Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6402	May 25, 2021, 9:30 a.m.	May 25, 2021, 9:33 a.m.

Size	4.4MB
Type	PE32 executable (GUI) Intel 80386, for MS Windows
MD5	`e6f2c7e2ebd7dd935bbdce6c38e50467`
SHA256	`198c007bba9ab6f106cb6d55568f4af5f1f1aa3f7c36b2f9c2196b2120fb1e09`
CRC32	`58E70085`
ssdeep	`98304:a5Yz2FzvCwAfC71Wamj0W68+i33c9kM5vjBv2YbYb8gvbzAi/C8U:oz0C7Fm4W6Li33c9kQF+YbY5vFc`
PDB Path	C:\musetoyizi\hilivac.pdb
Yara	PE_Header_Zero - PE File Signature OS_Processor_Check_Zero - OS Processor Check Raccoon_Stealer_1_Zero - Raccoon Stealer IsPE32 - (no description) Trojan_Win32_Glupteba_1_Zero - Trojan Win32 Glupteba

app.exe "C:\Users\test22\AppData\Local\Temp\app.exe"
996

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
172.217.25.14	Active	Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

This executable has a PDB path (1 event)

pdb_path

C:\musetoyizi\hilivac.pdb

The executable contains unknown PE section names indicative of a packer (could be a false positive) (1 event)

section

.jof

One or more processes crashed (50 out of 65536 events)

Time & API	Arguments	Status
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 548983 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1
__exception__ May 25, 2021, 9:30 a.m.	stacktrace: LocalSize+0xe4 BasepMapModuleHandle-0x31 kernel32+0x2e825 @ 0x7574e825 _go@4+0x284 app+0x1feb4 @ 0x41feb4 _go@4+0x119d app+0x20dcd @ 0x420dcd _hockey@4-0x1e61e app+0x15f2 @ 0x4015f2 _hockey@4-0x1e771 app+0x149f @ 0x40149f BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x757333ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x773d9ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x773d9ea5 exception.instruction_r: 80 78 07 05 0f 84 27 56 02 00 f6 40 07 3f 0f 84 exception.symbol: RtlGetUserInfoHeap+0x4e RtlQueueWorkItem-0x3e7 ntdll+0x67cbf exception.instruction: cmp byte ptr [eax + 7], 5 exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 425151 exception.address: 0x77407cbf registers.esp: 1631092 registers.edi: 18153472 registers.eax: 4294967288 registers.ebp: 1631144 registers.edx: 6 registers.ebx: 0 registers.esi: 0 registers.ecx: 7140	1

Allocates read-write-execute memory (usually to unpack itself) (1 event)

Time & API	Arguments	Status	Return	Repeated
NtProtectVirtualMemory May 25, 2021, 9:30 a.m.	process_identifier: 996 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 4395008 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x02750000 process_handle: 0xffffffff	1	0	0

The binary likely contains encrypted or compressed data indicative of a packer (2 events)

section

{u'size_of_data': u'0x00435200', u'virtual_address': u'0x0002d000', u'entropy': 7.997268825071408, u'name': u'.data', u'virtual_size': u'0x0043a1e4'}

entropy

7.99726882507

description

A section with a high entropy has been found

entropy

0.946715007691

description

Overall entropy of this PE file is high

Communicates with host for which no DNS query was performed (1 event)

host

172.217.25.14

Tries to unhook Windows functions monitored by Cuckoo (1 event)

Time & API	Arguments	Status	Return	Repeated
__anomaly__ May 25, 2021, 9:30 a.m.	tid: 7140 message: Encountered 65537 exceptions, quitting. subcategory: exception function_name:	1	0	0

File has been identified by 26 AntiVirus engines on VirusTotal as malicious (26 events)

Elastic	malicious (high confidence)
FireEye	Generic.mg.e6f2c7e2ebd7dd93
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0057ce541 )
K7GW	Trojan ( 0057ce541 )
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	UDS:DangerousObject.Multi.Generic
NANO-Antivirus	Trojan.Win32.Stealer.ivklid
Paloalto	generic.ml
Sophos	ML/PE-A + Mal/GandCrypt-B
McAfee-GW-Edition	BehavesLike.Win32.Lockbit.rc
SentinelOne	Static AI - Malicious PE
Avira	TR/Crypt.XPACK.Gen3
eGambit	Unsafe.AI_Score_99%
Gridinsoft	Trojan.Heur!.02054021
Microsoft	Trojan:Win32/Glupteba!ml
Acronis	suspicious
VBA32	BScope.Trojan.Wacatac
Malwarebytes	Trojan.MalPack.GS
Rising	Malware.Obscure/Heur!1.A89F (CLASSIC)
MaxSecure	Trojan.Malware.300983.susgen
BitDefenderTheta	Gen:NN.ZexaF.34690.@xW@aaywnycO
CrowdStrike	win/malicious_confidence_100% (D)

app.exe

Process Tree Toggle all

Network Toggle all

Suricata Toggle all

Suricata Alerts

Suricata TLS

Signatures Toggle All