File createFile.exe

Size 542.5KB Resubmit sample
Type PE32 executable (console) Intel 80386, for MS Windows
MD5 b4a74dd21b3455ee6e767991ffa0eb67
SHA1 fff6d77961701f9f425044baab013ada12ab0233
SHA256 aba8de7ff58170216344a688ec3de036dbf57c04d11b5ae72c60f785fe742901
SHA512
06bea16d072117a03832724a7a4b153cafd882825bfad7e3ed5f174738912f30419d296b0e3632df3192740e8303e0faefb7a2b3ef4c62568c078964466d11df
CRC32 00DCE12B
ssdeep 12288:7qTZAeuPRR0L+ve0rPBTXcdZCOsX0WKp:QuPRrG+pMdyy
PDB Path D:\hafizRemoteWorks\createFile\Debug\createFile.pdb
Yara
  • possible_includes_base64_packed_functions -
  • IsPE32 -
  • IsConsole -
  • HasDebugData - DebugData Check
  • HasRichSignature - Rich Signature Check
  • PEiD_00497_dUP_v2_x_Patcher_____www_diablo2oo2_cjb_net_ - [dUP v2.x Patcher --> www.diablo2oo2.cjb.net]
  • PEiD_01004_MASM_TASM___sig1_h__ - [MASM/TASM - sig1(h)]
  • PEiD_01007_MASM_TASM___sig4__h__ - [MASM/TASM - sig4 (h)]
  • PEiD_01070_Microsoft_Visual_C___6_0___8_0_ - [Microsoft Visual C++ 6.0 - 8.0]
  • PEiD_01087_Microsoft_Visual_C___8_0__Debug_ - [Microsoft Visual C++ 8.0 [Debug]
  • PEiD_01088_Microsoft_Visual_C___8_0__Debug__ - [Microsoft Visual C++ 8.0 [Debug]]
  • PEiD_01272_Neolite_v2_0_ - [Neolite v2.0]
  • PEiD_01686_Petite_v2_2____www_un4seen_com_petite_ - [Petite v2.2 -> www.un4seen.com/petite]
  • PEiD_01693_pex_V0_99____params_ - [pex V0.99 -> params]
  • PEiD_02152_StarForce_V3_X_DLL____StarForce_Copy_Protection_System_ - [StarForce V3.X DLL -> StarForce Copy Protection System]
  • PEiD_02161_Stranik_1_3_Modula_C_Pascal_ - [Stranik 1.3 Modula/C/Pascal]
  • Contains_PE_File - Detect a PE file inside a byte sequence
  • DebuggerException__SetConsoleCtrl -
  • Check_OutputDebugStringA_iat -
  • anti_dbg - Checks if being debugged
  • win_files_operation - Affect private profile
  • contentis_base64 - This rule finds for base64 strings
  • Microsoft_Visual_Cpp_V80_Debug -
  • Microsoft_Visual_Cpp_80_Debug_ -
  • Microsoft_Visual_Cpp_80_Debug -
  • maldoc_function_prolog_signature -
  • maldoc_structured_exception_handling -
  • maldoc_suspicious_strings -

Score

This file appears fairly benign with a score of 0.4 out of 10.

Please notice: The scoring system is currently still in development and should be considered an alpha feature.

Information on Execution

Category Started Completed Duration Logs
FILE March 8, 2017, 10:01 a.m. March 8, 2017, 10:09 a.m. 513 seconds

Machine

Name Label Started On Shutdown On
win7x32 win7x32 2017-03-08 10:01:06 2017-03-08 10:09:38

Analyzer Log

2017-03-08 02:01:05,030 [analyzer] DEBUG: Starting analyzer from: C:\bacqeancwg
2017-03-08 02:01:05,062 [analyzer] DEBUG: Pipe server name: \\.\PIPE\ykAdxTiJQUdQxoFEEGxwDaLcmlOplaRO
2017-03-08 02:01:05,062 [analyzer] DEBUG: Log pipe server name: \\.\PIPE\iEBZChiSbtEbgrEMj
2017-03-08 02:01:06,092 [analyzer] DEBUG: Started auxiliary module Disguise
2017-03-08 02:01:06,200 [analyzer] WARNING: Unable to find the correct offsets for functions of: 32-bit kernel32.dll (with timestamp 0x56eb2fb8)
2017-03-08 02:01:06,200 [analyzer] WARNING: Unable to find the correct offsets for functions of: 32-bit kernel32.dll (with timestamp 0x56eb2fb8)
2017-03-08 02:01:06,263 [analyzer] WARNING: Unable to find the correct offsets for functions of: 32-bit ncrypt.dll (with timestamp 0x586e85bb)
2017-03-08 02:01:06,263 [analyzer] WARNING: Unable to find the correct offsets for functions of: 32-bit ncrypt.dll (with timestamp 0x586e85bb)
2017-03-08 02:01:06,263 [analyzer] DEBUG: Loaded monitor into process with pid 480
2017-03-08 02:01:06,263 [analyzer] DEBUG: Started auxiliary module DumpTLSMasterSecrets
2017-03-08 02:01:06,263 [analyzer] DEBUG: Started auxiliary module Human
2017-03-08 02:01:06,263 [analyzer] DEBUG: Started auxiliary module InstallCertificate
2017-03-08 02:01:06,263 [analyzer] WARNING: Cannot execute auxiliary module Reboot: [Errno 2] No such file or directory: 'C:\\bacqeancwg\\reboot.json'
2017-03-08 02:01:06,309 [analyzer] DEBUG: Started auxiliary module RecentFiles
2017-03-08 02:01:06,309 [analyzer] DEBUG: Started auxiliary module Screenshots
2017-03-08 02:01:06,309 [analyzer] INFO: No process IDs returned by the package, running for the full timeout.
2017-03-08 02:05:08,780 [analyzer] INFO: Analysis timeout hit, terminating analysis.
2017-03-08 02:05:08,780 [analyzer] INFO: Terminating remaining processes before shutdown.
2017-03-08 02:05:08,780 [analyzer] INFO: Analysis completed.

Cuckoo Log

2017-03-08 10:01:05,959 [lib.cuckoo.core.scheduler] INFO: File already exists at "/opt/cuckoo/storage/binaries/aba8de7ff58170216344a688ec3de036dbf57c04d11b5ae72c60f785fe742901"
2017-03-08 10:01:05,972 [lib.cuckoo.core.scheduler] INFO: Task #9: acquired machine win7x32 (label=win7x32)
2017-03-08 10:01:05,984 [modules.auxiliary.sniffer] INFO: Started sniffer with PID 1692 (interface=eth2, host=192.168.128.112, pcap=/opt/cuckoo/storage/analyses/9/dump.pcap)
2017-03-08 10:01:09,933 [lib.cuckoo.core.guest] INFO: Starting analysis on guest (id=win7x32, ip=192.168.128.112)
2017-03-08 10:05:32,764 [modules.auxiliary.reboot] ERROR: Reboot analysis is not backwards compatible with the Old Agent, please upgrade your target machine (<Machine('2','win7x32')>) to the New Agent to use the reboot analysis capabilities.
2017-03-08 10:09:37,462 [lib.cuckoo.core.guest] INFO: win7x32: analysis completed successfully
2017-03-08 10:11:04,478 [lib.cuckoo.core.plugins] WARNING: The processing module "Suricata" returned the following error: Unable to locate Suricata binary
2017-03-08 10:11:06,433 [elasticsearch] WARNING: HEAD http://127.0.0.1:9200/_template/cuckoo_template [status:N/A request:0.000s]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/connection/http_urllib3.py", line 94, in perform_request
    response = self.pool.urlopen(method, url, body, retries=False, headers=self.headers, **kw)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 643, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/local/lib/python2.7/dist-packages/urllib3/util/retry.py", line 251, in increment
    raise six.reraise(type(error), error, _stacktrace)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 594, in urlopen
    chunked=chunked)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 361, in _make_request
    conn.request(method, url, **httplib_request_kw)
  File "/usr/lib/python2.7/httplib.py", line 1017, in request
    self._send_request(method, url, body, headers)
  File "/usr/lib/python2.7/httplib.py", line 1051, in _send_request
    self.endheaders(body)
  File "/usr/lib/python2.7/httplib.py", line 1013, in endheaders
    self._send_output(message_body)
  File "/usr/lib/python2.7/httplib.py", line 864, in _send_output
    self.send(msg)
  File "/usr/lib/python2.7/httplib.py", line 826, in send
    self.connect()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 163, in connect
    conn = self._new_conn()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 147, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
NewConnectionError: <urllib3.connection.HTTPConnection object at 0x7ff074382110>: Failed to establish a new connection: [Errno 111] Connection refused
2017-03-08 10:11:06,434 [elasticsearch] WARNING: HEAD http://127.0.0.1:9200/_template/cuckoo_template [status:N/A request:0.000s]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/connection/http_urllib3.py", line 94, in perform_request
    response = self.pool.urlopen(method, url, body, retries=False, headers=self.headers, **kw)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 643, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/local/lib/python2.7/dist-packages/urllib3/util/retry.py", line 251, in increment
    raise six.reraise(type(error), error, _stacktrace)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 594, in urlopen
    chunked=chunked)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 361, in _make_request
    conn.request(method, url, **httplib_request_kw)
  File "/usr/lib/python2.7/httplib.py", line 1017, in request
    self._send_request(method, url, body, headers)
  File "/usr/lib/python2.7/httplib.py", line 1051, in _send_request
    self.endheaders(body)
  File "/usr/lib/python2.7/httplib.py", line 1013, in endheaders
    self._send_output(message_body)
  File "/usr/lib/python2.7/httplib.py", line 864, in _send_output
    self.send(msg)
  File "/usr/lib/python2.7/httplib.py", line 826, in send
    self.connect()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 163, in connect
    conn = self._new_conn()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 147, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
NewConnectionError: <urllib3.connection.HTTPConnection object at 0x7ff074382650>: Failed to establish a new connection: [Errno 111] Connection refused
2017-03-08 10:11:06,435 [elasticsearch] WARNING: HEAD http://127.0.0.1:9200/_template/cuckoo_template [status:N/A request:0.000s]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/connection/http_urllib3.py", line 94, in perform_request
    response = self.pool.urlopen(method, url, body, retries=False, headers=self.headers, **kw)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 643, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/local/lib/python2.7/dist-packages/urllib3/util/retry.py", line 251, in increment
    raise six.reraise(type(error), error, _stacktrace)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 594, in urlopen
    chunked=chunked)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 361, in _make_request
    conn.request(method, url, **httplib_request_kw)
  File "/usr/lib/python2.7/httplib.py", line 1017, in request
    self._send_request(method, url, body, headers)
  File "/usr/lib/python2.7/httplib.py", line 1051, in _send_request
    self.endheaders(body)
  File "/usr/lib/python2.7/httplib.py", line 1013, in endheaders
    self._send_output(message_body)
  File "/usr/lib/python2.7/httplib.py", line 864, in _send_output
    self.send(msg)
  File "/usr/lib/python2.7/httplib.py", line 826, in send
    self.connect()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 163, in connect
    conn = self._new_conn()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 147, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
NewConnectionError: <urllib3.connection.HTTPConnection object at 0x7ff074382510>: Failed to establish a new connection: [Errno 111] Connection refused
2017-03-08 10:11:06,435 [elasticsearch] WARNING: HEAD http://127.0.0.1:9200/_template/cuckoo_template [status:N/A request:0.000s]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/connection/http_urllib3.py", line 94, in perform_request
    response = self.pool.urlopen(method, url, body, retries=False, headers=self.headers, **kw)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 643, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/local/lib/python2.7/dist-packages/urllib3/util/retry.py", line 251, in increment
    raise six.reraise(type(error), error, _stacktrace)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 594, in urlopen
    chunked=chunked)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 361, in _make_request
    conn.request(method, url, **httplib_request_kw)
  File "/usr/lib/python2.7/httplib.py", line 1017, in request
    self._send_request(method, url, body, headers)
  File "/usr/lib/python2.7/httplib.py", line 1051, in _send_request
    self.endheaders(body)
  File "/usr/lib/python2.7/httplib.py", line 1013, in endheaders
    self._send_output(message_body)
  File "/usr/lib/python2.7/httplib.py", line 864, in _send_output
    self.send(msg)
  File "/usr/lib/python2.7/httplib.py", line 826, in send
    self.connect()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 163, in connect
    conn = self._new_conn()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 147, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
NewConnectionError: <urllib3.connection.HTTPConnection object at 0x7ff074382b10>: Failed to establish a new connection: [Errno 111] Connection refused
2017-03-08 10:11:06,436 [lib.cuckoo.core.plugins] ERROR: Failed to run the reporting module "ElasticSearch":
Traceback (most recent call last):
  File "/opt/cuckoo/lib/cuckoo/core/plugins.py", line 533, in process
    current.run(self.results)
  File "/opt/cuckoo/modules/reporting/elasticsearch.py", line 196, in run
    self.connect()
  File "/opt/cuckoo/modules/reporting/elasticsearch.py", line 79, in connect
    if not self.es.indices.exists_template("cuckoo_template"):
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/client/utils.py", line 69, in _wrapped
    return func(*args, params=params, **kwargs)
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/client/indices.py", line 491, in exists_template
    name), params=params)
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/transport.py", line 327, in perform_request
    status, headers, data = connection.perform_request(method, url, params, body, ignore=ignore, timeout=timeout)
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/connection/http_urllib3.py", line 105, in perform_request
    raise ConnectionError('N/A', str(e), e)
ConnectionError: ConnectionError(<urllib3.connection.HTTPConnection object at 0x7ff074382b10>: Failed to establish a new connection: [Errno 111] Connection refused) caused by: NewConnectionError(<urllib3.connection.HTTPConnection object at 0x7ff074382b10>: Failed to establish a new connection: [Errno 111] Connection refused)

Signatures

This executable has a PDB path (1 event)
pdb_path D:\hafizRemoteWorks\createFile\Debug\createFile.pdb
The executable has PE anomalies (could be a false positive) (1 event)
section .textbss

Network

Hosts

No hosts contacted.

Summary

PE Compile Time

2015-03-03 01:51:19

PDB Path

D:\hafizRemoteWorks\createFile\Debug\createFile.pdb

PEiD Signatures

Microsoft Visual C++ V8.0 (Debug)

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.textbss 0x00001000 0x00030fb1 0x00000000 0.0
.text 0x00032000 0x00068e20 0x00069000 5.48843143289
.rdata 0x0009b000 0x00016abe 0x00016c00 3.565407861
.data 0x000b2000 0x000042b4 0x00001c00 3.18013392762
.idata 0x000b7000 0x00000b41 0x00000c00 4.44711987477
.rsrc 0x000b8000 0x0000043c 0x00000600 2.14297088193
.reloc 0x000b9000 0x00004abe 0x00004c00 6.18015811519

Imports

Library KERNEL32.dll:
0x4b7000 Sleep
0x4b7004 WriteFile
0x4b7008 CloseHandle
0x4b700c CreateFileW
0x4b701c EncodePointer
0x4b7020 DecodePointer
0x4b7024 RaiseException
0x4b7028 RtlUnwind
0x4b702c GetCommandLineA
0x4b7030 FatalAppExitA
0x4b7034 GetModuleFileNameW
0x4b7038 GetModuleHandleExW
0x4b7044 SetLastError
0x4b704c CreateEventW
0x4b7050 GetCurrentProcess
0x4b7054 TerminateProcess
0x4b7058 TlsAlloc
0x4b705c TlsGetValue
0x4b7060 TlsSetValue
0x4b7064 TlsFree
0x4b7068 GetStartupInfoW
0x4b706c GetTickCount
0x4b7070 GetModuleHandleW
0x4b7074 GetProcAddress
0x4b7078 CreateSemaphoreW
0x4b707c GetStdHandle
0x4b7084 GetLastError
0x4b7088 HeapValidate
0x4b708c GetSystemInfo
0x4b7090 ExitProcess
0x4b7094 AreFileApisANSI
0x4b7098 MultiByteToWideChar
0x4b709c WideCharToMultiByte
0x4b70a0 IsDebuggerPresent
0x4b70a4 LoadLibraryExW
0x4b70a8 GetCurrentThread
0x4b70ac GetCurrentThreadId
0x4b70b0 GetProcessHeap
0x4b70b4 GetFileType
0x4b70b8 GetModuleFileNameA
0x4b70c0 GetCurrentProcessId
0x4b70d4 OutputDebugStringW
0x4b70dc CreateThread
0x4b70e0 OutputDebugStringA
0x4b70e4 WriteConsoleW
0x4b70e8 GetDateFormatW
0x4b70ec GetTimeFormatW
0x4b70f0 CompareStringW
0x4b70f4 LCMapStringW
0x4b70f8 GetLocaleInfoW
0x4b70fc IsValidLocale
0x4b7100 GetUserDefaultLCID
0x4b7104 EnumSystemLocalesW
0x4b7108 IsValidCodePage
0x4b710c GetACP
0x4b7110 GetOEMCP
0x4b7114 GetCPInfo
0x4b7118 HeapFree
0x4b711c HeapReAlloc
0x4b7120 HeapSize
0x4b7128 HeapAlloc
0x4b712c FreeLibrary
0x4b7130 VirtualQuery
0x4b7134 GetStringTypeW
0x4b7138 GetConsoleCP
0x4b713c GetConsoleMode
0x4b7140 SetFilePointerEx
0x4b7144 FlushFileBuffers
0x4b7148 SetStdHandle

!This program cannot be run in DOS mode.
.textbss
`.rdata
@.data
.idata
@.rsrc
@.reloc
_Alproxy
_Alproxy
dwBytesWritten
dataTobeWritten
filePath
93~AW3
PRSVWh`
u&hL J
u&hL J
u&hL J
u&hL J
u&hL J
u&hL J
jhP#J
u#h(%J
jXh@%J
j?h@'J
j?h@'J
u#h0)J
u#hL)J
u#h`*J
u*hh-J
u'hh-J
u'hX.J
u#h(>J
u#h`*J
u#h`*J
u#hh?J
u#h`*J
u#h(>J
u#h`*J
u&h`@J
t&hpjJ
j8h@mJ
jDh@mJ
jih@pJ
jih@pJ
jnh@pJ
jnh@pJ
URPQQh
u#hhuJ
u#hhuJ
u\j[htvJ
WWhHuJ
;t$,v-
UQPXY]Y[
jPhxMK
j@h<MK
j@h<MK
u#hL J
u#h(>J
u#h`*J
u#hh?J
u&hL J
u#hL J
u&hL J
u#hL J
trj@hx
u#h0)J
u#h0)J
generic
unknown error
iostream
iostream stream error
system
testing SandBox
string too long
invalid string position
xdigit
bad allocation
bad function call
regex_error(error_collate): The expression contained an invalid collating element name.
regex_error(error_ctype): The expression contained an invalid character class name.
regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape.
regex_error(error_backref): The expression contained an invalid back reference.
regex_error(error_brack): The expression contained mismatched [ and ].
regex_error(error_paren): The expression contained mismatched ( and ).
regex_error(error_brace): The expression contained mismatched { and }.
regex_error(error_badbrace): The expression contained an invalid range in a { expression }.
regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings.
regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine.
regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression.
regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level.
regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence.
regex_error(error_parse)
regex_error(error_syntax)
regex_error
permission denied
file exists
no such device
filename too long
device or resource busy
io error
directory not empty
invalid argument
no space on device
no such file or directory
function not supported
no lock available
not enough memory
resource unavailable try again
cross device link
operation canceled
too many files open
permission_denied
address_in_use
address_not_available
address_family_not_supported
connection_already_in_progress
bad_file_descriptor
connection_aborted
connection_refused
connection_reset
destination_address_required
bad_address
host_unreachable
operation_in_progress
interrupted
invalid_argument
already_connected
too_many_files_open
message_size
filename_too_long
network_down
network_reset
network_unreachable
no_buffer_space
no_protocol_option
not_connected
not_a_socket
operation_not_supported
protocol_not_supported
wrong_protocol_type
timed_out
operation_would_block
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
destination address required
executable format error
file too large
host unreachable
identifier removed
illegal byte sequence
inappropriate io control operation
invalid seek
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no message available
no message
no protocol option
no stream resources
no such device or address
no such process
not a directory
not a socket
not a stream
not connected
not supported
operation in progress
operation not permitted
operation not supported
operation would block
owner dead
protocol error
protocol not supported
read only file system
resource deadlock would occur
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many links
too many symbolic link levels
value too large
wrong protocol type
f:\dd\vctools\crt\crtw32\misc\onexit.c
f:\dd\vctools\crt\crtw32\startup\mlock.c
f:\dd\vctools\crt\crtw32\misc\dbgrpt.c
Unknown exception
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
CreateEventExW
CreateSemaphoreExW
SetThreadStackGuarantee
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
FlushProcessWriteBuffers
FreeLibraryWhenCallbackReturns
GetCurrentProcessorNumber
GetLogicalProcessorInformation
CreateSymbolicLinkW
SetDefaultDllDirectories
EnumSystemLocalesEx
CompareStringEx
GetDateFormatEx
GetLocaleInfoEx
GetTimeFormatEx
GetUserDefaultLocaleName
IsValidLocaleName
LCMapStringEx
GetCurrentPackageId
GetTickCount64
GetFileInformationByHandleExW
SetFileInformationByHandleW
f:\dd\vctools\crt\crtw32\misc\inithelp.c
Normal
Ignore
Client
Client hook allocation failure at file %hs line %d.
Client hook allocation failure.
Invalid allocation size: %Iu bytes.
Error: memory allocation: bad memory block type.
Client hook re-allocation failure at file %hs line %d.
Client hook re-allocation failure.
Invalid allocation size: %Iu bytes.
Memory allocated at %hs(%d).
Error: memory allocation: bad memory block type.
Memory allocated at %hs(%d).
The Block at 0x%p was allocated by aligned routines, use _aligned_realloc()
Error: possible heap corruption at or near 0x%p
The Block at 0x%p was allocated by aligned routines, use _aligned_free()
Client hook free failure.
HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory before start of heap buffer.
Memory allocated at %hs(%d).
HEAP CORRUPTION DETECTED: before %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory before start of heap buffer.
HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory after end of heap buffer.
Memory allocated at %hs(%d).
HEAP CORRUPTION DETECTED: after %hs block (#%d) at 0x%p.
CRT detected that the application wrote to memory after end of heap buffer.
_heapchk fails with _HEAPBADBEGIN.
_heapchk fails with _HEAPBADNODE.
_heapchk fails with _HEAPBADEND.
_heapchk fails with _HEAPBADPTR.
_heapchk fails with unknown return value!
DAMAGED
HEAP CORRUPTION DETECTED: on top of Free block at 0x%p.
CRT detected that the application wrote to a heap buffer that was freed.
Memory allocated at %hs(%d).
HEAP CORRUPTION DETECTED: on top of Free block at 0x%p.
CRT detected that the application wrote to a heap buffer that was freed.
%hs located at 0x%p is %Iu bytes long.
Memory allocated at %hs(%d).
%hs located at 0x%p is %Iu bytes long.
Bad memory block found at 0x%p.
Memory allocated at %hs(%d).
Bad memory block found at 0x%p.
Data: <%s> %s
Dumping objects ->
#File Error#(%d) :
%hs(%d) :
{%ld}
client block at 0x%p, subtype %x, %Iu bytes long.
normal block at 0x%p, %Iu bytes long.
crt block at 0x%p, subtype %x, %Iu bytes long.
Object dump complete.
Detected memory leaks!
%Id bytes in %Id %hs Blocks.
Largest number used: %Id bytes.
Total allocations: %Id bytes.
The block at 0x%p was not allocated by _aligned routines, use realloc()
Damage before 0x%p which was allocated by aligned routine
The block at 0x%p was not allocated by _aligned routines, use free()
CorExitProcess
f:\dd\vctools\crt\crtw32\startup\crt0dat.c
_hypot
_nextafter
Stack around the variable '
' was corrupted.
The variable '
' is being used without being initialized.
The value of ESP was not properly saved across a function call. This is usually a result of calling a function declared with one calling convention with a function pointer declared with a different calling convention.
A cast to a smaller data type has caused a loss of data. If this was intentional, you should mask the source of the cast with the appropriate bitmask. For example:
char c = (i & 0xFF);
Changing the code in this way will not affect the quality of the resulting optimized code.
Stack memory was corrupted
A local variable was used before it was initialized
Stack memory around _alloca was corrupted
Unknown Runtime Check Error
Unknown Filename
Unknown Module Name
Run-Time Check Failure #%d - %s
Stack corrupted near unknown variable
wsprintfA
Stack area around _alloca memory reserved by this function is corrupted
Data: <
Allocation number within this function:
Size:
Address: 0x
Stack area around _alloca memory reserved by this function is corrupted
%s%s%p%s%ld%s%d%s
%s%s%s%s
A variable is being used without being initialized.
Stack pointer corruption
Cast to smaller type causing loss of data
Stack memory corruption
Local variable used before initialization
Stack around _alloca corrupted
The value of ESP was not properly saved across a function call. This is usually a result of calling a function declared with one calling convention with a function pointer declared with a different calling convention.
f:\dd\vctools\crt\crtw32\misc\i386\chkesp.c
f:\dd\vctools\crt\crtw32\startup\tidtable.c
bad exception
f:\dd\vctools\crt\crtw32\lowio\ioinit.c
f:\dd\vctools\crt\crtw32\startup\stdargv.c
f:\dd\vctools\crt\crtw32\startup\stdenvp.c
f:\dd\vctools\crt\crtw32\misc\a_env.c
f:\dd\vctools\crt\crtw32\misc\winsig.c
MessageBoxW
GetActiveWindow
GetLastActivePopup
GetUserObjectInformationW
GetProcessWindowStation
Second Chance Assertion Failed: File
<file unknown>
, Line
_CrtDbgReport: String too long or IO Error
Assertion failed:
Assertion failed!
%s(%d) : %s
_CrtDbgReport: String too long or Invalid characters in String
f:\dd\vctools\crt\crtw32\mbstring\mbctype.c
<program name unknown>
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
SystemFunction036
f:\dd\vctools\crt\crtw32\stdio\_sftbuf.c
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
PDBOpenValidate5
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
template-parameter-
generic-type-
`anonymous namespace'
`non-type-template-parameter
`template-parameter
`vtordispex{
`vtordisp{
`adjustor{
`local static destructor helper'
`template static data member constructor helper'
`template static data member destructor helper'
static
virtual
private:
protected:
public:
[thunk]:
extern "C"
short
unsigned
volatile
std::nullptr_t
<ellipsis>
,<ellipsis>
throw(
double
__int8
__int16
__int32
__int64
__int128
<unknown>
wchar_t
__w64
UNKNOWN
signed
volatile
`unknown ecsu'
union
struct
class
coclass
cointerface
volatile
const
cli::array<
cli::pin_ptr<
{flat}
f:\dd\vctools\crt\crtw32\stdio\_file.c
f:\dd\vctools\crt\crtw32\stdio\output.c
f:\dd\vctools\crt\crtw32\misc\initmon.c
f:\dd\vctools\crt\crtw32\misc\initnum.c
f:\dd\vctools\crt\crtw32\misc\inittime.c
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
f:\dd\vctools\crt\crtw32\misc\wsetloca.c
(null)
`h````
xpxxxx
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
1#SNAN
1#QNAN
f:\dd\vctools\crt\crtw32\stdio\_getbuf.c
`h`hhh
xppwpp
f:\dd\vctools\crt\crtw32\misc\initctyp.c
f:\dd\vctools\crt\crtw32\lowio\osfinfo.c
f:\dd\vctools\crt\crtw32\convert\wcstoq.c
D:\hafizRemoteWorks\createFile\Debug\createFile.pdb
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVerror_category@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AV_System_error_category@std@@
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVinvalid_argument@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVoverflow_error@std@@
.?AVruntime_error@std@@
.?AVbad_function_call@std@@
.?AVregex_error@std@@
.?AVtype_info@@
.?AVbad_cast@std@@
.?AVbad_typeid@std@@
.?AV__non_rtti_object@std@@
.?AVbad_exception@std@@
.?AVDNameNode@@
.?AVcharNode@@
.?AVpcharNode@@
.?AVpDNameNode@@
.?AVDNameStatusNode@@
.?AVpairNode@@
WriteFile
CloseHandle
CreateFileW
KERNEL32.dll
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
FatalAppExitA
GetModuleFileNameW
GetModuleHandleExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
GetModuleHandleW
GetProcAddress
CreateSemaphoreW
GetStdHandle
IsProcessorFeaturePresent
GetLastError
HeapValidate
GetSystemInfo
ExitProcess
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
IsDebuggerPresent
LoadLibraryExW
GetCurrentThread
GetCurrentThreadId
GetProcessHeap
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetConsoleCtrlHandler
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
OutputDebugStringA
WriteConsoleW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapFree
HeapReAlloc
HeapSize
HeapQueryInformation
HeapAlloc
FreeLibrary
VirtualQuery
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
SetStdHandle
<?xml version='1.0' encoding='UTF-8' standalone='yes'?>
<assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
<security>
<requestedPrivileges>
<requestedExecutionLevel level='asInvoker' uiAccess='false' />
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
3D4N4t4~4
5&5F5f5
80h0t0
5(6,6064686
3 3$3(3,30343
6<7C7P7U7
7Z8_8h8
9%9*90969v9{9
;';?;D;
>#>+>0>4>8>a>
0A0H0L0P0T0X0\0`0d0
757<7@7D7H7L7P7T7X7
8%8@8G8L8P8T8u8
8>9D9H9L9P9
=-=1=?=C=P=T=b=f=t=x=
0)1P1W1
2+282E2R2
3H3k3+484B4\4
5 6%6.6X6]6b6
8C8L8Z8f8
<2<><Y<i<u<
7<7n7t7
8^8d8x8
9.949T9~9
9.:4:V:~:
;$;N;T;x;
<!<&<0<6<D<I<S<Y<f<k<u<{<
=$=*=8===G=M=[=`=j=p=~=
>>->2><>B>P>U>_>e>s>x>
?"?'?1?7?E?J?T?Z?h?m?w?}?
0&0,0:0?0I0O0]0b0l0r0
3 373A3^3d3
6,6S6X6]6b6l6
6(7-72797t7y7~7
=?>F>S>X>
>'?8?P?a?
V0[0m0
2,313&4+4=4z4
7'7,7S7
9D:H:L:P:v;{;
<+=C=H=
60;0M0
2)2!3&323_3d3i3
4"4.4[4`4e4
4Y6^6j6
8!8E8f8k8}8
9':,:1:>:W:n:
:%;1;U;a;
<L=Q=]=
?T?Y?e?
1$2)252b2g2l2
8-8j8o8{8
9&:.:7:G:L:X:n:z:
;E;J;V;
;1<7<o<u<
<)=/=h=m=y=
><>F>K>W>r>
1-1a1i1r1
292>2l2
4C4L4e4
5&6+6=6z6
7!7-767\7a7m7
<-<M>V>_>o>t>
?)?.?h?
2!2*20262=2B2g2
2*34393E3`3}3
7+7y7`8e8q8
89$9)9J9t9
;A;F;R;
>)>5>F>U>_>o>
?(?7?;?
60>0T0a0f0
0i1n1z1
1+20252M2
3)3M3R3^3
4F5K5]5~5
616<6J6Q6Y6`6
8"8Y9a9
:&:<:F:O:P;b;
0]1B2Q2D3O3u3
2f3k3}3
3&4+4=4
585E5S5c5t5{5
=\=b=h=n=t=z=
?!?,?1?7?A?K?`?e?
0!0)010<0A0G0Q0
0!111N1t1}1
2/242;2t2
3A4J4%535G5
7/8<8B8U8y8
9F:K:]:
;;6;;;M;
=6?;?M?
&:+:=:
5S5X5a5
6f7k7}7Z8_8
::;?;K;x;};
4*5/545z5
5"6'636`6e6j6t7y7~7
9":':3:`:e:j:
=/=4=9=
R0W0c0
3D3I3N3
> >E>J>P>u>
?!?'?D?
70J0g0|0
<<0<t<
>>>C>H>
2<2A2F2
9:9?9D9:$:-:W:\:a:
;5;:;?;
;'<,<5<_<d<i<
0L0Q0]0
0D3K3w3
4Y5`5g5
576<6H6u6z6
7*707S7
9V9[9m9
:A:H:N:U:h:m:t:{:
:>;J;R;s;y;
<D<I<U<
>1>D>J>Y>g>m>
?!?&?,?@?`?g?
042o2t2
4 4%4d4i4r4
4F5K5d5-6K6P6U6}6
6J7O7T7
8#8(8\8m8r8w8|8
9E9J9O9
97:<:A:i:n:s:x:
<:<I<v<}<
121?1D1J1W1\1b1
2#2V2b2n2s2x2
3/34393>3
4I4N4S4
7)7I7N7S7
9/<4<=<g<l<q<
=A=F=K=
>.>3><>f>k>p>
'0,010v0~0
383=3B3
5&5P5U5Z5
6[6`6i6
858:8C8m8r8w8
8X:]:f:
;M<R<[<
=8=a=f=o=
4O4T4Y4
5G5M5m5t5z5
6>6D6}6
6.747T7
<3=8=D=!?
070X0K1
2&24282<2@2D2
5&9+9=9g9
;-<R<^<m<
=!=3=g=W>
22373@3
9!9(9Y9
: ;%;.;X;];b;
=C=L=Z=f=
1-191T1d1p1
8.83888
>7?H?O?y?~?
0C0H0Q0{0
1"1'151J1U1`1q1Q2V2b2
:8:D:]:
;#;1;=;^;c;u;
0H1O1<2
2%3?3H329'>
1^2d2j2y2
;X;e;k;
<&<C<V<]<b<w<}<
5;7<8=9
:N<h>Y?
q0~1D2o2
<p<E=u=
?5?C?V?m?
0 0)090B0\0e0j0
172f2`3
6)666X6j6s6
7#767?7
7I8P8Y8y8
: :$:H:L:P:T:X:\:`:d:h:l:p:t:x:
> >$>(>
1+1C1P1Y1/2M2
7 8)8:8U8l8u8|8@9J9^9j9
;<2=A=G=P=U=y=
>J>\>}>
2"212U2
4$434Q4]4f4
4o5w5}5
6(6-656G6\6
6 7-757T7a7j7I8
919>9L9l9z9
2,2:2M2Z2m2
2(343=3W3^3c3k3
5$5>5E5K5T5t5
6;6F6d6o6
7;7i7x7
929>9G9`9h9
:;:F:U:{:
:";T;X;\;`;d;h;l;
<d<h<l<p<t<x<|<
182<2@2D2H2
4%464Q4k4x4
7=8L8w8$929;9
:F:X:a:f:
=$>(>,>0>4>8>
020@0I0P0
151C1L1L2
2d4o4w4
5535;5
7$7-7;7T7i7w7
8%939F9
>P?T?X?\?`?
151@1L1f1t1}1
1$20282A2J2R2
273D3R3[3
4'4/454F4X4g4p4
7+73797B7H7b7i7n7v7
71898H8Q8W8e8r8
:.:@:K:S:
= =$=(=,=0=4=8=<=@=D=H=L=P=T=
> >$>(>,>0>4>
3(3F3g3u3~374A4X4a4o4
5+515:5C5I5]5b5j5
6S6r6{6
;";3;>;G;U;a;m;y;
2C2H2Q2{2
23$3)3b3g3p3
1$1Q1Z1
3m8r8{8
?J?O?T?
G1L1X1
1#2(2-2o2
4>4C4H4
6+70757r7w7
:%;*;6;c;h;m;
;4<9<E<r<w<|<
><?A?M?}?
P1T1X1\1`1d1h1l1p1t1x1|1
:>;E;p;
>0?5?A?n?s?x?
0"0.0[0`0e0
2B2G2L2i5n5w5
6!6&6_6f6
7L7Q7Z7
?@?E?J?
0!0-0Z0_0d0
45$5)5`6
7:9";';3;`;e;j;
;,<1<=<j<o<t<
0050A0n0s0x0
0"1'131`1e1j1
3#3P3U3Z3y6~6
7,71767q7y7
8"8a8f8o8
;]<b<k<
?5?:???
0[0c0
3`4e4q4
4#5(5-5V5
6.63686v6~6
848S8r8
9,9K9j9=:e:
2.3;3m3r3{3
6&7+707j8
9(9,90949
:K;P;U;Z;
<O=p=u=z=
=6>;>@>
6V6[6m6
:":':,:
7<8h8t8
==>B>K>u>z>
1$1T1Y1^1
293>3J3z3
4;5@5L5|5
;Q<V<b<
6 6$6<6@6D6H6L6
>4?i?n?w?
0<0A0J0t0y0~0
2V3[3m3
4-4W4k4
64787<7@7D7H7L7P7
8G8L8Q8y:
;:;?;H;r;w;|;
2 2]2b2n2
0'176A6e6
8A9F9O9|9
X2\2`2d2h2l2p2t2x2|2
3 3$3*6
72878<8A8w8|8
<"<K<X<c<x<
='>,>5>j>o>t>
h0m0v0
0@1E1N1
2E3f3}3
1$2)222g2l2q2
3+40494k4u4
515:5G5
;f;k;w;
=;=Y>^>j>
>F?K?W?
2-323>3n3s3x3
5#5(5<6A6M6}6
8K9P9\9
:R<W<c<
2/34393&4+474g4l4q4
5M5R5W5D6I6U6
9!9-9]9b9g9
:b<g<s<
0=0B0G04191E1u1z1
1l2q2}2
5/64696&7+777g7l7q7A8F8R8
9b?g?s?
[0s1x1
2 2$2(2,2024282<2@2D2H2L2P2h2l2p2t2x2
2 3$3(3,3034383
j3#4(444d4i4n4
6T6Y6e6
>1>6>;>D?
7H8L8P8T8X8\8`8d8h8l8p8t8x8|8
2J2O2X2
81868;8u9z9
=@>E>Q>
>*?/?4?
%0o0t0
4q5x5p6u7
g2l2x2
3 3$3(3,3034383<3T3X3\3`3d3
<-=2=>=n=s=x=
>S?X?d?
0&1D2I2U2
21363B3r3w3|3
8(8X8]8b8
:$;);5;e;j;o;1<8<
=F>K>W>
2=2B2G24393E3u3z3
3j4o4{4
4*5^6c6o6
:;$;);
=<=A=F=$>)>5>e>j>o>
0R0W0c0
3!3Q3V3[3F4K4W4
78$8)8
9%9U9Z9_92:7:C:s:x:}:h;m;y;
>&?+?0?
0 0,0\0a0f0
6F6K6P6
6:8?8K8{8
9094989<9@9t9x9|9
;T=X=\=`=d=j?
d4h4l4p4t4x4|4
>6?;?@?
<]>b>k>
>\?a?j?
3.333<3f3k3p3
4<4Y4c4
5#6(6-6
65<K<E=[=
?i?n?w?
0<0A0F0
6W60858>8h8m8r8V9[9m9
<"=;=i=
=+>C?_?
0!1L1Q1]1
162;2M2
5D5R5`5v5
6g7l7u7
7#8(8-8
>4>9>>>.?]?b?k?
6$6N6S6X6
6U8Z8c8
99(;g;l;u;
=5>:>C>m>r>w>
4L4Q4V4|4
4-5c5h5q5v6
7%8.868=8c8i8n8v<
13@3Z3
3e4{4u5
9C:H:Q:{:
>,?1?6?
092@2#3*3
8 8$8(8,8084888<8@8D8H8L8P8T8X8
<"<(<.<4<:<@<F<L<R<X<^<d<j<p<v<|<
=$=*=0=6=<=B=H=N=T=Z=`=f=l=r=x=~=
;!;);@;z;
<4=T=t=
2 2$2(2,24282<2@2D2H2\5`5d5h5p6|9
1 1$1(1,101X1\1`1d1h1l1p1
1(343@3L3X3d3p3|3
5(5<6@6D6`6d6h6p6t6x6
>$>,>4><>D>L>T>\>d>l>t>|>
?$?,?4?<?D?L?T?\?d?l?t?|?
0$0,040<0D0L0T0\0d0l0t0|0
1$1,141<1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2
7 7@7D7H7P7T7X7`7d7h7
;$;,;4;<;D;L;T;\;d;l;t;|;
$<(<,<0<4<
4l;p;x;|;
@<H<P<X<`<h<p<x<
= =(=0=8=@=H=P=X=`=h=p=x=
> >(>0>8>@>H>P>X>`>h>p>x>
? ?(?0?8?@?H?P?X?`?h?p?x?
0 0(00080@0H0P0X0`0h0p0x0
1 1(10181@1H1P1X1`1h1p1x1
2 2(20282@2H2P2X2`2h2p2x2
3 3(30383@3H3P3X3d3l3t3|3
4$4,444<4D4L4T4\4d4l4t4|4
5$5,545<5D5L5T5\5d5l5t5|5
6$6,646<6D6L6T6\6d6l6t6|6
7$7,747<7D7L7T7\7d7l7t7|7
8$8,848<8D8L8T8\8d8l8t8|8
9$9,949<9D9L9T9\9d9l9t9|9
:$:,:4:<:D:L:T:\:d:l:t:|:
<T>X>\>
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:
4585<5@5H5L5P5T5\5`5d5h5p5t5x5|5
p7x7|7
0(040@0L0X0d0p0|0
1$101<1H1T1`1l1x1
2 2,282D2P2\2h2t2
= =,=8=D=P=\=h=t=
9(9,9@9H9L9T9l9
:,:8:P:h:p:
;$;<;@;T;\;`;d;l;
< <$<,<D<\<`<t<|<
=0=8=<=D=\=t=x=
>,>0>D>H>\>d>h>p>
? ?$?,?D?\?`?t?|?
0(00040<0T0l0p0
1$1(1<1D1H1P1h1
7,989\9h9
:(:4:X:d:
;(;4;H;T;\;h;l;p;|;
< <,<@<L<T<`<d<p<x<
=0=L=P=p=
>0>P>p>
?0?P?l?p?
0,000L0P0p0x0|0
1(141<1l1p1|1
282X2x2
3(343X3x3
4(4H4T4`4
5(545@5h5
686X6x6
7$7H7h7
2$2,242<2D2L2T2\2d2l2t2|2
2P3T3X3\3`3d3h3l3p3t3
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=
>$>0>4>8><>|>
2024282@2D2,7T7
9(9T9x9
:,:H:d:
g:\testFile.txt
c:\program files (x86)\microsoft visual studio 12.0\vc\include\xstring
invalid null pointer
xdigit
f:\dd\vctools\crt\crtw32\stdhpp\xstring
_BLOCK_TYPE_IS_VALID(pHead->nBlockUse)
f:\dd\vctools\crt\crtw32\misc\dbgdel.cpp
Warning
Assertion Failed
mode == _CRT_RPTHOOK_INSTALL || mode == _CRT_RPTHOOK_REMOVE
f:\dd\vctools\crt\crtw32\misc\dbgrpt.c
_CrtSetReportHookW2
pfnNewHook != NULL
("The hook function is not in the list!",0)
__crtMessageWindowW
wcscpy_s(szExeName, 260, L"<program name unknown>")
<program name unknown>
memcpy_s(szShortProgName, sizeof(TCHAR) * (260 - (szShortProgName - szExeName)), dotdotdot, sizeof(TCHAR) * 3)
For information on how your program can cause an assertion
failure, see the Visual C++ documentation on asserts.
Expression:
Line:
File:
Module:
Debug %s!
Program: %s%s%s%s%s%s%s%s%s%s%s%s
(Press Retry to debug the application)
(*_errno())
wcscpy_s(szOutMessage, 4096, L"_CrtDbgReport: String too long or IO Error")
_CrtDbgReport: String too long or IO Error
Microsoft Visual C++ Runtime Library
kernel32.dll
- floating point support not loaded
- not enough space for arguments
- not enough space for environment
- abort() has been called
- not enough space for thread data
- unexpected multithread lock error
- unexpected heap error
- unable to open console device
- not enough space for _onexit/atexit table
- pure virtual function call
- not enough space for stdio initialization
- not enough space for lowio initialization
- unable to initialize heap
- CRT not initialized
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- not enough space for locale information
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- inconsistent onexit begin-end variables
DOMAIN error
SING error
TLOSS error
runtime error
f:\dd\vctools\crt\crtw32\startup\crt0msg.c
_NMSG_WRITE
wcscpy_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), L"Runtime Error!\n\nProgram: ")
Runtime Error!
Program:
wcscpy_s(progname, progname_size, L"<program name unknown>")
wcsncpy_s(pch, progname_size - (pch - progname), L"...", 3)
wcscat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), L"\n\n")
wcscat_s(outmsg, (sizeof(outmsg) / sizeof(outmsg[0])), error_text)
f:\dd\vctools\crt\crtw32\misc\inithelp.c
__getlocaleinfo
strncpy_s(*straddress, outsize, pcbuffer, outsize - 1)
pnh == 0
f:\dd\vctools\crt\crtw32\heap\handler.cpp
_CrtCheckMemory()
f:\dd\vctools\crt\crtw32\misc\dbgheap.c
_CrtIsValidHeapPointer(pUserData)
pOldBlock->nLine == IGNORE_LINE && pOldBlock->lRequest == IGNORE_REQ
fRealloc || (!fRealloc && pNewBlock == pOldBlock)
_pLastBlock == pOldBlock
_pFirstBlock == pOldBlock
pUserData != NULL
_expand_dbg
pHead->nLine == IGNORE_LINE && pHead->lRequest == IGNORE_REQ
pHead->nBlockUse == nBlockUse
_pLastBlock == pHead
_pFirstBlock == pHead
_msize_dbg
(fNewBits==_CRTDBG_REPORT_FLAG) || ((fNewBits & 0x0ffff & ~(_CRTDBG_ALLOC_MEM_DF | _CRTDBG_DELAY_FREE_MEM_DF | _CRTDBG_CHECK_ALWAYS_DF | _CRTDBG_CHECK_CRT_DF | _CRTDBG_LEAK_CHECK_DF) ) == 0)
_CrtSetDbgFlag
pfn != NULL
_CrtDoForAllClientObjects
state != NULL
_CrtMemCheckpoint
_CrtMemDifference
oldState != NULL
newState != NULL
_printMemBlockData
_CrtMemDumpStatistics
IS_2_POW_N(align)
_aligned_offset_malloc_dbg
offset == 0 || offset < size
_aligned_offset_realloc_dbg
memblock != NULL
_aligned_msize_dbg
mscoree.dll
pValue != NULL
f:\dd\vctools\crt\crtw32\startup\crt0dat.c
_get_wpgmptr
_wpgmptr != NULL
_get_pgmptr
_pgmptr != NULL
path != NULL
__copy_path_to_wide_string
outPath != NULL
inString != NULL
__copy_to_char
outString != NULL
Runtime Check Error.
Unable to display RTC Message.
Run-Time Check Failure #%d - %s
user32.dll
pNode->_Next != NULL
f:\dd\vctools\crt\crtw32\eh\typname.cpp
type_info::_Name_base
strcpy_s ((char *)((type_info *)_This)->_M_data, len+2, (char *)pTmpUndName)
type_info::_Name_base_internal
strcpy_s (pTmpTypeName, len+2, (char *)pTmpUndName)
buf != NULL
f:\dd\vctools\crt\fpw32\conv\cvt.c
_cftoe2_l
sizeInBytes > 0
sizeInBytes > (size_t)(3 + (ndec > 0 ? ndec : 0) + 5 + 1)
strcpy_s(p, (sizeInBytes == (size_t)-1 ? sizeInBytes : sizeInBytes - (p - buf)), "e+000")
_cftoe_l
_cftoa_l
sizeInBytes > (size_t)(1 + 4 + ndec + 6)
_cftof2_l
_cftof_l
_cftog_l
f:\dd\vctools\crt\crtw32\startup\i386\fp8.c
_setdefaultprecision
_controlfp_s(((void *)0), 0x00010000, 0x00030000)
_crtheap
f:\dd\vctools\crt\crtw32\heap\heapinit.c
f:\dd\vctools\crt\crtw32\startup\stdenvp.c
_setenvp
strcpy_s(*env, cchars, p)
("Invalid error_mode", 0)
f:\dd\vctools\crt\crtw32\misc\errmode.c
_set_error_mode
f:\dd\vctools\crt\crtw32\dos\dosmap.c
_get_errno
_get_doserrno
dst != NULL
f:\dd\vctools\crt\crtw32\string\memcpy_s.c
memcpy_s
src != NULL
sizeInBytes >= count
((_Dst)) != NULL && ((_SizeInWords)) > 0
f:\dd\vctools\crt\crtw32\h\tcscpy_s.inl
wcscpy_s
(((_Src))) != NULL
Buffer is too small
(L"Buffer is too small" && 0)
(format != NULL)
f:\dd\vctools\crt\crtw32\stdio\swprintf.c
_swprintf
(string != NULL)
("Invalid signal or error", 0)
f:\dd\vctools\crt\crtw32\misc\winsig.c
signal
USER32.DLL
nRptType >= 0 && nRptType < _CRT_ERRCNT
f:\dd\vctools\crt\crtw32\misc\dbgrptt.c
_CrtSetReportMode
fMode == _CRTDBG_REPORT_MODE || (fMode & ~(_CRTDBG_MODE_FILE | _CRTDBG_MODE_DEBUG | _CRTDBG_MODE_WNDW)) == 0
_CrtSetReportFile
_VCrtDbgReportA
_itoa_s(nLine, szLineMessage, 4096, 10)
strcpy_s(szUserMessage, 4096, "_CrtDbgReport: String too long or IO Error")
strcpy_s(szLineMessage, 4096, szFormat ? "Assertion failed: " : "Assertion failed!")
strcat_s(szLineMessage, 4096, szUserMessage)
strcat_s(szLineMessage, 4096, "\r")
strcat_s(szLineMessage, 4096, "\n")
strcpy_s(szOutMessage, 4096, "_CrtDbgReport: String too long or IO Error")
strcpy_s(szOutMessage, 4096, szLineMessage)
e = mbstowcs_s(&ret, szOutMessage2, 4096, szOutMessage, ((size_t)-1))
wcscpy_s(szOutMessage2, 4096, L"_CrtDbgReport: String too long or Invalid characters in String")
_CrtDbgReport: String too long or Invalid characters in String
_VCrtDbgReportW
_itow_s(nLine, szLineMessage, 4096, 10)
Second Chance Assertion Failed: File
<file unknown>
, Line
wcscpy_s(szUserMessage, 4096, L"_CrtDbgReport: String too long or IO Error")
wcscpy_s(szLineMessage, 4096, szFormat ? L"Assertion failed: " : L"Assertion failed!")
Assertion failed:
Assertion failed!
wcscat_s(szLineMessage, 4096, szUserMessage)
wcscat_s(szLineMessage, 4096, L"\r")
wcscat_s(szLineMessage, 4096, L"\n")
%s(%d) : %s
wcscpy_s(szOutMessage, 4096, szLineMessage)
wcstombs_s(((void *)0), szOutMessage2, 4096, szOutMessage, ((size_t)-1))
strcpy_s(szOutMessage2, 4096, "_CrtDbgReport: String too long or Invalid characters in String")
wcstombs_s(&ret, szaOutMessage, 4096, szOutMessage, ((size_t)-1))
((_Dst)) != NULL && ((_SizeInBytes)) > 0
strcpy_s
f:\dd\vctools\crt\crtw32\h\tcscat_s.inl
wcscat_s
String is not null terminated
(L"String is not null terminated" && 0)
f:\dd\vctools\crt\crtw32\h\tcsncpy_s.inl
wcsncpy_s
strncpy_s
("Corrupted pointer passed to _freea", 0)
f:\dd\vctools\crt\crtw32\h\malloc.h
az-AZ-Latn
uz-UZ-Latn
kok-IN
syr-SY
div-MV
quz-BO
sr-SP-Latn
az-AZ-Cyrl
uz-UZ-Cyrl
quz-EC
sr-SP-Cyrl
quz-PE
smj-NO
bs-BA-Latn
smj-SE
sr-BA-Latn
sma-NO
sr-BA-Cyrl
sma-SE
sms-FI
smn-FI
zh-CHT
az-az-cyrl
az-az-latn
bs-ba-latn
div-mv
kok-in
quz-bo
quz-ec
quz-pe
sma-no
sma-se
smj-no
smj-se
smn-fi
sms-fi
sr-ba-cyrl
sr-ba-latn
sr-sp-cyrl
sr-sp-latn
syr-sy
uz-uz-cyrl
uz-uz-latn
zh-chs
zh-cht
zh-CHS
f:\dd\vctools\crt\crtw32\misc\winapinls.c
__crtDownlevelLCIDToLocaleName
wcscpy_s(outLocaleName, cchLocaleName, buffer)
((ptloci->lc_category[category].locale != NULL) && (ptloci->lc_category[category].refcount != NULL)) || ((ptloci->lc_category[category].locale == NULL) && (ptloci->lc_category[category].refcount == NULL))
f:\dd\vctools\crt\crtw32\misc\localref.c
c >= -1 && c <= 255
f:\dd\vctools\crt\crtw32\convert\isctype.c
pBlock != NULL
f:\dd\vctools\crt\crtw32\heap\expand.c
_expand_base
_CrtSetReportHook2
__crtMessageWindowA
strcpy_s(szExeName, 260, "<program name unknown>")
Debug %s!
Program: %hs%s%s%hs%s%hs%s%hs%s%s%hs%s
(Press Retry to debug the application)
f:\dd\vctools\crt\crtw32\stdio\sprintf.c
sprintf
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
_RandomValue != NULL
f:\dd\vctools\crt\crtw32\misc\rand_s.c
rand_s
ADVAPI32.DLL
("rand_s is not available on this platform", 0)
str != NULL
f:\dd\vctools\crt\crtw32\stdio\_sftbuf.c
flag == 0 || flag == 1
bin\MSPDB120.DLL
MSVCR120D.dll
SOFTWARE\Microsoft\VisualStudio\12.0\Setup\VC
ProductDir
MSPDB120
MSPDB120
f:\dd\vctools\crt\crtw32\convert\_fptostr.c
_fptostr
sizeInBytes > (size_t)((digits > 0 ? digits : 0) + 1)
pflt != NULL
f:\dd\vctools\crt\fpw32\conv\cfout.c
_fltout2
strcpy_s(resultstr, resultsize, autofos.man)
(options & ~_TWO_DIGIT_EXPONENT) == 0
f:\dd\vctools\crt\crtw32\stdio\outputformat.c
_set_output_format
("Invalid input value", 0)
f:\dd\vctools\crt\fpw32\tran\contrlfp.c
_controlfp_s
f:\dd\vctools\crt\crtw32\stdio\_flsbuf.c
("inconsistent IOB fields", stream->_ptr - stream->_base >= 0)
f:\dd\vctools\crt\crtw32\stdio\vswprint.c
_vswprintf_l
_vscwprintf_helper
_vswprintf_helper
(count == 0) || (string != NULL)
format != NULL
_vswprintf_s_l
string != NULL && sizeInWords > 0
("Buffer too small", 0)
_vsnwprintf_s_l
(stream != NULL)
f:\dd\vctools\crt\crtw32\stdio\output.c
_woutput_l
("'n' format specifier disabled", 0)
strcat_s
f:\dd\vctools\crt\crtw32\convert\xtoa.c
xtoa_s
sizeInTChars > 0
sizeInTChars > (size_t)(is_neg ? 2 : 1)
2 <= radix && radix <= 36
length < sizeInTChars
x64toa_s
s != NULL
f:\dd\vctools\crt\crtw32\convert\mbstowcs.c
_mbstowcs_l_helper
(pwcs == NULL && sizeInWords == 0) || (pwcs != NULL && sizeInWords > 0)
_mbstowcs_s_l
bufferSize <= INT_MAX
retsize <= sizeInWords
pwcs != NULL
f:\dd\vctools\crt\crtw32\convert\wcstombs.c
_wcstombs_l_helper
(dst != NULL && sizeInBytes > 0) || (dst == NULL && sizeInBytes == 0)
_wcstombs_s_l
sizeInBytes > retsize
xtow_s
x64tow_s
f:\dd\vctools\crt\crtw32\stdio\vsprintf.c
_vsnprintf_helper
_vsprintf_s_l
string != NULL && sizeInBytes > 0
_vsnprintf_s_l
ploci->lconv_mon_refcount > 0
f:\dd\vctools\crt\crtw32\misc\initmon.c
ploci->lconv_num_refcount > 0
f:\dd\vctools\crt\crtw32\misc\initnum.c
ploci->lc_time_curr->refcount > 0
f:\dd\vctools\crt\crtw32\misc\inittime.c
LC_ALL
LC_COLLATE
LC_CTYPE
LC_MONETARY
LC_NUMERIC
LC_TIME
("Invalid parameter for _configthreadlocale",0)
f:\dd\vctools\crt\crtw32\misc\wsetloca.c
_configthreadlocale
LC_MIN <= _category && _category <= LC_MAX
_wsetlocale
_wsetlocale_nolock
wcsncpy_s(lctemp, (sizeof(lctemp) / sizeof(lctemp[0])), s, len)
_wsetlocale_set_cat
wcscpy_s(pch_cat_locale, cch, lctemp)
_wsetlocale_get_all
wcscat_s(pch, cch, L";")
_expandlocale
wcsncpy_s(localeNameOutput, localeNameSizeInChars,_psetloc_data->_cacheLocaleName, (sizeof(_psetloc_data->_cacheLocaleName) / sizeof(_psetloc_data->_cacheLocaleName[0])))
wcscpy_s(output, sizeInChars, L"C")
wcsncpy_s(localeNameOutput, localeNameSizeInChars, names.szLocaleName, wcslen(names.szLocaleName) + 1)
wcsncpy_s(cacheout, cacheoutLen, expr, charactersInExpression + 1)
wcsncpy_s(localeNameOutput, localeNameSizeInChars, expr, charactersInExpression + 1)
wcsncpy_s(_psetloc_data->_cacheLocaleName, (sizeof(_psetloc_data->_cacheLocaleName) / sizeof(_psetloc_data->_cacheLocaleName[0])), expr, charactersInExpression + 1)
wcsncpy_s(_psetloc_data->_cacheLocaleName, (sizeof(_psetloc_data->_cacheLocaleName) / sizeof(_psetloc_data->_cacheLocaleName[0])), localeNameOutput, wcslen(localeNameOutput) + 1)
wcsncpy_s(cachein, cacheinLen, expr, charactersInExpression + 1)
wcscpy_s(output, sizeInChars, cacheout)
_wcscats
wcscat_s(outstr, numberOfElements, ( *(wchar_t * *)((substr += ( (sizeof(wchar_t *) + sizeof(int) - 1) & ~(sizeof(int) - 1) )) - ( (sizeof(wchar_t *) + sizeof(int) - 1) & ~(sizeof(int) - 1) )) ))
__lc_wcstolc
wcsncpy_s(names->szCodePage, (sizeof(names->szCodePage) / sizeof(names->szCodePage[0])), &wlocale[1], 16-1)
wcsncpy_s(names->szLanguage, (sizeof(names->szLanguage) / sizeof(names->szLanguage[0])), wlocale, len)
wcsncpy_s(names->szCountry, (sizeof(names->szCountry) / sizeof(names->szCountry[0])), wlocale, len)
wcsncpy_s(names->szCodePage, (sizeof(names->szCodePage) / sizeof(names->szCodePage[0])), wlocale, len)
__lc_lctowcs
wcscpy_s(locale, numberOfElements, names->szLanguage)
__copy_locale_name
wcsncpy_s(localeNameCopy, cch+1, localeName, cch+1)
_vsprintf_l
_vscprintf_helper
(null)
_output_l
( (_Stream->_flag & _IOSTRG) || ( fn = _fileno(_Stream), ( (_textmode_safe(fn) == __IOINFO_TM_ANSI) && !_tm_unicode_safe(fn))))
(ch != _T('\0'))
((((( H
((((( H
f:\dd\vctools\crt\crtw32\stdio\fileno.c
_fileno
(fh >= 0 && (unsigned)fh < (unsigned)_nhandle)
f:\dd\vctools\crt\crtw32\lowio\isatty.c
_isatty
f:\dd\vctools\crt\crtw32\h\tmakepath_s.inl
_wmakepath_s
(((_Path))) != NULL
f:\dd\vctools\crt\crtw32\h\tsplitpath_s.inl
_wsplitpath_s
(L"Invalid parameter", 0)
_Locale != NULL
f:\dd\vctools\crt\fpw32\include\strgtold12.inl
__strgtold12_l
f:\dd\vctools\crt\fpw32\conv\x10fout.c
$I10_OUTPUT
strcpy_s(fos->man, 21+1, "1#SNAN")
strcpy_s(fos->man, 21+1, "1#IND")
strcpy_s(fos->man, 21+1, "1#INF")
strcpy_s(fos->man, 21+1, "1#QNAN")
f:\dd\vctools\crt\fpw32\tran\i386\ieee87.c
_set_controlfp
_controlfp_s(((void *)0), newctrl, mask & ~0x00080000)
f:\dd\vctools\crt\crtw32\lowio\write.c
_write
(_osfile(fh) & FOPEN)
("Invalid file descriptor. File possibly closed by a different thread",0)
(buf != NULL)
_write_nolock
((cnt & 1) == 0)
isleadbyte(_dbcsBuffer(fh))
f:\dd\vctools\crt\crtw32\lowio\lseeki64.c
_lseeki64
f:\dd\vctools\crt\crtw32\stdio\_getbuf.c
_woutput_p_l
((type_pos >= 0) && (*end_pos == POSITION_CHAR) && (type_pos < _ARGMAX))
("Incorrect format specifier", 0)
((width_pos >= 0) && (*end_pos == POSITION_CHAR) && (type_pos < _ARGMAX))
_tvalidate_param_reuse(&pos_value[width_pos], e_int_arg, ch, flags)
((precis_pos >= 0) && (*end_pos == POSITION_CHAR) && (type_pos < _ARGMAX))
_tvalidate_param_reuse(&pos_value[precis_pos], e_int_arg, ch, flags)
((type_pos>=0) && (type_pos<_ARGMAX))
_tvalidate_param_reuse(&pos_value[type_pos], e_int_arg, ch, flags)
_tvalidate_param_reuse(&pos_value[type_pos], e_ptr_arg, ch, flags)
_tvalidate_param_reuse(&pos_value[type_pos], e_double_arg, ch, flags)
pass == FORMAT_OUTPUT_PASS
_tvalidate_param_reuse(&pos_value[type_pos], e_int64_arg, ch, flags)
_tvalidate_param_reuse(&pos_value[type_pos], e_long_long_arg, ch, flags)
((state == ST_NORMAL) || (state == ST_TYPE))
("Missing position in the format string", 0)
_woutput_s_l
f:\dd\vctools\crt\crtw32\stdio\printf.c
printf
(str != NULL)
f:\dd\vctools\crt\crtw32\stdio\fputwc.c
fputwc
_loc_update.GetLocaleT()->locinfo->mb_cur_max == 1 || _loc_update.GetLocaleT()->locinfo->mb_cur_max == 2
f:\dd\vctools\crt\crtw32\convert\mbtowc.c
_output_s_l
_output_p_l
_tvalidate_param_reuse(&pos_value[type_pos], e_short_arg, ch, flags)
f:\dd\vctools\crt\crtw32\misc\initctyp.c
ploci->ctype1_refcount > 0
american
american english
american-english
australian
belgian
canadian
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
dutch-belgian
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
french-belgian
french-canadian
french-luxembourg
french-swiss
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
irish-english
italian-swiss
norwegian
norwegian-bokmal
norwegian-nynorsk
portuguese-brazilian
spanish-argentina
spanish-bolivia
spanish-chile
spanish-colombia
spanish-costa rica
spanish-dominican republic
spanish-ecuador
spanish-el salvador
spanish-guatemala
spanish-honduras
spanish-mexican
spanish-modern
spanish-nicaragua
spanish-panama
spanish-paraguay
spanish-peru
spanish-puerto rico
spanish-uruguay
spanish-venezuela
swedish-finland
america
britain
england
great britain
holland
hong-kong
new-zealand
pr china
pr-china
puerto-rico
slovak
south africa
south korea
south-africa
south-korea
trinidad & tobago
united-kingdom
united-states
f:\dd\vctools\crt\crtw32\misc\getqloc.c
__get_qualified_locale
wcsncpy_s(lpOutStr->szLocaleName, (sizeof(lpOutStr->szLocaleName) / sizeof(lpOutStr->szLocaleName[0])), _psetloc_data->_cacheLocaleName, wcslen(_psetloc_data->_cacheLocaleName) + 1)
LangCountryEnumProcEx
wcsncpy_s(_psetloc_data->_cacheLocaleName, (sizeof(_psetloc_data->_cacheLocaleName) / sizeof(_psetloc_data->_cacheLocaleName[0])), lpLocaleString, wcslen(lpLocaleString) + 1)
LanguageEnumProcEx
GetLocaleNameFromDefault
wcsncpy_s(_psetloc_data->_cacheLocaleName, (sizeof(_psetloc_data->_cacheLocaleName) / sizeof(_psetloc_data->_cacheLocaleName[0])), localeName, wcslen(localeName) + 1)
sizeInBytes <= INT_MAX
f:\dd\vctools\crt\crtw32\convert\wctomb.c
_wctomb_s_l
(filedes >= 0 && (unsigned)filedes < (unsigned)_nhandle)
f:\dd\vctools\crt\crtw32\lowio\commit.c
_commit
(_osfile(filedes) & FOPEN)
nptr != NULL
f:\dd\vctools\crt\crtw32\convert\strtoq.c
strtoxq
ibase == 0 || (2 <= ibase && ibase <= 36)
f:\dd\vctools\crt\crtw32\convert\strtol.c
strtoxl
f:\dd\vctools\crt\crtw32\stdio\fclose.c
fclose
_fclose_nolock
f:\dd\vctools\crt\crtw32\lowio\osfinfo.c
_get_osfhandle
f:\dd\vctools\crt\crtw32\convert\wcstol.c
wcstoxl
f:\dd\vctools\crt\crtw32\stdio\vprintf.c
vprintf_helper
f:\dd\vctools\crt\crtw32\string\wcsicmp.c
_wcsicmp_l
_wcsicmp
first != NULL
f:\dd\vctools\crt\crtw32\string\wcsnicmp.c
_wcsnicmp_l
last != NULL
_wcsnicmp
f:\dd\vctools\crt\crtw32\convert\strtod.c
_strtod_l
f:\dd\vctools\crt\crtw32\lowio\close.c
_close
stream != NULL
f:\dd\vctools\crt\crtw32\stdio\_freebuf.c
CONOUT$
f:\dd\vctools\crt\crtw32\convert\wcstoq.c
wcstoxq
f:\dd\vctools\crt\crtw32\convert\wcstod.c
_wcstod_l
__wstrgtold12_l
No antivirus signatures available.

Process Tree


Deprecation note: While processing this analysis you did not have the httpreplay Python library installed. Installing this library (i.e., pip install httpreplay) will allow Cuckoo to do more proper PCAP analysis including but not limited to showing full HTTP and HTTPS (!) requests and responses. It is recommended that you install this library and possibly reprocess any interesting analysis tasks.

Hosts

No hosts contacted.

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
172.16.98.1 138 192.168.128.112 138
192.168.128.112 49340 192.168.128.111 53
192.168.128.112 50473 192.168.128.111 53
192.168.128.112 52344 192.168.128.111 53
192.168.128.112 58297 192.168.128.111 53
192.168.128.112 61357 192.168.128.111 53
192.168.128.112 61595 192.168.128.111 53
192.168.128.112 62509 192.168.128.111 53
192.168.128.112 63578 192.168.128.111 53
192.168.128.112 64272 192.168.128.111 53
192.168.128.112 65185 192.168.128.111 53
192.168.128.112 65321 192.168.128.111 53
192.168.128.112 137 192.168.128.255 137
192.168.128.112 138 192.168.128.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.
Task ID 9
Mongo ID 58c01f0a11d30832c44831ce
Cuckoo release 2.0-dev