PE Compile Time

2025-06-16 20:28:05

PE Imphash

27f7f115d9778bc6ddd99c417bc5119d

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00001850 0x00001a00 5.77569905848
.data 0x00003000 0x00000260 0x00000400 4.0418126518
.rdata 0x00004000 0x00000948 0x00000a00 3.99421183979
.pdata 0x00005000 0x00000210 0x00000400 2.26243590168
.xdata 0x00006000 0x00000190 0x00000200 3.17410422799
.bss 0x00007000 0x00000180 0x00000000 0.0
.idata 0x00008000 0x000005b0 0x00000600 3.75721561715
.tls 0x00009000 0x00000010 0x00000200 0.0
.reloc 0x0000a000 0x00000068 0x00000200 1.42000381311
/4 0x0000b000 0x00000410 0x00000600 1.19820339338
/19 0x0000c000 0x00009b76 0x00009c00 5.86904402214
/31 0x00016000 0x00001c09 0x00001e00 4.68030822327
/45 0x00018000 0x00001b99 0x00001c00 4.89026912298
/57 0x0001a000 0x000007f0 0x00000800 4.08607643018
/70 0x0001b000 0x000002c3 0x00000400 3.99235616084
/81 0x0001c000 0x00000e38 0x00001000 4.50389983661
/97 0x0001d000 0x000011fc 0x00001200 5.10369811301
/113 0x0001f000 0x00000195 0x00000200 4.12271950565

Imports

Library KERNEL32.dll:
0x140008180 DeleteCriticalSection
0x140008188 EnterCriticalSection
0x140008190 GetCurrentProcess
0x140008198 GetLastError
0x1400081a0 GetModuleHandleA
0x1400081a8 GetProcAddress
0x1400081b8 LeaveCriticalSection
0x1400081c8 Sleep
0x1400081d0 TlsGetValue
0x1400081d8 VirtualProtect
0x1400081e0 VirtualQuery
0x1400081e8 WaitForSingleObject
Library msvcrt.dll:
0x1400081f8 __C_specific_handler
0x140008200 __getmainargs
0x140008208 __initenv
0x140008210 __iob_func
0x140008218 __set_app_type
0x140008220 __setusermatherr
0x140008228 _amsg_exit
0x140008230 _cexit
0x140008238 _commode
0x140008240 _fmode
0x140008248 _initterm
0x140008250 _onexit
0x140008258 abort
0x140008260 calloc
0x140008268 exit
0x140008270 fprintf
0x140008278 free
0x140008280 fwrite
0x140008288 malloc
0x140008290 memcpy
0x140008298 signal
0x1400082a0 strlen
0x1400082a8 strncmp
0x1400082b0 vfprintf

!This program cannot be run in DOS mode.
`.data
.rdata
@.pdata
@.xdata
.idata
.reloc
ATUWVSH
[^_]A\
[^_]A\
PHc5fW
UAWAVAUATWVSH
[^_A\A]A^A_]
ATUWVSH
[^_]A\H
:MZuYHcB<H
ntdll.dll
NtAllocateVirtualMemory
NtCreateThreadEx
Argument domain error (DOMAIN)
Argument singularity (SIGN)
Overflow range error (OVERFLOW)
Partial loss of significance (PLOSS)
Total loss of significance (TLOSS)
The result is too small to be represented (UNDERFLOW)
Unknown error
_matherr(): %s in %s(%g, %g) (retval=%g)
Mingw-w64 runtime failure:
Address %p has no image-section
VirtualQuery failed for %d bytes at address %p
VirtualProtect failed with code 0x%x
Unknown pseudo relocation protocol version %d.
Unknown pseudo relocation bit size %d.
%d bit pseudo relocation at %p out of range, targeting %p, yielding the value %p.
GCC: (GNU) 13-win32
GCC: (GNU) 14-win32
GCC: (GNU) 14-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 14-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 13-win32
GCC: (GNU) 14-win32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
__C_specific_handler
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_commode
_fmode
_initterm
_onexit
calloc
fprintf
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
KERNEL32.dll
msvcrt.dll
9GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
size_t
long long unsigned int
long long int
uintptr_t
wchar_t
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
_EXCEPTION_RECORD
ExceptionCode
ExceptionFlags
ExceptionAddress
NumberParameters
ExceptionInformation
._CONTEXT
P1Home
P2Home
P3Home
P4Home
P5Home
P6Home
ContextFlags
EFlags
VectorRegister
VectorControl
DebugControl
LastBranchToRip
LastBranchFromRip
LastExceptionToRip
LastExceptionFromRip
__globallocalestatus
signed char
short int
ULONG_PTR
DWORD64
LONGLONG
ULONGLONG
EXCEPTION_ROUTINE
PEXCEPTION_ROUTINE
=_M128A
/M128A
long double
_onexit_t
double
_invalid_parameter_handler
_Float16
__bf16
._XMM_SAVE_AREA32
ControlWord
StatusWord
TagWord
Reserved1
ErrorOpcode
ErrorOffset
ErrorSelector
Reserved2
DataOffset
DataSelector
Reserved3
MxCsr_Mask
FloatRegisters
XmmRegisters
Reserved4
/XMM_SAVE_AREA32
Header
Legacy
1FltSave
1FloatSave
PCONTEXT
EXCEPTION_RECORD
PEXCEPTION_RECORD
_EXCEPTION_POINTERS
ContextRecord
EXCEPTION_POINTERS
_EXCEPTION_REGISTRATION_RECORD
Handler
handler
FiberData
Version
_NT_TIB
ExceptionList
StackBase
StackLimit
SubSystemTib
ArbitraryUserPointer
NT_TIB
PNT_TIB
2JOB_OBJECT_NET_RATE_CONTROL_FLAGS
JOB_OBJECT_NET_RATE_CONTROL_ENABLE
JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH
JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG
JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS
_IMAGE_DOS_HEADER
e_magic
e_cblp
e_crlc
e_cparhdr
e_minalloc
e_maxalloc
e_csum
e_lfarlc
e_ovno
e_oemid
e_oeminfo
e_res2
e_lfanew
IMAGE_DOS_HEADER
PIMAGE_DOS_HEADER
_IMAGE_FILE_HEADER
Machine
NumberOfSections
TimeDateStamp
PointerToSymbolTable
NumberOfSymbols
SizeOfOptionalHeader
Characteristics
IMAGE_FILE_HEADER
_IMAGE_DATA_DIRECTORY
VirtualAddress
IMAGE_DATA_DIRECTORY
_IMAGE_OPTIONAL_HEADER
BaseOfData
PIMAGE_OPTIONAL_HEADER32
_IMAGE_OPTIONAL_HEADER64
IMAGE_OPTIONAL_HEADER64
PIMAGE_OPTIONAL_HEADER64
C_IMAGE_NT_HEADERS64
Signature
FileHeader
OptionalHeader
PIMAGE_NT_HEADERS64
PIMAGE_NT_HEADERS
PIMAGE_TLS_CALLBACK
PTOP_LEVEL_EXCEPTION_FILTER
LPTOP_LEVEL_EXCEPTION_FILTER
DtagCOINITBASE
COINITBASE_MULTITHREADED
2VARENUM
VT_EMPTY
VT_NULL
VT_DATE
VT_BSTR
VT_DISPATCH
VT_ERROR
VT_BOOL
VT_VARIANT
VT_UNKNOWN
VT_DECIMAL
VT_UI1
VT_UI2
VT_UI4
VT_UI8
VT_INT
VT_UINT
VT_VOID
VT_HRESULT
VT_PTR
VT_SAFEARRAY
VT_CARRAY
VT_USERDEFINED
VT_LPSTR
VT_LPWSTR
VT_RECORD
VT_INT_PTR
VT_UINT_PTR
VT_FILETIME
VT_BLOB
VT_STREAM
VT_STORAGE
VT_STREAMED_OBJECT
VT_STORED_OBJECT
VT_BLOB_OBJECT
VT_CLSID
VT_VERSIONED_STREAM
VT_BSTR_BLOB
VT_VECTOR
VT_ARRAY
VT_BYREF
VT_RESERVED
VT_ILLEGAL
VT_ILLEGALMASKED
VT_TYPEMASK
_dowildcard
_newmode
__imp___initenv
newmode
_startupinfo
__uninitialized
__initializing
__initialized
__native_startup_state
__native_startup_lock
I_exception
retval
_TCHAR
__ImageBase
_fmode
_commode
__xi_a
__xi_z
__xc_a
__xc_z
__dyn_tls_init_callback
__mingw_app_type
Jargret
mainret
managedapp
has_cctor
startinfo
__mingw_oldexcpt_handler
4__mingw_pcinit
4__mingw_pcppinit
_MINGW_INSTALL_DEBUG_MATHERR
'__mingw_initltsdrot_force
'__mingw_initltsdyn_force
'__mingw_initltssuo_force
K__mingw_module_is_dll
(_onexit
memcpy
strlen
(malloc
"_cexit
C Lexit
"__main
"_fpreset
_set_invalid_parameter_handler
_gnu_exception_handler
SetUnhandledExceptionFilter
"_pei386_runtime_relocator
_initterm
_amsg_exit
__getmainargs
(_matherr
__mingw_setusermatherr
)_setargv
)__p__commode
)__p__fmode
__set_app_type
Matexit
Oduplicate_ppstrings
Qcheck_managed_app
pDOSHeader
pPEHeader
pNTHeader32
pNTHeader64
5__tmainCRTStartup
lock_free
fiberid
nested
7mainCRTStartup
7WinMainCRTStartup
8pre_cpp_init
5pre_c_init
8__mingw_invalidParameterHandler
expression
R function
Q file
X line
Y pReserved
YNtCurrentTeb
,_InterlockedExchangePointer
Target
,_InterlockedCompareExchangePointer
Destination
ExChange
Comperand
,__readgsqword
Offset
Zmemcpy
__builtin_memcpy
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
long long unsigned int
long long int
ptrdiff_t
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
signed char
short int
long double
double
_Float16
__bf16
JOB_OBJECT_NET_RATE_CONTROL_FLAGS
JOB_OBJECT_NET_RATE_CONTROL_ENABLE
JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH
JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG
JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS
tagCOINITBASE
COINITBASE_MULTITHREADED
VARENUM
VT_EMPTY
VT_NULL
VT_DATE
VT_BSTR
VT_DISPATCH
VT_ERROR
VT_BOOL
VT_VARIANT
VT_UNKNOWN
VT_DECIMAL
VT_UI1
VT_UI2
VT_UI4
VT_UI8
VT_INT
VT_UINT
VT_VOID
VT_HRESULT
VT_PTR
VT_SAFEARRAY
VT_CARRAY
VT_USERDEFINED
VT_LPSTR
VT_LPWSTR
VT_RECORD
VT_INT_PTR
VT_UINT_PTR
VT_FILETIME
VT_BLOB
VT_STREAM
VT_STORAGE
VT_STREAMED_OBJECT
VT_STORED_OBJECT
VT_BLOB_OBJECT
VT_CLSID
VT_VERSIONED_STREAM
VT_BSTR_BLOB
VT_VECTOR
VT_ARRAY
VT_BYREF
VT_RESERVED
VT_ILLEGAL
VT_ILLEGALMASKED
VT_TYPEMASK
func_ptr
__CTOR_LIST__
__DTOR_LIST__
initialized
atexit
__main
__do_global_ctors
__do_global_dtors
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
signed char
short int
long double
double
_Float16
__bf16
JOB_OBJECT_NET_RATE_CONTROL_FLAGS
JOB_OBJECT_NET_RATE_CONTROL_ENABLE
JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH
JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG
JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS
tagCOINITBASE
COINITBASE_MULTITHREADED
VARENUM
VT_EMPTY
VT_NULL
VT_DATE
VT_BSTR
VT_DISPATCH
VT_ERROR
VT_BOOL
VT_VARIANT
VT_UNKNOWN
VT_DECIMAL
VT_UI1
VT_UI2
VT_UI4
VT_UI8
VT_INT
VT_UINT
VT_VOID
VT_HRESULT
VT_PTR
VT_SAFEARRAY
VT_CARRAY
VT_USERDEFINED
VT_LPSTR
VT_LPWSTR
VT_RECORD
VT_INT_PTR
VT_UINT_PTR
VT_FILETIME
VT_BLOB
VT_STREAM
VT_STORAGE
VT_STREAMED_OBJECT
VT_STORED_OBJECT
VT_BLOB_OBJECT
VT_CLSID
VT_VERSIONED_STREAM
VT_BSTR_BLOB
VT_VECTOR
VT_ARRAY
VT_BYREF
VT_RESERVED
VT_ILLEGAL
VT_ILLEGALMASKED
VT_TYPEMASK
__uninitialized
__initializing
__initialized
__native_startup_state
__native_startup_lock
__native_dllmain_reason
__native_vcclrit_reason
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
_dowildcard
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
signed char
short int
long double
double
_Float16
__bf16
_setargv
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
_newmode
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
long long unsigned int
long long int
uintptr_t
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
WINBOOL
LPVOID
signed char
short int
ULONG_PTR
HANDLE
ULONGLONG
long double
double
_Float16
__bf16
JOB_OBJECT_NET_RATE_CONTROL_FLAGS
JOB_OBJECT_NET_RATE_CONTROL_ENABLE
JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH
JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG
JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS
PIMAGE_TLS_CALLBACK
_IMAGE_TLS_DIRECTORY64
StartAddressOfRawData
EndAddressOfRawData
AddressOfIndex
AddressOfCallBacks
SizeOfZeroFill
Characteristics
IMAGE_TLS_DIRECTORY64
IMAGE_TLS_DIRECTORY
_tls_index
_tls_start
_tls_end
__xl_a
__xl_z
_tls_used
__xd_a
__xd_z
_CRT_MT
__dyn_tls_init_callback
__xl_c
__xl_d
__mingw_initltsdrot_force
__mingw_initltsdyn_force
__mingw_initltssuo_force
__mingw_TLScallback
__dyn_tls_dtor
__tlregdtor
__dyn_tls_init
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
_commode
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
__xi_a
__xi_z
__xc_a
__xc_z
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
double
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
long double
_exception
retval
_iobuf
_charbuf
_bufsiz
_tmpfname
fprintf
__acrt_iob_func
_matherr
pexcept
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
_fpreset
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
__mingw_app_type
'GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
__gnuc_va_list
__builtin_va_list
va_list
size_t
long long unsigned int
long long int
ptrdiff_t
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
WINBOOL
LPBYTE
PDWORD
LPVOID
LPCVOID
signed char
short int
ULONG_PTR
SIZE_T
long double
double
_Float16
__bf16
JOB_OBJECT_NET_RATE_CONTROL_FLAGS
JOB_OBJECT_NET_RATE_CONTROL_ENABLE
JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH
JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG
JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS
_MEMORY_BASIC_INFORMATION
BaseAddress
AllocationBase
AllocationProtect
PartitionId
RegionSize
Protect
MEMORY_BASIC_INFORMATION
PMEMORY_BASIC_INFORMATION
_IMAGE_DOS_HEADER
e_magic
e_cblp
e_crlc
e_cparhdr
e_minalloc
e_maxalloc
e_csum
e_lfarlc
e_ovno
e_oemid
e_oeminfo
e_res2
e_lfanew
IMAGE_DOS_HEADER
PhysicalAddress
VirtualSize
_IMAGE_SECTION_HEADER
VirtualAddress
SizeOfRawData
PointerToRawData
PointerToRelocations
PointerToLinenumbers
NumberOfRelocations
NumberOfLinenumbers
Characteristics
PIMAGE_SECTION_HEADER
-tagCOINITBASE
COINITBASE_MULTITHREADED
VARENUM
VT_EMPTY
VT_NULL
VT_DATE
VT_BSTR
VT_DISPATCH
VT_ERROR
VT_BOOL
VT_VARIANT
VT_UNKNOWN
VT_DECIMAL
VT_UI1
VT_UI2
VT_UI4
VT_UI8
VT_INT
VT_UINT
VT_VOID
VT_HRESULT
VT_PTR
VT_SAFEARRAY
VT_CARRAY
VT_USERDEFINED
VT_LPSTR
VT_LPWSTR
VT_RECORD
VT_INT_PTR
VT_UINT_PTR
VT_FILETIME
VT_BLOB
VT_STREAM
VT_STORAGE
VT_STREAMED_OBJECT
VT_STORED_OBJECT
VT_BLOB_OBJECT
VT_CLSID
VT_VERSIONED_STREAM
VT_BSTR_BLOB
VT_VECTOR
VT_ARRAY
VT_BYREF
VT_RESERVED
VT_ILLEGAL
VT_ILLEGALMASKED
VT_TYPEMASK
._iobuf
_charbuf
_bufsiz
_tmpfname
__RUNTIME_PSEUDO_RELOC_LIST__
__RUNTIME_PSEUDO_RELOC_LIST_END__
__ImageBase
addend
target
runtime_pseudo_reloc_item_v1
target
runtime_pseudo_reloc_item_v2
magic1
magic2
version
runtime_pseudo_reloc_v2
old_protect
base_address
region_size
sec_start
the_secs
maxSections
GetLastError
VirtualProtect
VirtualQuery
_GetPEImageBase
__mingw_GetSectionForAddress
memcpy
1abort
(2vfprintf
__acrt_iob_func
__mingw_GetSectionCount
3_pei386_runtime_relocator
4was_init
5mSecs
#do_pseudo_reloc
addr_imp
reldata
reloc_target
v2_hdr
newval
max_unsigned
min_signed
#__write_memory
<restore_modified_sections
%oldprot
=mark_section_writable
new_protect
?__report_error
Afwrite
__builtin_fwrite
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
double
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
long double
_exception
retval
fUserMathErr
stUserMathErr
__setusermatherr
__mingw_setusermatherr
__mingw_raise_matherr
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
_fmode
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
_EXCEPTION_RECORD
ExceptionCode
ExceptionFlags
ExceptionAddress
NumberParameters
ExceptionInformation
_CONTEXT
P1Home
P2Home
P3Home
P4Home
P5Home
P6Home
ContextFlags
EFlags
VectorRegister
VectorControl
DebugControl
LastBranchToRip
LastBranchFromRip
LastExceptionToRip
LastExceptionFromRip
signed char
short int
ULONG_PTR
DWORD64
LONGLONG
ULONGLONG
_M128A
long double
double
_Float16
__bf16
_XMM_SAVE_AREA32
ControlWord
StatusWord
TagWord
Reserved1
ErrorOpcode
ErrorOffset
ErrorSelector
Reserved2
DataOffset
DataSelector
Reserved3
MxCsr_Mask
FloatRegisters
XmmRegisters
Reserved4
XMM_SAVE_AREA32
Header
Legacy
FltSave
FloatSave
PCONTEXT
EXCEPTION_RECORD
PEXCEPTION_RECORD
_EXCEPTION_POINTERS
ContextRecord
EXCEPTION_POINTERS
JOB_OBJECT_NET_RATE_CONTROL_FLAGS
JOB_OBJECT_NET_RATE_CONTROL_ENABLE
JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH
JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG
JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS
PTOP_LEVEL_EXCEPTION_FILTER
LPTOP_LEVEL_EXCEPTION_FILTER
"tagCOINITBASE
COINITBASE_MULTITHREADED
VARENUM
VT_EMPTY
VT_NULL
VT_DATE
VT_BSTR
VT_DISPATCH
VT_ERROR
VT_BOOL
VT_VARIANT
VT_UNKNOWN
VT_DECIMAL
VT_UI1
VT_UI2
VT_UI4
VT_UI8
VT_INT
VT_UINT
VT_VOID
VT_HRESULT
VT_PTR
VT_SAFEARRAY
VT_CARRAY
VT_USERDEFINED
VT_LPSTR
VT_LPWSTR
VT_RECORD
VT_INT_PTR
VT_UINT_PTR
VT_FILETIME
VT_BLOB
VT_STREAM
VT_STORAGE
VT_STREAMED_OBJECT
VT_STORED_OBJECT
VT_BLOB_OBJECT
VT_CLSID
VT_VERSIONED_STREAM
VT_BSTR_BLOB
VT_VECTOR
VT_ARRAY
VT_BYREF
VT_RESERVED
VT_ILLEGAL
VT_ILLEGALMASKED
VT_TYPEMASK
__p_sig_fn_t
#__mingw_oldexcpt_handler
$_fpreset
%signal
&_gnu_exception_handler
'exception_data
old_handler
action
reset_fpu
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
size_t
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
WINBOOL
LPVOID
signed char
short int
ULONG_PTR
HANDLE
_LIST_ENTRY
LIST_ENTRY
long double
double
_Float16
__bf16
JOB_OBJECT_NET_RATE_CONTROL_FLAGS
JOB_OBJECT_NET_RATE_CONTROL_ENABLE
JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH
JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG
JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS
_RTL_CRITICAL_SECTION_DEBUG
CreatorBackTraceIndex
CriticalSection
ProcessLocksList
EntryCount
ContentionCount
CreatorBackTraceIndexHigh
SpareWORD
_RTL_CRITICAL_SECTION
DebugInfo
LockCount
RecursionCount
OwningThread
LockSemaphore
SpinCount
PRTL_CRITICAL_SECTION_DEBUG
RTL_CRITICAL_SECTION
PRTL_CRITICAL_SECTION
CRITICAL_SECTION
LPCRITICAL_SECTION
__mingwthr_cs
__mingwthr_cs_init
__mingwthr_key_t
__mingwthr_key
key_dtor_list
GetLastError
TlsGetValue
_fpreset
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
calloc
__mingw_TLScallback
hDllHandle
reason
reserved
$__mingwthr_run_key_dtors
___w64_mingwthr_remove_key_dtor
prev_key
cur_key
___w64_mingwthr_add_key_dtor
new_key
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
_CRT_MT
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
__RUNTIME_PSEUDO_RELOC_LIST_END__
__RUNTIME_PSEUDO_RELOC_LIST__
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
long long unsigned int
size_t
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
WINBOOL
LPVOID
signed char
short int
ULONG_PTR
DWORD_PTR
ULONGLONG
long double
double
_Float16
__bf16
_IMAGE_DOS_HEADER
e_magic
e_cblp
e_crlc
e_cparhdr
e_minalloc
e_maxalloc
e_csum
e_lfarlc
e_ovno
e_oemid
e_oeminfo
e_res2
e_lfanew
IMAGE_DOS_HEADER
PIMAGE_DOS_HEADER
_IMAGE_FILE_HEADER
Machine
NumberOfSections
PointerToSymbolTable
NumberOfSymbols
SizeOfOptionalHeader
IMAGE_FILE_HEADER
_IMAGE_DATA_DIRECTORY
IMAGE_DATA_DIRECTORY
_IMAGE_OPTIONAL_HEADER64
MajorLinkerVersion
MinorLinkerVersion
SizeOfCode
SizeOfInitializedData
SizeOfUninitializedData
AddressOfEntryPoint
BaseOfCode
ImageBase
SectionAlignment
FileAlignment
MajorOperatingSystemVersion
MinorOperatingSystemVersion
MajorImageVersion
MinorImageVersion
MajorSubsystemVersion
MinorSubsystemVersion
Win32VersionValue
SizeOfImage
SizeOfHeaders
CheckSum
Subsystem
DllCharacteristics
SizeOfStackReserve
SizeOfStackCommit
SizeOfHeapReserve
SizeOfHeapCommit
LoaderFlags
NumberOfRvaAndSizes
DataDirectory
IMAGE_OPTIONAL_HEADER64
PIMAGE_OPTIONAL_HEADER64
PIMAGE_OPTIONAL_HEADER
"_IMAGE_NT_HEADERS64
Signature
FileHeader
OptionalHeader
PIMAGE_NT_HEADERS64
PIMAGE_NT_HEADERS
PhysicalAddress
VirtualSize
_IMAGE_SECTION_HEADER
SizeOfRawData
PointerToRawData
PointerToRelocations
PointerToLinenumbers
NumberOfRelocations
NumberOfLinenumbers
PIMAGE_SECTION_HEADER
OriginalFirstThunk
_IMAGE_IMPORT_DESCRIPTOR
ForwarderChain
FirstThunk
IMAGE_IMPORT_DESCRIPTOR
PIMAGE_IMPORT_DESCRIPTOR
%__ImageBase
strncmp
strlen
__mingw_enum_import_library_names
importDesc
importsStartRVA
_IsNonwritableInCurrentImage
pTarget
rvaTarget
_GetPEImageBase
_FindPESectionExec
__mingw_GetSectionCount
__mingw_GetSectionForAddress
_FindPESectionByName
_FindPESection
_ValidateImageBase
pDOSHeader
pOptHeader
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
_MINGW_INSTALL_DEBUG_MATHERR
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
__imp__fmode
__imp___p__fmode
__p__fmode
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
__imp__commode
__imp___p__commode
__p__commode
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
long long unsigned int
long long int
uintptr_t
wchar_t
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
signed char
short int
long double
double
_invalid_parameter_handler
_Float16
__bf16
JOB_OBJECT_NET_RATE_CONTROL_FLAGS
JOB_OBJECT_NET_RATE_CONTROL_ENABLE
JOB_OBJECT_NET_RATE_CONTROL_MAX_BANDWIDTH
JOB_OBJECT_NET_RATE_CONTROL_DSCP_TAG
JOB_OBJECT_NET_RATE_CONTROL_VALID_FLAGS
tagCOINITBASE
COINITBASE_MULTITHREADED
VARENUM
VT_EMPTY
VT_NULL
VT_DATE
VT_BSTR
VT_DISPATCH
VT_ERROR
VT_BOOL
VT_VARIANT
VT_UNKNOWN
VT_DECIMAL
VT_UI1
VT_UI2
VT_UI4
VT_UI8
VT_INT
VT_UINT
VT_VOID
VT_HRESULT
VT_PTR
VT_SAFEARRAY
VT_CARRAY
VT_USERDEFINED
VT_LPSTR
VT_LPWSTR
VT_RECORD
VT_INT_PTR
VT_UINT_PTR
VT_FILETIME
VT_BLOB
VT_STREAM
VT_STORAGE
VT_STREAMED_OBJECT
VT_STORED_OBJECT
VT_BLOB_OBJECT
VT_CLSID
VT_VERSIONED_STREAM
VT_BSTR_BLOB
VT_VECTOR
VT_ARRAY
VT_BYREF
VT_RESERVED
VT_ILLEGAL
VT_ILLEGALMASKED
VT_TYPEMASK
handler
__imp__set_invalid_parameter_handler
__imp__get_invalid_parameter_handler
mingw_get_invalid_parameter_handler
mingw_set_invalid_parameter_handler
new_handler
_InterlockedExchangePointer
Target
GNU C17 13-win32 -m64 -masm=att -mtune=generic -march=x86-64 -g -O2 -fno-PIE
long long unsigned int
long long int
short unsigned int
long int
unsigned int
long unsigned int
unsigned char
_iobuf
_charbuf
_bufsiz
_tmpfname
_f__acrt_iob_func
__imp___acrt_iob_func
__iob_func
__acrt_iob_func
Subsystem
CheckSum
SizeOfImage
BaseOfCode
SectionAlignment
MinorSubsystemVersion
DataDirectory
SizeOfStackCommit
ImageBase
SizeOfCode
MajorLinkerVersion
SizeOfHeapReserve
SizeOfInitializedData
SizeOfStackReserve
SizeOfHeapCommit
MinorLinkerVersion
__enative_startup_state
SizeOfUninitializedData
AddressOfEntryPoint
MajorSubsystemVersion
SizeOfHeaders
MajorOperatingSystemVersion
FileAlignment
NumberOfRvaAndSizes
ExceptionRecord
DllCharacteristics
MinorImageVersion
MinorOperatingSystemVersion
LoaderFlags
Win32VersionValue
MajorImageVersion
__enative_startup_state
hDllHandle
lpreserved
dwReason
sSecInfo
ExceptionRecord
pSection
TimeDateStamp
pNTHeader
Characteristics
pImageBase
VirtualAddress
iSection
./mingw-w64-crt/crt/crtexe.c
/build
/build
./mingw-w64-crt/crt
/usr/x86_64-w64-mingw32/include
/usr/x86_64-w64-mingw32/include/psdk_inc
./mingw-w64-crt/include
crtexe.c
crtexe.c
winnt.h
intrin-impl.h
corecrt.h
minwindef.h
basetsd.h
stdlib.h
errhandlingapi.h
combaseapi.h
wtypes.h
ctype.h
internal.h
corecrt_startup.h
math.h
tchar.h
string.h
process.h
synchapi.h
<built-in>
./mingw-w64-crt/crt/gccmain.c
/build
/build
./mingw-w64-crt/crt
/usr/x86_64-w64-mingw32/include
gccmain.c
gccmain.c
winnt.h
combaseapi.h
wtypes.h
corecrt.h
stdlib.h
./mingw-w64-crt/crt/natstart.c
/build
/build
./mingw-w64-crt/crt
/usr/x86_64-w64-mingw32/include
./mingw-w64-crt/include
natstart.c
winnt.h
combaseapi.h
wtypes.h
internal.h
natstart.c
./mingw-w64-crt/crt/wildcard.c
/build
/build
./mingw-w64-crt/crt
wildcard.c
wildcard.c
./mingw-w64-crt/crt/dllargv.c
/build
/build
./mingw-w64-crt/crt
dllargv.c
dllargv.c
./mingw-w64-crt/crt/_newmode.c
/build
/build
./mingw-w64-crt/crt
_newmode.c
_newmode.c
./mingw-w64-crt/crt/tlssup.c
/build
/build
./mingw-w64-crt/crt
/usr/x86_64-w64-mingw32/include
tlssup.c
tlssup.c
corecrt.h
minwindef.h
basetsd.h
winnt.h
corecrt_startup.h
./mingw-w64-crt/crt/xncommod.c
/build
/build
./mingw-w64-crt/crt
xncommod.c
xncommod.c
/build
./mingw-w64-crt/crt/cinitexe.c
/build
./mingw-w64-crt/crt
cinitexe.c
cinitexe.c
/build
./mingw-w64-crt/crt/merr.c
/build
./mingw-w64-crt/crt
/usr/x86_64-w64-mingw32/include
merr.c
merr.c
math.h
stdio.h
./mingw-w64-crt/crt/CRT_fp10.c
/build
/build
./mingw-w64-crt/crt
CRT_fp10.c
CRT_fp10.c
./mingw-w64-crt/crt/mingw_helpers.c
/build
/build
./mingw-w64-crt/crt
mingw_helpers.c
mingw_helpers.c
./mingw-w64-crt/crt/pseudo-reloc.c
/build
/build
./mingw-w64-crt/crt
/usr/x86_64-w64-mingw32/include
pseudo-reloc.c
pseudo-reloc.c
vadefs.h
corecrt.h
minwindef.h
basetsd.h
winnt.h
combaseapi.h
wtypes.h
stdio.h
memoryapi.h
errhandlingapi.h
string.h
stdlib.h
<built-in>
./mingw-w64-crt/crt/usermatherr.c
/build
/build
./mingw-w64-crt/crt
/usr/x86_64-w64-mingw32/include
usermatherr.c
usermatherr.c
math.h
./mingw-w64-crt/crt/xtxtmode.c
/build
/build
./mingw-w64-crt/crt
xtxtmode.c
xtxtmode.c
./mingw-w64-crt/crt/crt_handler.c
/build
/build
./mingw-w64-crt/crt
/usr/x86_64-w64-mingw32/include
crt_handler.c
crt_handler.c
winnt.h
minwindef.h
basetsd.h
errhandlingapi.h
combaseapi.h
wtypes.h
signal.h
./mingw-w64-crt/crt/tlsthrd.c
/build
/build
./mingw-w64-crt/crt
/usr/x86_64-w64-mingw32/include
tlsthrd.c
tlsthrd.c
corecrt.h
minwindef.h
basetsd.h
winnt.h
minwinbase.h
synchapi.h
stdlib.h
processthreadsapi.h
errhandlingapi.h
./mingw-w64-crt/crt/tlsmcrt.c
/build
/build
./mingw-w64-crt/crt
tlsmcrt.c
tlsmcrt.c
./mingw-w64-crt/crt/pseudo-reloc-list.c
/build
/build
./mingw-w64-crt/crt
pseudo-reloc-list.c
pseudo-reloc-list.c
./mingw-w64-crt/crt/pesect.c
/build
/build
./mingw-w64-crt/crt
/usr/x86_64-w64-mingw32/include
pesect.c
pesect.c
corecrt.h
minwindef.h
basetsd.h
winnt.h
string.h
./mingw-w64-crt/misc/mingw_matherr.c
/build
/build
./mingw-w64-crt/misc
mingw_matherr.c
mingw_matherr.c
./mingw-w64-crt/misc/__p__fmode.c
/build
/build
./mingw-w64-crt/misc
__p__fmode.c
__p__fmode.c
./mingw-w64-crt/misc/__p__commode.c
/build
/build
./mingw-w64-crt/misc
__p__commode.c
__p__commode.c
/build
./mingw-w64-crt/misc/invalid_parameter_handler.c
/build
./mingw-w64-crt/misc
/usr/x86_64-w64-mingw32/include/psdk_inc
/usr/x86_64-w64-mingw32/include
invalid_parameter_handler.c
invalid_parameter_handler.c
intrin-impl.h
corecrt.h
stdlib.h
winnt.h
combaseapi.h
wtypes.h
./mingw-w64-crt/stdio/acrt_iob_func.c
/build
/build
./mingw-w64-crt/stdio
/usr/x86_64-w64-mingw32/include
acrt_iob_func.c
acrt_iob_func.c
stdio.h
Antivirus Signature
Bkav W64.AIDetectMalware
Lionic Clean
Elastic malicious (high confidence)
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
Skyhigh BehavesLike.Win64.Generic.mm
ALYac Clean
Cylance Clean
Zillya Clean
Sangfor Trojan.Win32.Save.a
CrowdStrike win/malicious_confidence_70% (D)
Alibaba Clean
K7GW Clean
K7AntiVirus Clean
huorong Backdoor/W64.Meterpreter.b
Baidu Clean
VirIT Clean
Paloalto Clean
Symantec ML.Attribute.HighConfidence
tehtris Clean
ESET-NOD32 a variant of Win64/Agent_AGen.EJD
APEX Malicious
Avast Win64:Evo-gen [Trj]
Cynet Malicious (score: 99)
Kaspersky HEUR:Trojan.Win32.Generic
BitDefender Clean
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Clean
Tencent Clean
Sophos Clean
F-Secure Trojan.TR/AD.PatchedWinSwrort.amqfu
DrWeb Clean
VIPRE Clean
TrendMicro Clean
McAfeeD Clean
Trapmine Clean
CTX Clean
Emsisoft Clean
Ikarus Trojan.Win64.Rozena
GData Clean
Jiangmin Clean
Webroot Clean
Varist Clean
Avira TR/AD.PatchedWinSwrort.amqfu
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Trojan:Win64/Rozena.AMBE!MTB
Google Detected
AhnLab-V3 Trojan/Win.Generic.R700813
Acronis Clean
VBA32 Clean
TACHYON Clean
Malwarebytes Clean
Panda Trj/GdSda.A
Zoner Clean
TrendMicro-HouseCall Trojan.Win32.VSX.PE04C9Z
Rising Backdoor.Convagent!8.123DC (TFE:5:F1vZQnFfKYB)
Yandex Clean
TrellixENS Clean
SentinelOne Static AI - Suspicious PE
MaxSecure Clean
Fortinet Clean
AVG Win64:Evo-gen [Trj]
DeepInstinct MALICIOUS
alibabacloud Clean
IRMA Signature
Trend Micro SProtect (Linux) Clean
Avast Core Security (Linux) Win64:Evo-gen [Trj]
C4S ClamAV (Linux) Clean
Trellix (Linux) Clean
Sophos Anti-Virus (Linux) Mal/Generic-S
Bitdefender Antivirus (Linux) Trojan.GenericKD.76671982
G Data Antivirus (Windows) Virus: Trojan.GenericKD.76671982 (Engine A)
WithSecure (Linux) Trojan.TR/AD.PatchedWinSwrort.amqfu
ESET Security (Windows) a variant of Win64/Agent_AGen.EJD trojan
DrWeb Antivirus (Linux) Clean
ClamAV (Linux) Clean
eScan Antivirus (Linux) Trojan.GenericKD.76671982(DB)
Emsisoft Commandline Scanner (Windows) Trojan.GenericKD.76671982 (B)
Cuckoo

We're processing your submission... This could take a few seconds.