| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FADAA9 second address: FADAAE instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: FADAAE second address: FADABB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1123392 second address: 1123398 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1123398 second address: 11233B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007FAA94F752C5h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11233B2 second address: 1123409 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA9521A03Eh 0x00000007 pushad 0x00000008 push edi 0x00000009 pop edi 0x0000000a jl 00007FAA9521A036h 0x00000010 jnl 00007FAA9521A036h 0x00000016 jmp 00007FAA9521A047h 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FAA9521A048h 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 popad 0x00000029 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1123409 second address: 112340F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1117FCF second address: 1117FD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11226DC second address: 11226E2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11226E2 second address: 11226E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1122862 second address: 112288A instructions: 0x00000000 rdtsc 0x00000002 je 00007FAA94F752BCh 0x00000008 jp 00007FAA94F752B6h 0x0000000e jbe 00007FAA94F752C2h 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 push ecx 0x00000019 pushad 0x0000001a popad 0x0000001b pop ecx 0x0000001c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 112288A second address: 1122893 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1122B30 second address: 1122B35 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1122B35 second address: 1122B50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007FAA9521A040h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1124684 second address: 11246D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA94F752BAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b add dword ptr [ebp+122D20D1h], esi 0x00000011 popad 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push ebx 0x00000017 call 00007FAA94F752B8h 0x0000001c pop ebx 0x0000001d mov dword ptr [esp+04h], ebx 0x00000021 add dword ptr [esp+04h], 0000001Ch 0x00000029 inc ebx 0x0000002a push ebx 0x0000002b ret 0x0000002c pop ebx 0x0000002d ret 0x0000002e pushad 0x0000002f mov eax, 1A6B06B5h 0x00000034 stc 0x00000035 popad 0x00000036 mov dh, 26h 0x00000038 push C9F04C3Bh 0x0000003d push ebx 0x0000003e push eax 0x0000003f push edx 0x00000040 push esi 0x00000041 pop esi 0x00000042 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11246D5 second address: 11246D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1124760 second address: 1124765 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11248DD second address: 11248E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11248E1 second address: 1124906 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FAA94F752C7h 0x0000000b popad 0x0000000c mov eax, dword ptr [eax] 0x0000000e push eax 0x0000000f push edx 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1124906 second address: 112490B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 112490B second address: 1124981 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jl 00007FAA94F752B6h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 jp 00007FAA94F752C4h 0x00000016 pop eax 0x00000017 push eax 0x00000018 movsx edx, di 0x0000001b pop edx 0x0000001c push 00000003h 0x0000001e mov esi, dword ptr [ebp+122D1C81h] 0x00000024 push 00000000h 0x00000026 mov edx, dword ptr [ebp+122D20C5h] 0x0000002c jne 00007FAA94F752BCh 0x00000032 push 00000003h 0x00000034 push 00000000h 0x00000036 push esi 0x00000037 call 00007FAA94F752B8h 0x0000003c pop esi 0x0000003d mov dword ptr [esp+04h], esi 0x00000041 add dword ptr [esp+04h], 00000015h 0x00000049 inc esi 0x0000004a push esi 0x0000004b ret 0x0000004c pop esi 0x0000004d ret 0x0000004e or dword ptr [ebp+122D1FCFh], edi 0x00000054 push BD1A3915h 0x00000059 push eax 0x0000005a push edx 0x0000005b push ebx 0x0000005c pushad 0x0000005d popad 0x0000005e pop ebx 0x0000005f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1124981 second address: 11249F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 ja 00007FAA9521A036h 0x00000009 jmp 00007FAA9521A03Bh 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 xor dword ptr [esp], 7D1A3915h 0x00000018 push 00000000h 0x0000001a push eax 0x0000001b call 00007FAA9521A038h 0x00000020 pop eax 0x00000021 mov dword ptr [esp+04h], eax 0x00000025 add dword ptr [esp+04h], 00000018h 0x0000002d inc eax 0x0000002e push eax 0x0000002f ret 0x00000030 pop eax 0x00000031 ret 0x00000032 jmp 00007FAA9521A043h 0x00000037 sub dword ptr [ebp+122D20CBh], eax 0x0000003d lea ebx, dword ptr [ebp+1244A570h] 0x00000043 mov dword ptr [ebp+122D1F45h], ecx 0x00000049 push eax 0x0000004a push eax 0x0000004b push edx 0x0000004c jmp 00007FAA9521A03Ch 0x00000051 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11249F3 second address: 11249F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1124A6C second address: 1124A72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1124A72 second address: 1124B23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 add dword ptr [esp], 1FCC0A2Ch 0x0000000d xor dx, 45EDh 0x00000012 push 00000003h 0x00000014 mov ecx, 0586557Fh 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push edx 0x0000001e call 00007FAA94F752B8h 0x00000023 pop edx 0x00000024 mov dword ptr [esp+04h], edx 0x00000028 add dword ptr [esp+04h], 00000014h 0x00000030 inc edx 0x00000031 push edx 0x00000032 ret 0x00000033 pop edx 0x00000034 ret 0x00000035 mov esi, dword ptr [ebp+122D2CB1h] 0x0000003b mov dword ptr [ebp+122D350Eh], ecx 0x00000041 push 00000003h 0x00000043 push 00000000h 0x00000045 push ebp 0x00000046 call 00007FAA94F752B8h 0x0000004b pop ebp 0x0000004c mov dword ptr [esp+04h], ebp 0x00000050 add dword ptr [esp+04h], 0000001Dh 0x00000058 inc ebp 0x00000059 push ebp 0x0000005a ret 0x0000005b pop ebp 0x0000005c ret 0x0000005d call 00007FAA94F752B9h 0x00000062 jno 00007FAA94F752C0h 0x00000068 push eax 0x00000069 jmp 00007FAA94F752BDh 0x0000006e mov eax, dword ptr [esp+04h] 0x00000072 push eax 0x00000073 push edx 0x00000074 pushad 0x00000075 je 00007FAA94F752B6h 0x0000007b jmp 00007FAA94F752C2h 0x00000080 popad 0x00000081 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1124B23 second address: 1124B28 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1124B28 second address: 1124BA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push edi 0x0000000c jmp 00007FAA94F752BBh 0x00000011 pop edi 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 push eax 0x00000017 js 00007FAA94F752CBh 0x0000001d jmp 00007FAA94F752C5h 0x00000022 pop eax 0x00000023 pop eax 0x00000024 mov dword ptr [ebp+12445490h], edx 0x0000002a lea ebx, dword ptr [ebp+1244A57Bh] 0x00000030 push 00000000h 0x00000032 push edx 0x00000033 call 00007FAA94F752B8h 0x00000038 pop edx 0x00000039 mov dword ptr [esp+04h], edx 0x0000003d add dword ptr [esp+04h], 00000017h 0x00000045 inc edx 0x00000046 push edx 0x00000047 ret 0x00000048 pop edx 0x00000049 ret 0x0000004a mov edi, ecx 0x0000004c push eax 0x0000004d push eax 0x0000004e push edx 0x0000004f jmp 00007FAA94F752C3h 0x00000054 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1145169 second address: 114516F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 114516F second address: 114517C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 114517C second address: 1145180 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1145180 second address: 11451A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jmp 00007FAA94F752C1h 0x0000000c jp 00007FAA94F752B6h 0x00000012 pop ebx 0x00000013 push ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11452ED second address: 1145306 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA9521A043h 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1145306 second address: 1145313 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1145313 second address: 1145332 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA9521A048h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1145332 second address: 1145338 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1145338 second address: 114535B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jc 00007FAA9521A04Bh 0x0000000b pushad 0x0000000c popad 0x0000000d jmp 00007FAA9521A043h 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11455DC second address: 11455EC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA94F752BAh 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 114571F second address: 1145737 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FAA9521A036h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ecx 0x0000000b push eax 0x0000000c pushad 0x0000000d popad 0x0000000e push esi 0x0000000f pop esi 0x00000010 pop eax 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1145B2B second address: 1145B3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push esi 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1145C8B second address: 1145C91 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1145DE9 second address: 1145DEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1145DEF second address: 1145DFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 ja 00007FAA9521A03Eh 0x0000000b push eax 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1145DFE second address: 1145E02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 113AFB5 second address: 113AFCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FAA9521A03Ch 0x0000000a ja 00007FAA9521A036h 0x00000010 push esi 0x00000011 jc 00007FAA9521A036h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1146AC9 second address: 1146AF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA94F752BDh 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d jmp 00007FAA94F752C4h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 114D176 second address: 114D199 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007FAA9521A049h 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 114D199 second address: 114D19F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 114D19F second address: 114D1B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAA9521A03Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 114D1B0 second address: 114D1B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 114D1B8 second address: 114D1C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 114D1C0 second address: 114D1CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FAA94F752B6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 114F775 second address: 114F77E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 114F77E second address: 114F7B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push eax 0x00000007 push esi 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b pop edx 0x0000000c pop esi 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 pushad 0x00000012 jl 00007FAA94F752B8h 0x00000018 pushad 0x00000019 popad 0x0000001a jmp 00007FAA94F752C5h 0x0000001f popad 0x00000020 mov eax, dword ptr [eax] 0x00000022 push eax 0x00000023 push edx 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 114F7B5 second address: 114F7BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 114E039 second address: 114E048 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA94F752BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 114E048 second address: 114E04D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11543CE second address: 11543D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11538A8 second address: 11538AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1153C68 second address: 1153CA1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA94F752C4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a jmp 00007FAA94F752C2h 0x0000000f pushad 0x00000010 popad 0x00000011 pop edi 0x00000012 pop ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jc 00007FAA94F752B6h 0x0000001d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1153CA1 second address: 1153CA7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1153CA7 second address: 1153CAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11540E8 second address: 11540F2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11540F2 second address: 11540F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11540F6 second address: 11540FC instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11540FC second address: 1154103 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1154103 second address: 1154109 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1154238 second address: 1154251 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA94F752BFh 0x00000007 ja 00007FAA94F752B6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1156314 second address: 115631F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FAA9521A036h 0x0000000a popad 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115631F second address: 11563BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA94F752BAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jno 00007FAA94F752C2h 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 pushad 0x00000015 pushad 0x00000016 jmp 00007FAA94F752C8h 0x0000001b push ebx 0x0000001c pop ebx 0x0000001d popad 0x0000001e push edx 0x0000001f jmp 00007FAA94F752C5h 0x00000024 pop edx 0x00000025 popad 0x00000026 mov eax, dword ptr [eax] 0x00000028 je 00007FAA94F752BAh 0x0000002e push ebx 0x0000002f push edi 0x00000030 pop edi 0x00000031 pop ebx 0x00000032 mov dword ptr [esp+04h], eax 0x00000036 jp 00007FAA94F752CEh 0x0000003c pop eax 0x0000003d jo 00007FAA94F752B9h 0x00000043 movzx edi, di 0x00000046 push 9F49B17Bh 0x0000004b pushad 0x0000004c pushad 0x0000004d push eax 0x0000004e push edx 0x0000004f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11563BA second address: 11563C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1156F4E second address: 1156F81 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAA94F752C3h 0x00000008 jnl 00007FAA94F752B6h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov dword ptr [esp], ebx 0x00000014 sbb edi, 62610F87h 0x0000001a push eax 0x0000001b ja 00007FAA94F752D0h 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1156F81 second address: 1156F85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115734E second address: 115735F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edi 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jng 00007FAA94F752B8h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115735F second address: 1157364 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1157471 second address: 1157475 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1157A46 second address: 1157A4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11583B3 second address: 115841E instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FAA94F752BCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jc 00007FAA94F752CEh 0x00000011 pushad 0x00000012 jmp 00007FAA94F752C4h 0x00000017 pushad 0x00000018 popad 0x00000019 popad 0x0000001a nop 0x0000001b sub dword ptr [ebp+122D1E88h], esi 0x00000021 mov dword ptr [ebp+12464F59h], esi 0x00000027 push 00000000h 0x00000029 mov edi, 1C3F066Bh 0x0000002e push 00000000h 0x00000030 call 00007FAA94F752C8h 0x00000035 ja 00007FAA94F752B7h 0x0000003b pop edi 0x0000003c xchg eax, ebx 0x0000003d pushad 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 popad 0x00000042 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1158263 second address: 115826C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1159E64 second address: 1159E74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 jno 00007FAA94F752B6h 0x0000000f pop edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1158C33 second address: 1158C3D instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FAA9521A03Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115A839 second address: 115A89F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA94F752BEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c and esi, dword ptr [ebp+122D1D87h] 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push edi 0x00000017 call 00007FAA94F752B8h 0x0000001c pop edi 0x0000001d mov dword ptr [esp+04h], edi 0x00000021 add dword ptr [esp+04h], 00000016h 0x00000029 inc edi 0x0000002a push edi 0x0000002b ret 0x0000002c pop edi 0x0000002d ret 0x0000002e jne 00007FAA94F752BCh 0x00000034 or dword ptr [ebp+122D2E47h], eax 0x0000003a push 00000000h 0x0000003c pushad 0x0000003d mov ebx, dword ptr [ebp+122D2BF5h] 0x00000043 or eax, dword ptr [ebp+122D2A8Dh] 0x00000049 popad 0x0000004a push eax 0x0000004b pushad 0x0000004c push eax 0x0000004d push edx 0x0000004e pop edx 0x0000004f pop eax 0x00000050 push ebx 0x00000051 push eax 0x00000052 push edx 0x00000053 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115B1DF second address: 115B1E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115B1E3 second address: 115B1E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115B1E9 second address: 115B21A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b mov di, B2E2h 0x0000000f mov dword ptr [ebp+122D39B4h], edi 0x00000015 push 00000000h 0x00000017 jnl 00007FAA9521A03Bh 0x0000001d mov edi, 506513B7h 0x00000022 push 00000000h 0x00000024 xor dword ptr [ebp+122D1D82h], ecx 0x0000002a xchg eax, ebx 0x0000002b push eax 0x0000002c push edx 0x0000002d push esi 0x0000002e pushad 0x0000002f popad 0x00000030 pop esi 0x00000031 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115B21A second address: 115B220 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115BD5A second address: 115BD68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 pop edi 0x00000008 push eax 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115BA2E second address: 115BA32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115C459 second address: 115C45D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115CEF1 second address: 115CF19 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FAA94F752CEh 0x00000008 jmp 00007FAA94F752C8h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115C45D second address: 115C463 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115CF19 second address: 115CF1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 110C25E second address: 110C278 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA9521A041h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115C463 second address: 115C468 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 110C278 second address: 110C27E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 110C27E second address: 110C283 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115F7FA second address: 115F804 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007FAA9521A036h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115F804 second address: 115F86F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push ebx 0x0000000a push eax 0x0000000b pushad 0x0000000c popad 0x0000000d pop eax 0x0000000e pop ebx 0x0000000f nop 0x00000010 push 00000000h 0x00000012 push ecx 0x00000013 call 00007FAA94F752B8h 0x00000018 pop ecx 0x00000019 mov dword ptr [esp+04h], ecx 0x0000001d add dword ptr [esp+04h], 00000015h 0x00000025 inc ecx 0x00000026 push ecx 0x00000027 ret 0x00000028 pop ecx 0x00000029 ret 0x0000002a push 00000000h 0x0000002c mov dword ptr [ebp+122D3683h], ecx 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push ecx 0x00000037 call 00007FAA94F752B8h 0x0000003c pop ecx 0x0000003d mov dword ptr [esp+04h], ecx 0x00000041 add dword ptr [esp+04h], 00000017h 0x00000049 inc ecx 0x0000004a push ecx 0x0000004b ret 0x0000004c pop ecx 0x0000004d ret 0x0000004e mov edi, edx 0x00000050 push eax 0x00000051 push eax 0x00000052 push edx 0x00000053 jmp 00007FAA94F752C0h 0x00000058 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1160AAD second address: 1160AB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1162AF3 second address: 1162B01 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA94F752BAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1160AB1 second address: 1160AB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1162B01 second address: 1162B18 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FAA94F752BCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pushad 0x0000000f popad 0x00000010 pop ecx 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1161CEE second address: 1161CF8 instructions: 0x00000000 rdtsc 0x00000002 je 00007FAA9521A036h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1162B18 second address: 1162B22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007FAA94F752B6h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1161CF8 second address: 1161CFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1162B22 second address: 1162B26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1161CFE second address: 1161D02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1162B26 second address: 1162B92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push ebp 0x0000000c call 00007FAA94F752B8h 0x00000011 pop ebp 0x00000012 mov dword ptr [esp+04h], ebp 0x00000016 add dword ptr [esp+04h], 00000014h 0x0000001e inc ebp 0x0000001f push ebp 0x00000020 ret 0x00000021 pop ebp 0x00000022 ret 0x00000023 mov dword ptr [ebp+12471552h], ebx 0x00000029 push 00000000h 0x0000002b push 00000000h 0x0000002d push edx 0x0000002e call 00007FAA94F752B8h 0x00000033 pop edx 0x00000034 mov dword ptr [esp+04h], edx 0x00000038 add dword ptr [esp+04h], 00000018h 0x00000040 inc edx 0x00000041 push edx 0x00000042 ret 0x00000043 pop edx 0x00000044 ret 0x00000045 mov ebx, dword ptr [ebp+122D3536h] 0x0000004b mov bx, si 0x0000004e push 00000000h 0x00000050 xchg eax, esi 0x00000051 pushad 0x00000052 pushad 0x00000053 pushad 0x00000054 popad 0x00000055 jmp 00007FAA94F752BBh 0x0000005a popad 0x0000005b pushad 0x0000005c push eax 0x0000005d push edx 0x0000005e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1162B92 second address: 1162BA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1162BA1 second address: 1162BA7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1163B5B second address: 1163B65 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FAA9521A036h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1163B65 second address: 1163B6B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1163B6B second address: 1163B8B instructions: 0x00000000 rdtsc 0x00000002 jp 00007FAA9521A036h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FAA9521A040h 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1163DFD second address: 1163E01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11199DE second address: 1119A13 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007FAA9521A042h 0x0000000c jp 00007FAA9521A036h 0x00000012 jo 00007FAA9521A036h 0x00000018 pushad 0x00000019 jmp 00007FAA9521A048h 0x0000001e pushad 0x0000001f popad 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 116710C second address: 116718B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA94F752BBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c jmp 00007FAA94F752BDh 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push ebp 0x00000016 call 00007FAA94F752B8h 0x0000001b pop ebp 0x0000001c mov dword ptr [esp+04h], ebp 0x00000020 add dword ptr [esp+04h], 00000018h 0x00000028 inc ebp 0x00000029 push ebp 0x0000002a ret 0x0000002b pop ebp 0x0000002c ret 0x0000002d mov dword ptr [ebp+122D3520h], esi 0x00000033 push 00000000h 0x00000035 push 00000000h 0x00000037 push edx 0x00000038 call 00007FAA94F752B8h 0x0000003d pop edx 0x0000003e mov dword ptr [esp+04h], edx 0x00000042 add dword ptr [esp+04h], 00000016h 0x0000004a inc edx 0x0000004b push edx 0x0000004c ret 0x0000004d pop edx 0x0000004e ret 0x0000004f mov edi, dword ptr [ebp+122D2D29h] 0x00000055 push eax 0x00000056 pushad 0x00000057 jnp 00007FAA94F752BCh 0x0000005d push eax 0x0000005e push edx 0x0000005f push eax 0x00000060 push edx 0x00000061 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 116718B second address: 116718F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 116817B second address: 1168192 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA94F752C3h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1168192 second address: 11681A9 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FAA9521A036h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 ja 00007FAA9521A036h 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11681A9 second address: 11681AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11681AF second address: 11681B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1168394 second address: 11683A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 jl 00007FAA94F752B6h 0x0000000f pop esi 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 116C1D0 second address: 116C1D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 116D2BA second address: 116D2C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 116D2C0 second address: 116D2C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 116D2C4 second address: 116D2C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 116D2C8 second address: 116D312 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push 00000000h 0x0000000f push edi 0x00000010 call 00007FAA9521A038h 0x00000015 pop edi 0x00000016 mov dword ptr [esp+04h], edi 0x0000001a add dword ptr [esp+04h], 00000016h 0x00000022 inc edi 0x00000023 push edi 0x00000024 ret 0x00000025 pop edi 0x00000026 ret 0x00000027 mov edi, 30987676h 0x0000002c push 00000000h 0x0000002e cld 0x0000002f xor ebx, dword ptr [ebp+122D36A0h] 0x00000035 xchg eax, esi 0x00000036 jne 00007FAA9521A03Ah 0x0000003c push eax 0x0000003d push eax 0x0000003e push edx 0x0000003f push ecx 0x00000040 push eax 0x00000041 push edx 0x00000042 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 116D312 second address: 116D317 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 116A4CA second address: 116A4D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 116A4D0 second address: 116A4D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 116F547 second address: 116F572 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007FAA9521A03Dh 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e popad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push edi 0x00000013 jmp 00007FAA9521A03Fh 0x00000018 pop edi 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1171C1A second address: 1171C1F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 116C401 second address: 116C405 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 116C405 second address: 116C409 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 116D4A9 second address: 116D4AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 116D4AF second address: 116D4B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 116D595 second address: 116D5C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA9521A049h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FAA9521A03Dh 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1179E8F second address: 1179EB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push esi 0x0000000a jmp 00007FAA94F752C3h 0x0000000f pop esi 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 117A020 second address: 117A024 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 117A024 second address: 117A04A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA94F752C3h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007FAA94F752BDh 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11855A3 second address: 11855A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11855A7 second address: 11855B9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jp 00007FAA94F752B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11855B9 second address: 11855BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 118A32E second address: 118A333 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 118D3F6 second address: 118D3FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 118D3FC second address: 118D400 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 118D400 second address: 118D413 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 push esi 0x0000000a push ebx 0x0000000b jnl 00007FAA9521A036h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 118F1CA second address: 118F1D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 118F1D5 second address: 118F1D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1193388 second address: 11933AA instructions: 0x00000000 rdtsc 0x00000002 jng 00007FAA94F752B6h 0x00000008 jmp 00007FAA94F752BFh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push edi 0x00000010 pushad 0x00000011 popad 0x00000012 pop edi 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11933AA second address: 11933C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FAA9521A036h 0x0000000a push edi 0x0000000b pop edi 0x0000000c jng 00007FAA9521A036h 0x00000012 popad 0x00000013 jns 00007FAA9521A038h 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 119397F second address: 1193991 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 jne 00007FAA94F752CEh 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1193AEC second address: 1193AFC instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FAA9521A036h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1193AFC second address: 1193B00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1193B00 second address: 1193B04 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1193B04 second address: 1193B20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b jp 00007FAA94F752B6h 0x00000011 push edx 0x00000012 pop edx 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 jnc 00007FAA94F752B6h 0x0000001c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1193E23 second address: 1193E28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1193E28 second address: 1193E48 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAA94F752C5h 0x00000008 jnc 00007FAA94F752B6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1194117 second address: 1194134 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007FAA9521A038h 0x0000000c popad 0x0000000d jl 00007FAA9521A052h 0x00000013 jg 00007FAA9521A03Eh 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1194134 second address: 119413E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 119413E second address: 1194142 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11943D8 second address: 11943EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA94F752C1h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11943EF second address: 11943F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11943F4 second address: 11943F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1194578 second address: 119457C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 119457C second address: 1194582 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1199079 second address: 1199081 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1154B7E second address: 1154B88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FAA94F752B6h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1154B88 second address: 1154B8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1154B8C second address: 1154BC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jbe 00007FAA94F752C2h 0x0000000f jne 00007FAA94F752BCh 0x00000015 nop 0x00000016 mov edi, dword ptr [ebp+122D2CB5h] 0x0000001c lea eax, dword ptr [ebp+1247A949h] 0x00000022 mov edx, dword ptr [ebp+122D2509h] 0x00000028 nop 0x00000029 push eax 0x0000002a push edx 0x0000002b jnl 00007FAA94F752BCh 0x00000031 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1154BC9 second address: 113AFCE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAA9521A047h 0x00000008 jnc 00007FAA9521A036h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 jno 00007FAA9521A03Ch 0x00000018 nop 0x00000019 clc 0x0000001a add ecx, dword ptr [ebp+122D1E25h] 0x00000020 call dword ptr [ebp+1244AF77h] 0x00000026 jmp 00007FAA9521A040h 0x0000002b pushad 0x0000002c jbe 00007FAA9521A03Ch 0x00000032 jo 00007FAA9521A03Ch 0x00000038 ja 00007FAA9521A036h 0x0000003e push esi 0x0000003f jc 00007FAA9521A036h 0x00000045 push eax 0x00000046 push edx 0x00000047 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11551CA second address: 11551D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007FAA94F752B6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11551D5 second address: 1155229 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pop eax 0x00000008 push 00000000h 0x0000000a push edx 0x0000000b call 00007FAA9521A038h 0x00000010 pop edx 0x00000011 mov dword ptr [esp+04h], edx 0x00000015 add dword ptr [esp+04h], 00000017h 0x0000001d inc edx 0x0000001e push edx 0x0000001f ret 0x00000020 pop edx 0x00000021 ret 0x00000022 jbe 00007FAA9521A041h 0x00000028 jmp 00007FAA9521A03Bh 0x0000002d call 00007FAA9521A039h 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 jmp 00007FAA9521A03Fh 0x0000003a pop eax 0x0000003b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1155229 second address: 115523F instructions: 0x00000000 rdtsc 0x00000002 jg 00007FAA94F752B8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d pushad 0x0000000e popad 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115523F second address: 1155243 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115530D second address: 1155311 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11553BA second address: 11553CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jne 00007FAA9521A040h 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115553F second address: 1155544 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115560F second address: 1155656 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA9521A041h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e jno 00007FAA9521A036h 0x00000014 popad 0x00000015 jno 00007FAA9521A038h 0x0000001b popad 0x0000001c nop 0x0000001d and cx, E1E0h 0x00000022 push 00000004h 0x00000024 push edx 0x00000025 mov cx, 78DEh 0x00000029 pop ecx 0x0000002a nop 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007FAA9521A03Ch 0x00000032 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1155EAB second address: 1155EC5 instructions: 0x00000000 rdtsc 0x00000002 je 00007FAA94F752BCh 0x00000008 jne 00007FAA94F752B6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jc 00007FAA94F752BCh 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1155EC5 second address: 1155F31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 nop 0x00000006 push 00000000h 0x00000008 push ebx 0x00000009 call 00007FAA9521A038h 0x0000000e pop ebx 0x0000000f mov dword ptr [esp+04h], ebx 0x00000013 add dword ptr [esp+04h], 0000001Bh 0x0000001b inc ebx 0x0000001c push ebx 0x0000001d ret 0x0000001e pop ebx 0x0000001f ret 0x00000020 cld 0x00000021 lea eax, dword ptr [ebp+1247A98Dh] 0x00000027 push 00000000h 0x00000029 push ebx 0x0000002a call 00007FAA9521A038h 0x0000002f pop ebx 0x00000030 mov dword ptr [esp+04h], ebx 0x00000034 add dword ptr [esp+04h], 00000016h 0x0000003c inc ebx 0x0000003d push ebx 0x0000003e ret 0x0000003f pop ebx 0x00000040 ret 0x00000041 push ecx 0x00000042 mov dword ptr [ebp+12452503h], ebx 0x00000048 pop edx 0x00000049 push eax 0x0000004a push eax 0x0000004b push edx 0x0000004c jmp 00007FAA9521A043h 0x00000051 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1155F31 second address: 1155F4F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAA94F752C9h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1198359 second address: 11983A3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA9521A040h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jbe 00007FAA9521A094h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FAA9521A047h 0x00000016 jmp 00007FAA9521A047h 0x0000001b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11983A3 second address: 11983A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11983A7 second address: 11983C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA9521A046h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11983C7 second address: 11983CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 119890C second address: 1198920 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA9521A03Dh 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A13BF second address: 11A13C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A13C3 second address: 11A13C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A13C9 second address: 11A13F7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jg 00007FAA94F752B6h 0x00000009 pop ecx 0x0000000a jmp 00007FAA94F752BBh 0x0000000f pop edx 0x00000010 pop eax 0x00000011 pushad 0x00000012 push ecx 0x00000013 pushad 0x00000014 popad 0x00000015 pop ecx 0x00000016 jng 00007FAA94F752B8h 0x0000001c push eax 0x0000001d push edx 0x0000001e push ecx 0x0000001f pop ecx 0x00000020 jne 00007FAA94F752B6h 0x00000026 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A155F second address: 11A1575 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 jmp 00007FAA9521A03Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A1575 second address: 11A159B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 jmp 00007FAA94F752C5h 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d jnp 00007FAA94F752B6h 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A159B second address: 11A15A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A184B second address: 11A1867 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA94F752C2h 0x00000009 jl 00007FAA94F752B6h 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A1867 second address: 11A186D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A19CE second address: 11A19D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FAA94F752B6h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A1D01 second address: 11A1D07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A1D07 second address: 11A1D0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A1E29 second address: 11A1E49 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FAA9521A041h 0x0000000c jo 00007FAA9521A036h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A84B9 second address: 11A84BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A84BD second address: 11A84C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A84C1 second address: 11A84C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A84C7 second address: 11A84D5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A84D5 second address: 11A84EC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA94F752C3h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A6EAB second address: 11A6EB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A71FD second address: 11A7201 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A736B second address: 11A7377 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FAA9521A03Eh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A765E second address: 11A766D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA94F752BBh 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A766D second address: 11A76AA instructions: 0x00000000 rdtsc 0x00000002 jp 00007FAA9521A036h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FAA9521A046h 0x0000000f pop edx 0x00000010 pop eax 0x00000011 pushad 0x00000012 jmp 00007FAA9521A047h 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A7A67 second address: 11A7A6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A7A6D second address: 11A7A71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11A8329 second address: 11A8330 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B15BB second address: 11B15CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FAA9521A036h 0x0000000a popad 0x0000000b push ecx 0x0000000c jns 00007FAA9521A036h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B15CF second address: 11B15D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B15D4 second address: 11B15DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007FAA9521A036h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B171E second address: 11B1722 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B1722 second address: 11B175D instructions: 0x00000000 rdtsc 0x00000002 jng 00007FAA9521A036h 0x00000008 jbe 00007FAA9521A036h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 jmp 00007FAA9521A041h 0x00000016 jmp 00007FAA9521A042h 0x0000001b jnc 00007FAA9521A036h 0x00000021 popad 0x00000022 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B175D second address: 11B177B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA94F752C8h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B177B second address: 11B177F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B177F second address: 11B17BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA94F752C3h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e jmp 00007FAA94F752C7h 0x00000013 push ecx 0x00000014 pushad 0x00000015 popad 0x00000016 pop ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B17BA second address: 11B17BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B4397 second address: 11B439B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B439B second address: 11B43AB instructions: 0x00000000 rdtsc 0x00000002 jp 00007FAA9521A036h 0x00000008 jne 00007FAA9521A036h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B43AB second address: 11B43C0 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FAA94F752BCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B43C0 second address: 11B43C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B43C6 second address: 11B43E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FAA94F752B6h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d jmp 00007FAA94F752C2h 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B40BB second address: 11B40C0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11BB200 second address: 11BB22C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FAA94F752B6h 0x0000000a pop eax 0x0000000b push esi 0x0000000c ja 00007FAA94F752B6h 0x00000012 jmp 00007FAA94F752BAh 0x00000017 pop esi 0x00000018 pushad 0x00000019 jmp 00007FAA94F752BAh 0x0000001e push eax 0x0000001f pop eax 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11BB22C second address: 11BB236 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11BB236 second address: 11BB24E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007FAA94F752BDh 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11BB24E second address: 11BB276 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA9521A048h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jng 00007FAA9521A036h 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11BB276 second address: 11BB27F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11BB27F second address: 11BB287 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B9A44 second address: 11B9A73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push edx 0x00000006 push eax 0x00000007 pop eax 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c jmp 00007FAA94F752BAh 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 pop ecx 0x00000014 jbe 00007FAA94F752C6h 0x0000001a jmp 00007FAA94F752BEh 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B9A73 second address: 11B9A86 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FAA9521A03Eh 0x00000008 jnc 00007FAA9521A036h 0x0000000e push edx 0x0000000f pop edx 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B9A86 second address: 11B9A8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B9E85 second address: 11B9EA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA9521A042h 0x00000009 popad 0x0000000a push edx 0x0000000b js 00007FAA9521A036h 0x00000011 pop edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11B9EA4 second address: 11B9EBB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007FAA94F752BEh 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11BA066 second address: 11BA073 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11BA073 second address: 11BA07E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FAA94F752B6h 0x0000000a pop ecx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11BA254 second address: 11BA259 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11BA259 second address: 11BA269 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA94F752BAh 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11BA269 second address: 11BA278 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA9521A03Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115581B second address: 1155836 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA94F752C6h 0x00000009 popad 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1155836 second address: 1155850 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA9521A046h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1155850 second address: 11558A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push esi 0x0000000e call 00007FAA94F752B8h 0x00000013 pop esi 0x00000014 mov dword ptr [esp+04h], esi 0x00000018 add dword ptr [esp+04h], 00000016h 0x00000020 inc esi 0x00000021 push esi 0x00000022 ret 0x00000023 pop esi 0x00000024 ret 0x00000025 mov edx, esi 0x00000027 add dword ptr [ebp+122D20E0h], edx 0x0000002d mov ebx, dword ptr [ebp+1247A988h] 0x00000033 jmp 00007FAA94F752BEh 0x00000038 add eax, ebx 0x0000003a mov dx, B93Bh 0x0000003e nop 0x0000003f pushad 0x00000040 push edi 0x00000041 pushad 0x00000042 popad 0x00000043 pop edi 0x00000044 push eax 0x00000045 push edx 0x00000046 jc 00007FAA94F752B6h 0x0000004c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11558A9 second address: 11558CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b jmp 00007FAA9521A046h 0x00000010 pop eax 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11558CB second address: 11558D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007FAA94F752B6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11558D6 second address: 115593B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 mov edx, dword ptr [ebp+122D2C65h] 0x0000000e push 00000004h 0x00000010 push 00000000h 0x00000012 push esi 0x00000013 call 00007FAA9521A038h 0x00000018 pop esi 0x00000019 mov dword ptr [esp+04h], esi 0x0000001d add dword ptr [esp+04h], 0000001Dh 0x00000025 inc esi 0x00000026 push esi 0x00000027 ret 0x00000028 pop esi 0x00000029 ret 0x0000002a push eax 0x0000002b movsx ecx, si 0x0000002e pop edi 0x0000002f jmp 00007FAA9521A048h 0x00000034 push eax 0x00000035 push eax 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007FAA9521A03Eh 0x0000003e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115593B second address: 115593F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115593F second address: 1155945 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1155945 second address: 115594B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115594B second address: 115594F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11BA423 second address: 11BA454 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FAA94F752BAh 0x00000008 push eax 0x00000009 pop eax 0x0000000a pushad 0x0000000b popad 0x0000000c push ebx 0x0000000d jmp 00007FAA94F752C0h 0x00000012 pop ebx 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 push edx 0x00000018 jmp 00007FAA94F752BDh 0x0000001d pop edx 0x0000001e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11BA454 second address: 11BA46C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA9521A03Eh 0x00000009 jl 00007FAA9521A036h 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11BA5D3 second address: 11BA5DD instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FAA94F752B6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11BE940 second address: 11BE946 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11BED6C second address: 11BED8C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FAA94F752C8h 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11BEF1D second address: 11BEF24 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11BF093 second address: 11BF0C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007FAA94F752BFh 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FAA94F752C4h 0x00000011 jnc 00007FAA94F752B6h 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 111D08C second address: 111D094 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11C225D second address: 11C2261 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11C2261 second address: 11C2267 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11CBA9A second address: 11CBA9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11CBA9E second address: 11CBAAB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jnp 00007FAA9521A036h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11CBAAB second address: 11CBAB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11C9B4E second address: 11C9B52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11C9B52 second address: 11C9B58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11C9B58 second address: 11C9B5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11CA07F second address: 11CA0BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 ja 00007FAA94F752B6h 0x0000000c pop ecx 0x0000000d pop edx 0x0000000e pushad 0x0000000f pushad 0x00000010 push eax 0x00000011 pop eax 0x00000012 push edx 0x00000013 pop edx 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FAA94F752C1h 0x0000001c jmp 00007FAA94F752C7h 0x00000021 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11CA3A5 second address: 11CA3A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11CA3A9 second address: 11CA3E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jc 00007FAA94F752C0h 0x0000000e jmp 00007FAA94F752BAh 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 push edx 0x00000018 pop edx 0x00000019 jmp 00007FAA94F752BFh 0x0000001e push esi 0x0000001f pop esi 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 jp 00007FAA94F752B6h 0x00000029 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11CA3E1 second address: 11CA3E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11CA3E5 second address: 11CA3EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11CA70B second address: 11CA73F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAA9521A048h 0x00000008 jmp 00007FAA9521A047h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11CA73F second address: 11CA74E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 jo 00007FAA94F752C2h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11CA74E second address: 11CA754 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11CB1F5 second address: 11CB209 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA94F752BFh 0x00000009 popad 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11CB209 second address: 11CB221 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FAA9521A03Ch 0x00000008 jng 00007FAA9521A03Eh 0x0000000e push edx 0x0000000f pop edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11D07C2 second address: 11D07C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11D07C6 second address: 11D07DE instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FAA9521A036h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a je 00007FAA9521A042h 0x00000010 ja 00007FAA9521A036h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11D49EB second address: 11D49F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11D49F1 second address: 11D49F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11D3C68 second address: 11D3C80 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FAA94F752B6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jng 00007FAA94F752BEh 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11D3C80 second address: 11D3C8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007FAA9521A036h 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11D4084 second address: 11D408C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11D408C second address: 11D40BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jc 00007FAA9521A046h 0x0000000d jmp 00007FAA9521A03Ah 0x00000012 jl 00007FAA9521A036h 0x00000018 pushad 0x00000019 push ebx 0x0000001a pushad 0x0000001b popad 0x0000001c pop ebx 0x0000001d pushad 0x0000001e push ecx 0x0000001f pop ecx 0x00000020 jo 00007FAA9521A036h 0x00000026 popad 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a popad 0x0000002b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11D4538 second address: 11D4542 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FAA94F752B6h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11D4542 second address: 11D4576 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jmp 00007FAA9521A049h 0x0000000c pop ebx 0x0000000d popad 0x0000000e pushad 0x0000000f jnl 00007FAA9521A03Eh 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11DBCAE second address: 11DBCB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11DBE53 second address: 11DBE58 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11DBE58 second address: 11DBE5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11DBE5E second address: 11DBE73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 jno 00007FAA9521A036h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11DBE73 second address: 11DBE79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11DBE79 second address: 11DBE83 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FAA9521A036h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11DBE83 second address: 11DBE8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11DBE8C second address: 11DBE93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11DBE93 second address: 11DBEAA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAA94F752C2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11DC48B second address: 11DC4A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA9521A045h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11DD1A5 second address: 11DD1BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FAA94F752C0h 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11DD1BB second address: 11DD1D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jc 00007FAA9521A036h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jne 00007FAA9521A046h 0x00000014 push eax 0x00000015 push edx 0x00000016 je 00007FAA9521A036h 0x0000001c push eax 0x0000001d pop eax 0x0000001e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11DDBB6 second address: 11DDBBE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11DDBBE second address: 11DDBC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11E6B69 second address: 11E6B6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11E6B6D second address: 11E6B71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11E6B71 second address: 11E6B7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push esi 0x0000000b pop esi 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11E6B7D second address: 11E6BA5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA9521A03Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FAA9521A047h 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11E6BA5 second address: 11E6BB0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11E6BB0 second address: 11E6BB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11F403E second address: 11F4048 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FAA94F752B6h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11F4048 second address: 11F404E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11F404E second address: 11F4062 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jl 00007FAA94F752B6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jbe 00007FAA94F752C2h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11F3C59 second address: 11F3C63 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FAA9521A036h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11F3C63 second address: 11F3C6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007FAA94F752B6h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11F3C6D second address: 11F3C71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11FE135 second address: 11FE14F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA94F752C1h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11FE14F second address: 11FE153 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11FE153 second address: 11FE157 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11FE157 second address: 11FE163 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11FE163 second address: 11FE169 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11FE169 second address: 11FE16D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 11FE16D second address: 11FE1C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA94F752BEh 0x00000007 jmp 00007FAA94F752C8h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f jng 00007FAA94F752B6h 0x00000015 pushad 0x00000016 popad 0x00000017 push edi 0x00000018 pop edi 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007FAA94F752C9h 0x00000021 push eax 0x00000022 pop eax 0x00000023 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120312C second address: 1203144 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA9521A040h 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1203144 second address: 120314A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1206C72 second address: 1206C76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1206C76 second address: 1206C9C instructions: 0x00000000 rdtsc 0x00000002 jp 00007FAA94F752B6h 0x00000008 jmp 00007FAA94F752C9h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1206C9C second address: 1206CCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pushad 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a jmp 00007FAA9521A03Eh 0x0000000f jmp 00007FAA9521A045h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120EE80 second address: 120EE86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120EE86 second address: 120EE8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120EE8F second address: 120EE93 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120EE93 second address: 120EEC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FAA9521A041h 0x0000000f jmp 00007FAA9521A048h 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120EEC6 second address: 120EECA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120EECA second address: 120EED8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007FAA9521A042h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120EED8 second address: 120EEF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FAA94F752B6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FAA94F752C4h 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120EEF9 second address: 120EF02 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120EF02 second address: 120EF23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA94F752C6h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120D6F9 second address: 120D706 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jns 00007FAA9521A036h 0x00000009 pop ebx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120D706 second address: 120D70E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120D9C8 second address: 120D9E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA9521A044h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120DC87 second address: 120DC8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120DC8B second address: 120DC91 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120DC91 second address: 120DCB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jp 00007FAA94F752B6h 0x0000000d jmp 00007FAA94F752C6h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120DCB6 second address: 120DCBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120DCBC second address: 120DCC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120DE1E second address: 120DE25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120DE25 second address: 120DE3A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA94F752BBh 0x00000007 push eax 0x00000008 push edx 0x00000009 jnl 00007FAA94F752B6h 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120EB3D second address: 120EB41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120EB41 second address: 120EB54 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 jnp 00007FAA94F752CCh 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120EB54 second address: 120EB58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 120EB58 second address: 120EB5E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1212A34 second address: 1212A47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA9521A03Fh 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 121C8EC second address: 121C8F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 121EEFB second address: 121EF1E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA9521A045h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d jbe 00007FAA9521A036h 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 121EF1E second address: 121EF24 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 122A8E8 second address: 122A8F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 122A8F3 second address: 122A906 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FAA94F752B6h 0x0000000a pushad 0x0000000b popad 0x0000000c jbe 00007FAA94F752B6h 0x00000012 popad 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 123172E second address: 123173D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA9521A03Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 123173D second address: 123175A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA94F752C9h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 123175A second address: 123175E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 12312CF second address: 12312D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 12312D3 second address: 12312D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 12312D7 second address: 12312E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA94F752BAh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 12388FF second address: 1238905 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1238905 second address: 1238910 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1238910 second address: 1238925 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA9521A041h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1238925 second address: 1238929 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1237BB8 second address: 1237BE0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA9521A044h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jg 00007FAA9521A036h 0x00000012 js 00007FAA9521A036h 0x00000018 popad 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1237BE0 second address: 1237BEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FAA94F752B6h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1237BEA second address: 1237C07 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA9521A046h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1237D79 second address: 1237D9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push ebx 0x00000006 jnp 00007FAA94F752B6h 0x0000000c pop ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 jmp 00007FAA94F752C4h 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1238092 second address: 12380A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jne 00007FAA9521A036h 0x00000011 jng 00007FAA9521A036h 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 12380A9 second address: 12380AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 12380AD second address: 12380B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1238260 second address: 123826A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FAA94F752B6h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1238626 second address: 123863E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA9521A044h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1242BFC second address: 1242C16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA94F752C0h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 1242C16 second address: 1242C1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 123CF71 second address: 123CF84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA94F752BFh 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 115921C second address: 115922F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c je 00007FAA9521A036h 0x00000012 popad 0x00000013 rdtsc |
Edit tour
file.exe (PID: 7656 cmdline: 
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node