Source: |
Binary string: api-ms-win-crt-locale-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2312055704.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-crt-locale-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-crt-runtime-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2312690465.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-crt-runtime-l1-1-0.dll.10.dr |
Source: |
Binary string: C:\A\21\b\bin\amd64\_lzma.pdbMM source: 7DF0.tmp.zx.exe, 0000000A.00000003.2304926255.0000024317210000.00000004.00000020.00020000.00000000.sdmp, _lzma.pyd.10.dr |
Source: |
Binary string: api-ms-win-core-file-l1-2-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2307390313.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-file-l1-2-0.dll.10.dr |
Source: |
Binary string: C:\A\21\b\bin\amd64\_socket.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2305426346.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: ucrtbase.pdb source: 7DF0.tmp.zx.exe, 0000000C.00000002.2339757329.00007FF8B83B1000.00000002.00000001.01000000.0000000C.sdmp, ucrtbase.dll.10.dr |
Source: |
Binary string: api-ms-win-core-memory-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2309132497.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-debug-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2306770912.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: C:\A\21\b\bin\amd64\_hashlib.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2304137052.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-sysinfo-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2310481991.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-sysinfo-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-crt-filesystem-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2311357401.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-memory-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2309132497.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-crt-stdio-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2312870947.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-crt-heap-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2311585051.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-crt-heap-l1-1-0.dll.10.dr |
Source: |
Binary string: C:\A\21\b\bin\amd64\_ctypes.pdb source: 7DF0.tmp.zx.exe, 0000000C.00000002.2340109854.00007FF8BFB81000.00000002.00000001.01000000.0000000F.sdmp |
Source: |
Binary string: api-ms-win-core-heap-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2307880735.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-util-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2310816524.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-util-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-core-synch-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2310155822.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-heap-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2307880735.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: C:\A\21\b\bin\amd64\_bz2.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2300771207.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-crt-environment-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2311214975.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-crt-math-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2312267619.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-handle-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2307762133.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-errorhandling-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2307008995.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-errorhandling-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-core-processthreads-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2309513493.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: vcruntime140.amd64.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2300489824.000002431720F000.00000004.00000020.00020000.00000000.sdmp, 7DF0.tmp.zx.exe, 0000000C.00000002.2340265545.00007FF8BFB9E000.00000002.00000001.01000000.0000000E.sdmp, VCRUNTIME140.dll.10.dr |
Source: |
Binary string: api-ms-win-crt-filesystem-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2311357401.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-processthreads-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2309513493.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-console-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2305736309.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-crt-time-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2313183679.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-file-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2307202317.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-file-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-core-timezone-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2310650811.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-processenvironment-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2309384633.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-processenvironment-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-core-synch-l1-2-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2310329484.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-synch-l1-2-0.dll.10.dr |
Source: |
Binary string: api-ms-win-crt-process-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2312518356.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-crt-process-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-crt-convert-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2311078798.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-util-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2310816524.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-util-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-core-datetime-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2306288595.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: .PdB] source: 7DF0.tmp.zx.exe.3.dr |
Source: |
Binary string: api-ms-win-core-errorhandling-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2307008995.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-errorhandling-l1-1-0.dll.10.dr |
Source: |
Binary string: C:\A\21\b\bin\amd64\select.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2321669980.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-profile-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2309750638.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: ucrtbase.pdbUGP source: 7DF0.tmp.zx.exe, 0000000C.00000002.2339757329.00007FF8B83B1000.00000002.00000001.01000000.0000000C.sdmp, ucrtbase.dll.10.dr |
Source: |
Binary string: api-ms-win-core-file-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2307202317.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-file-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-crt-convert-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2311078798.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: vcruntime140.amd64.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2300489824.000002431720F000.00000004.00000020.00020000.00000000.sdmp, 7DF0.tmp.zx.exe, 0000000C.00000002.2340265545.00007FF8BFB9E000.00000002.00000001.01000000.0000000E.sdmp, VCRUNTIME140.dll.10.dr |
Source: |
Binary string: api-ms-win-crt-stdio-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2312870947.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-crt-environment-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2311214975.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-crt-time-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2313183679.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-handle-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2307762133.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-sysinfo-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2310481991.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-sysinfo-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-core-synch-l1-2-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2310329484.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-synch-l1-2-0.dll.10.dr |
Source: |
Binary string: api-ms-win-core-file-l1-2-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2307390313.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-file-l1-2-0.dll.10.dr |
Source: |
Binary string: api-ms-win-core-processenvironment-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2309384633.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-processenvironment-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-core-profile-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2309750638.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-datetime-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2306288595.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: @ compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DVPAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASMOpenSSL 1.1.1d 10 Sep 2019built on: Mon Sep 16 11:00:37 2019 UTCplatform: VC-WIN64A-masmOPENSSLDIR: "C:\Program Files\Common Files\SSL"ENGINESDIR: "C:\Program Files\OpenSSL\lib\engines-1_1"not available source: libcrypto-1_1.dll.10.dr |
Source: |
Binary string: api-ms-win-crt-conio-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2310950788.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-crt-conio-l1-1-0.dll.10.dr |
Source: |
Binary string: C:\A\21\b\bin\amd64\python38.pdb source: 7DF0.tmp.zx.exe, 0000000C.00000002.2338790461.00007FF8A8DFD000.00000002.00000001.01000000.0000000D.sdmp |
Source: |
Binary string: api-ms-win-core-localization-l1-2-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2308985706.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-localization-l1-2-0.dll.10.dr |
Source: |
Binary string: C:\A\21\b\bin\amd64\_lzma.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2304926255.0000024317210000.00000004.00000020.00020000.00000000.sdmp, _lzma.pyd.10.dr |
Source: |
Binary string: api-ms-win-crt-math-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2312267619.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-interlocked-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2308013050.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-string-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2310013332.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-crt-string-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2313036528.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-crt-string-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-core-processthreads-l1-1-1.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2309639448.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-processthreads-l1-1-1.dll.10.dr |
Source: |
Binary string: api-ms-win-core-debug-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2306770912.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-crt-locale-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2312055704.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-crt-locale-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-core-libraryloader-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2308142882.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-localization-l1-2-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2308985706.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-localization-l1-2-0.dll.10.dr |
Source: |
Binary string: api-ms-win-core-namedpipe-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2309257952.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-namedpipe-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-crt-utility-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2313338907.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-rtlsupport-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2309879949.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-rtlsupport-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-core-timezone-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2310650811.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: C:\A\6\b\libcrypto-1_1.pdb source: libcrypto-1_1.dll.10.dr |
Source: |
Binary string: api-ms-win-core-string-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2310013332.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-console-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2305736309.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-file-l2-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2307569047.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-crt-process-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2312518356.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-crt-process-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-crt-utility-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2313338907.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-libraryloader-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2308142882.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-namedpipe-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2309257952.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-namedpipe-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-core-synch-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2310155822.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: api-ms-win-core-interlocked-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2308013050.0000024317210000.00000004.00000020.00020000.00000000.sdmp |
Source: |
Binary string: compiler: cl /Zi /Fdossl_static.pdb /Gs0 /GF /Gy /MD /W3 /wd4090 /nologo /O2 -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DVPAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASM source: libcrypto-1_1.dll.10.dr |
Source: |
Binary string: api-ms-win-crt-runtime-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2312690465.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-crt-runtime-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-core-processthreads-l1-1-1.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2309639448.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-processthreads-l1-1-1.dll.10.dr |
Source: |
Binary string: api-ms-win-core-rtlsupport-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2309879949.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-core-rtlsupport-l1-1-0.dll.10.dr |
Source: |
Binary string: C:\A\21\b\bin\amd64\unicodedata.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2322802000.0000024317219000.00000004.00000020.00020000.00000000.sdmp, unicodedata.pyd.10.dr |
Source: |
Binary string: api-ms-win-crt-heap-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2311585051.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-crt-heap-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-crt-string-l1-1-0.pdb source: 7DF0.tmp.zx.exe, 0000000A.00000003.2313036528.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-crt-string-l1-1-0.dll.10.dr |
Source: |
Binary string: api-ms-win-crt-conio-l1-1-0.pdbGCTL source: 7DF0.tmp.zx.exe, 0000000A.00000003.2310950788.0000024317210000.00000004.00000020.00020000.00000000.sdmp, api-ms-win-crt-conio-l1-1-0.dll.10.dr |
Source: C:\Users\user\Desktop\SecuriteInfo.com.Trojan.Siggen29.53958.6245.21630.exe |
Code function: 0_2_00007FF6CF9466F0 SHGetFolderPathW,FindFirstFileW,FindNextFileW, |
0_2_00007FF6CF9466F0 |
Source: C:\Windows\explorer.exe |
Code function: 3_2_11056AE0 lstrcpy,lstrcatA,CreateDirectoryA,GetLastError,FindFirstFileA,lstrcpy,lstrcatA,lstrcatA,lstrcpy,lstrcatA,lstrcatA,lstrcmp,lstrcmp,CreateDirectoryA,GetLastError,CopyFileA,FindNextFileA, |
3_2_11056AE0 |
Source: C:\Users\user\AppData\Roaming\{B268D441C1ED2974164258}\{B268D441C1ED2974164258}.exe |
Code function: 4_2_00007FF6BCCA66F0 SHGetFolderPathW,FindFirstFileW,FindNextFileW, |
4_2_00007FF6BCCA66F0 |
Source: C:\Windows\System32\svchost.exe |
Code function: 5_2_00007FF78FA666F0 SHGetFolderPathW,FindFirstFileW,FindNextFileW, |
5_2_00007FF78FA666F0 |
Source: C:\Windows\System32\svchost.exe |
Code function: 9_2_00007FF7A34B66F0 SHGetFolderPathW,FindFirstFileW,FindNextFileW, |
9_2_00007FF7A34B66F0 |
Source: C:\Users\user\AppData\Local\Temp\7DF0.tmp.zx.exe |
Code function: 10_2_00007FF779E979B0 FindFirstFileW,RemoveDirectoryW,DeleteFileW,FindNextFileW,FindClose,RemoveDirectoryW, |
10_2_00007FF779E979B0 |
Source: C:\Users\user\AppData\Local\Temp\7DF0.tmp.zx.exe |
Code function: 10_2_00007FF779E985A0 FindFirstFileExW,FindClose, |
10_2_00007FF779E985A0 |
Source: C:\Users\user\AppData\Local\Temp\7DF0.tmp.zx.exe |
Code function: 10_2_00007FF779EB0B84 _invalid_parameter_noinfo,FindFirstFileExW,FindNextFileW,FindClose,FindClose, |
10_2_00007FF779EB0B84 |
Source: C:\Users\user\AppData\Local\Temp\7DF0.tmp.zx.exe |
Code function: 12_2_00007FF779E985A0 FindFirstFileExW,FindClose, |
12_2_00007FF779E985A0 |
Source: C:\Users\user\AppData\Local\Temp\7DF0.tmp.zx.exe |
Code function: 12_2_00007FF779E979B0 FindFirstFileW,RemoveDirectoryW,DeleteFileW,FindNextFileW,FindClose,RemoveDirectoryW, |
12_2_00007FF779E979B0 |
Source: C:\Users\user\AppData\Local\Temp\7DF0.tmp.zx.exe |
Code function: 12_2_00007FF779EB0B84 _invalid_parameter_noinfo,FindFirstFileExW,FindNextFileW,FindClose,FindClose, |
12_2_00007FF779EB0B84 |
Source: C:\Users\user\AppData\Local\Temp\7DF0.tmp.zx.exe |
Code function: 12_2_00007FF8B8342DFC FindFirstFileExW, |
12_2_00007FF8B8342DFC |
Source: C:\Users\user\AppData\Local\Temp\7DF0.tmp.zx.exe |
Code function: 12_2_00007FF8B836EFEC FindFirstFileExW,FindClose,FindNextFileW, |
12_2_00007FF8B836EFEC |
Source: C:\Windows\System32\svchost.exe |
Code function: 13_2_00007FF67F5566F0 SHGetFolderPathW,FindFirstFileW,FindNextFileW, |
13_2_00007FF67F5566F0 |