Static | ZeroBOX

PE Compile Time

2021-06-10 20:34:28

PE Imphash

583b80155ced34658fd6e3d555075407

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00029d39 0x00029e00 5.91872506261
.rdata 0x0002b000 0x0000b58e 0x0000b600 5.17301262856
.data 0x00037000 0x00128d7c 0x00001a00 2.81850298609
.idata 0x00160000 0x00000be7 0x00000c00 4.67044528304
.rsrc 0x00161000 0x00000936 0x00000a00 3.18535601479
.reloc 0x00162000 0x000023c5 0x00002400 4.49615404058

Resources

Name Offset Size Language Sub-language File type
RT_CURSOR 0x00161270 0x00000134 LANG_RUSSIAN SUBLANG_RUSSIAN data
RT_BITMAP 0x001613c0 0x000000e0 LANG_RUSSIAN SUBLANG_RUSSIAN GLS_BINARY_LSB_FIRST
RT_GROUP_CURSOR 0x001613a8 0x00000014 LANG_RUSSIAN SUBLANG_RUSSIAN Lotus unknown worksheet or configuration, revision 0x1
RT_MANIFEST 0x001614a0 0x0000029b LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators

Imports

Library KERNEL32.dll:
0x560204 GetProcAddress
0x560208 LoadLibraryA
0x56020c ActivateActCtx
0x560210 CreateActCtxA
0x560214 TlsSetValue
0x560218 TlsAlloc
0x56021c VirtualAlloc
0x560220 VirtualProtect
0x560224 GetTickCount
0x560228 GetModuleHandleA
0x56022c GetSystemTime
0x560230 ReadFile
0x560234 SetFilePointer
0x560238 GlobalAlloc
0x56023c GetFileSize
0x560240 CreateFileW
0x560244 GetModuleFileNameW
0x560248 GetModuleHandleW
0x56024c GetLocalTime
0x560258 RaiseException
0x56025c WideCharToMultiByte
0x560260 IsDebuggerPresent
0x560264 MultiByteToWideChar
0x560268 lstrlenA
0x56026c LoadLibraryW
0x560274 EncodePointer
0x560278 TerminateProcess
0x56027c GetCurrentProcess
0x560288 GetCPInfo
0x56028c DecodePointer
0x560290 TlsGetValue
0x560294 TlsFree
0x560298 SetLastError
0x56029c GetCurrentThreadId
0x5602a0 GetLastError
0x5602a4 GetCurrentThread
0x5602b4 FatalAppExitA
0x5602bc HeapFree
0x5602c0 GetACP
0x5602c4 GetOEMCP
0x5602c8 IsValidCodePage
0x5602cc Sleep
0x5602d0 GetUserDefaultLCID
0x5602d4 GetLocaleInfoW
0x5602d8 GetLocaleInfoA
0x5602dc EnumSystemLocalesA
0x5602e0 IsValidLocale
0x5602e4 GetStringTypeW
0x5602e8 SetStdHandle
0x5602ec GetFileType
0x5602f0 WriteFile
0x5602f4 GetConsoleCP
0x5602f8 GetConsoleMode
0x5602fc RtlUnwind
0x560300 FreeLibrary
0x560304 HeapAlloc
0x560308 GetProcessHeap
0x56030c VirtualQuery
0x560310 LCMapStringW
0x560314 ExitProcess
0x560318 GetStdHandle
0x56031c HeapCreate
0x560320 HeapDestroy
0x560324 HeapReAlloc
0x560328 SetHandleCount
0x56032c GetStartupInfoW
0x560330 GetCommandLineA
0x560334 HeapSetInformation
0x560338 WriteConsoleW
0x56033c CloseHandle
0x560344 InterlockedExchange
0x560348 HeapSize
0x56034c FlushFileBuffers
0x560350 GetModuleFileNameA
0x560360 GetCurrentProcessId
0x560368 SetEndOfFile

!This program cannot be run in DOS mode.
`.rdata
@.data
.idata
@.reloc
oldProtection
PRSVWj
YY_^[ZX
.t|PVj@
j$h8^C
f-00f=
F Pj*S
F$Pj+Sj
F(Pj,S
F,Pj-S
F0Pj.S
F4Pj/S
F8PjDS
F<PjES
F@PjFS
FDPjGS
FHPjHS
FLPjIS
FPPjJS
FTPjKS
FXPjLS
F\PjMS
F`PjNS
FdPjOS
FhPj8S
FlPj9S
FpPj:S
FtPj;S
FxPj<S
F|Pj=S
C PjPV
C$PjQV
C*PjTV
C+PjUV
C,PjVV
C-PjWV
C.PjRV
C/PjSV
CHPjPV
CLPjQV
VPPPPP
PPPPPPPP
PPPPPPPP
URPQQh
f99u#f
tWItHIt9It
tRHtCHt4Ht%HtFHHt
t"SS9] u
^SSSSS
j@j ^V
HHtXHHt
?If90t
ji_jdZf;
It2It/It%It"It&II
tCHt(Ht
;t$,v-
UQPXY]Y[
<+t"<-t
+t HHt
u-hd;C
t VV9u
HHtYHHt
tM<it-<ot)<ut%<xt!<Xt
<it|<otx<utt<xtp<Xtl
HHtiHHt
u)jAXf;
aasswd
LC_TIME
LC_NUMERIC
LC_MONETARY
LC_CTYPE
LC_COLLATE
LC_ALL
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
Unknown Runtime Check Error
Stack memory around _alloca was corrupted
A local variable was used before it was initialized
Stack memory was corrupted
A cast to a smaller data type has caused a loss of data. If this was intentional, you should mask the source of the cast with the appropriate bitmask. For example:
char c = (i & 0xFF);
Changing the code in this way will not affect the quality of the resulting optimized code.
The value of ESP was not properly saved across a function call. This is usually a result of calling a function declared with one calling convention with a function pointer declared with a different calling convention.
Stack around the variable '
' was corrupted.
The variable '
' is being used without being initialized.
Run-Time Check Failure #%d - %s
Unknown Module Name
Unknown Filename
Stack corrupted near unknown variable
Stack area around _alloca memory reserved by this function is corrupted
%s%s%s%s
%s%s%p%s%ld%s%d%s
Stack area around _alloca memory reserved by this function is corrupted
Address: 0x
Size:
Allocation number within this function:
Data: <
wsprintfA
A variable is being used without being initialized.
Stack around _alloca corrupted
Local variable used before initialization
Stack memory corruption
Cast to smaller type causing loss of data
Stack pointer corruption
RUUUUU
?ZEM-'^
?{yK+;
?765@Z
?e')lW
UUUUUU
333333
?333333
?UUUUUU
?$rxxx
?ZEM-'^
?{yK+;
?765@Z
?e')lW
UUUUUU
?333333
?333333
?UUUUUU
?$rxxx
?uZEeu
?uZEeu
?UUUUUU
?UUUUUU
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
united-states
united-kingdom
trinidad & tobago
south-korea
south-africa
south korea
south africa
slovak
puerto-rico
pr-china
pr china
new-zealand
hong-kong
holland
great britain
england
britain
america
swedish-finland
spanish-venezuela
spanish-uruguay
spanish-puerto rico
spanish-peru
spanish-paraguay
spanish-panama
spanish-nicaragua
spanish-modern
spanish-mexican
spanish-honduras
spanish-guatemala
spanish-el salvador
spanish-ecuador
spanish-dominican republic
spanish-costa rica
spanish-colombia
spanish-chile
spanish-bolivia
spanish-argentina
portuguese-brazilian
norwegian-nynorsk
norwegian-bokmal
norwegian
italian-swiss
irish-english
german-swiss
german-luxembourg
german-lichtenstein
german-austrian
french-swiss
french-luxembourg
french-canadian
french-belgian
english-usa
english-us
english-uk
english-trinidad y tobago
english-south africa
english-nz
english-jamaica
english-ire
english-caribbean
english-can
english-belize
english-aus
english-american
dutch-belgian
chinese-traditional
chinese-singapore
chinese-simplified
chinese-hongkong
chinese
canadian
belgian
australian
american-english
american english
american
Norwegian-Nynorsk
Illegal byte sequence
Directory not empty
Function not implemented
No locks available
Filename too long
Resource deadlock avoided
Result too large
Domain error
Broken pipe
Too many links
Read-only file system
Invalid seek
No space left on device
File too large
Inappropriate I/O control operation
Too many open files
Too many open files in system
Invalid argument
Is a directory
Not a directory
No such device
Improper link
File exists
Resource device
Unknown error
Bad address
Permission denied
Not enough space
Resource temporarily unavailable
No child processes
Bad file descriptor
Exec format error
Arg list too long
No such device or address
Input/output error
Interrupted function call
No such process
No such file or directory
Operation not permitted
No error
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
PDBOpenValidate5
i^^?(>
Y:/(A6>
<CorExitProcess
(null)
`h````
xpxxxx
_nextafter
_hypot
1#QNAN
1#SNAN
SystemFunction036
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
`h`hhh
xppwpp
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
GetProcAddress
LoadLibraryA
ActivateActCtx
CreateActCtxA
TlsSetValue
TlsAlloc
VirtualAlloc
VirtualProtect
GetTickCount
GetModuleHandleA
GetSystemTime
ReadFile
SetFilePointer
GlobalAlloc
GetFileSize
CreateFileW
GetModuleFileNameW
GetModuleHandleW
GetLocalTime
InterlockedDecrement
InterlockedIncrement
RaiseException
WideCharToMultiByte
IsDebuggerPresent
MultiByteToWideChar
lstrlenA
LoadLibraryW
IsProcessorFeaturePresent
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCPInfo
DecodePointer
TlsGetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
GetCurrentThread
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
HeapFree
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
SetStdHandle
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
RtlUnwind
FreeLibrary
HeapAlloc
GetProcessHeap
VirtualQuery
LCMapStringW
ExitProcess
GetStdHandle
HeapCreate
HeapDestroy
HeapReAlloc
SetHandleCount
GetStartupInfoW
GetCommandLineA
HeapSetInformation
WriteConsoleW
CloseHandle
SetConsoleCtrlHandler
InterlockedExchange
HeapSize
FlushFileBuffers
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetEndOfFile
KERNEL32.dll
xxxxxxxx
wwwwwwwwwwwwwwx
wwwwwwwwwwwwwwx
wwwwwwwwwwwwwwx
wwwwwwwwwwwwwwx
wwwwwwwwwwwwwwx
wwwwwwwwwwwwwwx
wwwwwwwxxxxxxxx
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><application xmlns="urn:schemas-microsoft-com:asm.v3"><windowsSettings><ms_windowsSettings:dpiAware xmlns:ms_windowsSettings="http://schemas.microsoft.com/SMI/2005/WindowsSettings" xmlns="http://schemas.microsoft.com/SMI/2005/WindowsSettings">true</ms_windowsSettings:dpiAware></windowsSettings></application></assembly>
081_1>2y2
3!3L3Y3
3*474d4m4
6L7S7\7
2$353t3
5J5p5|5o6
9$909#:T:^:l:|:
;*;3;e;l;|;
<#<M<R<c<
=%=,=?=Q=
><>M>w>
131`1l1
4'4=4O4b4
4%575~5
8*8/85898?8C8I8M8S8W8\8b8f8l8p8v8z8
949;9C9H9L9P9y9
9*:0:4:8:<:
:';Y;`;d;h;l;p;t;x;|;
;#<R<X<
; ;,;8;D;O;
+0Z0{0
3'323w3
5*535<5I5W5x5
6&7+757:7z7
8,888D8P8\8h8t8
9'909H9T9`9l9
;K<L=\=m=u=
=">*>6>
071?1G1S1_1
4-454X4
5!5A5Q5]5f5
5^6k6w6
6'7V8^8f8
9%959A9^9d9y9
8 8'8.868>8F8R8[8`8f8p8y8
4<5N5`5r5
8$868H8Z8l8~8
00080V0^0|0
1%2+2}2
4=5W5h5
7!7-737<7B7W7]7h7t7z7
9!:1:7:C:I:Y:_:e:t:
;";&;,;1;7;<;K;a;g;o;t;|;
<!<0<<<C<M<_<v<
1&1?1I1\1
4"454G4b4j4r4
5:5K5a5~5
7 8)858n8w8
:3<N<_<
021;1}1
8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
t=x=|=
1,1A1K1q1
30P0m0
252N2j2
3.464t4
*0M0o0z0
111161
3)3.3D3Z3{3
5$5*505w5/666
8:8F8R8^8
99+979C9L9U9
3P4:5l5
6 6$6(6,606z6
77$7(7,7M7w7
8 8$8(8|8
0!0*010S0
101E1M1`1k1p1
2,2e2o2
6 656f6
6&727;7A7G7N7
8-8A8G8
8,929A9
9<:B:N:
2"2i2s2
2(3:3h3
4!4H4U4Z4h4C5f5q5
1>1_1?3`5d5h5l5p5t5x5|5
7@<"=6=Z=
:=;U;F<
4&5H599
="=/=;=G=M=_=g=r=
>I?V?o?
2:3M3l3~3
637Z7z7
;U<o<x<
I0d0z0
616]6v6
a0U1]1
3.444B4
;=>J>e>
4 4%43484=4B4K4f4l4r4
6K6U6[6h6w6
8&959;9k9q9
9%:;:A:L:S:m:s:
:);.;7;F;i;n;s;
</<R<]<c<s<x<
<3=M=g=i?p?v?
2M2`2?5F5{5
<<=Y=v=
O2U2^2m2
6(6<6_6l6x6
;i<s<'=6=
2(2B2t2
?<?B?H?N?T?Z?`?f?l?r?x?~?
0 0&0,02080>0D0J0P0V0\0b0h0n0t0z0
1"1(1.141:1@1F1L1R1
3$40748d<
80<0@0D0H0L0
h?p?x?
0 0(00080@0H0P0X0`0h0p0x0
1 1(10181@1H1P1X1`1h1p1x1
9$9,949<9D9L9T9\9d9l9t9|9
8$;H=T=p=|=
>,>0>L>P>p>
? ?@?`?
0$0(0H0h0t0
101P1p1
202P2p2
H0p0t0x0|0
1 1$1(1,1014181<1@1D1H1L1P1`1d1h1l1p1t1x1|1
4(: ;(;
> >$>(>,>0>4>8><>@>D>H>L>
?$?,?4?<?D?L?T?\?d?l?t?|?
H`*A0]q
Sr)!'Tg
PEWrK_
mt$E?N/d
%7y?h
/gEb7U%
V<]CRDG
M5Qd~1
1UX`/`
^xB(Yw
;H1,lG
?$F<CY
5S#-%7
pre-?>
`=N#3Zq
%JosF?
!bBCYTh
8\)bd\B<
Yl59j`=
Dkx0"N
}G;79%
Qg$jZv
`6*7{1A
=79iYR]
=4|$06
2[d~~Z
TwYtb5X
I~*"dW
[]&]7z
BlDF&L
Qor[;e
y5wMx:
l0WB!F
=e3_D^L
``>+hs
:}}GnI
GI|H3`
e@8<Uk
jtneA^
{G@x+*
z%$UEl
=XzV'!
ahC9^B
'rLX&,
daN<pR<)
"kll.9oC
s >A7c
Ani^QZ
CW!W?H
6gXD][
&)XC*
,"e5t4
4=e*zR
|#Y!/3
h%V(kt5
^w. nyRm
}U-k-9>
>lB03{?D
d]\0rxX
z0`p%y
XonO;
6kBTE&
+O'lh:
r2D&?g
ZGQPfm&
)oRi~pq
'{@w"Z
2dSMrF
6jKo8s
K1{Qu&
jMaS<`F
0<M$7q
7,|{zz
c.#;2Tx
ad5FO[e
fqdL4^
G\F<{M
h.a-V,8;
@hJ@Vq
?}H?y
AoS,NF
5R#uo-
2KJi}L
I#% WI
Jd)dRk
#sb+f/
P@8-C{
YN{UY@
-9X3Je
S^)h5,
YX-SXz
<?KP/@"
l4Fz7W
IcX l!`e
u?yv.]
.\]nkt4
JR.ABV
A%HSF%:%!
GL.Q Li
sdpK1X
|2NI>R4
s^SZ>>
P\{QVI_
KOZl3N
'jbo%L\
j[#[&b
wJh5MYz
LvK3.Y
=!;^Y(
9}Kqx$
1]mcN{
O*)^;?)?
m8y> A
i'Ym |7
>uwCa>
2P 1v"G
fFC]E
?tTsGO
A}75!x9
i7^Ww^
p^\<qG
wSa5{'
=}}k=VH
#o]-9^l
W!M?a
Aa|cjq
`$t AD
[k)h?Y
l^6kK:
vI]V`"0a6
]->c&.J
Wi7@?oEf
ju3h>4
Q$^e=4
V3'Eh(
h$WM{%
+IxV:r9Z
/&DY%m
hQ%zv|y
UxJxGA
4k<a^:
)l~cbWG
y+':P_!
=`?TtXB
n1`McV
g e:[xU8
5/dRy@R
)MGX6)b
uM[Tj=H
T%8,sw
mW!tF_f?
K.n,P=7VD]B
L9=W.G
L-PWufryd
#Wy6Uc
b^[00|
X~=1S5
&k= B;
wm yQJc
C$6X1
[*W<)6
Ydy/qM
o|d(zKw,
n<-[Y/r
}vv7[U
xYw9t
d$^<D93
bx# As
"72`jE
-xQbtp
w_evQ7
zCj?jtE
^:VtMHJ
GNh|<!]
]OoaR4/
)GkxH8
z*.w?j
x]-EDP
sLmpKZp
5Qo5IYD
*Y9nX^
DC@d=
WxBn.L
|DL)3U
0dB*ey)j
q7B[K.
Fbyu{?:+
(,z:a!
Zu!'F9
<xMQ1hZ0
uKzfsf$
[Qvh|h)1
JNO^QO
?gUNP
Vi]'&LI
10`m[R
<on|U]
Maa:==
U@6qqhj
wV_MsW
l)z=-3
%,;vw7
ut0mbG
>L3sj^
!/&~`9
j4`]nmGZ
sNSA*&Ra
["sm~>
*|,tp[
Jzzu4#e
k$E<%}
j>Py)P
Lcr?[;
3mPNOf
#bf+Q14y8
<Fq6X$
jp`o;2
:*:RFL
[T-<$*
b{%lI <>{i
{F$%c
R<&R|{
jo*';w
$1f>a[
de);2m
c}p$ ;e
P"m&Dk
-J'4no
'_"lUT@
`b:FIg
{d%F"C
H02]fy
&cXu'o
Io>STS
3?tXo`r
nWkuE3U
Rf9dR4Z
o<)C[h
h1u_fXC
f{uXYm7G5
0ryr%w
pAI0NFg:"
!}B4zG
}6"S^W
K]I|JA
b`b]O)
D0Y6j[
PY~^SM5
!&\|,Y
o-U^efT
z(=qC9
$lYxau\
vSkxqb
P3n9s9
8n}1qN
F^gE}>
{+[rZ:
5e/r^g
\Nd(jD
(1D<9am
`S!e2K
_Hkk<R
bDBH+6
; "_))
Kl|o}Ll*:
E(8)KQ
M$9ay8
c,8p>-y
w{B+vJ
Fq<i~B-
'`eOk;,-0sD
;Y2EFF7
(#=C-ee
NLW0Lj
@=hZGM-f=J
:Xv)(V
g11/,v
^2v@cM
M;7e I
>jx?O]
<AO|Nr
,75tWb
.,F#H6
o1"+7
hO=\`n
=n+mK.
K5|Ah
*=R; (q
4gt3M"
Xr.L01
[T-@M&v
h}oq-]
j!s;}n
FDn;O
Y0=O$x
p" 0N(e
lDTYe:
!v rMKP\h
YO"=S'*?
>j9vLg
hRLFQ
jU1fj%Z
iEy+e
|Y`+*'{l
4iEBNj
P8lJKg
('NbT%
]9H"U:
jW!?oOT(x
W!"/5a5
(Zx2(d
Ti>3I(!
43|ds)
v5t)wtt
I:At(^2
P6q y-
P5c?#=)
Bj?Gwd
JB1tS]
^x$gt2'
BnH_yf4O
9%C=g+[P
pqE"Vq
Bx;L<M@
^:%r
hSjv;7
p 4B(<
J=pP/<
sMnK766
9YRo}6
1.j,9a?
1E=#"rQ
H2mG[;E
IlK-fN
$o};ov
YUc=Z2
W C)?r
Y:Ivz6
z 8bY'<
UM/4z#
q+s],
J,taH!
R%Y):&d
ar}6K ZM-xZ
R~Wa{M
fcE-?<I
z5}Fm|M
q?t+!@
c:7gDr
5#(?irN>|
^P\)Z-
M^u",q
KKas'8
HMBq,q'
@Rq5{c
Z.)!{:.
.oIr-=
d&cP;uU
pH^IMe]{w
P;y~-l
uXnb5K*;
#~Pk|v$
g#hoPVC
8Xm394M
.QLSk#
8gs+W{C
My{~&{
{zq6zsZ;
qo7`]y
6z{6w8
:/np>M
153d;e
igK:/Ix
6_T>2N{
oV+Oy`
_X,O?(
K(NGt?$
N#0B##
[0]~`71K
0Y-,)Q
K} U W
CJ%C!
ezP|n?w
bD0OGf
v*mkES?
EDE559
y.dlLC
hC-Dt+
9s(hDb
E?o*Q^
:DfXl5
N2fi~q
&M} bw
5^j-f<6
]#`\Zb
ur^_i]V=
$1EuZ
\S.Bn.
GSAJ{sy
?)~<LUc
iwA6s!CaN
H4kYp
aJ|8hK
g|Pr7c
<-zrV8
'"/V"q
@v%QMx
{(d7yG
`LwZy`O?
~>EF`.
]zqX;
t6$Dt)
pZ&C(Gkm
NJ\aKn
~@nN9S
k}a<E|C?
rDTO{%J6
7_uL?F
z-?~Pm
q"dZOXI
k+m[HA)
Wk(g2}
m[n9|P
IWA/(p
rSC-40
N]:67Y
_YA'Po1=
nIaB^`
HXR)6w
G&!ixA
%+;}{
9#`e;I
trhX:Z5d
`f_O*A
!?Qoom\
+? @syS^
\~PRt[
D {2/|
V^0RQVwj
U<vj@n
uZ4%5gy
)nQ52^
MJ,,Ku
NUGV._
4Llmaz
U4=jNh5
?|D%a"}
BP{2Q$
7n+~P8
74pAn\
hJ1Scn
xg__0E
W"I,<,J2
LL+Y4I:
V?~Y+V@}
9VU\)m
yl~yAr
S,qRJ1
+>K[qCU
da%;,G
=eSKr
loNur5I,
U>CusQ
uC+39,
@wyv4
sF3dgr1,
Q.iSP#/0\
w4&.*uM`
I,x]C>#
U9*?zP
(F09mKW'
t-6c~bVZ^
m-i*%ja
rOKjlO
\~ChY`
><,ao3
K.*~P3${
z=v6k36
1tr_nh
SP0'd]
6BE)`Z
Run-Time Check Failure #%d - %s
Runtime Check Error.
Unable to display RTC Message.
user32.dll
((((( H
h(((( H
H
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
nKERNEL32.DLL
UTF-16LE
UNICODE
MSPDB100.DLL
EnvironmentDirectory
SOFTWARE\Microsoft\VisualStudio\10.0\Setup\VS
ADVAPI32.DLL
mscoree.dll
runtime error
TLOSS error
SING error
DOMAIN error
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
- abort() has been called
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
CMicrosoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
(null)
WUSER32.DLL
CONOUT$
Antivirus Signature
Bkav W32.AIDetect.malware1
Elastic malicious (high confidence)
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
Zillya Clean
AegisLab Trojan.Win32.Malicious.4!c
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason malicious.23f4b8
Baidu Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
ESET-NOD32 Clean
APEX Malicious
Paloalto generic.ml
Cynet Malicious (score: 100)
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Clean
NANO-Antivirus Clean
SUPERAntiSpyware Clean
MicroWorld-eScan Clean
Avast Clean
Ad-Aware Clean
Sophos Generic ML PUA (PUA)
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
MaxSecure Clean
FireEye Generic.mg.526d56017ef51052
Emsisoft Clean
SentinelOne Static AI - Malicious PE
Jiangmin Clean
Webroot W32.Trojan.Gen
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Win32.Troj.Generic_a.a.(kcloud)
Microsoft Trojan:Win32/Caynamer.A!ml
Gridinsoft Clean
Arcabit Clean
ViRobot Clean
ZoneAlarm UDS:DangerousObject.Multi.Generic
GData Clean
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!526D56017EF5
TACHYON Clean
VBA32 BScope.Trojan.Agent
Malwarebytes Malware.AI.4050342259
Zoner Clean
TrendMicro-HouseCall Clean
Rising Clean
Yandex Clean
Ikarus Clean
eGambit Clean
Fortinet W32/Kryptik.HLHG!tr
BitDefenderTheta Gen:NN.ZexaF.34738.FyZ@aSLBqwnk
Panda Clean
CrowdStrike win/malicious_confidence_100% (W)
Qihoo-360 Clean
No IRMA results available.