| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2026-Apr-28 12:15:35 |
| TLS Callbacks | 2 callback(s) detected. |
| Comments | ReactiveProperty is MVVM and Asynchronous Extensions for Reactive Extensions(System.Reactive). |
| CompanyName | neuecc xin9le okazuki |
| FileDescription | ReactiveProperty |
| FileVersion | 9.3.4.0 |
| InternalName | ReactiveProperty.dll |
| LegalCopyright | |
| OriginalFilename | ReactiveProperty.dll |
| ProductName | ReactiveProperty |
| ProductVersion | 9.3.4+324599ee933973e1bb3ba18f9b1f8e64f9891d35 |
| Assembly Version | 9.3.4.0 |
| Suspicious | The PE is possibly packed. | Unusual section name found: .xdata |
| Suspicious | The PE contains functions most legitimate programs don't use. |
Memory manipulation functions often used by packers:
|
| Malicious | VirusTotal score: 29/70 (Scanned on 2026-05-15 22:21:29) |
AVG:
Win64:MalwareX-gen [Misc]
AhnLab-V3: Trojan/Win.Generic.R772335 Antiy-AVL: Trojan/Win64.ShellcodeRunner Arcabit: Trojan.Generic.D4C6AEC8 Avast: Win64:MalwareX-gen [Misc] Avira: TR/W64.Agent BitDefender: Trojan.GenericKD.80129736 CTX: dll.trojan.shellcoderunner Cylance: Unsafe DeepInstinct: MALICIOUS ESET-NOD32: Win64/ShellcodeRunner.BTO trojan Emsisoft: Trojan.GenericKD.80129736 (B) F-Secure: Trojan.TR/W64.Agent GData: Win64.Trojan.Agent.MZY4S6 Google: Detected Ikarus: Trojan.Win64.Shellcoderunner K7AntiVirus: Trojan ( 006d8d181 ) K7GW: Trojan ( 006d8d181 ) McAfeeD: ti!25714CA20B2C MicroWorld-eScan: Trojan.GenericKD.80129736 Microsoft: Trojan:Win32/Wacatac.C!ml Rising: Malware.Undefined!8.C (TFE:5:lvV8rr3Vp5V) Sophos: Mal/Generic-S Symantec: Trojan.Gen.MBT Tencent: Win32.Trojan.W64.Htgl TrellixENS: Artemis!588AD1D14266 VIPRE: Trojan.GenericKD.80129736 Varist: W64/ABTrojan.QVZA-6780 alibabacloud: Trojan:Win/ShellcodeRunner.BSX |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x80 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 11 |
| TimeDateStamp | 2026-Apr-28 12:15:35 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
|
| Magic | PE32+ |
|---|---|
| LinkerVersion | 2.0 |
| SizeOfCode | 0x1e000 |
| SizeOfInitializedData | 0xb600 |
| SizeOfUninitializedData | 0x200 |
| AddressOfEntryPoint | 0x00000000000011F0 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x2e8a60000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 4.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 5.2 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x32000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0x2c1b9 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
|
| SizeofStackReserve | 0x200000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| bcrypt.dll |
BCryptGenRandom
|
|---|---|
| dwmapi.dll |
DwmIsCompositionEnabled
|
| DWrite.dll |
DWriteCreateFactory
|
| libgcc_s_seh-1.dll |
_Unwind_Resume
|
| KERNEL32.dll |
CloseHandle
DeleteCriticalSection DisableThreadLibraryCalls EnterCriticalSection EnumSystemCodePagesW GetCurrentProcessId GetLastError GetProcessHandleCount InitializeCriticalSection K32GetProcessMemoryInfo LeaveCriticalSection OpenProcess Sleep TlsGetValue VirtualAlloc VirtualProtect VirtualQuery VirtualQueryEx |
| api-ms-win-crt-heap-l1-1-0.dll |
calloc
free |
| api-ms-win-crt-math-l1-1-0.dll |
fmodf
|
| api-ms-win-crt-private-l1-1-0.dll |
memcpy
memmove |
| api-ms-win-crt-runtime-l1-1-0.dll |
_beginthreadex
_endthreadex _execute_onexit_table _exit _initialize_onexit_table _initterm _initterm_e _register_onexit_function abort |
| api-ms-win-crt-stdio-l1-1-0.dll |
__acrt_iob_func
__stdio_common_vfprintf |
| api-ms-win-crt-string-l1-1-0.dll |
memset
strlen strncmp |
| SDL3.dll |
SDL_CloseIO
SDL_CreateEnvironment SDL_CreateRenderer SDL_CreateSemaphore SDL_CreateThreadRuntime SDL_CreateWindow SDL_Delay SDL_DestroyEnvironment SDL_DestroyRenderer SDL_DestroySemaphore SDL_DestroyWindow SDL_GetCurrentTime SDL_GetDateTimeLocalePreferences SDL_GetEnvironmentVariable SDL_GetEnvironmentVariables SDL_GetTicks SDL_IOFromDynamicMem SDL_IOprintf SDL_Init SDL_PollEvent SDL_Quit SDL_ReadIO SDL_ReadU32LE SDL_RenderClear SDL_RenderFillRect SDL_RenderLine SDL_RenderPoint SDL_RenderPresent SDL_RenderRect SDL_SeekIO SDL_SetRenderDrawColor SDL_SignalSemaphore SDL_TimeToDateTime SDL_WaitSemaphore SDL_WaitThread SDL_WriteU32LE SDL_free |
| libstdc++-6.dll |
_ZNKSt8__detail20_Prime_rehash_policy14_M_need_rehashEyyy
_ZNSt8__detail15_List_node_base7_M_hookEPS0_ _ZSt17__throw_bad_allocv _ZSt18_Rb_tree_decrementPSt18_Rb_tree_node_base _ZSt18_Rb_tree_incrementPSt18_Rb_tree_node_base _ZSt20__throw_length_errorPKc _ZSt21__glibcxx_assert_failPKciS0_S0_ _ZSt28__throw_bad_array_new_lengthv _ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_ _ZdlPvy _Znay _Znwy __cxa_begin_catch __cxa_end_catch __cxa_rethrow __gxx_personality_seh0 |
| Ordinal | 1 |
|---|---|
| Address | 0x1b21 |
| Ordinal | 2 |
|---|---|
| Address | 0x3682 |
| Ordinal | 3 |
|---|---|
| Address | 0x4882 |
| Ordinal | 4 |
|---|---|
| Address | 0x289b |
| Ordinal | 5 |
|---|---|
| Address | 0x18d9 |
| Ordinal | 6 |
|---|---|
| Address | 0x1429 |
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 9.3.4.0 |
| ProductVersion | 9.3.4.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_DLL
|
| Language | UNKNOWN |
| Comments | ReactiveProperty is MVVM and Asynchronous Extensions for Reactive Extensions(System.Reactive). |
| CompanyName | neuecc xin9le okazuki |
| FileDescription | ReactiveProperty |
| FileVersion (#2) | 9.3.4.0 |
| InternalName | ReactiveProperty.dll |
| LegalCopyright | |
| OriginalFilename | ReactiveProperty.dll |
| ProductName | ReactiveProperty |
| ProductVersion (#2) | 9.3.4+324599ee933973e1bb3ba18f9b1f8e64f9891d35 |
| Assembly Version | 9.3.4.0 |
| Resource LangID | UNKNOWN |
|---|
| StartAddressOfRawData | 0x2e8a8f000 |
|---|---|
| EndAddressOfRawData | 0x2e8a8f008 |
| AddressOfIndex | 0x2e8a8b05c |
| AddressOfCallbacks | 0x2e8a82020 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_TYPE_REG
|
| Callbacks |
0x00000002E8A65190
0x00000002E8A65170 |
No comments yet.