Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00409B60 CryptUnprotectData,LocalAlloc,memcpy,LocalFree, |
1_2_00409B60 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040C820 memset,lstrlenA,CryptStringToBinaryA,PK11_GetInternalKeySlot,PK11_Authenticate,PK11SDR_Decrypt,memcpy,lstrcatA,lstrcatA,PK11_FreeSlot,lstrcatA, |
1_2_0040C820 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00407240 GetProcessHeap,HeapAlloc,CryptUnprotectData,WideCharToMultiByte,LocalFree, |
1_2_00407240 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00409AC0 CryptStringToBinaryA,LocalAlloc,CryptStringToBinaryA,LocalFree, |
1_2_00409AC0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00418EA0 CryptBinaryToStringA,GetProcessHeap,HeapAlloc,CryptBinaryToStringA, |
1_2_00418EA0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C4F6C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer, |
1_2_6C4F6C80 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C64A9A0 PK11SDR_Decrypt,PORT_NewArena_Util,SEC_QuickDERDecodeItem_Util,PORT_FreeArena_Util,SECITEM_ZfreeItem_Util,PK11_GetInternalKeySlot,PK11_Authenticate,PORT_FreeArena_Util,PK11_ListFixedKeysInSlot,SECITEM_ZfreeItem_Util,PK11_FreeSymKey,PK11_FreeSymKey,PORT_FreeArena_Util,PK11_FreeSymKey,SECITEM_ZfreeItem_Util, |
1_2_6C64A9A0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C644440 PK11_PrivDecrypt, |
1_2_6C644440 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C614420 SECKEY_DestroyEncryptedPrivateKeyInfo,memset,PORT_FreeArena_Util,SECITEM_ZfreeItem_Util,SECITEM_ZfreeItem_Util,SECITEM_ZfreeItem_Util,free, |
1_2_6C614420 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C6444C0 PK11_PubEncrypt, |
1_2_6C6444C0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C6925B0 PK11_Encrypt,memcpy,PR_SetError,PK11_Encrypt, |
1_2_6C6925B0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C628670 PK11_ExportEncryptedPrivKeyInfo, |
1_2_6C628670 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C64A650 PK11SDR_Encrypt,PORT_NewArena_Util,PK11_GetInternalKeySlot,PK11_Authenticate,SECITEM_ZfreeItem_Util,TlsGetValue,EnterCriticalSection,PR_Unlock,PK11_CreateContextBySymKey,PK11_GetBlockSize,PORT_Alloc_Util,memcpy,SECITEM_ZfreeItem_Util,PORT_FreeArena_Util,SECITEM_ZfreeItem_Util,PK11_FreeSymKey,PORT_ArenaAlloc_Util,PK11_CipherOp,SEC_ASN1EncodeItem_Util,SECITEM_ZfreeItem_Util,PORT_FreeArena_Util,PK11_DestroyContext, |
1_2_6C64A650 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C62E6E0 PK11_AEADOp,TlsGetValue,EnterCriticalSection,PORT_Alloc_Util,PK11_Encrypt,PORT_Alloc_Util,memcpy,memcpy,PR_SetError,PR_SetError,PR_Unlock,PR_SetError,PR_Unlock,PK11_Decrypt,PR_GetCurrentThread,PK11_Decrypt,PK11_Encrypt,memcpy,memcpy,PR_SetError,free, |
1_2_6C62E6E0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_6C66A730 SEC_PKCS12AddCertAndKey,PORT_ArenaMark_Util,PORT_ArenaMark_Util,PK11_FindKeyByAnyCert,SECKEY_DestroyPrivateKey,PORT_ArenaAlloc_Util,PR_SetError,PR_SetError,PK11_GetInternalKeySlot,PK11_FindKeyByAnyCert,SECKEY_DestroyPrivateKey,PORT_ArenaAlloc_Util,SECKEY_DestroyEncryptedPrivateKeyInfo,strlen,PR_SetError,PORT_FreeArena_Util,PORT_FreeArena_Util,PORT_ArenaAlloc_Util,PR_SetError, |
1_2_6C66A730 |
Source: C:\Users\user\Desktop\FdjDPFGTZS.exe |
Code function: 0_2_00E39ABF FindFirstFileExW, |
0_2_00E39ABF |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040E430 FindFirstFileA,StrCmpCA,StrCmpCA,FindNextFileA, |
1_2_0040E430 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00414910 wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,wsprintfA,StrCmpCA,wsprintfA,wsprintfA,PathMatchSpecA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,CopyFileA,DeleteFileA,FindNextFileA,FindClose, |
1_2_00414910 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040BE70 FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,DeleteFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,StrCmpCA,DeleteFileA,StrCmpCA,FindNextFileA,FindClose, |
1_2_0040BE70 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_004016D0 FindFirstFileA,StrCmpCA,StrCmpCA,CopyFileA,DeleteFileA,FindNextFileA,FindClose, |
1_2_004016D0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040DA80 FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,StrCmpCA,FindNextFileA,FindClose, |
1_2_0040DA80 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00413EA0 wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,lstrcatA,FindNextFileA,FindClose, |
1_2_00413EA0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040F6B0 FindFirstFileA,StrCmpCA,StrCmpCA,StrCmpCA,CopyFileA,DeleteFileA,FindNextFileA,FindClose, |
1_2_0040F6B0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_004138B0 wsprintfA,FindFirstFileA,lstrcatA,StrCmpCA,StrCmpCA,wsprintfA,PathMatchSpecA,CoInitialize,CoUninitialize,lstrcatA,lstrlenA,StrCmpCA,wsprintfA,wsprintfA,PathMatchSpecA,wsprintfA,CopyFileA,__ehfuncinfo$??2@YAPAXIABUnothrow_t@std@@@Z,DeleteFileA,FindNextFileA,FindClose, |
1_2_004138B0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_00414570 GetProcessHeap,HeapAlloc,wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,wsprintfA,CopyFileA,DeleteFileA,FindNextFileA,FindClose,lstrcatA,lstrcatA,lstrlenA,lstrlenA, |
1_2_00414570 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040ED20 wsprintfA,FindFirstFileA,StrCmpCA,StrCmpCA,lstrlenA,DeleteFileA,CopyFileA,FindNextFileA,FindClose, |
1_2_0040ED20 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 1_2_0040DE10 FindFirstFileA,StrCmpCA,StrCmpCA,CopyFileA,DeleteFileA,FindNextFileA,FindClose, |
1_2_0040DE10 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 11_2_00A79ABF FindFirstFileExW, |
11_2_00A79ABF |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esp+0Ch] |
11_2_00ABA0B9 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then movzx ebx, word ptr [ecx] |
11_2_00AB8051 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov dword ptr [esp], 00000000h |
11_2_00AA82E8 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov word ptr [eax], cx |
11_2_00AAA3BF |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], 7789B0CBh |
11_2_00AD43F8 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then movzx eax, word ptr [esi+ecx] |
11_2_00ACE318 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then movzx ecx, word ptr [edi+eax] |
11_2_00AD45E8 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then movzx ebx, byte ptr [edx] |
11_2_00AC8528 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
11_2_00ABA687 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
11_2_00AD2601 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, ebx |
11_2_00AA264D |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov word ptr [eax], cx |
11_2_00AB665F |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 62429966h |
11_2_00AD07F8 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh |
11_2_00AD68A8 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], F8FD61B8h |
11_2_00AAC89C |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov byte ptr [edi], al |
11_2_00AC0813 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp word ptr [ecx+eax+02h], 0000h |
11_2_00AAA86A |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then jmp dword ptr [0044FDB4h] |
11_2_00AA2849 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then jmp eax |
11_2_00A9E9A5 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then movzx edx, byte ptr [esi+ebx] |
11_2_00A92928 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esi+30h] |
11_2_00AC093D |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then jmp eax |
11_2_00A9E914 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esp+40h] |
11_2_00A9EAC6 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp word ptr [ebp+edi+02h], 0000h |
11_2_00AB4AD8 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh |
11_2_00AD6A38 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esp+000006B8h] |
11_2_00AAAA47 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
11_2_00AD6BB8 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp dword ptr [ebp+edx*8+00h], 9ECF05EBh |
11_2_00AD6BB8 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov byte ptr [edi], al |
11_2_00AC0B22 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], A70A987Fh |
11_2_00ACCB36 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esp+04h] |
11_2_00A9CB78 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov byte ptr [edi], al |
11_2_00AC0B43 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
11_2_00ABAC81 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then movzx ecx, word ptr [ebp+00h] |
11_2_00A98D88 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov word ptr [eax], cx |
11_2_00AB4D38 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esp+40h] |
11_2_00A9ED6B |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
11_2_00AB2D48 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then jmp ecx |
11_2_00AD2EAE |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov word ptr [edx], 0000h |
11_2_00AACEB7 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], F3285E74h |
11_2_00AD4E98 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
11_2_00AD4E98 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then jmp eax |
11_2_00AB6EC4 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
11_2_00ACCE48 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov dword ptr [esp+1Ch], 5E46585Eh |
11_2_00ABCF30 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esi+30h] |
11_2_00AC0F18 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esi+14h] |
11_2_00AC0F18 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], F3285E74h |
11_2_00AD0F18 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then jmp ecx |
11_2_00AD2F6C |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esi+04h] |
11_2_00AA0F6F |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov ebp, eax |
11_2_00A971D8 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov word ptr [eax], dx |
11_2_00AAF138 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov word ptr [esi], ax |
11_2_00AAF138 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esi+30h] |
11_2_00ABF2B8 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], C274D4CAh |
11_2_00AD3290 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esp+0Ch] |
11_2_00AB93AF |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], C274D4CAh |
11_2_00AD3390 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esi+04h] |
11_2_00AA340E |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then movzx ebx, byte ptr [ecx+esi+25h] |
11_2_00A95468 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
11_2_00ABB56A |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov word ptr [eax], dx |
11_2_00AAF540 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esp+08h] |
11_2_00AD36C7 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], F3285E74h |
11_2_00AB5824 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], 27BAF212h |
11_2_00AD3833 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then movzx edx, byte ptr [esi+edi] |
11_2_00A91878 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], F3285E74h |
11_2_00AD1918 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov ebx, dword ptr [edi+04h] |
11_2_00ABDA58 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], C85F7986h |
11_2_00AB9BA8 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
11_2_00AB9BA8 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], C85F7986h |
11_2_00AB9BA8 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp word ptr [eax+esi+02h], 0000h |
11_2_00ABBB20 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov word ptr [edx], ax |
11_2_00AB7B69 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then jmp eax |
11_2_00AB7B48 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then cmp byte ptr [ebx], 00000000h |
11_2_00AA3CBA |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then jmp eax |
11_2_00AB5C1B |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
11_2_00AD5C62 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-10h] |
11_2_00A9DDC4 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov edi, ecx |
11_2_00AA1D02 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then movzx edi, byte ptr [ecx+esi] |
11_2_00A93D78 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov ecx, dword ptr [edx] |
11_2_00A8DED8 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esi+20h] |
11_2_00AA3E69 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then jmp ecx |
11_2_00A95FB0 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
11_2_00A99FE8 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
11_2_00A99FE8 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esi+30h] |
11_2_00ABFFD5 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then dec ebx |
11_2_00ACBF08 |
Source: C:\Users\userCAFIEBKKJJ.exe |
Code function: 4x nop then mov eax, dword ptr [esi+30h] |
11_2_00ABFF74 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
12_2_0040D110 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
12_2_0040D110 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], C274D4CAh |
12_2_004463B8 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
12_2_00445700 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], 27BAF212h |
12_2_0044695B |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+04h] |
12_2_0040FCA0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-10h] |
12_2_00410EEC |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], F3285E74h |
12_2_00444040 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov ecx, dword ptr [edx] |
12_2_00401000 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+20h] |
12_2_00416F91 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then dec ebx |
12_2_0043F030 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then jmp ecx |
12_2_00446094 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+0Ch] |
12_2_0042D1E1 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [eax], dx |
12_2_00422260 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [esi], ax |
12_2_00422260 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+04h] |
12_2_004142FC |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov ebp, eax |
12_2_0040A300 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+30h] |
12_2_004323E0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+30h] |
12_2_004323E0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+30h] |
12_2_004323E0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov byte ptr [edi], al |
12_2_004323E0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+30h] |
12_2_004323E0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+14h] |
12_2_004323E0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx eax, word ptr [esi+ecx] |
12_2_00441440 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [eax], cx |
12_2_0041D457 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+0Ch] |
12_2_0042C470 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
12_2_0042E40C |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov dword ptr [esp], 00000000h |
12_2_0041B410 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], C274D4CAh |
12_2_004464B8 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [eax], cx |
12_2_00429510 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], 7789B0CBh |
12_2_00447520 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+04h] |
12_2_00416536 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx ebx, byte ptr [ecx+esi+25h] |
12_2_00408590 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx ebx, byte ptr [edx] |
12_2_0043B650 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
12_2_0042E66A |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx ecx, word ptr [edi+eax] |
12_2_00447710 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+08h] |
12_2_004467EF |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
12_2_0042D7AF |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [eax], dx |
12_2_004228E9 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp word ptr [ecx+eax+02h], 0000h |
12_2_0041D961 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 62429966h |
12_2_00443920 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh |
12_2_004499D0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx edx, byte ptr [esi+edi] |
12_2_004049A0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], F3285E74h |
12_2_00444A40 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx edx, byte ptr [esi+ebx] |
12_2_00405A50 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then jmp eax |
12_2_00411A3C |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then jmp eax |
12_2_00411ACD |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh |
12_2_00449B60 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+000006B8h] |
12_2_0041DB6F |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], F8FD61B8h |
12_2_0041DB6F |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+04h] |
12_2_00413BE2 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+40h] |
12_2_00411BEE |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov ebx, dword ptr [edi+04h] |
12_2_00430B80 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp word ptr [eax+esi+02h], 0000h |
12_2_0042EC48 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp word ptr [ebp+edi+02h], 0000h |
12_2_00427C00 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [ebx+edx*8], A70A987Fh |
12_2_0043FC20 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [esi+edx*8], C85F7986h |
12_2_0042CCD0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
12_2_0042CCD0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], C85F7986h |
12_2_0042CCD0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
12_2_00449CE0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [ebp+edx*8+00h], 9ECF05EBh |
12_2_00449CE0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then jmp eax |
12_2_0042AC91 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [edx], ax |
12_2_0042AC91 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov dword ptr [esp+1Ch], 5E46585Eh |
12_2_0042FD10 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [ebp-14h] |
12_2_0042DD29 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
12_2_00448D8A |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx ebx, word ptr [ecx] |
12_2_0042AE57 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [eax], cx |
12_2_00427E60 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
12_2_00425E70 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov edi, ecx |
12_2_00414E2A |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp+40h] |
12_2_00411E93 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx edi, byte ptr [ecx+esi] |
12_2_00406EA0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then movzx ecx, word ptr [ebp+00h] |
12_2_0040BEB0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp byte ptr [ebx], 00000000h |
12_2_00416EBF |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then jmp eax |
12_2_00429F62 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
12_2_0043FF70 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then cmp dword ptr [edi+edx*8], F3285E74h |
12_2_00447FC0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esp] |
12_2_00447FC0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then jmp ecx |
12_2_00408FD0 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then jmp ecx |
12_2_00445FD6 |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov word ptr [edx], 0000h |
12_2_0041FFDF |
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe |
Code function: 4x nop then mov eax, dword ptr [esi+20h] |
12_2_00416F91 |