Static | ZeroBOX

PE Compile Time

2010-12-02 14:43:26

PDB Path

f:\builds\vendor\sb_win32bot03_vendor_trunk\build\vendor\xulrunner-1.9.2\mozilla\compiled\xulrunner-release\xulrunner\stub\songbird.pdb

PE Imphash

c4d010441c17e8245adced7fdcad59f4

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00014000 0x00014000 6.68229334108
.rdata 0x00015000 0x00004000 0x00003400 5.5604390334
.data 0x00019000 0x00004000 0x00001600 3.1152581068
.rsrc 0x0001d000 0x00105000 0x00105000 4.81385788735
.reloc 0x00122000 0x00002000 0x00001c00 4.15658376631
.idata 0x00124000 0x00086000 0x00085c00 7.83686926567
.berti 0x001aa000 0x00002000 0x00000200 6.26540622226
.arif 0x001ac000 0x00002000 0x00000200 6.21306805453
.ag 0x001ae000 0x00002000 0x00000200 6.20378419264
.bennie 0x001b0000 0x0024b000 0x0024a600 0.00415864497407

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x001215f4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x001215f4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x001215f4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x001215f4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x001215f4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x001215f4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x001215f4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x001215f4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x001215f4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x001215f4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x001215f4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x001215f4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x001215f4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x001215f4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x001215f4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x001215f4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x001215f4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_ICON 0x001215f4 0x00000468 LANG_NEUTRAL SUBLANG_NEUTRAL GLS_BINARY_LSB_FIRST
RT_GROUP_ICON 0x00121b14 0x0000005a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x00121b14 0x0000005a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_GROUP_ICON 0x00121b14 0x0000005a LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_VERSION 0x00121b70 0x00000294 LANG_NEUTRAL SUBLANG_DEFAULT data

Imports

Library KERNEL32.dll:
0x415014 FreeLibrary
0x415018 GetProcAddress
0x41501c GetLastError
0x415020 LoadLibraryExW
0x415024 CreateFileA
0x415028 SetEndOfFile
0x41502c GetModuleFileNameW
0x415030 WideCharToMultiByte
0x415034 GetFileAttributesW
0x41503c MultiByteToWideChar
0x415040 HeapFree
0x415044 GetVersionExA
0x415048 HeapAlloc
0x41504c GetProcessHeap
0x415050 GetFullPathNameW
0x41505c GetFullPathNameA
0x415060 GetCurrentProcess
0x415068 GetModuleHandleA
0x41506c ExitProcess
0x415070 WriteFile
0x415074 GetStdHandle
0x415078 GetModuleFileNameA
0x41508c GetCommandLineA
0x415090 GetCommandLineW
0x415094 SetHandleCount
0x415098 GetFileType
0x41509c GetStartupInfoA
0x4150a4 TlsGetValue
0x4150a8 TlsAlloc
0x4150ac TlsSetValue
0x4150b0 TlsFree
0x4150b8 SetLastError
0x4150bc GetCurrentThreadId
0x4150c4 HeapDestroy
0x4150c8 HeapCreate
0x4150cc VirtualFree
0x4150d4 GetTickCount
0x4150d8 GetCurrentProcessId
0x4150e0 TerminateProcess
0x4150e8 IsDebuggerPresent
0x4150ec GetCPInfo
0x4150f0 GetACP
0x4150f4 GetOEMCP
0x4150f8 IsValidCodePage
0x4150fc Sleep
0x415100 VirtualAlloc
0x415104 HeapReAlloc
0x415108 RtlUnwind
0x41510c CloseHandle
0x415110 RaiseException
0x415114 GetDriveTypeA
0x415118 ReadFile
0x41511c SetFilePointer
0x415120 SetStdHandle
0x415124 LoadLibraryA
0x41512c GetConsoleCP
0x415130 GetConsoleMode
0x415134 LCMapStringA
0x415138 LCMapStringW
0x41513c GetStringTypeA
0x415140 GetStringTypeW
0x415144 GetLocaleInfoA
0x41514c FlushFileBuffers
0x415150 CompareStringA
0x415154 CompareStringW
0x41515c CreateFileW
0x415160 HeapSize
0x415164 WriteConsoleA
0x415168 GetConsoleOutputCP
0x41516c WriteConsoleW
Library USER32.dll:
0x415178 MessageBoxW
Library ADVAPI32.dll:
0x415000 RegQueryValueExW
0x415004 RegCloseKey
0x415008 RegEnumKeyExW
0x41500c RegOpenKeyExW

!This program cannot be run in DOS mode.
qRich[
`.rdata
@.data
@.reloc
B.idata
`.berti
B.arif
@.bennie
t hDSA
PSh0SA
YY_^][
YYj Y+
PSShhUA
PShXUA
u^SSSP
u[SSSP
PPPPPPPP
YYuTVWhHj@
>=Yt/j
4~f9.u
QQSVWh
@@f98u
@@f98u
j8j ^V
t&h$^A
HHt@HHt
2If90t
0A@@Ju
t^9(uZ
tD9(u@
YYu-9D$
0SSSSS
_VVVVV
^WWWWW
URPQQhd
0WWWWW
0SSSSS
0SSSSS
0WWWWW
BBFFf;
^SSSSS
j"^SSSSS
GWhTaA
FVhTaA
PPPPPPPP
YYt\VV
0SSSSS
_VVVVV
tGHt.Ht&
^SSSSS
8VVVVV
CCGGf
GGBBf;
;t$,v-
UQPXY]Y[
PShTaA
tb9} u
t+WWVPV
YYt SVW
<+t(<-t$:
+t HHt
u&f!;f;
t0WWWWW
WuXj=S
u8VVVVj
bad allocation
Error: couldn't parse application.ini.
Couldn't find application.ini file.
Couldn't load XRE functions.
Couldn't load XPCOM.
Not enough memory available to start %s.
this application
Could not find compatible GRE between version %s and %s.
MaxVersion
The application.ini does not specify a [Gecko] MinVersion
MinVersion
Could not read application.ini
%sxpcom.dll
Invalid application.ini path.
Couldn't set %s.
XUL_APP_FILE=%s
specify APP-FILE (optional)
XUL_APP_FILE
application.ini
%sxulrunner\xpcom.dll
xulrunner
XRE_CreateAppData
XRE_FreeAppData
XRE_main
xpcom.dll
%s\dependentlibs.list
NS_GetFrozenFunctions
USE_LOCAL_GRE
%s\xpcom.dll
x86-msvc
GRE_HOME
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
CorExitProcess
mscoree.dll
runtime error
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
.mixcrt
EncodePointer
KERNEL32.DLL
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
(null)
`h````
xpxxxx
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
GAIsProcessorFeaturePresent
KERNEL32
Unknown exception
`h`hhh
xppwpp
InitializeCriticalSectionAndSpinCount
kernel32.dll
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
1#QNAN
1#SNAN
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
CONOUT$
f:\builds\vendor\sb_win32bot03_vendor_trunk\build\vendor\xulrunner-1.9.2\mozilla\compiled\xulrunner-release\xulrunner\stub\songbird.pdb
MultiByteToWideChar
GetFileAttributesW
WideCharToMultiByte
GetModuleFileNameW
LoadLibraryExW
FreeLibrary
GetProcAddress
GetLastError
ExpandEnvironmentStringsW
KERNEL32.dll
MessageBoxW
USER32.dll
RegEnumKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
ADVAPI32.dll
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetFullPathNameW
EnterCriticalSection
LeaveCriticalSection
GetFullPathNameA
GetCurrentProcess
SetUnhandledExceptionFilter
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
RtlUnwind
CloseHandle
RaiseException
GetDriveTypeA
ReadFile
SetFilePointer
SetStdHandle
LoadLibraryA
InitializeCriticalSection
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetCurrentDirectoryA
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileW
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
CreateFileA
SetEnvironmentVariableW
.?AVbad_alloc@std@@
.?AVexception@std@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVtype_info@@
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
6!6?6x6
8F>P>`>}>
0!0-0>0J0c0q0
1$1.191B1O1X1r1x1
5*6M6~6
6/757<7Q7
?*?3?9?F?P?[?l?
7 7/7;7P7l7~7
828\8k9
9":(:4:
1C1a1h1l1p1t1x1|1
1F2Q2l2s2x2|2
3 3j3p3t3x3|3
4!464R4n4
7Z9g9q9
:M;X;<<N<+?
0t1i2R6c6
: :$:(:,:0:4:~:
;#;(;,;0;Q;{;
< <$<(<,<
>&>->G>Q>g>q>
080C0g0p0w0
141G1`1r1
1G2M2f2l2
3G5R5X5]5e5
66&6m6
707F7R7`7l7w7
:':,:K:P:
;';.;R;X;c;o;
<%<+<8<B<H<U<m<v<
<(=.=J=b=
>>W>_>
? ?%?*?0?4?:???E?M?Y?o?z?
0O132;2T2n2
3!3)353Y3a3j4q4z506H6
020M0n0
1%1.13191C1L1W1c1h1x1}1
44-464@4u4}4
6)757H7Z7u7}7
7$8M8^8~8C9i9
=m>~>=?F?R?
0)050M0n0z0
102u2|2
3&393]3
4#4L4R4Y4f4m4s4{4
7+767H7[7f7l7r7w7
8#8)8C8T8Z8k8
Q0`0A2L2-6
2B2J2i2y2
4=4t4~4
798S8~8
:==->Y?
<&<9<m<
"0X0n0
2 3(3f3
40555:5?5J5z5
6%6*61666
6:7D7N7Y7f7v7
8:8Q8W8g8l8
9;&;,;
7/7>7N7Z7d7l7w7
;5;<;F;N;[;b;
?+?=?O?
2#2/2v2
4$404;4
354B4^4v4
2;3I3l3
4&444<4I4f4p4y4
5/5h5w5T6f6'9
5Q8h8};
9:q:>;
0>0i0v0~0
7!717r7|7
1p2t2x2|2
4(8,8084888<8
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
3 3(3@3D3\3l3p3
484X4x4
5 5(50545<5P5X5l5
6(6H6T6p6
787X7x7
888D8\8`8|8
9 9@9\9`9
0 0$0(0,0004080<0@0`0h0
303<3D3L3T3\3d3l3t3|3
<$<0<4<8<<<@<H<L<p=t=x=|=
? ?$?(?,?0?4?8?<?@?D?H?L?P?T?X?\?`?d?h?l?p?
gD4Exg
Gh*]p
`8uDqB
d~%ng<Of
5~~]#|
Y *UYL
5jwbPO2
ebo$%,\9
sCJ$D&
[GC)UG
e!Mnc7M
./vV)h
zT*,bx
LfHe54
q(?s^+yF
x!! KIj
qO+1^0X
QuR_B@
6'yGd>
xn65vE
T:G2&A
CF*.&k
eaLA9c/y4
nU9b~m
wZs#a[S`
'j5N}}
0s)+dK
[4F$#<r>U
gaT,_V
B4B%-J,>*
py-n/z
ECc$(a
JWWc42
ei^4d#}
cxeK.I
hqK+nT
odKxs{
Mx|;`#
yh&|b4
#x_4eN/
1o!KVEz
%}OX1@
UNju 5
Ls*B}ZO
[~$S7-Z
0SO1\q
1u:QF.
[6#tK+
v)87YX
0-`gW(v
"a_ewA
jB?Vhh
p?\x1m
m0#1U8
N5ZT!=u
6:/]$)xI
L9cTlc
5p`,uW
OT7DH-E
5+A9ym
<2-x.
J7i=OA
7=l>#'v
?Y}[84
sTv=TIv6
vp$Ol6L
o1;C(G
6&n+[%
ib7<-QD7
C'@b30
7cUZV8
\4yX7g
}$@O=g
F+"E2%
5q`VEH
5JXJ+"A{}
c`(0[a&]!
Qpl4,ku\
@Xg<^/
nmqbbHA
Cs$T*b
0xzp;B
D\\03q1
2KoIi3
}(H@h[Z"J<
H.\uQ%.8
%TZY6`
iy-68"
&2IvnI
b<FIj76]
E5!]<&e
YBXWZ0
Nj+;gC
.j;,hJ
KN2vfx
d]MFYc
?5"bA2
44m}R
g)*XmY
)X%p4p
lR^U5b
nb6ANv
!z!bVI
w!wk*t
qGU2@
B l;%
jZrY<7
RIyR,`
59&6HT
lSqtT
=p%\sE]
?+[r,}
JnT3}A
Z<FF}1
)~>I"u
>@Ia6*
Uh)Ch#-
:+~*rG
;.Jo<n;
h<tjI]
9l'Us3W
01e19_
?ZD|QQ
8?~VE9
IOUpX9N
,zc,=WGl
dPzQK{
F'0@ m
)j;Q6I
N[xong
( :fJp
Z.1CE*
33+=3b
GQx"yT
w.C1\NK
rjG`l/k;
+$S3%]
.;)GU1
$\pBO*5
^4UWQ~
eS5Kg&
'3X v
I?"iW)
jzD,S`
=|P_@g
=aq,(^
W3 ~+l
N%E{?Wt
d`LHTS
w7Bz0>:
r+g]V=
}_f)<=
83K$>Cd
EuKV_N
T]e98{
<BNo)K
tLpc d
9zl.'t?
c_z~&%O
RO)bbWn
M8;+nW<
>&d:T=
("cF#4:m
89 g&k
r7>e-Q
K4uo1~
!O;k#G- \GbL
eXK;]5!
d;Xa(O
\?gTac<
t@'1Q(
-O{DG~,
o&:pUI
_Kz.F|
36%sYrJN
S^e*q>
Bxfg{[
9PsMo
_hothe
GnKXt}
p|M.+[
<AVtsg
!|!/<}
&sY3+]{
N'O|xh
[Ki,?O
> E3Iz
;SD-k]
[Z)uzAm6!
->UVzV$
EXl2{&g
eki k[9
H8xT-g
e?aq|J
*B7&?
[^!;hn
\G<huY
|49lARx=
\JEYtT
)jt6We
v.H)3O
$dnNl]hx
qWbI}J&
GKw:XY]QC"
[Y+o]J
eGHyF;;h|
'{rcG2%@E
EVD!bk
e:ePc
ha'ywg
yw\<C^KY
(6if4X
axzVF_
VhK A#o
#H}D62
CPBjek
-o$-cE
tM>hH
g%$FOg
7rBQ0W
4<4p*J
8,bxHv
I1m7ZF
^`yv)I
^jQEVz
:+Q'zj
LcKsr
b~%44%
"QfQHH
rF=c8
Vm.'9g
;EiEuu
Z=i+|`
KbpXZA
'qEW{@
4Tm7na
&:=mqe
7DK5x
!g(FCL
iL?z^q
uh] }
sS$MAU{
[F_SlM
DFKG\HQ
7A!{5E
%R-XR^
UZxtz@
P1NF\h
MS6%*s
xw(,Up
m{cXDw
C*@qkj
i531nX
5ex8Ch{
sCMNA1
q[[Z`;
EdR b/
H(('Qld
zC&O:A
/<7v7V
+`QY)d
=Jt5{z
1xTrfw
FJaPbS
.pwdd)J%i& H
x! im
_'EqVgwh
*E$tL9
XUe(Y5
TvMMX
'*&jwt'
U>V<qb
qT1TD}
w5WXqA
2SoA[<p
.S|,da
%~qIx<
n|Q"}`
&{$3ZO
r\!J]T
<csWe;
o+S`BZ
b'qX+E
=I,Kg
4OdH+G
UK]TA]
H-#t&5
\u196k
r6&|-Mm
&#30x]
~xin^&&
vhaT#2
#(rSS$
{NF|g7Dk
1OP&1T
f6o<9o
}<BREW
9ziBE*Sn
knu_T
~V|lTZD
mM3\'R4\D;
\p(%K2[
`*j^Z NM
v+h#bM
vq:.2o
.FU]'P
S?{ p
md)jHBI
`'<{07
YI%[m]5?s(
(hd54"
"NO_oxp
l4{9n#
-$m~Qs
-#z!uG
y\C3YJ
LCeE[PO
'j@@t*W-
e>l%Z&3h
^ 4v/J
0,g%hqz\
;%+FchpC
4.ElF1&
dtlz9Z
ut-t0iL
+Ws~w+
h>DU,KH
[FCBWK
^w{ruY
G!MoX5u
MOM;"
wa}^0j
XYMTfUk
vOf#o(
HJ$AO=u!
!}fd2k*
pJq/-E
/b~ V0i
Utj,$(
^#Gu`#
e)q>IM
S-ItJu
%>{"6J@
&2} TD<N
;WD4y8
Wf5Qe^
5l`]ZK;
?s^N,R
&|b[<~jn
pyHq]I
{i5xq7
g3)1[NP]
4#Nm !
nD6dag9
x#9ZiV%
])z9AH%
On?.er
fQ_OmF&A
`3'0%:
q,;nLpX
+96a+&
/,0z%jmK
>J^+%u
ui;Y,#
4UBgG3
:*{7\KOf
Fw'C6n
1A9}RP;1P
F28*zPq/i
.S"wNh
I:rYNv
7H</w
Rw=%`:?
<1}%\]
T+yM|q
wc/@-7
7YF?0i
FH0R"b
zrNWe3
K[q`[E
qchM/p
N?#Z60
[;D(J8cb
I%tjxW
+HN-s3
XUSBK*
Lb}tY?
ngTn.w
HVdg5
2s!A5O
L1ubCW
t_A|-xq
FCa]<>
'ON]w/F
IC:f"U
uT3v~Y2
)DYx}N$e
ER'0wLN
X:^<yX
+J`C?~mi
gKq%LM
JhSJ;d,
BZIN?r
fC?:~e:d
p`:rCqv
RuSm+w+Qc
pXMibI
^"%>G#
!MH|U,
'z]FJS
+tNo4w.
L\}q-s
JgWXrv
pjUW/_
5d~Gr~
$d4g5'R
:/[&I(
=?O,G0
W6G9NJ
XYOuKu
,mW#1:
WR(K1O%
\.w[o?
3!K^!T
qF1fd9
l,ZgR2
3I6x|J
U\Fl/\<
zqvK?5N
fE%QSF
|)'SL?>
bRCJe&9\
rp<a%v
EN/yJ:
rYDXQa
;MY?(!R
85c[4~
39Ow\:^MV
&d\b4"
4M\dof
gfOnQ#v
7a=mQ?
8hCP+2
o8-UA
|Fj[Q2
uFcQ7$t
1doZ*P
KHsdC`
5Z'0Gx
&p")fJB
{@]SOD?T
v8BWWF
QDT0*k?rc
$^KZ?5u
f$HC%5
=-24Jd
5lSIl{
RH@?R
]Fkr8{
XJLxi\n+=D"H
m}:0\R
4U9."@
-Q?0b;
Gbt>;B
]bJm|\
5p'z.L,kE
V\sL`f
ju<Nr,g
Cd\D^F
kt\7n2>
Jsy35u
f?=?~#
NVz{^[M_
tYSa(8
$xo4&P,
tVp7vz,)
Q~EY}7=
g,)-T%
AO.I~PM
4{c+(5
Ya.)4`
W<76(0
TjZvKR
6KF7GW
Q|!meP/\1
Kjc+&T
Nn_Xo^
D?Z51
b{!MRE+T<
E7,^Bd,
bO OWa
T%uk!({
g~on[|p
QXeV[D
MI'XS~}p
}@er(ta
Bs0gm4
3xyqk1
7Q(guY
<"F[ V
3,Jql{
5cju=sC8j
8oaEbE
[Yds5\F
tWB!Fi
RAF'J$
xG3o`8!U
Sv{j0E
L1KVnVN
X3yQB^"
-#DX)Rc
+d/h$qd
z j.e
^qP"=E
gZHH9NB
3(8z{U
$vnu.x
B<nc^
N=aG*6
x>,9-
>.|i$\
'qE(gF
K<("H
{ sjb4x'n[
?>BoyGr
bA<Xw8
olYD/R
2V@sq6
f!S5;8
tU`U[5
T+VM-\F
G/ham
z1_L4{T
#x~m}~a
k(I$bs
RO$`fP!
V{Ch"n
M.p|VF,
-2K(wu
.zH3fi|
>k5E=/
u1?9b+
1n=ok,
}h ,^
eRLAuQ
L+:}%,lFRahf
smLl#IJ
o\i@Vc
5D1!b'
iy(\Lx
pS1jzo
TI_Rn
zkEVo7.
YizfTW;@m
%=-k9hf
bE5t%a
xVT&~EYr
>Gql\,}
3AEYy5
?'4zraqO
/CXpY!
B^O:8D
{g~'B(=
s+=k|\
Cjn}uL,R
.6U`*O
b#T9!`s
wb~'I9
UgOkqn
|$$J1S
RA,jB,C
sfZU`c
#g[Nfa
|;G"Oi
7\kA+n
m{ZHM~!
lI"o$9
TKU%=Q
gN;gJx
<8K(4ziK<
&aLt375
w88(j}z
om?\Q
jVJSM(`Q
eiy#1ba
/7(Or]
5oY[fk
{6'~r3
6Tipvn
TvZ@9a(
"m} K$
W$DMs7
t>2mt@
&tf)1*
O7L6ox
HE6mll
s\sIC[
\r2t9
v0G!2WW
SC%:>#o
=e9;Zq
ewxcMA
$%{k'#:
6WR]\O+
+V7~NfC
uymfMw
j.~sAD
+N9,.7:_!n
UnP25r
t>H0@UJF
7T*waU
b"FNxk
Vg r4`
(ksS! ~
",pwC8}
{4Ekd`}S
4'Ay6Pi
r}A*YWB
3v>']F
RPb!sW
lXHgPhe$)
DHzz(9
Geb6dFeQ_}s
3heN"@
x&YmB5
KP(4#$0
]+~{s.
\S,~wUE~
NVqE_o
i2qj<d*P
Ti\5hQ
|x(+^
,3;C@E
ZMMRkst
!e3{O2-
&'<}.n
akT5xY/L
{fz|6P,l
Y\*+m&WN.K
3TH|Vc
w ~k>D
7Nun{Z
N:)#sj
=bqG&#5
VY?Jo*
?=JN&Q
b#CaAn
$:Hi j
AG~oNvAM
+tXyBV
Kv<X[K
z7+y|z
W,a3An
l;mmBu
{'T>r,.
-e\v/dG
yjww.i
kN_D}w1qA
Ts8wFG
pSLpEp
Z3my}o
(sD]f_
xDEB][9
2iru}]
~LNn!D
zB"y[y{wD
e-UKk)
hUTz7
M3({ZC
D'0Q*l?
;;a8|Q
|uDo%4
l{|A4`=
;\ut%@
s_*.[<
uE!wTV
{&PNR{G]+
]qjj4|
gb_D7;
c6lN@H
Cv,SF?
?P61(-
=0^^Gv
\a- f>
j)gO`nI
l&,R1B
V]V@WR
:CxDJ])
rhq|.\q
W`E s6
nDo7a:
n,BkB]
e^j:S[[
L}HZ,<
w=i!+Z'
uX/)bRE
lB4B33
vf:juJ]
tDRJx6
f St|$
JcbZF~$
[A<NgY
=|)]2.
56[d*'
7t:$/(
mK',ri)
ptthHG
41ggW/u
XhCyS|RFy
R6h]yg
X9]l
F)pqi7
}IrB0`
gL|*0h
j1e?;g
w$MOX3
2s0,jo(
z)!0E:
^X;?~h"
_Z,EfA Tq,
{xr;P*
5jZb[D#
a*$]fs
<RUWBx8
9P5z_N
2bP `[^1
("q8US
o+{Vp&@
$k3N$M
9O=?bW
A[eA!}X
/onhzX
Il/.2?u
E?B4H
Z4xHFB
r=[+4$
<q#>@B
.I6FNg
&)rA9
b6|B,~
}\j$,M
I+Rj9c
EkC&9}
9zb'ZF
|p4_CQ
xKRe%7
rPP}/-
DO#n9s
Sv[s_&S
f SY(Y[
NvP*OM
h=kR}[i
9iZI~VU
"C@rX
sIO{J)
cD]mmo#
C:[hC+p
B"{tiNc!
$jzKEJ9
,]ea@=
j#OyP@
HZ{37([
`S,"e^9
g5u!*Gk
&p%liu
%9=_TZm
@'m7dn
S~6fC.
2q]q?`pl
nL6{x`
TK$'R8U
0~w+NI
x^Yo8?
ho\WBM[X+
rnyRayZzX
233212
L>.;PHC?$,+
AT'5R3
W40j/B
KYSZQT
5;HM~3
555555
xuvvxxuv
OXI`RE\[C@3
K0,F7C
jjjjjjjj
|jpkqx
)3$73*#+
1}*usl
(|\8,7:++
WThMIdW
hcess+
mvhplgxnzt
0275+-9+B
l<BjLBKmX
S_h\ieU]
snnonhoo
iLOOJ^e_U
++++++++++
[rihgdqn
|DOi{Z
ip3V^O
H/^v,-
WchYhff
T;56=:O:
1,+/54+23
eVtZ_`,j
mj`Vlrc3
egfdaYeZg
VOO=;[Q]J\
N\ba.Z&m3
?@?@?+
31=??93::
B>ADE8;@BC3
olBl"X
] 5sj] P
4a^<-F+
:78:<<5
KA@PQ@GQQD
kesglprkt+
6QB\(H
Xre~|xc
-a2:4/i;ZX+
edgaffbdbf
ztvv|vru
N:;TNLKD?83
E-P.J'
1*!*? >8?
F$%DI
J(OD#.
2(.$M=
":C9F6
,<>A/N
9OKN5C.>
?1>,E5
;7#*90*
+23J05
*1(D!D
ADN)H4
8''*<@"!
)2JC4=
?'"E-"
"'CB99
E/$K65P
MIEO!7
B4%K7
I@8)IJ
8,E-O=
OG!PEJ'$<:LB9H$ GE
2J ;6&D
"(-IO 
"),)0IH
0)%;O=@=
/K88=0 3N
%I&,2"
88(62@FD(
24&%)O6)97M<
=3%B9I2<
(N9OF-
#KC"#LP1
/P9L.
KE41IHN-)J6(@8-)&A
$44280J3
45=PH=
;K>K-;<
""0DG
98$AD,!/5I
IH&>:1
=L.D"5*J:,C
CH1=/>H
K*-%"$C@
G6PEPD
XULRunner
\xul.dll
xpcom.dll
\xpcom.dll
GreHome
Version
Software\mozilla.org\GRE
0123456789+-
(null)
UTF-16LE
UNICODE
((((( H
h(((( H
H
IDI_APPICON
IDI_DOCUMENT
VS_VERSION_INFO
StringFileInfo
041904E3
Comments
Made in Russia
CompanyName
Artem Izmaylov
FileDescription
AIMP Advanced Tag Editor
FileVersion
5.1.1.2427
LegalCopyright
Artem Izmaylov
ProductName
ProductVersion
5.1.1.2427
VarFileInfo
Translation
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Shellcode.4!c
Elastic malicious (high confidence)
DrWeb BackDoor.Remcos.361
MicroWorld-eScan Trojan.GenericKD.67378831
FireEye Generic.mg.6156028337e0510b
CAT-QuickHeal Clean
ALYac Trojan.GenericKD.67378831
Cylance unsafe
VIPRE Trojan.GenericKD.67378831
Sangfor Exploit.Win32.Remcos.Vql4
K7AntiVirus Trojan ( 005a6a7c1 )
BitDefender Trojan.GenericKD.67378831
K7GW Trojan ( 005a6a7c1 )
Cybereason malicious.1cacce
Arcabit Trojan.Generic.D4041E8F
BitDefenderTheta Clean
VirIT Clean
Cyren W32/ABRisk.HGGE-2926
Symantec Trojan.Gen.2
tehtris Clean
ESET-NOD32 a variant of Win32/GenKryptik.GKKV
Cynet Malicious (score: 100)
APEX Malicious
Paloalto Clean
ClamAV Clean
Kaspersky HEUR:Exploit.Win32.Shellcode.gen
Alibaba Exploit:Win32/Shellcode.a4f24a9e
NANO-Antivirus Exploit.Win32.Shellcode.jvgund
ViRobot Clean
Rising Trojan.Generic@AI.91 (RDML:RuldCE6oDkMGxJN31zhBww)
Emsisoft Trojan.GenericKD.67378831 (B)
F-Secure Clean
Baidu Clean
Zillya Exploit.ShellCode.Win32.979
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
Trapmine Clean
CMC Clean
Sophos Mal/Generic-S
SentinelOne Clean
Jiangmin Clean
Webroot W32.Trojan.GenKD
Avira Clean
MAX malware (ai score=89)
Antiy-AVL Clean
Gridinsoft Trojan.Win32.Remcos.bot
Xcitium Clean
Microsoft Trojan:Win32/Remcos!MTB
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.Win32.Shellcode.gen
GData Win32.Backdoor.Remcos.9VNCID
Google Detected
AhnLab-V3 Trojan/Win.Generic.C5395892
Acronis Clean
McAfee Artemis!6156028337E0
TACHYON Clean
DeepInstinct MALICIOUS
VBA32 Clean
Malwarebytes Trojan.ShellCode
Panda Trj/Chgt.AD
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Malware.Win32.Gencirc.10bdb360
Yandex Clean
Ikarus Clean
MaxSecure Trojan.Malware.300983.susgen
Fortinet W32/PossibleThreat
AVG FileRepMalware [Misc]
Avast FileRepMalware [Misc]
CrowdStrike win/malicious_confidence_100% (W)
No IRMA results available.