signature=273bef25b3fe090bba927bfcb4dffd16,恶意软件分析 & URL链接扫描 免费在线病毒分析平台 | 魔盾安全分析...

.text

`.rdata

@.data

.pdata

@.gfids

@.rsrc

@.reloc

Unknown exception

bad allocation

bad array new length

FlsAlloc

FlsFree

FlsGetValue

FlsSetValue

InitializeCriticalSectionEx

__based(

__cdecl

__pascal

__stdcall

__thiscall

__fastcall

__vectorcall

__clrcall

__eabi

__ptr64

__restrict

__unaligned

restrict(

delete

operator

`vftable'

`vbtable'

`vcall'

`typeof'

`local static guard'

`string'

`vbase destructor'

`vector deleting destructor'

`default constructor closure'

`scalar deleting destructor'

`vector constructor iterator'

`vector destructor iterator'

`vector vbase constructor iterator'

`virtual displacement map'

`eh vector constructor iterator'

`eh vector destructor iterator'

`eh vector vbase constructor iterator'

`copy constructor closure'

`udt returning'

`RTTI

`local vftable'

`local vftable constructor closure'

new[]

delete[]

`omni callsig'

`placement delete closure'

`placement delete[] closure'

`managed vector constructor iterator'

`managed vector destructor iterator'

`eh vector copy constructor iterator'

`eh vector vbase copy constructor iterator'

`dynamic initializer for '

`dynamic atexit destructor for '

`vector copy constructor iterator'

`vector vbase copy constructor iterator'

`managed vector copy constructor iterator'

`local static thread guard'

operator ""

Type Descriptor'

Base Class Descriptor at (

Base Class Array'

Class Hierarchy Descriptor'

Complete Object Locator'

`h````

(null)

CorExitProcess

Sunday

Monday

Tuesday

Wednesday

Thursday

Friday

Saturday

January

February

March

April

August

September

October

November

December

MM/dd/yy

dddd, MMMM dd, yyyy

HH:mm:ss

LCMapStringEx

LocaleNameToLCID

AppPolicyGetProcessTerminationMethod

NAN(SNAN)

nan(snan)

NAN(IND)

nan(ind)

e+000

1#INF

1#QNAN

1#SNAN

1#IND

log10

Win 2000

Win XP

Win Server 2003

Win Vista

Win 10

Win Server 2008

Win 7

Win Server 2008 R2

Win 8

Win Server 2012

Win 8.1

Win Server 2012 R2

Win Server 2016

Win 10 Later

Win Server 2016 Later

%02x-%02x-%02x-%02x-%02x-%02x

%04d-%02d-%02d|%02d:%02d

Applet

9PptmfgORMwRZ5AJ245EMak7JpsfI2m6vX0GJBolEWA=

CSWjUcazw53yPNe+dISBvQ==

Error protecting memory page

StartWork

Voumx0c0GCEBSBfOreOpmw==

202006

wlanapi.dll

WlanCloseHandle

WlanEnumInterfaces

WlanFreeMemory

WlanOpenHandle

WlanRegisterNotification

WlanScan

SSID_%d:%s|%d%%

|MAC%d:%02X:%02X:%02X:%02X:%02X:%02X|

c66cXlwww+8uPvLPxk23jJrrukW3J7zKH2KjPP+m+l4=

favicon.jpg

{777E3433-FDDD-4E7D-BA72-6A4728871509}

ProgramData\SEP.ini

{777E3433-FDDD-4E7D-BA72-6A4728871509}

ProgramData\SEP.ini

b1/NeF9wodvHezcAQQa0xQ==

.text$mn

.text$mn$00

.text$x

.idata$5

.00cfg

.CRT$XCA

.CRT$XCAA

.CRT$XCZ

.CRT$XIA

.CRT$XIAA

.CRT$XIAC

.CRT$XIC

.CRT$XIZ

.CRT$XPA

.CRT$XPX

.CRT$XPXA

.CRT$XPZ

.CRT$XTA

.CRT$XTZ

.rdata

.rdata$r

.rdata$zzzdbg

.rtc$IAA

.rtc$IZZ

.rtc$TAA

.rtc$TZZ

.xdata

.xdata$x

.edata

.idata$2

.idata$3

.idata$4

.idata$6

.data

.data$r

.pdata

.gfids$y

.rsrc$01

.rsrc$02

360update.exe

FindFirstFileA

VirtualProtect

HeapFree

SetLastError

VirtualFree

WriteFile

VirtualAlloc

FindNextFileA

lstrlenA

FindClose

WaitForSingleObject

Sleep

GetLastError

CreateFileA

LoadLibraryA

CloseHandle

GetNativeSystemInfo

GetSystemInfo

CreateThread

GetWindowsDirectoryA

HeapAlloc

GetProcAddress

GetProcessHeap

GlobalMemoryStatusEx

FreeLibrary

IsBadReadPtr

FlushFileBuffers

lstrcatA

KERNEL32.dll

MessageBoxA

USER32.dll

HttpQueryInfoA

InternetQueryOptionA

HttpOpenRequestA

InternetCrackUrlA

InternetSetOptionA

InternetOpenA

InternetCloseHandle

HttpSendRequestA

InternetConnectA

InternetReadFile

WININET.dll

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

InitializeSListHead

IsDebuggerPresent

GetStartupInfoW

GetModuleHandleW

RtlPcToFileHeader

RaiseException

RtlUnwindEx

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

InitializeCriticalSectionAndSpinCount

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

LoadLibraryExW

QueryPerformanceFrequency

MultiByteToWideChar

WideCharToMultiByte

GetStdHandle

GetModuleFileNameA

ExitProcess

GetModuleHandleExW

GetACP

LCMapStringW

GetFileType

HeapReAlloc

GetStringTypeW

FindFirstFileExA

IsValidCodePage

GetOEMCP

GetCPInfo

GetCommandLineA

GetCommandLineW

GetEnvironmentStringsW

FreeEnvironmentStringsW

SetStdHandle

GetConsoleCP

GetConsoleMode

HeapSize

SetFilePointerEx

CreateFileW

WriteConsoleW

abcdefghijklmnopqrstuvwxyz

ABCDEFGHIJKLMNOPQRSTUVWXYZ

abcdefghijklmnopqrstuvwxyz

ABCDEFGHIJKLMNOPQRSTUVWXYZ

GetStartupInfoA

.?AVbad_alloc@std@@

.?AVexception@std@@

.?AVtype_info@@

.?AVbad_array_new_length@std@@

advapi32

api-ms-win-core-fibers-l1-1-1

api-ms-win-core-synch-l1-2-0

kernel32

(null)

mscoree.dll

Sunday

Monday

Tuesday

Wednesday

Thursday

Friday

Saturday

January

February

March

April

August

September

October

November

December

MM/dd/yy

dddd, MMMM dd, yyyy

HH:mm:ss

en-US

api-ms-win-core-datetime-l1-1-1

api-ms-win-core-file-l1-2-2

api-ms-win-core-localization-l1-2-1

api-ms-win-core-localization-obsolete-l1-2-0

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-string-l1-1-0

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-xstate-l2-1-0

api-ms-win-rtcore-ntuser-window-l1-1-0

api-ms-win-security-systemfunctions-l1-1-0

ext-ms-win-ntuser-dialogbox-l1-1-0

ext-ms-win-ntuser-windowstation-l1-1-0

ntdll

api-ms-win-appmodel-runtime-l1-1-2

user32

api-ms-

ext-ms-

ja-JP

zh-CN

ko-KR

zh-TW

zh-CHS

ar-SA

bg-BG

ca-ES

cs-CZ

da-DK

de-DE

el-GR

fi-FI

fr-FR

he-IL

hu-HU

is-IS

it-IT

nl-NL

nb-NO

pl-PL

pt-BR

ro-RO

ru-RU

hr-HR

sk-SK

sq-AL

sv-SE

th-TH

tr-TR

ur-PK

id-ID

uk-UA

be-BY

sl-SI

et-EE

lv-LV

lt-LT

fa-IR

vi-VN

hy-AM

az-AZ-Latn

eu-ES

mk-MK

tn-ZA

xh-ZA

zu-ZA

af-ZA

ka-GE

fo-FO

hi-IN

mt-MT

se-NO

ms-MY

kk-KZ

ky-KG

sw-KE

uz-UZ-Latn

tt-RU

bn-IN

pa-IN

gu-IN

ta-IN

te-IN

kn-IN

ml-IN

mr-IN

sa-IN

mn-MN

cy-GB

gl-ES

kok-IN

syr-SY

div-MV

quz-BO

ns-ZA

mi-NZ

ar-IQ

de-CH

en-GB

es-MX

fr-BE

it-CH

nl-BE

nn-NO

pt-PT

sr-SP-Latn

sv-FI

az-AZ-Cyrl

se-SE

ms-BN

uz-UZ-Cyrl

quz-EC

ar-EG

zh-HK

de-AT

en-AU

es-ES

fr-CA

sr-SP-Cyrl

se-FI

quz-PE

ar-LY

zh-SG

de-LU

en-CA

es-GT

fr-CH

hr-BA

smj-NO

ar-DZ

zh-MO

de-LI

en-NZ

es-CR

fr-LU

bs-BA-Latn

smj-SE

ar-MA

en-IE

es-PA

fr-MC

sr-BA-Latn

sma-NO

ar-TN

en-ZA

es-DO

sr-BA-Cyrl

sma-SE

ar-OM

en-JM

es-VE

sms-FI

ar-YE

en-CB

es-CO

smn-FI

ar-SY

en-BZ

es-PE

ar-JO

en-TT

es-AR

ar-LB

en-ZW

es-EC

ar-KW

en-PH

es-CL

ar-AE

es-UY

ar-BH

es-PY

ar-QA

es-BO

es-SV

es-HN

es-NI

es-PR

zh-CHT

af-za

ar-ae

ar-bh

ar-dz

ar-eg

ar-iq

ar-jo

ar-kw

ar-lb

ar-ly

ar-ma

ar-om

ar-qa

ar-sa

ar-sy

ar-tn

ar-ye

az-az-cyrl

az-az-latn

be-by

bg-bg

bn-in

bs-ba-latn

ca-es

cs-cz

cy-gb

da-dk

de-at

de-ch

de-de

de-li

de-lu

div-mv

el-gr

en-au

en-bz

en-ca

en-cb

en-gb

en-ie

en-jm

en-nz

en-ph

en-tt

en-us

en-za

en-zw

es-ar

es-bo

es-cl

es-co

es-cr

es-do

es-ec

es-es

es-gt

es-hn

es-mx

es-ni

es-pa

es-pe

es-pr

es-py

es-sv

es-uy

es-ve

et-ee

eu-es

fa-ir

fi-fi

fo-fo

fr-be

fr-ca

fr-ch

fr-fr

fr-lu

fr-mc

gl-es

gu-in

he-il

hi-in

hr-ba

hr-hr

hu-hu

hy-am

id-id

is-is

it-ch

it-it

ja-jp

ka-ge

kk-kz

kn-in

kok-in

ko-kr

ky-kg

lt-lt

lv-lv

mi-nz

mk-mk

ml-in

mn-mn

mr-in

ms-bn

ms-my

mt-mt

nb-no

nl-be

nl-nl

nn-no

ns-za

pa-in

pl-pl

pt-br

pt-pt

quz-bo

quz-ec

quz-pe

ro-ro

ru-ru

sa-in

se-fi

se-no

se-se

sk-sk

sl-si

sma-no

sma-se

smj-no

smj-se

smn-fi

sms-fi

sq-al

sr-ba-cyrl

sr-ba-latn

sr-sp-cyrl

sr-sp-latn

sv-fi

sv-se

sw-ke

syr-sy

ta-in

te-in

th-th

tn-za

tr-tr

tt-ru

uk-ua

ur-pk

uz-uz-cyrl

uz-uz-latn

vi-vn

xh-za

zh-chs

zh-cht

zh-cn

zh-hk

zh-mo

zh-sg

zh-tw

zu-za

CONOUT$