Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6401	May 25, 2023, 7:41 a.m.	May 25, 2023, 7:43 a.m.

Size	281.3KB
Type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
MD5	`9c62d0040b9577c8484377357f673dc6`
SHA256	`8e2e50cacfa709ba9242fee071c645d3286ce52019ae474f0e799f29a4b2ffdf`
CRC32	`77C0ADB5`
ssdeep	`6144:wnCa7uW+h+IJE+edVtbIDBJF0Ecns6y9cjo2iwJtsykZHqxO34aG30VmXSmzlkRT:W77uEs6T39JDVGF4sjWpW`
PDB Path	C:\0bb\nfsdk\netFilterSdk\nfsdk-src\nfapi\Release_c_api_VPN\Win32\AdguardNetLib.pdb
Yara	UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check Malicious_Library_Zero - Malicious_Library IsDLL - (no description) PE_Header_Zero - PE File Signature IsPE32 - (no description)

rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_addBindingRule
2564
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_addFlowCtl
2648
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_addRule
2740
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_addRuleEx
2832
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_adjustProcessPriviledges
2920
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_completeTCPConnectRequest
3016
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_completeUDPConnectRequest
908
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_deleteBindingRules
152
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_deleteFlowCtl
2468
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_deleteRules
2728
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_free
2980
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_getConnCount
2220
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_getDriverType
2796
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_getFlowCtlStat
1964
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_getProcessNameA
2872
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_getProcessNameFromKernel
2112
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_getProcessNameW
3100
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_getTCPConnInfo
3196
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_getTCPStat
3284
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_getUDPConnInfo
3392
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_getUDPStat
3492
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_init
3632
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_ipPostReceive
3788
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_ipPostSend
3896
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_modifyFlowCtl
3984
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_registerDriver
3080
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_registerDriverEx
3280
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_setIPEventHandler
3484
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_setOptions
3760
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_setRules
3980
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_setRulesEx
3120
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_setTCPFlowCtl
3364
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_setTCPTimeout
3692
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_setUDPFlowCtl
4072
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_tcpClose
3472
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_tcpDisableFiltering
3732
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_tcpIsProxy
3852
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_tcpPostReceive
4052
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_tcpPostSend
4104
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_tcpSetConnectionState
4224
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_tcpSetSockOpt
4340
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_udpDisableFiltering
4460
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_udpPostReceive
4584
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_udpPostSend
4700
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,af_udpSetConnectionState
4788
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,bind
4908
- wermgr.exe C:\Windows\SysWOW64\wermgr.exe
  4024
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\a0UFMZnC6ltxphw.dat.dll,
5008

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Queries for the computername (4 events)

Time & API	Arguments	Status	Return
GetComputerNameW May 25, 2023, 7:41 a.m.	computer_name: TEST22-PC	1	1
GetComputerNameW May 25, 2023, 7:41 a.m.	computer_name: TEST22-PC	1	1
GetComputerNameW May 25, 2023, 7:41 a.m.	computer_name: TEST22-PC	1	1
GetComputerNameW May 25, 2023, 7:41 a.m.	computer_name: TEST22-PC	1	1

Checks if process is being debugged by a debugger (47 events)

Time & API	Arguments	Status	Return	Repeated
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0
IsDebuggerPresent May 25, 2023, 7:41 a.m.			0	0

This executable has a PDB path (1 event)

pdb_path

C:\0bb\nfsdk\netFilterSdk\nfsdk-src\nfapi\Release_c_api_VPN\Win32\AdguardNetLib.pdb

Checks amount of memory in system, this can be used to detect virtual machines that have a low amount of memory available (1 event)

Time & API	Arguments	Status	Return	Repeated
GlobalMemoryStatusEx May 25, 2023, 7:41 a.m.		1	1	0

One or more processes crashed (50 out of 383 events)

Time & API	Arguments	Status
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_addBindingRule+0x11 af_deleteBindingRules-0xef a0ufmznc6ltxphw+0x45d1 @ 0x100045d1 rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 2030444 registers.edi: 268589488 registers.eax: 0 registers.ebp: 2030524 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_addFlowCtl+0x10 af_deleteFlowCtl-0x90 a0ufmznc6ltxphw+0x4100 @ 0x10004100 rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1243772 registers.edi: 268589488 registers.eax: 0 registers.ebp: 1243852 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 03 48 08 89 4d d4 eb c9 8d 45 f8 50 eb 2c 8b 40 exception.instruction: add ecx, dword ptr [eax + 8] exception.exception_code: 0xc0000005 exception.symbol: af_addRule+0x18 af_deleteRules-0x98 a0ufmznc6ltxphw+0x3158 exception.address: 0x10003158 registers.esp: 2161820 registers.edi: 0 registers.eax: 3483222593 registers.ebp: 2161932 registers.edx: 4 registers.ebx: 0 registers.esi: 131454 registers.ecx: 3481060661	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 0f b7 00 85 c0 74 dc eb 84 eb 02 c9 c3 55 8b ec exception.instruction: movzx eax, word ptr [eax] exception.exception_code: 0xc0000005 exception.symbol: af_addRuleEx+0x7d af_setRulesEx-0x83 a0ufmznc6ltxphw+0x33ed exception.address: 0x100033ed registers.esp: 2750868 registers.edi: 0 registers.eax: 6 registers.ebp: 2750984 registers.edx: 4 registers.ebx: 0 registers.esi: 327992 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff ff ff ff ff ff ff ff ff ff 00 00 00 04 f4 d8 exception.exception_code: 0xc0000005 exception.symbol: exception.address: 0x23c92 registers.esp: 2881628 registers.edi: 248 registers.eax: 2881660 registers.ebp: 2881684 registers.edx: 2130566132 registers.ebx: 0 registers.esi: 262472 registers.ecx: 2061893632	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_completeTCPConnectRequest+0x11 af_completeUDPConnectRequest-0x12f a0ufmznc6ltxphw+0x3d51 @ 0x10003d51 rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 2817096 registers.edi: 268589488 registers.eax: 0 registers.ebp: 2817176 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_completeUDPConnectRequest+0x10 af_getTCPConnInfo-0xd0 a0ufmznc6ltxphw+0x3e90 @ 0x10003e90 rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 3013852 registers.edi: 268589488 registers.eax: 0 registers.ebp: 3013932 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_deleteBindingRules+0x10 af_getDriverType-0x80 a0ufmznc6ltxphw+0x46d0 @ 0x100046d0 rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 2161620 registers.edi: 268589488 registers.eax: 0 registers.ebp: 2161700 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_deleteFlowCtl+0x10 af_setTCPFlowCtl-0x80 a0ufmznc6ltxphw+0x41a0 @ 0x100041a0 rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 3014020 registers.edi: 268589488 registers.eax: 0 registers.ebp: 3014100 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 00 59 e9 8b 00 00 00 21 5d f8 8b 45 fc eb 00 8b exception.instruction: add byte ptr [ecx + 0xffffffe9], bl exception.exception_code: 0xc0000005 exception.symbol: af_addRule+0xb0 af_setRules-0x90 a0ufmznc6ltxphw+0x31f0 exception.address: 0x100031f0 registers.esp: 1111860 registers.edi: 0 registers.eax: 393594 registers.ebp: 1111976 registers.edx: 4 registers.ebx: 0 registers.esi: 393594 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_free+0x6e af_tcpSetConnectionState-0x182 a0ufmznc6ltxphw+0x2b7e @ 0x10002b7e rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 2816748 registers.edi: 268589488 registers.eax: 0 registers.ebp: 2816828 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 8b 40 18 03 45 d8 eb 3f 8b 4d dc 8b 44 01 78 eb exception.instruction: mov eax, dword ptr [eax + 0x18] exception.exception_code: 0xc0000005 exception.symbol: af_setRulesEx+0x159 af_getConnCount-0x7 a0ufmznc6ltxphw+0x35c9 exception.address: 0x100035c9 registers.esp: 2553444 registers.edi: 0 registers.eax: 3483691349 registers.ebp: 2553560 registers.edx: 4 registers.ebx: 0 registers.esi: 66252 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_getDriverType+0x19 af_registerDriver-0x4c57 a0ufmznc6ltxphw+0x4769 @ 0x10004769 rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1243204 registers.edi: 268589488 registers.eax: 0 registers.ebp: 1243284 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_getFlowCtlStat+0x10 af_getTCPStat-0x90 a0ufmznc6ltxphw+0x43f0 @ 0x100043f0 rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 2881376 registers.edi: 268589488 registers.eax: 0 registers.ebp: 2881456 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_getProcessNameFromKernel+0x23 af_adjustProcessPriviledges-0x3bd a0ufmznc6ltxphw+0x3853 @ 0x10003853 rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 916092 registers.edi: 268589488 registers.eax: 0 registers.ebp: 916172 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_getTCPConnInfo+0xf af_getUDPConnInfo-0xc1 a0ufmznc6ltxphw+0x3f6f @ 0x10003f6f rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1047288 registers.edi: 268589488 registers.eax: 0 registers.ebp: 1047368 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_getTCPStat+0xf af_getUDPStat-0x91 a0ufmznc6ltxphw+0x448f @ 0x1000448f rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1441112 registers.edi: 268589488 registers.eax: 0 registers.ebp: 1441192 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_getUDPConnInfo+0xf af_setIPEventHandler-0xa1 a0ufmznc6ltxphw+0x403f @ 0x1000403f rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 2619788 registers.edi: 268589488 registers.eax: 0 registers.ebp: 2619868 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_getUDPStat+0xf af_addBindingRule-0x91 a0ufmznc6ltxphw+0x452f @ 0x1000452f rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 719248 registers.edi: 268589488 registers.eax: 0 registers.ebp: 719328 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_init+0x16 af_free-0x34a a0ufmznc6ltxphw+0x27c6 @ 0x100027c6 rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1242996 registers.edi: 268589488 registers.eax: 0 registers.ebp: 1243076 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: af_setRules+0x2f af_addRuleEx-0xc1 a0ufmznc6ltxphw+0x32af @ 0x100032af rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: 8a 09 88 08 eb e4 8b 45 08 89 45 fc eb e2 40 89 exception.instruction: mov cl, byte ptr [ecx] exception.exception_code: 0xc0000005 exception.symbol: af_tcpSetSockOpt+0x86 af_getProcessNameA-0x9a a0ufmznc6ltxphw+0x36b6 exception.address: 0x100036b6 registers.esp: 1570700 registers.edi: 0 registers.eax: 3276800 registers.ebp: 1570708 registers.edx: 2130566132 registers.ebx: 0 registers.esi: 66636 registers.ecx: 3483898324	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: 0xe8132600 exception.instruction_r: e4 eb 00 8b 75 e4 8d 7d a4 eb 23 50 e8 09 03 00 exception.instruction: in al, -0x15 exception.exception_code: 0xc0000096 exception.symbol: af_ipPostSend+0x3 af_ipPostReceive-0x1d a0ufmznc6ltxphw+0x3103 exception.address: 0x10003103 registers.esp: 2815620 registers.edi: 0 registers.eax: 66777 registers.ebp: 2815735 registers.edx: 4 registers.ebx: 0 registers.esi: 66640 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_modifyFlowCtl+0x1f af_getFlowCtlStat-0x81 a0ufmznc6ltxphw+0x435f @ 0x1000435f rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 2422740 registers.edi: 268589488 registers.eax: 0 registers.ebp: 2422820 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: af_registerDriver+0x11 af_registerDriverEx-0x4f a0ufmznc6ltxphw+0x93d1 @ 0x100093d1 rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff ff ff ff ff ff ff ff ff ff 00 00 00 04 26 9b exception.exception_code: 0xc0000005 exception.symbol: exception.address: 0x23d52 registers.esp: 1045272 registers.edi: 66680 registers.eax: 21 registers.ebp: 1046384 registers.edx: 1045172 registers.ebx: 0 registers.esi: 0 registers.ecx: 4294967295	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: af_registerDriverEx+0x12 af_udpPostReceive-0x4e a0ufmznc6ltxphw+0x9432 @ 0x10009432 rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff ff ff ff ff ff ff ff ff ff 00 00 00 04 26 9b exception.exception_code: 0xc0000005 exception.symbol: exception.address: 0x23d52 registers.esp: 2815600 registers.edi: 132254 registers.eax: 10 registers.ebp: 2816712 registers.edx: 2815496 registers.ebx: 0 registers.esi: 0 registers.ecx: 4294967295	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.esp: 1702864 registers.edi: 0 registers.eax: 1702964 registers.ebp: 1703000 registers.edx: 4 registers.ebx: 32 registers.esi: 197888 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_setTCPFlowCtl+0x1c af_setUDPFlowCtl-0x74 a0ufmznc6ltxphw+0x423c @ 0x1000423c rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1767244 registers.edi: 268589488 registers.eax: 0 registers.ebp: 1767324 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_setTCPTimeout+0xf af_tcpDisableFiltering-0x21 a0ufmznc6ltxphw+0x2e2f @ 0x10002e2f rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 653452 registers.edi: 268589488 registers.eax: 0 registers.ebp: 653532 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_setUDPFlowCtl+0x1c af_modifyFlowCtl-0x74 a0ufmznc6ltxphw+0x42cc @ 0x100042cc rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 2356900 registers.edi: 268589488 registers.eax: 0 registers.ebp: 2356980 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_tcpDisableFiltering+0xf af_udpSetConnectionState-0x81 a0ufmznc6ltxphw+0x2e5f @ 0x10002e5f rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 2620796 registers.edi: 268589488 registers.eax: 0 registers.ebp: 2620876 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_getDriverType+0x39d4 af_registerDriver-0x129c a0ufmznc6ltxphw+0x8124 @ 0x10008124 af_tcpPostReceive+0x16 af_tcpClose-0xa a0ufmznc6ltxphw+0x2dc6 @ 0x10002dc6 rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1767784 registers.edi: 268589488 registers.eax: 0 registers.ebp: 1767864 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268589484 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_getDriverType+0x39d4 af_registerDriver-0x129c a0ufmznc6ltxphw+0x8124 @ 0x10008124 af_tcpPostReceive+0x16 af_tcpClose-0xa a0ufmznc6ltxphw+0x2dc6 @ 0x10002dc6 rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1765704 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1765784 registers.edx: 4 registers.ebx: 4294967292 registers.esi: 268592384 registers.ecx: 0	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_getDriverType+0x39d4 af_registerDriver-0x129c a0ufmznc6ltxphw+0x8124 @ 0x10008124 af_tcpPostReceive+0x16 af_tcpClose-0xa a0ufmznc6ltxphw+0x2dc6 @ 0x10002dc6 rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1763624 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1763704 registers.edx: 4 registers.ebx: 4294967288 registers.esi: 268592384 registers.ecx: 4294967292	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_getDriverType+0x39d4 af_registerDriver-0x129c a0ufmznc6ltxphw+0x8124 @ 0x10008124 af_tcpPostReceive+0x16 af_tcpClose-0xa a0ufmznc6ltxphw+0x2dc6 @ 0x10002dc6 rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1761544 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1761624 registers.edx: 4 registers.ebx: 4294967284 registers.esi: 268592384 registers.ecx: 4294967288	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_getDriverType+0x39d4 af_registerDriver-0x129c a0ufmznc6ltxphw+0x8124 @ 0x10008124 af_tcpPostReceive+0x16 af_tcpClose-0xa a0ufmznc6ltxphw+0x2dc6 @ 0x10002dc6 rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1759464 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1759544 registers.edx: 4 registers.ebx: 4294967280 registers.esi: 268592384 registers.ecx: 4294967284	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_getDriverType+0x39d4 af_registerDriver-0x129c a0ufmznc6ltxphw+0x8124 @ 0x10008124 af_tcpPostReceive+0x16 af_tcpClose-0xa a0ufmznc6ltxphw+0x2dc6 @ 0x10002dc6 rundll32+0x137d @ 0xe8137d rundll32+0x1326 @ 0xe81326 rundll32+0x1901 @ 0xe81901 BaseThreadInitThunk+0x12 VerifyConsoleIoHandle-0xb3 kernel32+0x133ca @ 0x755c33ca RtlInitializeExceptionChain+0x63 RtlAllocateActivationContextStack-0xa1 ntdll+0x39ed2 @ 0x76f49ed2 RtlInitializeExceptionChain+0x36 RtlAllocateActivationContextStack-0xce ntdll+0x39ea5 @ 0x76f49ea5 exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1757384 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1757464 registers.edx: 4 registers.ebx: 4294967276 registers.esi: 268592384 registers.ecx: 4294967280	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_getDriverType+0x39d4 af_registerDriver-0x129c a0ufmznc6ltxphw+0x8124 @ 0x10008124 af_tcpPostReceive+0x16 af_tcpClose-0xa a0ufmznc6ltxphw+0x2dc6 @ 0x10002dc6 rundll32+0x137d @ 0xe8137d exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1755304 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1755384 registers.edx: 4 registers.ebx: 4294967272 registers.esi: 268592384 registers.ecx: 4294967276	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1753224 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1753304 registers.edx: 4 registers.ebx: 4294967268 registers.esi: 268592384 registers.ecx: 4294967272	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1751144 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1751224 registers.edx: 4 registers.ebx: 4294967264 registers.esi: 268592384 registers.ecx: 4294967268	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1749064 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1749144 registers.edx: 4 registers.ebx: 4294967260 registers.esi: 268592384 registers.ecx: 4294967264	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1746984 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1747064 registers.edx: 4 registers.ebx: 4294967256 registers.esi: 268592384 registers.ecx: 4294967260	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1744904 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1744984 registers.edx: 4 registers.ebx: 4294967252 registers.esi: 268592384 registers.ecx: 4294967256	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1742824 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1742904 registers.edx: 4 registers.ebx: 4294967248 registers.esi: 268592384 registers.ecx: 4294967252	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1740744 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1740824 registers.edx: 4 registers.ebx: 4294967244 registers.esi: 268592384 registers.ecx: 4294967248	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1738664 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1738744 registers.edx: 4 registers.ebx: 4294967240 registers.esi: 268592384 registers.ecx: 4294967244	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1736584 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1736664 registers.edx: 4 registers.ebx: 4294967236 registers.esi: 268592384 registers.ecx: 4294967240	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1734504 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1734584 registers.edx: 4 registers.ebx: 4294967232 registers.esi: 268592384 registers.ecx: 4294967236	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1732424 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1732504 registers.edx: 4 registers.ebx: 4294967228 registers.esi: 268592384 registers.ecx: 4294967232	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1730344 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1730424 registers.edx: 4 registers.ebx: 4294967224 registers.esi: 268592384 registers.ecx: 4294967228	1
__exception__ May 25, 2023, 7:41 a.m.	stacktrace: RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f af_udpPostReceive+0x77f3 a0ufmznc6ltxphw+0x10c73 @ 0x10010c73 af_udpPostReceive+0x1efe a0ufmznc6ltxphw+0xb37e @ 0x1000b37e RtlDosSearchPath_Ustr+0xada RtlCaptureContext-0x72 ntdll+0x46ab9 @ 0x76f56ab9 RtlDosSearchPath_Ustr+0xaac RtlCaptureContext-0xa0 ntdll+0x46a8b @ 0x76f56a8b New_ntdll_RtlDispatchException@8+0xf6 New_ntdll_RtlRemoveVectoredContinueHandler@4-0x23 @ 0x736f482b KiUserExceptionDispatcher+0xf KiRaiseUserExceptionDispatcher-0x41 ntdll+0x10143 @ 0x76f20143 RtlIntegerToUnicodeString+0x20b RtlpUnWaitCriticalSection-0x1c4 ntdll+0x38cb8 @ 0x76f48cb8 af_udpPostReceive+0xa689 a0ufmznc6ltxphw+0x13b09 @ 0x10013b09 af_udpPostReceive+0xb640 a0ufmznc6ltxphw+0x14ac0 @ 0x10014ac0 af_udpPostReceive+0xb70f a0ufmznc6ltxphw+0x14b8f @ 0x10014b8f exception.instruction_r: ff 40 14 8b 5d f4 8b 7d f0 80 3d 82 03 fe 7f 00 exception.symbol: RtlIntegerToUnicodeString+0x2fc RtlpUnWaitCriticalSection-0xd3 ntdll+0x38da9 exception.instruction: inc dword ptr [eax + 0x14] exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 232873 exception.address: 0x76f48da9 registers.esp: 1728264 registers.edi: 268592388 registers.eax: 0 registers.ebp: 1728344 registers.edx: 4 registers.ebx: 4294967220 registers.esi: 268592384 registers.ecx: 4294967224	1

One or more potentially interesting buffers were extracted, these generally contain injected code, configuration data, etc.

Allocates read-write-execute memory (usually to unpack itself) (50 out of 330 events)

Time & API	Arguments	Status
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2564 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x1001c000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2564 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73660000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2564 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x735e1000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2564 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73551000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2564 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73514000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2564 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x735e2000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2564 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73c11000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2648 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x1001c000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2648 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73660000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2648 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x735e1000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2648 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73551000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2648 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73514000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2648 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x735e2000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2648 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73c11000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2740 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x1001c000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2740 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73660000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2740 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x735e1000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2740 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73551000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2740 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73514000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2740 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x735e2000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2740 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73c11000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2832 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x1001c000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2832 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73660000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2832 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x735e1000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2832 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73551000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2832 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73514000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2832 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x735e2000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2832 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73c11000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2920 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x1001c000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2920 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73660000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2920 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x735e1000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2920 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73551000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2920 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73514000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2920 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x735e2000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 2920 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73c11000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 3016 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x1001c000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 3016 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73660000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 3016 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x735e1000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 3016 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73551000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 3016 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73514000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 3016 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x735e2000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 3016 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73c11000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 908 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x1001c000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 908 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73660000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 908 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x735e1000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 908 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73551000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 908 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73514000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 908 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x735e2000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 908 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73c11000 process_handle: 0xffffffff	1
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 152 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x1001c000 process_handle: 0xffffffff	1

Searches running processes potentially to identify processes for sandbox evasion, code injection or memory dumping (50 out of 87 events)

Time & API	Arguments	Status	Return
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: mobsync.exe process_identifier: 2292	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: pw.exe process_identifier: 2332	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: taskhost.exe process_identifier: 2380	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 2564	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 2648	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 2740	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 2832	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 2920	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 908	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 152	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: svchost.exe process_identifier: 2244	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 2468	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 2528	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 2524	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 2500	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 2504	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 2556	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 2552	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 2728	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 2956	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 2980	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 3044	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 148	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 2220	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 2796	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 1964	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 2124	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 2820	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 2584	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 2576	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 2112	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 3196	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 3284	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 3336	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 3392	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 3492	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 3560	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 3616	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 3632	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 3696	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 3776	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 3788	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 3896	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 3984	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 4004	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 3080	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 3172	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: rundll32.exe process_identifier: 3280	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 3388	1	1
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000168 process_name: WerFault.exe process_identifier: 3436	1	1

Changes read-write memory protection to read-execute (probably to avoid detection when setting all RWX flags at the same time) (1 event)

Time & API	Arguments	Status	Return	Repeated
NtProtectVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 4908 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 length: 12288 protection: 32 (PAGE_EXECUTE_READ) base_address: 0x007c0000 process_handle: 0xffffffff	1	0	0

The binary likely contains encrypted or compressed data indicative of a packer (2 events)

section

{u'size_of_data': u'0x0001c000', u'virtual_address': u'0x00027000', u'entropy': 7.91092505178736, u'name': u'.rsrc', u'virtual_size': u'0x0001b88f'}

entropy

7.91092505179

description

A section with a high entropy has been found

entropy

0.427480916031

description

Overall entropy of this PE file is high

Repeatedly searches for a not-found process, you may want to run a web browser during analysis (50 out of 108 events)

Time & API	Arguments	Status	Return	Repeated
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000188 process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000188 process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x00000188 process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:41 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x000001ec process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: conhost.exe process_identifier: 5004		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0
Process32NextW May 25, 2023, 7:42 a.m.	snapshot_handle: 0x0000011c process_name: l process_identifier: 1942028288		0	0

Yara rule detected in process memory (8 events)

description	(no description)	rule	DebuggerCheck__GlobalFlags
description	(no description)	rule	DebuggerCheck__QueryInfo
description	(no description)	rule	DebuggerHiding__Thread
description	(no description)	rule	DebuggerHiding__Active
description	(no description)	rule	ThreadControl__Context
description	(no description)	rule	SEH__vectored
description	Checks if being debugged	rule	anti_dbg
description	Bypass DEP	rule	disable_dep

One or more of the buffers contains an embedded PE file (1 event)

buffer

Buffer with sha1: 60b3257b3f58d23157701f8530cdd6f6afb6b7de

Allocates execute permission to another process indicative of possible code injection (1 event)

Time & API	Arguments	Status	Return	Repeated
NtAllocateVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 4024 region_size: 147456 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x000b0000 allocation_type: 12288 (MEM_COMMIT\|MEM_RESERVE) process_handle: 0x0000016c	1	0	0

Resumed a suspended thread in a remote process potentially indicative of process injection (2 events)

Time & API	Arguments	Status	Return	Repeated
Process injection	Process 4908 resumed a thread in remote process 4024
NtResumeThread May 25, 2023, 7:41 a.m.	thread_handle: 0x00000168 suspend_count: 1 process_identifier: 4024	1	0	0

Executed a process and injected code into it, probably while unpacking (6 events)

Time & API	Arguments	Status	Return
CreateProcessInternalW May 25, 2023, 7:41 a.m.	thread_identifier: 3548 thread_handle: 0x00000168 process_identifier: 4024 current_directory: filepath: track: 1 command_line: C:\Windows\SysWOW64\wermgr.exe filepath_r: stack_pivoted: 0 creation_flags: 4 (CREATE_SUSPENDED) inherit_handles: 0 process_handle: 0x0000016c	1	1
NtAllocateVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 4024 region_size: 147456 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x000b0000 allocation_type: 12288 (MEM_COMMIT\|MEM_RESERVE) process_handle: 0x0000016c	1	0
NtAllocateVirtualMemory May 25, 2023, 7:41 a.m.	process_identifier: 4024 region_size: 8192 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 4 (PAGE_READWRITE) base_address: 0x000e0000 allocation_type: 12288 (MEM_COMMIT\|MEM_RESERVE) process_handle: 0x0000016c	1	0
NtGetContextThread May 25, 2023, 7:41 a.m.	thread_handle: 0x00000168	1	0
NtResumeThread May 25, 2023, 7:41 a.m.	thread_handle: 0x00000168 suspend_count: 1 process_identifier: 4024	1	0
NtResumeThread May 25, 2023, 7:41 a.m.	thread_handle: 0x00000110 suspend_count: 1 process_identifier: 4024	1	0

a0UFMZnC6ltxphw.dat

Process Tree Toggle all

Network Toggle all

Suricata Toggle all

Suricata Alerts

Suricata TLS

Signatures Toggle All