11b06ac0c7d2a68407539dbd74efb78d56dc9453f00ccb98e578b7e8ea968dd0

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2026-Sep-26 07:55:33
Detected languages English - United States

Plugin Output

Info Matching compiler(s): MASM/TASM - sig1(h)
Info Interesting strings found in the binary: Contains domain names:
  • adobe.com
  • crl.microsoft.com
  • dearimgui.com
  • github.com
  • http://crl.microsoft.com
  • http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0
  • http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
  • http://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z
  • http://ns.adobe.com
  • http://ns.adobe.com/tiff/1.0/
  • http://ns.adobe.com/xap/1.0/
  • http://ns.adobe.com/xap/1.0/mm/
  • http://ns.adobe.com/xap/1.0/sType/ResourceEvent#
  • http://purl.org
  • http://sajatypeworks.comMicrosoft
  • http://www.gimp.org
  • http://www.gimp.org/xmp/
  • http://www.microsoft.com
  • http://www.microsoft.com/PKI/docs/CPS/default.htm0
  • http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0
  • http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
  • http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0
  • http://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0
  • http://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0a
  • http://www.microsoft.com/pkiops/docs/primarycps.htm0
  • http://www.microsoft.com0
  • http://www.w3.org
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#
  • https://github.com
  • https://pthom.github.io
  • https://pthom.github.io/imgui_explorer
  • https://scripts.sil.org
  • https://scripts.sil.org/OFL
  • https://www.dearimgui.com
  • https://www.dearimgui.com/faq/
  • microsoft.com
  • ns.adobe.com
  • roblox.com
  • scripts.sil.org
  • thumbnails.roblox.com
  • users.roblox.com
  • www.dearimgui.com
  • www.gimp.org
  • www.microsoft.com
  • www.w3.org
Info Cryptographic algorithms detected in the binary: Uses constants related to SHA256
Uses constants related to RC5 or RC6
Uses known Mersenne Twister constants
Suspicious The PE is possibly packed. Unusual section name found: .msvcjmc
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • GetProcAddress
 Functions which can be used for anti-debugging purposes:
  • CreateToolhelp32Snapshot
  • FindWindowW
 Code injection capabilities:
  • WriteProcessMemory
  • VirtualAllocEx
  • OpenProcess
 Possibly launches other programs:
  • ShellExecuteW
  • system
 Uses functions commonly found in keyloggers:
  • GetForegroundWindow
  • GetAsyncKeyState
 Memory manipulation functions often used by packers:
  • VirtualAllocEx
  • VirtualProtectEx
 Has Internet access capabilities:
  • WinHttpCloseHandle
  • WinHttpQueryDataAvailable
  • WinHttpReadData
  • WinHttpQueryHeaders
  • WinHttpReceiveResponse
  • WinHttpSendRequest
  • WinHttpConnect
  • WinHttpOpenRequest
  • WinHttpOpen
 Functions related to the privilege level:
  • CheckTokenMembership
  • OpenProcessToken
  • AdjustTokenPrivileges
 Manipulates other processes:
  • ReadProcessMemory
  • Process32FirstW
  • Process32NextW
  • WriteProcessMemory
  • OpenProcess
 Can take screenshots:
  • GetDC
  • FindWindowW
 Reads the contents of the clipboard:
  • GetClipboardData
Malicious VirusTotal score: 17/71 (Scanned on 2026-09-26 08:25:05) Arcabit: Trojan.Lazy.DB4CEB
BitDefender: Gen:Variant.Lazy.740587
Bkav: W32.Malware.CC017B52
CTX: exe.unknown.lazy
CrowdStrike: win/malicious_confidence_60% (D)
ESET-NOD32: Win64/GenKryptik_AGen.EKZ trojan
Elastic: malicious (high confidence)
Emsisoft: Gen:Variant.Lazy.740587 (B)
GData: Gen:Variant.Lazy.740587
Google: Detected
Ikarus: Trojan.Win64.Krypt
McAfeeD: ti!11B06AC0C7D2
MicroWorld-eScan: Gen:Variant.Lazy.740587
Microsoft: Trojan:Win32/Wacatac.B!ml
Symantec: ML.Attribute.HighConfidence
Trapmine: malicious.moderate.ml.score
VIPRE: Gen:Variant.Lazy.740587

Hashes

MD5 9d3f2f12ca405595450d395ab60659f4 🔍
SHA1 32697c1712b81fd871bfa3198a7380100af1ba78 🔍
SHA256 11b06ac0c7d2a68407539dbd74efb78d56dc9453f00ccb98e578b7e8ea968dd0 🔍
SHA3 6d8e45ed3d675d7fbb55bebc4672f65c6d8021530266c6bc15c32fb5ce5362b5 🔍
SSDeep 49152:5Pinn/Dr51fQTiSdbqH+y3NxYErW0xkqVijfTdEf99VnJbtq+xoU0id+2FhLcwY:Ngd15dKid+2fLUIrdl4tpzJ0yKsKH 🔍
Imports Hash 2812c2c352129394d86cd1c069000032 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0xf0

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 10
TimeDateStamp 2026-Sep-26 07:55:33
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x4dd400
SizeOfInitializedData 0x3ed200
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000002270 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x8d0000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 06919d4e6edf28eec9c70378495e1ee4 🔍
SHA1 7901bb6dcafb17b1aecf8eb6c9f04e929833c310 🔍
SHA256 75181b1ff6e59ca9dc66f705c46b98042c7b75db61d888b5855f7ef0c3649a6c 🔍
SHA3 3e802fccd63641620f97a53e86ec77d3edc37a32cabf8fc24f1480fcc055cce4 🔍
VirtualSize 0x4dd21e
VirtualAddress 0x1000
SizeOfRawData 0x4dd400
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.22303

.rdata

MD5 c09450434e10450ed1751cdf2fc80bfe 🔍
SHA1 dfb9fb1736d8c1fb293abfd72e1c4afdbdf1fa8a 🔍
SHA256 cc30c9472d430607336f4c6e8dac05264528ceca5db7a32cf583e2898ab7e514 🔍
SHA3 b5763351c4e7a3aa988a089c6187a5ebdcced50fa81a95425a3f278e39bdaa53 🔍
VirtualSize 0x2b8d7e
VirtualAddress 0x4df000
SizeOfRawData 0x2b8e00
PointerToRawData 0x4dd800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.07207

.data

MD5 89ad0504f9e8173312184a1a1a76e0ae 🔍
SHA1 0a9d9e3cadd886c9093c0063d502d929fabb381d 🔍
SHA256 91f44ff18c5b912613353219379ba053f0c61b71a69866b26be8d5a54ecc4e19 🔍
SHA3 c18d5c62383080a0698c560e1e2e564893a698add36fb7e854298975ffbb21f7 🔍
VirtualSize 0xe5fa0
VirtualAddress 0x798000
SizeOfRawData 0xd7400
PointerToRawData 0x796600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 6.59942

.pdata

MD5 3869353c5a682f138bb872be9c80677b 🔍
SHA1 a9aadfd7cbdba9f37298db037c0c7d3de93dc0e0 🔍
SHA256 1c71f2167b95caea04a5026d8e8f8b867ef7d464595351eb577d706530824280 🔍
SHA3 3287cd4dabb00ed14fb252bf4671cd97bfd986ee866f771016ff7847a2d0148f 🔍
VirtualSize 0x3ade8
VirtualAddress 0x87e000
SizeOfRawData 0x3ae00
PointerToRawData 0x86da00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.99027

.idata

MD5 5bc90abe8ae9cf6c62c7fe41feb10eae 🔍
SHA1 8e68e6384a14676c76f2ab9ca10f3c07de89832a 🔍
SHA256 0aa6c3e609c743bc0409a270b60ccfaa82ff6e5718b3e956c008eab4e0a0ea36 🔍
SHA3 ef9767adfd692ad9b6145b52c989fe9a33bc79c7cc0e4f3b45c07705177da8c5 🔍
VirtualSize 0x61d6
VirtualAddress 0x8b9000
SizeOfRawData 0x6200
PointerToRawData 0x8a8800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.40152

.msvcjmc

MD5 71481c507ef343d1594a36d15c60e9d2 🔍
SHA1 efdeb17b510595c2985e3326cbba6037f8d12d80 🔍
SHA256 e6c4342b66a251773404403a6616734aca38c77b5255e914c926d6fc94a1e11e 🔍
SHA3 81a84a60c776039962d5532702a5f758721db767cc04c9d7c3b2973b412889e2 🔍
VirtualSize 0x2786
VirtualAddress 0x8c0000
SizeOfRawData 0x2800
PointerToRawData 0x8aea00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.716623

.tls

MD5 b7b3168031afa8fd8723e4884cb11d13 🔍
SHA1 c1e8cdbf30c41d9a8a6f33407574289ad09714c6 🔍
SHA256 606eafc22ba86d568f74678d80bd99931bdee14db9f816cf39cea5403459e473 🔍
SHA3 9cfe16bb6695ba8eeb076c5a384edcf51b26c485b04bbeadbf23698264500f50 🔍
VirtualSize 0x3d9
VirtualAddress 0x8c3000
SizeOfRawData 0x400
PointerToRawData 0x8b1200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.0111738

.00cfg

MD5 179995af7b5dcbd8e1534b589f23aef6 🔍
SHA1 0463eff73032463bd845d7a2cb2a2bba416f4eec 🔍
SHA256 9e66c4c73438f9e7aceab5a7275a2b1947666d5411a55b5814a45b6ee91588a0 🔍
SHA3 01bd520c10c59e7bc984953dabb87184fcb50cd5ad9e3cffcfdc30dd5cc62be2 🔍
VirtualSize 0x175
VirtualAddress 0x8c4000
SizeOfRawData 0x200
PointerToRawData 0x8b1600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 0.431939

.rsrc

MD5 c1888030e9d4af0bf4b9eb0f10924bfe 🔍
SHA1 90031a1124f83c1b856fc1be52a2368adc87b93e 🔍
SHA256 aeba0197086e0ae06f84bad961fd0f11ee76775e876ac4a4d49e073de5421b7c 🔍
SHA3 d5225171ec347082ba282faa4af1417f7a8806373773897a97e996087234e497 🔍
VirtualSize 0x43c
VirtualAddress 0x8c5000
SizeOfRawData 0x600
PointerToRawData 0x8b1800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 2.14297

.reloc

MD5 91cc40e8072113951e8662a24d51b561 🔍
SHA1 85802441eb8ca33b92e24a84b62b41bbcdbd8fc1 🔍
SHA256 9d6db7a20e430430a773cb31a6ae5607fd4eaf5b6f300dc7693cea25f979a8f9 🔍
SHA3 447fc3ca4dfee8d961977424d104d012cf67c35ad8603254a38813d98b7eefa1 🔍
VirtualSize 0x9fd1
VirtualAddress 0x8c6000
SizeOfRawData 0xa000
PointerToRawData 0x8b1e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 2.87897

Imports

KERNEL32.dll SetUnhandledExceptionFilter
AddVectoredExceptionHandler
GetCurrentProcess
GetTickCount64
GetVersionExA
GetModuleFileNameA
GetModuleFileNameW
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
SetConsoleTitleA
K32EnumProcessModules
K32GetModuleInformation
CloseHandle
Sleep
GetExitCodeProcess
ReadProcessMemory
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetTickCount
WriteProcessMemory
GetLastError
SetPriorityClass
WaitForSingleObject
CreateThread
GetCurrentThread
SetThreadPriority
SetLastError
FlushInstructionCache
GetSystemInfo
VirtualAllocEx
VirtualProtectEx
VirtualQueryEx
VirtualFreeEx
GetModuleHandleW
Module32FirstW
Module32NextW
GetProcessId
OpenProcess
CompareStringOrdinal
GetFileInformationByHandleEx
CreateHardLinkW
MoveFileExW
RtlCaptureStackBackTrace
CreateDirectoryExW
DeviceIoControl
AreFileApisANSI
CreateFile2
GetTempPathW
SetFileTime
SetFileInformationByHandle
SetFileAttributesW
GetFullPathNameW
GetFinalPathNameByHandleW
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
GetDiskFreeSpaceExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetLocaleInfoEx
FormatMessageA
LocalFree
TryAcquireSRWLockShared
TryAcquireSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStartupInfoW
RaiseException
IsDebuggerPresent
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetCurrentThreadId
CreateSymbolicLinkW
IsDBCSLeadByte
GetLocaleInfoA
LoadLibraryA
GetProcAddress
GetModuleHandleA
FreeLibrary
QueryPerformanceFrequency
QueryPerformanceCounter
VerSetConditionMask
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
GlobalLock
GetStdHandle
GlobalUnlock
GlobalAlloc
CopyFile2
OutputDebugStringA
USER32.dll SetWindowLongW
BeginPaint
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
GetKeyboardLayout
TrackMouseEvent
GetMessageExtraInfo
DefWindowProcW
GetKeyState
GetCapture
SetCapture
ReleaseCapture
IsWindowUnicode
GetForegroundWindow
GetDC
ReleaseDC
GetClientRect
SetCursorPos
SetCursor
GetCursorPos
ClientToScreen
UpdateWindow
SetWindowDisplayAffinity
SetLayeredWindowAttributes
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
UnregisterClassW
PostQuitMessage
PeekMessageW
EndPaint
DispatchMessageW
TranslateMessage
IsWindow
GetSystemMetrics
SendInput
FindWindowW
GetAsyncKeyState
MessageBoxA
SetProcessDPIAware
ScreenToClient
LoadCursorW
MonitorFromWindow
GDI32.dll DeleteObject
GetDeviceCaps
CreateRectRgn
ADVAPI32.dll AllocateAndInitializeSid
CheckTokenMembership
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
FreeSid
SHELL32.dll ShellExecuteExW
ShellExecuteW
IMM32.dll ImmGetContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmReleaseContext
D3DCOMPILER_47.dll D3DCompile
dwmapi.dll DwmIsCompositionEnabled
DwmFlush
DwmGetColorizationColor
DwmEnableBlurBehindWindow
DwmExtendFrameIntoClientArea
MSVCP140D.dll ?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Xbad_function_call@std@@YAXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Xtime_get_ticks
_Query_perf_counter
_Query_perf_frequency
_Thrd_join
_Thrd_id
_Mtx_lock
_Mtx_unlock
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?setf@ios_base@std@@QEAAHHH@Z
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
_Thrd_detach
?is@?$ctype@D@std@@QEBA_NFD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??Bios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
dbghelp.dll SymFromAddr
SymInitialize
WINMM.dll timeBeginPeriod
timeEndPeriod
WINHTTP.dll WinHttpCloseHandle
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpConnect
WinHttpOpenRequest
WinHttpOpen
d3d11.dll D3D11CreateDeviceAndSwapChain
VCRUNTIME140D.dll __vcrt_LoadLibraryExW
__vcrt_GetModuleHandleW
__vcrt_GetModuleFileNameW
__std_type_info_destroy_list
__C_specific_handler_noexcept
__current_exception_context
__current_exception
__C_specific_handler
__std_exception_destroy
_CxxThrowException
strstr
strchr
__std_exception_copy
memset
memmove
memcpy
memcmp
memchr
VCRUNTIME140_1D.dll __CxxFrameHandler4
ucrtbased.dll setvbuf
ungetc
_lock_file
_unlock_file
terminate
_beginthreadex
_fdtest
abs
sqrt
strcpy
lroundf
tolower
realloc
strtoll
_errno
strncpy_s
strtof
strtol
tanf
lround
_wcsicmp
fopen_s
fputs
_time64
strncat_s
_CrtDbgReportW
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
_callnewh
_seh_filter_exe
_set_app_type
__setusermatherr
_get_initial_narrow_environment
_initterm
_initterm_e
fsetpos
_exit
_set_fmode
__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
_free_dbg
strcpy_s
strcat_s
__stdio_common_vsprintf_s
_wmakepath_s
_wsplitpath_s
wcscpy_s
_rotl
_malloc_dbg
___lc_codepage_func
abort
_fseeki64
sqrtf
fmodf
cosf
ceilf
fabs
qsort
malloc
free
__stdio_common_vsscanf
__stdio_common_vsprintf
__stdio_common_vfprintf
fwrite
ftell
fseek
fread
fflush
fclose
_wfopen
__acrt_iob_func
_wassert
strncpy
strlen
strcmp
fputc
fgetpos
fgetc
_get_stream_buffer_pointers
system
_dupenv_s
strftime
_localtime64_s
wcslen
_CrtDbgReport
_calloc_dbg
logf
atan2f
pow
log
atof
acosf
sinf
powf
floorf
toupper
exit
strncmp
expf

Delayed Imports

1

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x17d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.91161
MD5 1e4a89b11eae0fcf8bb5fdd5ec3b6f61 🔍
SHA1 4260284ce14278c397aaf6f389c1609b0ab0ce51 🔍
SHA256 4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df 🔍
SHA3 4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353 🔍

Version Info

TLS Callbacks

StartAddressOfRawData 0x1408c3000
EndAddressOfRawData 0x1408c32d8
AddressOfIndex 0x14087deec
AddressOfCallbacks 0x1404dfcb8
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_8BYTES
Callbacks (EMPTY)

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x14086d580

RICH Header

XOR Key 0xf0e9fd95
Unmarked objects 0
Imports (35721) 6
ASM objects (35721) 4
C objects (35721) 11
C++ objects (35721) 40
Imports (33145) 27
Total imports 429
C++ objects (36248) 33
Resource objects (36248) 1
Linker (36248) 1

Errors

Leave a comment

No comments yet.