Static | ZeroBOX

PE Compile Time

2020-11-02 10:18:08

PDB Path

C:\gecotaro wafuxahegun88-cicuyexul hohefu_mazi\pekewo\vakay\s.pdb

PE Imphash

33c707c2a415a475d1f7fd53625c54c8

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00024cc2 0x00024e00 6.2670451455
.data 0x00026000 0x026d8560 0x00010a00 7.79781507227
.rsrc 0x026ff000 0x00008b50 0x00008c00 5.70931528026
.reloc 0x02708000 0x00013eb4 0x00014000 0.903172953769

Resources

Name Offset Size Language Sub-language File type
RT_CURSOR 0x02706b20 0x000008a8 LANG_SERBIAN *unknown* dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_CURSOR 0x02706b20 0x000008a8 LANG_SERBIAN *unknown* dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_CURSOR 0x02706b20 0x000008a8 LANG_SERBIAN *unknown* dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_CURSOR 0x02706b20 0x000008a8 LANG_SERBIAN *unknown* dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_CURSOR 0x02706b20 0x000008a8 LANG_SERBIAN *unknown* dBase III DBT, version number 0, next free block index 40, 1st item "\251\317"
RT_ICON 0x027045d0 0x000010a8 LANG_SERBIAN *unknown* data
RT_ICON 0x027045d0 0x000010a8 LANG_SERBIAN *unknown* data
RT_ICON 0x027045d0 0x000010a8 LANG_SERBIAN *unknown* data
RT_ICON 0x027045d0 0x000010a8 LANG_SERBIAN *unknown* data
RT_ICON 0x027045d0 0x000010a8 LANG_SERBIAN *unknown* data
RT_ICON 0x027045d0 0x000010a8 LANG_SERBIAN *unknown* data
RT_ICON 0x027045d0 0x000010a8 LANG_SERBIAN *unknown* data
RT_STRING 0x02707a28 0x00000128 LANG_SERBIAN *unknown* data
RT_STRING 0x02707a28 0x00000128 LANG_SERBIAN *unknown* data
RT_STRING 0x02707a28 0x00000128 LANG_SERBIAN *unknown* data
RT_ACCELERATOR 0x027056a0 0x00000020 LANG_SERBIAN *unknown* data
RT_ACCELERATOR 0x027056a0 0x00000020 LANG_SERBIAN *unknown* data
RT_GROUP_CURSOR 0x027073c8 0x00000014 LANG_SERBIAN *unknown* data
RT_GROUP_CURSOR 0x027073c8 0x00000014 LANG_SERBIAN *unknown* data
RT_GROUP_CURSOR 0x027073c8 0x00000014 LANG_SERBIAN *unknown* data
RT_GROUP_ICON 0x02705678 0x00000022 LANG_SERBIAN *unknown* data
RT_GROUP_ICON 0x02705678 0x00000022 LANG_SERBIAN *unknown* data
RT_VERSION 0x027073e0 0x00000130 LANG_SERBIAN *unknown* data

Imports

Library KERNEL32.dll:
0x401000 LoadLibraryA
0x401004 lstrcatA
0x401008 GetComputerNameExA
0x401014 FindFirstVolumeA
0x40101c HeapUnlock
0x401024 WaitForSingleObject
0x401030 EnumResourceTypesA
0x401034 EnumResourceNamesW
0x401038 ExitProcess
0x40103c TerminateProcess
0x401040 ActivateActCtx
0x401044 GetVersionExW
0x401048 VerifyVersionInfoW
0x40104c SetConsoleOutputCP
0x401050 ResetEvent
0x401054 FindNextFileW
0x40105c CopyFileExA
0x401068 VerLanguageNameA
0x40106c _hread
0x401070 GetCommConfig
0x40107c CreateTimerQueue
0x401080 FindVolumeClose
0x401088 WriteConsoleInputA
0x40108c CancelWaitableTimer
0x401090 SetComputerNameExW
0x401094 FindAtomW
0x401098 ReleaseMutex
0x40109c LocalUnlock
0x4010a0 CallNamedPipeW
0x4010a8 VirtualProtect
0x4010ac LocalAlloc
0x4010b0 TlsSetValue
0x4010b4 GetCommandLineW
0x4010bc CopyFileA
0x4010c0 AddRefActCtx
0x4010c4 OutputDebugStringW
0x4010c8 FormatMessageA
0x4010cc GetPriorityClass
0x4010d4 GetUserDefaultLCID
0x4010d8 TerminateThread
0x4010dc GlobalUnfix
0x4010e0 HeapValidate
0x4010e4 _hwrite
0x4010ec GetStartupInfoW
0x4010f0 CreatePipe
0x4010f4 GetCPInfoExW
0x401100 GetLastError
0x401108 GetCalendarInfoW
0x40110c DebugBreak
0x401114 GetTickCount
0x40111c OpenFileMappingW
0x401120 ContinueDebugEvent
0x401128 CopyFileW
0x40112c SetMailslotInfo
0x401130 AddConsoleAliasA
0x401138 ReadConsoleInputW
0x40113c OutputDebugStringA
0x401144 DefineDosDeviceA
0x401158 EnumResourceNamesA
0x40115c GetThreadContext
0x401160 GetLongPathNameW
0x401168 LoadLibraryW
0x40116c EndUpdateResourceW
0x401170 WaitForDebugEvent
0x401174 ReadConsoleA
0x401178 WriteConsoleA
0x401190 GetDriveTypeW
0x40119c GetVolumePathNameA
0x4011a0 GetConsoleMode
0x4011a4 HeapSetInformation
0x4011a8 GetComputerNameA
0x4011b0 ReadProcessMemory
0x4011b4 MoveFileExW
0x4011bc GlobalFix
0x4011c0 WriteConsoleInputW
0x4011c4 GlobalDeleteAtom
0x4011d0 WaitNamedPipeW
0x4011d8 GetExitCodeProcess
0x4011e0 GetLocalTime
0x4011e4 EnumCalendarInfoExA
0x4011f0 OpenSemaphoreA
0x4011f4 GetMailslotInfo
0x4011f8 GetCommProperties
0x4011fc lstrcpyA
0x401200 HeapWalk
0x401204 LockFile
0x401208 EndUpdateResourceA
0x40120c GetConsoleCP
0x401210 GetConsoleAliasW
0x401218 GetProfileStringA
0x401220 AllocConsole
0x401228 CreateMailslotW
0x40122c SetCommState
0x401234 IsDebuggerPresent
0x40123c _lread
0x401244 GetWriteWatch
0x401248 GetModuleHandleA
0x401258 GetProfileStringW
0x40125c MoveFileA
0x401260 CreateActCtxW
0x401268 SetCommMask
0x401270 SetFileApisToANSI
0x401274 OpenWaitableTimerW
0x40127c PeekNamedPipe
0x401288 GetThreadPriority
0x40128c DeleteAtom
0x401290 AddAtomW
0x401298 QueryDosDeviceA
0x4012a0 GetBinaryTypeA
0x4012a4 RaiseException
0x4012a8 GetCommandLineA
0x4012ac GetStartupInfoA
0x4012b0 IsBadReadPtr
0x4012b8 GetModuleFileNameW
0x4012bc GetCurrentProcess
0x4012c8 GetModuleHandleW
0x4012cc Sleep
0x4012d0 GetProcAddress
0x4012d4 TlsGetValue
0x4012d8 TlsAlloc
0x4012dc GetCurrentThreadId
0x4012e0 TlsFree
0x4012e4 SetLastError
0x4012ec GetCurrentProcessId
0x4012f0 GetModuleFileNameA
0x4012f4 WideCharToMultiByte
0x4012fc SetHandleCount
0x401300 GetStdHandle
0x401304 GetFileType
0x401308 HeapDestroy
0x40130c HeapCreate
0x401310 HeapFree
0x401314 VirtualFree
0x401318 WriteFile
0x40131c HeapAlloc
0x401320 HeapSize
0x401324 HeapReAlloc
0x401328 VirtualAlloc
0x40132c GetACP
0x401330 GetOEMCP
0x401334 GetCPInfo
0x401338 IsValidCodePage
0x40133c RtlUnwind
0x401344 WriteConsoleW
0x401348 MultiByteToWideChar
0x40134c LCMapStringA
0x401350 LCMapStringW
0x401354 GetStringTypeA
0x401358 GetStringTypeW
0x40135c GetLocaleInfoA
0x401360 SetFilePointer
0x401364 SetStdHandle
0x401368 GetConsoleOutputCP
0x40136c CreateFileA
0x401370 CloseHandle
0x401374 FlushFileBuffers
Library USER32.dll:
0x40137c OemToCharW

!This program cannot be run in DOS mode.
`.data
@.reloc
bad allocation
fesagotoxiketewuvesunip
jafijulupisososotubexudubabawami
Zocudadomorekuf vil
fefijimuw
yexovunakudogekuzivuzisuvaj zukifuc mazesim torobebasidazoyekadora
Hakefomusi hucarek rejozokiruhuh kenedafa
Gemuzitiki bamuvuz
Migapihebaba vip makusi dutupobubijapu bed
ceyusajodipoxujuvezulowur
Werawoko modi vatuju
Zuvaxucefijahi
Totalive noviyalogi
Fuvavajojefow gur reb
nazarenko
Buwohakefux toje
bad allocation
Unknown exception
f:\dd\vctools\crt_bld\self_x86\crt\src\onexit.c
Client
Ignore
Normal
Error: memory allocation: bad memory block type.
Invalid allocation size: %Iu bytes.
Client hook allocation failure.
Client hook allocation failure at file %hs line %d.
Error: possible heap corruption at or near 0x%p
The Block at 0x%p was allocated by aligned routines, use _aligned_realloc()
Error: memory allocation: bad memory block type.
Memory allocated at %hs(%d).
Invalid allocation size: %Iu bytes.
Memory allocated at %hs(%d).
Client hook re-allocation failure.
Client hook re-allocation failure at file %hs line %d.
HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory after end of heap buffer.
HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory after end of heap buffer.
Memory allocated at %hs(%d).
HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory before start of heap buffer.
HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory before start of heap buffer.
Memory allocated at %hs(%d).
Client hook free failure.
The Block at 0x%p was allocated by aligned routines, use _aligned_free()
%hs located at 0x%p is %Iu bytes long.
%hs located at 0x%p is %Iu bytes long.
Memory allocated at %hs(%d).
HEAP CORRUPTION DETECTED: on top of Free block at 0x%p.
CRT detected that the application wrote to a heap buffer that was freed.
HEAP CORRUPTION DETECTED: on top of Free block at 0x%p.
CRT detected that the application wrote to a heap buffer that was freed.
Memory allocated at %hs(%d).
DAMAGED
_heapchk fails with unknown return value!
_heapchk fails with _HEAPBADPTR.
_heapchk fails with _HEAPBADEND.
_heapchk fails with _HEAPBADNODE.
_heapchk fails with _HEAPBADBEGIN.
Bad memory block found at 0x%p.
Bad memory block found at 0x%p.
Memory allocated at %hs(%d).
Object dump complete.
crt block at 0x%p, subtype %x, %Iu bytes long.
normal block at 0x%p, %Iu bytes long.
client block at 0x%p, subtype %x, %Iu bytes long.
{%ld}
%hs(%d) :
#File Error#(%d) :
Dumping objects ->
Data: <%s> %s
Detected memory leaks!
f:\dd\vctools\crt_bld\self_x86\crt\src\mlock.c
CorExitProcess
EncodePointer
DecodePointer
f:\dd\vctools\crt_bld\self_x86\crt\src\tidtable.c
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
f:\dd\vctools\crt_bld\self_x86\crt\src\stdenvp.c
f:\dd\vctools\crt_bld\self_x86\crt\src\stdargv.c
f:\dd\vctools\crt_bld\self_x86\crt\src\a_env.c
f:\dd\vctools\crt_bld\self_x86\crt\src\ioinit.c
runtime error
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library without using a manifest.
This is an unsupported way to load Visual C++ DLLs. You need to modify your application to build with a manifest.
For more information, see the "Visual C++ Libraries as Shared Side-by-Side Assemblies" topic in the product documentation.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point support not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
Assertion Failed
Warning
Microsoft Visual C++ Debug Library
_CrtDbgReport: String too long or IO Error
Debug %s!
Program: %s%s%s%s%s%s%s%s%s%s%s%s
(Press Retry to debug the application)
Module:
File:
Line:
Expression:
For information on how your program can cause an assertion
failure, see the Visual C++ documentation on asserts.
HeapQueryInformation
f:\dd\vctools\crt_bld\self_x86\crt\src\mbctype.c
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
%s(%d) : %s
Assertion failed!
Assertion failed:
, Line
<file unknown>
Second Chance Assertion Failed: File
_CrtDbgReport: String too long or Invalid characters in String
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
GetUserObjectInformationA
MessageBoxA
USER32.DLL
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
(null)
`h````
xpxxxx
f:\dd\vctools\crt_bld\self_x86\crt\src\output.c
bad exception
f:\dd\vctools\crt_bld\self_x86\crt\src\convrtcp.c
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
f:\dd\vctools\crt_bld\self_x86\crt\src\_getbuf.c
f:\dd\vctools\crt_bld\self_x86\crt\src\_file.c
`h`hhh
xppwpp
Unknown Runtime Check Error
Stack memory around _alloca was corrupted
A local variable was used before it was initialized
Stack memory was corrupted
A cast to a smaller data type has caused a loss of data. If this was intentional, you should mask the source of the cast with the appropriate bitmask. For example:
char c = (i & 0xFF);
Changing the code in this way will not affect the quality of the resulting optimized code.
The value of ESP was not properly saved across a function call. This is usually a result of calling a function declared with one calling convention with a function pointer declared with a different calling convention.
Stack around the variable '
' was corrupted.
The variable '
' is being used without being initialized.
CONOUT$
MSPDB80.DLL
Stack around _alloca corrupted
Local variable used before initialization
Stack memory corruption
Cast to smaller type causing loss of data
Stack pointer corruption
RSDSQ9u
C:\gecotaro wafuxahegun88-cicuyexul hohefu_mazi\pekewo\vakay\s.pdb
D$Hcjs.
D$TSFEh
D$d*/0^
l$(.Kgz
l$@pf$G
T$,u/j
$Pj@QR
SUVWu!j
L$,QRRR
D$ PQQQ
D$ PQQQ
D$tPhD
u%h`!@
QhX"@
u!hh$@
u!hp&@
jXh@)@
u;hp?@
jDhxB@
URPQQhxKA
u!hpV@
u!hX[@
PPPPPPPP
PPPPPPPP
jdhhe@
jph`h@
jph`h@
jsh`h@
jsh`h@
u!h`i@
u!h0i@
u!h`i@
u!h0i@
;t$,v-
UQPXY]Y[
jEh0j@
jEh0j@
u!h k@
jfh8m@
jfh8m@
u!hPB@
u!h0o@
u!h0i@
}'hXeC
u!h8p@
u!hHr@
j)h(t@
j)h(t@
u!hPB@
u!hPu@
u!hPB@
u!hPu@
jGhpw@
u!hxq@
jdhhe@
j/hh}@
j/hh}@
jZhh}@
jZhh}@
j,h0~@
j,h0~@
j-h0~@
j-h0~@
jEh0~@
LoadLibraryA
lstrcatA
GetComputerNameExA
WriteProfileSectionA
GetNumaProcessorNode
FindFirstVolumeA
SetConsoleCursorInfo
HeapUnlock
FindFirstChangeNotificationA
WaitForSingleObject
GetNamedPipeHandleStateW
FileTimeToDosDateTime
EnumResourceTypesA
EnumResourceNamesW
ExitProcess
TerminateProcess
ActivateActCtx
GetVersionExW
VerifyVersionInfoW
SetConsoleOutputCP
ResetEvent
FindNextFileW
GetCompressedFileSizeA
CopyFileExA
ReadConsoleOutputCharacterA
GetDefaultCommConfigW
VerLanguageNameA
_hread
GetCommConfig
WritePrivateProfileStructA
FreeEnvironmentStringsW
CreateTimerQueue
FindVolumeClose
LeaveCriticalSection
WriteConsoleInputA
CancelWaitableTimer
SetComputerNameExW
FindAtomW
ReleaseMutex
LocalUnlock
CallNamedPipeW
BuildCommDCBAndTimeoutsA
VirtualProtect
LocalAlloc
TlsSetValue
GetCommandLineW
InterlockedIncrement
CopyFileA
AddRefActCtx
OutputDebugStringW
FormatMessageA
GetPriorityClass
WritePrivateProfileStringW
GetUserDefaultLCID
TerminateThread
GlobalUnfix
HeapValidate
_hwrite
GetWindowsDirectoryA
GetStartupInfoW
CreatePipe
GetCPInfoExW
GetSystemWindowsDirectoryA
GetSystemWow64DirectoryA
GetLastError
WriteProfileSectionW
GetCalendarInfoW
DebugBreak
GetConsoleCursorInfo
GetTickCount
DeleteVolumeMountPointA
OpenFileMappingW
ContinueDebugEvent
GetSystemWindowsDirectoryW
CopyFileW
SetMailslotInfo
AddConsoleAliasA
GetPrivateProfileIntW
ReadConsoleInputW
OutputDebugStringA
InterlockedDecrement
DefineDosDeviceA
SetVolumeMountPointA
SetThreadAffinityMask
SetConsoleActiveScreenBuffer
SetProcessAffinityMask
EnumResourceNamesA
GetThreadContext
GetLongPathNameW
SetConsoleTextAttribute
LoadLibraryW
EndUpdateResourceW
WaitForDebugEvent
ReadConsoleA
WriteConsoleA
InterlockedFlushSList
WritePrivateProfileSectionA
GetPrivateProfileStructA
DeleteCriticalSection
GetPrivateProfileSectionNamesA
GetDriveTypeW
GetFileAttributesExA
LocalFileTimeToFileTime
GetVolumePathNameA
GetConsoleMode
HeapSetInformation
GetComputerNameA
ProcessIdToSessionId
ReadProcessMemory
MoveFileExW
DisableThreadLibraryCalls
GlobalFix
WriteConsoleInputW
GlobalDeleteAtom
GetEnvironmentStrings
InterlockedExchangeAdd
WaitNamedPipeW
GetPrivateProfileStructW
GetExitCodeProcess
GetSystemTimeAsFileTime
GetLocalTime
EnumCalendarInfoExA
FreeEnvironmentStringsA
CreateIoCompletionPort
OpenSemaphoreA
GetMailslotInfo
GetCommProperties
lstrcpyA
HeapWalk
LockFile
EndUpdateResourceA
GetConsoleCP
GetConsoleAliasW
GetNumberOfConsoleInputEvents
GetProfileStringA
GetQueuedCompletionStatus
AllocConsole
GetNumaNodeProcessorMask
CreateMailslotW
SetCommState
FileTimeToLocalFileTime
IsDebuggerPresent
GetSystemTimeAdjustment
_lread
GetConsoleAliasExesLengthA
GetWriteWatch
GetModuleHandleA
GetPrivateProfileStringA
ReadConsoleOutputAttribute
GetFileInformationByHandle
GetProfileStringW
MoveFileA
CreateActCtxW
GetSystemDefaultUILanguage
SetCommMask
SetMessageWaitingIndicator
SetFileApisToANSI
OpenWaitableTimerW
GetProcessShutdownParameters
PeekNamedPipe
FillConsoleOutputCharacterW
FindNextVolumeMountPointA
GetThreadPriority
DeleteAtom
AddAtomW
WriteConsoleOutputCharacterW
QueryDosDeviceA
GetConsoleAliasExesW
GetBinaryTypeA
KERNEL32.dll
OemToCharW
USER32.dll
RaiseException
GetCommandLineA
GetStartupInfoA
IsBadReadPtr
EnterCriticalSection
GetModuleFileNameW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
GetCurrentThreadId
TlsFree
SetLastError
QueryPerformanceCounter
GetCurrentProcessId
GetModuleFileNameA
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
SetStdHandle
GetConsoleOutputCP
CreateFileA
CloseHandle
FlushFileBuffers
ej"#a^{s
UphBQ"
cbms0x7
JD.V-?|O
U2k)t4
O/x4kI
Je}-m\
l>"H!Z
e(*xs?%w
%uTM55Q^
B@_))@!z
3J;=gD;NZ
'OX.C\
afM3_5_
mY*&Cd
'wM{>'
UdL P|
T.7\*b%
C],,jjH
`:3/zE
N0KUeD7
7("[.cA
Qt{A(C
Sw5]lWo
IV|~@n
%:esvNr/
3*IdV^
^v84H
^v84H
^v84H
4 {}!-
5F8)8tb!
YZz(.wX
>*3b4 d
U~/(3#
8x>pC*
d|^SU9
8Zgf>
gPEX0G
mX0}2[M7
EKxu?z}
g`A$#"\,
3$Xzz
'0@@vqP8'M
QP~)EC
9.VFIg
1??zCoe
1L}OX{
QnAVM#
i[g`lF
}_pCf6
3DK0&@Sj
f0,/R`
CYnY[
Sr~{ye
^7B'j#
dGMEE7
~(#@dc
x?{i r
7|>1$X
$8Y)"7
0a~Ks #
J&tByu$]
>q;YH}!
V;D@9s
o>\ :
VRJiS3
9?V>10MN
gEulY0
J>2tig
7!clh"
0hd=rnp)2
F#RwM~&
(PW:cP@8
H$VfcdS
nCz1kk
.T$G*r
^HG7]v
G?s?)hn,
6W)yHr
9_<;<X|
5&oNsB*
d)qLY{%
/DwSyL/.
4`c1_|
q}G5Y!::
.Q2K'+Z
+8Vm4N
.e@N}0%LM
QhP[Qq{
0R.{@
`dk;;O[B
lcC<{
LQ~;VS
:tYXcO
o"8iw
[.B{cM
J3 5"A)
t+#\\G
zQJ+,}H
Fs]:Qj
|3spF>
--Vq#K
(+.b"_
~0^y_Q
2:diAi
:eVym)
$,=bWs7
'=U.()
.?AVexception@std@@
.?AVtype_info@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVbad_exception@std@@
========8
nnnnnyyy`-
|||||||||
;;;;;;
;>>>>>>>>
)Wx|)|
-Mig,~
(Zyd&HM/
31{||-
0q|~)F_U*_~}+
'196.q
5$=ZD3
=U4$d
,b~}+c
%=R/%IfL*Nk`-Yy
jHn}UW
*Tw~49{
:Jq|d*
.BVrI8
25eeO1
'ERkM0
?QmO;
'\{Q*L
:@Yzbm
65V~hb|
,"GkkX|
.?G7Bbz`:e~
Q#:(M!
=%S!:"O$
D"P&C$S
;"L"6"S
C$Q?"X
67U$A%W
;< V#>
=&W:N!
D?$X 8#P
Q:'R":"Q
E=!P$?$W B)O#
'="Q=
~4B'P
P C'N!
9&Q!9#N
;$U#7+O"B&Z
8&N A U A*UA-P
\N`$i]mLSB`]f[nMf[qO
Gi^oKVAa[_QiW^PgTQ@^\c\oJ
4RTk*=X
Weq{3@%P
Ngvx0;#N
OTUk1>"T
9?!W!?%W
Pjnt4D!O
9SNj ZWm
O\p<=#R
]\o<8$Q
H]NiUQFa]RBcY
X:\:`:
0<4<8<
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
;D=H=L=P=T=
<0@0H0L0P0T0
1$1(101H1X1\1l1p1t1|1
2 2'2,22292
0!1-131V1y1
22)2?2L2h2
3C3I3r3
3!424@4J4T4\4x4
5!515Y5e5
6!6(6/656;6@6N6U6\6c6j6q6x6
7 7&7?7N7_7
7#838E8x8
99%9/9B9b9
:,:M:_:i:u:{:
;+;3;9;?;Y;d;
< <1<=<B<H<N<^<j<o<t<z<
="=<=B=R=`=p=v=|=
>#>+>=>I>\>f>p>}>
?+?0???D?I?g?y?
0"000:0B0L0V0b0m0u0
1'1,121D1
889=9O9y9
=$=4=@=V=b=k=p=y=
>3?>?G?O?X?`?f?l?t?z?
3?3Y3v3{3
324O4T4u4
4'535s5
6!6)626=6F6N6[6d6j6s6x6~6
6 7,7p7z7
8.8H8M8_8
9 9:9Z9
9@:L:b:t:
<(<l<x<
=)=C=T=
>#>(>>>G>P>`>l>
0r0w0|0
3(4,40444H4M4_4s4
5+5A5G5T5
6+626H6M6_6
1H1q1z1
2"3,3u3~3
5V5c5p5}5
6+6T6k6
6K7r7y7
7 8`8p8u8z8
:.:>:J:v:
;I;N;S;
353r3|3
4#4+4C4
5M5\5e5
6!6+6:6>6D6K6h6m6
7.8i8o8}8
:!:*:1:8:H:^:h:
;!;(;8;N;X;
<%<*</<9<><C<M<R<W<a<f<l<u<~<
=)=.=<=V=\=l=r=
>'>1>:>A>G>h>m>
1T2]263<3h3s3
7&8J8Y8n8s8x8
9%9-9:9F9
=:>J>k>
>1?R?t?
090?0S0*1=1Y1n1s1{1
444;4N4d4k4~4
6 6?6S6^6w6
7O7T7Y7`7
8)878x8}8
;.;3;8;=;
;&<2<Q<k<w<
=1=M=Y=i=u=
>A>F>K>P>w>
??E?N?x?}?
T0[0j0
01191?1M1W1e1k1z1
585x5}5
6%646S6Z6i6
6!7(727}7
=(=3=:=C=L=U=f=u=
>!>*>;>A>I>R>j>s>
?:?l?x?
M3X3`3
3%4C4J4p4x495]<m<
H1M1_1
1X2]2o2
2"303Y3n3
4:4B4I4S4W4`4r4|4
535C5M5r5|5
1(1D1`1|1
262R2n2
2)3A3X3]3o3
:$:(:,:0:4:8:<:@:
<I<X<]<o<
>#>K>Q>l>y>~>
?"?X?]?b?g?
*0;0@0E0J0s0x0}0
1S1X1]1b1
272<2A2F2i2r2
4D4K4U4g4q4
5H5M5f53696M6R6W6
6B7G7L7
8 8T8e8j8o8t8
9=9B9G9}9
:L:Q:V:[:~:
<0<A<H<
<8=?=z=
=>>D>y>
?*?G?d?
2^2j2p2
3%33393D3N3`3
425;5e5j5o5
6:7C7m7r7w7
818Z8c8
::8:D;W;v;
;H<M<_<v<
>H>Q>{>
> ?%?/?=?B?L?Z?_?i?}?
30>0a0l0
0$1)1.1q1y1
5"5'5f5n5
6D6I6N6
9 9$9M9s9
:-;4;8;<;@;D;H;L;P;
11+161r1{1-2
5b6n6J7X7`7j7v7
='=F=e=
1+242^2c2h2
4;4@4E4n4
585=5B5
62676<6
:":(:.:4:::A:H:O:V:]:d:k:s:{:
>I?R?|?
J0r0b1
4-595f5k5p5{6
8#8M8R8W8!9-9Z9_9d9
::I:N:S:|;
?=?B?G?
0/04090
0#1*1d1p1
3#3M3R3W3
4*434]4b4g4
5>5G5q5v5{5
516=6j6o6t6
9;9@9E9
;G;L;Q;
=0=5=:=u=}=
=>>G>q>v>{>N?Z?
,0=0j001:1`4m4z7
00x2}2
8(9-9?9
9&:>:G:|:
;(<F<h<m<
<"='=,=R=j=s=
>"?'?,?R?
0 171C1i1
;-;:;@;`;v;
<6<?<r<
=7>Y>b>
>,?5?_?d?i?
060;0@0
021;1e1j1o1
464;4@4
5*6/646
6,71767
<"='=,=
4 5$5(5,5054585<5@5D5H5L5P5T5l5p5t5x5|5
8K8T8~8
>;?G?w?|?
X0_0n1u1
7.=:=j=o=t=
> >T>X>\>`>d>h>l>p>t>x>|>
m0v0A1
6%616X6d6p6
7&7^7c7h7
888=8O8t8
9G9R9i9t9}9
:2:9:b:
:(;-;?;
>3>S>o>
2,353_3d3i3
4E4J4O4
5F5i5r5
6!6Z6w6
8#8X8]8b8
000P0l0p0x0|0
181X1x1
2$2@2L2d2h2
3(3H3P3\3
4$4@4\4`4|4
5 5(5,5H5P5T5l5p5
5(6H6P6\6
=$=,=4=<=D=L=T=\=d=l=t=|=
2@3P3`3p3
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
50545T5X5
686@6H9
cumerabugudozohuvimodevawogur
relapabibacel
Dam bimupazub
Caxigogukuc zupafucazo yix
yuyabame
Ruwetidoti muwesigucutubib
Nidesir xefojicepifih maturobo
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgdel.cpp
_BLOCK_TYPE_IS_VALID(pHead->nBlockUse)
f:\dd\vctools\crt_bld\self_x86\crt\src\feoferr.c
(stream != NULL)
ferror
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgheap.c
_CrtCheckMemory()
_calloc_dbg_impl
(_HEAP_MAXREQ / nNum) >= nSize
_pFirstBlock == pOldBlock
_pLastBlock == pOldBlock
fRealloc || (!fRealloc && pNewBlock == pOldBlock)
pOldBlock->nLine == IGNORE_LINE && pOldBlock->lRequest == IGNORE_REQ
_CrtIsValidHeapPointer(pUserData)
pUserData != NULL
_pFirstBlock == pHead
_pLastBlock == pHead
pHead->nBlockUse == nBlockUse
pHead->nLine == IGNORE_LINE && pHead->lRequest == IGNORE_REQ
_msize_dbg
_CrtSetDbgFlag
(fNewBits==_CRTDBG_REPORT_FLAG) || ((fNewBits & 0x0ffff & ~(_CRTDBG_ALLOC_MEM_DF | _CRTDBG_DELAY_FREE_MEM_DF | _CRTDBG_CHECK_ALWAYS_DF | _CRTDBG_CHECK_CRT_DF | _CRTDBG_LEAK_CHECK_DF) ) == 0)
_CrtMemCheckpoint
state != NULL
(*_errno())
_printMemBlockData
(L"Buffer is too small" && 0)
Buffer is too small
(((_Src))) != NULL
strcpy_s
f:\dd\vctools\crt_bld\self_x86\crt\src\tcscpy_s.inl
((_Dst)) != NULL && ((_SizeInBytes)) > 0
f:\dd\vctools\crt_bld\self_x86\crt\prebuild\eh\typname.cpp
pNode->next != NULL
Assertion Failed
Warning
f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrpt.c
Microsoft Visual C++ Debug Library
_CrtDbgReport: String too long or IO Error
wcscpy_s(szOutMessage, 4096, L"_CrtDbgReport: String too long or IO Error")
Debug %s!
Program: %s%s%s%s%s%s%s%s%s%s%s%s
(Press Retry to debug the application)
Module:
File:
Line:
Expression:
For information on how your program can cause an assertion
failure, see the Visual C++ documentation on asserts.
memcpy_s(szShortProgName, sizeof(TCHAR) * (260 - (szShortProgName - szExeName)), dotdotdot, sizeof(TCHAR) * 3)
<program name unknown>
wcscpy_s(szExeName, 260, L"<program name unknown>")
__crtMessageWindowW
mscoree.dll
KERNEL32.DLL
strcpy_s(*env, cchars, p)
_setenvp
f:\dd\vctools\crt_bld\self_x86\crt\src\stdenvp.c
strcat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), rterrs[tblindx].rterrtxt)
strcat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), "\n\n")
strncpy_s(pch, progname_size - (pch - progname), "...", 3)
strcpy_s(progname, progname_size, "<program name unknown>")
strcpy_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), "Runtime Error!\n\nProgram: ")
_NMSG_WRITE
f:\dd\vctools\crt_bld\self_x86\crt\src\crt0msg.c
strcpy_s(szOutMessage, 4096, "_CrtDbgReport: String too long or IO Error")
strcpy_s(szExeName, 260, "<program name unknown>")
__crtMessageWindowA
_expand_base
f:\dd\vctools\crt_bld\self_x86\crt\src\expand.c
pBlock != NULL
kernel32.dll
f:\dd\vctools\crt_bld\self_x86\crt\src\setlocal.c
((ptloci->lc_category[category].wlocale != NULL) && (ptloci->lc_category[category].wrefcount != NULL)) || ((ptloci->lc_category[category].wlocale == NULL) && (ptloci->lc_category[category].wrefcount == NULL))
(format != NULL)
f:\dd\vctools\crt_bld\self_x86\crt\src\isctype.c
(unsigned)(c + 1) <= 256
@f:\dd\vctools\crt_bld\self_x86\crt\src\dbgrptt.c
_CrtDbgReport: String too long or Invalid characters in String
wcscpy_s(szOutMessage2, 4096, L"_CrtDbgReport: String too long or Invalid characters in String")
e = mbstowcs_s(&ret, szOutMessage2, 4096, szOutMessage, ((size_t)-1))
strcpy_s(szOutMessage, 4096, szLineMessage)
strcat_s(szLineMessage, 4096, "\n")
strcat_s(szLineMessage, 4096, "\r")
strcat_s(szLineMessage, 4096, szUserMessage)
strcpy_s(szLineMessage, 4096, szFormat ? "Assertion failed: " : "Assertion failed!")
strcpy_s(szUserMessage, 4096, "_CrtDbgReport: String too long or IO Error")
_itoa_s(nLine, szLineMessage, 4096, 10)
_VCrtDbgReportA
wcstombs_s(&ret, szaOutMessage, 4096, szOutMessage, ((size_t)-1))
strcpy_s(szOutMessage2, 4096, "_CrtDbgReport: String too long or Invalid characters in String")
wcstombs_s(((void *)0), szOutMessage2, 4096, szOutMessage, ((size_t)-1))
wcscpy_s(szOutMessage, 4096, szLineMessage)
%s(%d) : %s
wcscat_s(szLineMessage, 4096, L"\n")
wcscat_s(szLineMessage, 4096, L"\r")
wcscat_s(szLineMessage, 4096, szUserMessage)
wcscpy_s(szLineMessage, 4096, szFormat ? L"Assertion failed: " : L"Assertion failed!")
Assertion failed!
Assertion failed:
wcscpy_s(szUserMessage, 4096, L"_CrtDbgReport: String too long or IO Error")
, Line
<file unknown>
Second Chance Assertion Failed: File
_itow_s(nLine, szLineMessage, 4096, 10)
_VCrtDbgReportW
f:\dd\vctools\crt_bld\self_x86\crt\src\winsig.c
("Invalid signal or error", 0)
WUSER32.DLL
sizeInBytes >= count
src != NULL
memcpy_s
f:\dd\vctools\crt_bld\self_x86\crt\src\memcpy_s.c
dst != NULL
wcscpy_s
((_Dst)) != NULL && ((_SizeInWords)) > 0
_set_error_mode
f:\dd\vctools\crt_bld\self_x86\crt\src\errmode.c
("Invalid error_mode", 0)
(L"String is not null terminated" && 0)
String is not null terminated
strcat_s
f:\dd\vctools\crt_bld\self_x86\crt\src\tcscat_s.inl
strncpy_s
f:\dd\vctools\crt_bld\self_x86\crt\src\tcsncpy_s.inl
f:\dd\vctools\crt_bld\self_x86\crt\src\malloc.h
("Corrupted pointer passed to _freea", 0)
((((( H
h(((( H
H
("inconsistent IOB fields", stream->_ptr - stream->_base >= 0)
f:\dd\vctools\crt_bld\self_x86\crt\src\_flsbuf.c
str != NULL
(null)
("'n' format specifier disabled", 0)
(ch != _T('\0'))
( (_Stream->_flag & _IOSTRG) || ( fn = _fileno(_Stream), ( (_textmode_safe(fn) == __IOINFO_TM_ANSI) && !_tm_unicode_safe(fn))))
f:\dd\vctools\crt_bld\self_x86\crt\src\output.c
f:\dd\vctools\crt_bld\self_x86\crt\src\vsprintf.c
(count == 0) || (string != NULL)
_vsnprintf_helper
("Buffer too small", 0)
string != NULL && sizeInBytes > 0
_vsprintf_s_l
format != NULL
_vsnprintf_s_l
_mbstowcs_l_helper
f:\dd\vctools\crt_bld\self_x86\crt\src\mbstowcs.c
s != NULL
retsize <= sizeInWords
bufferSize <= INT_MAX
_mbstowcs_s_l
(pwcs == NULL && sizeInWords == 0) || (pwcs != NULL && sizeInWords > 0)
length < sizeInTChars
2 <= radix && radix <= 36
sizeInTChars > (size_t)(is_neg ? 2 : 1)
sizeInTChars > 0
xtoa_s
f:\dd\vctools\crt_bld\self_x86\crt\src\xtoa.c
buf != NULL
_wcstombs_l_helper
f:\dd\vctools\crt_bld\self_x86\crt\src\wcstombs.c
pwcs != NULL
sizeInBytes > retsize
_wcstombs_s_l
(dst != NULL && sizeInBytes > 0) || (dst == NULL && sizeInBytes == 0)
wcscat_s
_vswprintf_helper
f:\dd\vctools\crt_bld\self_x86\crt\src\vswprint.c
string != NULL && sizeInWords > 0
_vsnwprintf_s_l
xtow_s
("Invalid file descriptor. File possibly closed by a different thread",0)
(_osfile(fh) & FOPEN)
_lseeki64
f:\dd\vctools\crt_bld\self_x86\crt\src\lseeki64.c
(fh >= 0 && (unsigned)fh < (unsigned)_nhandle)
_write
f:\dd\vctools\crt_bld\self_x86\crt\src\write.c
isleadbyte(_dbcsBuffer(fh))
((cnt & 1) == 0)
_write_nolock
(buf != NULL)
f:\dd\vctools\crt_bld\self_x86\crt\src\_getbuf.c
_isatty
f:\dd\vctools\crt_bld\self_x86\crt\src\isatty.c
_fileno
f:\dd\vctools\crt_bld\self_x86\crt\src\fileno.c
sizeInBytes > 0
_wctomb_s_l
f:\dd\vctools\crt_bld\self_x86\crt\src\wctomb.c
sizeInBytes <= INT_MAX
((state == ST_NORMAL) || (state == ST_TYPE))
("Incorrect format specifier", 0)
_output_s_l
ibase == 0 || (2 <= ibase && ibase <= 36)
strtoxl
f:\dd\vctools\crt_bld\self_x86\crt\src\strtol.c
nptr != NULL
_woutput_s_l
f:\dd\vctools\crt_bld\self_x86\crt\src\mbtowc.c
_loc_update.GetLocaleT()->locinfo->mb_cur_max == 1 || _loc_update.GetLocaleT()->locinfo->mb_cur_max == 2
(str != NULL)
_get_osfhandle
f:\dd\vctools\crt_bld\self_x86\crt\src\osfinfo.c
@fclose
f:\dd\vctools\crt_bld\self_x86\crt\src\fclose.c
_fclose_nolock
(_osfile(filedes) & FOPEN)
_commit
f:\dd\vctools\crt_bld\self_x86\crt\src\commit.c
(filedes >= 0 && (unsigned)filedes < (unsigned)_nhandle)
_close
f:\dd\vctools\crt_bld\self_x86\crt\src\close.c
f:\dd\vctools\crt_bld\self_x86\crt\src\_freebuf.c
stream != NULL
@jjjjjjj
@jjjjj
jjjjjjj
@jjjjjj
jjjjjj
@jjjjj
@jjjjj
@jjjjjj
/ P6pL
,/KPip
/-P?pR
VS_VERSION_INFO
050914D4
ProductVers
1.25.42.91
Version
93.48.81.34
VarFileInfo
Translations
Kebuzu tupohi
-Folubajos yifurodo xobohanez jigof sibehenira$Fagaroralosuto xavogipunili rukonebo
SovositebesayawYLitoh zeremofimo dukugenibiloyun pavi binomem rah voyepatezosoxa ledegabarun copivilupepu
CMoki daheho yivuteyazim yahofum fibi pefuremo vuhocaha bipatejinewo!Zuxevomope xazedu retayogewugakuf
GTihawokexuc munajodayazob yabocitized fimoj tubadusu sojogu sinobigukeg[Vuvegeronekec tevukewabewu vayih zofesi soway zocixelituf peyulimun sepobenovo hozomil fixuQJukofumef ninisebob cagirolepu tiyasafiho vifov yohewu coyeluf popajutak vadaboxeMSigohapexetihip lelawihevo kudecaridu kotmaja loxopah gikusej sutuvalemavoyfo8Ray xafejimeferi cukiculuf sipa gobikebic cof salir pafuLHekolutopu xosey pitiyadaw wufo palagodukajejos gekeyexuhadohu kakikexesovax
Antivirus Signature
Bkav W32.AIDetect.malware1
Lionic Clean
Elastic malicious (high confidence)
Cynet Malicious (score: 100)
FireEye Generic.mg.74237f2f009020c7
CAT-QuickHeal Clean
ALYac Clean
Cylance Unsafe
Zillya Clean
Sangfor Trojan.Win32.Save.a
K7AntiVirus Clean
BitDefender Clean
K7GW Clean
Cybereason malicious.4e3dde
Arcabit Clean
Baidu Win32.Trojan.Kryptik.jm
VirIT Clean
Cyren W32/Injuke.O.gen!Eldorado
Symantec ML.Attribute.HighConfidence
ESET-NOD32 Clean
APEX Malicious
Paloalto Clean
ClamAV Win.Dropper.Generickdz-9939781-0
Kaspersky VHO:Trojan-PSW.Win32.Convagent.gen
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Clean
Rising Malware.Obscure/Heur!1.9E03 (CLASSIC)
Ad-Aware Clean
Sophos ML/PE-A + Troj/Krypt-FV
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win32.Packed.fm
Trapmine suspicious.low.ml.score
CMC Clean
Emsisoft Clean
SentinelOne Static AI - Malicious PE
Jiangmin Clean
Webroot Clean
Avira Clean
MAX Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Microsoft Ransom:Win32/StopCrypt!ml
SUPERAntiSpyware Clean
ZoneAlarm Clean
GData Clean
AhnLab-V3 Clean
Acronis suspicious
McAfee Packed-GEE!74237F2F0090
TACHYON Clean
VBA32 BScope.Backdoor.Mokes
Malwarebytes Trojan.MalPack.GS
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Tencent Clean
Yandex Clean
Ikarus Trojan-Ransom.StopCrypt
eGambit Generic.Malware
Fortinet Clean
BitDefenderTheta Clean
Avast Clean
CrowdStrike win/malicious_confidence_70% (D)
MaxSecure Trojan.Malware.300983.susgen
No IRMA results available.