
HEcH$X
HHMH$W7
$H`.H.
H[3$HAE
AD%HHG
[HGHHH
:H3H @
H%H$f(
MXEQIL
T^HJ$L
HuX@E9
H[8t:
nL$H0H
HHH4C%H
HMTHP*
$cWHH-
H_HtHH
(L &H\Q p
Lh$M`I
HH:H 5
L$HM H0A
HHHE(u
H$1H_P
HCM[Sn
CdHHH`
H$UZHLMH
pp8$H8
c$DL`0`
H'P@$*
tHHg$Dd
H3EQH#
H03Au.E
HD$$A
IHHtt0L
LHH_0HPL
HHe"VP@
E@HHHHIH
'M|$lH
h0P{3M
H($H$03
HH@IHCH
3THtH@H
HHWgt
H0 $HH(H
)HUKHI
G=+0P
MMH#~"
4AuH *t
0H(M)M
9H$\G"
$FEHHS
3$UHA[_$
HLWPHHA$
0eH0lHD
`EHUqH
s\HHHoI
nAAHt0
HHH'HH_
tt'H\HAS$
eD0LUH0l
;-H$$3
HThuH!
HHL$DU
D0Hs u
SHc3$A
*xHStM
LAH%H"HDD
HHH^WH
HH3HLHl
H$HLHH
$0;@K$
H fHtLv
LH$HAH
t3JWAH,
_3;HDH$H
$HcED
H0tHHXH
$H %1-E
IoSHt$
$H8B(`
CHHD'H
({uM&M H
CHLt8_A.
DoD$_DE`
*PI0;LH0
H)HpH\
OH[$aH
@$'$H
MHefHM
AHH@UT
3H=Mx\DH*
HzH`tHLM
\HE$:A$
UHHDkH
fH$H(;H0
H,8Hpt
H0tHH%P
HUH%LP
HLH0ZV
H=HHM3
HH$SnH
ULH0MHH
$ <HL${N
$H6TFHSfH
H_EHa
EH~HH$
HH3$ |
Lu_HH\
\t(HD]H
[(|L;!
sqHF H
U$H]yI
HP(\$V
0 $ALT
HHHH$H
WPH$3H
H!HH!K
DHHh%Hb
0THL&HH
UM\wHTHM
*HH3D3$Cu
\(HXHU
c%$$HXH
EHPAHM
@$HLxK
/ 3uHHt
H$HLC
AHhH3
@H$$+D
l$([t%
d*@$@8
8$HH33
`0\LDU
xXV-HM
HTxPI80
HLHHHH
0H~t{tD
2+HH[$
E,LH]S5
cHHHHUM$
( L4($$HK
@HNHp@
H@$tHH
HH__L&
lHH0HH
t[H_Pu
8`Iu`H
HvHWA
4 Oh=@
A$H+HH
H@H\W+
HtyH"uuH
t$G2HW
tMMD%H,
A0HL$@
0AIHt$
<U :t
H-t8HH]
UIHElHHH
HHVHPH
lHHH0H
HX[HM0H
D0$$$
HHE$Ut
$H$NHd0
AH}HH$
HD>CH0
HpIH@Y
HHSLtU
IH0P8HH
H$IttI
HKL[ES
SHtL$ W
`HHtHH
HLI((
HTHlH[
H%0u$H
H ]ltL
pHsH}0
]cLHHL
XC@(HH
HHHLzw
IHHID`
UHHH\L
3;TAHE
$uxHSH
CFLHH`;
D|$hWDH
HtHHD!
L yHI^
HU$AS$
HHHHLE
t(zSKH
AL#dWHC
HH1'LL
H$$4uHVH
{ LHMH
,H!tu:$$
(AJ$/D
HI;T3H3+H
PHt`cH
MyL8:t
HH0H8HL
D(h$$JM|Hf
HLEH(L@!H
0uHIBtx
$"\$y@
HS$H5H
HsE5$HH
`A8%-HHK
]S[$L8
K_PHHL
H8H{CLH
Uxm+q3+
Z[t]}$
IE*\|HH
$IL$;!
H$HH H
HHHDTH$
$DHHHH
X@6H\uH9
D$V$tt
$$LCHH
$ H=tE
A`H:LHP
7uOH7L
$FauAL
H(H ;$
UH@Hp;
H` 0h$
HKDHAt
R @DH/
H$8=$EH
}H$tEH
HHL :t
c \H%H
D_0-;(]
LdX@M
ED@DHH
I$]EO#HH
MCPX;Lh
';H$`M
t HDL
%HtSIH
H{S&E;
uCIHHH
tM$HHG
|HI0HA
M@cTuA
HH3TLV
eHW3HH
H(`0|@
$LH$]H
H$ HHL
PEO/$L
B_D$HS
HH0$G
%|tHHXHt
]HD.]HHuV
MDEHLH,
[$HLE$|k$%L
HP ([[
HH@LTH
pW$tM0
S/@2tD
EH@HHH
Ht0%'H
xM$@t$
Atf HtT
_A0qHHH
$eHLH$
[LtV0#
L1hHtH
PT$H H`I
D$HgU^
$HC @U
$"3DE8M
LHu&%z
t$XI8HE
HttvHHU!
H$ 6H\W
HH`$_D8%
tH@H$H
;$HEOU
$\+Hyy
H#3T$H0
H D[_U
$HP0H{H
IGH@ LE
(HXZ0$
_JHLG
'MH\L=M$H
8ZL3`J
$@3HHH
::%%FF
oW;W_PlP
%%Rj%jywIw
::FFRR%%RR
RRivhM3
string too long
invalid string position
c:\571\bar\Nature\industry\Son.pdb
QQSVWd
HHtVHHt
HHtVHHt
<ItH<ht<<lt
~pjCXf
tyPVj@W
_tcPVj@
u#j,Xf;
>Cu/f9F
j@j _W
HtHu4j
,SVWj0X
Wj0XPV
URPQQh@
<0|m<9
G Pj*S
G$Pj+S
G(Pj,S
G,Pj-S
G0Pj.S
G4Pj/S
G8PjDS
G<PjES
G@PjFS
GDPjGS
GHPjHS
GLPjIS
GPPjJS
GTPjKS
GXPjLS
G\PjMS
G`PjNS
GdPjOS
GhPj8S
GlPj9S
GpPj:S
GtPj;S
GxPj<S
G|Pj=S
PP9E u
Yu2Vj@h
jA[jZZ+
<v5hj]
t WW9}
tK<_t<<$t8<<t4<>t0<-t,<a|
<z~$<A|
0t-HHt
<0|L<9
tE<A|2<P
t9<_u5
t.<_u*
Tt^HtTHtJHt
<A|,<P
AtOHt5Hu
OtFOt#OuV
KKt*KKt
<0| <9
;t$,v-
UQPXY]Y[
PWWWWV
PSSSSV
SVWjA_jZ+
uBjAYjZ+
SVjA[jZ^+
jAZjZ^
Ht+Ht$Ht
HtHHt
+tHHt
+t"HHt
HAO8t
~';_t|%3
uHjAXf;
uWjAXf;
WPPPPj
PVVVVQ
PVVVVQ
+tIIt
-t*j0X;
+t"HHt
9|$@wFr
|$8W}~
f;D$Hvt
9D$LuP3
cpixAp
XU-g#~G
k{2>@Mrg
3-Fd
h ?-qd
#MQNUV]
tBWi
z;YzM
1ew|*3
;{& A_&
V:~-l}
hwZ0pl
nIVFD@
fi6}.c
Z}quxt
aWhM2#
h<sLl-
bE_0P#
MG|;G%
J\ !!
?6hFm|
;z,%<I)
0oHoVKE
o|x~9wg
xHBkU]
N.*X%&
|0NCMp\
z@M|8/
1W~qcj]
`!P].B
hc3q5l
]<@N
'e_g819
/(Kf"OQ
Y6mtTaz
WpFc
8
T/J*Y#!
AMP:CI
_bkBnc
1DLVWU
[zum##
UcjMMM9
KKKKllll
9vccca
(xy]1NJ
Son.dll
Paragraphbell
Sharptwo
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVinvalid_argument@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVoverflow_error@std@@
.?AVruntime_error@std@@
.?AVbad_function_call@std@@
.?AVregex_error@std@@
.?AVtype_info@@
.?AVbad_cast@std@@
.?AVbad_typeid@std@@
.?AV__non_rtti_object@std@@
.?AVbad_exception@std@@
.?AVDNameNode@@
.?AVcharNode@@
.?AVpcharNode@@
.?AVpDNameNode@@
.?AVDNameStatusNode@@
.?AVpairNode@@
.?AV_Iostream_error_category@std@@
.?AV_System_error_category@std@@
.?AVerror_category@std@@
.?AV_Generic_error_category@std@@
CreateFileA
FindResourceA
QueryPerformanceCounter
GetDateFormatA
OpenProcess
GetVolumeInformationA
GetEnvironmentVariableA
LockResource
GetModuleHandleA
FindFirstChangeNotificationA
VirtualProtect
GetCurrentDirectoryA
GetVersionExA
GetTempPathA
GetSystemTime
KERNEL32.dll
CloseServiceHandle
OpenProcessToken
StartServiceCtrlDispatcherA
DeleteService
SetEntriesInAclA
GetTokenInformation
RegSetValueExA
RegisterServiceCtrlHandlerA
RegQueryValueExA
CreateServiceA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
LookupPrivilegeValueA
RegOpenKeyExA
AllocateAndInitializeSid
SetServiceStatus
FreeSid
ControlService
RegEnumKeyA
AdjustTokenPrivileges
RegCloseKey
ADVAPI32.dll
PropertySheetA
DestroyPropertySheetPage
ImageList_SetOverlayImage
ImageList_Destroy
ImageList_Add
CreateToolbarEx
COMCTL32.dll
EncodePointer
DecodePointer
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetLastError
SetLastError
GetCurrentThread
MultiByteToWideChar
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
WideCharToMultiByte
HeapSize
HeapFree
HeapAlloc
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW
CreateSemaphoreW
FatalAppExitA
GetStringTypeW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
WriteFile
GetModuleFileNameW
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryExW
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
OutputDebugStringW
CloseHandle
SetStdHandle
WriteConsoleW
CreateFileW
0 0$0(04080<0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
3$3,343<3D3L3T3\3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5@?D?H?L?P?T?X?\?`?d?h?l?p?t?x?|?
1(141@1L1X1d1p1|1
1@2L2X2d2p2|2
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3
9 989<9@9D9H9L9P9T9X9\9`9<:@:D:H:
<$<0<<<H<T<`<l<x<
= =,=8=D=P=\=h=t=
>(>4>@>L>X>d>p>|>
7$707<7H7T7`7l7x7
:$:,:4:<:D:L:T:\:d:l:t:|:
;$;,;4;<;D;L;T;\;d;l;t;|;
<$<,<4<<<D<L<T<\<d<l<t<|<
=$=,=4=<=D=L=T=\=d=l=t=|=
>$>,>4><>D>L>T>\>d>l>t>|>
?$?,?4?<?D?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
1 1(10181@1H1P1X1`1h1p1x1
2 2(20282@2H2P2X2`2h2p2x2
3 3(30383@3H3P3X3`3h3p3x3
4 4(40484@4H4P4X4`4h4p4x4
5 5(50585@5H5P5X5`5h5p5x5
6 6(60686@6H6P6X6`6h6p6x6
7 7(70787@7H7P7X7`7h7p7x7
:$:,:4:<:D:L:T:\:d:l:t:|:
(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
0 0$0(0,00040
< <(<@<P<T<d<h<l<p<x<
=0=@=D=T=X=\=d=|=
>(>,><>@>D>H>P>h>x>|>
? ?$?4?8?<?D?\?l?p?
0 0(0@0P0T0d0h0l0t0
1$14181H1L1P1X1p1
2 282<2T2d2h2x2|2
24393>3C3H3M3R3a3q3
8%8<8\8f8w8
9!9*9N9W9\9y9
:$:,:J:V:i:v:
:'<1<;<(>i>
3"3(3.343:3@3F3L3R3X3^3d3j3p3v3|3
4&444O4d4~4
5/5Q5l5
7 7$7(7,70747F7T7^7x7
808:8W8~8
<#<+<0<4<8<a<
>A>H>L>P>T>X>\>`>d>
5C5I5P5V5v5|5
9*949B9z9
9':=:f:
;3<[<i<
>3>L>S>[>`>d>h>
>B?H?L?P?T?
0?0q0x0|0
8"8'8-81878;8A8E8K8O8d8
9%9G9c9n9
91:;:B:U:
;(;8;H;X;a;
<%<8<=<d<j<p<v<|<
=$=L=S=
>C?I?T?Y?c?}?
0=0n0{0
0K1[1q1
8"9(9G9M9
="=&=*=.=
>$?<?l?
5!5G5M5l5r5
7G9K9O9S9W9[9_9c9
C4v6|6
2m2v2~2
;1;9;G;L;[;
?:?r?z?
0@0[0s0
0F1P1r1
;^<d<v<
)032f2
3#4=4J4v4
4+555^5f5o5x5
6)626<6L6Q6V6g6l6}6
7&72777B7L7b7
9%9+969Y9^9j9o9
9:4:P:q:
;+;4;P;e;w;
= >2>r>}>
323:3D4
4=7S8d8
9C9`9y9
:O;l;q;@<
<J=k=p=
>">=>\>p>
?,?2?=?D?X?^?
41;1B1P1Y1
4-4S4c4p4
607<7H7W7b7
929<9B9l9v9|9
:$:3:=:C:U:\:b:o:u:
;(;.;I;Y;b;j;
<#<(<.<6<;<A<I<N<T<\<a<g<o<t<z<
==%=-=2=8=@=E=K=S=X=^=f=k=q=y=~=
>!>'>A>M>S>h>n>
0"0'0/0
2%5E7S7]7
>#?D?K?r?
2-2C2L2X2c2
3+3@3F3
7 7/787!9=9
=(=:=L=^=p=
4 4(40484
=0E0T0_0
3J4R4h4y4
11#1'1+1/13171;1?1C1G1{6
g8k8o8s8w8{8
=8===C=I=T=Z=
>,>2>M>W>]>
>(?Q?d?v?
0)0:0F0M0T0o0y0
141:1O1T1Y1^1g1
2.383S3]3
5 5&505?5r5x5
5\6j6p6
;l<+=,><>M>U>e>v>
142I2\2
32494C4H4l4
2Q3G4m4
6*686F6T6b6p6}6
7)777F7W7e7p7
7 8/8M8d8
9+909<9C9L9Q9h9
<-<O<V<[<m<t<{<
=&=:=K=R=Y=
>2><>S>r>
>H?Z?n?{?
1;2A2k2
6?7X7i7
8.8:8O8p8
:1;S;i;
;&<.<X<
=!=%=)=-=1===W=
7 737p7
78-878X8V9
:$:>:^:n:
:<;X;];q;
<'<J<R<`<j<
?5?<?O?
4-4:4n4
5*636@6Q6f6z6
7>7a7q7
8-8O8t8
8-9;9Q9x9
=*>H>_>
0/112U2k2|3
4M5X5g5
526>6O6h6
6"747g7
9"9(929B9I9
9+:3:9:?:E:p:
3 4+4M4b4
505;5]5h5
+0[0x0
3@3I3g3
6%686L6
4;4L4R4^4n4t4
5!5'50565@5K5
9%:<:s:B;
72888@8z8
9K:V:b:
#2/2]2g2
8$8*80868<8B8H8N8T8Z8`8f8l8r8x8~8
9 9&9,92989>9D9J9P9V9\9b9h9n9t9z9
: :::M:d:n:v:
;";*;2;:;A;I;q;
<&<,<1<7<x<
<(=>=R=_=
>>.>D>L>Y>x>
?/?5?E?L?S?]?c?w?
0#0*040A0K0X0k0y0
1"1'1E1M1l1
2-2=2`2e2o2}2
3,343A3G3R3`3o3z3
4+454>4F4Q4i4r4z4
575I5l5
6!6)6Z6`6l6v6
7'858B8J8Z8i8o8
:&:-:@:M:V:\:h:q:
:8;>;n;~;
;#<)<8<A<f<l<
>D>N>c>o>u>
?5?P?\?c?
0%0.070?0T0Y0t0z0
1.1_1t1z1
2M2\2b2v2
464?4D4J4Y4w4
5,595J5P5X5d5o5t5
9/989C9J9X9_9m9t9{9
:$:*:/:H:N:S:\:o:z:
; ;.;A;I;O;T;Z;`;h;q;w;
<!<&<O<]<g<|<
="=`=n=|=
> >.>?>H>R>]>l>r>
?!?'?-?A?F?N?T?Z?`?e?k?w?
0000=0D0M0X0`0l0z0
1!1)12181>1D1J1R1X1^1t1z1
2*2>2D2I2P2Z2b2q2w2
3 3>3O3U3z3
434?4F4S4i4q4w4
4$5:5D5Z5p5z5
2!2'2-23282=2C2I2O2U2Z2_2e2k2q2u2{2
3!3'3,31373=3C3I3N3S3Y3_3e3k3p3u3{3
3"4=4R4V4b4f4r4v4}4
5(585H5P5X5`5d5l5
60686@6H6L6P6X6l6t6|6
7 7(7074787@7T7p7
808P8\8x8
9(9H9d9h9
:$:(:D:H:h:p:t:
; ;L;P;X;`;h;l;t;
<0<L<P<p<
=0=P=p=
2D8H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
;4;@;D;H;L;h;l;t;
<$<,<4<<<D<L<T<\<d<l<t<|<
= =$=(=,=0=4=`>h>l>p>t>x>|>
383X3x3
4 484T4t4
xdigit
(null)
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
LC_ALL
LC_COLLATE
LC_CTYPE
LC_MONETARY
LC_NUMERIC
LC_TIME
mscoree.dll
kernel32.dll
((((( H
((((( H
american
american english
american-english
australian
belgian
canadian
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
dutch-belgian
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
french-belgian
french-canadian
french-luxembourg
french-swiss
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
irish-english
italian-swiss
norwegian
norwegian-bokmal
norwegian-nynorsk
portuguese-brazilian
spanish-argentina
spanish-bolivia
spanish-chile
spanish-colombia
spanish-costa rica
spanish-dominican republic
spanish-ecuador
spanish-el salvador
spanish-guatemala
spanish-honduras
spanish-mexican
spanish-modern
spanish-nicaragua
spanish-panama
spanish-paraguay
spanish-peru
spanish-puerto rico
spanish-uruguay
spanish-venezuela
swedish-finland
america
britain
england
great britain
holland
hong-kong
new-zealand
pr china
pr-china
puerto-rico
slovak
south africa
south korea
south-africa
south-korea
trinidad & tobago
united-kingdom
united-states
zh-CHS
az-AZ-Latn
uz-UZ-Latn
kok-IN
syr-SY
div-MV
quz-BO
sr-SP-Latn
az-AZ-Cyrl
uz-UZ-Cyrl
quz-EC
sr-SP-Cyrl
quz-PE
smj-NO
bs-BA-Latn
smj-SE
sr-BA-Latn
sma-NO
sr-BA-Cyrl
sma-SE
sms-FI
smn-FI
zh-CHT
az-az-cyrl
az-az-latn
bs-ba-latn
div-mv
kok-in
quz-bo
quz-ec
quz-pe
sma-no
sma-se
smj-no
smj-se
smn-fi
sms-fi
sr-ba-cyrl
sr-ba-latn
sr-sp-cyrl
sr-sp-latn
syr-sy
uz-uz-cyrl
uz-uz-latn
zh-chs
zh-cht
- floating point support not loaded
- not enough space for arguments
- not enough space for environment
- abort() has been called
- not enough space for thread data
- unexpected multithread lock error
- unexpected heap error
- unable to open console device
- not enough space for _onexit/atexit table
- pure virtual function call
- not enough space for stdio initialization
- not enough space for lowio initialization
- unable to initialize heap
- CRT not initialized
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- not enough space for locale information
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- inconsistent onexit begin-end variables
DOMAIN error
SING error
TLOSS error
runtime error
Runtime Error!
Program:
<program name unknown>
Microsoft Visual C++ Runtime Library
ADVAPI32.DLL
USER32.DLL
CONOUT$
VS_VERSION_INFO
StringFileInfo
040904B0
CompanyName
Too far Corporation
FileDescription
Too far Feelsaw
FileVersion
0.3.8.218 Couldbaby
InternalName
Captain apple
LegalCopyright
Too far Corporation. All rights reserved
OriginalFilename
Son.dll
ProductVersion
0.3.8.218
ProductName
Too far
Feelsaw
VarFileInfo
Translation
figure
Finger century forward yellow
object
suffix sugar
wheel saw
space otherGas
Gave here cover planet
Sister hunt loud together
nature make
group brother
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
MicroWorld-eScan Clean
FireEye Clean
CAT-QuickHeal Clean
Qihoo-360 Clean
McAfee RDN/Gozi
Cylance Clean
VIPRE Clean
AegisLab Clean
Sangfor Clean
CrowdStrike Clean
BitDefender Clean
K7GW Clean
K7AntiVirus Clean
BitDefenderTheta Clean
Cyren Clean
Symantec Clean
ESET-NOD32 Win32/Spy.Ursnif.DH
Baidu Clean
APEX Clean
Avast FileRepMalware
ClamAV Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
Rising Clean
Ad-Aware Clean
Emsisoft Clean
Comodo Clean
F-Secure Trojan.TR/AD.UrsnifDropper.pxing
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
CMC Clean
Sophos Clean
SentinelOne Clean
GData Win32.Trojan-Spy.Ursnif.HYGDPT
Jiangmin Clean
Webroot W32.Trojan.Gen
Avira TR/AD.UrsnifDropper.pxing
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Program:Win32/Wacapew.C!ml
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis Clean
ALYac Clean
TACHYON Clean
VBA32 Clean
Malwarebytes Clean
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
Ikarus Clean
eGambit Clean
Fortinet W32/PossibleThreat
AVG FileRepMalware
Paloalto Clean
MaxSecure Clean
No IRMA results available.