| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D3EE2F second address: D3EE33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D3EE33 second address: D3EE46 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0BB187Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D3EE46 second address: D3EE50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop ebx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D3EE50 second address: D3EE56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D3EE56 second address: D3EE5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D49C67 second address: D49C7A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0BB187Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D49DFF second address: D49E07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D49E07 second address: D49E30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F52C0BB1882h 0x00000009 jmp 00007F52C0BB1882h 0x0000000e popad 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D4DF91 second address: D4DFC0 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F52C0D3C11Ch 0x00000008 jo 00007F52C0D3C116h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 pushad 0x00000012 jmp 00007F52C0D3C129h 0x00000017 push eax 0x00000018 push edx 0x00000019 push esi 0x0000001a pop esi 0x0000001b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D4DFC0 second address: D4DFC4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D4DFC4 second address: D4DFF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 call 00007F52C0D3C11Ch 0x0000000d mov si, cx 0x00000010 pop edx 0x00000011 and edi, 70C629AEh 0x00000017 push 00000000h 0x00000019 mov edx, dword ptr [ebp+13BC2B56h] 0x0000001f push C07FBA80h 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 popad 0x0000002a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D4DFF5 second address: D4E011 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0BB1888h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D4E011 second address: D4E016 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D4E182 second address: D4E1C3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0BB187Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d sub dword ptr [ebp+13BC3377h], eax 0x00000013 push 00000000h 0x00000015 mov ecx, dword ptr [ebp+13BC2B1Eh] 0x0000001b call 00007F52C0BB1879h 0x00000020 pushad 0x00000021 pushad 0x00000022 jnl 00007F52C0BB1876h 0x00000028 push eax 0x00000029 pop eax 0x0000002a popad 0x0000002b push eax 0x0000002c push edx 0x0000002d jns 00007F52C0BB1876h 0x00000033 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D4E1C3 second address: D4E204 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jnp 00007F52C0D3C12Dh 0x0000000e ja 00007F52C0D3C127h 0x00000014 jmp 00007F52C0D3C121h 0x00000019 mov eax, dword ptr [esp+04h] 0x0000001d js 00007F52C0D3C122h 0x00000023 jnp 00007F52C0D3C11Ch 0x00000029 jnl 00007F52C0D3C116h 0x0000002f mov eax, dword ptr [eax] 0x00000031 push esi 0x00000032 push ebx 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D4E204 second address: D4E28D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop esi 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a jne 00007F52C0BB188Ch 0x00000010 jmp 00007F52C0BB1886h 0x00000015 pop eax 0x00000016 movsx ecx, dx 0x00000019 push 00000003h 0x0000001b clc 0x0000001c push 00000000h 0x0000001e jmp 00007F52C0BB187Dh 0x00000023 push 00000003h 0x00000025 push 00000000h 0x00000027 push ebx 0x00000028 call 00007F52C0BB1878h 0x0000002d pop ebx 0x0000002e mov dword ptr [esp+04h], ebx 0x00000032 add dword ptr [esp+04h], 0000001Ah 0x0000003a inc ebx 0x0000003b push ebx 0x0000003c ret 0x0000003d pop ebx 0x0000003e ret 0x0000003f mov ecx, dword ptr [ebp+13BC2C46h] 0x00000045 call 00007F52C0BB1879h 0x0000004a pushad 0x0000004b jl 00007F52C0BB1878h 0x00000051 push edi 0x00000052 pop edi 0x00000053 pushad 0x00000054 jbe 00007F52C0BB1876h 0x0000005a push edx 0x0000005b pop edx 0x0000005c popad 0x0000005d popad 0x0000005e push eax 0x0000005f push eax 0x00000060 push eax 0x00000061 push edx 0x00000062 push edx 0x00000063 pop edx 0x00000064 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D4E28D second address: D4E2BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0D3C11Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e jng 00007F52C0D3C122h 0x00000014 jns 00007F52C0D3C11Ch 0x0000001a mov eax, dword ptr [eax] 0x0000001c push eax 0x0000001d push edx 0x0000001e push ebx 0x0000001f pushad 0x00000020 popad 0x00000021 pop ebx 0x00000022 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D4E2BF second address: D4E2C6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D4E2C6 second address: D4E2DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jl 00007F52C0D3C118h 0x00000013 push edi 0x00000014 pop edi 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D5FE86 second address: D5FE8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D34E3A second address: D34E42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D34E42 second address: D34E78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F52C0BB1886h 0x00000009 jnl 00007F52C0BB1876h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F52C0BB1883h 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D6CAC6 second address: D6CAD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F52C0D3C116h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D6CAD0 second address: D6CAE2 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F52C0BB1876h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jnp 00007F52C0BB187Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D6D032 second address: D6D044 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F52C0D3C11Dh 0x00000009 pop ecx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D6D206 second address: D6D241 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F52C0BB1882h 0x00000008 jnl 00007F52C0BB1876h 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 jnp 00007F52C0BB1876h 0x00000016 popad 0x00000017 jp 00007F52C0BB187Ch 0x0000001d jo 00007F52C0BB1876h 0x00000023 pop edx 0x00000024 pop eax 0x00000025 jp 00007F52C0BB1897h 0x0000002b push ebx 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D6D96D second address: D6D973 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D6D973 second address: D6D979 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D6D979 second address: D6D993 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0D3C126h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D614B1 second address: D614B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D614B7 second address: D614D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F52C0D3C127h 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D614D5 second address: D61505 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0BB1885h 0x00000007 jl 00007F52C0BB1881h 0x0000000d jmp 00007F52C0BB187Bh 0x00000012 pop edx 0x00000013 pop eax 0x00000014 pushad 0x00000015 pushad 0x00000016 pushad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D61505 second address: D61518 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F52C0D3C116h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D33407 second address: D33420 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F52C0BB1885h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D33420 second address: D33424 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D33424 second address: D33430 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push esi 0x00000008 pop esi 0x00000009 push eax 0x0000000a pop eax 0x0000000b pop ebx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D33430 second address: D33435 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D6DC19 second address: D6DC1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D6E322 second address: D6E332 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F52C0D3C116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D6E332 second address: D6E338 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D6E338 second address: D6E33E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D6E33E second address: D6E347 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D6E347 second address: D6E34D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D6E34D second address: D6E36A instructions: 0x00000000 rdtsc 0x00000002 jp 00007F52C0BB1888h 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D6E36A second address: D6E388 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F52C0D3C128h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7127E second address: D71283 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D72236 second address: D72240 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F52C0D3C116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D75963 second address: D75969 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D3B904 second address: D3B90F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edi 0x00000007 pushad 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D3B90F second address: D3B915 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D3B915 second address: D3B920 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7992D second address: D79931 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D79A50 second address: D79A72 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0D3C122h 0x00000007 je 00007F52C0D3C116h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 push ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D79A72 second address: D79A78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D79A78 second address: D79A83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D79A83 second address: D79A87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D79A87 second address: D79A8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D79A8F second address: D79A95 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D79A95 second address: D79ABB instructions: 0x00000000 rdtsc 0x00000002 jns 00007F52C0D3C116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007F52C0D3C129h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D79ABB second address: D79AC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D79C1C second address: D79C21 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7D3D7 second address: D7D3DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7D455 second address: D7D463 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0D3C11Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7D463 second address: D7D469 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7E5EA second address: D7E623 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0D3C129h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F52C0D3C125h 0x0000000e popad 0x0000000f push eax 0x00000010 push ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7EBAF second address: D7EC23 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F52C0BB1878h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F52C0BB1887h 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push ebp 0x00000014 call 00007F52C0BB1878h 0x00000019 pop ebp 0x0000001a mov dword ptr [esp+04h], ebp 0x0000001e add dword ptr [esp+04h], 00000016h 0x00000026 inc ebp 0x00000027 push ebp 0x00000028 ret 0x00000029 pop ebp 0x0000002a ret 0x0000002b push 00000000h 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 push edx 0x00000032 call 00007F52C0BB1878h 0x00000037 pop edx 0x00000038 mov dword ptr [esp+04h], edx 0x0000003c add dword ptr [esp+04h], 00000019h 0x00000044 inc edx 0x00000045 push edx 0x00000046 ret 0x00000047 pop edx 0x00000048 ret 0x00000049 or dword ptr [ebp+13BC38BDh], edi 0x0000004f push eax 0x00000050 push eax 0x00000051 push edx 0x00000052 pushad 0x00000053 push eax 0x00000054 push edx 0x00000055 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7EC23 second address: D7EC2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7F5E7 second address: D7F5EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7F46A second address: D7F471 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7F5EB second address: D7F644 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F52C0BB187Bh 0x0000000b popad 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push edx 0x00000012 call 00007F52C0BB1878h 0x00000017 pop edx 0x00000018 mov dword ptr [esp+04h], edx 0x0000001c add dword ptr [esp+04h], 0000001Bh 0x00000024 inc edx 0x00000025 push edx 0x00000026 ret 0x00000027 pop edx 0x00000028 ret 0x00000029 push 00000000h 0x0000002b push 00000000h 0x0000002d mov edi, dword ptr [ebp+13BC2C0Eh] 0x00000033 push eax 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007F52C0BB1884h 0x0000003b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7F471 second address: D7F49B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c jmp 00007F52C0D3C125h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 jnl 00007F52C0D3C116h 0x0000001a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D82765 second address: D827D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 add si, 6956h 0x0000000c push 00000000h 0x0000000e push 00000000h 0x00000010 push edi 0x00000011 call 00007F52C0BB1878h 0x00000016 pop edi 0x00000017 mov dword ptr [esp+04h], edi 0x0000001b add dword ptr [esp+04h], 00000015h 0x00000023 inc edi 0x00000024 push edi 0x00000025 ret 0x00000026 pop edi 0x00000027 ret 0x00000028 mov edi, dword ptr [ebp+13BC2B72h] 0x0000002e push 00000000h 0x00000030 push 00000000h 0x00000032 push esi 0x00000033 call 00007F52C0BB1878h 0x00000038 pop esi 0x00000039 mov dword ptr [esp+04h], esi 0x0000003d add dword ptr [esp+04h], 00000017h 0x00000045 inc esi 0x00000046 push esi 0x00000047 ret 0x00000048 pop esi 0x00000049 ret 0x0000004a jmp 00007F52C0BB1887h 0x0000004f push eax 0x00000050 push esi 0x00000051 push eax 0x00000052 push edx 0x00000053 jne 00007F52C0BB1876h 0x00000059 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D80DFA second address: D80E00 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D82496 second address: D8249E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D82FF2 second address: D82FFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F52C0D3C116h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D8323F second address: D83245 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D82FFC second address: D83000 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D83245 second address: D832CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push ebx 0x0000000c call 00007F52C0BB1878h 0x00000011 pop ebx 0x00000012 mov dword ptr [esp+04h], ebx 0x00000016 add dword ptr [esp+04h], 0000001Bh 0x0000001e inc ebx 0x0000001f push ebx 0x00000020 ret 0x00000021 pop ebx 0x00000022 ret 0x00000023 sub di, 9861h 0x00000028 mov edi, ecx 0x0000002a push 00000000h 0x0000002c push 00000000h 0x0000002e push ebp 0x0000002f call 00007F52C0BB1878h 0x00000034 pop ebp 0x00000035 mov dword ptr [esp+04h], ebp 0x00000039 add dword ptr [esp+04h], 00000014h 0x00000041 inc ebp 0x00000042 push ebp 0x00000043 ret 0x00000044 pop ebp 0x00000045 ret 0x00000046 push 00000000h 0x00000048 mov dword ptr [ebp+13BC38BDh], esi 0x0000004e xchg eax, ebx 0x0000004f push ecx 0x00000050 pushad 0x00000051 jnp 00007F52C0BB1876h 0x00000057 jmp 00007F52C0BB187Ah 0x0000005c popad 0x0000005d pop ecx 0x0000005e push eax 0x0000005f push eax 0x00000060 push edx 0x00000061 jmp 00007F52C0BB1887h 0x00000066 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D832CD second address: D832D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D8586C second address: D85883 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F52C0BB187Ch 0x00000009 je 00007F52C0BB1876h 0x0000000f popad 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D8A0BA second address: D8A0C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D8BEFA second address: D8BEFF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D8B1B7 second address: D8B1BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D8BEFF second address: D8BF4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a call 00007F52C0BB1882h 0x0000000f mov edi, edx 0x00000011 pop edi 0x00000012 push 00000000h 0x00000014 mov dword ptr [ebp+13BC2F0Eh], eax 0x0000001a push 00000000h 0x0000001c add edi, 57DE28E2h 0x00000022 xchg eax, esi 0x00000023 jmp 00007F52C0BB1885h 0x00000028 push eax 0x00000029 jnp 00007F52C0BB188Dh 0x0000002f pushad 0x00000030 push eax 0x00000031 push edx 0x00000032 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D8CF9F second address: D8CFB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F52C0D3C123h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D8C15C second address: D8C173 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F52C0BB1876h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c pop eax 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D8C173 second address: D8C178 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D8DF41 second address: D8DF55 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F52C0BB1880h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D8DF55 second address: D8DFB4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0D3C11Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push ebx 0x0000000f call 00007F52C0D3C118h 0x00000014 pop ebx 0x00000015 mov dword ptr [esp+04h], ebx 0x00000019 add dword ptr [esp+04h], 00000014h 0x00000021 inc ebx 0x00000022 push ebx 0x00000023 ret 0x00000024 pop ebx 0x00000025 ret 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push edi 0x0000002b call 00007F52C0D3C118h 0x00000030 pop edi 0x00000031 mov dword ptr [esp+04h], edi 0x00000035 add dword ptr [esp+04h], 0000001Bh 0x0000003d inc edi 0x0000003e push edi 0x0000003f ret 0x00000040 pop edi 0x00000041 ret 0x00000042 push 00000000h 0x00000044 mov di, bx 0x00000047 xchg eax, esi 0x00000048 push edi 0x00000049 push eax 0x0000004a push edx 0x0000004b push edx 0x0000004c pop edx 0x0000004d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D8F0FE second address: D8F102 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D90FD0 second address: D90FDB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D8F102 second address: D8F1A2 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F52C0BB1878h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push ebx 0x00000010 call 00007F52C0BB1878h 0x00000015 pop ebx 0x00000016 mov dword ptr [esp+04h], ebx 0x0000001a add dword ptr [esp+04h], 0000001Ch 0x00000022 inc ebx 0x00000023 push ebx 0x00000024 ret 0x00000025 pop ebx 0x00000026 ret 0x00000027 jmp 00007F52C0BB1880h 0x0000002c push dword ptr fs:[00000000h] 0x00000033 sbb bh, 0000006Eh 0x00000036 mov dword ptr fs:[00000000h], esp 0x0000003d jmp 00007F52C0BB187Ah 0x00000042 mov eax, dword ptr [ebp+13BC0379h] 0x00000048 cld 0x00000049 push FFFFFFFFh 0x0000004b or dword ptr [ebp+13D3D962h], ecx 0x00000051 mov edi, dword ptr [ebp+13BC2AC6h] 0x00000057 nop 0x00000058 push edx 0x00000059 jl 00007F52C0BB1882h 0x0000005f jmp 00007F52C0BB187Ch 0x00000064 pop edx 0x00000065 push eax 0x00000066 push eax 0x00000067 push edx 0x00000068 push ebx 0x00000069 jmp 00007F52C0BB1883h 0x0000006e pop ebx 0x0000006f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D8F1A2 second address: D8F1B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F52C0D3C11Bh 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D8F1B1 second address: D8F1B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D92FBF second address: D92FD5 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F52C0D3C11Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D92FD5 second address: D92FD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D92FD9 second address: D92FDD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D92FDD second address: D9302E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F52C0BB187Dh 0x0000000b popad 0x0000000c nop 0x0000000d mov ebx, dword ptr [ebp+13BC2986h] 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push ebx 0x00000018 call 00007F52C0BB1878h 0x0000001d pop ebx 0x0000001e mov dword ptr [esp+04h], ebx 0x00000022 add dword ptr [esp+04h], 00000015h 0x0000002a inc ebx 0x0000002b push ebx 0x0000002c ret 0x0000002d pop ebx 0x0000002e ret 0x0000002f mov dword ptr [ebp+13BC3564h], ebx 0x00000035 push 00000000h 0x00000037 push ebx 0x00000038 mov edi, ecx 0x0000003a pop edi 0x0000003b xchg eax, esi 0x0000003c push eax 0x0000003d push edx 0x0000003e push eax 0x0000003f push edx 0x00000040 jp 00007F52C0BB1876h 0x00000046 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D9302E second address: D93034 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D93034 second address: D9303E instructions: 0x00000000 rdtsc 0x00000002 je 00007F52C0BB187Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D93F37 second address: D93F3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D93F3C second address: D93F6A instructions: 0x00000000 rdtsc 0x00000002 jns 00007F52C0BB1887h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jmp 00007F52C0BB187Eh 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D9310E second address: D93114 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D93114 second address: D93118 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D2E440 second address: D2E44C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F52C0D3C116h 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D964C0 second address: D964D2 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 js 00007F52C0BB187Eh 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D964D2 second address: D96523 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 nop 0x00000006 push 00000000h 0x00000008 mov dword ptr [ebp+13BC2CB9h], ecx 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push edx 0x00000013 call 00007F52C0D3C118h 0x00000018 pop edx 0x00000019 mov dword ptr [esp+04h], edx 0x0000001d add dword ptr [esp+04h], 0000001Ah 0x00000025 inc edx 0x00000026 push edx 0x00000027 ret 0x00000028 pop edx 0x00000029 ret 0x0000002a mov dword ptr [ebp+13D68B68h], edx 0x00000030 mov ebx, dword ptr [ebp+13BC1B7Eh] 0x00000036 xchg eax, esi 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b jmp 00007F52C0D3C11Eh 0x00000040 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D96523 second address: D96529 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D9668C second address: D966A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0D3C126h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D984E3 second address: D984F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F52C0BB187Dh 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D9A5A9 second address: D9A5AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D9A5AF second address: D9A5B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D98708 second address: D98712 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F52C0D3C116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D9A5B3 second address: D9A5BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D9A5BD second address: D9A5CA instructions: 0x00000000 rdtsc 0x00000002 jo 00007F52C0D3C116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D9A5CA second address: D9A5D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D368A4 second address: D368AA instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D368AA second address: D368BE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0BB187Fh 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DA06B3 second address: DA06C1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DA06C1 second address: DA06DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F52C0BB1885h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DA0841 second address: DA084B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DB09DB second address: DB09E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DB09E1 second address: DB09E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DB09E7 second address: DB09EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DB6434 second address: DB6450 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0D3C124h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DB6450 second address: DB646A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F52C0BB1886h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DB646A second address: DB6489 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F52C0D3C129h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DB6489 second address: DB64BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0BB187Fh 0x00000007 jmp 00007F52C0BB1889h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DB64BD second address: DB64C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DB64C1 second address: DB64D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnl 00007F52C0BB187Ch 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DB64D3 second address: DB64FF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F52C0D3C126h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a jl 00007F52C0D3C116h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 jo 00007F52C0D3C116h 0x0000001b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DB5925 second address: DB592C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DB592C second address: DB593E instructions: 0x00000000 rdtsc 0x00000002 jp 00007F52C0D3C11Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DB5BB3 second address: DB5BD1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0BB1889h 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DBB82A second address: DBB843 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F52C0D3C124h 0x00000009 pop edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DBB843 second address: DBB84D instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F52C0BB1882h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D3832F second address: D38333 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DBA6D9 second address: DBA6E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7BEE1 second address: D7BEE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7BEE5 second address: D614B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 nop 0x00000008 mov edx, dword ptr [ebp+13BC2D0Fh] 0x0000000e xor dword ptr [ebp+13BC2F1Ch], ebx 0x00000014 call dword ptr [ebp+13BC2D63h] 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7C341 second address: D7C347 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7C347 second address: D7C34B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7C3F4 second address: D7C3FA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7C3FA second address: D7C400 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7C400 second address: D7C404 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7C404 second address: D7C408 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7C63C second address: D7C656 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F52C0D3C122h 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7C701 second address: D7C706 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7CCE5 second address: D7CCEF instructions: 0x00000000 rdtsc 0x00000002 je 00007F52C0D3C11Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7CFEB second address: D7CFF0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7CFF0 second address: D7D004 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007F52C0D3C118h 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D7D004 second address: D7D06B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F52C0BB1889h 0x00000008 push edx 0x00000009 pop edx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e push 00000000h 0x00000010 push ebp 0x00000011 call 00007F52C0BB1878h 0x00000016 pop ebp 0x00000017 mov dword ptr [esp+04h], ebp 0x0000001b add dword ptr [esp+04h], 00000018h 0x00000023 inc ebp 0x00000024 push ebp 0x00000025 ret 0x00000026 pop ebp 0x00000027 ret 0x00000028 lea eax, dword ptr [ebp+13D6BC2Fh] 0x0000002e jmp 00007F52C0BB1886h 0x00000033 nop 0x00000034 pushad 0x00000035 push eax 0x00000036 pushad 0x00000037 popad 0x00000038 pop eax 0x00000039 push edx 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DBAB44 second address: DBAB60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F52C0D3C116h 0x0000000a jmp 00007F52C0D3C122h 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DBAB60 second address: DBAB6A instructions: 0x00000000 rdtsc 0x00000002 je 00007F52C0BB1876h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DBAF46 second address: DBAF4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DBAF4C second address: DBAF55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DBAF55 second address: DBAF80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 popad 0x00000008 push esi 0x00000009 push edx 0x0000000a js 00007F52C0D3C116h 0x00000010 pop edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F52C0D3C128h 0x00000018 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DBB1F7 second address: DBB203 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F52C0BB1876h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D6216C second address: D62177 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pushad 0x00000009 popad 0x0000000a pop ebx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DC02C6 second address: DC02CB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DBF8C7 second address: DBF8CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DBF8CD second address: DBF8D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F52C0BB1876h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DBF8D7 second address: DBF8E6 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F52C0D3C116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DBF8E6 second address: DBF90B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F52C0BB187Ah 0x0000000e jng 00007F52C0BB1882h 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DC05FC second address: DC060B instructions: 0x00000000 rdtsc 0x00000002 jng 00007F52C0D3C116h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DC060B second address: DC0612 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DC0612 second address: DC0617 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DC0763 second address: DC076F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 jng 00007F52C0BB1876h 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DC076F second address: DC0783 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F52C0D3C116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push esi 0x0000000c pop esi 0x0000000d pop edi 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 push esi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DC0904 second address: DC0908 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DCBDE4 second address: DCBDEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DCBDEA second address: DCBE0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F52C0BB1888h 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DCC1FB second address: DCC1FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DCC1FF second address: DCC209 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DCC209 second address: DCC20F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DCC20F second address: DCC215 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DCC215 second address: DCC224 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jp 00007F52C0D3C116h 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DCC4CE second address: DCC4D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DCC4D2 second address: DCC518 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007F52C0D3C118h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f push ecx 0x00000010 push edi 0x00000011 jmp 00007F52C0D3C11Dh 0x00000016 jmp 00007F52C0D3C11Eh 0x0000001b pop edi 0x0000001c pushad 0x0000001d jmp 00007F52C0D3C126h 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DCC518 second address: DCC51E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DCCA98 second address: DCCAB6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0D3C127h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DCF8E2 second address: DCF8E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DCF8E8 second address: DCF8EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DCF605 second address: DCF619 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F52C0BB187Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DCF619 second address: DCF61F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DCF61F second address: DCF623 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DCF623 second address: DCF64A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0D3C121h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push edx 0x00000010 jnc 00007F52C0D3C116h 0x00000016 pop edx 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a pop edx 0x0000001b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD2866 second address: DD2874 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007F52C0BB187Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD211B second address: DD212C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jo 00007F52C0D3C116h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD212C second address: DD2140 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F52C0BB1880h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD2140 second address: DD2146 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD2146 second address: DD215B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jmp 00007F52C0BB187Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD215B second address: DD2164 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD22A9 second address: DD22AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD22AF second address: DD22B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD22B5 second address: DD22D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F52C0BB1887h 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD22D3 second address: DD22D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD2593 second address: DD2597 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD2597 second address: DD25AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push esi 0x0000000a jno 00007F52C0D3C116h 0x00000010 pop esi 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD25AE second address: DD25C5 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F52C0BB1876h 0x00000008 jne 00007F52C0BB1876h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 push edx 0x00000014 pop edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD25C5 second address: DD25CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD6910 second address: DD6915 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD6BB2 second address: DD6BBC instructions: 0x00000000 rdtsc 0x00000002 jo 00007F52C0D3C116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD6BBC second address: DD6BDC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0BB1888h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD6E84 second address: DD6E8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F52C0D3C116h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD6E8E second address: DD6E92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD6E92 second address: DD6EA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edi 0x00000009 pushad 0x0000000a pushad 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DD6FFD second address: DD7049 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0BB1883h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F52C0BB1885h 0x0000000e push eax 0x0000000f push edx 0x00000010 jnp 00007F52C0BB1876h 0x00000016 jmp 00007F52C0BB1888h 0x0000001b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DDA0DE second address: DDA0E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DDA0E6 second address: DDA0EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DDA0EB second address: DDA0F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DDA0F1 second address: DDA104 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jns 00007F52C0BB1876h 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DDA104 second address: DDA11A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0D3C122h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DDA11A second address: DDA120 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DDA120 second address: DDA124 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DDA124 second address: DDA146 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F52C0BB1888h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DDA146 second address: DDA14A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE2023 second address: DE2027 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE2027 second address: DE202D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE0AD0 second address: DE0AD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE0AD5 second address: DE0AFF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 je 00007F52C0D3C116h 0x00000009 jmp 00007F52C0D3C128h 0x0000000e pop edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jc 00007F52C0D3C116h 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE0AFF second address: DE0B03 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE0B03 second address: DE0B11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE0B11 second address: DE0B15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE0B15 second address: DE0B4B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0D3C125h 0x00000007 jmp 00007F52C0D3C121h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jmp 00007F52C0D3C11Ch 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE0DB7 second address: DE0DBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE0DBB second address: DE0DC5 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F52C0D3C116h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE0DC5 second address: DE0DCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE0DCE second address: DE0DD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE0DD6 second address: DE0DDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE0F29 second address: DE0F33 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F52C0D3C116h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE3676 second address: DE367C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D2FEE0 second address: D2FEE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE96A7 second address: DE96AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE96AD second address: DE96BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0D3C11Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE96BB second address: DE96D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0BB1887h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE99F4 second address: DE99F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE99F8 second address: DE9A3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F52C0BB1882h 0x0000000d pushad 0x0000000e jmp 00007F52C0BB187Ah 0x00000013 jmp 00007F52C0BB1886h 0x00000018 popad 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE9A3B second address: DE9A41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE9A41 second address: DE9A5F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F52C0BB187Dh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push esi 0x0000000d pop esi 0x0000000e jnc 00007F52C0BB1876h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE9A5F second address: DE9A64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE9CEB second address: DE9CFB instructions: 0x00000000 rdtsc 0x00000002 jp 00007F52C0BB1876h 0x00000008 jg 00007F52C0BB1876h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE9F7D second address: DE9F83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE9F83 second address: DE9FC8 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F52C0BB1876h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push edi 0x0000000c pop edi 0x0000000d jl 00007F52C0BB1876h 0x00000013 jmp 00007F52C0BB187Ch 0x00000018 popad 0x00000019 pop esi 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F52C0BB1884h 0x00000021 push eax 0x00000022 push edx 0x00000023 jg 00007F52C0BB1876h 0x00000029 jno 00007F52C0BB1876h 0x0000002f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DE9FC8 second address: DE9FD4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jnc 00007F52C0D3C116h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DEA2A1 second address: DEA2A7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DEA56A second address: DEA58E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F52C0D3C11Ah 0x00000008 jmp 00007F52C0D3C11Fh 0x0000000d jg 00007F52C0D3C116h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DEA58E second address: DEA59B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007F52C0BB1876h 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DEAB88 second address: DEAB96 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F52C0D3C116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DEAB96 second address: DEABA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F52C0BB1876h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DEABA0 second address: DEABAA instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F52C0D3C116h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DEAE34 second address: DEAE3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DEAE3A second address: DEAE44 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F52C0D3C116h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DEB3D9 second address: DEB3DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DEB3DD second address: DEB3E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DEB3E1 second address: DEB409 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jne 00007F52C0BB1876h 0x0000000d pop edi 0x0000000e pushad 0x0000000f jmp 00007F52C0BB1887h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF3E99 second address: DF3E9F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF3E9F second address: DF3ECA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007F52C0BB187Eh 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F52C0BB1884h 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF2E77 second address: DF2E88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 js 00007F52C0D3C116h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF2E88 second address: DF2EA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b jmp 00007F52C0BB1881h 0x00000010 pop edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF2EA9 second address: DF2EAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF2EAD second address: DF2EBD instructions: 0x00000000 rdtsc 0x00000002 ja 00007F52C0BB1876h 0x00000008 jng 00007F52C0BB1876h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF2EBD second address: DF2ECB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jns 00007F52C0D3C116h 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF3034 second address: DF3041 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 js 00007F52C0BB1876h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF3041 second address: DF3066 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F52C0D3C128h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF3066 second address: DF3092 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F52C0BB1883h 0x00000009 jne 00007F52C0BB1876h 0x0000000f popad 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 je 00007F52C0BB187Ch 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF3202 second address: DF3206 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF3206 second address: DF3238 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F52C0BB1876h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007F52C0BB1880h 0x00000010 jmp 00007F52C0BB1885h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF3397 second address: DF339B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF3675 second address: DF3695 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F52C0BB1886h 0x00000009 jne 00007F52C0BB1876h 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF37FD second address: DF3802 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF3802 second address: DF380A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DFB7F3 second address: DFB803 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F52C0D3C116h 0x0000000a jnl 00007F52C0D3C116h 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF9A79 second address: DF9A7E instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF9A7E second address: DF9A8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pushad 0x00000008 jbe 00007F52C0D3C116h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF9F12 second address: DF9F3D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0BB187Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jno 00007F52C0BB1886h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF9F3D second address: DF9F41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF9F41 second address: DF9F45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF9F45 second address: DF9F4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF9F4F second address: DF9F59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F52C0BB1876h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DF9F59 second address: DF9F5D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DFA1F6 second address: DFA213 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0BB1883h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c push edx 0x0000000d pop edx 0x0000000e pop ebx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DFA213 second address: DFA218 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DFA52F second address: DFA533 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DFA533 second address: DFA539 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DFA539 second address: DFA543 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DFA543 second address: DFA549 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DFAD0B second address: DFAD15 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DFAD15 second address: DFAD41 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jl 00007F52C0D3C127h 0x00000011 jmp 00007F52C0D3C121h 0x00000016 jp 00007F52C0D3C11Ah 0x0000001c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DFAD41 second address: DFAD53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F52C0BB187Eh 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DFAD53 second address: DFAD59 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DFB642 second address: DFB64D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DFB64D second address: DFB678 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F52C0D3C116h 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d jmp 00007F52C0D3C129h 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DFB678 second address: DFB68B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F52C0BB187Ah 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: DFB68B second address: DFB68F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D409B9 second address: D409BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D409BF second address: D409C8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop ecx 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E02743 second address: E02755 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F52C0BB187Ah 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E02755 second address: E02759 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E0E637 second address: E0E63B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E12807 second address: E1283E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0D3C129h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F52C0D3C127h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E1283E second address: E12846 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E1742A second address: E1742E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E1742E second address: E17432 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E17432 second address: E17438 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E17583 second address: E175A8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0BB187Ah 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jo 00007F52C0BB1876h 0x00000012 jmp 00007F52C0BB187Ch 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E175A8 second address: E175AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2405D second address: E24063 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E24063 second address: E24069 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2D960 second address: E2D965 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2D965 second address: E2D988 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007F52C0D3C116h 0x00000009 jmp 00007F52C0D3C120h 0x0000000e jns 00007F52C0D3C116h 0x00000014 popad 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2D988 second address: E2D9AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F52C0BB1888h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2D9AF second address: E2D9BB instructions: 0x00000000 rdtsc 0x00000002 jl 00007F52C0D3C116h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2D9BB second address: E2D9D2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push esi 0x00000004 pop esi 0x00000005 jmp 00007F52C0BB187Dh 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2D9D2 second address: E2D9D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2DB35 second address: E2DB3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2DB3B second address: E2DB3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2DB3F second address: E2DB49 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F52C0BB1876h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2DB49 second address: E2DB6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F52C0D3C11Dh 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jl 00007F52C0D3C14Bh 0x00000011 push eax 0x00000012 push edx 0x00000013 jno 00007F52C0D3C116h 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2DCCF second address: E2DCD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2DE70 second address: E2DE7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F52C0D3C116h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2DE7A second address: E2DEAA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0BB1889h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F52C0BB1880h 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2DEAA second address: E2DEB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2E35B second address: E2E35F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2E35F second address: E2E365 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2E365 second address: E2E36A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2E36A second address: E2E370 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2E370 second address: E2E38E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F52C0BB1888h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E2ED87 second address: E2ED9C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jng 00007F52C0D3C116h 0x00000009 pushad 0x0000000a popad 0x0000000b pop edi 0x0000000c push edi 0x0000000d je 00007F52C0D3C116h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E31E6E second address: E31E82 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0BB1880h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E31ADF second address: E31AF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jc 00007F52C0D3C116h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push esi 0x0000000e pop esi 0x0000000f push edi 0x00000010 pop edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E31AF2 second address: E31B14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 pushad 0x00000009 pushad 0x0000000a jns 00007F52C0BB1876h 0x00000010 push eax 0x00000011 pop eax 0x00000012 jmp 00007F52C0BB187Eh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E4B5FA second address: E4B608 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 jg 00007F52C0D3C116h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E4B608 second address: E4B617 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 jne 00007F52C0BB1889h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E53A41 second address: E53A48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E53E7B second address: E53E82 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E54107 second address: E5410D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E5410D second address: E54117 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E54117 second address: E5411D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E5411D second address: E54121 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E54121 second address: E5412B instructions: 0x00000000 rdtsc 0x00000002 jno 00007F52C0D3C116h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: E575BE second address: E575E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0BB1889h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e js 00007F52C0BB1876h 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D801E0 second address: D801E6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D801E6 second address: D801EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D8039D second address: D803AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F52C0D3C11Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: D803AE second address: D803B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F52C0BB1876h 0x0000000a rdtsc |
Edit tour
file.exe (PID: 7588 cmdline: 
WerFault.exe (PID: 8 cmdline: 
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node