1.1
低危
DACN
0.12
FACILE
1.00
IMCLNet
0.81
MFGraph
0.00
反病毒引擎
| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | None | 20190527 | 0.3.0.5 |
| Avast | Win32:Malware-gen | 20200412 | 18.4.3895.0 |
| Baidu | None | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_100% (D) | 20190702 | 1.0 |
| Kingsoft | None | 20200413 | 2013.8.14.323 |
| McAfee | Trojan-FPXH!281D11BFCA0B | 20200413 | 6.0.6.653 |
| Tencent | Malware.Win32.Gencirc.10b1961d | 20200413 | 1.0.0.1 |
静态指标
动态指标
该二进制文件可能包含加密或压缩数据，表明使用了打包工具
(3 个事件)
| section | {'name': '.text', 'virtual_address': '0x00001000', 'virtual_size': '0x0000f06c', 'size_of_data': '0x0000f200', 'entropy': 6.9574607621426905} | entropy | 6.9574607621426905 | description | 发现高熵的节 | |||||||||
| section | {'name': '.rdata', 'virtual_address': '0x00011000', 'virtual_size': '0x00009dee', 'size_of_data': '0x00009e00', 'entropy': 7.27757890586096} | entropy | 7.27757890586096 | description | 发现高熵的节 | |||||||||
| entropy | 0.5347593582887701 | description | 此PE文件的整体熵值较高 | |||||||||||
网络通信
与未执行 DNS 查询的主机进行通信
(2 个事件)
| host | 114.114.114.114 | |||
| host | 8.8.8.8 | |||
文件已被 VirusTotal 上 57 个反病毒引擎识别为恶意
(50 out of 57 个事件)
| ALYac | Gen:Variant.Mikey.88416 |
| APEX | Malicious |
| AVG | Win32:Malware-gen |
| Acronis | suspicious |
| Ad-Aware | Gen:Variant.Mikey.88416 |
| AhnLab-V3 | Trojan/Win32.Generic.C2342094 |
| Antiy-AVL | Trojan/Win32.Yakes |
| Arcabit | Trojan.Mikey.D15960 |
| Avast | Win32:Malware-gen |
| Avira | TR/AD.Tinba.cgymq |
| BitDefender | Gen:Variant.Mikey.88416 |
| BitDefenderTheta | Gen:NN.ZexaF.34106.lqW@aykMnXkG |
| Bkav | W32.AIDetectVM.malware2 |
| CAT-QuickHeal | Trojan.Mauvaise.SL1 |
| ClamAV | Win.Malware.Zusy-6798029-0 |
| Comodo | TrojWare.Win32.Tinba.BH@7rwybs |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.fca0b4 |
| Cylance | Unsafe |
| Cyren | W32/Trojan.UOWT-5113 |
| DrWeb | BackDoor.Bebloh.52 |
| ESET-NOD32 | Win32/Tinba.BE |
| Emsisoft | Gen:Variant.Mikey.88416 (B) |
| Endgame | malicious (high confidence) |
| F-Prot | W32/Kryptik.AAS |
| F-Secure | Trojan.TR/AD.Tinba.cgymq |
| FireEye | Generic.mg.281d11bfca0b4df0 |
| Fortinet | W32/Tinba.BE!tr |
| GData | Gen:Variant.Mikey.88416 |
| Ikarus | Trojan.Win32.Tinba |
| Invincea | heuristic |
| Jiangmin | Trojan/Yakes.tsz |
| K7AntiVirus | Trojan ( 004b75071 ) |
| K7GW | Trojan ( 004b75071 ) |
| Kaspersky | HEUR:Trojan.Win32.Generic |
| MAX | malware (ai score=80) |
| Malwarebytes | Trojan.Injector |
| McAfee | Trojan-FPXH!281D11BFCA0B |
| McAfee-GW-Edition | BehavesLike.Win32.Generic.ch |
| MicroWorld-eScan | Gen:Variant.Mikey.88416 |
| Microsoft | Trojan:Win32/Fuerboos.C!cl |
| NANO-Antivirus | Trojan.Win32.Yakes.dqmlmq |
| Panda | Trj/Genetic.gen |
| Qihoo-360 | HEUR/QVM10.1.8849.Malware.Gen |
| Rising | Downloader.Dofoil!8.322 (RDMK:cmRtazprqmXNewxk4YWFtDc6MYm8) |
| SentinelOne | DFI - Malicious PE |
| Sophos | Troj/AutoG-BF |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Malware.Win32.Gencirc.10b1961d |
| Trapmine | malicious.moderate.ml.score |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
2013-10-29 05:24:08
PE Imphash
f667fafc7e46c4f9fe454bbfe6a65deb
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text | 0x00001000 | 0x0000f06c | 0x0000f200 | 6.9574607621426905 |
| .rdata | 0x00011000 | 0x00009dee | 0x00009e00 | 7.27757890586096 |
| .data | 0x0001b000 | 0x000031cc | 0x00001400 | 3.8779280000827248 |
| .rsrc | 0x0001f000 | 0x00014640 | 0x00014800 | 4.211983888585809 |
Resources
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| RT_CURSOR | 0x00020c4c | 0x00000134 | None | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00020c4c | 0x00000134 | None | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00020c4c | 0x00000134 | None | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00020c4c | 0x00000134 | None | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00020c4c | 0x00000134 | None | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00020c4c | 0x00000134 | None | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00020c4c | 0x00000134 | None | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00020c4c | 0x00000134 | None | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00020c4c | 0x00000134 | None | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00020c4c | 0x00000134 | None | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00020c4c | 0x00000134 | None | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00020c4c | 0x00000134 | None | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00020c4c | 0x00000134 | None | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00020c4c | 0x00000134 | None | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00020c4c | 0x00000134 | None | SUBLANG_NEUTRAL | None |
| RT_CURSOR | 0x00020c4c | 0x00000134 | None | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00032748 | 0x00000468 | None | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00032748 | 0x00000468 | None | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00032748 | 0x00000468 | None | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00032748 | 0x00000468 | None | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00032748 | 0x00000468 | None | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00032748 | 0x00000468 | None | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00032748 | 0x00000468 | None | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00032748 | 0x00000468 | None | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00032748 | 0x00000468 | None | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00032748 | 0x00000468 | None | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00032748 | 0x00000468 | None | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00032748 | 0x00000468 | None | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00032748 | 0x00000468 | None | SUBLANG_NEUTRAL | None |
| RT_ICON | 0x00032748 | 0x00000468 | None | SUBLANG_NEUTRAL | None |
| RT_DIALOG | 0x0003315c | 0x00000180 | None | SUBLANG_NEUTRAL | None |
| RT_DIALOG | 0x0003315c | 0x00000180 | None | SUBLANG_NEUTRAL | None |
| RT_DIALOG | 0x0003315c | 0x00000180 | None | SUBLANG_NEUTRAL | None |
| RT_DIALOG | 0x0003315c | 0x00000180 | None | SUBLANG_NEUTRAL | None |
| RT_DIALOG | 0x0003315c | 0x00000180 | None | SUBLANG_NEUTRAL | None |
| RT_DIALOG | 0x0003315c | 0x00000180 | None | SUBLANG_NEUTRAL | None |
| RT_DIALOG | 0x0003315c | 0x00000180 | None | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00033404 | 0x00000014 | None | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00033404 | 0x00000014 | None | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00033404 | 0x00000014 | None | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00033404 | 0x00000014 | None | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00033404 | 0x00000014 | None | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00033404 | 0x00000014 | None | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00033404 | 0x00000014 | None | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00033404 | 0x00000014 | None | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00033404 | 0x00000014 | None | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00033404 | 0x00000014 | None | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00033404 | 0x00000014 | None | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00033404 | 0x00000014 | None | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00033404 | 0x00000014 | None | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00033404 | 0x00000014 | None | SUBLANG_NEUTRAL | None |
| RT_GROUP_CURSOR | 0x00033404 | 0x00000014 | None | SUBLANG_NEUTRAL | None |
| RT_GROUP_ICON | 0x00033418 | 0x000000ca | None | SUBLANG_NEUTRAL | None |
| RT_MANIFEST | 0x000334e4 | 0x0000015a | None | SUBLANG_NEUTRAL | None |
Imports
Library KERNEL32.dll:
• 0x41104c FlushFileBuffers
• 0x411050 HeapReAlloc
• 0x411054 GetStringTypeW
• 0x411058 LCMapStringW
• 0x41105c WriteConsoleW
• 0x411060 SetStdHandle
• 0x411064 HeapSize
• 0x411068 LoadLibraryW
• 0x41106c CreateFileW
• 0x411070 RtlUnwind
• 0x411074 Sleep
• 0x411078 HeapFree
• 0x41107c IsValidCodePage
• 0x411080 GetOEMCP
• 0x411084 GetACP
• 0x411088 GetCPInfo
• 0x41108c CloseHandle
• 0x411090 GetLastError
• 0x411094 FindResourceA
• 0x411098 LoadResource
• 0x41109c LockResource
• 0x4110a0 SizeofResource
• 0x4110a4 GetCommandLineA
• 0x4110a8 HeapCreate
• 0x4110ac GetProcessHeap
• 0x4110b0 GetSystemTime
• 0x4110b4 GetProcAddress
• 0x4110b8 MultiByteToWideChar
• 0x4110bc GetConsoleMode
• 0x4110c0 GetConsoleCP
• 0x4110c4 SetFilePointer
• 0x4110c8 RaiseException
• 0x4110cc HeapAlloc
• 0x4110d0 GetSystemTimeAsFileTime
• 0x4110d4 GetCurrentProcessId
• 0x4110d8 GetTickCount
• 0x4110dc LoadLibraryA
• 0x4110e0 QueryPerformanceCounter
• 0x4110e4 InterlockedDecrement
• 0x4110e8 GetCurrentThreadId
• 0x4110ec SetLastError
• 0x4110f0 InterlockedIncrement
• 0x4110f4 TlsFree
• 0x4110f8 HeapSetInformation
• 0x4110fc GetStartupInfoW
• 0x411100 DecodePointer
• 0x411104 UnhandledExceptionFilter
• 0x411108 SetUnhandledExceptionFilter
• 0x41110c IsDebuggerPresent
• 0x411110 EncodePointer
• 0x411114 TerminateProcess
• 0x411118 GetCurrentProcess
• 0x41111c EnterCriticalSection
• 0x411120 LeaveCriticalSection
• 0x411124 IsProcessorFeaturePresent
• 0x411128 GetModuleHandleW
• 0x41112c ExitProcess
• 0x411130 WriteFile
• 0x411134 GetStdHandle
• 0x411138 GetModuleFileNameW
• 0x41113c GetModuleFileNameA
• 0x411140 FreeEnvironmentStringsW
• 0x411144 WideCharToMultiByte
• 0x411148 GetEnvironmentStringsW
• 0x41114c SetHandleCount
• 0x411150 InitializeCriticalSectionAndSpinCount
• 0x411154 GetFileType
• 0x411158 DeleteCriticalSection
• 0x41115c TlsAlloc
• 0x411160 TlsGetValue
• 0x411164 TlsSetValue
Library USER32.dll:
• 0x41117c SetRectEmpty
• 0x411180 LoadBitmapA
• 0x411184 DefFrameProcA
• 0x411188 DestroyWindow
• 0x41118c GetClientRect
• 0x411190 PtInRect
• 0x411194 CopyImage
• 0x411198 MoveWindow
• 0x41119c ScreenToClient
• 0x4111a0 GetWindowRect
• 0x4111a4 IsIconic
• 0x4111a8 KillTimer
• 0x4111ac CheckMenuRadioItem
• 0x4111b0 GetDialogBaseUnits
• 0x4111b4 SendMessageA
• 0x4111b8 SetWindowTextA
• 0x4111bc LoadStringA
• 0x4111c0 BeginPaint
• 0x4111c4 DefWindowProcA
• 0x4111c8 GetDlgItem
• 0x4111cc IsDlgButtonChecked
• 0x4111d0 SetDlgItemTextA
• 0x4111d4 EnableWindow
• 0x4111d8 InvalidateRect
Library GDI32.dll:
• 0x411008 CreateCompatibleDC
• 0x41100c DeleteDC
• 0x411010 GetObjectA
• 0x411014 CreateBitmapIndirect
• 0x411018 SelectObject
• 0x41101c StretchBlt
• 0x411020 DeleteObject
• 0x411024 CreateCompatibleBitmap
• 0x411028 DPtoLP
• 0x41102c TextOutA
• 0x411030 SetMapMode
• 0x411034 SetViewportExtEx
• 0x411038 CreateSolidBrush
• 0x41103c FrameRgn
• 0x411040 PatBlt
• 0x411044 CreateICA
Library SHELL32.dll:
• 0x41116c SHGetDesktopFolder
Library SHLWAPI.dll:
• 0x411174 StrStrIA
Library COMCTL32.dll:
• 0x411000 None
Library gdiplus.dll:
• 0x4111e0 GdipDisposeImage
• 0x4111e4 GdipCreateBitmapFromFile
• 0x4111e8 GdipCreateHBITMAPFromBitmap
• 0x4111ec GdiplusStartup
L!This program cannot be run in DOS mode.
:yeiyeiyeib1ijeib1i
eipizeipiheiydieib1i^eib1ixeib1ixeiRichyei
`.rdata
@.data
3) @8huJe
.-7-eA#
p2dz{k
cLWPr3
d|T{X`
o9~'<ucV
`kQrNQ:MD
yjQWnBULO+Iz
CM7%2YV
q?%Gj^{
>P2>!JTuO
!D 0Rgyl
H0qF=hb
'H0rP&<n1c
L_R%7h
N^-<k
IX&o?^-L
F[7F" *O*k/r}6>}
jEUnD]
Jrq">j*
Jq"?m*
Ir#<D(
wt%2")
uP%k/rU>?
?*;<V`^
(h1\4S|/]oE7
Gq@.\z:T)Br
6!2F/)nXK'_`6
.Wi_B&
mhtDDR6X"
d0,DQ_f{
WaAL>V
{-'NuVq
ny3Yt6_
Y=tmPw
0`w9SrLE;:
l#P$ A^yzqWnBP"<I]7q,E
kyUnCR?
uX2N>+~qSt
=06.CF
+9n\Ox3HA
`n/A"%>TP$
$5<%L-/
q`7W&o
\d{qW&
uSbN>s
OR!GEh[_
#<0- U
J#~@]>A)
zVyf"Tn
7N,3_M
D-Y)<;6<)
W-kO`n
+Z)[(0
9-(WIr(
B);>awqPe#
z,zJc>I/w
&{{QnCZ>
d{PXyNSX
B*yv(v
t< H,<yx;JAy
Q'go?1(cU2&
FASwBmN9
L))&4"kRECK
|kuXSqIU=M
Sr?~4mg6H(;K
6:a<R&
'v.75R#q
]?4>A3
_xCRm=
QbZ"{oStr
`6rPq(
?w3-J:?F
WxLpKF6{
'5CWA^
@xcwe2T
[x`uw<c
Z4l4K~
phQjNQ(J"*A
E sC\qCRm7
x&exY0-$
YbA~'o
o\z8:HI{
!"<I|m
Bs0S$I]
#:k +B-
SI~CXZ
mhthDJ6O`
'YMA9D+
M u3YRNO
(d ]6z1?t
i!"y9|
2>63"nU)
6"~.jO
M,zre8Q{zrn+}U)
rUnKjw#
2@9%<#
;<$Q<F%6a
ZPUUdjFG4
&x(4JZ
Zc/e|r3
m{NG"qo!p
RyzUWfBMn
}w@M=@
,< T 6
%exgSlMX;Lu-#
i).{~yv*~v
lH$8r;<Hb;
4UoEKs
A\P;j=Q
\l8</p
9QjNQ:MlWM@W+>+4<
F{rjd~@U_Q]
fpr*6+ycs?NZ!
0Oghw1]
U>7{Y 0
XF+?(16
Mx2JAsCQ"=dC
$\1$(##J
qz3,`j[
i\{_U_
@(W}tI
z&tl n
x`ug\sAr>Jz
c2}G)xM@
jfBB8@Xy{UWfZi\7X
:L}b>]#tL>?2qN
wXfsQD
`2m?Z$F
S|IU3}
KcV7MTx`}s<#
bF[7FR
=Tj'v~cYa
"-2&Rc
g=H)L5Q6q
0v^TBZ>UB
Pfq~RyzZMQ
Sg't;P
t,#>'lL<tk)0
T@G$}:TCE
F<H)~w2
lW{EX6
$dsQ]{
h>J.0h[C Us
5t%P}`wQ&
%dhQHs$<4 X
6=QFf!
BrTiBU>UW
iJWf&H#+:
k0_ghg
+nw;!p
cTN(9_Ox(p
J0t>chQ|[`
c[$PHS
lW{EXe
'OQ9IT
.Sj}[A*<W
QlM]lX
7?F{rq/=3IVof
Nr=rXrAUkK
zJ]WnmA
PfyPmNYjMB[
k;IX`!zmTO5
V +H(PI7Dd'}|S(
U_G"ZN+/>j=pX
d=MR%*
0uK^>S$:]
szU~C&
ATd4>Wk
{NG"q'!p
c:Mfi#n.:G#
XiBMk5?P5,uLg
IvBZ4R>
fk{MVo|%
-8R. ?
0B`uyJc:7TJJd"/)p
CE&$3\
F/*[c-O
~EH;:k0{`nW|[0
u_zDeI[X>S,
0QaDP5[$s
{eLDRt
,yMQ9L&
UA7q"9#"pu)|<q"
'q"7q.
rWnAUE_
hDu&xlNN<>X[.
(9lLMla
A<*3#{
v*VX$!6
^\2vbl<^"
g^2m?Z$F
t_Qi95KW&
Uk I]KiT}"BT>~
M(Sy;ak9D_?},{
ZjuHDVQ7^"MlqO
?u#MT<n
+!I)*,VJ
r{r^V~@
hNGi8G
8B`$gJ
&cwr$j+
W3}}9}
PQRQRP
p9xu)A
3WhTTlh
WWhWWl
;uJXhL
@u+PPLHj
SVhX-A
tRhH-A
B;|3@+
t(h3@+
tVtVtVtVtVtVj
VWltT9l
Iu1p)WWh(
lPh(-A
PWx4=A
LRtRTRRVVPQ
HLHLHPV
;u3dPPdD
dVtPW6
U SW3j
3Y}]9]
;tVEEE
YY^_[j
r)$pM@
DDDDDDDDDDDDDD
YY]jXhNA
ItUhtDlt
HHt$HHt
it|nt.o
t-RPWS[R
0@?If90t
u69t.EP
`pM_^3[.
ffffffE
3PPPPP
Fu^8Mt
M3;u"j
E`p^[9M
E`p33PPPPP
[SMQMQp
E`p3[_^
@PVSgK
E`p3_^[
^VMQMQp
_WMQMQp
tS]3K}-
et_EtZfu
VVVVV^
YYt|+ ;u
@;u`3@
uNSW<A
ItWhtFlt
3F tBP
itqnt(o
lj0XfQfG
t-RPWS75
j0O-Yt
j OXYt
`pM_^3[
+SVW0A
1E3PeuEEEEd
Y__^[]Q
:E_^[]E
9csmu)=A
FGIuX^_]
KuZUUE
8csmu*x
YYuTVWh
3]j hOA
3PPPPP
@Y<v*VB
^SSSSSyj
;tFtA3
M_^3[j
Yu =@A
S^`N`H
j$Y~\d9
QY^`[_^]
VW39=A
t.t$<"u
t?VSPE(
3Y[_^5
3PPPPPj
FA>\t>"u&
uUEPSS}
=?sJMsB
;r6PN
Y;t)UEP
3wf93t
f90uW=D
VVV+V@PSVVE
E;t8P
YE;t*VVuPuSVV
j@j ^V
H3H/5A
;rSWf9M
YYt:V5A
YF\=08A
~lt#Wa
YYt0V5A
E3E3;u
woVW=A
EU_^j
W34809}
;u X8>
4 3,9E
P4UM`8
DQP C@
,PVEP$
3+4H;M
(PVHP$
(PVHP$
r3VVhU
QH++PPVh
(P+P5P$
\,+48;E
8+0[M_3^
WPWPWv
whu;5 A
8]tEMap<u
TM_^3[j
$M}_hu
3W;to=A
t4V0;t(W8jYt
Fpt"~l
lVYYYEE
YYu,9E
tAt2t$
f;v6;t
Map_^[;t&;w }j"^0!8]tE`py
<E`p0M
YY]VD$
F$|3@_^
o3G}39
3_^]SVWT$
URPQQh@
t;T$4t
;v.4v\
UVWS33333[_^]
33333USVWj
_^[]Ul$
RQMQVp
MJEP3SSSSWEPEP,
E`p3M_^3[
EP3SSSSWEPEP
E`p3M_^3[QUWVu
DDDDDDDDDDDDDD
W_@PWV
PEP"YYEPj
3PPPPP%WVU33D$
YY3^]j
W>+~,WPVgYP
Y/V|Yt
Y}3u;5A
tVPVJYY3BUA
4VSYYE
t.VYt"V
VYt.VYt"Vz
VIYt.V=Yt"V1
]39}~0N
D=VP~YYtG;}|fE
YYM_^3[
PtYYt}E
E`p;39]
B(;r3_^[]
1E3PEd
Y_^[]j
j hXQA
Y+t"+t
+tY+uC}
Uw\]Yp
u>OdMGd
u wdSUY
Eu}hDA
t?P5hA
3M_^3[y
ft'Ou"+
jPfDJXdf
^0u_^]
S3VW;|[;
t6<0t0=@A
S3VW;~ E
@;u+H;}
39](SSu
]9]tWuu
};~Bj3X
3;t?uWuuu
t"SS9] u
EYe_^[M3|
Mhu(Eu$u u
ES3VW]9]
39] SSu
ESEYe_^[M3
M;u$Eu
6v v$v(v,v0v4v
v8v<@v@vDvHvL
vPwvTovXgv\_v`WvdOvhGvl?vp7vt/vx'v| @
PzYF0;
PhYv4;5
P|YFH;
PjYvL;5A
Y3MW0u
USVWUj
P(RP$R
t:|$,t
;t$,v-4v
UQPXY]Y[
EPQEPEj
u'339\u
JBtj 3Y+@M
}99}r"9U
JBj Y+3B\M
3+BL1<
Jy3^j Y+
u'339\u
JBtj 3Y+@M
}99}r"9U
JBj Y+3B\M
3+BL1<
Jy3^j Y+
FWE}MuMMMMMMM9M$u
<+t"<-t
h<+t<-tk}
+t HHt
B:t,1<
+JMtHHt
B:}QMEO?
tEPuEP_
}M]U3EE
3f;u AE
f;u!AC
u4}u+e
f;r#33f9EE
[M_3^a
EAV#f}
W]EEE?E
S3PPPPP
w3f9Ut
u-hHMA
EfUu}M
3f;u GE
90t!uuE
EMuUm
HuMu9Et
u4}u+e
33f9EE
UUUUU3##
f;wK3EE9
}fEEEEEf}Z33f9u
Ea3f;u
f~7}x+EMe
EM}Um
H}Mu9Et
u4}u+e
f;r#33f9EE
ufEEEEEfu
~(E]Mm
0K;]sE;]s
EM_^3[
K;sE;s3f
SVW}f]3
ENVwYe
u,u ;t
YUV3PPPPPPPPU
$s ^UV3PPPPPPPPU
S3VWEN@
tfM_^fH
WVrYtPA
C Files
C Windows
C Windows
DISPLAY
RGB(255,0,0)
button
button
button
button
button
TXT_COLOR1
Release Device
&Create Device
kernel32
Device not created. Choose settings and click 'Create Device' then type to see results
Wave Files
Any Files
CoCreateInstance(IMMDeviceEnumerator) failed: hr = 0x%08x
MDICLIENT
IMMDeviceEnumerator::GetDefaultAudioEndpoint failed: hr = 0x%08x
comctl32
FhTKCN+
#qV{,;M3.
I\bacuD!9"
m"BO-N
Jf2AP/w} A
IS]ptgZM=O6R1?{
n'Y{iuK&Z<
}c(HQwi[
r|oZEn
;dRFA,
? :ZOp
zJ2?oSKZn8U
_:7 MG\.x.uz,y.pO1%cl
Ng+*dt
un;7O4a
ih2d*4a
qr#( G\
!k>2j1]V
JCLFF=
&[z2|H-
QxF9v-
7!w3,=
};^{_4U
y??7fZL$
1Dgzlne
*"Z"H(m#[~/I=
ipyxD|4
03o%ac
yvQPQQx
3? IS6C<B
aS]LC)kt
oM|wTo:3
{FhlKr)/&p@>;8(Cl
./X!bWnCj
&F+J>g5D
J&%u0ARhD_`
)7=1xWG
ZXVuahb
7Cs9U4"|hUGR!=1b %G
h2R(As`73|1h
{7hy;]~i
>JnZ{Q5g{[
bSg\_'G=~@
8<$a]aJGus
$W)s/Txf1
A**F6-f
/rs!n^b
aa44Bz/ee;
k5>}80u`q
/<P&`a
=r@qZ?
UBAK*N\mA
)o8 ~d
Zw0JK^
jx<Z;e=
x9"-ua
c'WIk,c
xy*.LynE
b,E56Tx
Vv|e;0
bRn[:8
?G7\><](E_
r!ukmpN)
I(?q#^lj
'[+(wd
k:~9'w2cm3#"`<
P-`fS5~Nz
M; L[0|:
us,i N
!$c>PJ7H
0gg,tyT
]kiPm0ynz7dR
BrJ)/n~s]
E}v^Al
gi g39/^nD`\kt$8A4N
F5x"4bH
0)>]';Eh
AM6>zvK2
cdO*k"FY 57
^KGGlMGI
\3WVL( 8st]F
`#2DKUMs
@r@sBJW
eJF!7rG4G
o0_eR_lX
|3Q<#xF]0>
F%tCiV
GjRlK>Z#
&( #]=H
4~Al<H
r&+kN3
6(ZID*
SdgXj"dI~
-vs=BmRS
cheoj#Rd4=+BwjkF%\B
al`Hf9Ts
\c#oe1&V
.o1=]gK
<IWA=9&-g
/AHv7UH$5
Bp)zON,=
B<F@!Z
bMAT`>N'o~
-*XvpZ'@
%.hzFd
Sp44|Z
'f\LzJn5H
c* 1dP'
O&peO3
-(JM ^\#
/|F=Wi.dV
bad allocation
(null)
`h````
xpxxxx
CorExitProcess
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
Unknown exception
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__eabi
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
`h`hhh
xppwpp
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
!"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
1#QNAN
1#SNAN
g@MU3
Qxm`S<$
4{\ e\Y
$zhK1_
QxjS<$
Qx>jSd
Y#EQ+*t^0
eL2A-AT
c.@dOs4 Qx`p
PoD{cJC/%
v!KAVrYP~
-Vpous
;0XAsD
\PaT>u'
/%Sc|#d/;[!4&
[Th'y^
w1`<Cp
Feb l=
l>L@<O x_Dmuso8
R`#L_q
/RS+$G"|Q
_r6Vrn
2h@ m$VF:
77Jxe
dO]%4<Ui^6
G1&76j<#X.;
7:<wKb<ka
i1<|BJzj1
1f<Vnq
("ib"x
P$a+H e
,T":mU1q
G2KCOE
o#/wAPZBtB+
uvh#eE&
LSx'7oUHtBOK
Nt(Jp,
r\3*#~
0vDMaE
Mz_7x4W
.c4" a,Nh
#A-AHh
*qU9P`
.0P_sH_
dMhAZhURjX
4[`t8!U
y0`p t\S
)rcIbl
0`o0JL %:J
3fT]II5V"
?Gzy{59J
\e~7>(YJY
.LFhII
lBK{(F
5[}i/\=K
&QZ&~w( r
O_qKNK
Zrs#\<
A7 Sji
p6[uO'
WJ2F>p
XG+Jo6$cFJH_
"u Nha
4RC=X7
F@*k3D5xXn
+[RQmmS.
g)^WC\G@&FQ
|[,rwmA<i-J*
i/E{%:2)'
s}ZL`/*-&
*(I@$2/*<R|-?)
I)%yp\<iF
zb% |e%D
y,W.![pK6
/sT0rC[9_.
9D;b=G
(i,0TT4
XjX.e4MXUgI
VJh=-_
Vj]BG5([
|HDJp) |k(v8c
5+oGr4^d?rP
O;6M>~
yTU;+5|2C
HTUCVp
h^N hRQb]Oj_e'J
,:D5bF+Q
^NS'gR
wW4vG;
pcq6x>2
gZghb>_mT)-!o
UyK\>aKv
H?I.X(O
qb}wA-%
!B$v#W@2
~J^n:Ic.t$
.C-]r}P
gY1mvq2rs5
ZM'#A^
$Fh_QI7
|6 fN$!
JwJ:Su%
;w)g [R
{X^}6%4"i]`WU+,
Hpu&x\f!
)2|Stt4
IB:KSB9|)
{C_d6so$
I2jm2>{
?E+YIg
adGPh"o%J
WS-w d
;VYr/w
ektScYd
HR+diE
+}e,y[
RpGi&WmNTAI2
o"A/Gj
QznIAiK
?fpE14/'2?LYmU'
lz6.c\T0^
o2Ihz|LF<xN
t;\W]Qs
{#J1*68,
rl !9{
fvEezj
<K&!]l
t't*"X)
,mBdb[C
.MA4M$@zM
Y\"S@H-<2
P 6mQZJ&u"B l^s
?yi7<YXI\CR
Ul MZAF!c
id+>&Uh&H
?o#U,'
<E= FaI
A(xv6a
V6_}lT
&f7OuX^.4
Lg&OC=X_3p@
u.|)dZ
Gz5*tF
2$i5E Cb
z~8L/jcl=
4<"P5IU
j=[yT+suA
^JvQt%~l4
IzKjJJ
@$t_{W
\-g~;!>X9
Nkm*,cn
1!kJ--
Q~\+`;u
u&8-A55(GVJ1;C
K(-x;&xV6zm<
]>sg[\
[By,w_
<*.FEd T
;l<:CxS_
4l[~=,m6
h>fH@h%35*k
(v0*8xtejU
?m_=Q{
\DGoWi
dle~oY#
E{+BENn^[
!|J(6}
Nar~19
5)F9;YsqA
Wl`mPUVR
},-5AXX7
{F}*9mIgrDp4cz
x+GW1
`>FuIK!;
o}r2%h
~{$7gJ
HlZ'V5sh'
r2M$rP
V=V^&lfe
}X8$#4<: .U
=?B B'
6D_<G
#m,H2|3v[
'hfjuO
^4?lb-
JTRG%">
o !@U-7m&-
iRXNe(z*G
Xr9g k`
BN5upN-US+"^
qQC],P
AE`_,;Qg'bj
9AEYP,h
SI|dg;xV
`xo+Y,
P?Jm\p
h1:a'2'!=
bp C<-R
7Rb}&UDu
ZszZZ:
rT@no-n
]Tu{{I.q
]qijg2&C
&4 H<;H/ol
NzYGo(
dl-GPC
Y[pH?m2
.~13Hx
'$;|f_
JJA'Gx
CzT;Qh#.rG
%Nr#z0
qmXR:FJeBT\H?]Wjcjk]p"\K
x$8Mshr>+DK
d1,>7&b^
AE,U+j?g
<L#?{JV
sB}~5XE
vdB4AFMn*G
i*BD"F+<
=;EPxD]<
eO+fd=
B~ywu/
weI8/*
Czh^]u
Vy~hK,=m
nl:dG}GU
qzjA=}
v;^`l6"
`x;!XJn RUsW
sGB-*LDnW
tVLJ{*Vmc@=AP
ztUj`Q
tQ"0o8I]
_GVC &q
dlRMTo
JX:N+~?W
P !rb~2
<:Yj)2
xo8tF:u9
t@\pX|
Zy60r[\
T^C$?n`Mnn
zFas>WW
2+4\"l
3}]-P&
,gA=KM
]xd\paY
vBl$yY_
gn"9,B
K\_njL_[umE
/b44Mz
y<02UlH7wWQ9PU=4
zq2gTs
m3BY_?%--
.EpfA+}
6 IIpr
n;qH;s
LInVW0w
&/4J8ZV,QdMjqo:3{
+Q>Ug!
v'nL&QW
ID<T1B
.!GdvZk
HbTFF&2T
],LH<U
:{!"tSFdB
(#fcKj%[S5
6<;_8qte/
`V5>c{s9K~sd
o2\SBi
%75 st'
Xn>K]->')TK
@a#JYjoG
95jRZ4%
'&V=jD
@D5pGy
.kjb$}rB
.nI0l }<
$z-<"sSt&
FEp&obL
<A|(4]R(@cS+v(*;<c
r3cC0D/H
@80 7KI
D"m]&SC"xm
9UyXO\_9as
M_Vt;ZXp9I
J1>?EEX
3url`(J
>X:&iu
B/Ahms_~B
^j21L
4sU8pV77
dcQXz6
&:}P'8`~g
Jj+T2SG!
N+iYVj
jXl_$S?LQ"6
-~D]Km
'{qyk^
WE6YF[^-Z9|nqL6
3A #8j
0*<IE{v
KBShR(
<:eUL'_(
wF5:L(#\ih
F ~`":
e8xjO1
[VR)":7NE1`
H"63Pb;DJf
&dif4-
5#9`Eke+`&
0:KV$;}2m+h#
@."nU~fM
xV<d;6"@c
P=THm/
f9XpD8o
=Jv L/
~Y+U,~f<
I[EoVr!x
LoadLibraryA
MultiByteToWideChar
GetProcAddress
GetSystemTime
GetProcessHeap
HeapCreate
GetCommandLineA
SizeofResource
LockResource
LoadResource
FindResourceA
GetLastError
KERNEL32.dll
CopyImage
MoveWindow
ScreenToClient
GetWindowRect
InvalidateRect
IsIconic
PtInRect
GetClientRect
SetRectEmpty
LoadBitmapA
DefFrameProcA
DestroyWindow
LoadStringA
EnableWindow
SetDlgItemTextA
IsDlgButtonChecked
GetDlgItem
DefWindowProcA
BeginPaint
KillTimer
SetWindowTextA
SendMessageA
GetDialogBaseUnits
CheckMenuRadioItem
USER32.dll
PatBlt
FrameRgn
CreateSolidBrush
SetViewportExtEx
SetMapMode
TextOutA
DPtoLP
CreateCompatibleBitmap
DeleteObject
StretchBlt
SelectObject
CreateBitmapIndirect
GetObjectA
DeleteDC
CreateCompatibleDC
CreateICA
GDI32.dll
SHGetDesktopFolder
SHELL32.dll
CoUninitialize
CoCreateInstance
CoInitialize
ole32.dll
StrStrIA
SHLWAPI.dll
COMCTL32.dll
GdipDisposeImage
GdipCreateBitmapFromFile
GdipCreateHBITMAPFromBitmap
GdiplusStartup
gdiplus.dll
HeapSetInformation
GetStartupInfoW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
IsProcessorFeaturePresent
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
RaiseException
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
RtlUnwind
LoadLibraryW
HeapSize
SetStdHandle
WriteConsoleW
LCMapStringW
GetStringTypeW
HeapReAlloc
FlushFileBuffers
CreateFileW
CloseHandle
'4][P/aE
.?AVtype_info@@
.?AVbad_alloc@std@@
.?AVexception@std@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
I x@oGAkU'9p|B
~QCv)/&D(
uuvHMXB
9;5SM]=];Z] T7aZ%]g']
?Zd;On
7?3=Bz
;1az?aUY~S|
D?$?9'
*?}d|FU>c{
zc%C1<!8G
u7.:3q
#2IZ9W
,%I-64OSk%Y
??>| <<
>| ???
>|?<< << >|??
wwwwwwxw{
+w~wx~xg
33933333933
||xw{0
;wxwx{;p
;;;;;;
MWaWaWaWaWaWaWaWaWaWaWaWaWaWaWaWaaWM
SaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaS
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaad
dddddddddddddddddddddddddddddddddddddd
_jdjdjdjdjdjdjdjdjdjdjdjdjdjdjdjdjdjj_
d`jdjdjdjdjdjdjdjdjdjdjdjdjdjdjdjdjj`a
dd`kjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj`dd
jdj`kjjjjjjjjjjjjjjjjjjjjjjjjjjjjk`djd
jjdj`kkjkjkjkjkjkjkjkjkjkjkjkjkjk`jjdj
jjjjjYkkkkkkkkkkkkkkkkkkkkkkkkkkYjjjjj
jjjjjj\kkkkkkkkkkkkkkkkkkkkkkkkgjjjjjj
kjkjkjjg|kkkkkkkkkkkkkkkkkkkk|gjjkjkjk
kkkkkkkjg|k|k|k|k|k|k|k|k|k||shkkkkkkk
kkkkkkkkj|||kjkkkkkkkk
kkkkkkkkktQPPPPPPPPPPPPPPPPQtkkkkkkkkk
||||||||w0/1111111111111111/0w||||||||
|||||||<GGFFFFFFFFFFFFFFFF<|||||||
|||=CCCCCCCCCCCICFCCCCC=|||
||I;;;;;;;;;;F>;;;;I|||
F77777>;7777FC77777F
C56GCG@655556555555C
p>35I5335;6333333>
9--;I3--673@;--9
}6++-;-++++5GC-+6
~5))(())))))53))5
5())))))))))3@;GI)))5
5()(()(())())(),73)))5oTaa
5(((()(()(()(()())))(5oTaJ
A())))))))))))))))))(A
ZkkjkkkjkkkjkkkjkkkjkZ
\kkkkkkkkkkkkkkkkkk\
|k|k||k|k|k|k|k|k|
|||||||||}
477777777777777777777774
6LLLLLLLLLLLLLLLLLLLLLLLL6
=NNNNNNNNNNNNNNNNNNNNNNNN=
=NTNNTNNTNNTNNTNNTNNTNNTN=
=KTTTTTTTTTTTTTTTTTTTTTTK=
?NPWWTWTWWTWWTWWTWWTWWWKT?
@TTK_WWWWWWWWWWWWWWWWWKTT=
@WTWP___W__W__W__W___PWTW@
@WWWWTd____________dPWWWWB
B__W__W\\\\\\\\\\\\W_____B
Bd_d_d;!!!!!!!!!!!!;d_d_dB
Dddddp+000000010001+pddddD
Egggk,,,,,,,3xt0*,,kgggE
Eiil&(),1(((1q(((&liiE
Gme|#)vxy0##($####|emG
#0wu(1#
RWWWWWWWWWWWWR
_d__d__d__d_
ggddgddgdd
igigigii
5mmmmmm5
8oooo8
<================<
,=>>=>>=>>=>>=>>=>>,
-A>AAA>AA>AA>AA>AA>-
.>FAFAFAFAFAFAFAFAA.
/AAFFFFFFFFFFFFFFAA/
/FFAMMFMFMFMFMFMAFF/
1FFFFNNNNNNNNNNFFFF1
1MMMM8
8NMMM1
4OOO9"%%%%&'%%"9NOO4
5OQWa (_% aWQO5
ch:
hgggggggddddgh
effffffffffe
FFFFFFFFFF
NNNNNNNN
OQOOQO
*UUUU*
############
#(#(#(#(#(#(
(''''''''''(
''********''
**" "**
9711111179
:======:
******
y||||||||||||||||||||||||||||y
uSSSSSSSSSSSSSSSSSSSSSSSSSSSSSSu
dssssssssssssssssssssssssssssss
`mmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmm
chhhhhhhhhhhhhhhhhhhw
whjkhhhhhhhhh
eibbbbbbbbbbbbbbbbbj
jbbbbbbbbie
[d]]]]]]]]]]]]]]]]]e
c]]]]]]]]d[
T_WWWWWWWWWXXWWWWWWW[
lWWWWWWWWW_T
PYRRRRVURRby{jSRRRRRRSXU}
YRRRRRRRRRYP
TLLM`xwX_
oXPLLLLLLLMNLLLLLLLLLLT
pVGFFFFGGFFFFFFFFFFFFO
TFAAABRhm`IAAAABAAAAAI
D;;;;c
R;;;<<X
uG;?X_Q>;;;D
?6666Q
zEUXF666<M[
~jJ766?
900006S[B0000000=Sl
oL3009
4+++++,,++++++++.:K~
Z2+++4
1(((((((((((((((((+[
q/((((1
1''''''''''''''''''2Ws
`*((((1
1'''''''''''''''''''*483)U
vL(((((1
1''''''''''''''''''''''''0P[N1'''''1
1(((((((((((((((((((((((('*-*((((((1
1(((((((((((((((((((((((('(((((((((1
A(((((((((((((((((((((((('(((((((((A
-((((((((((((((((((((((('((((((((-
WWWWWW
$$$xx$$$
$2222222222222222222222$
8WTTTTTTTTTTTTTTTTTTTTTTW8
crrrrrrrrrrrrrrrrrrrrrrrr
_kkkkkkkkkkkkkkknlkkkkkkkkk
eeeeeeeeeeeeeei~
oeeeeeee
]]]]]]]]]]]]]]j
s]]]]]]]
WWWWWWWW[XWWWWWd
WWWWWWWW
PPPZaRV
WPPPPPPPf`PPPPPPPP
cKIIIIIIIIIIIIIII
}SCBBF[fXDBBBBBBBB
I;;=@m
j<A^`E;;;
\8B9448Pk
----19/-----0Ea
((((((((((((((1r
(((((((((((((((;cvsk
((((((((((((((((),)-cxe3((((
((((((((((((((((((((.:2(((((
((((((((((((((((((((((((((((
((((((((((((((((((((((((((((
?{-((((((((((((((((((((((((-|?
8v~7v~
}}}}}}
>>>>>>
muuuuuuuuuuuuuuuum
|^````````````````^|
bqqqqqqqqqqqqqqqqqq
phhhhhhhhhhh{
johhhhh
y__________q
`____y
rUUVUV`^UUUVp
lUUUUUr
RjLStgu
gRLLLLRMLLLLLjR
yMCCM]QCCCCCCbn
WDgY;:Zo
oR00:Y=1101It
oK()(()(())+E
oJ(((((((((()Fc^x
{.((Jo
oJ'(''(''(''(''(5WD(('Jo
oI'(''(''(''(''('(('('Io
ok((((((((((((((((((((lo
000000
]]]]]]
C\\\\\\\\\\\\C
aooooooopoooo
>aaaaaaaz
9SVXapUSVs
mFFTKEEEE
**.+**1g
(((((((,KM
((((((((((.*((
>((((((((((((>
]]]]]]
vvvvvv
mwwwwwwwwm
yilmmmqsnmiy
ZZ]\Zy
KJSHHG
(((()Q
'''''''7/'
'7YWWWWWWWWY7
l&7:&7:
~||||||
effffe
u(((2J5u
3tttttt
PA<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING
F a i l e d t o c r e a t e l i n k !
( n u l l )
m s c o r e e . d l l
r u n t i m e e r r o r
T L O S S e r r o r
S I N G e r r o r
D O M A I N e r r o r
- A t t e m p t t o u s e M S I L c o d e f r o m t h i s a s s e m b l y d u r i n g n a t i v e c o d e i n i t i a l i z a t i o n
T h i s i n d i c a t e s a b u g i n y o u r a p p l i c a t i o n . I t i s m o s t l i k e l y t h e r e s u l t o f c a l l i n g a n M S I L - c o m p i l e d ( / c l r ) f u n c t i o n f r o m a n a t i v e c o n s t r u c t o r o r f r o m D l l M a i n .
- n o t e n o u g h s p a c e f o r l o c a l e i n f o r m a t i o n
- A t t e m p t t o i n i t i a l i z e t h e C R T m o r e t h a n o n c e .
T h i s i n d i c a t e s a b u g i n y o u r a p p l i c a t i o n .
- C R T n o t i n i t i a l i z e d
- u n a b l e t o i n i t i a l i z e h e a p
- n o t e n o u g h s p a c e f o r l o w i o i n i t i a l i z a t i o n
- n o t e n o u g h s p a c e f o r s t d i o i n i t i a l i z a t i o n
- p u r e v i r t u a l f u n c t i o n c a l l
- n o t e n o u g h s p a c e f o r _ o n e x i t / a t e x i t t a b l e
- u n a b l e t o o p e n c o n s o l e d e v i c e
- u n e x p e c t e d h e a p e r r o r
- u n e x p e c t e d m u l t i t h r e a d l o c k e r r o r
- n o t e n o u g h s p a c e f o r t h r e a d d a t a
- a b o r t ( ) h a s b e e n c a l l e d
- n o t e n o u g h s p a c e f o r e n v i r o n m e n t
- n o t e n o u g h s p a c e f o r a r g u m e n t s
- f l o a t i n g p o i n t s u p p o r t n o t l o a d e d
A M i c r o s o f t V i s u a l C + + R u n t i m e L i b r a r y
< p r o g r a m n a m e u n k n o w n >
R u n t i m e E r r o r !
P r o g r a m :
K E R N E L 3 2 . D L L
H H : m m : s s
d d d d , M M M M d d , y y y y
M M / d d / y y
D e c e m b e r
N o v e m b e r
O c t o b e r
S e p t e m b e r
A u g u s t
F e b r u a r y
J a n u a r y
S a t u r d a y
F r i d a y
T h u r s d a y
W e d n e s d a y
T u e s d a y
M o n d a y
S u n d a y
W U S E R 3 2 . D L L
( ( ( ( ( H
h ( ( ( ( H
H
C O N O U T $
@ @ @ @ @ @ @ @ @ @ A
| ' ( . 0 5 : > ^ | ` B D I L R U V Z Y ^
p ` a g k l h j m q q t y
n o R o o o o o
u ( , . 1 7 : > \ \ @ E K M S U V Y ^
a a f i k n q u z
| ' ( / 5 7 = w G I K R W Y Z \ i a f l q s x
{ ( 2 5 G J L W Y \ h j u w ~
Z w w w w w w w w w w w w w w w w w w w w w w Z
A b o u t S m a r t D u a l M o n
M S S h e l l D l g
S m a r t D u a l M o n V e r s i o n 1 . 0
L G E l e c t r o n i c s C o p y r i g h t ( C ) 2 0 1 0
D u a l S m a r t S o l u t i o n
M S S h e l l D l g
M S S h e l l D l g
D u a l W e b D i a l o g
M S S h e l l D l g
I n f o r m a t i o n
M S S h e l l D l g
D u a l S m a r t S o l u t i o n
U n K n o w n
V e r s i o n :
C o p y r i g h t 2 0 1 1 - 2 0 1 2 L G E l e c t r o n i c s I n c .
A l l r i g h t s r e s e r v e d .
I n f o r m a t i o n
D i a l o g
M S S h e l l D l g
M S S h e l l D l g
S y s T a b C o n t r o l 3 2
Hosts
| IP |
|---|
| 114.114.114.114 |
| 8.8.8.8 |
DNS
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com | A 131.107.255.255 | 131.107.255.255 |
| dns.msftncsi.com | 131.107.255.255 |
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 61714 | 8.8.8.8 | 53 |
| 192.168.56.101 | 56933 | 8.8.8.8 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
| 192.168.56.101 | 58485 | 114.114.114.114 | 53 |
| 192.168.56.101 | 58485 | 8.8.8.8 | 53 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
Sorry! No dropped files.
Sorry! No dropped buffers.