Static | ZeroBOX

PE Compile Time

2020-04-25 14:24:59

PDB Path

C:\vojoji\91\xobamehubije.pdb

PE Imphash

ae019a60d5bfddacd24fbe52033b970c

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x000476b0 0x00047800 7.4145001139
.rdata 0x00049000 0x0000b44e 0x0000b600 5.32406950867
.data 0x00055000 0x0049dba8 0x00002000 2.84665549715
.rsrc 0x004f3000 0x00002880 0x00002a00 6.32017926643
.reloc 0x004f6000 0x00006bde 0x00006c00 2.69313307153

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x004f3130 0x000025a8 None SUBLANG_DEFAULT dBase III DBT, version number 0, next free block index 40
RT_ACCELERATOR 0x004f56f0 0x00000088 None SUBLANG_DEFAULT data
RT_GROUP_ICON 0x004f56d8 0x00000014 None SUBLANG_DEFAULT data
RT_VERSION 0x004f5778 0x00000108 LANG_LATVIAN SUBLANG_DEFAULT PDP-11 pure executable not stripped

Imports

Library KERNEL32.dll:
0x449000 GetCommandLineW
0x449004 EnumResourceNamesW
0x449008 SetVolumeLabelA
0x44900c SearchPathW
0x449010 FindFirstFileW
0x449014 OpenFile
0x449018 TlsGetValue
0x44901c SetLocalTime
0x449020 GetDriveTypeW
0x449024 SetEndOfFile
0x44902c CallNamedPipeA
0x449038 InitializeSListHead
0x44903c GetProfileSectionA
0x449040 GetComputerNameW
0x449044 CreateDirectoryExA
0x449048 GetModuleHandleW
0x449050 GetConsoleTitleA
0x44905c EnumResourceTypesA
0x449060 FindResourceExA
0x449064 GlobalAlloc
0x449068 AddRefActCtx
0x449070 Sleep
0x449074 ReadFileScatter
0x449078 GetConsoleWindow
0x449080 GetVersionExW
0x449084 GlobalFlags
0x449088 GetBinaryTypeA
0x44908c TerminateProcess
0x449090 GetAtomNameW
0x449094 ReadFile
0x449098 CompareStringW
0x44909c lstrlenW
0x4490a0 SetConsoleTitleA
0x4490a4 GlobalUnlock
0x4490a8 LCMapStringA
0x4490ac GetConsoleOutputCP
0x4490b0 VerifyVersionInfoW
0x4490b4 CreateDirectoryA
0x4490b8 InterlockedExchange
0x4490bc GetFileSizeEx
0x4490c0 IsDBCSLeadByteEx
0x4490c4 GetProcAddress
0x4490cc SetComputerNameA
0x4490d8 Process32FirstW
0x4490dc OpenMutexA
0x4490e0 OpenWaitableTimerW
0x4490e4 SetCalendarInfoW
0x4490ec AddAtomW
0x4490f0 SetFileApisToANSI
0x4490f8 GetCommMask
0x4490fc GetTapeParameters
0x449100 GetSystemInfo
0x449104 GetOEMCP
0x449108 FindNextFileA
0x449114 WaitCommEvent
0x44911c BuildCommDCBA
0x449124 CompareStringA
0x44912c CopyFileExA
0x449130 DeleteFileA
0x449134 CreateFileA
0x449138 GetModuleHandleA
0x44913c GetLastError
0x449140 WideCharToMultiByte
0x449144 MoveFileA
0x449148 MultiByteToWideChar
0x44914c GetCommandLineA
0x449150 GetStartupInfoA
0x449154 HeapValidate
0x449158 IsBadReadPtr
0x44915c RaiseException
0x449160 GetCurrentProcess
0x44916c IsDebuggerPresent
0x449170 GetModuleFileNameW
0x449174 GetACP
0x449178 GetCPInfo
0x44917c IsValidCodePage
0x449180 TlsAlloc
0x449184 TlsSetValue
0x449188 GetCurrentThreadId
0x44918c TlsFree
0x449190 SetLastError
0x4491a4 GetTickCount
0x4491a8 GetCurrentProcessId
0x4491b0 ExitProcess
0x4491b4 GetModuleFileNameA
0x4491c4 SetHandleCount
0x4491c8 GetStdHandle
0x4491cc GetFileType
0x4491d0 HeapDestroy
0x4491d4 HeapCreate
0x4491d8 HeapFree
0x4491dc VirtualFree
0x4491e0 WriteFile
0x4491e4 HeapAlloc
0x4491e8 HeapSize
0x4491ec HeapReAlloc
0x4491f0 VirtualAlloc
0x4491f4 DebugBreak
0x4491f8 OutputDebugStringA
0x4491fc WriteConsoleW
0x449200 OutputDebugStringW
0x449204 LoadLibraryW
0x449208 RtlUnwind
0x44920c LCMapStringW
0x449210 GetStringTypeA
0x449214 GetStringTypeW
0x449218 GetLocaleInfoA
0x449220 LoadLibraryA
0x449224 FlushFileBuffers
0x449228 GetConsoleCP
0x44922c GetConsoleMode
0x449230 SetFilePointer
0x449234 CloseHandle
0x449238 SetStdHandle
0x44923c WriteConsoleA
Library USER32.dll:
0x449248 GetMenuInfo
0x44924c GetComboBoxInfo
0x449250 GetMenuBarInfo

!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
PPPPPPPP
PPPPPPPP
URPQQh$
;t$,v-
UQPXY]Y[
k[p=),O3
:'izs1
f9ccr[
}:B*&uX
(R(y};
=]8uj2
6o^_nj
t6}dbo
!(sFt*"]
WWoy,~
1o@Nt/w
z/IK;
\W!c;_
AWq0u.
*`zvPH
Zm+{q,
O/Nqp(U!
dSh:i;
8tsO D
H/|T*e
G{CoUJ
M"Wqga
rG{Ud4
V7_'d?
pYLaw-
JO/EW<{
wsJYoC
CA*ah_
#@1_;r
UDE;g9
@/("[U
U[F.fD
4Nq:_L'
9y2Cjb
9oxvyp
u]%j5=
aJ~>$N
:s-[d>
S6d&Pp
K8Yauv}[
_J%ebGg?
Q67=lU
{(ZRZ M*
F>g/Y?
c/-O+E
7'&@dA
,Nv3\s
,x^3q}
gE_F;7
BGL*3x
FSc )\
G.,%?O
%n*$!F%
lGw%l
d.|A_B
'jf%9'
'2YZRi
(QB1gx
x|CSX6L
4vVt6S;
X`_5*C
H>]QoCm
AM/C+=
0%Zy#q
2``ANKS
/$:Th
!>&7+I
<SrNl6
k/h!{b
3N.t*}
Sis~?`e
ov%#zz^
_,U8j1
< ;i*p
vVTURg
Z1yJ6q
X1lT>#f
1t_* s
p[>\yml
#}?'y9g
.uj$hue
i,U&"]H
YAL*@t
s2/HYN
PXr5-n
F23[($W
_D%-0x
,8,0HX
6j#DZhG
UHyupW
^rJr](8
=lOgKU
hF(6I<1
,)Dvox
H al+
~a+6ifJ
b.!bo.
!0SV5:
{>P,hL
+#vpRf
<;T(G/
*Gbam6\
9Skz+5k
LZeagYL
Fj#@J0wO
"Ic,`Z
])L2\S]
(,Hvyq
jw5RUiC^
9+:b"#
3U}vtl=
TV%^5"
K7Fj#$
o)TE>
:m >M\
`(f3tI"
{K"u`D
:v0~|1
|@u=4U
FT1r[M
|Xx3P43*uZMG
l!jZW+
Vgi()Ojy
x]0(6j
q2<-2^
nf2Ggk
@wRm8l[M
eEylgK
{#b*[A
Hw\p!g]
?H$jRQ1
69}\dL
A1B](.
`SV{3f
hJWcj9l
A?Rvck]
qz/U#K
:B]71`
4v=Q"`vH
!1 XZ0
p7i35YU
e_ObwK%
b[kQ?B?Y=
z29&^_
i;[ab0
`zu05
7v}[MN
^G*Zp0!
Q6NfQ>
`Z~"GQ
-NYp}{
Z8&K;1;+
C)-lq0'
c(`PLls
b;\02
=Xf.x
q={yVh
"^f$S3
=Fw*H]4
l"AS`P
gGap#<5BK!6]]
?E>lE
WTTsMC
1r|ynN2
@B$zL-
dl8JhPo
DLX]0Pp
gp^Oj.
C,|!-7
aIEm7[
FK2iI+
Rjd6Jc
U71S=_dB
#jtpEvTOD
:LLWzR#ex
~cQ:@:n
Ik>l<8S
}q=BpB
>:?:rl
BQ?U<k
jrWqA='
lL>d6c
GJ|X'fwu"sT
:!0`yU
*=sU^;D
``5,yN
cMVBOE%
8*`>Z@
O .U:<
xUAwq)
5Ad-nVv
Gl\aXv
&mtaW\
}\} +o{
EQj(C}
,D%!-s
Mhx~'5
s9)?w!]
7k2<)Z
4+e[*i
g,ipJh
s(?"=rg
^/Qedr
sYm.d4
J+Y9z_
'C?kyp
n Jbg+
Tr<<OI
>=QCf>
ep7rrS
<\Y<'$
S;'95*E
?YlX.D
B&gOIl
mvI_OGp{
0Olcc4
%b=&b
}m[cN=
^_+Eph
Y8;&:9c?
73 G|N
v4jnXm
P9,qdr
n89*E+d
k0q|DZ;
S]9^~Lu5
*'/RXR
NGWPQv,
m*UpR\
q@O`99
)YUnWS^
uC0N1>?D
v)<Fpy+
g3lz[|o
h,=9k`E^
sQXMSpK
\[u60e
C<FqYm
AKpZv
@n{<}y
NbM|TD
a#3Lr%
qcu#k3E
+x\)=c
Xg7dns
VK?J8P
G%2n\C
F>@ct%
)K[ 5{
E?CM:T
&(QV4C/)
V*EC`lI`y
&jEkZ8i=K
v,YuE2z
J%0XLA
O#6HQag
j|h(,E
bad allocation
Unknown exception
f:\dd\vctools\crt_bld\self_x86\crt\src\onexit.c
Client
Ignore
Normal
Error: memory allocation: bad memory block type.
Invalid allocation size: %Iu bytes.
Client hook allocation failure.
Client hook allocation failure at file %hs line %d.
Error: possible heap corruption at or near 0x%p
The Block at 0x%p was allocated by aligned routines, use _aligned_realloc()
Error: memory allocation: bad memory block type.
Memory allocated at %hs(%d).
Invalid allocation size: %Iu bytes.
Memory allocated at %hs(%d).
Client hook re-allocation failure.
Client hook re-allocation failure at file %hs line %d.
HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory after end of heap buffer.
HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory after end of heap buffer.
Memory allocated at %hs(%d).
HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory before start of heap buffer.
HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory before start of heap buffer.
Memory allocated at %hs(%d).
Client hook free failure.
The Block at 0x%p was allocated by aligned routines, use _aligned_free()
%hs located at 0x%p is %Iu bytes long.
%hs located at 0x%p is %Iu bytes long.
Memory allocated at %hs(%d).
HEAP CORRUPTION DETECTED: on top of Free block at 0x%p.
CRT detected that the application wrote to a heap buffer that was freed.
HEAP CORRUPTION DETECTED: on top of Free block at 0x%p.
CRT detected that the application wrote to a heap buffer that was freed.
Memory allocated at %hs(%d).
DAMAGED
_heapchk fails with unknown return value!
_heapchk fails with _HEAPBADPTR.
_heapchk fails with _HEAPBADEND.
_heapchk fails with _HEAPBADNODE.
_heapchk fails with _HEAPBADBEGIN.
Bad memory block found at 0x%p.
Bad memory block found at 0x%p.
Memory allocated at %hs(%d).
Object dump complete.
crt block at 0x%p, subtype %x, %Iu bytes long.
normal block at 0x%p, %Iu bytes long.
client block at 0x%p, subtype %x, %Iu bytes long.
{%ld}
%hs(%d) :
#File Error#(%d) :
Dumping objects ->
Data: <%s> %s
Detected memory leaks!
f:\dd\vctools\crt_bld\self_x86\crt\src\mbctype.c
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
EncodePointer
DecodePointer
f:\dd\vctools\crt_bld\self_x86\crt\src\tidtable.c
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
f:\dd\vctools\crt_bld\self_x86\crt\src\_file.c
f:\dd\vctools\crt_bld\self_x86\crt\src\input.c
f:\dd\vctools\crt_bld\self_x86\crt\src\mlock.c
CorExitProcess
f:\dd\vctools\crt_bld\self_x86\crt\src\stdenvp.c
f:\dd\vctools\crt_bld\self_x86\crt\src\stdargv.c
f:\dd\vctools\crt_bld\self_x86\crt\src\a_env.c
f:\dd\vctools\crt_bld\self_x86\crt\src\ioinit.c
runtime error
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library without using a manifest.
This is an unsupported way to load Visual C++ DLLs. You need to modify your application to build with a manifest.
For more information, see the "Visual C++ Libraries as Shared Side-by-Side Assemblies" topic in the product documentation.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
Assertion Failed
Warning
Microsoft Visual C++ Debug Library
_CrtDbgReport: String too long or IO Error
Debug %s!
Program: %s%s%s%s%s%s%s%s%s%s%s%s
(Press Retry to debug the application)
Module:
File:
Line:
Expression:
For information on how your program can cause an assertion
failure, see the Visual C++ documentation on asserts.
HeapQueryInformation
%s(%d) : %s
Assertion failed!
Assertion failed:
, Line
<file unknown>
Second Chance Assertion Failed: File
_CrtDbgReport: String too long or Invalid characters in String
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
GetUserObjectInformationA
MessageBoxA
USER32.DLL
(null)
`h````
xpxxxx
f:\dd\vctools\crt_bld\self_x86\crt\src\output.c
bad exception
f:\dd\vctools\crt_bld\self_x86\crt\src\convrtcp.c
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
f:\dd\vctools\crt_bld\self_x86\crt\src\read.c
f:\dd\vctools\crt_bld\self_x86\crt\src\_getbuf.c
`h`hhh
xppwpp
Unknown Runtime Check Error
Stack memory around _alloca was corrupted
A local variable was used before it was initialized
Stack memory was corrupted
A cast to a smaller data type has caused a loss of data. If this was intentional, you should mask the source of the cast with the appropriate bitmask. For example:
char c = (i & 0xFF);
Changing the code in this way will not affect the quality of the resulting optimized code.
The value of ESP was not properly saved across a function call. This is usually a result of calling a function declared with one calling convention with a function pointer declared with a different calling convention.
Stack around the variable '
' was corrupted.
The variable '
' is being used without being initialized.
CONOUT$
MSPDB80.DLL
Stack around _alloca corrupted
Local variable used before initialization
Stack memory corruption
Cast to smaller type causing loss of data
Stack pointer corruption
bad allocation
Siwenuy wukuyikig vagoyod
Teseg wuruxo cayac
vonalahubihohujorojeg xakajolamohuluyiweh
jarewelexawapeminejexavekema kimoyimobomo
vakagijuhicidyefiwu sejotijeleyumuh xevafeceduzediweluhejun bipawusigabekabayuwidejuz wayijopidete
Jorutep
bizowe vudiwaveredunemeza pusaw gezise
siyelubok devozacokaguxurax
Bid der bevaxepigen yejomojen
kubawobawebizuxowacikuwir nibavaxomofikaxunoma
vexevoleciciwasobo cuyakolikozodizafi mukupedejovokalihuj somuti
rumogasohehanu jicahuxili nucopilecezifocukal xepetiba
Dug ripeduvixivanazujogis bafowudituzaline zabonicevurasaze
Jesirulonocilok puduyuhela xonavucane meciwizuvojiv wuvuces
xecumubonehiserukuhunos nomuhetucibey gugedafesozali kupoxinabimasulegamowucemoto
Tamezadocetijel bedikexivali pisicim
gazulovavogaduxihiyesejunake tikaf lipimexayumuzo
Vizewa
Fawikube
Vuyaveguyehat
luvevoyovekubefonar
tuhuyigakuhuxajefaxupusunowagoha hofapamotelopehehifufusey mac
GAIsProcessorFeaturePresent
KERNEL32
?ZEM-'^
?{yK+;
?765@Z
?e')lW
UUUUUU
?333333
?333333
?UUUUUU
?$rxxx
1#QNAN
1#SNAN
_nextafter
_hypot
C:\vojoji\91\xobamehubije.pdb
GetCommandLineW
EnumResourceNamesW
SetVolumeLabelA
SearchPathW
FindFirstFileW
OpenFile
TlsGetValue
SetLocalTime
GetDriveTypeW
SetEndOfFile
GetNumberOfConsoleInputEvents
CallNamedPipeA
InterlockedIncrement
InterlockedDecrement
InitializeSListHead
GetProfileSectionA
GetComputerNameW
CreateDirectoryExA
GetModuleHandleW
GenerateConsoleCtrlEvent
GetConsoleTitleA
GetWindowsDirectoryA
GetSystemWow64DirectoryA
EnumResourceTypesA
FindResourceExA
GlobalAlloc
AddRefActCtx
GetVolumeInformationA
ReadFileScatter
GetConsoleWindow
GetSystemTimeAdjustment
GetVersionExW
GlobalFlags
GetBinaryTypeA
TerminateProcess
GetAtomNameW
ReadFile
CompareStringW
lstrlenW
SetConsoleTitleA
GlobalUnlock
LCMapStringA
GetConsoleOutputCP
VerifyVersionInfoW
CreateDirectoryA
InterlockedExchange
GetFileSizeEx
IsDBCSLeadByteEx
GetProcAddress
FreeUserPhysicalPages
SetComputerNameA
CreateMemoryResourceNotification
GetPrivateProfileStringA
Process32FirstW
OpenMutexA
OpenWaitableTimerW
SetCalendarInfoW
IsSystemResumeAutomatic
AddAtomW
SetFileApisToANSI
WriteProfileSectionW
GetCommMask
GetTapeParameters
GetSystemInfo
GetOEMCP
FindNextFileA
SetConsoleCursorInfo
CreateIoCompletionPort
WaitCommEvent
FreeEnvironmentStringsW
BuildCommDCBA
GetCurrentDirectoryA
CompareStringA
ScrollConsoleScreenBufferA
CopyFileExA
DeleteFileA
KERNEL32.dll
GetComboBoxInfo
GetMenuInfo
GetMenuCheckMarkDimensions
GetMenuBarInfo
USER32.dll
GetLastError
WideCharToMultiByte
MoveFileA
MultiByteToWideChar
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
RaiseException
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetACP
GetCPInfo
IsValidCodePage
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
RtlUnwind
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointer
CloseHandle
SetStdHandle
WriteConsoleA
CreateFileA
GetModuleHandleA
.?AVtype_info@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_exception@std@@
y>L(wY
.?AVexception@std@@
031<1f1k1p1
787=7B7
:8;=;O;y;
1/1c1k1t1
262;2i2
344=4V4u4
45$5)5U5
737?7H7N7W7c7l7
8"9.9w9
9Q:Z:f:q:y:
<&<A<G<P<a<i<~<
> >)>9>E>[>g>p>
0R0X0w0
1K1W1x1
22+2F2c2m2y2
3/3U3a3
4X5]5o5
6.636P6U6r6w6
:':T:Y:^:k:
<.<3<8<^<
>/>[>`>
?*?U?w?
2L2Q2V2
223B3G3
708@8E8J8O8
8;9G9f9
:F:b:n:~:
;#;V;[;`;e;
<(=-=?=
>)>>>d>o>{>
?#?'?0?B?L?t?
0B0L0q0
3D4K4t4x4|4
<0<L<u<
="=>=Z=v=
>(>->?>b>
>M?x?}?
0'010:0A0H0X0n0x0
1!1*11181H1^1h1
2+252:2?2I2N2S2]2b2g2q2v2|2
3%3+393>3L3f3l3|3
44&474A4J4Q4W4x4}4
5#6)6L6|6
94999>9
;^;e;F<X<a<m<v<
=B=^=z=
2!2N2Z2
;;;@;E;
< <$<(<,<a<m<
?#?0?=?U?}?
12191K1R1h1m1
4#40484G4\4h4t4
5H5P5f5s5x5
6+7:7E7V7g7
808=8I8Y8u8
9K9P9]9b9p9
;A<U<[<
?+?1?B?
0.0Q0_0j0r0w0
0E1M1i1
6!6*6=6
;(<-<3<D<J<d<k<q<
>A>Q>V>[>`>
?#?(?-?7?B?]?b?
1/1S1Z1d1
4"4.4I4Y4e4
40565d5i5n5
5G6h6m6
889=9O9
:>;E;t;
;'<.<Z<k<
?%?I?R?[?
X4e4n4
5'5-585?5E5N5T5_5i5x5
5"6a6m6
;*;0;9;>;G;W;^;
9s9|9";Z;
<1<8<<<@<D<H<L<P<T<
=!=<=C=H=L=P=q=
=:>@>D>H>L>
2+212L2Y2^2d2q2v2|2
383=3B3G3z3
4 4%4*4S4X4]4b4
43585=5B5m5r5w5
6!6&6I6R6
7$8+858G8Q8o8t8y8
8(9-9F9
:-:2:7:_:e:
:";';,;b;g;l;q;
<4<E<J<O<T<}<
="='=]=b=g=l=
=,>1>6>;>^>g>
0!0(0c0j0y0
11Z1a1k1}1
2$2Y2b2k2s2
4\5`5d5h5l5p5
5>6J6P6e6o6
7$7.7@7
9E9J9O9s9|9
;#;M;R;W;
<:<C<m<r<w<
*282E2O2[2f2
>8>W>v>
272@2j2o2t2
465=5h5
5D6K6v6
8=8J8U8j8
:X:f:y:
6)757i7r7
9X:]:o:
<H<Q<{<
< =%=/===B=L=Z=_=i=}=
=3>>>a>l>
>?8???G?L?P?T?}?
.04080<0@0
1+1]1d1h1l1p1t1x1|1
3F4R4q5z5
6#6(6B7N7{7
8.8f8n8
<l=r=x=~=
>>$>6>;>A>G>_>f>
90B0l0q0v0:1b1R2
6)6V6[6`6k7t7
9=9B9G9
:J:O:T:
;9;>;C;l<
0-02070v0~0
01$1)1
2A3J3t3y3~3
4=4B4G4
5#5M5R5W5
6.676a6f6k6
6!7-7Z7_7d7
9+:0:5:w:
<7<<<A<
= >%>*>e>m>
>.?7?a?f?k?
>0J0w0|0
7X:]:o:
9%9O9T9Y9
:5:::?:
:6;Y;b;
<J<g<q<
>H>M>R>
&0/0d0i0n0
5$6.6X6t7~7
8%9/9J9
;1<T<]<
="=I=R=
?<?T?`?
0J0r0~0
0#1/1g1l1q1
2-292q2v2{2
7 7*7c7
151>1s1x1}1
2)353f3u3
4.474a4f4k4}4
8 8$8<8@8D8H8L8
:!;&;+;m;y;
I0P0-1
1y2)353e3j3o3K4
;d;h;l;p;t;x;|;
< <$<(<,<
4>4C4H4
9R9W9\9
; ;E;|;
<1<U<a<
<'=J=V=
>>$>G>h>m>
>4???w?
0 0;0B0K0b0i0
3%3?3Z3l3y3
4-43494@4G4Q4]4m4
595Z5`5
6!6+616>6D6o6
687O7n7~7
8.8:8]8
91999y9
:":':,:2:7:C:R:W:]:j:z:
</<I<V<
<*=0=>=H=
6"6(6.6}6
6M7\7d7l7s7y7
8"8'8,828B8G8L8R8^8d8v8
8,9A9F9L9Y9^9d9
:(:Q:[:r:
:3;E;k;
<Y<_<m<w<i?
0(0U0Z0_0N1Z1
2g3l3q3v3k4r5~5
5 6%6*6f6r6
<$=0=]=b=g=
>(?4?a?f?k?
081D1q1v1{1
8Y9e9m9
93:b:j:r:
>%>5>F>
4h4m4r4
7$89`9d9h9l9p9t9x9|9
9T:\:q:
4 5?5H5F;
2F3q4x4
<X<\<`<
4W4\4a4f4
?'?2?U?`?
2,2h2m2
d2h2l2p2t2x2
(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
1 1$1(1`>d>h>l>p>t>
h:l:p:
T=X=`=d=h=l=
>4>D>H>X>\>`>h>
?0?L?P?X?\?x?
080X0x0
1 1@1L1h1t1
202P2p2
3 3@3`3l3
4$4,40484L4h4p4t4
5,585@5p5
686X6t6x6
6@7P7`7p7
<$<,<4<<<D<L<T<\<d<l<t<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
7 7$7(7,7074787<7
8"8&8*8.82868:8>8B8F8J8N8R8V8Z8^8b8f8j8n8r8v8z8~8
9 9$9(9,9d9l9t9|9
:$:,:4:<:D:
Djjjjjj
Djjjjj
("Buffer too small", 0)
sizeInBytes > 0
_wctomb_s_l
f:\dd\vctools\crt_bld\self_x86\crt\src\wctomb.c
sizeInBytes <= INT_MAX
vscanf
f:\dd\vctools\crt_bld\self_x86\crt\src\scanf.c
(format != NULL)
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgdel.cpp
_BLOCK_TYPE_IS_VALID(pHead->nBlockUse)
@f:\dd\vctools\crt_bld\self_x86\crt\src\_mbslen.c
_loc_update.GetLocaleT()->locinfo->mb_cur_max == 1 || _loc_update.GetLocaleT()->locinfo->mb_cur_max == 2
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c
_CrtCheckMemory()
_calloc_dbg_impl
(_HEAP_MAXREQ / nNum) >= nSize
_pFirstBlock == pOldBlock
_pLastBlock == pOldBlock
fRealloc || (!fRealloc && pNewBlock == pOldBlock)
pOldBlock->nLine == IGNORE_LINE && pOldBlock->lRequest == IGNORE_REQ
_CrtIsValidHeapPointer(pUserData)
_recalloc_dbg
(_HEAP_MAXREQ / count) >= size
pUserData != NULL
_pFirstBlock == pHead
_pLastBlock == pHead
pHead->nBlockUse == nBlockUse
pHead->nLine == IGNORE_LINE && pHead->lRequest == IGNORE_REQ
_msize_dbg
_CrtSetDbgFlag
(fNewBits==_CRTDBG_REPORT_FLAG) || ((fNewBits & 0x0ffff & ~(_CRTDBG_ALLOC_MEM_DF | _CRTDBG_DELAY_FREE_MEM_DF | _CRTDBG_CHECK_ALWAYS_DF | _CRTDBG_CHECK_CRT_DF | _CRTDBG_LEAK_CHECK_DF) ) == 0)
_CrtMemCheckpoint
state != NULL
(*_errno())
_printMemBlockData
Assertion Failed
Warning
Df:\dd\vctools\crt_bld\self_x86\crt\src\dbgrpt.c
Microsoft Visual C++ Debug Library
_CrtDbgReport: String too long or IO Error
wcscpy_s(szOutMessage, 4096, L"_CrtDbgReport: String too long or IO Error")
Debug %s!
Program: %s%s%s%s%s%s%s%s%s%s%s%s
(Press Retry to debug the application)
Module:
File:
Line:
Expression:
For information on how your program can cause an assertion
failure, see the Visual C++ documentation on asserts.
memcpy_s(szShortProgName, sizeof(TCHAR) * (260 - (szShortProgName - szExeName)), dotdotdot, sizeof(TCHAR) * 3)
<program name unknown>
wcscpy_s(szExeName, 260, L"<program name unknown>")
__crtMessageWindowW
f:\dd\vctools\crt_bld\self_x86\crt\src\setlocal.c
((ptloci->lc_category[category].wlocale != NULL) && (ptloci->lc_category[category].wrefcount != NULL)) || ((ptloci->lc_category[category].wlocale == NULL) && (ptloci->lc_category[category].wrefcount == NULL))
KERNEL32.DLL
(L"Buffer is too small" && 0)
Buffer is too small
(((_Src))) != NULL
strcpy_s
f:\dd\vctools\crt_bld\self_x86\crt\src\tcscpy_s.inl
((_Dst)) != NULL && ((_SizeInBytes)) > 0
( (_Stream->_flag & _IOSTRG) || ( fn = _fileno(_Stream), ( (_textmode_safe(fn) == __IOINFO_TM_ANSI) && !_tm_unicode_safe(fn))))
(stream != NULL)
f:\dd\vctools\crt_bld\self_x86\crt\src\input.c
nFloatStrUsed<=(*pnFloatStrSz)
("Invalid Input Format",0)
_input_s_l
f:\dd\vctools\crt_bld\self_x86\crt\prebuild\eh\typname.cpp
pNode->next != NULL
mscoree.dll
strcpy_s(*env, cchars, p)
_setenvp
f:\dd\vctools\crt_bld\self_x86\crt\src\stdenvp.c
strcat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), rterrs[tblindx].rterrtxt)
strcat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), "\n\n")
strncpy_s(pch, progname_size - (pch - progname), "...", 3)
strcpy_s(progname, progname_size, "<program name unknown>")
strcpy_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), "Runtime Error!\n\nProgram: ")
_NMSG_WRITE
f:\dd\vctools\crt_bld\self_x86\crt\src\crt0msg.c
strcpy_s(szOutMessage, 4096, "_CrtDbgReport: String too long or IO Error")
strcpy_s(szExeName, 260, "<program name unknown>")
__crtMessageWindowA
_expand_base
f:\dd\vctools\crt_bld\self_x86\crt\src\expand.c
pBlock != NULL
kernel32.dll
f:\dd\vctools\crt_bld\self_x86\crt\src\isctype.c
(unsigned)(c + 1) <= 256
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrptt.c
_CrtDbgReport: String too long or Invalid characters in String
wcscpy_s(szOutMessage2, 4096, L"_CrtDbgReport: String too long or Invalid characters in String")
e = mbstowcs_s(&ret, szOutMessage2, 4096, szOutMessage, ((size_t)-1))
strcpy_s(szOutMessage, 4096, szLineMessage)
strcat_s(szLineMessage, 4096, "\n")
strcat_s(szLineMessage, 4096, "\r")
strcat_s(szLineMessage, 4096, szUserMessage)
strcpy_s(szLineMessage, 4096, szFormat ? "Assertion failed: " : "Assertion failed!")
strcpy_s(szUserMessage, 4096, "_CrtDbgReport: String too long or IO Error")
_itoa_s(nLine, szLineMessage, 4096, 10)
_VCrtDbgReportA
wcstombs_s(&ret, szaOutMessage, 4096, szOutMessage, ((size_t)-1))
strcpy_s(szOutMessage2, 4096, "_CrtDbgReport: String too long or Invalid characters in String")
wcstombs_s(((void *)0), szOutMessage2, 4096, szOutMessage, ((size_t)-1))
wcscpy_s(szOutMessage, 4096, szLineMessage)
%s(%d) : %s
wcscat_s(szLineMessage, 4096, L"\n")
wcscat_s(szLineMessage, 4096, L"\r")
wcscat_s(szLineMessage, 4096, szUserMessage)
wcscpy_s(szLineMessage, 4096, szFormat ? L"Assertion failed: " : L"Assertion failed!")
Assertion failed!
Assertion failed:
wcscpy_s(szUserMessage, 4096, L"_CrtDbgReport: String too long or IO Error")
, Line
<file unknown>
Second Chance Assertion Failed: File
_itow_s(nLine, szLineMessage, 4096, 10)
_VCrtDbgReportW
f:\dd\vctools\crt_bld\self_x86\crt\src\winsig.c
("Invalid signal or error", 0)
WUSER32.DLL
sizeInBytes >= count
src != NULL
memcpy_s
f:\dd\vctools\crt_bld\self_x86\crt\src\memcpy_s.c
dst != NULL
wcscpy_s
((_Dst)) != NULL && ((_SizeInWords)) > 0
f:\dd\vctools\crt_bld\self_x86\crt\src\malloc.h
("Corrupted pointer passed to _freea", 0)
((((( H
h(((( H
H
nstrncpy_s
f:\dd\vctools\crt_bld\self_x86\crt\src\tcsncpy_s.inl
(L"String is not null terminated" && 0)
String is not null terminated
strcat_s
f:\dd\vctools\crt_bld\self_x86\crt\src\tcscat_s.inl
f:\dd\vctools\crt_bld\self_x86\crt\src\mbtowc.c
_fileno
f:\dd\vctools\crt_bld\self_x86\crt\src\fileno.c
_filbuf
f:\dd\vctools\crt_bld\self_x86\crt\src\_filbuf.c
str != NULL
_ungetc_nolock
f:\dd\vctools\crt_bld\self_x86\crt\src\ungetc_nolock.inl
D_set_error_mode
f:\dd\vctools\crt_bld\self_x86\crt\src\errmode.c
("Invalid error_mode", 0)
("inconsistent IOB fields", stream->_ptr - stream->_base >= 0)
f:\dd\vctools\crt_bld\self_x86\crt\src\_flsbuf.c
(null)
("'n' format specifier disabled", 0)
(ch != _T('\0'))
f:\dd\vctools\crt_bld\self_x86\crt\src\output.c
f:\dd\vctools\crt_bld\self_x86\crt\src\vsprintf.c
(count == 0) || (string != NULL)
_vsnprintf_helper
string != NULL && sizeInBytes > 0
_vsprintf_s_l
format != NULL
_vsnprintf_s_l
E_mbstowcs_l_helper
f:\dd\vctools\crt_bld\self_x86\crt\src\mbstowcs.c
s != NULL
retsize <= sizeInWords
bufferSize <= INT_MAX
_mbstowcs_s_l
(pwcs == NULL && sizeInWords == 0) || (pwcs != NULL && sizeInWords > 0)
length < sizeInTChars
2 <= radix && radix <= 36
sizeInTChars > (size_t)(is_neg ? 2 : 1)
sizeInTChars > 0
xtoa_s
f:\dd\vctools\crt_bld\self_x86\crt\src\xtoa.c
buf != NULL
_wcstombs_l_helper
f:\dd\vctools\crt_bld\self_x86\crt\src\wcstombs.c
pwcs != NULL
sizeInBytes > retsize
_wcstombs_s_l
(dst != NULL && sizeInBytes > 0) || (dst == NULL && sizeInBytes == 0)
wcscat_s
_vswprintf_helper
f:\dd\vctools\crt_bld\self_x86\crt\src\vswprint.c
string != NULL && sizeInWords > 0
_vsnwprintf_s_l
xtow_s
fclose
f:\dd\vctools\crt_bld\self_x86\crt\src\fclose.c
_fclose_nolock
(str != NULL)
("Invalid file descriptor. File possibly closed by a different thread",0)
(_osfile(filedes) & FOPEN)
_commit
f:\dd\vctools\crt_bld\self_x86\crt\src\commit.c
(filedes >= 0 && (unsigned)filedes < (unsigned)_nhandle)
(_osfile(fh) & FOPEN)
_write
f:\dd\vctools\crt_bld\self_x86\crt\src\write.c
(fh >= 0 && (unsigned)fh < (unsigned)_nhandle)
isleadbyte(_dbcsBuffer(fh))
((cnt & 1) == 0)
_write_nolock
(buf != NULL)
(cnt <= INT_MAX)
f:\dd\vctools\crt_bld\self_x86\crt\src\read.c
(inputbuf != NULL)
_read_nolock
f:\dd\vctools\crt_bld\self_x86\crt\src\_getbuf.c
_lseeki64
f:\dd\vctools\crt_bld\self_x86\crt\src\lseeki64.c
_isatty
f:\dd\vctools\crt_bld\self_x86\crt\src\isatty.c
((state == ST_NORMAL) || (state == ST_TYPE))
("Incorrect format specifier", 0)
_output_s_l
_woutput_s_l
ibase == 0 || (2 <= ibase && ibase <= 36)
strtoxl
f:\dd\vctools\crt_bld\self_x86\crt\src\strtol.c
nptr != NULL
_close
f:\dd\vctools\crt_bld\self_x86\crt\src\close.c
f:\dd\vctools\crt_bld\self_x86\crt\src\_freebuf.c
stream != NULL
_get_osfhandle
f:\dd\vctools\crt_bld\self_x86\crt\src\osfinfo.c
tafufaculuzazopavamagixezipazixo cejavelenotuwazifegazamocagiyam
Pabuzaxugezi polazofasuyede nogun rasuhu
luzogohacagu
kocimayelawunomidisu rajoxuhahowutugoju bivecayofehilanerofevusuxuludol vakawasavihunadawenedubehaj hexamakesepaxojagemuwuzefipog
kernel32.dll
cikuhojetogsoz mafacipebijogutejumafefinuk jucejexel dahajupukiri
geiofogicizeb
vujexuda ravuluvagu cudifeasopecaxasute
jumatuyimugahubuce jesokixovacerivicixar teruv lecajocetorawivifukirota hutiyeyudexavah
dofexabubewuvokekedeketazakuka zalezesilekim
nexayehepoxizacuvumy lagotalujivibelimoli bobovixokewixisuxilalag
kehidukugegakolejokiyikopunek
tezadutexenolaluwesobucupejofe tav xixatafepoyolepuzayikicijakeguwu lomic
Xafobahapoyif
honifixazuhibin rodiyefaxelebejasefacilovewagi gicopapubofalefepiwohipog
Xakive buwacifiwejujev
Fok vawobavuxulolufidupuxijekigih sepahoxav lejuw dokebohawukuba
_controlfp_s(((void *)0), 0x00010000, 0x00030000)
_setdefaultprecision
f:\dd\vctools\crt_bld\self_x86\crt\src\intel\fp8.c
_cftoe_l
f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\cvt.c
strcpy_s(p, (sizeInBytes == (size_t)-1 ? sizeInBytes : sizeInBytes - (p - buf)), "e+000")
sizeInBytes > (size_t)(3 + (ndec > 0 ? ndec : 0) + 5 + 1)
_cftoe2_l
sizeInBytes > (size_t)(1 + 4 + ndec + 6)
_cftoa_l
_cftof_l
_cftof2_l
_cftog_l
_controlfp_s
f:\dd\vctools\crt_bld\self_x86\crt\prebuild\tran\contrlfp.c
("Invalid input value", 0)
pflt != NULL
sizeInBytes > (size_t)((digits > 0 ? digits : 0) + 1)
_fptostr
f:\dd\vctools\crt_bld\self_x86\crt\src\_fptostr.c
strcpy_s(resultstr, resultsize, autofos.man)
_fltout2
f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\cfout.c
__strgtold12_l
f:\dd\vctools\crt_bld\self_x86\crt\prebuild\include\strgtold12.inl
_Locale != NULL
strcpy_s(fos->man, 21+1, "1#QNAN")
strcpy_s(fos->man, 21+1, "1#INF")
strcpy_s(fos->man, 21+1, "1#IND")
strcpy_s(fos->man, 21+1, "1#SNAN")
$I10_OUTPUT
f:\dd\vctools\crt_bld\self_x86\crt\prebuild\conv\x10fout.c
VS_VERSION_INFO
041905E7
ProductVersion
14.38.39.100
VarFileInfo
Translations
Antivirus Signature
Bkav W32.AIDetect.malware1
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.37125011
CMC Clean
CAT-QuickHeal Trojan.Azorult
Qihoo-360 Clean
McAfee RDN/Generic PWS.y
Cylance Unsafe
VIPRE Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Riskware ( 0040eff71 )
BitDefender Trojan.GenericKD.37125011
K7GW Riskware ( 0040eff71 )
Cybereason malicious.0ef93e
Arcabit Trojan.Generic.D2367B93
Baidu Clean
Cyren W32/Kryptik.EJB.gen!Eldorado
ESET-NOD32 a variant of Win32/Kryptik.HLKY
APEX Malicious
Avast Win32:BotX-gen [Trj]
ClamAV Clean
Kaspersky HEUR:Trojan-Ransom.Win32.Stop.gen
Alibaba TrojanSpy:Win32/Kryptik.2fd9e8a0
NANO-Antivirus Clean
ViRobot Clean
AegisLab Trojan.Win32.Malicious.4!c
Tencent Clean
Sophos Mal/Generic-R + Troj/Kryptik-TR
Comodo Clean
F-Secure Clean
DrWeb Trojan.PWS.Siggen3.211
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Generic.fc
Emsisoft Clean
Ikarus Trojan.Win32.Crypt
Jiangmin Trojan.PSW.Racealer.cln
Webroot W32.Trojan.Gen
Avira TR/Crypt.Agent.dzwga
MAX malware (ai score=99)
Kingsoft Win32.Troj.Generic_a.a.(kcloud)
Gridinsoft Trojan.Win32.Kryptik.oa
Microsoft Trojan:Win32/Azorult!ml
SUPERAntiSpyware Clean
GData Win32.Trojan.PSE.1EJKTWW
Cynet Malicious (score: 100)
AhnLab-V3 Clean
Acronis suspicious
VBA32 Clean
ALYac Trojan.GenericKD.46518160
TACHYON Clean
Malwarebytes Trojan.MalPack.GS
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Clean
Rising Trojan.Kryptik!1.D75E (CLASSIC)
Yandex Clean
SentinelOne Static AI - Malicious PE
eGambit Unsafe.AI_Score_98%
Fortinet W32/Kryptik.TR!tr
BitDefenderTheta Gen:NN.ZexaF.34758.xu0@a4sjesjI
AVG Win32:BotX-gen [Trj]
Paloalto generic.ml
CrowdStrike win/malicious_confidence_100% (W)
MaxSecure Trojan.Malware.300983.susgen
No IRMA results available.