Analysis Date2014-11-01 16:33:09
MD57dcf824ec9cdcbe7ea08dfce9483177f
SHA138b79855b60c9a642ba5a234ee51759a7eedadc9

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: ea2410252a0479bd5ee8f134547ba443 sha1: 31b72d4b68e9ad45acac4a39374d25f2d0049bca size: 223744
Section.rdata md5: 634c30eca886e3693f13e6c562883137 sha1: 8e4843418f8fb94386cb751d4645e386bcba5ea9 size: 50688
Section.data md5: fc2cf19ee68f32305b400b44f4e23b03 sha1: 721c0a8369235d06edde380b225db49ddfd0f0d2 size: 8192
Section.rsrc md5: a513250dca2c4e305662509abc1e01f5 sha1: dd334fb29c03646e22a6be3d856b084685371f6c size: 34816
Section.reloc md5: 5dd45c21c43918d5b050f8cef8c5f3fc sha1: b8f86501f70188efc63e8af499bcef93790507b1 size: 17920
Timestamp2014-03-14 17:55:15
VersionLegalCopyright: 2014
InternalName: dnloader
FileVersion: 3, 3, 6, 0
CompanyName: C
LegalTrademarks: -
Comments: ND
ProductName: premium
ProductVersion: 3, 3, 6, 0
FileDescription: DWD
PackerMicrosoft Visual C++ ?.?
PEhash420406a17050ab600647293abc1bb43a16f37d6d
IMPhash724314d1004d791e901ec997b857113c
AV360 Safeno_virus
AVAd-AwareGen:Variant.Application.Bundler.4
AVAlwil (avast)no_virus
AVArcabit (arcavir)no_virus
AVAuthentiumW32/A-35b3d9ee!Eldorado
AVAvira (antivir)no_virus
AVBullGuardGen:Variant.Application.Bundler.4
AVCA (E-Trust Ino)no_virus
AVCAT (quickheal)no_virus
AVClamAVWin.Trojan.Application-571
AVDr. Webno_virus
AVEmsisoftGen:Variant.Application.Bundler.4
AVEset (nod32)no_virus
AVFortinetno_virus
AVFrisk (f-prot)no_virus
AVF-Secureno_virus
AVGrisoft (avg)no_virus
AVIkarusPUA.4Shared
AVK7Unwanted-Program ( 004a9c681 )
AVKasperskyDownloader.Win32.GetFaster.pcr
AVMalwareBytesPUP.Optional.4shared
AVMcafeeno_virus
AVMicrosoft Security Essentialsno_virus
AVMicroWorld (escan)Gen:Variant.Application.Bundler.4
AVNormanGen:Variant.Application.Bundler.4
AVRisingno_virus
AVSophosno_virus
AVSymantecno_virus
AVTrend Microno_virus
AVVirusBlokAda (vba32)Downloader.GetFaster

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\Software\4shared\DownloadHelper\AlreadyRun ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\UNT2.tmp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\UNT1.tmp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\UNT3.tmp
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\UNT4.tmp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\UNT5.tmp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\UNT8.tmp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\UNT7.tmp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\UNT6.tmp
Creates File\Device\Afd\Endpoint
Winsock DNSdownloadget.net
Winsock DNSwww.adshost2.com
Winsock DNStrack.getportal.net

Network Details:

DNSdownloadget.net
Type: A
162.159.245.192
DNSdownloadget.net
Type: A
162.159.244.192
DNSdownloadget.net
Type: A
162.159.244.192
DNSdownloadget.net
Type: A
162.159.245.192
DNSwww.adshost2.com
Type: A
212.124.126.16
DNSwww.adshost2.com
Type: A
212.124.126.10
DNSwww.adshost2.com
Type: A
212.124.126.7
DNStrack.getportal.net
Type: A
178.162.201.18
DNSwww.adshost2.com
Type: A
212.124.126.7
DNSwww.adshost2.com
Type: A
212.124.126.10
DNSwww.adshost2.com
Type: A
212.124.126.16
HTTP GEThttp://downloadget.net/smart-download/67050200/bundle.exe/bundle.exe?bundleorigin=4300109
User-Agent: UniversalUserAgent(winHTTP)
HTTP GEThttp://www.adshost2.com/at?subId=MjIyOTN8NTM1Mjh8QlJ8M3wxfHw%7C91b2c621b056215c1c5339e97e804178
User-Agent: UniversalUserAgent(winHTTP)
HTTP GEThttp://downloadget.net/smart-download/67010300055/bundle.exe/bundle.exe?bundleorigin=4300109
User-Agent: UniversalUserAgent(winHTTP)
HTTP GEThttp://downloadget.net/smart-download/67020300055/bundle.exe/bundle.exe?bundleorigin=4300109
User-Agent: UniversalUserAgent(winHTTP)
HTTP GEThttp://track.getportal.net/trackcnt/Kvg48RpSKKFNkW8e/?data=L4300109
User-Agent: UniversalUserAgent(winHTTP)
HTTP GEThttp://www.adshost2.com/at?subId=MjIyOTN8NTM1Mjh8QlJ8M3wxfHw%7C2559fe70e84778aec687cb683b2cbd0c
User-Agent: UniversalUserAgent(winHTTP)
HTTP GEThttp://track.getportal.net/trackcnt/Kvg48RpSKKFNkW8e/?data=M4300109
User-Agent: UniversalUserAgent(winHTTP)
Flows TCP192.168.1.1:1034 ➝ 162.159.245.192:80
Flows TCP192.168.1.1:1035 ➝ 162.159.245.192:80
Flows TCP192.168.1.1:1036 ➝ 212.124.126.16:80
Flows TCP192.168.1.1:1033 ➝ 162.159.244.192:80
Flows TCP192.168.1.1:1037 ➝ 178.162.201.18:80
Flows TCP192.168.1.1:1038 ➝ 212.124.126.7:80
Flows TCP192.168.1.1:1039 ➝ 178.162.201.18:80

Raw Pcap
0x00000000 (00000)   47455420 2f736d61 72742d64 6f776e6c   GET /smart-downl
0x00000010 (00016)   6f61642f 36373035 30323030 2f62756e   oad/67050200/bun
0x00000020 (00032)   646c652e 6578652f 62756e64 6c652e65   dle.exe/bundle.e
0x00000030 (00048)   78653f62 756e646c 656f7269 67696e3d   xe?bundleorigin=
0x00000040 (00064)   34333030 31303920 48545450 2f312e31   4300109 HTTP/1.1
0x00000050 (00080)   0d0a436f 6f6b6965 3a200d0a 55736572   ..Cookie: ..User
0x00000060 (00096)   2d416765 6e743a20 556e6976 65727361   -Agent: Universa
0x00000070 (00112)   6c557365 72416765 6e742877 696e4854   lUserAgent(winHT
0x00000080 (00128)   5450290d 0a486f73 743a2064 6f776e6c   TP)..Host: downl
0x00000090 (00144)   6f616467 65742e6e 65740d0a 436f6e6e   oadget.net..Conn
0x000000a0 (00160)   65637469 6f6e3a20 4b656570 2d416c69   ection: Keep-Ali
0x000000b0 (00176)   76650d0a 0d0a                         ve....

0x00000000 (00000)   47455420 2f736d61 72742d64 6f776e6c   GET /smart-downl
0x00000010 (00016)   6f61642f 36373031 30333030 3035352f   oad/67010300055/
0x00000020 (00032)   62756e64 6c652e65 78652f62 756e646c   bundle.exe/bundl
0x00000030 (00048)   652e6578 653f6275 6e646c65 6f726967   e.exe?bundleorig
0x00000040 (00064)   696e3d34 33303031 30392048 5454502f   in=4300109 HTTP/
0x00000050 (00080)   312e310d 0a436f6f 6b69653a 200d0a55   1.1..Cookie: ..U
0x00000060 (00096)   7365722d 4167656e 743a2055 6e697665   ser-Agent: Unive
0x00000070 (00112)   7273616c 55736572 4167656e 74287769   rsalUserAgent(wi
0x00000080 (00128)   6e485454 50290d0a 486f7374 3a20646f   nHTTP)..Host: do
0x00000090 (00144)   776e6c6f 61646765 742e6e65 740d0a43   wnloadget.net..C
0x000000a0 (00160)   6f6e6e65 6374696f 6e3a204b 6565702d   onnection: Keep-
0x000000b0 (00176)   416c6976 650d0a0d 0a                  Alive....

0x00000000 (00000)   47455420 2f61743f 73756249 643d4d6a   GET /at?subId=Mj
0x00000010 (00016)   49794f54 4e384e54 4d314d6a 6838516c   IyOTN8NTM1Mjh8Ql
0x00000020 (00032)   4a384d33 77786648 77253743 39316232   J8M3wxfHw%7C91b2
0x00000030 (00048)   63363231 62303536 32313563 31633533   c621b056215c1c53
0x00000040 (00064)   33396539 37653830 34313738 20485454   39e97e804178 HTT
0x00000050 (00080)   502f312e 310d0a43 6f6f6b69 653a200d   P/1.1..Cookie: .
0x00000060 (00096)   0a557365 722d4167 656e743a 20556e69   .User-Agent: Uni
0x00000070 (00112)   76657273 616c5573 65724167 656e7428   versalUserAgent(
0x00000080 (00128)   77696e48 54545029 0d0a486f 73743a20   winHTTP)..Host: 
0x00000090 (00144)   7777772e 61647368 6f737432 2e636f6d   www.adshost2.com
0x000000a0 (00160)   0d0a436f 6e6e6563 74696f6e 3a204b65   ..Connection: Ke
0x000000b0 (00176)   65702d41 6c697665 0d0a0d0a            ep-Alive....

0x00000000 (00000)   47455420 2f736d61 72742d64 6f776e6c   GET /smart-downl
0x00000010 (00016)   6f61642f 36373032 30333030 3035352f   oad/67020300055/
0x00000020 (00032)   62756e64 6c652e65 78652f62 756e646c   bundle.exe/bundl
0x00000030 (00048)   652e6578 653f6275 6e646c65 6f726967   e.exe?bundleorig
0x00000040 (00064)   696e3d34 33303031 30392048 5454502f   in=4300109 HTTP/
0x00000050 (00080)   312e310d 0a436f6f 6b69653a 200d0a55   1.1..Cookie: ..U
0x00000060 (00096)   7365722d 4167656e 743a2055 6e697665   ser-Agent: Unive
0x00000070 (00112)   7273616c 55736572 4167656e 74287769   rsalUserAgent(wi
0x00000080 (00128)   6e485454 50290d0a 486f7374 3a20646f   nHTTP)..Host: do
0x00000090 (00144)   776e6c6f 61646765 742e6e65 740d0a43   wnloadget.net..C
0x000000a0 (00160)   6f6e6e65 6374696f 6e3a204b 6565702d   onnection: Keep-
0x000000b0 (00176)   416c6976 650d0a0d 0a                  Alive....

0x00000000 (00000)   47455420 2f747261 636b636e 742f4b76   GET /trackcnt/Kv
0x00000010 (00016)   67343852 70534b4b 464e6b57 38652f3f   g48RpSKKFNkW8e/?
0x00000020 (00032)   64617461 3d4c3433 30303130 39204854   data=L4300109 HT
0x00000030 (00048)   54502f31 2e310d0a 436f6f6b 69653a20   TP/1.1..Cookie: 
0x00000040 (00064)   0d0a5573 65722d41 67656e74 3a20556e   ..User-Agent: Un
0x00000050 (00080)   69766572 73616c55 73657241 67656e74   iversalUserAgent
0x00000060 (00096)   2877696e 48545450 290d0a48 6f73743a   (winHTTP)..Host:
0x00000070 (00112)   20747261 636b2e67 6574706f 7274616c    track.getportal
0x00000080 (00128)   2e6e6574 0d0a436f 6e6e6563 74696f6e   .net..Connection
0x00000090 (00144)   3a204b65 65702d41 6c697665 0d0a0d0a   : Keep-Alive....
0x000000a0 (00160)   6f6e6e65 6374696f 6e3a204b 6565702d   onnection: Keep-
0x000000b0 (00176)   416c6976 650d0a0d 0a                  Alive....

0x00000000 (00000)   47455420 2f61743f 73756249 643d4d6a   GET /at?subId=Mj
0x00000010 (00016)   49794f54 4e384e54 4d314d6a 6838516c   IyOTN8NTM1Mjh8Ql
0x00000020 (00032)   4a384d33 77786648 77253743 32353539   J8M3wxfHw%7C2559
0x00000030 (00048)   66653730 65383437 37386165 63363837   fe70e84778aec687
0x00000040 (00064)   63623638 33623263 62643063 20485454   cb683b2cbd0c HTT
0x00000050 (00080)   502f312e 310d0a43 6f6f6b69 653a200d   P/1.1..Cookie: .
0x00000060 (00096)   0a557365 722d4167 656e743a 20556e69   .User-Agent: Uni
0x00000070 (00112)   76657273 616c5573 65724167 656e7428   versalUserAgent(
0x00000080 (00128)   77696e48 54545029 0d0a486f 73743a20   winHTTP)..Host: 
0x00000090 (00144)   7777772e 61647368 6f737432 2e636f6d   www.adshost2.com
0x000000a0 (00160)   0d0a436f 6e6e6563 74696f6e 3a204b65   ..Connection: Ke
0x000000b0 (00176)   65702d41 6c697665 0d0a0d0a            ep-Alive....

0x00000000 (00000)   47455420 2f747261 636b636e 742f4b76   GET /trackcnt/Kv
0x00000010 (00016)   67343852 70534b4b 464e6b57 38652f3f   g48RpSKKFNkW8e/?
0x00000020 (00032)   64617461 3d4d3433 30303130 39204854   data=M4300109 HT
0x00000030 (00048)   54502f31 2e310d0a 436f6f6b 69653a20   TP/1.1..Cookie: 
0x00000040 (00064)   0d0a5573 65722d41 67656e74 3a20556e   ..User-Agent: Un
0x00000050 (00080)   69766572 73616c55 73657241 67656e74   iversalUserAgent
0x00000060 (00096)   2877696e 48545450 290d0a48 6f73743a   (winHTTP)..Host:
0x00000070 (00112)   20747261 636b2e67 6574706f 7274616c    track.getportal
0x00000080 (00128)   2e6e6574 0d0a436f 6e6e6563 74696f6e   .net..Connection
0x00000090 (00144)   3a204b65 65702d41 6c697665 0d0a0d0a   : Keep-Alive....
0x000000a0 (00160)   0d0a436f 6e6e6563 74696f6e 3a204b65   ..Connection: Ke
0x000000b0 (00176)   65702d41 6c697665 0d0a0d0a            ep-Alive....


Strings
 
.
.
..
..
.
..
..
.
 
 
CC
.00-+ 
0
\
--E-
-0
-0010+-0
0
-000...........?- 
0
0
0
0
.......Du
.
TW

000004b0
%%%02X
2014
3, 3, 6, 0
{374DE290-123F-4565-9164-39C4925E467B}
400 Bad Request
401 Unauthorized
403 Forbidden
404 Not Found
408 Request Timeout
500 Internal Server Error
502 Bad Gateway
503 Service Unavailable
504 Gateway Timeout
64shared.com Download Helpe
a([a-zA-Z0-9])
ABORT_CONFIRMATION
Accept: */*
AHash
AI don't have an account,
@_All_Ctrls_Orig_Proc_
AlreadyRun
AMQUTIL.DLL
 and 
@APPLICATION_NAME
Are you sure you want to abort download?
Az([0-9]+)
b([ \t])
_Btn_Is_Checked_
BUNDLES_ACTIVATION_XEROX_SLIDER
button
By clicking "
By clicking "Download" you agree to
By creating account you accept our
Cancel
Cannot download file from:
Cannot download from
Cannot download the requested files.
c([a-zA-Z])
Change
charset={[A-Za-z0-9\-_]+}
Choose if you'd like to install Baidu PC Faster.
_Class_Pointer_Property_
Comments
CompanyName
Confirm
Content-Length: 
Content-Length: {[0-9]+}
Content-Type: application/x-www-form-urlencoded
_Control_Color_
Cookie: 
Create New Free Account
d([0-9])
Dialog
d like to keep your PC fast and smooth throughout its life, then you can
dnloader
Download
Downloading...
edit
E-mail
E-mail cannot be empty, please enter correct e-mail.
#empty
End User License Agreement
English
equal
eula
.exe
file
FileDescription
FileVersion
First Name
%FIRSTNAME%
folder
                                 H
         (((((                  H
h([0-9a-fA-F])
         h((((                  H
{<html[^\>]*>.*<body[^\>]*>.*<\/body>.*<\/html>.*}
http://download-faster.net/error.jsp?msg=downloadhelperxmlnotfound
https://www.4shared.com/terms.jsp
%i%%
I already have an account...
IDC_BUTTON_BROWSE
IDC_BUTTON_CANCEL
IDC_BUTTON_CHANGE_DST
IDC_BUTTON_CREATE_ACCOUNT
IDC_BUTTON_DOWNLOAD
IDC_BUTTON_LOGIN
IDC_BUTTON_OPEN
IDC_CB_AGREE
IDC_CB_BAIDU
IDC_CB_CHROMEEMPTYTABSet improved Google Chrome Empty Tab
IDC_CB_HOMEPAGE
IDC_LINK_DONT_HAVE_ACCOUNT
IDC_LINK_EULA
IDC_LINK_HAVE_ACCOUNT
IDC_LINK_PP
IDC_LINK_TERM_OF_USE
IDC_MAIN_BUTTON_DOWNLOAD
IDC_MAIN_TEXT_DOWNLOAD_DST
IDC_MAIN_TEXT_INTRO
IDC_MAIN_TEXT_REQUESTED_FILE
IDC_MAIN_TEXT_REQUESTED_FILE_PRE
IDC_PROGRESS_TEXT_FILENAME
IDC_TEXT_AND
IDC_TEXT_AUTH_INSTRUCTION
IDC_TEXT_DESCRIPTION_BAIDU
IDC_TEXT_DOWNLOAD_DST_PRE
IDC_TEXT_FILENAME
IDC_TEXT_FIRSTNAME
IDC_TEXT_HOMEPAGE_INSTRUCTION
IDC_TEXT_INTRO
IDC_TEXT_LOGIN
IDC_TEXT_PASSWORD
IDC_TEXT_PASSWORD_CONFIRM
IDC_TEXT_REQUESTED_FILE_PRE
IDC_TEXT_SECONDNAME
IDC_TEXT_STATUS
IDC_TEXT_STATUS_PROGRESS
If you
Ignore and continue
InternalName
%i%% - %s
I want to create new free account...
jjjjj
KERNEL32.DLL
_Label_Original_Proc_
Last Name
%LASTNAME%
_Lbl_Background_Color_
LegalCopyright
LegalTrademarks
License Agreement
ll perform a complete maintenance routine, including boot time optimization, disk cleanup and much more!
Location: {[A-Za-z0-9\-_%+*:;/.=?&]+}
Location of the downloaded file:
Login
%LOGIN%
Login and Download
MESSAGE_LOGIN_EMPTY
MESSAGE_NAMES_EMPTY
MESSAGE_PASSWORD_EMPTY
MESSAGE_PASSWORD_LONG
MESSAGE_PASSWORD_MISMATCH
mscoree.dll
msctls_progress32
MS Shell Dlg
Name cannot be empty, please enter your name.
ndefault
NETMSG.DLL
(null)
open
openas
Open file
Password
%PASSWORD%
Password and confirmation do not match, please enter identical passwords.
Password cannot be empty, please enter correct password.
Password ls too long, please enter shorter password.
policy
POST
premium
Privacy Policy
ProductName
ProductVersion
q("[^"]*")|('[^']*')
Quit
Range: bytes=%i-
renameto_
\r\n
runas
Save the downloaded file to:
Select target dir..
Server answered: 
Set-Cookie:\b*{.+?}\n
Set my homepage to search.b1.org in Internet Explorer, Firefox and Google Chrome
shell32.dll
Show
Show in Explorer
Skip
SkipAll
Software\4shared\DownloadHelper
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
static
StringFileInfo
substring
t be without Baidu PC Faster. One click and you
Terms of Use
Time on your computer is incorrect, therefore cannot establish connection to the server. Please set correct time and try again.
Translation
Unexpected network error
Unexpected network error, cannot download %s
UniversalUserAgent(winHTTP)
Unknown error. Error code: 0x%x
%URL%
URL: 
%USERPROFILE%
utf-8
VarFileInfo
VS_VERSION_INFO
w([a-zA-Z]+)
Welcome to %s Download Helper,
which will guide you through the download process.
WININET.DLL
" you agree to 
You have requested file:
You need 4Shared account to download this file:
                          
+);;<+
+;;;<+,0
0,);;<+
0+<;;+
0+);;)+0
0$000;0
0 0(00080D0d0l0t0|0
0$000d0h0
0%0/0?0D0K0
0$000P0\0|0
0 080H0L0\0`0h0
0 080H0L0\0`0p0t0x0|0
/0<0F0K0
0!0L0\0o1
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0 141@1H1x1
0%1P1w1
; ;$;(;0;4;
040<0H0h0p0x0
$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
; ;$;(;,;0;4;8;<;@;L;X;d;p;
<,<0<4<8<@<X<h<l<p<x<
;(;0;4;<;D;L;h;x;
?,?0?4?<?T?d?h?x?|?
061116015437Z
07969287
079692870
080<0@0
? ?0?8?D?d?l?x?
>0>8>@>H>P>\>|>
? ?(?0?8?@?H?P?X?
= =(=0=8=@=H=P=X=`=h=p=x=
> >(>0>8>@>H>P>X>`>h>p>x>
: :(:0:8:@:H:T:t:|:
0A2z2}8j;u;$=
0A@@Ju
0d3h3l3p3t3
=0=<=D=l=
:0:@:D:T:X:\:d:|:
0F2K2Z2
= =$=(=0=H=X=\=d=|=
#0K0u0
<|<0=P=
<$<0<P<\<|<
;0<S<n<
0SSSSS
0T0[0p0
0WWWWW
0X3h3x3
1%11191A1M1q1y1
1*1/1=1s1|1
1$1,141<1D1L1T1\1d1l1x1
1(1,141L1\1`1p1t1x1|1
1*1>1I1`1y1
1"121<1`1f1v1{1
1;1A1H1N1m1
1*1a1y1
1$1D1`1|1
1<1D1L1X1|1
1(2;2X2c2
1[2c2v2
1`2q2~2
131230073353Z
161230073353Z0c1
>1>6>E>N>[>f>x>
172P2`2k2g3y3
182D2W2i2
:1:8:<:@:D:H:L:P:T:
?#?1?8?=?F?S?Y?s?
191G1U1c1m1
<1<A<W<^<f<z<
:1;b;i;
1d2h2l2p2t2x2|2
1joE|b=z
1L2[2b2k2t2
1#QNAN
1#SNAN
1V2.4T5u5
1x2B3~3
2,202@2D2T2X2\2d2|2
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
2'2/2C2Q2\2r2x2
2:2c2~2
2<2D2L2T2\2d2l2x2
2 2G2^2x2
2(2H2P2\2|2
2#2l2q2y2
2)2M2_2m2
2.2S2x2
2*2Y2i2{2
2 343@3H3x3
2+384C4L4\4g4u4
2!3P3W3b3n3
261116015437Z0
:":&:*:.:2:6:::>:B:F:J:N:R:V:Z:^:b:i:
2`6d6h6l6p6t6x6|6
;!;';-;2;8;A;Y;^;h;u;
>2><>C>^>f>s>z>4?S?
2g3v3Z5
>2>K>V>
2S2Y2v2{2
30;0p0
303<3D3\3d3p3
333\3m3
3 3$34383<3D3\3l3p3
3,3@3L3T3l3t3
334O4a4r4
3+393[3
3%3H3V3
3,3L3p3
3/3o3|3
3	4,4]4
3(4<4H4P4x4
3 4H4h4
3<4Q4`4p4
354O4U4e4l4
363T3[3a3
'?+?/?3?7?;???C?G?K?O?S?W?[?_?c?g?k?o?s?w?{?
394	7 7k:o:s:w:{:
3b3g3n3s3z3
:":3:D:d:
=)=3=:=f=l=
<!<-<3=/>G>k>
3Y344l4
;)<4<=<`<
4,444@4`4h4t4
4-444H4O4g4s4y4
4(444T4\4h4
4-4?4F4L4^4f4q4
4$4<4L4P4`4d4l4
4 4(4P4h4x4
4*4A4X4w4
4"4M4\4
4"4P4x4
4 5<6o6
4&5I5d5
4@5K5T5F6N6k6|6
4,7T7f7
485V:(=
< <$<4<8<<<D<\<l<p<
~4;~8v
?$?,?4?<?D?L?T?`?
>$>,>4><>D>L>T>\>d>l>
;,;4;<;D;L;T;\;d;l;t;|;
=$=,=4=<=D=L=T=\=d=l=x=
? ?/?4?<?D?R?X?`?n?
<4<<<H<h<t<
>$>,>4><>H>h>t>
? ?4?@?H?`?l?
4J5P5X5i5
;-;4;L;
;(;,;4;L;\;`;p;t;x;|;
="=4=n=p?
4S6^6f6y6
>4?W?z?
505L5P5X5\5x5
506?6Q6X6h6
5$54585@5X5h5l5|5
 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
5 5$5(5,5
5 5$5(5,505<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
5$5<5D5L5T5\5d5l5t5|5
5$5,5D5P5t5|5
5,5<5L5`5t5
5!5.5Q5f5
5"646E6q6
5&646R7~7
5-6E6N6_6g6l6q6
575K6R60767;7A7H7Z7p7v7{7
5C5a5h5l5p5t5x5|5
5F6Q6l6s6x6|6
5http://certificates.godaddy.com/repository/gdroot.crl0K
5J5Y5g5|5
,}~^6 
62676Z6
646P6h6
6$606P6\6|6
6(626?6N6\6t6~6
6!6-626B6G6M6S6i6p6
6!6'6.6
6 6$6(6,6064686<6@6D6H6L6P6T6X6
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
6$6(6@6D6\6l6p6
6!6.6b6
6,686@6p6x6|6
6<6H6h6t6
6$6L6d6t6
6,707D7H7X7\7`7h7
6(7/777A7O7o7u7|7
6%7@7k7
6C7b7m7}7
6F7L7p7
6I7[7l7
6o6u6/7
6p7t7x7|7
6W7_7t7
707\7|7
707P7p7|7
70J0|0
737^7h7m7w7
7)737C7j7x7
7"7+747B7c7
7 7$7(7,747L7\7`7p7t7
7-7;7a7t7{7
7 7@7H7P7\7|7
7 787X7l7x7
7=7B7R7b7|7
7<7D7L7T7`7
7#7F7Y7
7 7j7p7t7x7|7
7$828G8
7 829;9P9
7+848@8y8
7 898[8x8
7'8G8L8Z9
>)>7>A>k>
? ?.?7?A?u?
7XJ-#s]
8(8,8084888<8@8D8H8P8h8l8
8$8,848<8D8L8T8`8
8!8'8,82878F8\8g8l8w8|8
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
8(888<8L8P8T8\8t8
8,888@8p8
8,888@8X8x8
8#8+8<8b8I;S;p;{;
8*888I8W8g8v8
8$8(8H8h8
8@8L8t8
8"8Q8v8
8,929N9g9v9
8 949@9H9`9|9
8 989>9
8%9Z9x9
?8?D?|?
<8<D<d<p<
? ?$?(?8?@?D?H?L?P?T?X?\?`?d?p?
>$>(>8><>@>H>`>p>t>
=8=@=H=T=t=|=
8k8r8z8
;(;8;<;L;P;T;X;`;x;
>(>8><>L>P>X>p>
8P9X;`<r<>=
8^,t&j
8^Tu79^4t29^Xt-V
>,>8>X>d>
\9%:\\
90:A:T:
98:=:O:m:
9 9094989@9X9h9l9|9
9 949H9T9\9t9|9
9,969G9Q9[9e9o9y9~9
9$9(9,949L9\9`9p9t9|9
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9x9|9
9 9>9h9
9$9(9H9d9h9
9$9D9P9p9|9
9,9L9l9
9C3J3W
<9=F=V=z=
9H9W9d9
9HSrG:
<*<9<><I<T<Z<o<|<
9S9d9B:A=V?
9T9h9|9
9\$Xta
9x tX3
AAFFf;
@@AAJu
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
Adobe ImageReadyq
ADVAPI32.dll
AHXLXN
>A>K>e>x>
AlphaBlend
america
american
american english
american-english
An application has made an attempt to load the C runtime library incorrectly.
AppendMenuW
Arizona1
      <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>
</assembly>PADPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDING
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
.?AUctype_base@std@@
August
.?AUITextWidther@@
australian
autolaunch
.?AVbad_alloc@std@@
.?AVbad_cast@std@@
.?AVbad_exception@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AVBundlesSliderWindow@@
.?AVCAtlException@ATL@@
.?AV?$ctype@D@std@@
.?AVCustomWindow@@
.?AVDiskFile@@
.?AVexception@std@@
.?AVfacet@locale@std@@
.?AVfailure@ios_base@std@@
.?AVFileBase@@
.?AVios_base@std@@
.?AV?$_Iosb@H@std@@
.?AVLabelTextSetter@@
.?AVlength_error@std@@
.?AVLoaderCallback@@
.?AV_Locimp@locale@std@@
.?AVlogic_error@std@@
.?AVLoginWindow@@
.?AVMainDownloaderWindowSlider@@
.?AVMainWindow@@
.?AVMemoryFile@@
.?AV?$MemPoolT@$0CE@@tinyxml2@@
.?AV?$MemPoolT@$0CM@@tinyxml2@@
.?AV?$MemPoolT@$0DA@@tinyxml2@@
.?AV?$MemPoolT@$0DE@@tinyxml2@@
.?AVMemPool@tinyxml2@@
.?AVNullFile@@
.?AVout_of_range@std@@
.?AVProgressDownloaderWindow@@
.?AVruntime_error@std@@
.?AVScreenBase@@
.?AVScreenLogin@@
.?AVScreenRegistererBase@@
.?AV?$ScreenRegisterer@VScreenLogin@@@@
.?AV?$ScreenRegisterer@VScreenSignUp@@@@
.?AVScreenSignUp@@
.?AV?$Screen@VScreenLogin@@@@
.?AV?$Screen@VScreenSignUp@@@@
.?AVServerResponsesHandler@@
.?AVtype_info@@
.?AVWinHttpSmartLoader@@
.?AVXMLAttribute@tinyxml2@@
.?AVXmlBackImage@@
.?AVXmlBinary@@
.?AV?$XmlBundledContent@VXmlComplexDescriptionBundle@@@@
.?AVXmlBundleEulaText@@
.?AVXmlBundleLine@@
.?AVXmlBundleNumber@@
.?AVXmlBundleText@@
.?AVXMLComment@tinyxml2@@
.?AVXmlComplexBundlesLoadManager@@
.?AVXmlComplexDescriptionBundle@@
.?AVXmlContentBase@@
.?AVXmlContentData@@
.?AVXMLDeclaration@tinyxml2@@
.?AVXMLDocument@tinyxml2@@
.?AVXMLElement@tinyxml2@@
.?AVXmlExBundle@@
.?AVXmlFileFolderCheck@@
.?AVXmlFileFolderCheckers_OR@@
.?AVXmlIconedBundle@@
.?AVXmlLaunchValidation@@
.?AVXmlLink@@
.?AVXmlLoaderBase@xml@@
.?AVXmlLoadManager@@
.?AVXMLNode@tinyxml2@@
.?AVXmlRawBundle@@
.?AVXmlRegCheck@@
.?AVXmlRegCheckers_OR@@
.?AVXMLText@tinyxml2@@
.?AVXmlUniversalStyleContent@@
.?AVXMLUnknown@tinyxml2@@
.?AVXmlValidationResponse@@
backimages
bad allocation
bad cast
bad exception
 Base Class Array'
 Base Class Descriptor at (
__based(
BeginPaint
belgian
binary
BitBlt
bottom
BringWindowToTop
britain
bsbLs#&s?
bundlebeforelaunch
bundle%d
bundle%dbuttonLabel
bundle%deulatext
bundle%dex
bundle%dfileName
bundle%dheader1
bundle%dheader2
bundle%dheader3
bundle%dicon
bundle%dlines
bundledownloaderror
bundledownloadstart
bundledownloadsuccess
bundle%drequestLabel
bundlelauncherror
bundlelaunchsuccess
bundleperscreen
bundlepostsuccess
bundlestimeout
buttonLabel
C09s(u
CallWindowProcW
canadian
cancelbutton
C+++)C
cCP	V 
<![CDATA[
__cdecl
checkbox
CheckDlgButton
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
;!;<;C;H;L;P;q;
 Class Hierarchy Descriptor'
CloseHandle
__clrcall
CoCreateInstance
CoInitializeEx
COMCTL32.dll
 Complete Object Locator'
CONOUT$
`copy constructor closure'
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
CorExitProcess
CoTaskMemFree
C PjPV
C$PjQV
C.PjRV
C/PjSV
C*PjTV
C+PjUV
C,PjVV
C-PjWV
=C>Q>x>
CreateCompatibleBitmap
CreateCompatibleDC
CreateDialogIndirectParamW
CreateDialogParamW
CreateDIBSection
CreateEventW
CreateFileA
CreateFileW
CreateFontIndirectW
CreateFontW
CreateMutexW
CreatePatternBrush
CreatePopupMenu
CreateSolidBrush
CreateThread
CreateWindowExW
- CRT not initialized
:$:D:`:|:
D$8!D$`
@.data
dddd, MMMM dd, yyyy
D$ !D$H
D$,+D$(j
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteDC
DeleteFileW
DeleteObject
  </dependency>
  <dependency>
    </dependentAssembly>
    <dependentAssembly>
DestroyMenu
DestroyWindow
;:<@<D<H<L<
DispatchMessageW
D$,j0QP
D$l+D$h
=<=D=L=T=\=h=
;<;D;L;T;\;h;
DOMAIN error
downloaderror
downurl
D$pSVW
D$PSVW
DrawFrameControl
DrawTextW
D$(SVW
= =$=,=D=T=X=h=l=p=x=
<D=U=`=
dutch-belgian
D$<Wh<
`dynamic atexit destructor for '
`dynamic initializer for '
dyntop
<	="=E=\=
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
EnableWindow
EncodePointer
EndDialog
EndPaint
england
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
EnterCriticalSection
EnumChildWindows
EnumSystemLocalesA
ExitProcess
EXj0QP
ExpandEnvironmentStringsW
expire
externals
extra1
extra2
extra3
F0@;F,~FSW
@@f90u
failon302redirect
__fastcall
February
Fh= UD
filecheck
fileName
FillRect
fixHeight
- floating point support not loaded
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
french-belgian
french-canadian
french-luxembourg
french-swiss
Friday
FYY;t$
;-;G;];
G0O0m0O1
G;~4Y|
GAIsProcessorFeaturePresent
GDI32.dll
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
GetACP
GetActiveWindow
GetAncestor
GetClientRect
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCPInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetCursor
GetCursorPos
GetDlgCtrlID
GetDlgItem
GetDlgItemTextW
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesW
GetFileSize
GetFileType
GetLastActivePopup
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetMessageW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetObjectW
GetOEMCP
GetParent
GetProcAddress
GetProcessWindowStation
GetPropW
GetStartupInfoA
GetStdHandle
GetStockObject
GetStringTypeA
GetStringTypeW
GetSysColorBrush
GetSystemTimeAsFileTime
GetTempFileNameW
GetTempPathW
GetTextExtentPoint32W
GetTickCount
GetUserDefaultLCID
GetUserObjectInformationA
GetVersionExW
GetWindowLongW
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
(Go Daddy Class 2 Certification Authority0
GoDaddy.com, Inc.1301
'Go Daddy Secure Certification Authority1
:*;g;q;
great britain
!>GSAZK
:G:U:[:~:
GVC;*++<T
GYG;|$0u
gZ/Pu4
`h````
hcenter
:$:,:@:H:\:d:h:l:t:|:
header1
header2
header3
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
HeapSize
`h`hhh
HH:mm:ss
HHt<-6
HHtYHHt
<,<H<L<
holland
hong-kong
h=++);T
: :@:H:T:t:|:
*http://certificates.godaddy.com/repository0
+http://certificates.godaddy.com/repository/0
*http://certificates.godaddy.com/repository100.
>http://certificates.godaddy.com/repository/gd_intermediate.crt0
"http://crl.godaddy.com/gds5-16.crl0S
http://ocsp.godaddy.com0F
http://ocsp.godaddy.com/0J
h=*++<?Vf
hybridFileName
hybridUrl
>"?-?[?i?
 IDATx
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:4886F895A14F11E3BF13D566FA2C931D" xmpMM:DocumentID="xmp.did:4886F896A14F11E3BF13D566FA2C931D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F2ADAF30A14E11E3BF13D566FA2C931D" stRef:documentID="xmp.did:4886F894A14F11E3BF13D566FA2C931D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>eR
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:69D1948A9D6511E3BA01FEA404FAD141" xmpMM:DocumentID="xmp.did:69D1948B9D6511E3BA01FEA404FAD141"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:69D194889D6511E3BA01FEA404FAD141" stRef:documentID="xmp.did:69D194899D6511E3BA01FEA404FAD141"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>
" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:F78B75BF9D6D11E3BA01FEA404FAD141" xmpMM:DocumentID="xmp.did:F78B75C09D6D11E3BA01FEA404FAD141"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F78B75BD9D6D11E3BA01FEA404FAD141" stRef:documentID="xmp.did:F78B75BE9D6D11E3BA01FEA404FAD141"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>i
images
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedIncrement
introscreen
InvalidateRect
invalid map/set<T> iterator
invalid string position
ios_base::badbit set
ios_base::eofbit set
ios_base::failbit set
:!;*;>;I;P;
irish-english
IsDebuggerPresent
IsDialogMessageW
IsDlgButtonChecked
IsValidCodePage
IsValidLocale
IsWindow
italian-swiss
<,<I<T<v?
$iTXtXML:com.adobe.xmp
<;<I<v<
j1|(hl
j9SQGu
JanFebMarAprMayJunJulAugSepOctNovDec
January
J'\'Gg
jJ_HNF=
j@j ^V
'j%[Kk
JL	H+1
j"^SSSSS
KERNEL32
KERNEL32.dll
:K;g;x;
KillTimer
;%;K;q;
Kt9Kt+K
launch-params
launch-type
launchValidation
LC_ALL
LC_COLLATE
LC_CTYPE
LCMapStringA
LCMapStringW
LC_MONETARY
LC_NUMERIC
LC_TIME
L$d_^[3
LeaveCriticalSection
leftBorder
line%d
LoadBitmapW
LoadCursorW
LoadIconW
LoadLibraryA
LoadLibraryW
LocalFree
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
L$ Sh<
L$ ShH
lstrcatW
lstrcmpiA
lstrcmpiW
lstrcpynW
lstrcpyW
lstrlenA
lstrlenW
: :,:L:T:\:d:p:
>,>@>L>T>l>x>
;,<@<L<T<l<x<
>%?L?U?n?~?
]_l?[y%
>*><>L>Z>p>v>~>
mainbundle
maincheckbox
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
MapWindowPoints
masteraction
masterrun
masterstart
maxiget
message
MessageBeep
MessageBoxA
MessageBoxW
metalink
</metalink>
metaurl
Microsoft Visual C++ Runtime Library
MM/dd/yy
Monday
MoveFileW
MoveWindow
MSIMG32.dll
MultiByteToWideChar
=.=;=@=M=Y=_=
:N;c;s;
 new[]
New IT Limited0
New IT Limited1
new-zealand
Nicosia1
norwegian
norwegian-bokmal
norwegian-nynorsk
Norwegian-Nynorsk
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
Nt3Nt"Nt
(null)
October
ODMgqQ
offset
OiCCPPhotoshop ICC profile
ole32.dll
`omni callsig'
O<;OD~
operator
=	>_>p>
__pascal
PathFileExistsW
PathIsDirectoryW
PathRemoveFileSpecW
PathRenameExtensionW
PathStripPathW
`placement delete closure'
`placement delete[] closure'
Please contact the application's support team for more information.
policy
policytext
portuguese-brazilian
postchecktimeout
PostMessageW
PostQuitMessage
PPPPPPPP
pr china
pr-china
Program: 
<program name unknown>
? ?(?@?P?T?d?h?l?t?
__ptr64
:$:(:@:P:T:\:t:x:
puerto-rico
- pure virtual function call
:P:^:w:
%qbqB:2&
>%>Q>o>
QQSVWd
QueryPerformanceCounter
QWWWVRP
? ?+?Q?X?x?
;$;;;r;
radiocustom
radioquick
RaiseException
`.rdata
ReadFile
regcheck
regcheck_notexists
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
ReleaseDC
@.reloc
RemovePropW
        <requestedExecutionLevel level="requireAdministrator" uiAccess="false"></requestedExecutionLevel>
      </requestedPrivileges>
      <requestedPrivileges>
requestLabel
__restrict
RjY FW
RtlUnwind
runtime error 
Runtime Error!
Saturday
`scalar deleting destructor'
Scottsdale1
ScreenToClient
    </security>
    <security>
SelectObject
SendMessageW
September
SetBkMode
SetCursor
SetDlgItemTextW
SetEvent
SetFilePointer
SetFocus
SetHandleCount
SetLastError
SetPropW
SetStdHandle
SetTextColor
SetTimer
SetUnhandledExceptionFilter
SetWindowLongW
SetWindowPos
SetWindowTextW
SHBrowseForFolder
SHCreateDirectoryExW
SHCreateStreamOnFileEx
SHELL32.dll
ShellExecuteExW
Shell_NotifyIconW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHLWAPI.dll
SHOpenFolderAndSelectItems
SHOpenWithDialog
ShowWindow
signupurl
silent
SING error
slovak
south africa
south-africa
south korea
south-korea
spanish-argentina
spanish-bolivia
spanish-chile
spanish-colombia
spanish-costa rica
spanish-dominican republic
spanish-ecuador
spanish-el salvador
spanish-guatemala
spanish-honduras
spanish-mexican
spanish-modern
spanish-nicaragua
spanish-panama
spanish-paraguay
spanish-peru
spanish-puerto rico
spanish-uruguay
spanish-venezuela
s[S;7|G;w
^SSSSS
SSVhNh@
startrightafterskip
stats-url
stats-url2
staturl
__stdcall
`string'
string too long
StrStrIW
StrToIntExW
subidlaunch
Sunday
SunMonTueWedThuFriSat
svnup.sh
swedish-finland
>S?Y?o?z?
t-9\$xt
tehYvB
TerminateProcess
tEXtSoftware
The Go Daddy Group, Inc.110/
+t HHt
This application has requested the Runtime to terminate it in an unusual way.
__thiscall
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
!This program cannot be run in DOS mode.
Thursday
tKHHt.HHt
< tK<	tG
TLOSS error
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
t#/nnv
to=@_D
topBorder
tR99u2
TrackPopupMenuEx
TranslateMessage
trinidad & tobago
trinity.3.1.29
trinity.3.2.0
trinity.3.2.1
trinity.3.3.3
trinity.3.3.4
trinity.3.3.6
trinity.void.v3
  </trustInfo>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
t"SS9]
<+t(<-t$:
t$<"u	3
Tuesday
;t$,v-
t VV9u
t+WWVPV
 Type Descriptor'
`typeof'
u%9x,uh
`udt returning'
u)jAXf;
- unable to initialize heap
- unable to open console device
__unaligned
- unexpected heap error
- unexpected multithread lock error
UnhandledExceptionFilter
UNICODE
uninstall
uniquescreen
united-kingdom
united-states
universal.catalina.v3
universal.luftix.v3
universal.newit.v3
universal.v3
Unknown exception
UpdateWindow
UQPXY]Y[
url_download_method
url_params
URPQQhP
USER32.dll
USER32.DLL
u_SUWP
UTF-16LE
uvsin/X
u,VVWV
v$;5d_D
`vbase destructor'
`vbtable'
`vcall'
vcenter
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
<V=e=s=
`vftable'
virgin
VirtualAlloc
`virtual displacement map'
VirtualFree
v m2=:
v	N+D$
VSSSSS
_VVVVV
VVVVVVVVV
VVVVVVVVVUVVVj
VVVVVVVVVVj
VVVVVVVVVVVVVj
WaitForMultipleObjects
WaitForSingleObject
Wednesday
WICConvertBitmapSource
WideCharToMultiByte
WindowsCodecs.dll
WinHttpAddRequestHeaders
WinHttpCloseHandle
WinHttpConnect
WinHttpCrackUrl
WINHTTP.dll
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpOpen
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetOption
WinHttpSetStatusCallback
WinHttpSetTimeouts
WinHttpWriteData
wintitle
WriteConsoleA
WriteConsoleW
WriteFile
^WWWWW
WWWWWWW
;X<f<l<|<
<?xml version="1.0" encoding="UTF-8"?>
xml version="1.0" encoding="UTF-8"
<?xpacket begin="
xppwpp
xpxxxx
Y;=([D
yOM\]V
>=Yt1j
YYVVVS
;Z<l<y<