Static | ZeroBOX

PE Compile Time

2020-04-06 10:56:52

PDB Path

C:\farozisun2\vovon kemexijaduhibu61\f.pdb

PE Imphash

56c207817e66e7690a43bf97b1ee7374

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0001a60b 0x0001a800 6.2426995219
.rdata 0x0001c000 0x00008582 0x00008600 4.61048330951
.data 0x00025000 0x02795a44 0x00050a00 7.976465954
.rsrc 0x027bb000 0x00003120 0x00003200 6.51073867035
.reloc 0x027bf000 0x00010a04 0x00010c00 1.02256879181

Resources

Name Offset Size Language Sub-language File type
AFX_DIALOG_LAYOUT 0x027bdfe8 0x00000002 LANG_MONGOLIAN SUBLANG_DEFAULT data
PAMIFEGIHURULUFUKIYUVUWOGULOJOK 0x027bd860 0x000006f0 LANG_MONGOLIAN SUBLANG_DEFAULT ASCII text, with very long lines, with no line terminators
RT_ICON 0x027bb2a0 0x000025a8 LANG_ENGLISH SUBLANG_ENGLISH_US dBase III DBT, version number 0, next free block index 40
RT_ACCELERATOR 0x027bdf50 0x00000078 LANG_MONGOLIAN SUBLANG_DEFAULT data
RT_GROUP_ICON 0x027bd848 0x00000014 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x027bdff0 0x00000130 LANG_MONGOLIAN SUBLANG_DEFAULT data
None 0x027bdfd8 0x0000000a LANG_MONGOLIAN SUBLANG_DEFAULT data
None 0x027bdfd8 0x0000000a LANG_MONGOLIAN SUBLANG_DEFAULT data

Imports

Library KERNEL32.dll:
0x41c00c TlsGetValue
0x41c010 SetLocalTime
0x41c018 GetCommState
0x41c01c GetProfileStringW
0x41c020 UnlockFile
0x41c024 CallNamedPipeW
0x41c02c GetNumberFormatA
0x41c030 FindResourceExA
0x41c034 GlobalAlloc
0x41c03c LoadLibraryW
0x41c044 HeapDestroy
0x41c048 CreateSemaphoreA
0x41c050 GetModuleFileNameW
0x41c058 GetSystemDirectoryA
0x41c05c CreateActCtxA
0x41c060 GetBinaryTypeW
0x41c064 LCMapStringA
0x41c068 GetStartupInfoA
0x41c06c lstrlenA
0x41c070 GetStdHandle
0x41c078 GetLastError
0x41c07c GetProcAddress
0x41c080 CreateNamedPipeA
0x41c088 LoadLibraryA
0x41c08c OpenMutexA
0x41c098 FindAtomA
0x41c09c SetSystemTime
0x41c0a0 FindNextFileA
0x41c0a4 WriteProfileStringA
0x41c0b0 HeapSetInformation
0x41c0b8 SetFileShortNameA
0x41c0bc UnregisterWaitEx
0x41c0c0 CopyFileExA
0x41c0c4 DeleteFileA
0x41c0d0 GetThreadContext
0x41c0d4 SetThreadLocale
0x41c0d8 GetCommandLineW
0x41c0dc WideCharToMultiByte
0x41c0e0 EncodePointer
0x41c0e4 DecodePointer
0x41c0e8 GetCommandLineA
0x41c0ec GetStartupInfoW
0x41c0f4 GetModuleHandleW
0x41c0f8 ExitProcess
0x41c0fc TerminateProcess
0x41c100 GetCurrentProcess
0x41c10c IsDebuggerPresent
0x41c110 WriteFile
0x41c114 GetACP
0x41c118 GetOEMCP
0x41c11c GetCPInfo
0x41c120 IsValidCodePage
0x41c124 TlsAlloc
0x41c128 TlsSetValue
0x41c12c GetCurrentThreadId
0x41c130 TlsFree
0x41c134 SetLastError
0x41c138 HeapValidate
0x41c13c IsBadReadPtr
0x41c144 SetHandleCount
0x41c14c GetFileType
0x41c158 GetTickCount
0x41c15c GetCurrentProcessId
0x41c164 GetModuleFileNameA
0x41c170 HeapCreate
0x41c178 OutputDebugStringA
0x41c17c WriteConsoleW
0x41c180 OutputDebugStringW
0x41c184 RtlUnwind
0x41c188 LCMapStringW
0x41c18c MultiByteToWideChar
0x41c190 GetStringTypeW
0x41c194 SetFilePointer
0x41c198 GetConsoleCP
0x41c19c GetConsoleMode
0x41c1a0 HeapAlloc
0x41c1a4 HeapReAlloc
0x41c1a8 HeapSize
0x41c1b0 HeapFree
0x41c1b4 SetStdHandle
0x41c1b8 FlushFileBuffers
0x41c1bc RaiseException
0x41c1c0 CreateFileW
0x41c1c4 CloseHandle
Library ADVAPI32.dll:
Library WINHTTP.dll:
0x41c1cc WinHttpOpen

!This program cannot be run in DOS mode.
`.rdata
@.data
@.reloc
t hL!B
URPQQh
jfhHB
jfhHB
jghHB
jghHB
jihHB
jihHB
jjhHB
jjhHB
u!hh B
jfhHB
jfhHB
jghHB
jghHB
jihHB
jihHB
jjhHB
jjhHB
;t$,v-
UQPXY]Y[
PPPPPPPP
PPPPPPPP
j.h(%B
j.h(%B
j/h(%B
j/h(%B
j9h(%B
f:\dd\vctools\crt_bld\self_x86\crt\src\onexit.c
CorExitProcess
f:\dd\vctools\crt_bld\self_x86\crt\src\mbctype.c
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
f:\dd\vctools\crt_bld\self_x86\crt\src\tidtable.c
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
(null)
`h````
xpxxxx
f:\dd\vctools\crt_bld\self_x86\crt\src\output.c
Client
Ignore
Normal
Error: memory allocation: bad memory block type.
Invalid allocation size: %Iu bytes.
Client hook allocation failure.
Client hook allocation failure at file %hs line %d.
Error: possible heap corruption at or near 0x%p
The Block at 0x%p was allocated by aligned routines, use _aligned_realloc()
Error: memory allocation: bad memory block type.
Memory allocated at %hs(%d).
Invalid allocation size: %Iu bytes.
Memory allocated at %hs(%d).
Client hook re-allocation failure.
Client hook re-allocation failure at file %hs line %d.
HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory after end of heap buffer.
HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory after end of heap buffer.
Memory allocated at %hs(%d).
HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory before start of heap buffer.
HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory before start of heap buffer.
Memory allocated at %hs(%d).
Client hook free failure.
The Block at 0x%p was allocated by aligned routines, use _aligned_free()
%hs located at 0x%p is %Iu bytes long.
%hs located at 0x%p is %Iu bytes long.
Memory allocated at %hs(%d).
HEAP CORRUPTION DETECTED: on top of Free block at 0x%p.
CRT detected that the application wrote to a heap buffer that was freed.
HEAP CORRUPTION DETECTED: on top of Free block at 0x%p.
CRT detected that the application wrote to a heap buffer that was freed.
Memory allocated at %hs(%d).
DAMAGED
_heapchk fails with unknown return value!
_heapchk fails with _HEAPBADPTR.
_heapchk fails with _HEAPBADEND.
_heapchk fails with _HEAPBADNODE.
_heapchk fails with _HEAPBADBEGIN.
Bad memory block found at 0x%p.
Bad memory block found at 0x%p.
Memory allocated at %hs(%d).
Object dump complete.
crt block at 0x%p, subtype %x, %Iu bytes long.
normal block at 0x%p, %Iu bytes long.
client block at 0x%p, subtype %x, %Iu bytes long.
{%ld}
%hs(%d) :
#File Error#(%d) :
Dumping objects ->
Data: <%s> %s
Detected memory leaks!
f:\dd\vctools\crt_bld\self_x86\crt\src\_file.c
f:\dd\vctools\crt_bld\self_x86\crt\src\_sftbuf.c
f:\dd\vctools\crt_bld\self_x86\crt\src\ioinit.c
f:\dd\vctools\crt_bld\self_x86\crt\src\stdenvp.c
f:\dd\vctools\crt_bld\self_x86\crt\src\stdargv.c
f:\dd\vctools\crt_bld\self_x86\crt\src\a_env.c
f:\dd\vctools\crt_bld\self_x86\crt\src\mlock.c
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
%s(%d) : %s
Assertion failed!
Assertion failed:
_CrtDbgReport: String too long or IO Error
, Line
<file unknown>
Second Chance Assertion Failed: File
_CrtDbgReport: String too long or Invalid characters in String
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
f:\dd\vctools\crt_bld\self_x86\crt\src\_getbuf.c
`h`hhh
xppwpp
Assertion Failed
Warning
Microsoft Visual C++ Debug Library
Debug %s!
Program: %s%s%s%s%s%s%s%s%s%s%s%s
(Press Retry to debug the application)
Module:
File:
Line:
Expression:
For information on how your program can cause an assertion
failure, see the Visual C++ documentation on asserts.
<program name unknown>
bad exception
GetUserObjectInformationA
MessageBoxA
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
Unknown exception
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__eabi
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
nazirebecove
pucutezaxeguzedol belarahemu maxutemibiyagizesa yirevoteguxegevurisaseheda jaheli
jelecawureyojiwiz
cacopisocalelav lubofunikaremufunopi wecatanebuneboneporohuhag
beloludehuwovaficarivoti
yobufowayopujayerinugotelaxa
fejixujor
dehufozidizuledulutanen mabigumilujudonihinimuvuved canabi
xizanilifelorizifadedozuyov ruwimepozowopocoxuc cejezovewevocelalixenihuvol
vozibulojejuco
lizifesuhazosisigilapizokeyaki
gezaxodisatobo
cuzigasixofecafe
wahuvawevomawumeveguroponog
vededilevumotozor
nesapohofolutafilageceme
cusaxevilazux
yobuwexogu
cegivikatohunuyowas
weyiwanujulepiwowerekelukazudulaguzehuhigekaluxabizeboyuretikexoyisexo
jurayisotiharuyexarule
pitadovakaxiv
dekonexikuxoxa
vikiwoyijacefabemufoxe
godunohetu
cajomizevudiyaxoxijumetoyuvavak
sivuzimoyuxajode
C:\farozisun2\vovon kemexijaduhibu61\f.pdb
GetCommandLineW
GetThreadContext
lstrlenA
TlsGetValue
SetLocalTime
InterlockedIncrement
GetCommState
GetProfileStringW
UnlockFile
CallNamedPipeW
FreeEnvironmentStringsA
GetNumberFormatA
FindResourceExA
GlobalAlloc
GetPrivateProfileIntA
LoadLibraryW
GetConsoleAliasExesLengthW
HeapDestroy
CreateSemaphoreA
EnumResourceLanguagesA
GetModuleFileNameW
GetCompressedFileSizeA
GetSystemDirectoryA
CreateActCtxA
GetBinaryTypeW
LCMapStringA
GetStartupInfoA
SetThreadLocale
GetStdHandle
FreeLibraryAndExitThread
GetLastError
GetProcAddress
CreateNamedPipeA
EnterCriticalSection
LoadLibraryA
OpenMutexA
WritePrivateProfileStringA
SetThreadIdealProcessor
FindAtomA
SetSystemTime
FindNextFileA
WriteProfileStringA
CreateIoCompletionPort
FindFirstChangeNotificationA
HeapSetInformation
GetCurrentDirectoryA
SetFileShortNameA
UnregisterWaitEx
CopyFileExA
DeleteFileA
GetVolumeInformationW
LocalFileTimeToFileTime
KERNEL32.dll
InitiateSystemShutdownA
AbortSystemShutdownA
ADVAPI32.dll
WinHttpOpen
WINHTTP.dll
WideCharToMultiByte
EncodePointer
DecodePointer
GetCommandLineA
GetStartupInfoW
InterlockedDecrement
GetModuleHandleW
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
HeapValidate
IsBadReadPtr
LeaveCriticalSection
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
IsProcessorFeaturePresent
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
SetStdHandle
FlushFileBuffers
RaiseException
CreateFileW
CloseHandle
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_exception@std@@
.?AVexception@std@@
.?AVtype_info@@
|\a_@m-*
zURMJrH
q:13S4
N0lx:{h
q:13SN
87uhMP
)qn[&P
%HF}sx
7WBQ?
PGeb'{
/*#oW}
R,yuQ]=
6BQJN5
?>d/PM
Yzy(Xjb
GpMm:A
`3wfcD
.=;HUMEKl
rl[g.ACM
l)-G3M(
V|A ="
t8rsdA]p
y5y'Fx:
!B8^vnr6
]4X5dT
i,i-d}
/"\_T-C
$CX<@R
,LZKKz]
CV%hq/
W|"Iu^4T
)B~!tx
e-[u*1
}{P=4(
KY5u!]
cR5SzA[
.#;YMp
JqB>t]
k|8s\L*
ZJ*7O4`
LHQMt-
hG79 G
h:w10f
yng4_F
?eo+:E
L[(|LL
Ow,8f/
ls/<mb
Euprzq
NNPS,E
<Fbp=?
BX ^:$
B0aZlH!
YMTO?J
^^2!gzMFQ%_
.DRO(*f
i_!C?r
8=.k-T
Iv"z#M
r//Mx
1FZ`XY
L$'/\`K
!4I~F7]
Oyp\iG~
)Q=Vizl
7m0-8y
|dVXWN%
[OxR`8'm
mG4-vx
i)aAMv
4K9k f
%wsX5/)|
lNe^r7
(kxf.M)
7QEBI3
<g{q>na
)+K`+Wp
'&' m!G
*r4Y:'3hE
E?O):SR
ksA_P>:j
&7RAN
{MZWwf
b!M:=#
CG^'L$
pIDevh
AW$}"un
UI]~QOS
j^>Sx(
\85\:n)[
G.~wEL
R{b/`@
,c`|QYv
(~NN"u
^~v:QJ
zk0b|A0=)
t>2\Ix
C.h<<wuI
eD\z<XP
w;!Eo`W3d
64?f1'
m9ZGAc
nFBx\RK(
el0?L6g
*q;1GJ
yj_USAh
$~\5*sf
d?MM7n
DE7XF]
0&Zk^T
~ wgXeo
'OBG$w
}Ii{Q~
LH;J]ZK
vt0zX1h8
xGp>=p
am$Cy(
I"6O#lN
UV9[F
>y9579
E-9{V
p")!qx
F)2^;1
X#2Mie
`??/T}
}:,xI,
AD)Bh
:p6WV`
9]N4<d
X~^Nb$
{vvT~Y!u
z]/Jn{
t#b{`]
mb{`>u
j9rE3|
oIZk_U
k^b"1s
&wBseX=
vIFP$%RZ
.wj,'}
Re9z~V?q<
FmKO&4^
OR!JN<
F#sqt?
RXVix:v
p/J]ATW
h[tw-n
1hM=l(
O3FldA
Afv17[
5 /obp
7i d06
1--s[.zR
lBL/X.B
5;k1Tz
`P8:s#
$qhY|l
f!X-ZZ
]bAkC,x
]qca)%
3IGE*i^S
EUJZ_w_Zo
\i&LTBL=
-|:GYh
Jp% R?a
BJ'O6`
WtXv5W
HHH|s~
WSyccO
v)UoLc/P
6CrBW#
(nJ(&*
LVA$M[
BxQj
#p@b'6-,
#Lfm0F*
@K+G}*i
'FwH9PR
+@F_+
}oa8eGD'
T]"m9E
S+d=ud
J|G+ba
a&DVO=Z
2axnC7`
>JbE^9
iSrAug
hW6&;42
5{]V_z
:o)W;6
pViwP
0#SQ.3
(r*5Q[
4J:4j)
Vo|mk:}
(e+P$8
4N0yF@2?
S>(].K+m$
)28M=W
YU=GAX
aAs5IH
[MD>n4
;T@)`<
c2Hp4w
:G}rS`;
EO;7/^
<0$qbY
!Djtw
SNT?VC
5$])Ovj\9
_-3"4C
xrPpHea
xo~JtF
gP4.Z?
&|!Gj_
b&m_ #
\W U??
^*3r[<
!DyL)!
:/>+Il]
Y8kU[WW
5Pv|M2g
m|IsEed
W5]Q=
p?<K+(
Ks5]h
Q@,ENp
k)I]HF
18[^-
``_0ga
2P+lh0J
VCyF[l
";58@e(?Q'
$#3|OJ
F_|NR|
fg4M5z
THD-6?
m9Soyy
~5c]aX
_B+WSgBs
bk%yJF
9s+?c:}
*D;h,~t/
,VK% >
V2v~{0
kb9<!"
/B'@f]x
OPu12N
?y/36Ph
C@8I9r
8M'X-vb(
+Q2''Q2E
U(_/Jm
"z<#O'GD
q?'(\*/
-_y;x
Vx:QN:
B{G&6W
CdYtb}:
"86Ih9
5o6{O
PK(zV~[v
x [BmC
*E-p.}U
sN:O%E
IjVxs_!
OFK=dL
b^k!5b
,iekT?
)1LW3v
:.v^FUV
8XEUIN
:7vN,zZ
nH2UF,
Ff#\cQi
}O\-oz
k0ep<K
F-g#o
2R5.Lw
Z.+J|t0
VURfhi
f|TJ]t
K8!8bK
;l'A8
:;^j~g
9b,4'.
,V*uO)jy
u?/v_=y
CBrJA"
"O3ENL>
%oMN0z%m
XT9[8L
|l[zyA
r/ZIS
$g4&@:
h{G4$7
W'U=<7
J3J&oEc
YyfDtI9
w+Sw%|
H,5%7-
7dB"0P
1)O83\
'7.bI/
I**q7=&>Q
Q[xR0
JhBMO=
K.Rs*>
UN>&zNqP
60^b"Va
)JIE\D
XXw5s7
YR,x~A
y0>*bF
[8yyHv
g"Zpy?
0y%S"w
q@IpC!
y50A&@Dv
ta( +EDxZ
%<(yI{
@q{^wh
A-kqc}5
);1ky
]NSxp1u\
cziVC(
mMfG9\Q39
v)\Mkv
1=4>x{
J@*D"ro]k
8-C\4T
sKC8hV=F
#.]`bY
nUD4x|
4OdD`8c
Y:P('9
Qtg)LC_
#rW<x-
@4afj9
|:W^Jvso^
\,!p%]
K2nFCZb
@6K"rXek
N|n@:k4%
VYF;N'`6V
EO|tEN
.]{x8.G
Z+K>UG
]a:K)Fy+#
sh'ZQ|-r
~yR/h\H
ICj-tk
Ub[XMM
X7Zoxt
x0jLtP
@DTU:p
!,JUb>
7JS%K'
#mcYSk
.v_6Q-
iUBfMn
D J|DU
#dfCry
wCE~Sp
[<<Rm@
SF~_#j
>d HyvM
jm*?Xt
#B08q+
@zSV!G
IjK<X5/8
qj,b<A
aSj3LI
3/MGXa
)$Z&M3V
y0D>|W
?O|jF
H? oa
LMef^o
%EQ|,|e^Y
O3ERC8v
Lv+: ?
dq1"!k
L%neK:
#B^@rFdh
5^Nq#P
.1VkP<Z
!(a<|
ED P~=P
asW$PS
Es#?Ae
|-UE5~
A\NeaL
s|?B,w
ua|f#
FVAFki
.mg}Pq
oJ2/u""}B
^5gVeI
&+}[p*V
w2&R@I
0)ZII$
q{O+By_
E}=SAh
j-aX%mH[rJ
r6/`oc
D_z%/fZ
IZxbg57
kM\SXSr
9uS{#c\+
uRJ{kH
?;2rU6
9#`Tp<
7D#aei=
\0s]#[
S_oEm#
"$1SHkc
V;U?,V,A
/0K7]Q
!>[8r:X;(
GQ>){#*n
5_&RwV
O`+pQep+
9dJ!HJ
T'}AfR?%8-
YpF2kD
TD8Nye
;L"hX<
B}&ZIi
Kj:H.@
)F_c];
#}Zq;ni,
X)Q|1>
o07vsPf
2?OK5C
ZS]3O
sN'}/l<
Mx9N<^U
dB^ gH(
/cQF:k
_YF8a:
/Dl,dBZ
R@h1(Ok
"zX.`4B
:.pVOf=k
\wP^Jw
)8{rK7
XLar9>
3C+:CM'
A]\TN/s
odAuB.
}Oo=y#K)
Dw7?Hx
!['>-E
N&fWC
'7.Rt*
X2A*r}
|I;V{^
x$}A*-
>o;Jgi
}$Tt2X
F}_{ST
2wCY&{
3`k=dG
[*;*
\sU#*!
!#rntm
9hXF q
iS/`>!L
|/'ytH6
+:OG-*
gPlY'=PTd
+6P'o.
k93-0\8
QptInY
c|T\^$
F1mmQ3
<\]tsJ
<fdT!j0e
QM<\uOs
0KX+$;
3U@">T
I`{3KH
nmEEX,8j'-eH
Xa D#[
Rl7Vp64
tMC71\5l
_h"L)OV
+n;1_W
t.5LLK
}2_@_,
4h5X1A
ajPHzo
wqW~$y
Wl.@[
vd6*m^
G)_x>%
!*?+N&K]P
O}W0b{ls(k~
.S1Mtx
>oepE
*tK>*`[
ss_*7I
24ll;;L
$-]*{*)
XSV%&r
GyXIzv%
*v}tSY
:}f^4R
6w_l",
Yy1aq!
l8yD]o
zUyOcO
X&j%tc
~jE6l@
)"~"&U
>#xzk=T
:bLduw
c#}NCG
oUEjA
9(eJm"
$W~'dpr
5,<J]w
KZS`Lp
>XDJ~_
l-dHdm?
$U*_DA
["'$BT
0.ASa.
;&^,Ll
[vU>Tf
V_2;g_
8S]tc8
INDvC
]SUA(.q
_=IR+m
uR:du0
]ut^vp
rcBS''3#
_h^TSH
p1rKT^
?)@vH
C5D%`}
=bi';OJ
/H.14`3Y
@h8E@oa
4ud?B2
eX9hD7;
HA*Kf|
QOfJ(F
-8CE5%
OFfq9=
}'F/=6?
~O9OFT
CA@X"gI
]/n"ye%-
9+F\84
|=V*<sc#
SC#vP\
V&cTn;
UB)!}
e9b-$C
{c+>:-
cdrS1|
[P89\
*w;Q>&
Bbe.yzd"
lG8`$n
e9rhfT
4[M;u-h
/+/&`
o&iv|)
Rq>/Mgd9J$@U
\M'~k6a%
ujQf^KT
KV.X`L
~0b+$H
/9nfKq
<A4pa;
|rW#rC,9
>Q9|%];z
^D@Y\mu7
[=m8?s
Y^sD:y
Zr$1%3
1f0C34
d^iih1
uqcvCle
#9pzc&
V!;"S :!S <
9#L 3!R
<7"U!=
C<Q#=
T5(K$=
C:"O#;#V @)T
L2#JA
9"Q;"K
5#U"9-L#D(X
:(R'?!L
Bed yicexukuji budujugenolaxo habi. Tajayuladud hedova peyimibipef. Migu rov. Zefidodixo yototokeraluten zoy cipowerir. Rotiluci yehudoxabipibig hecesojuzap faxomos. Hute. Pimix ruyovucaso lilofohezomifib. Xudohazo vebak tukobirexu. Romove nijadokakowijoz wizokeyak guxayubusuwowub. Vizewalu jedonicawi xidibalevak pibi terisod. Zih zirud buzidowume niwafopinixofed. Dafowabah zamibafakoruja. Dolorugokuh padu dazegibifo. Pomivimejalowap fak kazesacofaxudex diduxugigomi fos. Vidupudotewiy fewuzewexuliy xeciluho yedufutoni zofoyonif. Hafoxuju petewinuda depurupatil puvenoduw. Hopahiku wafey cepevixep. Vope. Xujisu kebegavaba. Wosegagir. Rojuti yucimevug xeduxow bep kajapijus. Jaxuviziyurag hapiru. Wocaxuyamicote fonanarijep. Narajuz vuxozavocepor. Bojavededageji madan vuriya tiputaz. Lega musunex. Wac. Vorowon zanizek gubavageverapur liya. Buracu wusikocuhi bumizadon. Buzisamo bilazin. Kewifu wuyi rixobenale pulisiniwi gesuyojigebajel. Sefo. Jehop savapifacufatod cuzotagenan. Firosacahuna dito. Kipudarehuf. Wimow.
4"5'5,5S5\5
7&7h7m7
9\9w9|9
9(:-:2:o:{:
<"=.=[=`=e=
>.?:?g?l?q?
H0M0_0
0$101c1o1
183=3O3r3x3
7,757k7z7
888=8O8p8}8
8 969=9E9L9
9):/:=:G:w:
<$<<<1=<=F=
>:>W>t>
>&?+?0?J?
0&1-1d1
2"3>3I3p3u3z3
3=4B4G4N4
4p5'636
979G9S9n9~9
<!<9<B<O<
5%5G8Z8|8
=(>->?>b>
?-?4?@?G?i?o?
00$0*0/050>0E0L0a0h0m0s0z0
1@1g1o1v1}1
33C3I3P3j3
8%919a9f9k9
:";.;^;c;h;
4`:d:h:l:p:t:x:|:
; ;$;(;
=2=7=<=y=
2 2%2g2
4 4%4b4j4
66S6[6d6t6
7&7+7Y7t7
80999R9q9
<?<Y<v<{<
<2=O=T=u=
='>3>s>
?!?)?2?=?F?N?[?d?j?s?x?~?
0,0p0z0
1.1H1M1_1
2 2:2Z2
2@3L3b3t3
5(5l5x5
6)6C6T6
7#7(7>7G7P7`7l7
9b9g9l9
= =$=8===O=c=
>1>7>D>
>%?1?^?c?h?
0H1M1_1
3#3;3q3
4Y4K5|5
6,616w6
859A9q9v9{9
2T8X8\8`8d8h8l8p8t8x8|8
:5;A;q;v;{;
<+=7=g=l=q=
=H>O>^?e?
5%5M5T5
;$;T;Y;^;
<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<
=(=2=@=F=v=
>.>H>Q>[>
0-070V0
24292>2g2p2
7'7<7A7I7^7'8A8k8
:,:1:6:
; ;(;7;L;X;d;t;
>A>O>Y>`>
0.03080l0{0
646;6N6d6k6~6
8(8=9L9V9n9u9
:-:::G:T:h:m:
<!<8<=<O<
?$?(?,?0?4?8?<?@?
0(0/04080<0]0
0&1,1014181
2+20252Y2
3*3/353=3G3N3S3Y3d3n3u3~3
4#5+5j5s5
6$6Q6z6
61787e7
:=;E;r;
I0N0x0}0
0_1e1y1~1
3L3Q3V3
3?4s4x4}4
4e5j5o5
747h7w7
:%:*:0:
:$;0;<;A;F;v;{;
=!=[=`=e=
>$?I?}?
1'1,111
1(212[2`2e2
3F3K3P3(4
'4E4d4
555T5s5
6-6L6x6}6
7C7H7M7v7
969E9x9
:4:=:r:w:|:
;4<=<r<w<|<
%0Y0c0
3$4.4X4r5
5T6^6w6
6/787N7W7d7
8>8G8q8v8{8
<&<V<[<`<
>J>O>T>
?L?Q?V?
1P2W2.3
5B5G5L5'6
<<=@=D=H=L=P=T=X=\=`=d=h=l=p=
0&1+10181
2'2B2R2^2y2
5%6,6X6i6
6"7)7c7l7%919<:
040]0j0u0
8#8/888=8C8M8W8c8o8t8
:":L:Q:V:
060;0@0
14191>1
4\4d4+545^5c5h5
>=>B>G>
?/?4?9?
#0*0d0p0
20252:2u2}2
2>3G3q3v3{3N4Z4
3(6-6?687=7O7
<"<Z<_<d<
<#=r=}=
>)>X>d>j>
?#?)?4?>?E?N?U?
0H0M0_0t0x0
55L5U5
526;6e6j6o6
878<8A8z8
;X<]<o<
=,>D>K>S>X>\>`>
>:?@?D?H?L?
070i0p0t0x0|0
0U1[1`1w1
182=2O2
2"3:3C3x3}3
5E6N6v7
8"8*818:8A8J8Q8Y8`8i8o8u8{8
:(:.:h:z:
=#=-=q=
>/>=>l>
?3?9???r?
0$0/050D0L0]0g0p0v0
01e1j1o1
2G2M2^2c2h2n2t2
3B3P3c3h3m3r3x3
4$4P4X4l4~4
5I5Y5^5d5i5n5s5x5~5
L0T0\0d0l0t0|0
0$5(5,5
,4044484<4
L1`1d1h1t4x4|4
4X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
4(484<4
5(5H5P5\5
6 6@6`6
7 7<7@7\7`7
808<8D8P8p8x8
9$9(9D9H9d9h9x9
: :@:`:
7 7$7(7,7074787<7@7D7H7L7P7T7X7h7l7p7t7x7|7
<(=X=\=`=d=h=l=p=t=x=|=
Ajjjjjjj
jjjjjjjj
jjjjjjj
Ajjjjj
Ajjjjj
Ajjjjj
("Buffer too small", 0)
sizeInBytes > 0
_wctomb_s_l
f:\dd\vctools\crt_bld\self_x86\crt\src\wctomb.c
sizeInBytes <= INT_MAX
(string != NULL)
sprintf
f:\dd\vctools\crt_bld\self_x86\crt\src\sprintf.c
(format != NULL)
c(count == 0) || (string != NULL)
_vswprintf_helper
f:\dd\vctools\crt_bld\self_x86\crt\src\vswprint.c
string != NULL && sizeInWords > 0
format != NULL
_vsnwprintf_s_l
( (_Stream->_flag & _IOSTRG) || ( fn = _fileno(_Stream), ( (_textmode_safe(fn) == __IOINFO_TM_ANSI) && !_tm_unicode_safe(fn))))
f:\dd\vctools\crt_bld\self_x86\crt\src\puts.c
mscoree.dll
f:\dd\vctools\crt_bld\self_x86\crt\src\winsig.c
("Invalid signal or error", 0)
runtime error
TLOSS error
SING error
DOMAIN error
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
- abort() has been called
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
AMicrosoft Visual C++ Runtime Library
wcscat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), error_text)
wcscat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), L"\n\n")
wcsncpy_s(pch, progname_size - (pch - progname), L"...", 3)
<program name unknown>
wcscpy_s(progname, progname_size, L"<program name unknown>")
Runtime Error!
Program:
wcscpy_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), L"Runtime Error!\n\nProgram: ")
_NMSG_WRITE
f:\dd\vctools\crt_bld\self_x86\crt\src\crt0msg.c
Assertion Failed
Warning
Af:\dd\vctools\crt_bld\self_x86\crt\src\dbgrpt.c
Microsoft Visual C++ Debug Library
_CrtDbgReport: String too long or IO Error
wcscpy_s(szOutMessage, 4096, L"_CrtDbgReport: String too long or IO Error")
(*_errno())
Debug %s!
Program: %s%s%s%s%s%s%s%s%s%s%s%s
(Press Retry to debug the application)
Module:
File:
Line:
Expression:
For information on how your program can cause an assertion
failure, see the Visual C++ documentation on asserts.
memcpy_s(szShortProgName, sizeof(TCHAR) * (260 - (szShortProgName - szExeName)), dotdotdot, sizeof(TCHAR) * 3)
wcscpy_s(szExeName, 260, L"<program name unknown>")
__crtMessageWindowW
f:\dd\vctools\crt_bld\self_x86\crt\src\localref.c
((ptloci->lc_category[category].wlocale != NULL) && (ptloci->lc_category[category].wrefcount != NULL)) || ((ptloci->lc_category[category].wlocale == NULL) && (ptloci->lc_category[category].wrefcount == NULL))
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
KERNEL32.DLL
("inconsistent IOB fields", stream->_ptr - stream->_base >= 0)
f:\dd\vctools\crt_bld\self_x86\crt\src\_flsbuf.c
str != NULL
(null)
("'n' format specifier disabled", 0)
(ch != _T('\0'))
_output_l
f:\dd\vctools\crt_bld\self_x86\crt\src\output.c
(stream != NULL)
f:\dd\vctools\crt_bld\self_x86\crt\src\vsprintf.c
_vsnprintf_helper
string != NULL && sizeInBytes > 0
_vsprintf_s_l
_vsnprintf_s_l
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c
_CrtCheckMemory()
_pFirstBlock == pOldBlock
_pLastBlock == pOldBlock
fRealloc || (!fRealloc && pNewBlock == pOldBlock)
pOldBlock->nLine == IGNORE_LINE && pOldBlock->lRequest == IGNORE_REQ
_CrtIsValidHeapPointer(pUserData)
pUserData != NULL
_pFirstBlock == pHead
_pLastBlock == pHead
pHead->nBlockUse == nBlockUse
pHead->nLine == IGNORE_LINE && pHead->lRequest == IGNORE_REQ
_BLOCK_TYPE_IS_VALID(pHead->nBlockUse)
_msize_dbg
_CrtSetDbgFlag
(fNewBits==_CRTDBG_REPORT_FLAG) || ((fNewBits & 0x0ffff & ~(_CRTDBG_ALLOC_MEM_DF | _CRTDBG_DELAY_FREE_MEM_DF | _CRTDBG_CHECK_ALWAYS_DF | _CRTDBG_CHECK_CRT_DF | _CRTDBG_LEAK_CHECK_DF) ) == 0)
_CrtMemCheckpoint
state != NULL
_printMemBlockData
_woutput_l
((state == ST_NORMAL) || (state == ST_TYPE))
("Incorrect format specifier", 0)
_woutput_s_l
f:\dd\vctools\crt_bld\self_x86\crt\src\_sftbuf.c
flag == 0 || flag == 1
f:\dd\vctools\crt_bld\self_x86\crt\src\fwrite.c
("Inconsistent Stream Count. Flush between consecutive read and write", stream->_cnt >= 0)
num <= (SIZE_MAX / size)
(buffer != NULL)
_fwrite_nolock
c_fileno
f:\dd\vctools\crt_bld\self_x86\crt\src\fileno.c
strcpy_s(*env, cchars, p)
_setenvp
f:\dd\vctools\crt_bld\self_x86\crt\src\stdenvp.c
_set_error_mode
f:\dd\vctools\crt_bld\self_x86\crt\src\errmode.c
("Invalid error_mode", 0)
WUSER32.DLL
(L"Buffer is too small" && 0)
Buffer is too small
(L"String is not null terminated" && 0)
String is not null terminated
(((_Src))) != NULL
wcscat_s
f:\dd\vctools\crt_bld\self_x86\crt\src\tcscat_s.inl
((_Dst)) != NULL && ((_SizeInWords)) > 0
wcsncpy_s
f:\dd\vctools\crt_bld\self_x86\crt\src\tcsncpy_s.inl
wcscpy_s
f:\dd\vctools\crt_bld\self_x86\crt\src\tcscpy_s.inl
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrptt.c
_CrtDbgReport: String too long or Invalid characters in String
wcscpy_s(szOutMessage2, 4096, L"_CrtDbgReport: String too long or Invalid characters in String")
e = mbstowcs_s(&ret, szOutMessage2, 4096, szOutMessage, ((size_t)-1))
strcpy_s(szOutMessage, 4096, szLineMessage)
strcpy_s(szOutMessage, 4096, "_CrtDbgReport: String too long or IO Error")
strcat_s(szLineMessage, 4096, "\n")
strcat_s(szLineMessage, 4096, "\r")
strcat_s(szLineMessage, 4096, szUserMessage)
strcpy_s(szLineMessage, 4096, szFormat ? "Assertion failed: " : "Assertion failed!")
strcpy_s(szUserMessage, 4096, "_CrtDbgReport: String too long or IO Error")
_itoa_s(nLine, szLineMessage, 4096, 10)
_VCrtDbgReportA
wcstombs_s(&ret, szaOutMessage, 4096, szOutMessage, ((size_t)-1))
strcpy_s(szOutMessage2, 4096, "_CrtDbgReport: String too long or Invalid characters in String")
wcstombs_s(((void *)0), szOutMessage2, 4096, szOutMessage, ((size_t)-1))
wcscpy_s(szOutMessage, 4096, szLineMessage)
%s(%d) : %s
wcscat_s(szLineMessage, 4096, L"\n")
wcscat_s(szLineMessage, 4096, L"\r")
wcscat_s(szLineMessage, 4096, szUserMessage)
wcscpy_s(szLineMessage, 4096, szFormat ? L"Assertion failed: " : L"Assertion failed!")
Assertion failed!
Assertion failed:
wcscpy_s(szUserMessage, 4096, L"_CrtDbgReport: String too long or IO Error")
, Line
<file unknown>
Second Chance Assertion Failed: File
_itow_s(nLine, szLineMessage, 4096, 10)
_VCrtDbgReportW
sizeInBytes >= count
src != NULL
memcpy_s
f:\dd\vctools\crt_bld\self_x86\crt\src\memcpy_s.c
dst != NULL
f:\dd\vctools\crt_bld\self_x86\crt\src\malloc.h
("Corrupted pointer passed to _freea", 0)
((((( H
h(((( H
H
("Invalid file descriptor. File possibly closed by a different thread",0)
(_osfile(fh) & FOPEN)
_lseeki64
f:\dd\vctools\crt_bld\self_x86\crt\src\lseeki64.c
(fh >= 0 && (unsigned)fh < (unsigned)_nhandle)
_write
f:\dd\vctools\crt_bld\self_x86\crt\src\write.c
isleadbyte(_dbcsBuffer(fh))
((cnt & 1) == 0)
_write_nolock
(buf != NULL)
f:\dd\vctools\crt_bld\self_x86\crt\src\_getbuf.c
_isatty
f:\dd\vctools\crt_bld\self_x86\crt\src\isatty.c
_output_s_l
strcpy_s(szExeName, 260, "<program name unknown>")
__crtMessageWindowA
_expand_base
f:\dd\vctools\crt_bld\self_x86\crt\src\expand.c
pBlock != NULL
f:\dd\vctools\crt_bld\self_x86\crt\src\isctype.c
(unsigned)(c + 1) <= 256
f:\dd\vctools\crt_bld\self_x86\crt\src\mbtowc.c
_loc_update.GetLocaleT()->locinfo->mb_cur_max == 1 || _loc_update.GetLocaleT()->locinfo->mb_cur_max == 2
(str != NULL)
strcpy_s
((_Dst)) != NULL && ((_SizeInBytes)) > 0
G_mbstowcs_l_helper
f:\dd\vctools\crt_bld\self_x86\crt\src\mbstowcs.c
s != NULL
retsize <= sizeInWords
bufferSize <= INT_MAX
_mbstowcs_s_l
(pwcs == NULL && sizeInWords == 0) || (pwcs != NULL && sizeInWords > 0)
strcat_s
length < sizeInTChars
2 <= radix && radix <= 36
sizeInTChars > (size_t)(is_neg ? 2 : 1)
sizeInTChars > 0
xtoa_s
f:\dd\vctools\crt_bld\self_x86\crt\src\xtoa.c
buf != NULL
_wcstombs_l_helper
f:\dd\vctools\crt_bld\self_x86\crt\src\wcstombs.c
pwcs != NULL
sizeInBytes > retsize
_wcstombs_s_l
(dst != NULL && sizeInBytes > 0) || (dst == NULL && sizeInBytes == 0)
xtow_s
A_get_osfhandle
f:\dd\vctools\crt_bld\self_x86\crt\src\osfinfo.c
fclose
f:\dd\vctools\crt_bld\self_x86\crt\src\fclose.c
_fclose_nolock
(_osfile(filedes) & FOPEN)
_commit
f:\dd\vctools\crt_bld\self_x86\crt\src\commit.c
(filedes >= 0 && (unsigned)filedes < (unsigned)_nhandle)
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgdel.cpp
CONOUT$
_close
f:\dd\vctools\crt_bld\self_x86\crt\src\close.c
f:\dd\vctools\crt_bld\self_x86\crt\src\_freebuf.c
stream != NULL
f:\dd\vctools\crt_bld\self_x86\crt\prebuild\eh\typname.cpp
pNode->_Next != NULL
wutasehuluredewivunit
kernel32.dll
lmihekamutuvatikime
fatomifahegohofivonofijot
fiwolap
rinacorakocohamilozub ziyivusovujocatawu
gnimelemivorag yejicixumi petozahayamivarosire kapugenoxotef
PAMIFEGIHURULUFUKIYUVUWOGULOJOK
AFX_DIALOG_LAYOUT
VS_VERSION_INFO
055816E7
ProductVers
15.3.10.23
Version
23.8.20.17
VarFileInfo
Translation
Antivirus Signature
Bkav W32.AIDetect.malware1
Lionic Trojan.Win32.Malicious.4!c
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Fragtor.26727
ClamAV Clean
CMC Clean
CAT-QuickHeal Ransom.Stop.Z5
ALYac Gen:Variant.Ulise.303597
Cylance Unsafe
VIPRE Clean
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_100% (W)
BitDefender Gen:Variant.Fragtor.26727
K7GW Trojan ( 005882c11 )
K7AntiVirus Trojan ( 005882c11 )
BitDefenderTheta Gen:NN.ZexaF.34170.HuW@a0pxuqfO
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/Kryptik.HMQN
APEX Malicious
Paloalto generic.ml
Cynet Malicious (score: 100)
Kaspersky HEUR:Trojan-Ransom.Win32.Stop.gen
Alibaba Trojan:Win32/Raccrypt.2748e9b6
NANO-Antivirus Clean
SUPERAntiSpyware Clean
Avast FileRepMalware
Tencent Win32.Trojan.Agent.Pbfn
Ad-Aware Gen:Variant.Fragtor.26727
Sophos Mal/Generic-S
Comodo Clean
F-Secure Clean
DrWeb Trojan.DownLoader42.62977
Zillya Clean
TrendMicro Clean
FireEye Generic.mg.481bd2e89355de9a
Emsisoft Gen:Variant.Fragtor.26727 (B)
SentinelOne Static AI - Malicious PE
GData Gen:Variant.Fragtor.26727
Jiangmin Clean
Webroot Clean
Avira Clean
MAX malware (ai score=85)
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Arcabit Trojan.Fragtor.D6867
ViRobot Clean
ZoneAlarm HEUR:Trojan-Ransom.Win32.Stop.gen
Microsoft Trojan:Win32/Raccrypt.GY!MTB
AhnLab-V3 Clean
Acronis suspicious
VBA32 Malware-Cryptor.Azorult.gen
TACHYON Clean
Malwarebytes Trojan.MalPack
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002C0PIS21
Rising Trojan.Generic@ML.91 (RDML:CVHK5ZzLoyfxIuJ4KNE87g)
Yandex Clean
Ikarus Clean
eGambit Unsafe.AI_Score_93%
Fortinet W32/GenKryptik.FLGE!tr
AVG FileRepMalware
Panda Trj/GdSda.A
MaxSecure Clean
No IRMA results available.