Manalyze report for 3ee51b5f9579b775e87edb23c238650a512c2fe46efc06694cd906a771727f97

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2026-Mar-29 20:15:28

Plugin Output

Suspicious	Strings found in the binary may indicate undesirable behavior:	`Miscellaneous malware strings: cmd.exe` `Contains domain names: http://luajit.org luajit.org`
Suspicious	The PE contains functions most legitimate programs don't use.	`[!] The program may be hiding some of its imports: GetProcAddress LoadLibraryExA LoadLibraryExW` `Possibly launches other programs: CreateProcessW` `Can create temporary files: GetTempPathW CreateFileW` `Memory manipulation functions often used by packers: VirtualAlloc VirtualProtect`
Malicious	VirusTotal score: 38/65 (Scanned on 2026-10-06 11:16:02)	`AVG: Win64:MalwareX-gen [Misc]` `Alibaba: Trojan:Win64/MalwareX.e1a9b980` `Antiy-AVL: Trojan/Win64.Lazy` `Avast: Win64:MalwareX-gen [Misc]` `Avira: TR/W64.Agent` `Bkav: W32.Malware.5C19FD98` `CTX: exe.trojan.lazy` `CrowdStrike: win/malicious_confidence_60% (D)` `Cylance: Unsafe` `Cynet: Malicious (score: 99)` `DeepInstinct: MALICIOUS` `Elastic: malicious (high confidence)` `F-Secure: Trojan.TR/W64.Agent` `Fortinet: W32/PossibleThreat` `Gridinsoft: Trojan.Win64.Agent.oa!s1` `Ikarus: Trojan.Win64.Lazy` `K7AntiVirus: Riskware ( 00584baa1 )` `K7GW: Riskware ( 00584baa1 )` `Kingsoft: Win64.Trojan.Convagent.gen` `Lionic: Trojan.Win64.Agent.tt5G` `Malwarebytes: Trojan.Agent` `MaxSecure: Trojan.Malware.640664465.susgen` `McAfeeD: Trojan:Win/GenericY.GWA` `Microsoft: Trojan:Win64/Lazy.PGPK!MTB` `Paloalto: generic.ml` `Panda: Trj/CI.A` `Rising: Trojan.Lazy!8.8EC3 (TFE:5:HyEbDc4OLrJ)` `Sophos: Mal/Generic-S` `Symantec: Trojan Horse` `TrellixENS: Artemis!AD4078B3E25D` `TrendMicro-HouseCall: Trojan.Win32.ZYX.USBLF526` `VBA32: Trojan.Win64.Convagent` `Varist: W64/ABTrojan.MCGQ-3738` `ViRobot: Trojan.Win.Z.Agent.872448.GY` `Webroot: Win.Trojan.Gen` `Yandex: Trojan.Agent!W8zownhReXQ` `Zillya: Trojan.Agent.Win64.179282` `alibabacloud: Trojan:Win/Lazy.PUDG3DGW`

Hashes

MD5	`ad4078b3e25d1a63c2ce4fb203af6e38` 🔍
SHA1	`c218f533813b39627346649651677af803e04fbe` 🔍
SHA256	`3ee51b5f9579b775e87edb23c238650a512c2fe46efc06694cd906a771727f97` 🔍
SHA3	`6cf43ab3810a3cc82a02b1743fce2708a4ea104e1c1b517d7b1b5af149f3a8cf` 🔍
SSDeep	`12288:S628L2HCSGt4FMz4+PUlv2kyK5yB1Tazo/UCjTMnvKdsoFwhiHBjBZoG:n2HCSucMz4CYbV5yBtaziU0TcSNFPhL` 🔍
Imports Hash	`cbeef51b8ba9e626e4d1abaf147dae7a` 🔍

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x110`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`5`
TimeDateStamp	2026-Mar-29 20:15:28
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0xaae00`
SizeOfInitializedData	`0x2ac00`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0000000000063AE8 (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x140000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0xd8000`
SizeOfHeaders	`0x400`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`57d0b289f85735a536623f34310e69ec 🔍`
SHA1	`8b60f76f65d67ae76f8cdf146f8791bb779d32fc 🔍`
SHA256	`1e83f723d1e8380207ed45d1c26e2f8b426f217e72471f521fff2e7489201340 🔍`
SHA3	`01d35ef6627a83d45d633f18d65105c1fd70651c02908c3481a1b16955a40115 🔍`
VirtualSize	`0xaace0`
VirtualAddress	`0x1000`
SizeOfRawData	`0xaae00`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.52075`

.rdata

MD5	`f6f77480d55ac12cc178b90f5c1a4e85 🔍`
SHA1	`c0c23705a77630eab13a1a81642ab0dc475fe24b 🔍`
SHA256	`7e26f72185bc968442c4123e930e6282caf3f2bd705105367836b2278e394bd3 🔍`
SHA3	`ba14ed80845284bf7f7eb9a5bc37dbfa701d68a3defc874a3f0f0f206df1f2ec 🔍`
VirtualSize	`0x1f868`
VirtualAddress	`0xac000`
SizeOfRawData	`0x1fa00`
PointerToRawData	`0xab200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.73462`

.data

MD5	`9f379c04d8f522629cc55d8dbfd3d3a9 🔍`
SHA1	`9e5768a58f01fb59d6c81ad2cfea139d4fe51958 🔍`
SHA256	`61b3c8fbb02b157c26e995dde0fde609e2c4ffdb3476c42ffdc8fb2f1365e8ee 🔍`
SHA3	`74d41197c8eefdc43e598783469cfeefe945bb1ae1f0c4df3e661a2313ebece1 🔍`
VirtualSize	`0x1cb8`
VirtualAddress	`0xcc000`
SizeOfRawData	`0x1000`
PointerToRawData	`0xcac00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`2.28137`

.pdata

MD5	`4f7f52f6ebe1b71fc797085412738bcd 🔍`
SHA1	`eb54ee5c37d2eeb901b26e88723a76850861079c 🔍`
SHA256	`57ec39a95c1e85d8251a7669a6e5db0cded74f12e34d3af687214feb419771e4 🔍`
SHA3	`e085cd099fb70cb5cddc2ee979e6121a814a77fa1782f6b149e9a62493b36455 🔍`
VirtualSize	`0x85d4`
VirtualAddress	`0xce000`
SizeOfRawData	`0x8600`
PointerToRawData	`0xcbc00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.88131`

.reloc

MD5	`ee6f7ce65d5f07067e419d7b45caacd9 🔍`
SHA1	`8daf023e30a20cdbac71504af6f5cc1c51b7c72b 🔍`
SHA256	`f16230aa615d7fd9c12822c8bc53a928a69c7233ffebced39ca8eb35342cde5d 🔍`
SHA3	`f663d7d0b7cd8b8bf87271761de816e288c9d72952e1ae0dc499f0fceb51d3c3 🔍`
VirtualSize	`0xd2c`
VirtualAddress	`0xd7000`
SizeOfRawData	`0xe00`
PointerToRawData	`0xd4200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.29616`

Imports

KERNEL32.dll	`RtlUnwindEx` `RaiseException` `GetLastError` `SetLastError` `VirtualFree` `VirtualQuery` `GetModuleHandleA` `GetProcAddress` `InitializeCriticalSection` `EnterCriticalSection` `LeaveCriticalSection` `DeleteCriticalSection` `WaitForSingleObject` `Sleep` `CreateThread` `LoadLibraryExA` `FreeLibrary` `GetModuleFileNameA` `GetModuleHandleExA` `FormatMessageA` `VirtualAlloc` `VirtualProtect` `QueryPerformanceCounter` `GetCurrentProcessId` `GetCurrentThreadId` `GetSystemTimeAsFileTime` `InitializeSListHead` `SetUnhandledExceptionFilter` `GetStartupInfoW` `GetModuleHandleW` `WriteConsoleW` `FlsAlloc` `FlsGetValue` `FlsSetValue` `FlsFree` `InitializeCriticalSectionEx` `RtlLookupFunctionEntry` `EncodePointer` `RtlPcToFileHeader` `GetCommandLineA` `GetCommandLineW` `SetConsoleCtrlHandler` `GetCurrentProcess` `ExitProcess` `TerminateProcess` `GetModuleHandleExW` `ReadFile` `CloseHandle` `DuplicateHandle` `CreateProcessW` `QueryPerformanceFrequency` `GetStdHandle` `WriteFile` `GetModuleFileNameW` `IsProcessorFeaturePresent` `RtlCaptureContext` `RtlVirtualUnwind` `IsDebuggerPresent` `UnhandledExceptionFilter` `HeapAlloc` `HeapFree` `GetTempPathW` `InitializeCriticalSectionAndSpinCount` `LoadLibraryExW` `GetDateFormatW` `GetTimeFormatW` `CompareStringW` `LCMapStringW` `GetLocaleInfoW` `IsValidLocale` `GetUserDefaultLCID` `EnumSystemLocalesW` `GetFileType` `FlushFileBuffers` `GetConsoleOutputCP` `GetConsoleMode` `GetFileSizeEx` `SetFilePointerEx` `ReadConsoleW` `GetExitCodeProcess` `GetFileAttributesExW` `CreatePipe` `CreateFileW` `GetTimeZoneInformation` `MultiByteToWideChar` `WideCharToMultiByte` `DeleteFileW` `MoveFileExW` `FindClose` `FindFirstFileExW` `FindNextFileW` `IsValidCodePage` `GetACP` `GetOEMCP` `GetCPInfo` `GetEnvironmentStringsW` `FreeEnvironmentStringsW` `SetEnvironmentVariableW` `SetStdHandle` `GetStringTypeW` `GetProcessHeap` `HeapSize` `HeapReAlloc` `SetEndOfFile` `RtlUnwind`

Delayed Imports

__swprintf_l

Ordinal	`1`
Address	`0x4900`

__vswprintf_l

Ordinal	`2`
Address	`0x4960`

_fprintf_l

Ordinal	`3`
Address	`0x49b0`

_fprintf_p

Ordinal	`4`
Address	`0x4a00`

_fprintf_p_l

Ordinal	`5`
Address	`0x4a50`

_fprintf_s_l

Ordinal	`6`
Address	`0x4aa0`

_fscanf_l

Ordinal	`7`
Address	`0x4af0`

_fscanf_s_l

Ordinal	`8`
Address	`0x4b40`

_fwprintf_l

Ordinal	`9`
Address	`0x4b90`

_fwprintf_p

Ordinal	`10`
Address	`0x4be0`

_fwprintf_p_l

Ordinal	`11`
Address	`0x4c30`

_fwprintf_s_l

Ordinal	`12`
Address	`0x4c80`

_fwscanf_l

Ordinal	`13`
Address	`0x4cd0`

_fwscanf_s_l

Ordinal	`14`
Address	`0x4d20`

_printf_l

Ordinal	`15`
Address	`0x4d70`

_printf_p

Ordinal	`16`
Address	`0x4dd0`

_printf_p_l

Ordinal	`17`
Address	`0x4e30`

_printf_s_l

Ordinal	`18`
Address	`0x4e90`

_scanf_l

Ordinal	`19`
Address	`0x4ef0`

_scanf_s_l

Ordinal	`20`
Address	`0x4f40`

_scprintf

Ordinal	`21`
Address	`0x4fa0`

_scprintf_l

Ordinal	`22`
Address	`0x5000`

_scprintf_p

Ordinal	`23`
Address	`0x5060`

_scprintf_p_l

Ordinal	`24`
Address	`0x50c0`

_scwprintf

Ordinal	`25`
Address	`0x5120`

_scwprintf_l

Ordinal	`26`
Address	`0x5180`

_scwprintf_p

Ordinal	`27`
Address	`0x51e0`

_scwprintf_p_l

Ordinal	`28`
Address	`0x5240`

_snprintf

Ordinal	`29`
Address	`0x52a0`

_snprintf_c

Ordinal	`30`
Address	`0x5300`

_snprintf_c_l

Ordinal	`31`
Address	`0x5360`

_snprintf_l

Ordinal	`32`
Address	`0x53c0`

_snprintf_s

Ordinal	`33`
Address	`0x5420`

_snprintf_s_l

Ordinal	`34`
Address	`0x5490`

_snscanf

Ordinal	`35`
Address	`0x54f0`

_snscanf_l

Ordinal	`36`
Address	`0x5540`

_snscanf_s

Ordinal	`37`
Address	`0x5590`

_snscanf_s_l

Ordinal	`38`
Address	`0x55f0`

_snwprintf

Ordinal	`39`
Address	`0x5650`

_snwprintf_l

Ordinal	`40`
Address	`0x56b0`

_snwprintf_s

Ordinal	`41`
Address	`0x5710`

_snwprintf_s_l

Ordinal	`42`
Address	`0x5780`

_snwscanf

Ordinal	`43`
Address	`0x57e0`

_snwscanf_l

Ordinal	`44`
Address	`0x5830`

_snwscanf_s

Ordinal	`45`
Address	`0x5880`

_snwscanf_s_l

Ordinal	`46`
Address	`0x58e0`

_sprintf_l

Ordinal	`47`
Address	`0x5940`

_sprintf_p

Ordinal	`48`
Address	`0x59a0`

_sprintf_p_l

Ordinal	`49`
Address	`0x5a00`

_sprintf_s_l

Ordinal	`50`
Address	`0x5a60`

_sscanf_l

Ordinal	`51`
Address	`0x5ac0`

_sscanf_s_l

Ordinal	`52`
Address	`0x5b10`

_swprintf

Ordinal	`53`
Address	`0x5b70`

_swprintf_c

Ordinal	`54`
Address	`0x5bd0`

_swprintf_c_l

Ordinal	`55`
Address	`0x5c30`

_swprintf_l

Ordinal	`56`
Address	`0x5c30`

_swprintf_p

Ordinal	`57`
Address	`0x5c90`

_swprintf_p_l

Ordinal	`58`
Address	`0x5cf0`

_swprintf_s_l

Ordinal	`59`
Address	`0x5d50`

_swscanf_l

Ordinal	`60`
Address	`0x5db0`

_swscanf_s_l

Ordinal	`61`
Address	`0x5e00`

_vfprintf_l

Ordinal	`62`
Address	`0x5e60`

_vfprintf_p

Ordinal	`63`
Address	`0x5ea0`

_vfprintf_p_l

Ordinal	`64`
Address	`0x5ef0`

_vfprintf_s_l

Ordinal	`65`
Address	`0x5f30`

_vfscanf_l

Ordinal	`66`
Address	`0x5f70`

_vfscanf_s_l

Ordinal	`67`
Address	`0x5fb0`

_vfwprintf_l

Ordinal	`68`
Address	`0x5ff0`

_vfwprintf_p

Ordinal	`69`
Address	`0x6030`

_vfwprintf_p_l

Ordinal	`70`
Address	`0x6080`

_vfwprintf_s_l

Ordinal	`71`
Address	`0x60c0`

_vfwscanf_l

Ordinal	`72`
Address	`0x6100`

_vfwscanf_s_l

Ordinal	`73`
Address	`0x6140`

_vprintf_l

Ordinal	`74`
Address	`0x6180`

_vprintf_p

Ordinal	`75`
Address	`0x61d0`

_vprintf_p_l

Ordinal	`76`
Address	`0x6220`

_vprintf_s_l

Ordinal	`77`
Address	`0x6270`

_vscanf_l

Ordinal	`78`
Address	`0x62c0`

_vscanf_s_l

Ordinal	`79`
Address	`0x6300`

_vscprintf

Ordinal	`80`
Address	`0x6350`

_vscprintf_l

Ordinal	`81`
Address	`0x63a0`

_vscprintf_p

Ordinal	`82`
Address	`0x6400`

_vscprintf_p_l

Ordinal	`83`
Address	`0x6450`

_vscwprintf

Ordinal	`84`
Address	`0x64b0`

_vscwprintf_l

Ordinal	`85`
Address	`0x6500`

_vscwprintf_p

Ordinal	`86`
Address	`0x6560`

_vscwprintf_p_l

Ordinal	`87`
Address	`0x65b0`

_vsnprintf

Ordinal	`88`
Address	`0x6610`

_vsnprintf_c

Ordinal	`89`
Address	`0x6660`

_vsnprintf_c_l

Ordinal	`90`
Address	`0x66b0`

_vsnprintf_l

Ordinal	`91`
Address	`0x6700`

_vsnprintf_s

Ordinal	`92`
Address	`0x6760`

_vsnprintf_s_l

Ordinal	`93`
Address	`0x67c0`

_vsnwprintf

Ordinal	`94`
Address	`0x6820`

_vsnwprintf_l

Ordinal	`95`
Address	`0x6870`

_vsnwprintf_s

Ordinal	`96`
Address	`0x68d0`

_vsnwprintf_s_l

Ordinal	`97`
Address	`0x6930`

_vsnwscanf_l

Ordinal	`98`
Address	`0x6990`

_vsnwscanf_s_l

Ordinal	`99`
Address	`0x69e0`

_vsprintf_l

Ordinal	`100`
Address	`0x6a30`

_vsprintf_p

Ordinal	`101`
Address	`0x6a80`

_vsprintf_p_l

Ordinal	`102`
Address	`0x6ad0`

_vsprintf_s_l

Ordinal	`103`
Address	`0x6b20`

_vsscanf_l

Ordinal	`104`
Address	`0x6b70`

_vsscanf_s_l

Ordinal	`105`
Address	`0x6bc0`

_vswprintf

Ordinal	`106`
Address	`0x6c10`

_vswprintf_c

Ordinal	`107`
Address	`0x6c70`

_vswprintf_c_l

Ordinal	`108`
Address	`0x6cc0`

_vswprintf_l

Ordinal	`109`
Address	`0x6cc0`

_vswprintf_p

Ordinal	`110`
Address	`0x6d10`

_vswprintf_p_l

Ordinal	`111`
Address	`0x6d60`

_vswprintf_s_l

Ordinal	`112`
Address	`0x6db0`

_vswscanf_l

Ordinal	`113`
Address	`0x6e00`

_vswscanf_s_l

Ordinal	`114`
Address	`0x6e50`

_vwprintf_l

Ordinal	`115`
Address	`0x6ea0`

_vwprintf_p

Ordinal	`116`
Address	`0x6ef0`

_vwprintf_p_l

Ordinal	`117`
Address	`0x6f40`

_vwprintf_s_l

Ordinal	`118`
Address	`0x6f90`

_vwscanf_l

Ordinal	`119`
Address	`0x6fe0`

_vwscanf_s_l

Ordinal	`120`
Address	`0x7020`

_wprintf_l

Ordinal	`121`
Address	`0x7070`

_wprintf_p

Ordinal	`122`
Address	`0x70d0`

_wprintf_p_l

Ordinal	`123`
Address	`0x7130`

_wprintf_s_l

Ordinal	`124`
Address	`0x7190`

_wscanf_l

Ordinal	`125`
Address	`0x71f0`

_wscanf_s_l

Ordinal	`126`
Address	`0x7240`

fprintf

Ordinal	`127`
Address	`0x7770`

fprintf_s

Ordinal	`128`
Address	`0x77c0`

fscanf

Ordinal	`129`
Address	`0x7810`

fscanf_s

Ordinal	`130`
Address	`0x7860`

fwprintf

Ordinal	`131`
Address	`0x78b0`

fwprintf_s

Ordinal	`132`
Address	`0x7900`

fwscanf

Ordinal	`133`
Address	`0x7950`

fwscanf_s

Ordinal	`134`
Address	`0x79a0`

printf

Ordinal	`135`
Address	`0x83d0`

printf_s

Ordinal	`136`
Address	`0x8430`

scanf

Ordinal	`137`
Address	`0x8b40`

scanf_s

Ordinal	`138`
Address	`0x8b90`

snprintf

Ordinal	`139`
Address	`0x8bf0`

sprintf

Ordinal	`140`
Address	`0x8c50`

sprintf_s

Ordinal	`141`
Address	`0x8cb0`

sscanf

Ordinal	`142`
Address	`0x8d10`

sscanf_s

Ordinal	`143`
Address	`0x8d70`

swprintf

Ordinal	`144`
Address	`0x5bd0`

swprintf_s

Ordinal	`145`
Address	`0x8dd0`

swscanf

Ordinal	`146`
Address	`0x8e30`

swscanf_s

Ordinal	`147`
Address	`0x8e90`

vfprintf

Ordinal	`148`
Address	`0x8f80`

vfprintf_s

Ordinal	`149`
Address	`0x8fd0`

vfscanf

Ordinal	`150`
Address	`0x9020`

vfscanf_s

Ordinal	`151`
Address	`0x9070`

vfwprintf

Ordinal	`152`
Address	`0x90c0`

vfwprintf_s

Ordinal	`153`
Address	`0x9110`

vfwscanf

Ordinal	`154`
Address	`0x9160`

vfwscanf_s

Ordinal	`155`
Address	`0x91b0`

vprintf

Ordinal	`156`
Address	`0x9200`

vprintf_s

Ordinal	`157`
Address	`0x9250`

vscanf

Ordinal	`158`
Address	`0x92a0`

vscanf_s

Ordinal	`159`
Address	`0x92f0`

vsnprintf

Ordinal	`160`
Address	`0x9340`

vsnprintf_s

Ordinal	`161`
Address	`0x6760`

vsprintf

Ordinal	`162`
Address	`0x9390`

vsprintf_s

Ordinal	`163`
Address	`0x93f0`

vsscanf

Ordinal	`164`
Address	`0x9440`

vsscanf_s

Ordinal	`165`
Address	`0x9490`

vswprintf

Ordinal	`166`
Address	`0x6c70`

vswprintf_s

Ordinal	`167`
Address	`0x94f0`

vswscanf

Ordinal	`168`
Address	`0x9540`

vswscanf_s

Ordinal	`169`
Address	`0x9590`

vwprintf

Ordinal	`170`
Address	`0x95f0`

vwprintf_s

Ordinal	`171`
Address	`0x9640`

vwscanf

Ordinal	`172`
Address	`0x9690`

vwscanf_s

Ordinal	`173`
Address	`0x96e0`

wprintf

Ordinal	`174`
Address	`0x9730`

wprintf_s

Ordinal	`175`
Address	`0x9790`

wscanf

Ordinal	`176`
Address	`0x97f0`

wscanf_s

Ordinal	`177`
Address	`0x9840`

Version Info

IMAGE_DEBUG_TYPE_POGO

Characteristics	`0`
TimeDateStamp	2026-Mar-29 20:15:28
Version	`0.0`
SizeofData	`832`
AddressOfRawData	`0xc281c`
PointerToRawData	`0xc1a1c`

TLS Callbacks

Load Configuration

Size	`0x140`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x1400cc200`

RICH Header

XOR Key	`0x94cadf54`
Unmarked objects	`0`
ASM objects (30795)	`23`
C++ objects (30795)	`204`
C objects (30795)	`23`
Imports (30795)	`3`
Total imports	`109`
ASM objects (35403)	`10`
C objects (35403)	`18`
C++ objects (35403)	`40`
Unmarked objects (#2)	`1`
C objects (35724)	`64`
Exports (35724)	`1`
Linker (35724)	`1`

Errors

Leave a comment

No comments yet.