Click to jump to signature section
Source: Submited Sample | Integrated Neural Analysis Model: Matched 99.8% probability |
Source: zed.exe | Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, GUARD_CF, TERMINAL_SERVER_AWARE |
Source: | Binary string: D:\a\1\b\bin\amd64\python312.pdb source: zed.exe, 00000008.00000002.2554885693.00007FF820AF2000.00000002.00000001.01000000.00000005.sdmp |
Source: | Binary string: D:\a\1\b\bin\amd64\unicodedata.pdb source: zed.exe, 00000006.00000003.1364209064.000001F951474000.00000004.00000020.00020000.00000000.sdmp, zed.exe, 00000008.00000002.2548315078.00007FF81F26F000.00000002.00000001.01000000.0000001E.sdmp |
Source: | Binary string: D:\a\1\b\libcrypto-3.pdb| source: zed.exe, 00000008.00000002.2550907096.00007FF820191000.00000002.00000001.01000000.00000013.sdmp |
Source: | Binary string: cryptography_rust.pdbc source: zed.exe, 00000008.00000002.2549702058.00007FF81FB67000.00000002.00000001.01000000.00000016.sdmp |
Source: | Binary string: D:\a\1\b\libssl-3.pdbDD source: zed.exe, 00000008.00000002.2554191441.00007FF820684000.00000002.00000001.01000000.00000015.sdmp |
Source: | Binary string: ossl_ec_GFp_simple_group_set_curvecrypto\ec\ecp_smpl.cossl_ec_GFp_simple_group_check_discriminantossl_ec_GFp_simple_point_set_affine_coordinatesossl_ec_GFp_simple_point_get_affine_coordinatesossl_ec_GFp_simple_make_affineossl_ec_GFp_simple_points_make_affineossl_ec_GFp_simple_field_invossl_ec_GFp_simple_blind_coordinatescrypto\buffer\buffer.cBUF_MEM_growBUF_MEM_grow_cleancompiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG";CPUINFO: OPENSSL_ia32cap=0x%llx:0x%llxOPENSSL_ia32cap env:%sos-specific.dllCPUINFO: crypto\initthread.cOPENSSL_ia32cap` source: zed.exe, 00000008.00000002.2549702058.00007FF81FB67000.00000002.00000001.01000000.00000016.sdmp |
Source: | Binary string: D:\a\1\b\bin\amd64\_overlapped.pdb source: zed.exe, 00000006.00000003.1280984486.000001F95144E000.00000004.00000020.00020000.00000000.sdmp |
Source: | Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb source: zed.exe, 00000006.00000003.1279553215.000001F95144E000.00000004.00000020.00020000.00000000.sdmp, zed.exe, 00000008.00000002.2558993887.00007FF832813000.00000002.00000001.01000000.00000006.sdmp |
Source: | Binary string: compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG" source: zed.exe, 00000008.00000002.2550907096.00007FF8200F9000.00000002.00000001.01000000.00000013.sdmp |
Source: | Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdbGCTL source: zed.exe, 00000006.00000003.1279553215.000001F95144E000.00000004.00000020.00020000.00000000.sdmp, zed.exe, 00000008.00000002.2558993887.00007FF832813000.00000002.00000001.01000000.00000006.sdmp |
Source: | Binary string: D:\a\1\b\bin\amd64\_tkinter.pdb source: zed.exe, 00000008.00000002.2553699562.00007FF8205A8000.00000002.00000001.01000000.00000018.sdmp |
Source: | Binary string: D:\a\1\b\libcrypto-3.pdb source: zed.exe, 00000008.00000002.2550907096.00007FF820191000.00000002.00000001.01000000.00000013.sdmp |
Source: | Binary string: D:\a\1\b\bin\amd64\_multiprocessing.pdb source: zed.exe, 00000006.00000003.1280902728.000001F95144E000.00000004.00000020.00020000.00000000.sdmp |
Source: | Binary string: compiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG" source: zed.exe, 00000008.00000002.2549702058.00007FF81FB67000.00000002.00000001.01000000.00000016.sdmp |
Source: | Binary string: D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140_1.amd64.pdb source: zed.exe, 00000006.00000003.1279716134.000001F95144E000.00000004.00000020.00020000.00000000.sdmp, zed.exe, 00000008.00000002.2558231566.00007FF8313D5000.00000002.00000001.01000000.0000000F.sdmp |
Source: | Binary string: k1k2k3X9_62_PENTANOMIALp.otherp.onBasisp.tpBasisp.ppBasismX9_62_CHARACTERISTIC_TWOp.primep.char_twofieldTypeX9_62_FIELDIDX9_62_CURVEfieldIDcurvebaseECPARAMETERSvalue.named_curvevalue.parametersvalue.implicitlyCAECPKPARAMETERSprivateKeyparameterspublicKeyEC_PRIVATEKEYec_asn1_group2fieldidcrypto\ec\ec_asn1.cec_asn1_group2curveEC_GROUP_get_ecparametersEC_GROUP_get_ecpkparametersEC_GROUP_new_from_ecparametersEC_GROUP_new_from_ecpkparametersi2d_ECPKParametersd2i_ECPrivateKeyi2d_ECPrivateKeyi2d_ECParametersd2i_ECParameterso2i_ECPublicKeyi2o_ECPublicKeycompiler: cl /Zi /Fdossl_static.pdb /MT /Zl /Gs0 /GF /Gy /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG"3.3.2built on: Tue Sep 3 19:22:24 2024 UTCplatform: VC-WIN64AOPENSSLDIR: "C:\Program Files\Common Files\SSL"ENGINESDIR: "C:\Program Files\OpenSSL\lib\engines-3"MODULESDIR: "C:\Program Files\OpenSSL\lib\ossl-modules"CPUINFO: N/Anot availablecrypto\init.cOPENSSL_init_cryptocrypto\bio\bio_lib.cBIO_new_exbio_read_internbio_write_internBIO_sendmmsgBIO_recvmmsgBIO_putsBIO_getsBIO_get_line BIO_ctrlBIO_callback_ctrlBIO_find_type source: zed.exe, 00000008.00000002.2549702058.00007FF81FB67000.00000002.00000001.01000000.00000016.sdmp |
Source: | Binary string: D:\a\1\b\bin\amd64\select.pdb source: zed.exe, 00000008.00000002.2558859645.00007FF832163000.00000002.00000001.01000000.0000000D.sdmp |
Source: | Binary string: D:\a\1\b\bin\amd64\_ctypes.pdb source: zed.exe, 00000008.00000002.2558474117.00007FF8313F1000.00000002.00000001.01000000.00000008.sdmp |
Source: | Binary string: D:\a\1\b\bin\amd64\_hashlib.pdb source: zed.exe, 00000006.00000003.1280623026.000001F95144E000.00000004.00000020.00020000.00000000.sdmp, zed.exe, 00000008.00000002.2555889916.00007FF821467000.00000002.00000001.01000000.00000012.sdmp |
Source: | Binary string: D:\a\1\b\bin\amd64\_lzma.pdbNN source: zed.exe, 00000006.00000003.1280756006.000001F95144E000.00000004.00000020.00020000.00000000.sdmp, zed.exe, 00000008.00000002.2557002717.00007FF821A5C000.00000002.00000001.01000000.0000000B.sdmp |
Source: | Binary string: D:\a\1\b\bin\amd64\_asyncio.pdb source: zed.exe, 00000006.00000003.1279821816.000001F95144E000.00000004.00000020.00020000.00000000.sdmp |
Source: | Binary string: D:\a\1\b\bin\amd64\pyexpat.pdb source: zed.exe, 00000008.00000002.2556332736.00007FF821A02000.00000002.00000001.01000000.00000010.sdmp |
Source: | Binary string: D:\a\1\b\bin\amd64\_queue.pdb source: zed.exe, 00000006.00000003.1281084035.000001F95144E000.00000004.00000020.00020000.00000000.sdmp, zed.exe, 00000008.00000002.2557820528.00007FF831333000.00000002.00000001.01000000.00000011.sdmp |
Source: | Binary string: D:\a\1\b\bin\amd64\_lzma.pdb source: zed.exe, 00000006.00000003.1280756006.000001F95144E000.00000004.00000020.00020000.00000000.sdmp, zed.exe, 00000008.00000002.2557002717.00007FF821A5C000.00000002.00000001.01000000.0000000B.sdmp |
Source: | Binary string: D:\a\1\b\bin\amd64\_bz2.pdb source: zed.exe, 00000006.00000003.1279938911.000001F95144E000.00000004.00000020.00020000.00000000.sdmp, zed.exe, 00000008.00000002.2558033578.00007FF83134E000.00000002.00000001.01000000.0000000A.sdmp |
Source: | Binary string: @ compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG"OpenSSL 3.0.13 30 Jan 20243.0.13built on: Mon Feb 5 17:39:09 2024 UTCplatform: VC-WIN64A-masmOPENSSLDIR: "C:\Program Files\Common Files\SSL"ENGINESDIR: "C:\Program Files\OpenSSL\lib\engines-3"MODULESDIR: "C:\Program Files\OpenSSL\lib\ossl-modules"CPUINFO: N/Anot availableget_and_lock..\s\crypto\ex_data.cossl_crypto_get_ex_new_index_exossl_crypto_new_ex_data_exCRYPTO_dup_ex_dataCRYPTO_set_ex_dataOPENSSL_WIN32_UTF8..\s\crypto\getenv.ccompiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -D"OPENSSL_BUILDING_OPENSSL" -D"OPENSSL_SYS_WIN32" -D"WIN32_LEAN_AND_MEAN" -D"UNICODE" -D"_UNICODE" -D"_CRT_SECURE_NO_DEPRECATE" -D"_WINSOCK_DEPRECATED_NO_WARNINGS" -D"NDEBUG";CPUINFO: OPENSSL_ia32cap=0x%llx:0x%llxOPENSSL_ia32cap env:%sos-specificC:\Program Files\Common Files\SSLC:\Program Files\OpenSSL\lib\ossl-modules.dllCPUINFO: ..\s\crypto\init.cOPENSSL_init_cryptoOPENSSL_atexit..\s\crypto\initthread.c..\s\crypto\mem_sec.cassertion failed: (bit & 1) == 0assertion failed: list >= 0 && list < sh.freelist_sizeassertion failed: ((ptr - sh.arena) & ((sh.arena_size >> list) - 1)) == 0assertion failed: bit > 0 && bit < sh.bittable_sizeassertion failed: TESTBIT(table, bit)assertion failed: !TESTBIT(table, bit)assertion failed: WITHIN_FREELIST(list)assertion failed: WITHIN_ARENA(ptr)assertion failed: temp->next == NULL || WITHIN_ARENA(temp->next)assertion failed: (char **)temp->next->p_next == listassertion failed: WITHIN_FREELIST(temp2->p_next) || WITHIN_ARENA(temp2->p_next)assertion failed: size > 0assertion failed: (size & (size - 1)) == 0assertion failed: (minsize & (minsize - 1)) == 0assertion failed: sh.freelist != NULLassertion failed: sh.bittable != NULLassertion failed: sh.bitmalloc != NULLassertion failed: !sh_testbit(temp, slist, sh.bitmalloc)assertion failed: temp != sh.freelist[slist]assertion failed: sh.freelist[slist] == tempassertion failed: temp-(sh.arena_size >> slist) == sh_find_my_buddy(temp, slist)assertion failed: sh_testbit(chunk, list, sh.bittable)assertion failed: WITHIN_ARENA(chunk)assertion failed: sh_testbit(ptr, list, sh.bittable)assertion failed: ptr == sh_find_my_buddy(buddy, list)assertion failed |