39bbf53621127df8d214437967adc98547274ef0e151c7ca93b878e54d2b6adb

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2025-May-28 21:34:04
Detected languages English - United States
Debug artifacts C:\Users\pc\Downloads\Wexize-V2-main (1) funfando fora do fivem\Wexize-V2-main (1) funfando fora do fivem\x64\Release\Wexize Revamp.pdb

Plugin Output

Info Matching compiler(s): MASM/TASM - sig1(h)
Suspicious Strings found in the binary may indicate undesirable behavior: Miscellaneous malware strings:
  • virus
Contains domain names:
  • casedieresis.cn
  • casetilde.cn
  • commaaccentright.cn
  • curl.haxx.se
  • cyrillictail.cn
  • cyrillictic.cn
  • example.com
  • fontello.com
  • github.com
  • http://fontello.com
  • http://scripts.sil.org
  • http://scripts.sil.org/OFLThis
  • http://scripts.sil.org/OFLhttps
  • https://curl.haxx.se
  • https://curl.haxx.se/docs/http-cookies.html
  • https://github.com
  • https://rsms.me
  • koronisaccentleft.cn
  • scripts.sil.org
  • tildecross.cn
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Uses known Mersenne Twister constants
Microsoft's Cryptography API
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryA
Functions which can be used for anti-debugging purposes:
  • CheckRemoteDebuggerPresent
  • CreateToolhelp32Snapshot
  • FindWindowA
  • FindWindowW
Code injection capabilities:
  • CreateRemoteThreadEx
  • VirtualAlloc
  • WriteProcessMemory
  • CreateRemoteThread
  • OpenProcess
  • VirtualAllocEx
Code injection capabilities (mapping injection):
  • CreateRemoteThreadEx
  • CreateFileMappingA
  • CreateRemoteThread
  • MapViewOfFile
Can access the registry:
  • RegGetValueA
Uses Windows's Native API:
  • ntohs
  • ntohl
  • ZwReadVirtualMemory
  • ZwWriteVirtualMemory
Uses Microsoft's cryptographic API:
  • CryptReleaseContext
  • CryptGetHashParam
  • CryptGenRandom
  • CryptCreateHash
  • CryptHashData
  • CryptDestroyHash
  • CryptDestroyKey
  • CryptImportKey
  • CryptEncrypt
  • CryptAcquireContextA
  • CryptStringToBinaryA
  • CryptDecodeObjectEx
  • CryptQueryObject
Uses functions commonly found in keyloggers:
  • GetForegroundWindow
  • GetAsyncKeyState
Memory manipulation functions often used by packers:
  • VirtualAlloc
  • VirtualProtect
  • VirtualProtectEx
  • VirtualAllocEx
Leverages the raw socket API to access the Internet:
  • socket
  • closesocket
  • recv
  • send
  • WSAGetLastError
  • bind
  • connect
  • getpeername
  • getsockname
  • getsockopt
  • htons
  • ntohs
  • setsockopt
  • WSASetLastError
  • WSAIoctl
  • ntohl
  • gethostname
  • sendto
  • recvfrom
  • freeaddrinfo
  • getaddrinfo
  • select
  • __WSAFDIsSet
  • ioctlsocket
  • listen
  • htonl
  • accept
  • WSACleanup
  • WSAStartup
Functions related to the privilege level:
  • OpenProcessToken
  • AdjustTokenPrivileges
Interacts with services:
  • QueryServiceStatus
  • OpenSCManagerA
  • ControlService
  • OpenServiceA
Manipulates other processes:
  • WriteProcessMemory
  • ReadProcessMemory
  • OpenProcess
Reads the contents of the clipboard:
  • GetClipboardData
Interacts with the certificate store:
  • CertAddCertificateContextToStore
  • CertOpenStore
Malicious VirusTotal score: 52/70 (Scanned on 2026-07-17 04:55:21) ALYac: Gen:Variant.Zusy.592105
APEX: Malicious
AVG: Win64:MalwareX-gen [Cryp]
AhnLab-V3: Trojan/Win.Generic.R707125
Alibaba: Trojan:Win64/GenKryptik.3923c097
Antiy-AVL: Trojan/Win64.GenKryptik
Arcabit: Trojan.Zusy.D908E9
Avast: Win64:MalwareX-gen [Cryp]
Avira: TR/W64.MalwareX
BitDefender: Gen:Variant.Zusy.592105
Bkav: W32.Malware.5881585C
CTX: exe.trojan.genkryptik
ClamAV: Win.Malware.Zusy-10058122-0
CrowdStrike: win/malicious_confidence_100% (W)
Cylance: Unsafe
Cynet: Malicious (score: 100)
ESET-NOD32: Win64/GenKryptik_AGen.AGB trojan
Elastic: malicious (high confidence)
Emsisoft: Gen:Variant.Zusy.592105 (B)
F-Secure: Trojan.TR/W64.MalwareX
Fortinet: W64/GenKryptik_AGen.ABN!tr
GData: Gen:Variant.Zusy.592105
Google: Detected
Ikarus: Trojan.Win64.Krypt
K7AntiVirus: Trojan ( 006d9bf01 )
K7GW: Trojan ( 006d9bf01 )
Kingsoft: Win64.Troj.zusy.v
Lionic: Trojan.Win32.Generic.4!c
Malwarebytes: Malware.AI.1091343104
MaxSecure: Trojan.Malware.378328170.susgen
McAfeeD: Trojan:Win/GenericY.CUT
MicroWorld-eScan: Gen:Variant.Zusy.592105
Microsoft: Trojan:Win64/Zusy!MTB
Paloalto: generic.ml
Panda: Trj/Chgt.AD
Rising: Trojan.Kryptik!8.8 (TFE:5:xcmQ1YFdCdP)
SentinelOne: Static AI - Malicious PE
Skyhigh: BehavesLike.Win64.Injector.vc
Sophos: Mal/Generic-S
Symantec: ML.Attribute.HighConfidence
Tencent: Malware.Win32.Gencirc.14896e94
Trapmine: malicious.moderate.ml.score
TrellixENS: Artemis!13DAA6D60504
TrendMicro: Trojan.Win32.ZYX.USBLFH26
TrendMicro-HouseCall: Trojan.Win32.ZYX.USBLFH26
VIPRE: Gen:Variant.Zusy.592105
Varist: W64/ABApplication.UJBX-1965
ViRobot: Trojan.Win.Z.Zusy.3075584
Yandex: Trojan.GenKryptik_AGen!12BK9h/YMgU
Zillya: Trojan.GenKryptikAGen.Win64.4471
alibabacloud: Trojan:Win/GenKryptik_AGen.AUH
huorong: Trojan/Agent.cfs

Hashes

MD5 13daa6d605043919c997a4bdb78e917b
SHA1 d7b18d0856b40c95bbc065efc25907c96f913b02
SHA256 39bbf53621127df8d214437967adc98547274ef0e151c7ca93b878e54d2b6adb
SHA3 c332dceb219439236b3340b9c66d895febb1fcd1569406877e3f4598b4877578
SSDeep 49152:hd9E85H+t6Qou1MNK2KKT8+HEYTnqN389aplIZqDTNvMi9fn:y8QtDoK3plcqDTNV
Imports Hash 5be082d5fa32471ab1a54f4294ce89ec

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x118

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2025-May-28 21:34:04
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x164a00
SizeOfInitializedData 0x18ce00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00000000001605B4 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x2f6000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 8cc70fbfe9361adfc9864f8bb9b33f31
SHA1 d79a1ddacc1a0c79f506917d422fd19024aafae7
SHA256 052e2a8bd61c14c3afd5a823c75829a746dd560d5649665a44274fe47050ddb0
SHA3 0d97c97b9f78cc89549ff1e3603c9483b4d42f30d99e1d25398daac49c4033ff
VirtualSize 0x164943
VirtualAddress 0x1000
SizeOfRawData 0x164a00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.49211

.rdata

MD5 26c7aaa7dcc9a9cfa49c2ad962a5ee80
SHA1 f228e9cdfcfb9bce516f08766ca7f2a727574e11
SHA256 f319df2b9e0ec6605c1cb35f7117434221a75d55f351ef83a60c89a99d0a3851
SHA3 e5b8ff3369bf49bcabc1386a17bd26766f97348973c11eb592a6195e4f305692
VirtualSize 0x97238
VirtualAddress 0x166000
SizeOfRawData 0x97400
PointerToRawData 0x164e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.77677

.data

MD5 e62aa91a0f6c3e56f38bf74e671c1a82
SHA1 74364120ef56d4ffa0fb9036ef9ecfbf38868baf
SHA256 f85e236c853980620edfe6038bfef5c0e4f7a9bf1b13cf722598914c062d570d
SHA3 23f7464fb7addf40919701ed6af60b5cdac8c6fafec463272eaf51141cca1e27
VirtualSize 0xe5a88
VirtualAddress 0x1fe000
SizeOfRawData 0xe2e00
PointerToRawData 0x1fc200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 7.44329

.pdata

MD5 e412a936fecbd750fd439f1ca651e5b7
SHA1 0644e69446fdca50602394e03f2da8f1b1039451
SHA256 848b023e0116522b2bbe4d630cf5143b74e991ad3469a7b34e3d27ac3bb33943
SHA3 72b8a4d4223b4e8d9d9b3dc6351649bffd5c758d14bc1f4b2c0a7549b00c3cc6
VirtualSize 0xe520
VirtualAddress 0x2e4000
SizeOfRawData 0xe600
PointerToRawData 0x2df000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.17748

.rsrc

MD5 a4923436ccbed2556acbb6f96e8613fa
SHA1 1cfe24f09d282f794cabaf76bc0fe389dfc98e24
SHA256 64d4d55273d22ea07e4109696faf7272f9df5ea50a112dec17f26eab49686af4
SHA3 a8869e8f38ae324588d23cd70b8fa09ed6ae7845cf133c80f49edfc8655fd64b
VirtualSize 0x1e8
VirtualAddress 0x2f3000
SizeOfRawData 0x200
PointerToRawData 0x2ed600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.75808

.reloc

MD5 a780c11fbee18370b15616e39d3e3b34
SHA1 945c50c66abaf5195ac5a33b1e6e5dd089c111cb
SHA256 1ec4d5f67fff9796a502850b06747e2a535d8d4cae0d3df813aa173d95b58a38
SHA3 0a06f0fa901f873208a88aaa329f81da3a79f9f8a3992101566c896bbc5fb679
VirtualSize 0x14cc
VirtualAddress 0x2f4000
SizeOfRawData 0x1600
PointerToRawData 0x2ed800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.33536

Imports

d3dx9_43.dll D3DXVec3Normalize
D3DXVec3Transform
D3DXMatrixTranspose
d3dx11_43.dll D3DX11CreateShaderResourceViewFromMemory
d3d11.dll D3D11CreateDeviceAndSwapChain
KERNEL32.dll CheckRemoteDebuggerPresent
CreateRemoteThreadEx
FormatMessageA
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
SleepConditionVariableSRW
GetCurrentThreadId
WakeAllConditionVariable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
WaitForMultipleObjects
PeekNamedPipe
QueryPerformanceCounter
IsProcessorFeaturePresent
GetStartupInfoW
GetModuleHandleW
OpenThread
GetTickCount64
GetStdHandle
InitializeSListHead
FreeLibrary
GetEnvironmentVariableA
VerSetConditionMask
WaitForSingleObjectEx
MoveFileExA
GetProcAddress
QueryPerformanceFrequency
LoadLibraryA
VerifyVersionInfoA
GetLocaleInfoA
WideCharToMultiByte
GlobalFree
GetSystemDirectoryA
MultiByteToWideChar
ExitProcess
SleepEx
DeleteCriticalSection
InitializeCriticalSectionEx
DuplicateHandle
GetProcessId
IsDebuggerPresent
GetTickCount
GetCurrentProcessId
GetFileType
CreateThread
LeaveCriticalSection
EnterCriticalSection
CreateFileMappingA
TerminateProcess
VirtualAlloc
VirtualProtect
GetSystemTimeAsFileTime
WriteProcessMemory
GetLastError
GetModuleHandleA
GetCurrentProcess
GlobalUnlock
CreateRemoteThread
GlobalLock
Beep
GlobalAlloc
Sleep
ReadProcessMemory
VirtualProtectEx
CloseHandle
K32GetModuleFileNameExA
CreateToolhelp32Snapshot
OpenProcess
MapViewOfFile
Module32First
Module32Next
VirtualFreeEx
VirtualAllocEx
UnmapViewOfFile
HeapFree
HeapAlloc
ReadFile
GetFileSizeEx
CreateFileA
SetUnhandledExceptionFilter
SetLastError
USER32.dll GetClipboardData
SetWindowDisplayAffinity
EmptyClipboard
CloseClipboard
SetWindowLongA
OpenClipboard
UpdateWindow
FindWindowA
PostQuitMessage
GetWindowLongPtrA
SetClipboardData
GetForegroundWindow
mouse_event
PeekMessageA
TranslateMessage
SetLayeredWindowAttributes
DefWindowProcA
MoveWindow
MessageBoxA
ShowWindow
RegisterClassExW
UnregisterClassW
CreateWindowExW
DestroyWindow
GetWindowRect
DispatchMessageA
GetAsyncKeyState
GetCursorPos
GetWindowThreadProcessId
SetCursorPos
ReleaseCapture
IsWindowUnicode
GetClientRect
SetCursor
SetCapture
GetKeyboardLayout
TrackMouseEvent
ClientToScreen
GetCapture
ScreenToClient
LoadCursorA
GetMessageExtraInfo
GetKeyState
GetWindowTextLengthA
SetWindowsHookA
IsWindowVisible
GetWindowTextA
EnumWindows
FindWindowW
ADVAPI32.dll CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptEncrypt
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
QueryServiceStatus
CloseServiceHandle
OpenSCManagerA
ControlService
OpenServiceA
CryptAcquireContextA
RegGetValueA
MSVCP140.dll ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?good@ios_base@std@@QEBA_NXZ
?_Throw_Cpp_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
_Mtx_lock
_Mtx_unlock
?_Random_device@std@@YAIXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Id_cnt@id@locale@std@@0HA
?_Xout_of_range@std@@YAXPEBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??Bios_base@std@@QEBA_NXZ
?_Xbad_function_call@std@@YAXXZ
_Cnd_do_broadcast_at_thread_exit
_Thrd_detach
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??7ios_base@std@@QEBA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
_Wcscoll
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?id@?$ctype@_W@std@@2V0locale@2@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$collate@_W@std@@2V0locale@2@A
_Wcsxfrm
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?is@?$ctype@_W@std@@QEBA_NF_W@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
_Query_perf_counter
?_Xbad_alloc@std@@YAXXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exceptions@std@@YAHXZ
_Query_perf_frequency
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
WS2_32.dll socket
closesocket
recv
send
WSAGetLastError
bind
connect
getpeername
getsockname
getsockopt
htons
ntohs
setsockopt
WSASetLastError
WSAIoctl
ntohl
gethostname
sendto
recvfrom
freeaddrinfo
getaddrinfo
select
__WSAFDIsSet
ioctlsocket
listen
htonl
accept
WSACleanup
WSAStartup
Normaliz.dll IdnToAscii
CRYPT32.dll CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateChain
CertFreeCertificateContext
CryptStringToBinaryA
PFXImportCertStore
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChainEngine
CertOpenStore
WLDAP32.dll #27
#32
#33
#35
#79
#30
#200
#301
#26
#22
#41
#50
#143
#60
#211
#46
#217
#45
ntdll.dll ZwReadVirtualMemory
ZwWriteVirtualMemory
IMM32.dll ImmSetCandidateWindow
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
D3DCOMPILER_47.dll D3DCompile
dwmapi.dll DwmExtendFrameIntoClientArea
VCRUNTIME140_1.dll __CxxFrameHandler4
VCRUNTIME140.dll _CxxThrowException
__intrinsic_setjmp
__current_exception_context
__current_exception
__C_specific_handler
memcmp
memchr
memset
memmove
memcpy
__std_exception_destroy
__std_exception_copy
__std_terminate
strstr
strchr
wcsstr
strrchr
longjmp
api-ms-win-crt-heap-l1-1-0.dll malloc
free
realloc
_set_new_mode
calloc
_callnewh
api-ms-win-crt-runtime-l1-1-0.dll _register_thread_local_exe_atexit_callback
_initterm_e
_initterm
_c_exit
exit
_get_narrow_winmain_command_line
terminate
strerror
_errno
_beginthreadex
_getpid
_seh_filter_exe
__sys_nerr
_invoke_watson
_cexit
_set_app_type
_crt_atexit
_exit
_configure_narrow_argv
_initialize_narrow_environment
_register_onexit_function
_initialize_onexit_table
api-ms-win-crt-string-l1-1-0.dll strncmp
strcpy_s
strcmp
strpbrk
strcspn
strspn
isupper
_strdup
toupper
strncpy
tolower
api-ms-win-crt-convert-l1-1-0.dll strtod
atoi
strtoll
strtoull
strtol
atof
mbstowcs
strtoul
api-ms-win-crt-math-l1-1-0.dll fmodf
logf
pow
powf
sinf
sqrt
sqrtf
cosf
log
atan2f
acosf
_hypotf
__setusermatherr
_dclass
_dsign
ceilf
api-ms-win-crt-stdio-l1-1-0.dll __stdio_common_vsprintf
fputc
_set_fmode
_lseeki64
fflush
fclose
_open
_close
_write
fgets
fgetc
_read
feof
fwrite
fputs
fopen
fgetpos
setvbuf
ungetc
__stdio_common_vsscanf
_wfopen
__stdio_common_vsprintf_s
fsetpos
__stdio_common_vfprintf
fseek
__acrt_iob_func
ftell
_get_stream_buffer_pointers
_fseeki64
__p__commode
fread
api-ms-win-crt-locale-l1-1-0.dll localeconv
_configthreadlocale
api-ms-win-crt-filesystem-l1-1-0.dll _unlock_file
_access
_lock_file
_unlink
_stat64
_fstat64
api-ms-win-crt-utility-l1-1-0.dll qsort
api-ms-win-crt-environment-l1-1-0.dll getenv
_wgetenv
api-ms-win-crt-time-l1-1-0.dll _gmtime64
_time64

Delayed Imports

1

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x188
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.89623
MD5 b8e76ddb52d0eb41e972599ff3ca431b
SHA1 fc12d7ad112ddabfcd8f82f290d84e637a4d62f8
SHA256 165c5c883fd4fd36758bcba6baf2faffb77d2f4872ffd5ee918a16f91de5a8a8
SHA3 37f83338b28cb102b1b14f27280ba1aa3fffb17f7bf165cb7b675b7e8eb7cddd

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2025-May-28 21:34:04
Version 0.0
SizeofData 160
AddressOfRawData 0x1e2784
PointerToRawData 0x1e1584
Referenced File C:\Users\pc\Downloads\Wexize-V2-main (1) funfando fora do fivem\Wexize-V2-main (1) funfando fora do fivem\x64\Release\Wexize Revamp.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2025-May-28 21:34:04
Version 0.0
SizeofData 20
AddressOfRawData 0x1e2824
PointerToRawData 0x1e1624

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2025-May-28 21:34:04
Version 0.0
SizeofData 912
AddressOfRawData 0x1e2838
PointerToRawData 0x1e1638

IMAGE_DEBUG_TYPE_ILTCG

Characteristics 0
TimeDateStamp 2025-May-28 21:34:04
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

StartAddressOfRawData 0x1401e2be8
EndAddressOfRawData 0x1401e2bf0
AddressOfIndex 0x1402e144c
AddressOfCallbacks 0x140167158
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_4BYTES
Callbacks (EMPTY)

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x1401fe080

RICH Header

XOR Key 0x16069585
Unmarked objects 0
Imports (VS2008 SP1 build 30729) 24
253 (34918) 9
ASM objects (34918) 4
C objects (34918) 10
C++ objects (34918) 34
Imports (34918) 6
C objects (VS2019 Update 6 (16.6.1-5) compiler 28806) 105
C objects (VS2022 Update 1 (17.1.6) compiler 31107) 26
Imports (33140) 26
Imports (21202) 5
Total imports 518
C++ objects (LTCG) (35207) 18
Resource objects (35207) 1
Linker (35207) 1

Errors

Leave a comment

No comments yet.