| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5375DE second address: 5375EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 je 00007F18A106FA6Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5375EC second address: 5375F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push edi 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edi 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5375F6 second address: 5375FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 536612 second address: 536618 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 536779 second address: 536799 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F18A106FA7Ah 0x00000008 jmp 00007F18A106FA74h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 pop eax 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 536799 second address: 53679D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 536C20 second address: 536C26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 536C26 second address: 536C2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 536C2C second address: 536C30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 536EC8 second address: 536EFD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F18A0F7F0A9h 0x00000008 jng 00007F18A0F7F096h 0x0000000e jmp 00007F18A0F7F09Eh 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 539E20 second address: 539E8A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A106FA74h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push ecx 0x0000000f call 00007F18A106FA68h 0x00000014 pop ecx 0x00000015 mov dword ptr [esp+04h], ecx 0x00000019 add dword ptr [esp+04h], 00000014h 0x00000021 inc ecx 0x00000022 push ecx 0x00000023 ret 0x00000024 pop ecx 0x00000025 ret 0x00000026 mov esi, dword ptr [ebp+122D396Ah] 0x0000002c or dword ptr [ebp+122D1F7Ah], ecx 0x00000032 push 00000000h 0x00000034 mov dword ptr [ebp+122D369Bh], ecx 0x0000003a or edi, dword ptr [ebp+122D2B97h] 0x00000040 call 00007F18A106FA69h 0x00000045 push eax 0x00000046 push edx 0x00000047 jmp 00007F18A106FA6Eh 0x0000004c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 539E8A second address: 539F4B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A0F7F09Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ebx 0x0000000b push esi 0x0000000c jc 00007F18A0F7F096h 0x00000012 pop esi 0x00000013 pop ebx 0x00000014 mov eax, dword ptr [esp+04h] 0x00000018 jne 00007F18A0F7F0A0h 0x0000001e mov eax, dword ptr [eax] 0x00000020 jmp 00007F18A0F7F09Fh 0x00000025 mov dword ptr [esp+04h], eax 0x00000029 pushad 0x0000002a je 00007F18A0F7F098h 0x00000030 push eax 0x00000031 pop eax 0x00000032 jmp 00007F18A0F7F0A1h 0x00000037 popad 0x00000038 pop eax 0x00000039 adc ecx, 7667D1DBh 0x0000003f push 00000003h 0x00000041 mov edi, 5B473BB1h 0x00000046 push 00000000h 0x00000048 push 00000000h 0x0000004a push eax 0x0000004b call 00007F18A0F7F098h 0x00000050 pop eax 0x00000051 mov dword ptr [esp+04h], eax 0x00000055 add dword ptr [esp+04h], 00000014h 0x0000005d inc eax 0x0000005e push eax 0x0000005f ret 0x00000060 pop eax 0x00000061 ret 0x00000062 jmp 00007F18A0F7F09Bh 0x00000067 mov dword ptr [ebp+122D1C86h], esi 0x0000006d push 00000003h 0x0000006f ja 00007F18A0F7F0A6h 0x00000075 push 83722EFAh 0x0000007a jl 00007F18A0F7F0A4h 0x00000080 push eax 0x00000081 push edx 0x00000082 pushad 0x00000083 popad 0x00000084 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 539F4B second address: 539F4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 539F4F second address: 539FA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 xor dword ptr [esp], 43722EFAh 0x0000000d push 00000000h 0x0000000f push esi 0x00000010 call 00007F18A0F7F098h 0x00000015 pop esi 0x00000016 mov dword ptr [esp+04h], esi 0x0000001a add dword ptr [esp+04h], 0000001Dh 0x00000022 inc esi 0x00000023 push esi 0x00000024 ret 0x00000025 pop esi 0x00000026 ret 0x00000027 clc 0x00000028 mov dx, bx 0x0000002b lea ebx, dword ptr [ebp+1244FBE4h] 0x00000031 adc di, 3F11h 0x00000036 xchg eax, ebx 0x00000037 jnp 00007F18A0F7F09Eh 0x0000003d push eax 0x0000003e push edi 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 539FA5 second address: 539FA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 52C82B second address: 52C850 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F18A0F7F09Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F18A0F7F0A2h 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 52C850 second address: 52C859 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 557618 second address: 557621 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5578EE second address: 5578F7 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5578F7 second address: 557906 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jnp 00007F18A0F7F096h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 557906 second address: 557935 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 ja 00007F18A106FA66h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jnc 00007F18A106FA6Eh 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jp 00007F18A106FA6Eh 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 557935 second address: 557943 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18A0F7F09Ah 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 557943 second address: 557953 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A106FA6Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 557953 second address: 557959 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 557A8D second address: 557A93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 557C17 second address: 557C1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 557C1D second address: 557C30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F18A106FA6Ch 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 557C30 second address: 557C34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 557C34 second address: 557C44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F18A106FA66h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 52C81D second address: 52C82B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F18A0F7F096h 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 558135 second address: 55814A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18A106FA6Fh 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 55830F second address: 558315 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 54EAC8 second address: 54EAF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop eax 0x00000007 pushad 0x00000008 je 00007F18A106FA7Ch 0x0000000e jc 00007F18A106FA66h 0x00000014 jmp 00007F18A106FA70h 0x00000019 jbe 00007F18A106FA6Ch 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 54EAF4 second address: 54EB01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 ja 00007F18A0F7F096h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 54EB01 second address: 54EB07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 54EB07 second address: 54EB1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F18A0F7F0A0h 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5241B5 second address: 5241BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5241BB second address: 5241BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5241BF second address: 5241CF instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jng 00007F18A106FA68h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 55842D second address: 558437 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 558D01 second address: 558D05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 558D05 second address: 558D0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 558E5C second address: 558E61 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 558E61 second address: 558E7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007F18A0F7F09Bh 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 push edi 0x00000012 pop edi 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 55F036 second address: 55F03A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 55F84B second address: 55F84F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 56097A second address: 560983 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 565014 second address: 565020 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jc 00007F18A0F7F096h 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 565020 second address: 565024 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 565024 second address: 56502A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 51D46B second address: 51D488 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18A106FA75h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 51D488 second address: 51D4A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007F18A0F7F0ACh 0x0000000b jmp 00007F18A0F7F0A0h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 564E7C second address: 564EB3 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007F18A106FA71h 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push edi 0x0000000d push eax 0x0000000e pop eax 0x0000000f pop edi 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F18A106FA79h 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566EA1 second address: 566EAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566EAE second address: 566EB8 instructions: 0x00000000 rdtsc 0x00000002 je 00007F18A106FA66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566F27 second address: 566F2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566F2F second address: 566F3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c pop edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566F3C second address: 566F6B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e pushad 0x0000000f jmp 00007F18A0F7F0A2h 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F18A0F7F09Ch 0x0000001b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566F6B second address: 566FC5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A106FA75h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov eax, dword ptr [eax] 0x0000000c jmp 00007F18A106FA6Dh 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 jmp 00007F18A106FA75h 0x0000001a pop eax 0x0000001b movzx esi, cx 0x0000001e sub esi, dword ptr [ebp+122D2056h] 0x00000024 call 00007F18A106FA69h 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d popad 0x0000002e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566FC5 second address: 566FC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566FC9 second address: 566FD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566FD6 second address: 566FE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F18A0F7F096h 0x0000000a popad 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566FE1 second address: 567042 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F18A106FA6Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e pushad 0x0000000f pushad 0x00000010 jns 00007F18A106FA66h 0x00000016 jmp 00007F18A106FA6Fh 0x0000001b popad 0x0000001c push edi 0x0000001d jmp 00007F18A106FA6Ch 0x00000022 pop edi 0x00000023 popad 0x00000024 mov eax, dword ptr [eax] 0x00000026 push edx 0x00000027 jl 00007F18A106FA68h 0x0000002d pop edx 0x0000002e mov dword ptr [esp+04h], eax 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007F18A106FA72h 0x0000003b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 567042 second address: 567056 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A0F7F0A0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 567056 second address: 56705C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5671B9 second address: 5671BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5671BF second address: 5671C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5671C3 second address: 5671D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007F18A0F7F096h 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5671D6 second address: 5671E0 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F18A106FA66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 567533 second address: 567557 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jns 00007F18A0F7F0A4h 0x0000000b popad 0x0000000c push eax 0x0000000d push ecx 0x0000000e jl 00007F18A0F7F09Ch 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 569962 second address: 569967 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 56B632 second address: 56B638 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 56C16E second address: 56C174 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 56C174 second address: 56C181 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push edi 0x0000000a push edi 0x0000000b pop edi 0x0000000c pop edi 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 56C181 second address: 56C187 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 56CBF0 second address: 56CC7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 push eax 0x00000007 jmp 00007F18A0F7F0A2h 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push edi 0x00000010 call 00007F18A0F7F098h 0x00000015 pop edi 0x00000016 mov dword ptr [esp+04h], edi 0x0000001a add dword ptr [esp+04h], 00000018h 0x00000022 inc edi 0x00000023 push edi 0x00000024 ret 0x00000025 pop edi 0x00000026 ret 0x00000027 xor dword ptr [ebp+12470578h], esi 0x0000002d jns 00007F18A0F7F09Ch 0x00000033 push 00000000h 0x00000035 jmp 00007F18A0F7F09Dh 0x0000003a push 00000000h 0x0000003c push 00000000h 0x0000003e push edi 0x0000003f call 00007F18A0F7F098h 0x00000044 pop edi 0x00000045 mov dword ptr [esp+04h], edi 0x00000049 add dword ptr [esp+04h], 0000001Ah 0x00000051 inc edi 0x00000052 push edi 0x00000053 ret 0x00000054 pop edi 0x00000055 ret 0x00000056 adc si, 9700h 0x0000005b push eax 0x0000005c pushad 0x0000005d pushad 0x0000005e pushad 0x0000005f popad 0x00000060 push eax 0x00000061 push edx 0x00000062 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5705ED second address: 57060A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F18A106FA6Ch 0x0000000b popad 0x0000000c push eax 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 jl 00007F18A106FA66h 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 57154F second address: 571571 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F18A0F7F0A1h 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jns 00007F18A0F7F098h 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 57060A second address: 5706A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 nop 0x00000008 mov dword ptr [ebp+122D36BCh], edx 0x0000000e mov ebx, dword ptr [ebp+124787B0h] 0x00000014 push dword ptr fs:[00000000h] 0x0000001b call 00007F18A106FA76h 0x00000020 mov bx, 02C8h 0x00000024 pop edi 0x00000025 mov dword ptr fs:[00000000h], esp 0x0000002c mov dword ptr [ebp+122D1E2Eh], edx 0x00000032 mov eax, dword ptr [ebp+122D0339h] 0x00000038 push 00000000h 0x0000003a push eax 0x0000003b call 00007F18A106FA68h 0x00000040 pop eax 0x00000041 mov dword ptr [esp+04h], eax 0x00000045 add dword ptr [esp+04h], 00000017h 0x0000004d inc eax 0x0000004e push eax 0x0000004f ret 0x00000050 pop eax 0x00000051 ret 0x00000052 jnp 00007F18A106FA66h 0x00000058 push FFFFFFFFh 0x0000005a or ebx, dword ptr [ebp+122D39BEh] 0x00000060 nop 0x00000061 jmp 00007F18A106FA6Ch 0x00000066 push eax 0x00000067 pushad 0x00000068 jmp 00007F18A106FA6Bh 0x0000006d je 00007F18A106FA6Ch 0x00000073 push eax 0x00000074 push edx 0x00000075 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5737A0 second address: 5737A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5777FD second address: 577860 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push edi 0x0000000a jmp 00007F18A106FA77h 0x0000000f pop edi 0x00000010 nop 0x00000011 mov ebx, ecx 0x00000013 push dword ptr fs:[00000000h] 0x0000001a mov edi, dword ptr [ebp+122D37BEh] 0x00000020 mov dword ptr fs:[00000000h], esp 0x00000027 mov dword ptr [ebp+1244FC81h], esi 0x0000002d mov eax, dword ptr [ebp+122D04EDh] 0x00000033 jmp 00007F18A106FA71h 0x00000038 push FFFFFFFFh 0x0000003a mov ebx, 657654E6h 0x0000003f push eax 0x00000040 push esi 0x00000041 push eax 0x00000042 push edx 0x00000043 push eax 0x00000044 pop eax 0x00000045 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 579527 second address: 57953C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18A0F7F0A1h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 57953C second address: 579568 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A106FA6Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F18A106FA75h 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 579568 second address: 57956C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 57956C second address: 579575 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 57B775 second address: 57B77B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 57970C second address: 5797B2 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F18A106FA66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edi 0x0000000c pop edi 0x0000000d pop eax 0x0000000e popad 0x0000000f push eax 0x00000010 jmp 00007F18A106FA79h 0x00000015 nop 0x00000016 jmp 00007F18A106FA75h 0x0000001b push dword ptr fs:[00000000h] 0x00000022 mov edi, 56C1644Dh 0x00000027 mov dword ptr fs:[00000000h], esp 0x0000002e adc edi, 5FCEBF00h 0x00000034 mov eax, dword ptr [ebp+122D1381h] 0x0000003a push 00000000h 0x0000003c push edx 0x0000003d call 00007F18A106FA68h 0x00000042 pop edx 0x00000043 mov dword ptr [esp+04h], edx 0x00000047 add dword ptr [esp+04h], 0000001Ah 0x0000004f inc edx 0x00000050 push edx 0x00000051 ret 0x00000052 pop edx 0x00000053 ret 0x00000054 jp 00007F18A106FA67h 0x0000005a cld 0x0000005b or dword ptr [ebp+122D3345h], esi 0x00000061 push FFFFFFFFh 0x00000063 mov ebx, 36135E22h 0x00000068 nop 0x00000069 push eax 0x0000006a push edx 0x0000006b push eax 0x0000006c push edx 0x0000006d jmp 00007F18A106FA6Dh 0x00000072 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 578765 second address: 57876B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 57B9AE second address: 57B9B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5797B2 second address: 5797B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 57876B second address: 578771 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5797B8 second address: 5797CB instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c jng 00007F18A0F7F096h 0x00000012 pop eax 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 57DA54 second address: 57DA5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 57EAE8 second address: 57EB2C instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F18A0F7F096h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e add dword ptr [ebp+122D1C86h], edi 0x00000014 push 00000000h 0x00000016 mov edi, ecx 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push ebp 0x0000001d call 00007F18A0F7F098h 0x00000022 pop ebp 0x00000023 mov dword ptr [esp+04h], ebp 0x00000027 add dword ptr [esp+04h], 00000017h 0x0000002f inc ebp 0x00000030 push ebp 0x00000031 ret 0x00000032 pop ebp 0x00000033 ret 0x00000034 mov di, BA86h 0x00000038 push eax 0x00000039 push eax 0x0000003a push edx 0x0000003b push ecx 0x0000003c pushad 0x0000003d popad 0x0000003e pop ecx 0x0000003f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 57DBCB second address: 57DBD6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F18A106FA66h 0x0000000a popad 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 57ED9F second address: 57EDA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 57FCF0 second address: 57FCF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 58597C second address: 585998 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18A0F7F0A8h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 585998 second address: 5859AA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jo 00007F18A106FA66h 0x00000010 push edi 0x00000011 pop edi 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5859AA second address: 5859AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5890EF second address: 58911C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 jmp 00007F18A106FA72h 0x0000000a jmp 00007F18A106FA71h 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 58911C second address: 589135 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18A0F7F0A5h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 51F08B second address: 51F0B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F18A106FA73h 0x00000010 jmp 00007F18A106FA6Ch 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 51F0B5 second address: 51F0B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 51F0B9 second address: 51F0BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 51F0BF second address: 51F0CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jbe 00007F18A0F7F096h 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 51F0CE second address: 51F0D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 51F0D9 second address: 51F0EA instructions: 0x00000000 rdtsc 0x00000002 jng 00007F18A0F7F096h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 51F0EA second address: 51F0EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 599344 second address: 599349 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 599349 second address: 59934E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 59AB5B second address: 59AB67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jng 00007F18A0F7F096h 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 59AB67 second address: 59AB8C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jno 00007F18A106FA66h 0x0000000f jmp 00007F18A106FA74h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 520D08 second address: 520D0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A1895 second address: 5A1899 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A0CE8 second address: 5A0CF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A0CF0 second address: 5A0CFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F18A106FA66h 0x0000000a pop esi 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A0CFB second address: 5A0D0D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F18A0F7F09Bh 0x00000008 push edx 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A0D0D second address: 5A0D1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jp 00007F18A106FA66h 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A0E6B second address: 5A0E82 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F18A0F7F098h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jbe 00007F18A0F7F096h 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A114E second address: 5A1152 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A1152 second address: 5A1156 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A1156 second address: 5A116D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18A106FA71h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A116D second address: 5A1187 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A0F7F0A2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A12BF second address: 5A1303 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A106FA6Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F18A106FA75h 0x0000000e js 00007F18A106FA8Fh 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F18A106FA77h 0x0000001b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A1303 second address: 5A130D instructions: 0x00000000 rdtsc 0x00000002 jl 00007F18A0F7F096h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A15A3 second address: 5A15BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F18A106FA73h 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A15BE second address: 5A15D8 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F18A0F7F098h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jo 00007F18A0F7F098h 0x00000011 push edi 0x00000012 pop edi 0x00000013 pushad 0x00000014 push edi 0x00000015 pop edi 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A15D8 second address: 5A15FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F18A106FA66h 0x0000000a jmp 00007F18A106FA73h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 jp 00007F18A106FA66h 0x00000018 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A172D second address: 5A1733 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A5C15 second address: 5A5C1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A5C1B second address: 5A5C1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A5C1F second address: 5A5C29 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F18A106FA66h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A5D88 second address: 5A5D8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A5EDB second address: 5A5EE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnp 00007F18A106FA66h 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A6200 second address: 5A6206 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A6206 second address: 5A6219 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18A106FA6Dh 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A65AA second address: 5A65AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A65AE second address: 5A65D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 je 00007F18A106FA66h 0x0000000e jmp 00007F18A106FA78h 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A65D4 second address: 5A65D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 54F6AE second address: 54F6B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A5710 second address: 5A572E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push edx 0x00000006 jg 00007F18A0F7F096h 0x0000000c pop edx 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 js 00007F18A0F7F0A2h 0x00000016 jng 00007F18A0F7F096h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A572E second address: 5A5732 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A5732 second address: 5A573A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A573A second address: 5A573E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5A573E second address: 5A5748 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5AC2F6 second address: 5AC305 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5AC305 second address: 5AC31E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18A0F7F0A5h 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5AC490 second address: 5AC4B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pushad 0x00000008 ja 00007F18A106FA78h 0x0000000e jnp 00007F18A106FA66h 0x00000014 jmp 00007F18A106FA6Ch 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5AC4B4 second address: 5AC4BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5AC4BA second address: 5AC4C4 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F18A106FA66h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5AC7BD second address: 5AC7C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 push esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5AC7C7 second address: 5AC7DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007F18A106FA68h 0x0000000e push eax 0x0000000f push edx 0x00000010 push edx 0x00000011 pop edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5AC7DB second address: 5AC7E1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5AC930 second address: 5AC954 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007F18A106FA79h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5AC954 second address: 5AC958 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5AC958 second address: 5AC973 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jmp 00007F18A106FA75h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5AC973 second address: 5AC9AC instructions: 0x00000000 rdtsc 0x00000002 jp 00007F18A0F7F0AFh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b jmp 00007F18A0F7F09Dh 0x00000010 jc 00007F18A0F7F0AFh 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5ABE9C second address: 5ABEAA instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F18A106FA68h 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5ABEAA second address: 5ABEAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5ABEAE second address: 5ABECA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A106FA78h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5AD214 second address: 5AD277 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A0F7F0A8h 0x00000007 jne 00007F18A0F7F096h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push ecx 0x00000010 jc 00007F18A0F7F096h 0x00000016 jmp 00007F18A0F7F09Ch 0x0000001b pop ecx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F18A0F7F0A7h 0x00000023 jmp 00007F18A0F7F0A4h 0x00000028 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5AD277 second address: 5AD27B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5AD27B second address: 5AD292 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F18A0F7F096h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f js 00007F18A0F7F098h 0x00000015 push eax 0x00000016 pop eax 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5AD292 second address: 5AD2B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A106FA77h 0x00000007 jg 00007F18A106FA72h 0x0000000d jnc 00007F18A106FA66h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 56582B second address: 5658A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A0F7F0A7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov dword ptr [ebp+122D1E2Eh], ebx 0x00000012 lea eax, dword ptr [ebp+1247B5AFh] 0x00000018 push 00000000h 0x0000001a push ebx 0x0000001b call 00007F18A0F7F098h 0x00000020 pop ebx 0x00000021 mov dword ptr [esp+04h], ebx 0x00000025 add dword ptr [esp+04h], 00000016h 0x0000002d inc ebx 0x0000002e push ebx 0x0000002f ret 0x00000030 pop ebx 0x00000031 ret 0x00000032 jl 00007F18A0F7F099h 0x00000038 movsx edx, ax 0x0000003b jo 00007F18A0F7F099h 0x00000041 add dh, 0000004Fh 0x00000044 push eax 0x00000045 jp 00007F18A0F7F0B5h 0x0000004b pushad 0x0000004c jmp 00007F18A0F7F0A7h 0x00000051 push eax 0x00000052 push edx 0x00000053 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5658A6 second address: 54EAC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 push 00000000h 0x0000000a push edx 0x0000000b call 00007F18A106FA68h 0x00000010 pop edx 0x00000011 mov dword ptr [esp+04h], edx 0x00000015 add dword ptr [esp+04h], 00000016h 0x0000001d inc edx 0x0000001e push edx 0x0000001f ret 0x00000020 pop edx 0x00000021 ret 0x00000022 call dword ptr [ebp+122D2566h] 0x00000028 js 00007F18A106FA70h 0x0000002e push eax 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 565D7A second address: 3BDB60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 mov dword ptr [esp], eax 0x0000000b push dword ptr [ebp+122D11C9h] 0x00000011 movzx edi, ax 0x00000014 call dword ptr [ebp+122D1DEBh] 0x0000001a pushad 0x0000001b sub dword ptr [ebp+122D3523h], ebx 0x00000021 xor eax, eax 0x00000023 mov dword ptr [ebp+122D3298h], ebx 0x00000029 mov edx, dword ptr [esp+28h] 0x0000002d cld 0x0000002e xor dword ptr [ebp+122D1C8Bh], esi 0x00000034 mov dword ptr [ebp+122D399Eh], eax 0x0000003a jc 00007F18A0F7F097h 0x00000040 stc 0x00000041 mov esi, 0000003Ch 0x00000046 pushad 0x00000047 mov ecx, dword ptr [ebp+122D37FAh] 0x0000004d mov dword ptr [ebp+122D3298h], edx 0x00000053 popad 0x00000054 add esi, dword ptr [esp+24h] 0x00000058 stc 0x00000059 xor dword ptr [ebp+122D3523h], ebx 0x0000005f lodsw 0x00000061 sub dword ptr [ebp+122D3523h], edi 0x00000067 add eax, dword ptr [esp+24h] 0x0000006b jne 00007F18A0F7F09Ch 0x00000071 mov ebx, dword ptr [esp+24h] 0x00000075 xor dword ptr [ebp+122D3298h], esi 0x0000007b jmp 00007F18A0F7F09Dh 0x00000080 push eax 0x00000081 push eax 0x00000082 push edx 0x00000083 pushad 0x00000084 push ecx 0x00000085 pop ecx 0x00000086 pushad 0x00000087 popad 0x00000088 popad 0x00000089 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 565E4E second address: 565E5F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A106FA6Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 565EDE second address: 565EE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 565EE2 second address: 565F28 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 add dword ptr [esp], 558FB7C0h 0x0000000e push 00000000h 0x00000010 push edi 0x00000011 call 00007F18A106FA68h 0x00000016 pop edi 0x00000017 mov dword ptr [esp+04h], edi 0x0000001b add dword ptr [esp+04h], 0000001Ch 0x00000023 inc edi 0x00000024 push edi 0x00000025 ret 0x00000026 pop edi 0x00000027 ret 0x00000028 mov dword ptr [ebp+122D2BF6h], ebx 0x0000002e call 00007F18A106FA69h 0x00000033 push eax 0x00000034 push edx 0x00000035 push edi 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 565F28 second address: 565F2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 56606E second address: 566072 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566249 second address: 56624D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 56624D second address: 566253 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566253 second address: 566258 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566258 second address: 56625E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 56636A second address: 56636E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 56636E second address: 566377 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566377 second address: 566388 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 je 00007F18A0F7F098h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566388 second address: 5663F8 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F18A106FA68h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov edx, dword ptr [ebp+122D1FF3h] 0x00000011 push 00000004h 0x00000013 push 00000000h 0x00000015 push ebp 0x00000016 call 00007F18A106FA68h 0x0000001b pop ebp 0x0000001c mov dword ptr [esp+04h], ebp 0x00000020 add dword ptr [esp+04h], 0000001Bh 0x00000028 inc ebp 0x00000029 push ebp 0x0000002a ret 0x0000002b pop ebp 0x0000002c ret 0x0000002d pushad 0x0000002e xor dword ptr [ebp+122D1D17h], esi 0x00000034 jmp 00007F18A106FA70h 0x00000039 popad 0x0000003a mov dx, di 0x0000003d push eax 0x0000003e push eax 0x0000003f push edx 0x00000040 push eax 0x00000041 push edx 0x00000042 jmp 00007F18A106FA78h 0x00000047 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5663F8 second address: 5663FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5663FC second address: 566402 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566402 second address: 566408 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 56675B second address: 566761 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566761 second address: 5667E4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A0F7F0A0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c mov ecx, esi 0x0000000e push 0000001Eh 0x00000010 push 00000000h 0x00000012 push ebp 0x00000013 call 00007F18A0F7F098h 0x00000018 pop ebp 0x00000019 mov dword ptr [esp+04h], ebp 0x0000001d add dword ptr [esp+04h], 00000017h 0x00000025 inc ebp 0x00000026 push ebp 0x00000027 ret 0x00000028 pop ebp 0x00000029 ret 0x0000002a cld 0x0000002b xor edi, 34D40308h 0x00000031 jmp 00007F18A0F7F09Bh 0x00000036 nop 0x00000037 pushad 0x00000038 jg 00007F18A0F7F09Ch 0x0000003e jnl 00007F18A0F7F09Ch 0x00000044 popad 0x00000045 push eax 0x00000046 pushad 0x00000047 jns 00007F18A0F7F09Ch 0x0000004d push eax 0x0000004e push edx 0x0000004f jmp 00007F18A0F7F09Ch 0x00000054 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566B50 second address: 566BEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a call 00007F18A106FA76h 0x0000000f sub dword ptr [ebp+12460696h], esi 0x00000015 pop edi 0x00000016 je 00007F18A106FA72h 0x0000001c pushad 0x0000001d mov edx, dword ptr [ebp+122D39AAh] 0x00000023 mov bx, CAF1h 0x00000027 popad 0x00000028 lea eax, dword ptr [ebp+1247B5F3h] 0x0000002e ja 00007F18A106FA6Bh 0x00000034 mov edi, 66CCE91Ch 0x00000039 push eax 0x0000003a jnl 00007F18A106FA6Ah 0x00000040 push eax 0x00000041 push edx 0x00000042 pop edx 0x00000043 pop eax 0x00000044 mov dword ptr [esp], eax 0x00000047 mov ecx, dword ptr [ebp+122D268Ah] 0x0000004d lea eax, dword ptr [ebp+1247B5AFh] 0x00000053 push 00000000h 0x00000055 push edx 0x00000056 call 00007F18A106FA68h 0x0000005b pop edx 0x0000005c mov dword ptr [esp+04h], edx 0x00000060 add dword ptr [esp+04h], 0000001Bh 0x00000068 inc edx 0x00000069 push edx 0x0000006a ret 0x0000006b pop edx 0x0000006c ret 0x0000006d mov dword ptr [ebp+122D2E85h], eax 0x00000073 movsx edi, di 0x00000076 nop 0x00000077 jl 00007F18A106FA83h 0x0000007d pushad 0x0000007e push eax 0x0000007f push edx 0x00000080 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566BEA second address: 566C11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18A0F7F0A5h 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F18A0F7F09Ah 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 566C11 second address: 54F6AE instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jo 00007F18A106FA6Eh 0x0000000f jp 00007F18A106FA68h 0x00000015 call dword ptr [ebp+122D36A4h] 0x0000001b jmp 00007F18A106FA70h 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 jnl 00007F18A106FA66h 0x0000002a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B0BAB second address: 5B0BB1 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B0BB1 second address: 5B0BC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 jg 00007F18A106FA68h 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B0D13 second address: 5B0D50 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jns 00007F18A0F7F096h 0x0000000d jg 00007F18A0F7F096h 0x00000013 jng 00007F18A0F7F096h 0x00000019 jne 00007F18A0F7F096h 0x0000001f popad 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F18A0F7F0A9h 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B0D50 second address: 5B0D54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B0EAA second address: 5B0EB4 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F18A0F7F096h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B0EB4 second address: 5B0ECF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007F18A106FA6Fh 0x00000008 pushad 0x00000009 popad 0x0000000a pop edi 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e push ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B0ECF second address: 5B0ED8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B0ED8 second address: 5B0EDC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B102B second address: 5B1049 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F18A0F7F09Eh 0x0000000e push edx 0x0000000f pop edx 0x00000010 ja 00007F18A0F7F096h 0x00000016 jo 00007F18A0F7F09Eh 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B11A1 second address: 5B11A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B11A7 second address: 5B11AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B11AB second address: 5B11BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jne 00007F18A106FA66h 0x0000000e jp 00007F18A106FA66h 0x00000014 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B11BF second address: 5B11C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B14C5 second address: 5B14DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F18A106FA6Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B1661 second address: 5B1665 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B1665 second address: 5B166B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B166B second address: 5B1671 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B1671 second address: 5B1678 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B1678 second address: 5B167E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B79CD second address: 5B79E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18A106FA6Eh 0x00000009 popad 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5B79E0 second address: 5B79EC instructions: 0x00000000 rdtsc 0x00000002 jo 00007F18A0F7F09Eh 0x00000008 push edi 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5291F6 second address: 52921B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jl 00007F18A106FA7Dh 0x0000000e jmp 00007F18A106FA75h 0x00000013 push edx 0x00000014 pop edx 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 52921B second address: 52924A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F18A0F7F0A5h 0x00000009 jmp 00007F18A0F7F0A6h 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5BD83C second address: 5BD846 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F18A106FA66h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5BD0E3 second address: 5BD0E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5BD0E9 second address: 5BD0ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5BD261 second address: 5BD283 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A0F7F09Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jng 00007F18A0F7F096h 0x00000010 je 00007F18A0F7F096h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5BD283 second address: 5BD2A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F18A106FA72h 0x0000000c jg 00007F18A106FA66h 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5BD3F0 second address: 5BD40A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A0F7F0A0h 0x00000007 jl 00007F18A0F7F096h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5BD40A second address: 5BD41F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A106FA6Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5BD41F second address: 5BD423 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C32D5 second address: 5C32D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C32D9 second address: 5C32E7 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F18A0F7F096h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C32E7 second address: 5C32EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C32EB second address: 5C32F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C32F1 second address: 5C3334 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F18A106FA74h 0x00000008 jmp 00007F18A106FA6Ch 0x0000000d popad 0x0000000e jng 00007F18A106FA6Ah 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 pop eax 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F18A106FA71h 0x00000021 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C347B second address: 5C3485 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C35A8 second address: 5C35B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C35B0 second address: 5C35BA instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F18A0F7F096h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C39BD second address: 5C39C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5665B7 second address: 5665BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5665BC second address: 5665C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F18A106FA66h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5665C7 second address: 5665D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b js 00007F18A0F7F096h 0x00000011 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5665D8 second address: 5665FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A106FA6Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F18A106FA72h 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C3B35 second address: 5C3B58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18A0F7F0A2h 0x00000009 pop ebx 0x0000000a jng 00007F18A0F7F09Ch 0x00000010 jp 00007F18A0F7F096h 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C8890 second address: 5C8894 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C8894 second address: 5C88BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edi 0x00000008 jc 00007F18A0F7F096h 0x0000000e jmp 00007F18A0F7F0A3h 0x00000013 pop edi 0x00000014 jnp 00007F18A0F7F09Ch 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C7BD8 second address: 5C7BDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C7BDC second address: 5C7C25 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A0F7F0A7h 0x00000007 jmp 00007F18A0F7F0A9h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop edi 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F18A0F7F0A2h 0x00000016 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C7DA2 second address: 5C7DA7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C7DA7 second address: 5C7DB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F18A0F7F096h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C7EF7 second address: 5C7F0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18A106FA6Dh 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b popad 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C7F0B second address: 5C7F11 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C7F11 second address: 5C7F17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C7F17 second address: 5C7F1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C7F1B second address: 5C7F24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5C8373 second address: 5C8398 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jbe 00007F18A0F7F0B4h 0x0000000b jmp 00007F18A0F7F0A8h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5D3901 second address: 5D3905 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5D19F0 second address: 5D19FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F18A0F7F096h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5D19FA second address: 5D19FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5D2282 second address: 5D2288 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5D2288 second address: 5D228E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5D228E second address: 5D2294 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5D2294 second address: 5D2298 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5D2298 second address: 5D22BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A0F7F0A3h 0x00000007 je 00007F18A0F7F096h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jo 00007F18A0F7F096h 0x00000017 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5D22BD second address: 5D22C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5D2C32 second address: 5D2C36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5D2C36 second address: 5D2C77 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edi 0x0000000b jmp 00007F18A106FA77h 0x00000010 pop edi 0x00000011 pushad 0x00000012 jmp 00007F18A106FA6Ch 0x00000017 jmp 00007F18A106FA6Bh 0x0000001c pushad 0x0000001d popad 0x0000001e popad 0x0000001f pushad 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5D2C77 second address: 5D2C85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5D2F8F second address: 5D2F93 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5D2F93 second address: 5D2FBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F18A0F7F096h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F18A0F7F0A8h 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5D32EE second address: 5D32F9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jns 00007F18A106FA66h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5D6CA5 second address: 5D6CB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F18A0F7F096h 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5D6E09 second address: 5D6E17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 je 00007F18A106FA66h 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5D7325 second address: 5D7329 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5E43C1 second address: 5E43C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5E25D3 second address: 5E25D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5E25D9 second address: 5E25DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5E25DD second address: 5E25E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5E25E1 second address: 5E2625 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jmp 00007F18A106FA72h 0x0000000c pop edi 0x0000000d jmp 00007F18A106FA73h 0x00000012 push eax 0x00000013 push edx 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 jmp 00007F18A106FA73h 0x0000001b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5E2A32 second address: 5E2A61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F18A0F7F096h 0x0000000a pop ecx 0x0000000b pushad 0x0000000c jnl 00007F18A0F7F096h 0x00000012 jmp 00007F18A0F7F09Dh 0x00000017 popad 0x00000018 pop ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b js 00007F18A0F7F09Ch 0x00000021 jc 00007F18A0F7F096h 0x00000027 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5E2A61 second address: 5E2A6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jne 00007F18A106FA66h 0x0000000c rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5E2A6D second address: 5E2A71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5E2E6A second address: 5E2E74 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5E2E74 second address: 5E2E78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5E3971 second address: 5E397B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5E397B second address: 5E397F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5EA3ED second address: 5EA3F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5EA3F4 second address: 5EA42E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A0F7F09Ch 0x00000007 jo 00007F18A0F7F09Eh 0x0000000d pushad 0x0000000e popad 0x0000000f jbe 00007F18A0F7F096h 0x00000015 pop edx 0x00000016 pop eax 0x00000017 pushad 0x00000018 pushad 0x00000019 push edx 0x0000001a pop edx 0x0000001b jmp 00007F18A0F7F0A3h 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 push esi 0x00000024 pop esi 0x00000025 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5EA42E second address: 5EA432 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5EA704 second address: 5EA70A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5F0E5C second address: 5F0E60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5F0E60 second address: 5F0E6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jbe 00007F18A0F7F096h 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5F0E6E second address: 5F0E78 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F18A106FA66h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5F0E78 second address: 5F0E8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007F18A0F7F09Ah 0x0000000f rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5F0E8B second address: 5F0E95 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F18A106FA66h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5F8F15 second address: 5F8F1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5F8F1B second address: 5F8F21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5F8A95 second address: 5F8A9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F18A0F7F096h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5F8A9F second address: 5F8AC0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A106FA73h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jc 00007F18A106FA72h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5F8AC0 second address: 5F8AC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5FC70F second address: 5FC715 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5FC0B7 second address: 5FC0BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5FC0BD second address: 5FC0D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jbe 00007F18A106FA66h 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5FC0D0 second address: 5FC0D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5FC0D5 second address: 5FC0F9 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 jmp 00007F18A106FA6Ch 0x0000000b pop edx 0x0000000c pop eax 0x0000000d jng 00007F18A106FA91h 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 je 00007F18A106FA66h 0x0000001d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5FC243 second address: 5FC269 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e jl 00007F18A0F7F096h 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 push esi 0x00000018 pop esi 0x00000019 jmp 00007F18A0F7F09Dh 0x0000001e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 5FC269 second address: 5FC26F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 60190B second address: 601920 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F18A0F7F096h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jl 00007F18A0F7F096h 0x00000013 push eax 0x00000014 pop eax 0x00000015 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 601920 second address: 60194A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A106FA75h 0x00000007 jno 00007F18A106FA66h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f popad 0x00000010 pushad 0x00000011 push eax 0x00000012 jg 00007F18A106FA66h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 60051C second address: 60052A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A0F7F09Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 60052A second address: 600530 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 600530 second address: 600543 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007F18A0F7F09Dh 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 606BB0 second address: 606BB4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 611483 second address: 61148B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 6115CA second address: 6115EF instructions: 0x00000000 rdtsc 0x00000002 jl 00007F18A106FA71h 0x00000008 jmp 00007F18A106FA6Bh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F18A106FA6Ch 0x00000018 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 6115EF second address: 61160B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F18A0F7F0A4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 61160B second address: 611611 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 6118A3 second address: 6118A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 6118A9 second address: 6118B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 6118B0 second address: 6118D7 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F18A0F7F098h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F18A0F7F09Ah 0x00000013 push ebx 0x00000014 jmp 00007F18A0F7F09Dh 0x00000019 pop ebx 0x0000001a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 6172D9 second address: 6172E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F18A106FA66h 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 6172E3 second address: 6172E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 6172E7 second address: 617305 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F18A106FA76h 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 617014 second address: 617027 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F18A0F7F09Dh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 622947 second address: 62294D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 62294D second address: 622953 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 622953 second address: 62296A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 jmp 00007F18A106FA6Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 6250EB second address: 6250F1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 630DF1 second address: 630E1C instructions: 0x00000000 rdtsc 0x00000002 jno 00007F18A106FA66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ecx 0x0000000b jmp 00007F18A106FA73h 0x00000010 pushad 0x00000011 popad 0x00000012 pop ecx 0x00000013 js 00007F18A106FA7Eh 0x00000019 push eax 0x0000001a push edx 0x0000001b push esi 0x0000001c pop esi 0x0000001d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 63416C second address: 634170 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 634170 second address: 634176 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 634176 second address: 63417E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 63417E second address: 634182 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 634182 second address: 634186 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 634186 second address: 634198 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 634198 second address: 6341B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F18A0F7F0A8h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 634340 second address: 63435F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F18A106FA66h 0x0000000a popad 0x0000000b pushad 0x0000000c jp 00007F18A106FA66h 0x00000012 jmp 00007F18A106FA6Bh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 63B655 second address: 63B65B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 63B79D second address: 63B7A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 63B7A1 second address: 63B7A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 63BD3D second address: 63BD6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jo 00007F18A106FA66h 0x0000000c jbe 00007F18A106FA66h 0x00000012 push eax 0x00000013 pop eax 0x00000014 popad 0x00000015 pop ecx 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F18A106FA77h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 63BD6F second address: 63BD73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 63BD73 second address: 63BD7D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 63BD7D second address: 63BD81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 63BEEB second address: 63BEF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 63BEF1 second address: 63BF3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 jmp 00007F18A0F7F0A8h 0x0000000d jnl 00007F18A0F7F096h 0x00000013 ja 00007F18A0F7F096h 0x00000019 popad 0x0000001a js 00007F18A0F7F09Ah 0x00000020 push ebx 0x00000021 pop ebx 0x00000022 push esi 0x00000023 pop esi 0x00000024 popad 0x00000025 pushad 0x00000026 push edi 0x00000027 jmp 00007F18A0F7F09Fh 0x0000002c pop edi 0x0000002d push eax 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 640594 second address: 64059E instructions: 0x00000000 rdtsc 0x00000002 jo 00007F18A106FA66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 64059E second address: 6405A3 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 6405A3 second address: 6405AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push ebx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 645C42 second address: 645C4C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 645C4C second address: 645C50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 648C53 second address: 648C66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F18A0F7F09Eh 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 6419B3 second address: 6419B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 6419B8 second address: 6419BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 6419BE second address: 6419CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 6419CC second address: 6419D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 6419D2 second address: 6419EF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jl 00007F18A106FA66h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F18A106FA6Fh 0x00000013 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 6419EF second address: 641A06 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F18A0F7F09Ah 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 641A06 second address: 641A13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 641A13 second address: 641A1D instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F18A0F7F096h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc |
| Source: C:\Users\user\Desktop\file.exe | RDTSC instruction interceptor: First address: 56A000 second address: 56A025 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 js 00007F18A106FA87h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F18A106FA75h 0x00000015 rdtsc |
Edit tour
file.exe (PID: 4508 cmdline: 
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node