Malicious
Classifications
Backdoor Hacktool
Threat Names
App/Generic-KG
Dynamic Analysis Report
Created on 2024-11-21T04:48:57+00:00
XrxNqV2g9mNIbQeR.exe
Windows Exe (x86-32)
This is a filtered view
This list contains only the embedded files, downloaded files, and dropped files
Filters: |
There are no files for this filter
There are no files in this analysis
File Name | Category | Type | Verdict | Actions |
---|
C:\Users\RDhJ0CNFevzX\Desktop\XrxNqV2g9mNIbQeR.exe | Sample File | Binary |
Malicious
|
...
|
»
File Reputation Information
»
Verdict |
Suspicious
|
Names | App/Generic-KG |
Classification | PUA |
PE Information
»
Image Base | 0x00400000 |
Entry Point | 0x004E3803 |
Size Of Code | 0x0011B000 |
Size Of Initialized Data | 0x00306000 |
File Type | IMAGE_FILE_EXECUTABLE_IMAGE |
Subsystem | IMAGE_SUBSYSTEM_WINDOWS_GUI |
Machine Type | IMAGE_FILE_MACHINE_I386 |
Compile Timestamp | 2024-07-17 04:36 (UTC) |
Sections (4)
»
Name | Virtual Address | Virtual Size | Raw Data Size | Raw Data Offset | Flags | Entropy |
---|---|---|---|---|---|---|
.text | 0x00401000 | 0x0011A528 | 0x0011B000 | 0x00001000 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ | 6.57 |
.rdata | 0x0051C000 | 0x002D45CC | 0x002D5000 | 0x0011C000 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 6.48 |
.data | 0x007F1000 | 0x0008A2CA | 0x0002B000 | 0x003F1000 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE | 5.28 |
.rsrc | 0x0087C000 | 0x000051AC | 0x00006000 | 0x0041C000 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ | 6.25 |
Imports (15)
»
MSVFW32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
DrawDibDraw | - | 0x0051C41C | 0x003EE284 | 0x003EE284 | 0x00000003 |
AVIFIL32.dll (2)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
AVIStreamInfoA | - | 0x0051C020 | 0x003EDE88 | 0x003EDE88 | 0x0000002B |
AVIStreamGetFrame | - | 0x0051C024 | 0x003EDE8C | 0x003EDE8C | 0x00000027 |
WINMM.dll (19)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
midiStreamOut | - | 0x0051C714 | 0x003EE57C | 0x003EE57C | 0x0000005F |
midiOutPrepareHeader | - | 0x0051C718 | 0x003EE580 | 0x003EE580 | 0x00000058 |
midiStreamProperty | - | 0x0051C71C | 0x003EE584 | 0x003EE584 | 0x00000062 |
midiStreamStop | - | 0x0051C720 | 0x003EE588 | 0x003EE588 | 0x00000064 |
midiOutUnprepareHeader | - | 0x0051C724 | 0x003EE58C | 0x003EE58C | 0x0000005C |
waveOutOpen | - | 0x0051C728 | 0x003EE590 | 0x003EE590 | 0x000000B8 |
waveOutGetNumDevs | - | 0x0051C72C | 0x003EE594 | 0x003EE594 | 0x000000B2 |
waveOutClose | - | 0x0051C730 | 0x003EE598 | 0x003EE598 | 0x000000AC |
waveOutReset | - | 0x0051C734 | 0x003EE59C | 0x003EE59C | 0x000000BB |
waveOutPause | - | 0x0051C738 | 0x003EE5A0 | 0x003EE5A0 | 0x000000B9 |
waveOutWrite | - | 0x0051C73C | 0x003EE5A4 | 0x003EE5A4 | 0x000000C1 |
waveOutPrepareHeader | - | 0x0051C740 | 0x003EE5A8 | 0x003EE5A8 | 0x000000BA |
waveOutUnprepareHeader | - | 0x0051C744 | 0x003EE5AC | 0x003EE5AC | 0x000000C0 |
PlaySoundA | - | 0x0051C748 | 0x003EE5B0 | 0x003EE5B0 | 0x0000000C |
waveOutRestart | - | 0x0051C74C | 0x003EE5B4 | 0x003EE5B4 | 0x000000BC |
midiOutReset | - | 0x0051C750 | 0x003EE5B8 | 0x003EE5B8 | 0x00000059 |
midiStreamClose | - | 0x0051C754 | 0x003EE5BC | 0x003EE5BC | 0x0000005D |
midiStreamRestart | - | 0x0051C758 | 0x003EE5C0 | 0x003EE5C0 | 0x00000063 |
midiStreamOpen | - | 0x0051C75C | 0x003EE5C4 | 0x003EE5C4 | 0x0000005E |
WS2_32.dll (18)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
ntohl | 0x0000000E | 0x0051C774 | 0x003EE5DC | 0x003EE5DC | - |
accept | 0x00000001 | 0x0051C778 | 0x003EE5E0 | 0x003EE5E0 | - |
getpeername | 0x00000005 | 0x0051C77C | 0x003EE5E4 | 0x003EE5E4 | - |
listen | 0x0000000D | 0x0051C780 | 0x003EE5E8 | 0x003EE5E8 | - |
recv | 0x00000010 | 0x0051C784 | 0x003EE5EC | 0x003EE5EC | - |
ioctlsocket | 0x0000000A | 0x0051C788 | 0x003EE5F0 | 0x003EE5F0 | - |
socket | 0x00000017 | 0x0051C78C | 0x003EE5F4 | 0x003EE5F4 | - |
htonl | 0x00000008 | 0x0051C790 | 0x003EE5F8 | 0x003EE5F8 | - |
bind | 0x00000002 | 0x0051C794 | 0x003EE5FC | 0x003EE5FC | - |
htons | 0x00000009 | 0x0051C798 | 0x003EE600 | 0x003EE600 | - |
WSAAsyncSelect | 0x00000065 | 0x0051C79C | 0x003EE604 | 0x003EE604 | - |
closesocket | 0x00000003 | 0x0051C7A0 | 0x003EE608 | 0x003EE608 | - |
send | 0x00000013 | 0x0051C7A4 | 0x003EE60C | 0x003EE60C | - |
select | 0x00000012 | 0x0051C7A8 | 0x003EE610 | 0x003EE610 | - |
WSACleanup | 0x00000074 | 0x0051C7AC | 0x003EE614 | 0x003EE614 | - |
WSAStartup | 0x00000073 | 0x0051C7B0 | 0x003EE618 | 0x003EE618 | - |
inet_ntoa | 0x0000000C | 0x0051C7B4 | 0x003EE61C | 0x003EE61C | - |
recvfrom | 0x00000011 | 0x0051C7B8 | 0x003EE620 | 0x003EE620 | - |
KERNEL32.dll (144)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
GetVersion | - | 0x0051C1D0 | 0x003EE038 | 0x003EE038 | 0x00000174 |
VirtualAlloc | - | 0x0051C1D4 | 0x003EE03C | 0x003EE03C | 0x000002BB |
VirtualFree | - | 0x0051C1D8 | 0x003EE040 | 0x003EE040 | 0x000002BF |
IsBadReadPtr | - | 0x0051C1DC | 0x003EE044 | 0x003EE044 | 0x000001B5 |
CreateMutexA | - | 0x0051C1E0 | 0x003EE048 | 0x003EE048 | 0x0000003F |
ReleaseMutex | - | 0x0051C1E4 | 0x003EE04C | 0x003EE04C | 0x00000225 |
SuspendThread | - | 0x0051C1E8 | 0x003EE050 | 0x003EE050 | 0x00000298 |
InterlockedDecrement | - | 0x0051C1EC | 0x003EE054 | 0x003EE054 | 0x000001AD |
LocalFree | - | 0x0051C1F0 | 0x003EE058 | 0x003EE058 | 0x000001CC |
FileTimeToSystemTime | - | 0x0051C1F4 | 0x003EE05C | 0x003EE05C | 0x0000008A |
FileTimeToLocalFileTime | - | 0x0051C1F8 | 0x003EE060 | 0x003EE060 | 0x00000089 |
lstrcpynA | - | 0x0051C1FC | 0x003EE064 | 0x003EE064 | 0x00000305 |
DuplicateHandle | - | 0x0051C200 | 0x003EE068 | 0x003EE068 | 0x00000063 |
FlushFileBuffers | - | 0x0051C204 | 0x003EE06C | 0x003EE06C | 0x000000AA |
LockFile | - | 0x0051C208 | 0x003EE070 | 0x003EE070 | 0x000001D3 |
UnlockFile | - | 0x0051C20C | 0x003EE074 | 0x003EE074 | 0x000002AE |
SetEndOfFile | - | 0x0051C210 | 0x003EE078 | 0x003EE078 | 0x00000261 |
lstrcmpiA | - | 0x0051C214 | 0x003EE07C | 0x003EE07C | 0x000002FF |
GlobalDeleteAtom | - | 0x0051C218 | 0x003EE080 | 0x003EE080 | 0x00000183 |
GlobalFindAtomA | - | 0x0051C21C | 0x003EE084 | 0x003EE084 | 0x00000184 |
GlobalAddAtomA | - | 0x0051C220 | 0x003EE088 | 0x003EE088 | 0x0000017F |
GlobalGetAtomNameA | - | 0x0051C224 | 0x003EE08C | 0x003EE08C | 0x00000189 |
lstrcmpA | - | 0x0051C228 | 0x003EE090 | 0x003EE090 | 0x000002FC |
LocalAlloc | - | 0x0051C22C | 0x003EE094 | 0x003EE094 | 0x000001C8 |
TlsAlloc | - | 0x0051C230 | 0x003EE098 | 0x003EE098 | 0x000002A2 |
GlobalHandle | - | 0x0051C234 | 0x003EE09C | 0x003EE09C | 0x0000018B |
TlsFree | - | 0x0051C238 | 0x003EE0A0 | 0x003EE0A0 | 0x000002A3 |
TlsSetValue | - | 0x0051C23C | 0x003EE0A4 | 0x003EE0A4 | 0x000002A5 |
LocalReAlloc | - | 0x0051C240 | 0x003EE0A8 | 0x003EE0A8 | 0x000001CF |
TlsGetValue | - | 0x0051C244 | 0x003EE0AC | 0x003EE0AC | 0x000002A4 |
GetFileTime | - | 0x0051C248 | 0x003EE0B0 | 0x003EE0B0 | 0x00000114 |
GetCurrentThread | - | 0x0051C24C | 0x003EE0B4 | 0x003EE0B4 | 0x000000F9 |
GlobalFlags | - | 0x0051C250 | 0x003EE0B8 | 0x003EE0B8 | 0x00000187 |
SetErrorMode | - | 0x0051C254 | 0x003EE0BC | 0x003EE0BC | 0x00000264 |
GetProcessVersion | - | 0x0051C258 | 0x003EE0C0 | 0x003EE0C0 | 0x00000145 |
GetCPInfo | - | 0x0051C25C | 0x003EE0C4 | 0x003EE0C4 | 0x000000BF |
GetOEMCP | - | 0x0051C260 | 0x003EE0C8 | 0x003EE0C8 | 0x00000131 |
GetStartupInfoA | - | 0x0051C264 | 0x003EE0CC | 0x003EE0CC | 0x00000150 |
RtlUnwind | - | 0x0051C268 | 0x003EE0D0 | 0x003EE0D0 | 0x0000022F |
GetSystemTime | - | 0x0051C26C | 0x003EE0D4 | 0x003EE0D4 | 0x0000015D |
GetLocalTime | - | 0x0051C270 | 0x003EE0D8 | 0x003EE0D8 | 0x0000011B |
RaiseException | - | 0x0051C274 | 0x003EE0DC | 0x003EE0DC | 0x0000020B |
HeapSize | - | 0x0051C278 | 0x003EE0E0 | 0x003EE0E0 | 0x000001A3 |
GetACP | - | 0x0051C27C | 0x003EE0E4 | 0x003EE0E4 | 0x000000B9 |
UnhandledExceptionFilter | - | 0x0051C280 | 0x003EE0E8 | 0x003EE0E8 | 0x000002AD |
FreeEnvironmentStringsA | - | 0x0051C284 | 0x003EE0EC | 0x003EE0EC | 0x000000B2 |
FreeEnvironmentStringsW | - | 0x0051C288 | 0x003EE0F0 | 0x003EE0F0 | 0x000000B3 |
GetEnvironmentStrings | - | 0x0051C28C | 0x003EE0F4 | 0x003EE0F4 | 0x00000106 |
GetEnvironmentStringsW | - | 0x0051C290 | 0x003EE0F8 | 0x003EE0F8 | 0x00000108 |
SetHandleCount | - | 0x0051C294 | 0x003EE0FC | 0x003EE0FC | 0x0000026D |
GetStdHandle | - | 0x0051C298 | 0x003EE100 | 0x003EE100 | 0x00000152 |
GetFileType | - | 0x0051C29C | 0x003EE104 | 0x003EE104 | 0x00000115 |
GetEnvironmentVariableA | - | 0x0051C2A0 | 0x003EE108 | 0x003EE108 | 0x00000109 |
HeapDestroy | - | 0x0051C2A4 | 0x003EE10C | 0x003EE10C | 0x0000019D |
HeapCreate | - | 0x0051C2A8 | 0x003EE110 | 0x003EE110 | 0x0000019B |
SetEnvironmentVariableA | - | 0x0051C2AC | 0x003EE114 | 0x003EE114 | 0x00000262 |
LCMapStringA | - | 0x0051C2B0 | 0x003EE118 | 0x003EE118 | 0x000001BF |
LCMapStringW | - | 0x0051C2B4 | 0x003EE11C | 0x003EE11C | 0x000001C0 |
IsBadWritePtr | - | 0x0051C2B8 | 0x003EE120 | 0x003EE120 | 0x000001B8 |
SetUnhandledExceptionFilter | - | 0x0051C2BC | 0x003EE124 | 0x003EE124 | 0x0000028B |
GetStringTypeA | - | 0x0051C2C0 | 0x003EE128 | 0x003EE128 | 0x00000153 |
GetStringTypeW | - | 0x0051C2C4 | 0x003EE12C | 0x003EE12C | 0x00000156 |
CompareStringA | - | 0x0051C2C8 | 0x003EE130 | 0x003EE130 | 0x00000021 |
CompareStringW | - | 0x0051C2CC | 0x003EE134 | 0x003EE134 | 0x00000022 |
IsBadCodePtr | - | 0x0051C2D0 | 0x003EE138 | 0x003EE138 | 0x000001B2 |
SetStdHandle | - | 0x0051C2D4 | 0x003EE13C | 0x003EE13C | 0x0000027C |
GetSystemInfo | - | 0x0051C2D8 | 0x003EE140 | 0x003EE140 | 0x0000015B |
IsProcessorFeaturePresent | - | 0x0051C2DC | 0x003EE144 | 0x003EE144 | 0x000001BC |
GetTimeZoneInformation | - | 0x0051C2E0 | 0x003EE148 | 0x003EE148 | 0x00000170 |
SetLastError | - | 0x0051C2E4 | 0x003EE14C | 0x003EE14C | 0x00000271 |
GetSystemDirectoryA | - | 0x0051C2E8 | 0x003EE150 | 0x003EE150 | 0x00000159 |
GetWindowsDirectoryA | - | 0x0051C2EC | 0x003EE154 | 0x003EE154 | 0x0000017D |
OpenProcess | - | 0x0051C2F0 | 0x003EE158 | 0x003EE158 | 0x000001EF |
TerminateProcess | - | 0x0051C2F4 | 0x003EE15C | 0x003EE15C | 0x0000029E |
GetCurrentProcess | - | 0x0051C2F8 | 0x003EE160 | 0x003EE160 | 0x000000F7 |
GetFileSize | - | 0x0051C2FC | 0x003EE164 | 0x003EE164 | 0x00000112 |
SetFilePointer | - | 0x0051C300 | 0x003EE168 | 0x003EE168 | 0x0000026A |
CreateToolhelp32Snapshot | - | 0x0051C304 | 0x003EE16C | 0x003EE16C | 0x0000004C |
Process32First | - | 0x0051C308 | 0x003EE170 | 0x003EE170 | 0x000001FC |
Process32Next | - | 0x0051C30C | 0x003EE174 | 0x003EE174 | 0x000001FE |
TerminateThread | - | 0x0051C310 | 0x003EE178 | 0x003EE178 | 0x0000029F |
CreateSemaphoreA | - | 0x0051C314 | 0x003EE17C | 0x003EE17C | 0x00000047 |
ResumeThread | - | 0x0051C318 | 0x003EE180 | 0x003EE180 | 0x0000022C |
ReleaseSemaphore | - | 0x0051C31C | 0x003EE184 | 0x003EE184 | 0x00000226 |
EnterCriticalSection | - | 0x0051C320 | 0x003EE188 | 0x003EE188 | 0x00000066 |
LeaveCriticalSection | - | 0x0051C324 | 0x003EE18C | 0x003EE18C | 0x000001C1 |
GetProfileStringA | - | 0x0051C328 | 0x003EE190 | 0x003EE190 | 0x0000014B |
WriteFile | - | 0x0051C32C | 0x003EE194 | 0x003EE194 | 0x000002DF |
WaitForMultipleObjects | - | 0x0051C330 | 0x003EE198 | 0x003EE198 | 0x000002CC |
CreateFileA | - | 0x0051C334 | 0x003EE19C | 0x003EE19C | 0x00000034 |
SetEvent | - | 0x0051C338 | 0x003EE1A0 | 0x003EE1A0 | 0x00000265 |
FindResourceA | - | 0x0051C33C | 0x003EE1A4 | 0x003EE1A4 | 0x000000A3 |
LoadResource | - | 0x0051C340 | 0x003EE1A8 | 0x003EE1A8 | 0x000001C7 |
LockResource | - | 0x0051C344 | 0x003EE1AC | 0x003EE1AC | 0x000001D5 |
ReadFile | - | 0x0051C348 | 0x003EE1B0 | 0x003EE1B0 | 0x00000218 |
lstrlenW | - | 0x0051C34C | 0x003EE1B4 | 0x003EE1B4 | 0x00000309 |
GetModuleFileNameA | - | 0x0051C350 | 0x003EE1B8 | 0x003EE1B8 | 0x00000124 |
WideCharToMultiByte | - | 0x0051C354 | 0x003EE1BC | 0x003EE1BC | 0x000002D2 |
MultiByteToWideChar | - | 0x0051C358 | 0x003EE1C0 | 0x003EE1C0 | 0x000001E4 |
GetCurrentThreadId | - | 0x0051C35C | 0x003EE1C4 | 0x003EE1C4 | 0x000000FA |
ExitProcess | - | 0x0051C360 | 0x003EE1C8 | 0x003EE1C8 | 0x0000007D |
GlobalSize | - | 0x0051C364 | 0x003EE1CC | 0x003EE1CC | 0x00000190 |
GlobalFree | - | 0x0051C368 | 0x003EE1D0 | 0x003EE1D0 | 0x00000188 |
DeleteCriticalSection | - | 0x0051C36C | 0x003EE1D4 | 0x003EE1D4 | 0x00000055 |
InitializeCriticalSection | - | 0x0051C370 | 0x003EE1D8 | 0x003EE1D8 | 0x000001AA |
lstrcatA | - | 0x0051C374 | 0x003EE1DC | 0x003EE1DC | 0x000002F9 |
lstrlenA | - | 0x0051C378 | 0x003EE1E0 | 0x003EE1E0 | 0x00000308 |
WinExec | - | 0x0051C37C | 0x003EE1E4 | 0x003EE1E4 | 0x000002D3 |
lstrcpyA | - | 0x0051C380 | 0x003EE1E8 | 0x003EE1E8 | 0x00000302 |
FindNextFileA | - | 0x0051C384 | 0x003EE1EC | 0x003EE1EC | 0x0000009D |
GlobalReAlloc | - | 0x0051C388 | 0x003EE1F0 | 0x003EE1F0 | 0x0000018F |
HeapFree | - | 0x0051C38C | 0x003EE1F4 | 0x003EE1F4 | 0x0000019F |
HeapReAlloc | - | 0x0051C390 | 0x003EE1F8 | 0x003EE1F8 | 0x000001A2 |
GetProcessHeap | - | 0x0051C394 | 0x003EE1FC | 0x003EE1FC | 0x00000140 |
HeapAlloc | - | 0x0051C398 | 0x003EE200 | 0x003EE200 | 0x00000199 |
GetUserDefaultLCID | - | 0x0051C39C | 0x003EE204 | 0x003EE204 | 0x00000171 |
GetFullPathNameA | - | 0x0051C3A0 | 0x003EE208 | 0x003EE208 | 0x00000116 |
FreeLibrary | - | 0x0051C3A4 | 0x003EE20C | 0x003EE20C | 0x000000B4 |
LoadLibraryA | - | 0x0051C3A8 | 0x003EE210 | 0x003EE210 | 0x000001C2 |
GetLastError | - | 0x0051C3AC | 0x003EE214 | 0x003EE214 | 0x0000011A |
GetVersionExA | - | 0x0051C3B0 | 0x003EE218 | 0x003EE218 | 0x00000175 |
WritePrivateProfileStringA | - | 0x0051C3B4 | 0x003EE21C | 0x003EE21C | 0x000002E5 |
CreateThread | - | 0x0051C3B8 | 0x003EE220 | 0x003EE220 | 0x0000004A |
CreateEventA | - | 0x0051C3BC | 0x003EE224 | 0x003EE224 | 0x00000031 |
Sleep | - | 0x0051C3C0 | 0x003EE228 | 0x003EE228 | 0x00000296 |
GlobalAlloc | - | 0x0051C3C4 | 0x003EE22C | 0x003EE22C | 0x00000181 |
GlobalLock | - | 0x0051C3C8 | 0x003EE230 | 0x003EE230 | 0x0000018C |
GlobalUnlock | - | 0x0051C3CC | 0x003EE234 | 0x003EE234 | 0x00000193 |
GetTempPathA | - | 0x0051C3D0 | 0x003EE238 | 0x003EE238 | 0x00000165 |
FindFirstFileA | - | 0x0051C3D4 | 0x003EE23C | 0x003EE23C | 0x00000094 |
FindClose | - | 0x0051C3D8 | 0x003EE240 | 0x003EE240 | 0x00000090 |
GetFileAttributesA | - | 0x0051C3DC | 0x003EE244 | 0x003EE244 | 0x0000010D |
DeleteFileA | - | 0x0051C3E0 | 0x003EE248 | 0x003EE248 | 0x00000057 |
SetCurrentDirectoryA | - | 0x0051C3E4 | 0x003EE24C | 0x003EE24C | 0x0000025D |
GetVolumeInformationA | - | 0x0051C3E8 | 0x003EE250 | 0x003EE250 | 0x00000177 |
GetModuleHandleA | - | 0x0051C3EC | 0x003EE254 | 0x003EE254 | 0x00000126 |
GetProcAddress | - | 0x0051C3F0 | 0x003EE258 | 0x003EE258 | 0x0000013E |
MulDiv | - | 0x0051C3F4 | 0x003EE25C | 0x003EE25C | 0x000001E3 |
GetCommandLineA | - | 0x0051C3F8 | 0x003EE260 | 0x003EE260 | 0x000000CA |
GetTickCount | - | 0x0051C3FC | 0x003EE264 | 0x003EE264 | 0x0000016D |
WaitForSingleObject | - | 0x0051C400 | 0x003EE268 | 0x003EE268 | 0x000002CE |
CloseHandle | - | 0x0051C404 | 0x003EE26C | 0x003EE26C | 0x0000001B |
InterlockedExchange | - | 0x0051C408 | 0x003EE270 | 0x003EE270 | 0x000001AE |
InterlockedIncrement | - | 0x0051C40C | 0x003EE274 | 0x003EE274 | 0x000001B0 |
USER32.dll (164)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
GetSysColorBrush | - | 0x0051C480 | 0x003EE2E8 | 0x003EE2E8 | 0x00000144 |
GetMenuCheckMarkDimensions | - | 0x0051C484 | 0x003EE2EC | 0x003EE2EC | 0x0000011E |
SetMenuItemBitmaps | - | 0x0051C488 | 0x003EE2F0 | 0x003EE2F0 | 0x00000239 |
CheckMenuItem | - | 0x0051C48C | 0x003EE2F4 | 0x003EE2F4 | 0x00000034 |
IsDialogMessageA | - | 0x0051C490 | 0x003EE2F8 | 0x003EE2F8 | 0x00000188 |
ScrollWindowEx | - | 0x0051C494 | 0x003EE2FC | 0x003EE2FC | 0x0000020E |
SendDlgItemMessageA | - | 0x0051C498 | 0x003EE300 | 0x003EE300 | 0x0000020F |
MapWindowPoints | - | 0x0051C49C | 0x003EE304 | 0x003EE304 | 0x000001B9 |
AdjustWindowRectEx | - | 0x0051C4A0 | 0x003EE308 | 0x003EE308 | 0x00000002 |
GetScrollPos | - | 0x0051C4A4 | 0x003EE30C | 0x003EE30C | 0x0000013F |
RegisterClassA | - | 0x0051C4A8 | 0x003EE310 | 0x003EE310 | 0x000001F2 |
CreateWindowExA | - | 0x0051C4AC | 0x003EE314 | 0x003EE314 | 0x00000059 |
GetClassLongA | - | 0x0051C4B0 | 0x003EE318 | 0x003EE318 | 0x000000EB |
RemovePropA | - | 0x0051C4B4 | 0x003EE31C | 0x003EE31C | 0x00000205 |
GetMessageTime | - | 0x0051C4B8 | 0x003EE320 | 0x003EE320 | 0x0000012D |
GetLastActivePopup | - | 0x0051C4BC | 0x003EE324 | 0x003EE324 | 0x00000119 |
RegisterWindowMessageA | - | 0x0051C4C0 | 0x003EE328 | 0x003EE328 | 0x00000200 |
GetWindowPlacement | - | 0x0051C4C4 | 0x003EE32C | 0x003EE32C | 0x0000015B |
EndDialog | - | 0x0051C4C8 | 0x003EE330 | 0x003EE330 | 0x000000B9 |
CreateDialogIndirectParamA | - | 0x0051C4CC | 0x003EE334 | 0x003EE334 | 0x0000004C |
DestroyWindow | - | 0x0051C4D0 | 0x003EE338 | 0x003EE338 | 0x0000008E |
EndPaint | - | 0x0051C4D4 | 0x003EE33C | 0x003EE33C | 0x000000BB |
BeginPaint | - | 0x0051C4D8 | 0x003EE340 | 0x003EE340 | 0x0000000C |
CharUpperA | - | 0x0051C4DC | 0x003EE344 | 0x003EE344 | 0x0000002F |
GetWindowTextLengthA | - | 0x0051C4E0 | 0x003EE348 | 0x003EE348 | 0x0000015F |
GetForegroundWindow | - | 0x0051C4E4 | 0x003EE34C | 0x003EE34C | 0x00000108 |
SetWindowTextA | - | 0x0051C4E8 | 0x003EE350 | 0x003EE350 | 0x0000025E |
GetMenuItemCount | - | 0x0051C4EC | 0x003EE354 | 0x003EE354 | 0x00000122 |
GetMenuItemID | - | 0x0051C4F0 | 0x003EE358 | 0x003EE358 | 0x00000123 |
GetMenuStringA | - | 0x0051C4F4 | 0x003EE35C | 0x003EE35C | 0x00000128 |
GetMenuState | - | 0x0051C4F8 | 0x003EE360 | 0x003EE360 | 0x00000127 |
GetTabbedTextExtentA | - | 0x0051C4FC | 0x003EE364 | 0x003EE364 | 0x00000147 |
GrayStringA | - | 0x0051C500 | 0x003EE368 | 0x003EE368 | 0x00000164 |
TabbedTextOutA | - | 0x0051C504 | 0x003EE36C | 0x003EE36C | 0x00000273 |
WindowFromDC | - | 0x0051C508 | 0x003EE370 | 0x003EE370 | 0x000002A8 |
EnumChildWindows | - | 0x0051C50C | 0x003EE374 | 0x003EE374 | 0x000000BD |
GetWindowDC | - | 0x0051C510 | 0x003EE378 | 0x003EE378 | 0x00000154 |
UnhookWindowsHookEx | - | 0x0051C514 | 0x003EE37C | 0x003EE37C | 0x00000286 |
CallNextHookEx | - | 0x0051C518 | 0x003EE380 | 0x003EE380 | 0x00000015 |
SetWindowsHookExA | - | 0x0051C51C | 0x003EE384 | 0x003EE384 | 0x00000262 |
GetPropA | - | 0x0051C520 | 0x003EE388 | 0x003EE388 | 0x0000013A |
MoveWindow | - | 0x0051C524 | 0x003EE38C | 0x003EE38C | 0x000001C9 |
CallWindowProcA | - | 0x0051C528 | 0x003EE390 | 0x003EE390 | 0x00000016 |
SetPropA | - | 0x0051C52C | 0x003EE394 | 0x003EE394 | 0x00000242 |
DrawTextA | - | 0x0051C530 | 0x003EE398 | 0x003EE398 | 0x000000AF |
GetCursor | - | 0x0051C534 | 0x003EE39C | 0x003EE39C | 0x000000F9 |
GetWindowTextA | - | 0x0051C538 | 0x003EE3A0 | 0x003EE3A0 | 0x0000015E |
GetDlgItem | - | 0x0051C53C | 0x003EE3A4 | 0x003EE3A4 | 0x00000102 |
FindWindowA | - | 0x0051C540 | 0x003EE3A8 | 0x003EE3A8 | 0x000000D5 |
GetWindowThreadProcessId | - | 0x0051C544 | 0x003EE3AC | 0x003EE3AC | 0x00000162 |
GetClassNameA | - | 0x0051C548 | 0x003EE3B0 | 0x003EE3B0 | 0x000000ED |
GetDesktopWindow | - | 0x0051C54C | 0x003EE3B4 | 0x003EE3B4 | 0x000000FF |
DrawStateA | - | 0x0051C550 | 0x003EE3B8 | 0x003EE3B8 | 0x000000AD |
FrameRect | - | 0x0051C554 | 0x003EE3BC | 0x003EE3BC | 0x000000DB |
GetNextDlgTabItem | - | 0x0051C558 | 0x003EE3C0 | 0x003EE3C0 | 0x00000133 |
LoadIconA | - | 0x0051C55C | 0x003EE3C4 | 0x003EE3C4 | 0x0000019E |
TranslateMessage | - | 0x0051C560 | 0x003EE3C8 | 0x003EE3C8 | 0x00000282 |
DrawFrameControl | - | 0x0051C564 | 0x003EE3CC | 0x003EE3CC | 0x000000A8 |
DrawEdge | - | 0x0051C568 | 0x003EE3D0 | 0x003EE3D0 | 0x000000A5 |
DrawFocusRect | - | 0x0051C56C | 0x003EE3D4 | 0x003EE3D4 | 0x000000A6 |
WindowFromPoint | - | 0x0051C570 | 0x003EE3D8 | 0x003EE3D8 | 0x000002A9 |
GetMessageA | - | 0x0051C574 | 0x003EE3DC | 0x003EE3DC | 0x0000012A |
DispatchMessageA | - | 0x0051C578 | 0x003EE3E0 | 0x003EE3E0 | 0x00000095 |
SetRectEmpty | - | 0x0051C57C | 0x003EE3E4 | 0x003EE3E4 | 0x00000245 |
RegisterClipboardFormatA | - | 0x0051C580 | 0x003EE3E8 | 0x003EE3E8 | 0x000001F6 |
CreateIconFromResourceEx | - | 0x0051C584 | 0x003EE3EC | 0x003EE3EC | 0x00000053 |
DrawIconEx | - | 0x0051C588 | 0x003EE3F0 | 0x003EE3F0 | 0x000000AA |
CreatePopupMenu | - | 0x0051C58C | 0x003EE3F4 | 0x003EE3F4 | 0x00000058 |
AppendMenuA | - | 0x0051C590 | 0x003EE3F8 | 0x003EE3F8 | 0x00000007 |
ModifyMenuA | - | 0x0051C594 | 0x003EE3FC | 0x003EE3FC | 0x000001C4 |
CreateMenu | - | 0x0051C598 | 0x003EE400 | 0x003EE400 | 0x00000057 |
CreateAcceleratorTableA | - | 0x0051C59C | 0x003EE404 | 0x003EE404 | 0x00000046 |
GetDlgCtrlID | - | 0x0051C5A0 | 0x003EE408 | 0x003EE408 | 0x00000101 |
GetSubMenu | - | 0x0051C5A4 | 0x003EE40C | 0x003EE40C | 0x00000142 |
EnableMenuItem | - | 0x0051C5A8 | 0x003EE410 | 0x003EE410 | 0x000000B5 |
ClientToScreen | - | 0x0051C5AC | 0x003EE414 | 0x003EE414 | 0x0000003A |
EnumDisplaySettingsA | - | 0x0051C5B0 | 0x003EE418 | 0x003EE418 | 0x000000C5 |
LoadImageA | - | 0x0051C5B4 | 0x003EE41C | 0x003EE41C | 0x000001A0 |
SystemParametersInfoA | - | 0x0051C5B8 | 0x003EE420 | 0x003EE420 | 0x00000271 |
ShowWindow | - | 0x0051C5BC | 0x003EE424 | 0x003EE424 | 0x0000026A |
IsWindowEnabled | - | 0x0051C5C0 | 0x003EE428 | 0x003EE428 | 0x00000190 |
TranslateAcceleratorA | - | 0x0051C5C4 | 0x003EE42C | 0x003EE42C | 0x0000027F |
GetKeyState | - | 0x0051C5C8 | 0x003EE430 | 0x003EE430 | 0x00000112 |
CopyAcceleratorTableA | - | 0x0051C5CC | 0x003EE434 | 0x003EE434 | 0x00000040 |
PostQuitMessage | - | 0x0051C5D0 | 0x003EE438 | 0x003EE438 | 0x000001E0 |
IsZoomed | - | 0x0051C5D4 | 0x003EE43C | 0x003EE43C | 0x00000193 |
GetClassInfoA | - | 0x0051C5D8 | 0x003EE440 | 0x003EE440 | 0x000000E7 |
DefWindowProcA | - | 0x0051C5DC | 0x003EE444 | 0x003EE444 | 0x00000084 |
GetSystemMenu | - | 0x0051C5E0 | 0x003EE448 | 0x003EE448 | 0x00000145 |
DeleteMenu | - | 0x0051C5E4 | 0x003EE44C | 0x003EE44C | 0x00000087 |
GetMenu | - | 0x0051C5E8 | 0x003EE450 | 0x003EE450 | 0x0000011C |
SetMenu | - | 0x0051C5EC | 0x003EE454 | 0x003EE454 | 0x00000235 |
PeekMessageA | - | 0x0051C5F0 | 0x003EE458 | 0x003EE458 | 0x000001DC |
IsIconic | - | 0x0051C5F4 | 0x003EE45C | 0x003EE45C | 0x0000018C |
SetFocus | - | 0x0051C5F8 | 0x003EE460 | 0x003EE460 | 0x0000022F |
GetActiveWindow | - | 0x0051C5FC | 0x003EE464 | 0x003EE464 | 0x000000DD |
GetWindow | - | 0x0051C600 | 0x003EE468 | 0x003EE468 | 0x00000152 |
DestroyAcceleratorTable | - | 0x0051C604 | 0x003EE46C | 0x003EE46C | 0x00000089 |
SetWindowRgn | - | 0x0051C608 | 0x003EE470 | 0x003EE470 | 0x0000025C |
GetMessagePos | - | 0x0051C60C | 0x003EE474 | 0x003EE474 | 0x0000012C |
ScreenToClient | - | 0x0051C610 | 0x003EE478 | 0x003EE478 | 0x0000020A |
ChildWindowFromPointEx | - | 0x0051C614 | 0x003EE47C | 0x003EE47C | 0x00000038 |
CopyRect | - | 0x0051C618 | 0x003EE480 | 0x003EE480 | 0x00000044 |
LoadBitmapA | - | 0x0051C61C | 0x003EE484 | 0x003EE484 | 0x00000198 |
WinHelpA | - | 0x0051C620 | 0x003EE488 | 0x003EE488 | 0x000002A6 |
KillTimer | - | 0x0051C624 | 0x003EE48C | 0x003EE48C | 0x00000195 |
SetTimer | - | 0x0051C628 | 0x003EE490 | 0x003EE490 | 0x00000252 |
ReleaseCapture | - | 0x0051C62C | 0x003EE494 | 0x003EE494 | 0x00000202 |
GetCapture | - | 0x0051C630 | 0x003EE498 | 0x003EE498 | 0x000000E4 |
SetCapture | - | 0x0051C634 | 0x003EE49C | 0x003EE49C | 0x0000021D |
GetScrollRange | - | 0x0051C638 | 0x003EE4A0 | 0x003EE4A0 | 0x00000140 |
SetScrollRange | - | 0x0051C63C | 0x003EE4A4 | 0x003EE4A4 | 0x00000248 |
SetRect | - | 0x0051C640 | 0x003EE4A8 | 0x003EE4A8 | 0x00000244 |
InflateRect | - | 0x0051C644 | 0x003EE4AC | 0x003EE4AC | 0x00000171 |
IntersectRect | - | 0x0051C648 | 0x003EE4B0 | 0x003EE4B0 | 0x00000179 |
DestroyIcon | - | 0x0051C64C | 0x003EE4B4 | 0x003EE4B4 | 0x0000008C |
PtInRect | - | 0x0051C650 | 0x003EE4B8 | 0x003EE4B8 | 0x000001EA |
OffsetRect | - | 0x0051C654 | 0x003EE4BC | 0x003EE4BC | 0x000001D2 |
IsWindowVisible | - | 0x0051C658 | 0x003EE4C0 | 0x003EE4C0 | 0x00000192 |
EnableWindow | - | 0x0051C65C | 0x003EE4C4 | 0x003EE4C4 | 0x000000B7 |
RedrawWindow | - | 0x0051C660 | 0x003EE4C8 | 0x003EE4C8 | 0x000001F1 |
GetWindowLongA | - | 0x0051C664 | 0x003EE4CC | 0x003EE4CC | 0x00000156 |
SetWindowLongA | - | 0x0051C668 | 0x003EE4D0 | 0x003EE4D0 | 0x00000258 |
GetSysColor | - | 0x0051C66C | 0x003EE4D4 | 0x003EE4D4 | 0x00000143 |
SetActiveWindow | - | 0x0051C670 | 0x003EE4D8 | 0x003EE4D8 | 0x0000021C |
SetCursorPos | - | 0x0051C674 | 0x003EE4DC | 0x003EE4DC | 0x00000228 |
LoadCursorA | - | 0x0051C678 | 0x003EE4E0 | 0x003EE4E0 | 0x0000019A |
SetCursor | - | 0x0051C67C | 0x003EE4E4 | 0x003EE4E4 | 0x00000226 |
GetDC | - | 0x0051C680 | 0x003EE4E8 | 0x003EE4E8 | 0x000000FD |
FillRect | - | 0x0051C684 | 0x003EE4EC | 0x003EE4EC | 0x000000D4 |
IsRectEmpty | - | 0x0051C688 | 0x003EE4F0 | 0x003EE4F0 | 0x0000018E |
ReleaseDC | - | 0x0051C68C | 0x003EE4F4 | 0x003EE4F4 | 0x00000203 |
IsChild | - | 0x0051C690 | 0x003EE4F8 | 0x003EE4F8 | 0x00000185 |
TrackPopupMenu | - | 0x0051C694 | 0x003EE4FC | 0x003EE4FC | 0x0000027C |
DestroyMenu | - | 0x0051C698 | 0x003EE500 | 0x003EE500 | 0x0000008D |
SetForegroundWindow | - | 0x0051C69C | 0x003EE504 | 0x003EE504 | 0x00000230 |
GetWindowRect | - | 0x0051C6A0 | 0x003EE508 | 0x003EE508 | 0x0000015C |
EqualRect | - | 0x0051C6A4 | 0x003EE50C | 0x003EE50C | 0x000000D1 |
UpdateWindow | - | 0x0051C6A8 | 0x003EE510 | 0x003EE510 | 0x00000291 |
ValidateRect | - | 0x0051C6AC | 0x003EE514 | 0x003EE514 | 0x0000029A |
InvalidateRect | - | 0x0051C6B0 | 0x003EE518 | 0x003EE518 | 0x0000017A |
GetClientRect | - | 0x0051C6B4 | 0x003EE51C | 0x003EE51C | 0x000000F0 |
GetFocus | - | 0x0051C6B8 | 0x003EE520 | 0x003EE520 | 0x00000107 |
GetParent | - | 0x0051C6BC | 0x003EE524 | 0x003EE524 | 0x00000135 |
GetTopWindow | - | 0x0051C6C0 | 0x003EE528 | 0x003EE528 | 0x0000014C |
PostMessageA | - | 0x0051C6C4 | 0x003EE52C | 0x003EE52C | 0x000001DE |
IsWindow | - | 0x0051C6C8 | 0x003EE530 | 0x003EE530 | 0x0000018F |
SetParent | - | 0x0051C6CC | 0x003EE534 | 0x003EE534 | 0x0000023E |
DestroyCursor | - | 0x0051C6D0 | 0x003EE538 | 0x003EE538 | 0x0000008B |
SendMessageA | - | 0x0051C6D4 | 0x003EE53C | 0x003EE53C | 0x00000214 |
SetWindowPos | - | 0x0051C6D8 | 0x003EE540 | 0x003EE540 | 0x0000025B |
MessageBoxA | - | 0x0051C6DC | 0x003EE544 | 0x003EE544 | 0x000001BE |
GetCursorPos | - | 0x0051C6E0 | 0x003EE548 | 0x003EE548 | 0x000000FC |
GetSystemMetrics | - | 0x0051C6E4 | 0x003EE54C | 0x003EE54C | 0x00000146 |
EmptyClipboard | - | 0x0051C6E8 | 0x003EE550 | 0x003EE550 | 0x000000B4 |
SetClipboardData | - | 0x0051C6EC | 0x003EE554 | 0x003EE554 | 0x00000223 |
OpenClipboard | - | 0x0051C6F0 | 0x003EE558 | 0x003EE558 | 0x000001D3 |
GetClipboardData | - | 0x0051C6F4 | 0x003EE55C | 0x003EE55C | 0x000000F2 |
CloseClipboard | - | 0x0051C6F8 | 0x003EE560 | 0x003EE560 | 0x0000003C |
wsprintfA | - | 0x0051C6FC | 0x003EE564 | 0x003EE564 | 0x000002AC |
LoadStringA | - | 0x0051C700 | 0x003EE568 | 0x003EE568 | 0x000001AB |
CreateIconFromResource | - | 0x0051C704 | 0x003EE56C | 0x003EE56C | 0x00000052 |
SetScrollPos | - | 0x0051C708 | 0x003EE570 | 0x003EE570 | 0x00000247 |
UnregisterClassA | - | 0x0051C70C | 0x003EE574 | 0x003EE574 | 0x0000028B |
GDI32.dll (90)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
CreateFontIndirectA | - | 0x0051C064 | 0x003EDECC | 0x003EDECC | 0x00000037 |
CreateSolidBrush | - | 0x0051C068 | 0x003EDED0 | 0x003EDED0 | 0x0000004D |
FillRgn | - | 0x0051C06C | 0x003EDED4 | 0x003EDED4 | 0x000000A8 |
CreateRectRgn | - | 0x0051C070 | 0x003EDED8 | 0x003EDED8 | 0x00000048 |
CombineRgn | - | 0x0051C074 | 0x003EDEDC | 0x003EDEDC | 0x0000001E |
PatBlt | - | 0x0051C078 | 0x003EDEE0 | 0x003EDEE0 | 0x00000194 |
CreatePen | - | 0x0051C07C | 0x003EDEE4 | 0x003EDEE4 | 0x00000044 |
SelectObject | - | 0x0051C080 | 0x003EDEE8 | 0x003EDEE8 | 0x000001C7 |
CreatePatternBrush | - | 0x0051C084 | 0x003EDEEC | 0x003EDEEC | 0x00000043 |
CreateBitmap | - | 0x0051C088 | 0x003EDEF0 | 0x003EDEF0 | 0x00000024 |
CreateBrushIndirect | - | 0x0051C08C | 0x003EDEF4 | 0x003EDEF4 | 0x00000026 |
CreateDCA | - | 0x0051C090 | 0x003EDEF8 | 0x003EDEF8 | 0x0000002B |
CreateCompatibleBitmap | - | 0x0051C094 | 0x003EDEFC | 0x003EDEFC | 0x00000029 |
GetPolyFillMode | - | 0x0051C098 | 0x003EDF00 | 0x003EDF00 | 0x00000158 |
GetStretchBltMode | - | 0x0051C09C | 0x003EDF04 | 0x003EDF04 | 0x00000160 |
GetROP2 | - | 0x0051C0A0 | 0x003EDF08 | 0x003EDF08 | 0x00000159 |
GetBkColor | - | 0x0051C0A4 | 0x003EDF0C | 0x003EDF0C | 0x00000107 |
GetBkMode | - | 0x0051C0A8 | 0x003EDF10 | 0x003EDF10 | 0x00000108 |
GetTextColor | - | 0x0051C0AC | 0x003EDF14 | 0x003EDF14 | 0x00000169 |
CreateRoundRectRgn | - | 0x0051C0B0 | 0x003EDF18 | 0x003EDF18 | 0x0000004A |
SetWindowOrgEx | - | 0x0051C0B4 | 0x003EDF1C | 0x003EDF1C | 0x000001FA |
SaveDC | - | 0x0051C0B8 | 0x003EDF20 | 0x003EDF20 | 0x000001C0 |
RestoreDC | - | 0x0051C0BC | 0x003EDF24 | 0x003EDF24 | 0x000001B9 |
CreatePenIndirect | - | 0x0051C0C0 | 0x003EDF28 | 0x003EDF28 | 0x00000045 |
PtVisible | - | 0x0051C0C4 | 0x003EDF2C | 0x003EDF2C | 0x000001AA |
RectVisible | - | 0x0051C0C8 | 0x003EDF30 | 0x003EDF30 | 0x000001AE |
ExtTextOutA | - | 0x0051C0CC | 0x003EDF34 | 0x003EDF34 | 0x0000009E |
SetPolyFillMode | - | 0x0051C0D0 | 0x003EDF38 | 0x003EDF38 | 0x000001EB |
SetROP2 | - | 0x0051C0D4 | 0x003EDF3C | 0x003EDF3C | 0x000001EC |
SetMapMode | - | 0x0051C0D8 | 0x003EDF40 | 0x003EDF40 | 0x000001E2 |
SetViewportOrgEx | - | 0x0051C0DC | 0x003EDF44 | 0x003EDF44 | 0x000001F6 |
OffsetViewportOrgEx | - | 0x0051C0E0 | 0x003EDF48 | 0x003EDF48 | 0x0000018C |
SetViewportExtEx | - | 0x0051C0E4 | 0x003EDF4C | 0x003EDF4C | 0x000001F5 |
ScaleViewportExtEx | - | 0x0051C0E8 | 0x003EDF50 | 0x003EDF50 | 0x000001C1 |
SetWindowExtEx | - | 0x0051C0EC | 0x003EDF54 | 0x003EDF54 | 0x000001F9 |
ScaleWindowExtEx | - | 0x0051C0F0 | 0x003EDF58 | 0x003EDF58 | 0x000001C2 |
GetClipBox | - | 0x0051C0F4 | 0x003EDF5C | 0x003EDF5C | 0x0000011A |
ExcludeClipRect | - | 0x0051C0F8 | 0x003EDF60 | 0x003EDF60 | 0x00000098 |
MoveToEx | - | 0x0051C0FC | 0x003EDF64 | 0x003EDF64 | 0x00000188 |
GetStockObject | - | 0x0051C100 | 0x003EDF68 | 0x003EDF68 | 0x0000015F |
GetObjectA | - | 0x0051C104 | 0x003EDF6C | 0x003EDF6C | 0x0000014F |
ExtSelectClipRgn | - | 0x0051C108 | 0x003EDF70 | 0x003EDF70 | 0x0000009D |
GetViewportExtEx | - | 0x0051C10C | 0x003EDF74 | 0x003EDF74 | 0x00000178 |
GetTextMetricsA | - | 0x0051C110 | 0x003EDF78 | 0x003EDF78 | 0x00000175 |
SetBkMode | - | 0x0051C114 | 0x003EDF7C | 0x003EDF7C | 0x000001CE |
TextOutA | - | 0x0051C118 | 0x003EDF80 | 0x003EDF80 | 0x00000205 |
SetBkColor | - | 0x0051C11C | 0x003EDF84 | 0x003EDF84 | 0x000001CD |
CreateRectRgnIndirect | - | 0x0051C120 | 0x003EDF88 | 0x003EDF88 | 0x00000049 |
CreateDIBSection | - | 0x0051C124 | 0x003EDF8C | 0x003EDF8C | 0x0000002F |
SetPixel | - | 0x0051C128 | 0x003EDF90 | 0x003EDF90 | 0x000001E8 |
SetStretchBltMode | - | 0x0051C12C | 0x003EDF94 | 0x003EDF94 | 0x000001EF |
GetClipRgn | - | 0x0051C130 | 0x003EDF98 | 0x003EDF98 | 0x0000011B |
CreatePolygonRgn | - | 0x0051C134 | 0x003EDF9C | 0x003EDF9C | 0x00000047 |
SelectClipRgn | - | 0x0051C138 | 0x003EDFA0 | 0x003EDFA0 | 0x000001C5 |
DeleteObject | - | 0x0051C13C | 0x003EDFA4 | 0x003EDFA4 | 0x00000053 |
CreateDIBitmap | - | 0x0051C140 | 0x003EDFA8 | 0x003EDFA8 | 0x00000030 |
GetSystemPaletteEntries | - | 0x0051C144 | 0x003EDFAC | 0x003EDFAC | 0x00000163 |
CreatePalette | - | 0x0051C148 | 0x003EDFB0 | 0x003EDFB0 | 0x00000042 |
StretchBlt | - | 0x0051C14C | 0x003EDFB4 | 0x003EDFB4 | 0x00000200 |
SelectPalette | - | 0x0051C150 | 0x003EDFB8 | 0x003EDFB8 | 0x000001C8 |
RealizePalette | - | 0x0051C154 | 0x003EDFBC | 0x003EDFBC | 0x000001AC |
GetDIBits | - | 0x0051C158 | 0x003EDFC0 | 0x003EDFC0 | 0x00000124 |
GetWindowExtEx | - | 0x0051C15C | 0x003EDFC4 | 0x003EDFC4 | 0x0000017B |
GetViewportOrgEx | - | 0x0051C160 | 0x003EDFC8 | 0x003EDFC8 | 0x00000179 |
GetWindowOrgEx | - | 0x0051C164 | 0x003EDFCC | 0x003EDFCC | 0x0000017C |
BeginPath | - | 0x0051C168 | 0x003EDFD0 | 0x003EDFD0 | 0x00000010 |
EndPath | - | 0x0051C16C | 0x003EDFD4 | 0x003EDFD4 | 0x0000005D |
PathToRegion | - | 0x0051C170 | 0x003EDFD8 | 0x003EDFD8 | 0x00000195 |
CreateEllipticRgn | - | 0x0051C174 | 0x003EDFDC | 0x003EDFDC | 0x00000032 |
Ellipse | - | 0x0051C178 | 0x003EDFE0 | 0x003EDFE0 | 0x00000058 |
Rectangle | - | 0x0051C17C | 0x003EDFE4 | 0x003EDFE4 | 0x000001AF |
LPtoDP | - | 0x0051C180 | 0x003EDFE8 | 0x003EDFE8 | 0x00000182 |
DPtoLP | - | 0x0051C184 | 0x003EDFEC | 0x003EDFEC | 0x0000004E |
GetCurrentObject | - | 0x0051C188 | 0x003EDFF0 | 0x003EDFF0 | 0x0000011E |
RoundRect | - | 0x0051C18C | 0x003EDFF4 | 0x003EDFF4 | 0x000001BA |
SetDIBitsToDevice | - | 0x0051C190 | 0x003EDFF8 | 0x003EDFF8 | 0x000001D7 |
EndPage | - | 0x0051C194 | 0x003EDFFC | 0x003EDFFC | 0x0000005C |
EndDoc | - | 0x0051C198 | 0x003EE000 | 0x003EE000 | 0x0000005A |
DeleteDC | - | 0x0051C19C | 0x003EE004 | 0x003EE004 | 0x00000050 |
StartDocA | - | 0x0051C1A0 | 0x003EE008 | 0x003EE008 | 0x000001FC |
StartPage | - | 0x0051C1A4 | 0x003EE00C | 0x003EE00C | 0x000001FF |
BitBlt | - | 0x0051C1A8 | 0x003EE010 | 0x003EE010 | 0x00000011 |
GetPixel | - | 0x0051C1AC | 0x003EE014 | 0x003EE014 | 0x00000156 |
CreateCompatibleDC | - | 0x0051C1B0 | 0x003EE018 | 0x003EE018 | 0x0000002A |
SetPixelV | - | 0x0051C1B4 | 0x003EE01C | 0x003EE01C | 0x000001EA |
GetTextExtentPoint32A | - | 0x0051C1B8 | 0x003EE020 | 0x003EE020 | 0x0000016E |
LineTo | - | 0x0051C1BC | 0x003EE024 | 0x003EE024 | 0x00000184 |
Escape | - | 0x0051C1C0 | 0x003EE028 | 0x003EE028 | 0x00000095 |
GetDeviceCaps | - | 0x0051C1C4 | 0x003EE02C | 0x003EE02C | 0x00000125 |
SetTextColor | - | 0x0051C1C8 | 0x003EE030 | 0x003EE030 | 0x000001F3 |
MSIMG32.dll (1)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
GradientFill | - | 0x0051C414 | 0x003EE27C | 0x003EE27C | 0x00000002 |
WINSPOOL.DRV (3)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
OpenPrinterA | - | 0x0051C764 | 0x003EE5CC | 0x003EE5CC | 0x0000007C |
DocumentPropertiesA | - | 0x0051C768 | 0x003EE5D0 | 0x003EE5D0 | 0x00000047 |
ClosePrinter | - | 0x0051C76C | 0x003EE5D4 | 0x003EE5D4 | 0x0000001C |
comdlg32.dll (5)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
ChooseColorA | - | 0x0051C7C0 | 0x003EE628 | 0x003EE628 | 0x00000000 |
ChooseFontA | - | 0x0051C7C4 | 0x003EE62C | 0x003EE62C | 0x00000002 |
GetOpenFileNameA | - | 0x0051C7C8 | 0x003EE630 | 0x003EE630 | 0x00000009 |
GetSaveFileNameA | - | 0x0051C7CC | 0x003EE634 | 0x003EE634 | 0x0000000B |
GetFileTitleA | - | 0x0051C7D0 | 0x003EE638 | 0x003EE638 | 0x00000007 |
ADVAPI32.dll (7)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
RegCreateKeyExA | - | 0x0051C000 | 0x003EDE68 | 0x003EDE68 | 0x0000015F |
RegOpenKeyA | - | 0x0051C004 | 0x003EDE6C | 0x003EDE6C | 0x00000171 |
RegQueryValueA | - | 0x0051C008 | 0x003EDE70 | 0x003EDE70 | 0x0000017A |
RegSetValueExA | - | 0x0051C00C | 0x003EDE74 | 0x003EDE74 | 0x00000186 |
RegOpenKeyExA | - | 0x0051C010 | 0x003EDE78 | 0x003EDE78 | 0x00000172 |
RegQueryValueExA | - | 0x0051C014 | 0x003EDE7C | 0x003EDE7C | 0x0000017B |
RegCloseKey | - | 0x0051C018 | 0x003EDE80 | 0x003EDE80 | 0x0000015B |
SHELL32.dll (3)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
ShellExecuteA | - | 0x0051C470 | 0x003EE2D8 | 0x003EE2D8 | 0x00000072 |
Shell_NotifyIconA | - | 0x0051C474 | 0x003EE2DC | 0x003EE2DC | 0x00000079 |
SHGetSpecialFolderPathA | - | 0x0051C478 | 0x003EE2E0 | 0x003EE2E0 | 0x00000054 |
ole32.dll (6)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
CLSIDFromProgID | - | 0x0051C7D8 | 0x003EE640 | 0x003EE640 | 0x00000005 |
OleInitialize | - | 0x0051C7DC | 0x003EE644 | 0x003EE644 | 0x000000C9 |
CLSIDFromString | - | 0x0051C7E0 | 0x003EE648 | 0x003EE648 | 0x00000006 |
CoCreateInstance | - | 0x0051C7E4 | 0x003EE64C | 0x003EE64C | 0x0000000D |
OleRun | - | 0x0051C7E8 | 0x003EE650 | 0x003EE650 | 0x000000D8 |
OleUninitialize | - | 0x0051C7EC | 0x003EE654 | 0x003EE654 | 0x000000E0 |
OLEAUT32.dll (18)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
VariantClear | 0x00000009 | 0x0051C424 | 0x003EE28C | 0x003EE28C | - |
VariantInit | 0x00000008 | 0x0051C428 | 0x003EE290 | 0x003EE290 | - |
VariantCopyInd | 0x0000000B | 0x0051C42C | 0x003EE294 | 0x003EE294 | - |
SafeArrayGetElement | 0x00000019 | 0x0051C430 | 0x003EE298 | 0x003EE298 | - |
SafeArrayAccessData | 0x00000017 | 0x0051C434 | 0x003EE29C | 0x003EE29C | - |
SafeArrayUnaccessData | 0x00000018 | 0x0051C438 | 0x003EE2A0 | 0x003EE2A0 | - |
SafeArrayGetDim | 0x00000011 | 0x0051C43C | 0x003EE2A4 | 0x003EE2A4 | - |
SafeArrayGetLBound | 0x00000014 | 0x0051C440 | 0x003EE2A8 | 0x003EE2A8 | - |
SafeArrayGetUBound | 0x00000013 | 0x0051C444 | 0x003EE2AC | 0x003EE2AC | - |
SysAllocString | 0x00000002 | 0x0051C448 | 0x003EE2B0 | 0x003EE2B0 | - |
SafeArrayDestroy | 0x00000010 | 0x0051C44C | 0x003EE2B4 | 0x003EE2B4 | - |
SafeArrayCreate | 0x0000000F | 0x0051C450 | 0x003EE2B8 | 0x003EE2B8 | - |
SafeArrayPutElement | 0x0000001A | 0x0051C454 | 0x003EE2BC | 0x003EE2BC | - |
RegisterTypeLib | 0x000000A3 | 0x0051C458 | 0x003EE2C0 | 0x003EE2C0 | - |
LHashValOfNameSys | 0x000000A5 | 0x0051C45C | 0x003EE2C4 | 0x003EE2C4 | - |
LoadTypeLib | 0x000000A1 | 0x0051C460 | 0x003EE2C8 | 0x003EE2C8 | - |
VariantChangeType | 0x0000000C | 0x0051C464 | 0x003EE2CC | 0x003EE2CC | - |
UnRegisterTypeLib | 0x000000BA | 0x0051C468 | 0x003EE2D0 | 0x003EE2D0 | - |
COMCTL32.dll (13)
»
API Name | Ordinal | IAT Address | Thunk RVA | Thunk Offset | Hint |
---|---|---|---|---|---|
None | 0x00000011 | 0x0051C02C | 0x003EDE94 | 0x003EDE94 | - |
ImageList_AddMasked | - | 0x0051C030 | 0x003EDE98 | 0x003EDE98 | 0x0000001E |
ImageList_Draw | - | 0x0051C034 | 0x003EDE9C | 0x003EDE9C | 0x00000027 |
ImageList_SetBkColor | - | 0x0051C038 | 0x003EDEA0 | 0x003EDEA0 | 0x0000003B |
ImageList_GetImageCount | - | 0x0051C03C | 0x003EDEA4 | 0x003EDEA4 | 0x00000030 |
ImageList_GetImageInfo | - | 0x0051C040 | 0x003EDEA8 | 0x003EDEA8 | 0x00000031 |
ImageList_GetIcon | - | 0x0051C044 | 0x003EDEAC | 0x003EDEAC | 0x0000002E |
_TrackMouseEvent | - | 0x0051C048 | 0x003EDEB0 | 0x003EDEB0 | 0x0000004D |
ImageList_Duplicate | - | 0x0051C04C | 0x003EDEB4 | 0x003EDEB4 | 0x0000002A |
ImageList_DrawIndirect | - | 0x0051C050 | 0x003EDEB8 | 0x003EDEB8 | 0x00000029 |
ImageList_Read | - | 0x0051C054 | 0x003EDEBC | 0x003EDEBC | 0x00000037 |
ImageList_Create | - | 0x0051C058 | 0x003EDEC0 | 0x003EDEC0 | 0x00000021 |
ImageList_Destroy | - | 0x0051C05C | 0x003EDEC4 | 0x003EDEC4 | 0x00000022 |
Memory Dumps (428)
»
Name | Process ID | Start VA | End VA | Dump Reason | PE Rebuild | Bitness | Entry Point | YARA | Actions |
---|---|---|---|---|---|---|---|---|---|
xrxnqv2g9mnibqer.exe | 1 | 0x00400000 | 0x00881FFF | Relevant Image | 32-bit | 0x004E8BA2 |
...
|
||
buffer | 1 | 0x0019D000 | 0x0019FFFF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00BCF448 | 0x00BCF4CB | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00BCF8D8 | 0x00BCF983 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00BD0220 | 0x00BD02A7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00BD4308 | 0x00BD441F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00BD5BD0 | 0x00BD5C6B | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00BD7238 | 0x00BD72E3 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00BDEFD8 | 0x00BDF1BF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00BDF1C8 | 0x00BDF3AF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00BDF3B8 | 0x00BDF59F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00BDF5A8 | 0x00BDF78F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00BE0A10 | 0x00BE1A83 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00BE5C20 | 0x00BF4641 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00BF4650 | 0x00BF5023 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00BF5030 | 0x00C03A51 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C0CE50 | 0x00C0CF0B | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C0CFE0 | 0x00C0D09B | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C0D1C8 | 0x00C0D283 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C0FEA8 | 0x00C0FF63 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C10698 | 0x00C10753 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C19808 | 0x00C198C3 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C19A90 | 0x00C19B4B | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C19FD0 | 0x00C1A08B | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C1A510 | 0x00C1A5CB | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C1AA50 | 0x00C1AB0B | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C1B0A0 | 0x00C1B15B | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C1B800 | 0x00C1B8BB | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C1BFC0 | 0x00C1C07B | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C1C150 | 0x00C1C20B | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C1C218 | 0x00C1C2D3 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C1C2E0 | 0x00C1C39B | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C1C600 | 0x00C1C6BB | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C21260 | 0x00C212EF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C21B40 | 0x00C21BFB | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C21F28 | 0x00C21FE3 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C23120 | 0x00C231DB | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C25BF0 | 0x00C25FB7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C36DC0 | 0x00C36EC1 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C37D08 | 0x00C37DC3 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C37DD0 | 0x00C37E8B | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C38028 | 0x00C380E3 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C380F0 | 0x00C381AB | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C381B8 | 0x00C38273 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C38410 | 0x00C384CB | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C38668 | 0x00C38723 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C38730 | 0x00C387EB | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C387F8 | 0x00C388B3 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C38A50 | 0x00C38B0B | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C38B18 | 0x00C38BD3 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C38BE0 | 0x00C38C9B | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C38CA8 | 0x00C38D63 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C39220 | 0x00C392DB | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C392E8 | 0x00C393A3 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C39478 | 0x00C39533 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C39540 | 0x00C395FB | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C39608 | 0x00C396C3 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C396D0 | 0x00C3978B | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C39798 | 0x00C39853 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C3B9C8 | 0x00C3BD63 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C3E878 | 0x00C3EC13 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C3EC20 | 0x00C3EFBB | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C3EFC8 | 0x00C3F3B2 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x00C438A8 | 0x00C43963 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x02620004 | 0x02620103 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x028104A0 | 0x0281056F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x028147C0 | 0x02814FBF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x028153C8 | 0x028167D7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x028167E0 | 0x0281685F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x02816938 | 0x02816B27 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x02816B30 | 0x02816D3F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x02816D90 | 0x02816EAF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x02816F10 | 0x02816F8F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x02816FF0 | 0x0281710F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x02817118 | 0x02817207 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x02817210 | 0x028172BF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x028172C8 | 0x02817387 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x02817390 | 0x028174AF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x028174B8 | 0x02817597 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x028175A0 | 0x028176BF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x02817730 | 0x028177AF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x02817820 | 0x0281789F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x028178A8 | 0x02819CB7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x02819CC0 | 0x02819D3F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x02819D48 | 0x02819DC7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x02819DD0 | 0x02819EBF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x02819EC8 | 0x02819F57 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x02819F60 | 0x0281A04F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281A058 | 0x0281A0D7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281A0E0 | 0x0281B4EF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281B4F8 | 0x0281B577 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281B580 | 0x0281B66F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281B6E0 | 0x0281B7CF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281B810 | 0x0281B8BF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281B8C8 | 0x0281B947 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281B950 | 0x0281B9CF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281B9D8 | 0x0281BAF7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281BB00 | 0x0281BB7F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281BB88 | 0x0281BC87 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281BCE8 | 0x0281D0F7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281D100 | 0x0281D21F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281D290 | 0x0281D33F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281D348 | 0x0281D3F7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281D400 | 0x0281D47F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281D488 | 0x0281D5A7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281D5B0 | 0x0281D62F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281D638 | 0x0281D757 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281D760 | 0x0281D7DF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281D7E8 | 0x0281D907 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281D910 | 0x0281DA2F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281DA38 | 0x0281DB57 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281DB60 | 0x0281DC7F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281DC88 | 0x0281DD07 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281DD90 | 0x0281DE0F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281DE18 | 0x0281DE97 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281DEA0 | 0x0281DF1F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281DF28 | 0x0281DFA7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281DFB0 | 0x0281E02F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E038 | 0x0281E0B7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E0C0 | 0x0281E13F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E148 | 0x0281E1C7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E1D0 | 0x0281E24F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E258 | 0x0281E2D7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E2E0 | 0x0281E35F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E368 | 0x0281E3E7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E3F0 | 0x0281E46F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E478 | 0x0281E4F7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E500 | 0x0281E57F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E588 | 0x0281E607 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E610 | 0x0281E68F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E698 | 0x0281E717 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E720 | 0x0281E79F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E7A8 | 0x0281E827 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E830 | 0x0281E8AF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E8B8 | 0x0281E937 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E940 | 0x0281E9BF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281E9C8 | 0x0281EA47 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281EA50 | 0x0281EACF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281EAD8 | 0x0281EB57 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281EB60 | 0x0281EBDF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281EBE8 | 0x0281EC67 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281EC70 | 0x0281ECEF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281ED70 | 0x0281EE8F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x0281EE98 | 0x0281EFB7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A0048 | 0x040A0167 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A0170 | 0x040A028F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A0298 | 0x040A03B7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A03C0 | 0x040A050F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A0518 | 0x040A0667 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A0670 | 0x040A07BF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A07C8 | 0x040A0917 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A0920 | 0x040A0A6F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A0A78 | 0x040A0BC7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A0BD0 | 0x040A0D1F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A0D28 | 0x040A0E77 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A0E80 | 0x040A0FCF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A0FD8 | 0x040A1127 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A1130 | 0x040A127F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A12B0 | 0x040A13CF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A13D8 | 0x040A14F7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A1500 | 0x040A161F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A1628 | 0x040A1747 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A1750 | 0x040A186F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A1878 | 0x040A1997 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A19A0 | 0x040A1ABF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A1AC8 | 0x040A1BE7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A1BF0 | 0x040A1D0F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A1D18 | 0x040A1E37 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A1E40 | 0x040A1F5F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A1F68 | 0x040A2087 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A2090 | 0x040A21AF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A2290 | 0x040A233F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A2348 | 0x040A23F7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A2400 | 0x040A24AF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A24B8 | 0x040A2567 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A2570 | 0x040A261F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A2628 | 0x040A26D7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A26E0 | 0x040A278F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A2798 | 0x040A2847 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A2850 | 0x040A28FF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A2908 | 0x040A29B7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A29C0 | 0x040A2A6F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A2A78 | 0x040A2B27 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A2B30 | 0x040A2BDF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A2C10 | 0x040A2CBF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A2CC8 | 0x040A2D77 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A2D80 | 0x040A2E2F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A2E38 | 0x040A2EE7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A2EF0 | 0x040A2F9F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A2FA8 | 0x040A3057 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A3060 | 0x040A310F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A3118 | 0x040A31C7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A31D0 | 0x040A327F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A3288 | 0x040A3337 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A3340 | 0x040A33EF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A33F8 | 0x040A34A7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A34B0 | 0x040A355F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A3568 | 0x040A3617 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A3620 | 0x040A36CF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A36D8 | 0x040A3787 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A3790 | 0x040A383F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A3848 | 0x040A38F7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A3900 | 0x040A39AF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A39B8 | 0x040A3A67 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A3A70 | 0x040A3B1F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A3B28 | 0x040A3BD7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A3BF0 | 0x040A3CCF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A3D40 | 0x040A3E1F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A3E50 | 0x040A3F6F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A3F78 | 0x040A4097 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A40A0 | 0x040A41BF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A41C8 | 0x040A42E7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A42F0 | 0x040A440F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A4418 | 0x040A4537 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A4540 | 0x040A465F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A4668 | 0x040A4787 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A4790 | 0x040A48AF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A48B8 | 0x040A49D7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A49E0 | 0x040A4AFF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A4B08 | 0x040A4C27 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A4C30 | 0x040A4D4F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A4D58 | 0x040A4E77 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A4E80 | 0x040A4F9F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A4FA8 | 0x040A50C7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A50D0 | 0x040A51EF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A51F8 | 0x040A5317 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A5320 | 0x040A543F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A5448 | 0x040A5567 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A5570 | 0x040A568F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A5698 | 0x040A57B7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A57C0 | 0x040A58DF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A58E8 | 0x040A5A07 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A5A10 | 0x040A5B2F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A5B38 | 0x040A5C57 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A5C60 | 0x040A5D7F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A5E30 | 0x040A5F2F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A5F38 | 0x040A6037 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A6040 | 0x040A613F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A6148 | 0x040A7557 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A7560 | 0x040A763F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A7648 | 0x040A7747 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A7750 | 0x040A781F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A7828 | 0x040A7907 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A7910 | 0x040A79EF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A79F8 | 0x040A7AD7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A7B10 | 0x040A7B8F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A7B98 | 0x040A7C17 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A7C20 | 0x040A7C9F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A7CA8 | 0x040A7D27 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A7D30 | 0x040A7DAF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A7DB8 | 0x040A7E37 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A7E40 | 0x040A7EBF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A7EC8 | 0x040A7F47 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A7F50 | 0x040A7FCF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A7FD8 | 0x040A8057 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8060 | 0x040A80DF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A80E8 | 0x040A8167 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8170 | 0x040A81EF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A81F8 | 0x040A8277 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8280 | 0x040A82FF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8308 | 0x040A8387 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8390 | 0x040A840F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8418 | 0x040A8497 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A84A0 | 0x040A851F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8528 | 0x040A85A7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A85B0 | 0x040A862F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8638 | 0x040A86B7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A86C0 | 0x040A873F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8748 | 0x040A87C7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A87D0 | 0x040A884F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8858 | 0x040A88D7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A88E0 | 0x040A895F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8968 | 0x040A89E7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A89F0 | 0x040A8A6F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8A78 | 0x040A8AF7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8B00 | 0x040A8B7F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8B88 | 0x040A8C07 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8C10 | 0x040A8C8F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8C98 | 0x040A8D17 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8D20 | 0x040A8D9F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8DA8 | 0x040A8E27 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8E30 | 0x040A8EAF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A8FC8 | 0x040A9047 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A90D8 | 0x040A9157 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A9380 | 0x040A93FF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A9518 | 0x040A9597 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A9628 | 0x040A96A7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A97C0 | 0x040A983F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A99E0 | 0x040A9A5F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A9AE8 | 0x040A9BC7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A9BD0 | 0x040A9CAF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A9CB8 | 0x040A9D97 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A9DA0 | 0x040A9E7F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A9E88 | 0x040A9F67 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040A9F70 | 0x040AA3EF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AA3F8 | 0x040AA807 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AA950 | 0x040AAA1F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AAA28 | 0x040AAAF7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AAB00 | 0x040AABCF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AAC20 | 0x040AACEF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AAD58 | 0x040AAE27 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AAEA8 | 0x040AAF77 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AAFE0 | 0x040AB0AF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AB0B8 | 0x040AB187 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AB190 | 0x040AB25F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AB268 | 0x040AB337 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AB388 | 0x040AB457 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AB460 | 0x040AB52F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AB538 | 0x040AC447 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AC450 | 0x040AC51F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AC528 | 0x040AC5F7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AC600 | 0x040AC6CF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AC6D8 | 0x040AC7A7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040ACFE0 | 0x040AD0AF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AD0B8 | 0x040AD187 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AD268 | 0x040AD337 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AD4F0 | 0x040AD5BF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AD5C8 | 0x040AD697 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AD6A0 | 0x040AD76F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AD778 | 0x040AD847 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AD850 | 0x040AD91F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AD928 | 0x040AD9F7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040ADA00 | 0x040ADACF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040ADAD8 | 0x040ADBA7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040ADBB0 | 0x040ADC7F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040ADC88 | 0x040ADD57 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040ADD60 | 0x040ADE2F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040ADE38 | 0x040ADF07 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040ADFC0 | 0x040AF3CF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AF3D8 | 0x040AF4D7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AF4E0 | 0x040AF5BF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AF5C8 | 0x040AF6A7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AF6B0 | 0x040AF78F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AF798 | 0x040AF877 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AF880 | 0x040AF95F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AFA78 | 0x040AFB57 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AFC48 | 0x040AFD27 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AFD30 | 0x040AFE0F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AFE18 | 0x040AFEF7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AFF00 | 0x040AFFDF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040AFFE8 | 0x040B00C7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040B0470 | 0x040B054F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040B0558 | 0x040B0637 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040B0970 | 0x040B0A6F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040B0A78 | 0x040B1E87 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040B1E90 | 0x040B20AF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040B20E0 | 0x040B21FF | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040B57F0 | 0x040B589F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040B5960 | 0x040B5A0F | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040B5CF8 | 0x040B5DA7 | First Network Behavior | 32-bit | - |
...
|
||
buffer | 1 | 0x040B60C8 | 0x040B6167 | First Network Behavior | 32-bit | - |
...
|
||
xrxnqv2g9mnibqer.exe | 1 | 0x00400000 | 0x00881FFF | First Network Behavior | 32-bit | 0x004AD0F0 |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | First Execution | 32-bit | 0x1003BEF0 |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | 0x10026218 |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | 0x10020C50 |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | 0x10025CB0 |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | 0x100322AE |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | 0x1000F6D0 |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | 0x10017090 |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
gdi32.dll | 1 | 0x76760000 | 0x768AEFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
gdi32.dll | 1 | 0x76760000 | 0x768AEFFF | First Execution | 32-bit | 0x767F6835 |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | - |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Marked Executable | 32-bit | - |
...
|
||
user32.dll | 1 | 0x773F0000 | 0x77536FFF | First Execution | 32-bit | 0x77428995 |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | 0x1000A180 |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | 0x1001B870 |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | 0x10021000 |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | 0x100081D0 |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | 0x1001C570 |
...
|
||
buffer | 1 | 0x10000000 | 0x1003DFFF | Content Changed | 32-bit | 0x1000B6E0 |
...
|
||
xrxnqv2g9mnibqer.exe | 1 | 0x00400000 | 0x00881FFF | Final Dump | 32-bit | - |
...
|
YARA Matches (2)
»
Rule Name | Rule Description | Classification | Score | Actions |
---|---|---|---|---|
Shellcode_Find_kernel32_PEB | x86 code to find kernel32.dll using the PEB; possible shellcode | - |
3/5
|
...
|
ChineseHacktools_1014 | Chinese hacktool | Hacktool |
5/5
|
...
|