PESCAN.IO - Analysis Report Basic |
|||||||
| File Structure |
|
PE Chart Code
Header PE (light blue)
Executable sections (pink)
Non-executable sections (black)
External injected code (red)
File Structure in red = malformed or corrupted header
Chart Code For Other Files
Printable characters (blue)
Non-printable characters (black)
| Information |
| Size: 276,00 KB SHA-256 Hash: 2F660620D2B7277EF3180F8429E35AFA7884F1945B73662AA1A38EC3258EA4C3 SHA-1 Hash: 4340BEB5B7A15E9D1D8B1548F98454DE49F0F958 MD5 Hash: 1FE91AF4EEDAC6208E1E2A1046962771 Imphash: D73476B612DF4FEAFEA1FFF9D9C6E429 MajorOSVersion: 6 MinorOSVersion: 0 CheckSum: 00000000 EntryPoint (rva): 383B4 SizeOfHeaders: 400 SizeOfImage: 50000 ImageBase: 0000000140000000 Architecture: x64 ImportTable: 44AD4 IAT: 3A000 Characteristics: 22 TimeDateStamp: 68E51355 Date: 07/10/2025 13:19:17 File Type: EXE Number Of Sections: 5 ASLR: Disabled Section Names (Optional Header): .text, .rdata, .data, .pdata, .reloc Number Of Executable Sections: 1 Subsystem: Windows GUI |
| Sections Info |
| Section Name | Flags | ROffset | RSize | VOffset | VSize | Entropy | Chi2 |
|---|---|---|---|---|---|---|---|
| .text | 0x60000020 Code Executable Readable |
400 | 38400 | 1000 | 38301 |
|
|
| .rdata | 0x40000040 Initialized Data Readable |
38800 | BC00 | 3A000 | BBBC |
|
|
| .data | 0xC0000040 Initialized Data Readable Writeable |
44400 | 200 | 46000 | 7AA8 |
|
|
| .pdata | 0x40000040 Initialized Data Readable |
44600 | 800 | 4E000 | 6F0 |
|
|
| .reloc | 0x42000040 Initialized Data GP-Relative Readable |
44E00 | 200 | 4F000 | 90 |
|
|
| Entry Point |
The section number (1) have the Entry Point Information -> EntryPoint (calculated) - 377B4 Code -> 4883EC28E81F0600004883C428E97AFEFFFFCCCC4883EC284D8B4138488BCA498BD1E80D000000B8010000004883C428C3CC Assembler |SUB RSP, 0X28 |CALL 0X1628 |ADD RSP, 0X28 |JMP 0XE8C |INT3 |INT3 |SUB RSP, 0X28 |MOV R8, QWORD PTR [R9 + 0X38] |MOV RCX, RDX |MOV RDX, R9 |CALL 0X1034 |MOV EAX, 1 |ADD RSP, 0X28 |RET |INT3 |
| Signatures |
| Rich Signature Analyzer: Code -> C4D2311180B35F4280B35F4280B35F4289CBCC4292B35F42073A5C4384B35F42073A5B438AB35F42073A5A439CB35F42073A5E4386B35F42F4325E4389B35F4280B35E42F4B35F420D3A564381B35F420D3A5D4381B35F425269636880B35F42 Footprint md5 Hash -> B0F4AA7396E5BFACE288750757DFBF16 • The Rich header apparently has not been modified Certificate - Digital Signature Not Found: • The file is not signed |
| Packer/Compiler |
| Detect It Easy (die) • PE+(64): compiler: Microsoft Visual C/C++(-)[-] • PE+(64): linker: Microsoft Linker(14.44**)[-] • Entropy: 6.34561 |
| Suspicious Functions |
| Library | Function | Description |
|---|---|---|
| KERNEL32.DLL | IsDebuggerPresent | Determines if the calling process is being debugged by a user-mode debugger. |
| File Access |
| VCRUNTIME140_1.dll KERNEL32.dll api-ms-win-crt-locale-l1-1-0.dll api-ms-win-crt-stdio-l1-1-0.dll api-ms-win-crt-math-l1-1-0.dll api-ms-win-crt-string-l1-1-0.dll api-ms-win-crt-time-l1-1-0.dll api-ms-win-crt-convert-l1-1-0.dll api-ms-win-crt-runtime-l1-1-0.dll api-ms-win-crt-utility-l1-1-0.dll api-ms-win-crt-heap-l1-1-0.dll VCRUNTIME140.dll WININET.dll dxgi.dll MSVCP140.dll CRYPT32.dll .dat @.dat |
| Interest's Words |
| start |
| Strings/Hex Code Found With The File Rules |
| Rule Type | Encoding | Matched (Word) |
|---|---|---|
| Hex | Hex Pattern | SYSCALL (SYSCALL - 4C8BD1B8) |
| Text | Ascii | Anti-Analysis VM (IsDebuggerPresent) |
| Entry Point | Hex Pattern | Microsoft Visual C++ 8.0 (DLL) |
| Intelligent String |
| • api-ms-win-crt-time-l1-1-0.dll • api-ms-win-crt-convert-l1-1-0.dll • api-ms-win-crt-runtime-l1-1-0.dll • api-ms-win-crt-utility-l1-1-0.dll • .tls • .bss • MSVCP140.dll • gterminateapi-ms-win-crt-heap-l1-1-0.dll • api-ms-win-crt-string-l1-1-0.dll • api-ms-win-crt-math-l1-1-0.dll • api-ms-win-crt-stdio-l1-1-0.dll • api-ms-win-crt-locale-l1-1-0.dll • KERNEL32.dll |
| Flow Anomalies |
| Offset | RVA | Section | Description |
|---|---|---|---|
| 5C4 | N/A | .text | CALL QWORD PTR [RIP+0x38FF6] |
| 61D | N/A | .text | CALL QWORD PTR [RIP+0x38F8D] |
| 65F | N/A | .text | JMP QWORD PTR [RIP+0x38F4B] |
| 6E4 | N/A | .text | CALL QWORD PTR [RIP+0x38ED6] |
| 724 | N/A | .text | CALL QWORD PTR [RIP+0x38E96] |
| 74B | N/A | .text | CALL QWORD PTR [RIP+0x38DE7] |
| 763 | N/A | .text | JMP QWORD PTR [RIP+0x38F9F] |
| 1E1B | N/A | .text | CALL QWORD PTR [RIP+0x378E7] |
| 1E23 | N/A | .text | CALL QWORD PTR [RIP+0x378F7] |
| 27A8 | N/A | .text | CALL QWORD PTR [RIP+0x36F6A] |
| CE8B | N/A | .text | JMP QWORD PTR [RIP+0x48B9FFF2] |
| E9C2 | N/A | .text | JMP QWORD PTR [RIP+0xF5B9FFEA] |
| 139DD | N/A | .text | CALL QWORD PTR [RIP+0x25C75] |
| 1FBFC | N/A | .text | CALL QWORD PTR [RIP+0x19A56] |
| 1FD43 | N/A | .text | CALL QWORD PTR [RIP+0x1989F] |
| 20720 | N/A | .text | CALL QWORD PTR [RIP+0x18CDA] |
| 207AE | N/A | .text | CALL QWORD PTR [RIP+0x18C4C] |
| 20808 | N/A | .text | CALL QWORD PTR [RIP+0x18E4A] |
| 217B5 | N/A | .text | CALL QWORD PTR [RIP+0x17F75] |
| 21811 | N/A | .text | CALL QWORD PTR [RIP+0x17DE1] |
| 24269 | N/A | .text | CALL QWORD PTR [RIP+0xFEE80000] |
| 27A19 | N/A | .text | CALL QWORD PTR [RIP+0x11B51] |
| 27A2A | N/A | .text | CALL QWORD PTR [RIP+0x11A90] |
| 27A5A | N/A | .text | CALL QWORD PTR [RIP+0x11AF0] |
| 27A85 | N/A | .text | CALL QWORD PTR [RIP+0x11A9D] |
| 27CC8 | N/A | .text | CALL QWORD PTR [RIP+0x11802] |
| 27CD2 | N/A | .text | CALL QWORD PTR [RIP+0x11848] |
| 27CDC | N/A | .text | CALL QWORD PTR [RIP+0x117E6] |
| 27D6D | N/A | .text | CALL QWORD PTR [RIP+0x117BD] |
| 27F12 | N/A | .text | CALL QWORD PTR [RIP+0x11740] |
| 27F75 | N/A | .text | CALL QWORD PTR [RIP+0x11555] |
| 27F7F | N/A | .text | CALL QWORD PTR [RIP+0x1159B] |
| 27F93 | N/A | .text | JMP QWORD PTR [RIP+0x1152F] |
| 28015 | N/A | .text | CALL QWORD PTR [RIP+0x116DD] |
| 2CD03 | N/A | .text | CALL QWORD PTR [RIP+0xCA17] |
| 2CD20 | N/A | .text | CALL QWORD PTR [RIP+0xC9F2] |
| 323B2 | N/A | .text | CALL QWORD PTR [RIP+0x7360] |
| 356AF | N/A | .text | CALL QWORD PTR [RIP+0x3FA3] |
| 3572C | N/A | .text | CALL QWORD PTR [RIP+0x3F26] |
| 35A1E | N/A | .text | CALL QWORD PTR [RIP+0x3C34] |
| 35C06 | N/A | .text | CALL QWORD PTR [RIP+0x3A4C] |
| 36164 | N/A | .text | CALL QWORD PTR [RIP+0x334E] |
| 36274 | N/A | .text | CALL QWORD PTR [RIP+0x323E] |
| 362F1 | N/A | .text | CALL QWORD PTR [RIP+0x31D9] |
| 36370 | N/A | .text | CALL QWORD PTR [RIP+0x31CA] |
| 3639E | N/A | .text | CALL QWORD PTR [RIP+0x31BC] |
| 363DF | N/A | .text | CALL QWORD PTR [RIP+0x3173] |
| 36414 | N/A | .text | CALL QWORD PTR [RIP+0x314E] |
| 36446 | N/A | .text | CALL QWORD PTR [RIP+0x30FC] |
| 3657E | N/A | .text | CALL QWORD PTR [RIP+0x30D4] |
| 36632 | N/A | .text | CALL QWORD PTR [RIP+0x3020] |
| 366BB | N/A | .text | CALL QWORD PTR [RIP+0x2F97] |
| 367E3 | N/A | .text | CALL QWORD PTR [RIP+0x2E6F] |
| 369A0 | N/A | .text | CALL QWORD PTR [RIP+0x2CB2] |
| 369FA | N/A | .text | CALL QWORD PTR [RIP+0x2C58] |
| 36B83 | N/A | .text | CALL QWORD PTR [RIP+0x2ACF] |
| 36BEB | N/A | .text | CALL QWORD PTR [RIP+0x2A67] |
| 36CAF | N/A | .text | CALL QWORD PTR [RIP+0x29A3] |
| 36CEB | N/A | .text | CALL QWORD PTR [RIP+0x2847] |
| 37185 | N/A | .text | JMP QWORD PTR [RIP+0x234D] |
| 3718B | N/A | .text | JMP QWORD PTR [RIP+0x234F] |
| 37191 | N/A | .text | JMP QWORD PTR [RIP+0x2351] |
| 37197 | N/A | .text | JMP QWORD PTR [RIP+0x2353] |
| 3719D | N/A | .text | JMP QWORD PTR [RIP+0x2355] |
| 371A3 | N/A | .text | JMP QWORD PTR [RIP+0x2357] |
| 371A9 | N/A | .text | JMP QWORD PTR [RIP+0x2359] |
| 371AF | N/A | .text | JMP QWORD PTR [RIP+0x235B] |
| 371B5 | N/A | .text | JMP QWORD PTR [RIP+0x235D] |
| 371CC | N/A | .text | CALL QWORD PTR [RIP+0x223E] |
| 3720C | N/A | .text | CALL QWORD PTR [RIP+0x2296] |
| 3721F | N/A | .text | JMP QWORD PTR [RIP+0x21F3] |
| 37238 | N/A | .text | CALL QWORD PTR [RIP+0x21D2] |
| 37260 | N/A | .text | CALL QWORD PTR [RIP+0x21BA] |
| 3729D | N/A | .text | JMP QWORD PTR [RIP+0x2205] |
| 376FD | N/A | .text | CALL QWORD PTR [RIP+0x204D] |
| 37B98 | N/A | .text | CALL QWORD PTR [RIP+0x18C2] |
| 37BC5 | N/A | .text | CALL QWORD PTR [RIP+0x185D] |
| 37BDF | N/A | .text | CALL QWORD PTR [RIP+0x184B] |
| 37C23 | N/A | .text | CALL QWORD PTR [RIP+0x180F] |
| 37C77 | N/A | .text | CALL QWORD PTR [RIP+0x17C3] |
| 37C94 | N/A | .text | CALL QWORD PTR [RIP+0x17B6] |
| 37C9F | N/A | .text | CALL QWORD PTR [RIP+0x17A3] |
| 37CE4 | N/A | .text | CALL QWORD PTR [RIP+0x176E] |
| 37D16 | N/A | .text | CALL QWORD PTR [RIP+0x174C] |
| 37D6C | N/A | .text | JMP QWORD PTR [RIP+0x16DE] |
| 37E0B | N/A | .text | CALL QWORD PTR [RIP+0x1677] |
| 37E19 | N/A | .text | CALL QWORD PTR [RIP+0x1661] |
| 37E25 | N/A | .text | CALL QWORD PTR [RIP+0x164D] |
| 37E35 | N/A | .text | CALL QWORD PTR [RIP+0x1635] |
| 37E9C | N/A | .text | JMP QWORD PTR [RIP+0x15EE] |
| 37F12 | N/A | .text | CALL QWORD PTR [RIP+0x1838] |
| 37F4E | N/A | .text | CALL QWORD PTR [RIP+0x17FC] |
| 37F73 | N/A | .text | CALL QWORD PTR [RIP+0x14D7] |
| 37F7C | N/A | .text | CALL QWORD PTR [RIP+0x14C6] |
| 37F82 | N/A | .text | CALL QWORD PTR [RIP+0x1510] |
| 37F96 | N/A | .text | JMP QWORD PTR [RIP+0x1504] |
| 37FAA | N/A | .text | CALL QWORD PTR [RIP+0x14B0] |
| 3807B | N/A | .text | CALL QWORD PTR [RIP+0x13A7] |
| 38095 | N/A | .text | CALL QWORD PTR [RIP+0x1395] |
| 380CF | N/A | .text | CALL QWORD PTR [RIP+0x1363] |
| 44600 | 1020 | .pdata | ExceptionHook | Pointer to 1020 - 0x420 .text + UnwindInfo: .rdata |
| 4460C | 10E0 | .pdata | ExceptionHook | Pointer to 10E0 - 0x4E0 .text + UnwindInfo: .rdata |
| 44618 | 11A0 | .pdata | ExceptionHook | Pointer to 11A0 - 0x5A0 .text + UnwindInfo: .rdata |
| 44624 | 1200 | .pdata | ExceptionHook | Pointer to 1200 - 0x600 .text + UnwindInfo: .rdata |
| 44630 | 12A0 | .pdata | ExceptionHook | Pointer to 12A0 - 0x6A0 .text + UnwindInfo: .rdata |
| 4463C | 12C0 | .pdata | ExceptionHook | Pointer to 12C0 - 0x6C0 .text + UnwindInfo: .rdata |
| 44648 | 1300 | .pdata | ExceptionHook | Pointer to 1300 - 0x700 .text + UnwindInfo: .rdata |
| 44654 | 1340 | .pdata | ExceptionHook | Pointer to 1340 - 0x740 .text + UnwindInfo: .rdata |
| 44660 | 13A0 | .pdata | ExceptionHook | Pointer to 13A0 - 0x7A0 .text + UnwindInfo: .rdata |
| 4466C | 6E40 | .pdata | ExceptionHook | Pointer to 6E40 - 0x6240 .text + UnwindInfo: .rdata |
| 44678 | 6E80 | .pdata | ExceptionHook | Pointer to 6E80 - 0x6280 .text + UnwindInfo: .rdata |
| 44684 | 13C50 | .pdata | ExceptionHook | Pointer to 13C50 - 0x13050 .text + UnwindInfo: .rdata |
| 44690 | 14610 | .pdata | ExceptionHook | Pointer to 14610 - 0x13A10 .text + UnwindInfo: .rdata |
| 4469C | 20160 | .pdata | ExceptionHook | Pointer to 20160 - 0x1F560 .text + UnwindInfo: .rdata |
| 446A8 | 20830 | .pdata | ExceptionHook | Pointer to 20830 - 0x1FC30 .text + UnwindInfo: .rdata |
| 446B4 | 212E0 | .pdata | ExceptionHook | Pointer to 212E0 - 0x206E0 .text + UnwindInfo: .rdata |
| 446C0 | 21342 | .pdata | ExceptionHook | Pointer to 21342 - 0x20742 .text + UnwindInfo: .rdata |
| 446CC | 2138B | .pdata | ExceptionHook | Pointer to 2138B - 0x2078B .text + UnwindInfo: .rdata |
| 446D8 | 21440 | .pdata | ExceptionHook | Pointer to 21440 - 0x20840 .text + UnwindInfo: .rdata |
| 446E4 | 285C0 | .pdata | ExceptionHook | Pointer to 285C0 - 0x279C0 .text + UnwindInfo: .rdata |
| 446F0 | 2868C | .pdata | ExceptionHook | Pointer to 2868C - 0x27A8C .text + UnwindInfo: .rdata |
| 446FC | 2896D | .pdata | ExceptionHook | Pointer to 2896D - 0x27D6D .text + UnwindInfo: .rdata |
| 44708 | 28B20 | .pdata | ExceptionHook | Pointer to 28B20 - 0x27F20 .text + UnwindInfo: .rdata |
| 44714 | 28BA0 | .pdata | ExceptionHook | Pointer to 28BA0 - 0x27FA0 .text + UnwindInfo: .rdata |
| 44720 | 28C07 | .pdata | ExceptionHook | Pointer to 28C07 - 0x28007 .text + UnwindInfo: .rdata |
| 4472C | 28C38 | .pdata | ExceptionHook | Pointer to 28C38 - 0x28038 .text + UnwindInfo: .rdata |
| 44738 | 28C50 | .pdata | ExceptionHook | Pointer to 28C50 - 0x28050 .text + UnwindInfo: .rdata |
| 44744 | 35D30 | .pdata | ExceptionHook | Pointer to 35D30 - 0x35130 .text + UnwindInfo: .rdata |
| 44750 | 35DA0 | .pdata | ExceptionHook | Pointer to 35DA0 - 0x351A0 .text + UnwindInfo: .rdata |
| 4475C | 35E00 | .pdata | ExceptionHook | Pointer to 35E00 - 0x35200 .text + UnwindInfo: .rdata |
| 44768 | 35E60 | .pdata | ExceptionHook | Pointer to 35E60 - 0x35260 .text + UnwindInfo: .rdata |
| 44774 | 35EB0 | .pdata | ExceptionHook | Pointer to 35EB0 - 0x352B0 .text + UnwindInfo: .rdata |
| 44780 | 35F50 | .pdata | ExceptionHook | Pointer to 35F50 - 0x35350 .text + UnwindInfo: .rdata |
| 4478C | 35FA2 | .pdata | ExceptionHook | Pointer to 35FA2 - 0x353A2 .text + UnwindInfo: .rdata |
| 44798 | 35FF4 | .pdata | ExceptionHook | Pointer to 35FF4 - 0x353F4 .text + UnwindInfo: .rdata |
| 447A4 | 36020 | .pdata | ExceptionHook | Pointer to 36020 - 0x35420 .text + UnwindInfo: .rdata |
| 447B0 | 361F0 | .pdata | ExceptionHook | Pointer to 361F0 - 0x355F0 .text + UnwindInfo: .rdata |
| 447BC | 36214 | .pdata | ExceptionHook | Pointer to 36214 - 0x35614 .text + UnwindInfo: .rdata |
| 447C8 | 36292 | .pdata | ExceptionHook | Pointer to 36292 - 0x35692 .text + UnwindInfo: .rdata |
| 447D4 | 362A0 | .pdata | ExceptionHook | Pointer to 362A0 - 0x356A0 .text + UnwindInfo: .rdata |
| 447E0 | 362C0 | .pdata | ExceptionHook | Pointer to 362C0 - 0x356C0 .text + UnwindInfo: .rdata |
| 447EC | 36340 | .pdata | ExceptionHook | Pointer to 36340 - 0x35740 .text + UnwindInfo: .rdata |
| 447F8 | 363CB | .pdata | ExceptionHook | Pointer to 363CB - 0x357CB .text + UnwindInfo: .rdata |
| 44804 | 363FE | .pdata | ExceptionHook | Pointer to 363FE - 0x357FE .text + UnwindInfo: .rdata |
| 44810 | 36450 | .pdata | ExceptionHook | Pointer to 36450 - 0x35850 .text + UnwindInfo: .rdata |
| 4481C | 3648D | .pdata | ExceptionHook | Pointer to 3648D - 0x3588D .text + UnwindInfo: .rdata |
| 44828 | 364AB | .pdata | ExceptionHook | Pointer to 364AB - 0x358AB .text + UnwindInfo: .rdata |
| 44834 | 36500 | .pdata | ExceptionHook | Pointer to 36500 - 0x35900 .text + UnwindInfo: .rdata |
| 44840 | 3654B | .pdata | ExceptionHook | Pointer to 3654B - 0x3594B .text + UnwindInfo: .rdata |
| 4484C | 3656F | .pdata | ExceptionHook | Pointer to 3656F - 0x3596F .text + UnwindInfo: .rdata |
| 44858 | 365C8 | .pdata | ExceptionHook | Pointer to 365C8 - 0x359C8 .text + UnwindInfo: .rdata |
| 44864 | 36652 | .pdata | ExceptionHook | Pointer to 36652 - 0x35A52 .text + UnwindInfo: .rdata |
| 44870 | 36680 | .pdata | ExceptionHook | Pointer to 36680 - 0x35A80 .text + UnwindInfo: .rdata |
| 4487C | 366A3 | .pdata | ExceptionHook | Pointer to 366A3 - 0x35AA3 .text + UnwindInfo: .rdata |
| 44888 | 366E2 | .pdata | ExceptionHook | Pointer to 366E2 - 0x35AE2 .text + UnwindInfo: .rdata |
| 44894 | 36720 | .pdata | ExceptionHook | Pointer to 36720 - 0x35B20 .text + UnwindInfo: .rdata |
| 448A0 | 36770 | .pdata | ExceptionHook | Pointer to 36770 - 0x35B70 .text + UnwindInfo: .rdata |
| 448AC | 36810 | .pdata | ExceptionHook | Pointer to 36810 - 0x35C10 .text + UnwindInfo: .rdata |
| 448B8 | 36880 | .pdata | ExceptionHook | Pointer to 36880 - 0x35C80 .text + UnwindInfo: .rdata |
| 448C4 | 368CB | .pdata | ExceptionHook | Pointer to 368CB - 0x35CCB .text + UnwindInfo: .rdata |
| 448D0 | 368F0 | .pdata | ExceptionHook | Pointer to 368F0 - 0x35CF0 .text + UnwindInfo: .rdata |
| 448DC | 369B0 | .pdata | ExceptionHook | Pointer to 369B0 - 0x35DB0 .text + UnwindInfo: .rdata |
| 448E8 | 36A50 | .pdata | ExceptionHook | Pointer to 36A50 - 0x35E50 .text + UnwindInfo: .rdata |
| 448F4 | 36AAC | .pdata | ExceptionHook | Pointer to 36AAC - 0x35EAC .text + UnwindInfo: .rdata |
| 44900 | 36AD0 | .pdata | ExceptionHook | Pointer to 36AD0 - 0x35ED0 .text + UnwindInfo: .rdata |
| 4490C | 36D20 | .pdata | ExceptionHook | Pointer to 36D20 - 0x36120 .text + UnwindInfo: .rdata |
| 44918 | 36DCC | .pdata | ExceptionHook | Pointer to 36DCC - 0x361CC .text + UnwindInfo: .rdata |
| 44924 | 36E62 | .pdata | ExceptionHook | Pointer to 36E62 - 0x36262 .text + UnwindInfo: .rdata |
| 44930 | 36E90 | .pdata | ExceptionHook | Pointer to 36E90 - 0x36290 .text + UnwindInfo: .rdata |
| 4493C | 36ED0 | .pdata | ExceptionHook | Pointer to 36ED0 - 0x362D0 .text + UnwindInfo: .rdata |
| 44948 | 36F20 | .pdata | ExceptionHook | Pointer to 36F20 - 0x36320 .text + UnwindInfo: .rdata |
| 44954 | 37080 | .pdata | ExceptionHook | Pointer to 37080 - 0x36480 .text + UnwindInfo: .rdata |
| 44960 | 370B8 | .pdata | ExceptionHook | Pointer to 370B8 - 0x364B8 .text + UnwindInfo: .rdata |
| 4496C | 371C2 | .pdata | ExceptionHook | Pointer to 371C2 - 0x365C2 .text + UnwindInfo: .rdata |
| 44978 | 371D0 | .pdata | ExceptionHook | Pointer to 371D0 - 0x365D0 .text + UnwindInfo: .rdata |
| 44984 | 37250 | .pdata | ExceptionHook | Pointer to 37250 - 0x36650 .text + UnwindInfo: .rdata |
| 44990 | 372D0 | .pdata | ExceptionHook | Pointer to 372D0 - 0x366D0 .text + UnwindInfo: .rdata |
| 4499C | 3732B | .pdata | ExceptionHook | Pointer to 3732B - 0x3672B .text + UnwindInfo: .rdata |
| 449A8 | 373BA | .pdata | ExceptionHook | Pointer to 373BA - 0x367BA .text + UnwindInfo: .rdata |
| 449B4 | 373D0 | .pdata | ExceptionHook | Pointer to 373D0 - 0x367D0 .text + UnwindInfo: .rdata |
| 449C0 | 373EA | .pdata | ExceptionHook | Pointer to 373EA - 0x367EA .text + UnwindInfo: .rdata |
| 449CC | 373F0 | .pdata | ExceptionHook | Pointer to 373F0 - 0x367F0 .text + UnwindInfo: .rdata |
| 449D8 | 374C0 | .pdata | ExceptionHook | Pointer to 374C0 - 0x368C0 .text + UnwindInfo: .rdata |
| 449E4 | 375B0 | .pdata | ExceptionHook | Pointer to 375B0 - 0x369B0 .text + UnwindInfo: .rdata |
| 449F0 | 37610 | .pdata | ExceptionHook | Pointer to 37610 - 0x36A10 .text + UnwindInfo: .rdata |
| 449FC | 37655 | .pdata | ExceptionHook | Pointer to 37655 - 0x36A55 .text + UnwindInfo: .rdata |
| 44A08 | 37758 | .pdata | ExceptionHook | Pointer to 37758 - 0x36B58 .text + UnwindInfo: .rdata |
| 44A14 | 37770 | .pdata | ExceptionHook | Pointer to 37770 - 0x36B70 .text + UnwindInfo: .rdata |
| 44A20 | 3778A | .pdata | ExceptionHook | Pointer to 3778A - 0x36B8A .text + UnwindInfo: .rdata |
| 44A2C | 37790 | .pdata | ExceptionHook | Pointer to 37790 - 0x36B90 .text + UnwindInfo: .rdata |
| 44A38 | 377A0 | .pdata | ExceptionHook | Pointer to 377A0 - 0x36BA0 .text + UnwindInfo: .rdata |
| 44A44 | 37870 | .pdata | ExceptionHook | Pointer to 37870 - 0x36C70 .text + UnwindInfo: .rdata |
| 44A50 | 378E0 | .pdata | ExceptionHook | Pointer to 378E0 - 0x36CE0 .text + UnwindInfo: .rdata |
| 44A5C | 37B90 | .pdata | ExceptionHook | Pointer to 37B90 - 0x36F90 .text + UnwindInfo: .rdata |
| 44A68 | 37BD5 | .pdata | ExceptionHook | Pointer to 37BD5 - 0x36FD5 .text + UnwindInfo: .rdata |
| 44A74 | 37D13 | .pdata | ExceptionHook | Pointer to 37D13 - 0x37113 .text + UnwindInfo: .rdata |
| 44A80 | 37D29 | .pdata | ExceptionHook | Pointer to 37D29 - 0x37129 .text + UnwindInfo: .rdata |
| 44A8C | 37DBC | .pdata | ExceptionHook | Pointer to 37DBC - 0x371BC .text + UnwindInfo: .rdata |
| 44A98 | 37E28 | .pdata | ExceptionHook | Pointer to 37E28 - 0x37228 .text + UnwindInfo: .rdata |
| 44AA4 | 37EA4 | .pdata | ExceptionHook | Pointer to 37EA4 - 0x372A4 .text + UnwindInfo: .rdata |
| Extra Analysis |
| Metric | Value | Percentage |
|---|---|---|
| Ascii Code | 165169 | 58,4413% |
| Null Byte Code | 46888 | 16,5902% |
© 2026 All rights reserved.