filenameAeccAdoComServer-604.exe
size314880 (0x4ce00)
md53f54d185f812c43a79758bbcd56c808c
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x108

Rich Header

lib idversiontimes used
205509295
2065092920
2075092918
203509296
188307163
10151
185307169
2076103041
206610301
201610301
15101
204610301

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x54f209e7
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x122
Magic0x10b
LinkerVersion11.0
SizeOfCode0x1da00
SizeOfInitializedData0x2f600
SizeOfUninitializedData0
AddressOfEntryPoint0x1d624
BaseOfCode0x1000
BaseOfData0x1f000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x50000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x1d8fd0x1da00R-X CODE
.rdata0x1f0000x156bc0x15800R-- IDATA
.data0x350000x6cec0x6800RW- IDATA
.rsrc0x3c0000xaae80xac00R-- IDATA
.reloc0x470000x82e80x8400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x33cb80xa0
RESOURCE0x3c0000xaae8
EXCEPTION00
SECURITY00
BASERELOC0x470000x75d0
DEBUG0x1f2800x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x261300x40
Bound_IAT00
IAT0x1f0000x244
Delay_IAT00
CLR_Header00
typenamesizecp
REGISTRY#1011950
REGISTRY#1026280
REGISTRY#1036500
REGISTRY#1046420
REGISTRY#1056100
REGISTRY#1066180
REGISTRY#1076180
REGISTRY#1086500
REGISTRY#1096420
REGISTRY#1106420
REGISTRY#1116650
REGISTRY#1126570
REGISTRY#1136490
REGISTRY#1146650
REGISTRY#1156650
REGISTRY#1166410
REGISTRY#1176490
REGISTRY#1186490
REGISTRY#1196570
REGISTRY#1206810
REGISTRY#1216650
REGISTRY#1226490
REGISTRY#1236330
REGISTRY#1246810
REGISTRY#1256410
REGISTRY#1266490
REGISTRY#1276410
REGISTRY#1286410
REGISTRY#1296890
REGISTRY#1306490
REGISTRY#1316570
REGISTRY#1326490
REGISTRY#1336510
REGISTRY#1346510
REGISTRY#1356900
REGISTRY#1366970
REGISTRY#1377340
REGISTRY#1386990
REGISTRY#1404910
TYPELIB#1149120
STRING#7600
VERSION#19720
MANIFEST#13810
idlangstring
1001033AeccAdoWrapper
module_namehintordfunction_name
KERNEL32.dll618GetLastError
KERNEL32.dll320EnterCriticalSection
KERNEL32.dll957LeaveCriticalSection
KERNEL32.dll870InitializeCriticalSectionAndSpinCount
KERNEL32.dll286DeleteCriticalSection
KERNEL32.dll881InterlockedIncrement
KERNEL32.dll877InterlockedDecrement
KERNEL32.dll637GetModuleFileNameW
KERNEL32.dll973LocalFree
KERNEL32.dll483GetCommandLineW
KERNEL32.dll279DecodePointer
KERNEL32.dll142CloseHandle
KERNEL32.dll1276SetEvent
KERNEL32.dll1467WaitForSingleObject
KERNEL32.dll202CreateEventW
KERNEL32.dll1375Sleep
KERNEL32.dll257CreateThread
KERNEL32.dll552GetCurrentThreadId
KERNEL32.dll641GetModuleHandleW
KERNEL32.dll693GetProcAddress
KERNEL32.dll904IsProcessorFeaturePresent
KERNEL32.dll899IsDebuggerPresent
KERNEL32.dll756GetSystemTimeAsFileTime
KERNEL32.dll548GetCurrentProcessId
KERNEL32.dll1084QueryPerformanceCounter
KERNEL32.dll316EncodePointer
KERNEL32.dll698GetProcessHeap
KERNEL32.dll854HeapSize
KERNEL32.dll849HeapFree
KERNEL32.dll852HeapReAlloc
KERNEL32.dll845HeapAlloc
KERNEL32.dll848HeapDestroy
USER32.dll618PeekMessageW
USER32.dll594MsgWaitForMultipleObjects
USER32.dll49CharNextW
USER32.dll60CharUpperW
USER32.dll624PostThreadMessageW
USER32.dll827TranslateMessage
USER32.dll182DispatchMessageW
ole32.dll23CoCreateFreeThreadedMarshaler
ole32.dll25CoCreateInstance
ole32.dll70CoGetStandardMarshal
ole32.dll125CoUninitialize
ole32.dll108CoResumeClassObjects
ole32.dll16CoAddRefServerProcess
ole32.dll107CoReleaseServerProcess
ole32.dll78CoInitialize
ole32.dll368OleRun
OLEAUT32.dll200
OLEAUT32.dll147
OLEAUT32.dll186
OLEAUT32.dll163
OLEAUT32.dll20
OLEAUT32.dll19
OLEAUT32.dll40
OLEAUT32.dll77
OLEAUT32.dll24
OLEAUT32.dll23
OLEAUT32.dll18
OLEAUT32.dll17
OLEAUT32.dll202
OLEAUT32.dll201
OLEAUT32.dll150
OLEAUT32.dll12
OLEAUT32.dll10
OLEAUT32.dll9
OLEAUT32.dll8
OLEAUT32.dll411
OLEAUT32.dll22
OLEAUT32.dll21
OLEAUT32.dll16
OLEAUT32.dll2
OLEAUT32.dll162
OLEAUT32.dll161
OLEAUT32.dll7
OLEAUT32.dll6
OLEAUT32.dll149
atl110.DLL31
atl110.DLL32
atl110.DLL23
atl110.DLL61
atl110.DLL58
atl110.DLL17
atl110.DLL20
atl110.DLL49
atl110.DLL67
atl110.DLL68
atl110.DLL56
atl110.DLL64
MSVCR110.dll425__crtTerminateProcess
MSVCR110.dll426__crtUnhandledException
MSVCR110.dll587_crt_debugger_hook
MSVCR110.dll575_controlfp_s
MSVCR110.dll774_invoke_watson
MSVCR110.dll424__crtSetUnhandledExceptionFilter
MSVCR110.dll533_amsg_exit
MSVCR110.dll414__crtGetShowWindowMode
MSVCR110.dll367_XcptFilter
MSVCR110.dll1058_onexit
MSVCR110.dll428__dllonexit
MSVCR110.dll555_calloc_crt
MSVCR110.dll1254_unlock
MSVCR110.dll892_lock
MSVCR110.dll112public: virtual __thiscall type_info::~type_info(void)

??1type_info@@UAE@XZ

MSVCR110.dll315void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR110.dll518__wgetmainargs
MSVCR110.dll1286_vscwprintf
MSVCR110.dll1666vswprintf_s
MSVCR110.dll1676wcscpy
MSVCR110.dll1578memmove
MSVCR110.dll1685wcsncpy_s
MSVCR110.dll1577memcpy_s
MSVCR110.dll376__CxxFrameHandler3
MSVCR110.dll349_CxxThrowException
MSVCR110.dll1680wcslen
MSVCR110.dll1580memset
MSVCR110.dll1575memcmp
MSVCR110.dll138void __cdecl operator delete[](void *)

??_V@YAXPAX@Z

MSVCR110.dll1508free
MSVCR110.dll113void * __cdecl operator new(unsigned int)

??2@YAPAXI@Z

MSVCR110.dll624_except_handler4_common
MSVCR110.dll571_commode
MSVCR110.dll660_fmode
MSVCR110.dll1073_purecall
MSVCR110.dll1322_wcmdln
MSVCR110.dll766_initterm
MSVCR110.dll767_initterm_e
MSVCR110.dll498__setusermatherr
MSVCR110.dll572_configthreadlocale
MSVCR110.dll556_cexit
MSVCR110.dll633_exit
MSVCR110.dll1484exit
MSVCR110.dll496__set_app_type
MSVCR110.dll115void __cdecl operator delete(void *)

??3@YAXPAX@Z

MSVCP110.dll1476_Inf
MSVCP110.dll731void __cdecl std::_Xout_of_range(char const *)

?_Xout_of_range@std@@YAXPBD@Z

MSVCP110.dll730void __cdecl std::_Xlength_error(char const *)

?_Xlength_error@std@@YAXPBD@Z

MSVCP110.dll727void __cdecl std::_Xbad_alloc(void)

?_Xbad_alloc@std@@YAXXZ

StringTable 040904b0

BuildTagC3D_16Main_Prod64_604.0
Comments
CompanyNameAutodesk, Inc.
FileDescriptionAeccAdoComServer EXE
FileVersion10,5,604,0
InternalNameAeccAdoComServer
LegalCopyright©Autodesk, Inc. 1998-2016. All rights reserved.
LegalTrademarks
OriginalFilenameAeccAdoComServer.exe
ProductNameAutoCAD Civil 3D
ProductVersion10.5.604.0

VS_FIXEDFILEINFO

FileVersion10.5.604.0
ProductVersion10.5.604.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
0314880EXE02/28/2015 18:33:11#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK