Static Analysis

PE Compile Time

2015-11-06 04:42:45

PDB Path

aspnet_state.pdb

PE Imphash

60545a3360b6ace185c9d943f22cffdf

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00004fac 0x00005000 6.23377986551
.rdata 0x00006000 0x0000205e 0x00002200 4.59392999273
.data 0x00009000 0x00001830 0x00000200 1.82846938786
.pdata 0x0000b000 0x00000690 0x00000800 3.72416397864
.rsrc 0x0000c000 0x0000077c 0x00000800 4.76565080605
.reloc 0x0000d000 0x0016f000 0x0016e000 3.98566860353

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x0000c0a0 0x000003fc LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x0000c49c 0x000002e0 LANG_ENGLISH SUBLANG_ENGLISH_US ASCII text, with very long lines (736), with no line terminators

Imports

Library ADVAPI32.dll:
• 0x140006008 SetServiceStatus
• 0x140006018 RegCloseKey
• 0x140006020 RegOpenKeyExW
• 0x140006028 RegQueryValueExW
Library KERNEL32.dll:
• 0x140006038 HeapFree
• 0x140006040 FreeLibrary
• 0x140006048 GetProcAddress
• 0x140006050 SetEvent
• 0x140006058 WaitForSingleObject
• 0x140006060 GetSystemInfo
• 0x140006068 CloseHandle
• 0x140006070 CreateEventW
• 0x140006078 SetWaitableTimer
• 0x140006080 Sleep
• 0x140006088 CreateThread
• 0x140006090 FormatMessageW
• 0x140006098 CreateWaitableTimerW
• 0x1400060a0 SetConsoleCtrlHandler
• 0x1400060a8 GetLastError
• 0x1400060b0 SwitchToThread
• 0x1400060b8 LoadLibraryW
• 0x1400060c0 FileTimeToLocalFileTime
• 0x1400060c8 GetSystemTimeAsFileTime
• 0x1400060d0 lstrlenW
• 0x1400060d8 FileTimeToSystemTime
• 0x1400060e0 WideCharToMultiByte
• 0x1400060e8 QueryPerformanceCounter
• 0x1400060f0 GetCurrentProcessId
• 0x1400060f8 GetCurrentThreadId
• 0x140006100 IsDebuggerPresent
• 0x140006110 HeapReAlloc
• 0x140006118 GetSystemDirectoryW
• 0x140006120 GetVersionExW
• 0x140006128 MultiByteToWideChar
• 0x140006130 GetCurrentProcess
• 0x140006138 GetProcessAffinityMask
• 0x140006140 EncodePointer
• 0x140006148 HeapAlloc
• 0x140006150 HeapDestroy
• 0x140006158 HeapCreate
• 0x140006160 DecodePointer
Library MSVCR120_CLR0400.dll:
• 0x140006170 __winitenv
• 0x140006178 _fmode
• 0x140006180 _commode
• 0x140006188 _lock
• 0x140006190 _unlock
• 0x140006198 _calloc_crt
• 0x1400061a0 __dllonexit
• 0x1400061a8 _onexit
• 0x1400061b0 ?terminate@@YAXXZ
• 0x1400061c0 __crt_debugger_hook
• 0x1400061c8 __crtUnhandledException
• 0x1400061d0 __crtTerminateProcess
• 0x1400061e0 _initterm_e
• 0x1400061e8 __setusermatherr
• 0x1400061f0 _cexit
• 0x1400061f8 _purecall
• 0x140006200 strncmp
• 0x140006208 _exit
• 0x140006210 exit
• 0x140006218 __set_app_type
• 0x140006220 __wgetmainargs
• 0x140006228 _amsg_exit
• 0x140006230 _XcptFilter
• 0x140006238 memset
• 0x140006240 __C_specific_handler
• 0x140006248 _itoa_s
• 0x140006250 wcsncpy_s
• 0x140006258 wcscpy_s
• 0x140006260 _vsnwprintf
• 0x140006268 memcpy
• 0x140006270 strtol
• 0x140006278 strstr
• 0x140006280 strchr
• 0x140006288 _initterm
• 0x140006290 _configthreadlocale
Library MSWSOCK.dll:
• 0x1400062a0 AcceptEx
• 0x1400062a8 GetAcceptExSockaddrs
Library ole32.dll:
• 0x140006360 CoInitializeEx
• 0x140006368 CoUninitialize
Library WS2_32.dll:
• 0x1400062b8 recv
• 0x1400062c0 select
• 0x1400062c8 WSASocketW
• 0x1400062d0 bind
• 0x1400062d8 closesocket
• 0x1400062e0 htonl
• 0x1400062e8 htons
• 0x1400062f0 WSAAddressToStringA
• 0x1400062f8 WSASend
• 0x140006300 WSARecv
• 0x140006308 WSAGetOverlappedResult
• 0x140006310 ntohs
• 0x140006318 inet_ntoa
• 0x140006320 WSACleanup
• 0x140006328 WSAStartup
• 0x140006330 listen
• 0x140006338 WSAGetLastError
• 0x140006340 setsockopt
Library mscoree.dll:
• 0x140006350 ClrCreateManagedInstance
Library webengine4.dll:
• 0x140006378 XspLogEvent
• 0x140006380 InitializeLibrary
• 0x140006388 PrintResourceString
• 0x140006390 PerfCounterInitialize
• 0x140006398 AspnetLoadResourceDLL
• 0x1400063a0 LoadLibraryUsingFullPath
• 0x1400063a8 AttachHandleToThreadPool
• 0x1400063b0 GetXSPHeap

Exports

Ordinal Address Name
1 0x140002acc STWNDCloseConnection
2 0x140002ad4 STWNDDeleteStateItem
3 0x140002adc STWNDEndOfRequest
4 0x140002ae4 STWNDGetLocalAddress
5 0x140002aec STWNDGetLocalPort
6 0x140002af4 STWNDGetRemoteAddress
7 0x140002afc STWNDGetRemotePort
8 0x140002b04 STWNDIsClientConnected
9 0x140002b0c STWNDSendResponse
!This program cannot be run in DOS mode.
`.rdata
@.data
.pdata
@.rsrc
@.reloc
UVWATAUAVAWH
A_A^A]A\_^]
t$ UWAUAVAWH
?GET t_
?PUT tQ
?HEADt,
E8H;E0
E8H;E0
A_A^A]_]
WAVAWH
G0D+GPE
A_A^_
x ATAVAWH
A_A^A\
{ UATAVH
t$@@8{Kt
D$ H!\$hH
0HcA 3
HcF Hi
L$ SUVWH
L$hH!\$hE3
H!\$ E3
!\$0H9
ucH!\$HL
ucH!\$HL
@USVWATAUAVAWH
L!t$hH
A_A^A]A\_^[]
WATAUAVAWH
A_A^A]A\_
p WAVAWH
WAVAWH
0A_A^_
ATAVAWH
0A_A^A\
t$ UWATAVAWH
A_A^A\_]
k VWAVH
H9C t]H
D$ tWD
UVWATAUAVAWH
L!t$8D
L!t$03
L!t$03
PA_A^A]A\_^]
LcA<E3
H3E H3E
H#D$8t
HeapSetInformation
HTTP/1.1
Content-Length:
LockCookie:
Exclusive:
acquire
release
ExtraFlags:
Timeout:
StateWebServer._serviceControlEventListLock
CLRCreateInstance
GetRequestedRuntimeInfo
ClrCreateManagedInstance
Tracker::s_lockManagedRuntime
Content-Length:
TrackerList::_TrackerListLock
?ffffff
aspnet_state.pdb
.text$di
.text$mn
.text$x
.text$yd
.idata$5
.CRT$XCA
.CRT$XCAA
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIC
.CRT$XIY
.CRT$XIZ
.rdata
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.xdata
.edata
.idata$2
.idata$3
.idata$4
.idata$6
.pdata
.rsrc$01
.rsrc$02
aspnet_state.exe
STWNDCloseConnection
STWNDDeleteStateItem
STWNDEndOfRequest
STWNDGetLocalAddress
STWNDGetLocalPort
STWNDGetRemoteAddress
STWNDGetRemotePort
STWNDIsClientConnected
STWNDSendResponse
RegisterServiceCtrlHandlerW
SetServiceStatus
StartServiceCtrlDispatcherW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
ADVAPI32.dll
HeapCreate
HeapDestroy
HeapAlloc
HeapFree
FreeLibrary
GetProcAddress
SetEvent
WaitForSingleObject
GetSystemInfo
CloseHandle
CreateEventW
SetWaitableTimer
CreateThread
FormatMessageW
CreateWaitableTimerW
SetConsoleCtrlHandler
GetLastError
SwitchToThread
LoadLibraryW
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
lstrlenW
FileTimeToSystemTime
WideCharToMultiByte
KERNEL32.dll
strchr
strstr
strtol
memcpy
_vsnwprintf
wcscpy_s
wcsncpy_s
_itoa_s
__C_specific_handler
memset
_XcptFilter
_amsg_exit
__wgetmainargs
__set_app_type
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
__winitenv
_fmode
_commode
MSVCR120_CLR0400.dll
_unlock
_calloc_crt
__dllonexit
_onexit
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCapturePreviousContext
AcceptEx
GetAcceptExSockaddrs
MSWSOCK.dll
CoUninitialize
ole32.dll
WSASocketW
WSAGetOverlappedResult
WSARecv
WSASend
WSAAddressToStringA
WS2_32.dll
ClrCreateManagedInstance
mscoree.dll
LoadLibraryUsingFullPath
AttachHandleToThreadPool
XspLogEvent
InitializeLibrary
PrintResourceString
PerfCounterInitialize
AspnetLoadResourceDLL
webengine4.dll
EncodePointer
DecodePointer
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
HeapReAlloc
GetSystemDirectoryW
GetVersionExW
MultiByteToWideChar
GetCurrentProcess
GetProcessAffinityMask
strncmp
_purecall
CoInitializeEx
GetXSPHeap
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" processorArchitecture="X86" name="aspnet_state" type="win32"></assemblyIdentity><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS></application></compatibility></assembly>PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
+eYjHB"`
i+b.(H
;vKy=W
o ]^!0"T
%:MSsea
,Q)t;+
vpd-BK
{{k_^G>
`e4o4h
j: LQH7
'|]=aV
p-e{Hr
4rPW(%
*uF]9\T
1j?Z9
lSsdjvqPLz
v]d|;_fD[
HyRpLM
*}:dAG
&z*s9Wa
J;D8&)
QEQ;m
z?)*$[|
hu1|/\)
#,Jm.K
8n9aS
fSN&ns
-n>r[2
-,?{vM
xXz1y^
zctsrJ.
4_~]U3
b|'"Ibt
x.<b43O+
K"'2=q
+;{5=_
.pqSfUG
|F70~aq
,@o~kN
}h,K^-
HJ.qwE<
T09~D?
hy8K~c
:Phrae
$|]/96
!Gnjyo
-E{wzB
7nK_Xzf[
|6JkCu]t
LDDrR~
]M?1kT
tjBTU
z`WU/
`3Z3!Iw
{&k/~S
}y}}yy=qf
i]=F+}
O]9&r}P
S%ym5e
o7Ch$?
}|}.q[
s-GVt\
)liFfN
k(@OdHUG
vj,FPu
+qg[#(
Y?"M_9R
[Z $hn
|x`M):3
u-}$U%
-5Fu1;g
]e[zpU
%??Uv8~N
"nM6f
xBtjy@
?B.?6`
K_G-W_
?hrn82
1Lf77H
>L%q[K
gE:X\>nz
dZ9)s-
m;<}k{v
Ben2O99
`<-+~W
;on:|8_
M/l{Ck[
0oA*$
~MP)zN
9?sIs4^
onrXWb
M`%_@6
nvZF+,v
[FA/j/>
(q6+~;
qI7997
s;$ac>Thg
zvR9&c
#OiNV~
J"n.gXB
<y">fF ~Q
@As<EJ
iAwSLK
oV9\6n
PP8)C|_
C8n|Yh
c-=nc&w@
R>0((|
K.Yy/Z=
szCkr>
zd|Qgxg!:
b;BpY3
f~zL'9
m3j_}a}
'IL}JI
c%-^a6
{LKD;V
o{|;pv
22$=v
=}G_a#
N[8{'l
GFlkTU~
>>Dd&{
>D@x|k
reBY?2}
l;\sv]
'>R-<qu
fc8a$O
?]qz27
}-_)nf
lJRNX>2
Jab`AU4
GV1N^-
~sq6JZC
K5U^ T
E@E|IL{
1fy>dW
63xxR$
zcf9fUf
P;{\#7k
QjN5@<
PU)WZ(
;zPVZs>
7fpjI#0
s%f!ZS
M`,#)bp
@i`kq-
sT'm!1/
L$PG;A
`0Z<be
f80'|=%n
x'e*DI
w,Y3I.
P1DEaU7y
v=\\kW
xgo*Ts
`[%k3z>
2_1]l'
tcC[n9
5P|jpg
@e9Ts<
{?*mH.
3`pOY-
y2SLj^
NRSUhW
?._RtA
~r!pm2
m4]_4l
&@5>:Ka
To'f[2TTI*
{|R}|3~
jdaB]Fa
1^B[%q
<-zt%tI
QJ}EO-
}^y#ky5[$w
|(odE?
4^HZh'
m+R#(j
\==2yt
LlJz<V
9JVz*C
Im9APZ
[z8.kH
%5ps_s
&-ZOZab
Aqv45C
3+B;_u
>[}W.'|
ika1kU
,&*1$Af
L[[7EZ
M[? _%
%RQHJG
cNog>A-
$]dFadEU
SB`uzw
z('-d9
knE.ISv
?sc9E;
}@&B*'
\Vtz9v
E7jt@R=`t5
|'bp\Gj
~o!ZX5
kvp-Qw
KgsT%H*4
v1t#:V|y
&2E"{4
_$^ySjx
du|{A/
gzSM']s
6T&dUl1
},),Z?k
Nuen-@
QR]dOZ
:p{]#&
/}r*nG
\z7yHm
@&b\)D+
Ywa:hO
Zfj'#&
58P``9y
Y&C"]F
'Gwam-
=+)4>i
13mr3+
_O\`r |
E%)(^z
2T4_Gt
#SDFL~
\E{%qC|
Fx$k?M
6Kt!Q
Ijc-z,
.KC|_y
4ZF% %N
=k@k_'^
RtLaP?YZ
#3QuM
ZbpEc(
AJY^bj
WK!Xbi
<2>sGB
oNZnX+
]s\NDYU
|f_C~o
7f[9 `z
\>n\ #
fOEc8^
sDKK;M
3STVR
vQ3yP.
MF;c]k
Qd;!mt
M?a'7v
+!}=;E
N?/cnJ?
sD"Pw5
<jiXfA"p
f:.MdN
1{5c#~
%Cz$IKUE
l$-W<k
(2,#ZO
;fF,pc
S4yZ?q
{qp?Ft
|;W&ls
j\2{@TE
y}afJP
gt9x1
@NO2Xd
+N=0[{
-w{wvzO
APl'{0
3?%PTg
v5;?qT
py;*ICK
FyLNalq0
fUk:Qm
%xA,5U
^jaln'
8P-";"[
}@:vY5
!\a#|Z
#Xx`v*
m2#[>
`sit=?
ex@+{6n<
TgP5[4
1::v4vS
&mMGw*
E.KbN_
%#xv!v
M;n9it
E@gha{
%$Ob<o
RiH%b@B
FrVW}y
fT8twZ
8;mDv&
}utz`Os;
njF<$4"
8J5]NrP
u)MIg
KiQ:m<
ghqV(}
ECBgH/
5&dUy3
lvv\c~}
FAJ7,*
$s<Ex-
MMvV4
tRx!Vg
2:rDWX*xo
#Rz>V6C
h[.^d\xZ
?s)E|X8
Jj$Z#`[G=
Kg[C*=
eI6M|7BeB
VfmYr/
NW;x}L
(LA[hR
pJoNd$
efy_A]
J*st9b>
JB_iJ@A
#J_y2n
5NgJ3%B
{0!o(
eB+(v_HaZ
g/@^ 6
mb@WH=
6ec~0&
J~{keC|
)Z&"0|
YwKGp&n
!Nd)J;N|
Bg!d(\
@`Y~|
@#q,mn
x@Bkf<|L?
a"s%R7
qt?qKc:Y
zyxwvuts
:9876543
[('&%*,
exsFgJ
GrUaL![
D=d?</
J2p7'3y
SNZ%u:F
daiJv(
ZV\Mf,)t
]9o@.w
o8`rHENS
[V8+bn3
lG~o"c
)LS}[N
_SwZip
E?72\Id
@I<2R^
(hSB~)
-P3IMh
%[!ykS
Lgy]Y\
u]|6w-
6r(%Y,
2v<hg:
t=R/0u
%cmzXI
.?CqT+
FHJS<6
,aFw^2
M*l.nh
9TMl7H
)z,~fr
'6Vx:4
A+,//h
)r@=k/
5}:W];
ym<oF{IU;/
05B)Zv
4?BqZ+
5--'oE
#FJ8,"
(T\ARt
I?>IOO
d7>gw\
eTN)hTp
s n9lsw{J
\ m{t{
'b2Jk\
uYg>~A
v)v/v.>
>8F e
i]2{_aC
Ob_E/t
i5iL!y
ZTrwj\
Ey?nZ2
dCu$qC
uw5ZST`
`Y yU{
/_T\i'+
VU~3=[
Ix6ydl
uD[2m]
elK*-f{
FgH")o
r%OSHV
G#4%+P
i?j!]S{
Lpv/.;
M>&"#8
zN:N<>F
{t}>l{
~;w)>IC_=*zr^
{"*@DB
O?5bPuo
mat_%9p
/,/KVO
vwV@^W
,GEjL@
GE,A!<m5g
g{vBh/
VG|9-K
z >Zh
?<6Sh>
8dcRPS7u7r
R$7&\1Z
(rna^m
|QVk{
:qFF_f{/
;A]`#F
jROpu<v
P(3(+}
P*Z?z6
y-=U)T
m:.|v
Fy{.)
rqwJF^@
?X*y%V
dEH+J;x
~bIS<?L
wJgr.]y
f5\-90:
dJL]Ry6
:XV%wm
\uTdN2
")=Q;>px
vD,A=d
3ox+=,
aSm3gx
LT3HfCj
]\6q/-
_W Kzt9
EZYb0L]
!rFrkgy\i#?
eMH_"s?
TGhgr&/
m/M{:4
<iytGN
&xd.w|H
4dM' _
}p}%gK
G<}x?{
!DK-`z
1AW}A#
x`U_F&L
wqys1EI
dwOkzJ~
H?8WEJ{r
I1*GG,U
z/$7NHsA
Q18|o
1J$hzdx
\3viB
z5yF5Ht
L_2?&F
S4O9cUN
;TM1Bw
xYM2`_
4*^|k>
slD-Z0hQ
Sv~Z-"q
5&<V{u
i>3N_W7~[
/jmFbC@
/&O6|+~
b]PVu(
1sa 2WG
)Z5q}#
'pF?r
*q]5g(%
HEg-/%#Hk
;ZFTp~
{|LCRbz
>y%<.q
1\WNGF
~_t{?P
>"`6zn^
= ,gHDZ
2o{hu\
J~X`8*
bst%i'
Z`ixsl]
RH27kE
Ev`uHS
pzauY
} _ov/v
z2>3Dv
Xvg7lt
$5~|$h
{'}~-<gUy
0P+&3^
/YR=|6
r@cA`m+
<_D.^B
,(8>K
Ec)_d^
"0};|K
XT{TU<
F69uM|er
Q5'i#P76
'X~;N^0
~68NDV
eGfb=O
3~pfVx
@&WD3l1
Rqd5fR8T
k^ F#>
KwDlGM,
z`*]x8
Hs$}__
o?Pcc9
YD`rB$
3Bv4`:I
><-NSe
7uT?~m
66X_'w
js4@z]2
~_\tDq
T)X|M)
v:W4+E
Ua)8i>
]Z1~.Vi
Y)[Pj]_
Of9$-c
VI;0zS
y$KR.C
z-0|[i~vN
%li9"Pr
vzN@']-(
PL-Shj.
(wV?5#W'
*O`Src1
z`A_%.
p$36bi
JJ-g=`
6uZuaT
>0_f\J
^.'cd(
L))@w0
?vtB,h
Ti.9 #
eYupP5
.#CNvk
&{z52t
y!ZBzt?
%KM%77
^RbB b.
k>AT=q
orn.p%
$C\:q:er
-?X>]-
S}%"{26
hQJteA
Il-ZN~
u}c^8d
Qh`=u(z
rpZgg
=wJr6k
{+Si~{
ap-)D=zr
-4#eRi
@hP>H5
y[K.QAB=
3d*}+As
eo4Ck(
.3ybtR
|c~MgI_S
kkrG^"l
k(;^Wt
8XX !]
q+++fi6z
~h6_CJ
C%"/V0V&
$\\Q 5
pX$Op_
t-UWkq
L*Z_SJ
Yj7q=b"k
Dja`v^
+wzw+n
GB{'&V
@>,n{81
i)vE\
J\_v9
*Qs>r G
1^%_nq]
CTcGs(
x?h$&*
>jk8B)
ho9kI&xYO
B.fi14
0HGRJP
eweb^Y]
vKmi$zW#
:1eq~b
;rE>9s
wN39RW
!S45YW
;O)wQ
&LP1L?
+DV/%J:
wq7v=,
mk,(\D
Mm%9?m
Z_UQS?
&c]`9o
/q"<7L'O
,.YwrV*
Xd5sAh
O3$EO2l
^^'T]:
8&KLe
%&@blm
U3yUi(
Fhbon-C
"/Rk]
t"klsV
umx9TJ;
IrpS"b
:(;\ah
4M|A<
wK2 m,
yr!&Zh)
Kma%jG
-!e"Fh;
arKcd]
S@J/t0
vW_vE2
j)2xM)8
&i5e^`
?"[t8/;
cA|eGX
3rh;t_
v`YGbW
?l8?xd
.K/BJs
L3)YU<(#
?q?[RB
,DUjS
F)^E c
l\<wE3
yc^`t>
u)O(B3
A9&BLI
R tD<^?
4^jde^
nKVS-
}}\AV8Kv
'n+x-u
{fN<H0`
2Yv?[x
=p|M5A
g4!@VH
j8d=S{U
v[hdew 1
^y 7Xw
2$Kuq9Y-
?knC 3
m* K?z?
u$McHqN
j]/!A`
6FO<-%
mE ]r"T
cgI{vN
{0oRxa
?w:'./B
7Dv\~
'E]y~k
2LNRu-
hDRh@l"
]#p'\=
)dT>5_
FuXG*6k;
YZW;"y
^3p:-K
xKvUN2p
+tUaJU
Uc;q*
I1naOse
,[|U#C
!d>">l
Gd)P8&
u91^UA
V_meuv[y
aeIUgY
u6&[)
@Hp#m`\
~+T^aFd
XD8d.~4vw
~EwJFW
tuVn$O
PZc3tfJ
}-|hG|
*T/<3/
h3YBD*q
@<q]/_
c#lp!KH\
K%#X-i
pw5=>-
I]_},Y
!#9=1*
6LY&!D
>K[#H$
Z5 .x8
eC4J U
"Pq~Zw
j"uo!]
zfss=
/ZrN+wn
^IDH,V<
oNGw~X
Y9U$Uy
).M#AF
KN,1Mlx
($xu]+
_IoEqj
Dz|1,l
YEz|\jk
Yw~#E>
&*8N=U
/7BG!H
yNu}83
1=|^_A
!8 uf!@)d
(iqg
YXWVUTs
xz`e6%H
{ElN59D
B:V7zBps:
sXuJ1_|
9fzIIo
: 8pT.y
: 8pT.y
94D-44
f'nAmkbvh
'1PGnp
tjdhHy
?~,%F
^+h;oZ
+{3G[t2R
}P8_TRe
`_ZFo+
H9B&"/
+!%D>)U
S*m/O!j
k)D~/R
O;0_t;
5/9oT-y
{>4+)lk~
B`YAat
]F[fK!
qQaw(L;
_Xv?Z
=\5jJ)
iBusg
/nIR4|j
Gk5o2X
}TYSx4
_KB*15
fo"8_i
cRW6-
hV;r7%
R!`jsV
A}8"O(J
cc)0u-5
{*m7esTx
BNv8@GD&z
+2i`pAj
PK%ljQ
~" 9[h
\:[`:Pb
ZwZoZW
(H42#%TW:I
XoXgX_
.GV?VP00
wTgTW.
OPGPAk
QWWWGW
CM*trU
o8?(!fh
\w\oXM
2k1g%8A5
G[?[7[/[
YK>vL%|
M"E@oL
Z7>~3c
K:%_10
9aT!y
Bmyhpx}
Y8I$>8
Pbk@Z#
=6~=,5
.i$Efh
BCvBum{
R)TG{=u
j'D5xr
H\z8A|
Q]2BuB
M#NP'
%I/M=F
5 9`T!y
j]2t@!C
PQRSUVWAPAQARASATAUAVAWUH
i 9`T
]A_A^A]A\A[AZAYAX_^][ZYXUH
kernel32.dll
aspnet_state
0x%08x
SocketTimeout
AllowRemoteConnection
mscoree.dll
v4.0.0
System.Web.SessionState.StateRuntime,System.Web,version=4.0.0.0
Content-Length: 0
500 Internal Server Error
Listen
ProcessCompletion
Unknown
%d^%d^%d^%d^%s^%02d^%02d^%04d^%02d^%02d^%02d
%s^0x%08x
ProcessListening
StartReading
ContinueReading
ProcessReading
Tracker::Read
ProcessWriting
EndOfRequest
aspnet_state
SYSTEM\CurrentControlSet\Services\aspnet_state\Parameters
UseIPV6
VS_VERSION_INFO
StringFileInfo
040904B0
CompanyName
Microsoft Corporation
FileDescription
Microsoft ASP.NET State Server
FileVersion
4.6.1055.0 built by: NETFXREL2
InternalName
aspnet_state.exe
LegalCopyright
Microsoft Corporation. All rights reserved.
OriginalFilename
aspnet_state.exe
ProductName
Microsoft
.NET Framework
ProductVersion
4.6.1055.0
Comments
Flavor=Retail
PrivateBuild
DDBLD227D
VarFileInfo
Translation
No antivirus signatures available.
IRMA Signature
Trend Micro SProtect (Linux) Clean
Avast Core Security (Linux) Win64:Expiro-AJ [Inf]
C4S ClamAV (Linux) Win.Virus.Expiro-9955276-0
Trellix (Linux) Clean
Sophos Anti-Virus (Linux) W64/Moiva-B
Bitdefender Antivirus (Linux) Win64.Expiro.Gen.7
G Data Antivirus (Windows) Virus: Win64.Expiro.Gen.7 (Engine A)
WithSecure (Linux) Malware.W32/Infector.Gen
ESET Security (Windows) a variant of Win64/Expiro.CQ virus
DrWeb Antivirus (Linux) Win32.Expiro.153
ClamAV (Linux) Win.Virus.Expiro-9955276-0
eScan Antivirus (Linux) Win64.Expiro.Gen.7(DB)
Kaspersky Standard (Windows) Virus.Win64.Moiva.a
Emsisoft Commandline Scanner (Windows) Win64.Expiro.Gen.7 (B)
Cuckoo

We're processing your submission... This could take a few seconds.