General

Malware Config

Signatures

Files

• SpyHunter-5.15-6-5285-Installer.exe

  .exe windows x86

  2b229c4ba271cf2305af1eefc7138532

  
  

  Code Sign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:f7:2f:ec:4d:49:47:17:3e:91:fc:28:a2:57:e7:72

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  06-06-2023 00:00

  Not After

  25-04-2026 23:59

  Subject

  SERIALNUMBER=597114,CN=EnigmaSoft Limited,O=EnigmaSoft Limited,L=Dublin,C=IE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024945

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  21-09-2022 00:00

  Not After

  21-11-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:f7:2f:ec:4d:49:47:17:3e:91:fc:28:a2:57:e7:72

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  06-06-2023 00:00

  Not After

  25-04-2026 23:59

  Subject

  SERIALNUMBER=597114,CN=EnigmaSoft Limited,O=EnigmaSoft Limited,L=Dublin,C=IE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024945

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  21-09-2022 00:00

  Not After

  21-11-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  d6:f2:e7:53:3b:a4:ee:87:2b:3b:20:1f:0a:0f:3c:51:9b:f5:ba:01:97:6d:1f:1a:48:5e:7c:56:7f:7f:1b:ea

  Signer

  Actual PE Digest

  d6:f2:e7:53:3b:a4:ee:87:2b:3b:20:1f:0a:0f:3c:51:9b:f5:ba:01:97:6d:1f:1a:48:5e:7c:56:7f:7f:1b:ea

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  53:c7:70:f8:31:5a:b8:e7:f6:65:e0:2f:31:b7:18:a3:96:5a:9d:0e

  Signer

  Actual PE Digest

  53:c7:70:f8:31:5a:b8:e7:f6:65:e0:2f:31:b7:18:a3:96:5a:9d:0e

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  gdiplus

  GdipSetInfinite

  GdipSetClipRegion

  GdipCreateRegion

  GdipGetClip

  GdipDeleteRegion

  GdipDeleteGraphics

  GdipGetImageHeight

  GdipGetImageWidth

  GdipCreateFromHDC

  GdipCreatePath

  GdiplusShutdown

  GdiplusStartup

  GdipImageRotateFlip

  GdipGetImagePixelFormat

  GdipCreateHBITMAPFromBitmap

  GdipCreateBitmapFromResource

  GdipCreateBitmapFromStream

  GdipClosePathFigure

  GdipAddPathArcI

  GdipResetPath

  GdipFillPath

  GdipCreateSolidFill

  GdipDeletePen

  GdipDrawPath

  GdipSetPenDashStyle

  GdipCreatePen1

  GdipSetInterpolationMode

  GdipSetCompositingQuality

  GdipSetCompositingMode

  GdipFillRectangleI

  GdipCloneBrush

  GdipDeleteBrush

  GdipCreateTextureIAI

  GdipSetImageAttributesColorKeys

  GdipSetImageAttributesWrapMode

  GdipDrawImagePointRectI

  GdipGetImageGraphicsContext

  GdipCreateBitmapFromScan0

  GdipDrawImageRectRectI

  GdipDisposeImage

  GdipCloneImage

  GdipAlloc

  GdipFree

  GdipCreateBitmapFromHBITMAP

  GdipSetImageAttributesColorMatrix

  GdipDisposeImageAttributes

  GdipCreateImageAttributes

  GdipDeletePath

  GdipCombineRegionPath

  GdipSetSmoothingMode

  usp10

  ScriptStringFree

  ScriptString_pcOutChars

  ScriptString_pSize

  ScriptStringXtoCP

  ScriptStringGetOrder

  ScriptStringGetLogicalWidths

  ScriptStringCPtoX

  ScriptStringOut

  ScriptString_pLogAttr

  ScriptStringAnalyse

  crypt32

  CertGetCertificateContextProperty

  CryptDecodeObject

  CryptMsgClose

  CryptQueryObject

  CryptMsgGetParam

  CertDuplicateCertificateContext

  CryptHashCertificate

  CertFindCertificateInStore

  CertOpenSystemStoreW

  CertFreeCertificateContext

  CertGetEnhancedKeyUsage

  CertGetIntendedKeyUsage

  CertOpenStore

  CertCloseStore

  CertGetNameStringW

  CertEnumCertificatesInStore

  version

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  VerQueryValueW

  ws2_32

  freeaddrinfo

  accept

  listen

  recvfrom

  sendto

  ioctlsocket

  __WSAFDIsSet

  select

  bind

  WSAIoctl

  closesocket

  WSASetLastError

  getpeername

  getsockname

  htonl

  gethostname

  shutdown

  ntohs

  connect

  getsockopt

  htons

  setsockopt

  send

  recv

  WSAGetLastError

  WSACloseEvent

  WSACreateEvent

  WSAEventSelect

  WSAResetEvent

  WSAWaitForMultipleEvents

  WSAEnumNetworkEvents

  WSACleanup

  WSAStartup

  getaddrinfo

  getnameinfo

  socket

  kernel32

  CreateEventA

  GetLastError

  MoveFileExW

  InitializeCriticalSectionEx

  RaiseException

  DecodePointer

  DeleteCriticalSection

  DeleteFileW

  Sleep

  GetCurrentProcess

  SetLastError

  EnterCriticalSection

  LeaveCriticalSection

  GetCurrentThreadId

  GetTickCount

  CreateFileW

  HeapFree

  QueryPerformanceFrequency

  GetProcessHeap

  lstrcmpiW

  QueryPerformanceCounter

  FindResourceW

  LCMapStringA

  GetStringTypeExA

  GetUserDefaultLCID

  GetDiskFreeSpaceExW

  LoadLibraryA

  LoadLibraryW

  HeapAlloc

  GetProcAddress

  CreateMutexW

  WaitForSingleObject

  ReleaseMutex

  GetCurrentProcessId

  GetLocalTime

  ReadFile

  GetFileSizeEx

  WriteFile

  RemoveDirectoryW

  GetFileAttributesW

  SetFileAttributesW

  GetExitCodeProcess

  EnumResourceNamesW

  SizeofResource

  GetModuleFileNameW

  MultiByteToWideChar

  LoadResource

  GetModuleHandleW

  SetDllDirectoryW

  LoadLibraryExW

  VerSetConditionMask

  VerifyVersionInfoW

  FileTimeToSystemTime

  SystemTimeToFileTime

  TerminateProcess

  OpenProcess

  OpenMutexW

  GetSystemDirectoryW

  SleepEx

  GetEnvironmentVariableA

  GetStdHandle

  WaitForMultipleObjects

  PeekNamedPipe

  GetFileType

  CompareFileTime

  GetSystemTimeAsFileTime

  WaitForSingleObjectEx

  WideCharToMultiByte

  GetConsoleMode

  SetConsoleMode

  ReadConsoleA

  ReadConsoleW

  InitializeCriticalSectionAndSpinCount

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetModuleHandleExW

  SwitchToFiber

  DeleteFiber

  CreateFiber

  ConvertFiberToThread

  ConvertThreadToFiber

  FindClose

  FindFirstFileW

  FindNextFileW

  GetSystemTime

  InitializeCriticalSection

  GetStringTypeExW

  LCMapStringW

  MulDiv

  ExpandEnvironmentStringsW

  GetLongPathNameW

  CreateDirectoryW

  CopyFileW

  DeviceIoControl

  GetSystemInfo

  GetNativeSystemInfo

  LocalAlloc

  ProcessIdToSessionId

  GetVolumeInformationW

  GetVersionExW

  lstrcpyW

  lstrcatW

  CreateProcessW

  CreatePipe

  SetHandleInformation

  HeapReAlloc

  GetComputerNameW

  GetCurrentThread

  GetLogicalDriveStringsW

  GetDriveTypeW

  GetModuleHandleA

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  GlobalFree

  GlobalSize

  CreateToolhelp32Snapshot

  Process32FirstW

  Process32NextW

  K32GetProcessImageFileNameW

  FindFirstVolumeW

  GetVolumePathNamesForVolumeNameW

  QueryDosDeviceW

  FindNextVolumeW

  FindVolumeClose

  K32EnumProcessModules

  K32GetModuleFileNameExW

  lstrlenW

  CreateFileMappingW

  MapViewOfFile

  UnmapViewOfFile

  SetFilePointer

  MoveFileW

  SetFilePointerEx

  GetTimeFormatW

  GetDateFormatW

  LockResource

  GetLogicalDrives

  DeleteVolumeMountPointW

  DefineDosDeviceW

  FreeLibrary

  SetVolumeMountPointW

  GlobalMemoryStatusEx

  GetLocaleInfoW

  CreateEventW

  CreateNamedPipeW

  GetLocaleInfoA

  CreateTimerQueue

  DeleteTimerQueueEx

  CreateTimerQueueTimer

  lstrcmpA

  FileTimeToLocalFileTime

  lstrcpynW

  RemoveVectoredExceptionHandler

  SetUnhandledExceptionFilter

  AddVectoredExceptionHandler

  K32GetProcessMemoryInfo

  IsBadReadPtr

  VirtualQuery

  FreeResource

  GetFileSize

  CreateSemaphoreA

  DuplicateHandle

  ReleaseSemaphore

  LocalFree

  CloseHandle

  SetEvent

  FormatMessageW

  GetStringTypeW

  InitializeSRWLock

  ReleaseSRWLockExclusive

  AcquireSRWLockExclusive

  TryEnterCriticalSection

  InitOnceComplete

  InitOnceBeginInitialize

  EncodePointer

  LCMapStringEx

  GetLocaleInfoEx

  CompareStringEx

  GetCPInfo

  ResetEvent

  WaitForMultipleObjectsEx

  OpenEventA

  SetWaitableTimer

  ResumeThread

  CreateWaitableTimerA

  UnhandledExceptionFilter

  IsProcessorFeaturePresent

  InitializeSListHead

  IsDebuggerPresent

  GetStartupInfoW

  OutputDebugStringW

  InterlockedPopEntrySList

  InterlockedPushEntrySList

  FlushInstructionCache

  VirtualAlloc

  VirtualFree

  LoadLibraryExA

  RtlUnwind

  WriteConsoleW

  GetFileAttributesExW

  GetFileInformationByHandle

  SystemTimeToTzSpecificLocalTime

  CreateThread

  ExitThread

  FreeLibraryAndExitThread

  SetConsoleCtrlHandler

  ExitProcess

  FormatMessageA

  GetCommandLineA

  GetCommandLineW

  GetConsoleOutputCP

  HeapSize

  GetTempPathW

  CompareStringW

  IsValidLocale

  EnumSystemLocalesW

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCurrentDirectoryW

  GetFullPathNameW

  SetStdHandle

  FlushFileBuffers

  GetTimeZoneInformation

  SetEnvironmentVariableW

  FindFirstFileExW

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetEndOfFile

  GetModuleFileNameA

  GetEnvironmentVariableW

  GetVolumeNameForVolumeMountPointW

  user32

  TrackPopupMenu

  ScreenToClient

  IsCharAlphaNumericA

  SetWindowRgn

  KillTimer

  SetTimer

  EnableWindow

  GetClipboardData

  IsClipboardFormatAvailable

  CloseClipboard

  SetClipboardData

  EmptyClipboard

  OpenClipboard

  ExitWindowsEx

  GetMessageExtraInfo

  wsprintfW

  GetUserObjectInformationW

  GetProcessWindowStation

  FindWindowExW

  GetWindowTextLengthW

  GetMenuItemInfoW

  AllowSetForegroundWindow

  MonitorFromPoint

  GetMenuItemCount

  LockSetForegroundWindow

  MessageBeep

  CreatePopupMenu

  GetActiveWindow

  IsDialogMessageW

  DestroyMenu

  BringWindowToTop

  TranslateAcceleratorW

  LoadIconW

  TrackPopupMenuEx

  RemoveMenu

  AppendMenuW

  PostQuitMessage

  DialogBoxParamW

  GetMessageW

  LoadMenuW

  MessageBoxW

  GetSystemMetrics

  LoadAcceleratorsW

  LoadStringW

  GetClassInfoW

  DispatchMessageW

  PeekMessageW

  RegisterClassW

  CharNextW

  InsertMenuW

  UpdateWindow

  SetForegroundWindow

  LoadImageW

  GetWindow

  MonitorFromWindow

  EndDialog

  GetWindowInfo

  GetMonitorInfoW

  MapWindowPoints

  EnumWindows

  GetWindowDC

  SetWindowTextW

  MoveWindow

  InvalidateRect

  LoadStringA

  GetDC

  ReleaseDC

  GetFocus

  RegisterClassExW

  IsWindowEnabled

  SetRect

  GetClassInfoExW

  InflateRect

  IsZoomed

  DrawTextW

  IsIconic

  GetCapture

  TrackMouseEvent

  SetFocus

  SetCapture

  ReleaseCapture

  GetCursorPos

  PostMessageW

  ShowWindow

  RedrawWindow

  GetDlgItem

  GetWindowLongW

  DefWindowProcW

  AdjustWindowRectEx

  CallWindowProcW

  GetWindowRect

  DestroyWindow

  IsWindowVisible

  SetWindowPos

  EnumChildWindows

  CreateWindowExW

  SendMessageW

  IsWindow

  OffsetRect

  LoadCursorW

  SetCursor

  SetWindowLongW

  GetClientRect

  GetParent

  PtInRect

  BeginPaint

  EndPaint

  UnregisterClassW

  GetKeyState

  HideCaret

  ShowCaret

  CreateCaret

  DestroyCaret

  ClientToScreen

  SetActiveWindow

  SetCaretPos

  UpdateLayeredWindow

  TranslateMessage

  gdi32

  SetTextAlign

  GetTextColor

  GetDeviceCaps

  CombineRgn

  CreateRectRgn

  GetDIBits

  ExtCreatePen

  LineTo

  MoveToEx

  ExtTextOutW

  CreateFontW

  GetObjectW

  SetBrushOrgEx

  ExcludeClipRect

  SetViewportOrgEx

  StartPage

  GetTextMetricsW

  TextOutW

  EndPage

  GetBkColor

  SetStretchBltMode

  GetTextExtentPoint32W

  CreatePen

  Rectangle

  SelectClipRgn

  DeleteDC

  CreateCompatibleDC

  SelectObject

  SaveDC

  CreateCompatibleBitmap

  BitBlt

  SetBkMode

  SetTextColor

  RestoreDC

  DeleteObject

  ExtSelectClipRgn

  SetBkColor

  CreateSolidBrush

  IntersectClipRect

  advapi32

  LookupPrivilegeValueW

  RegEnumValueW

  RevertToSelf

  RegSaveKeyExW

  LookupAccountNameW

  ControlService

  QueryServiceStatusEx

  CloseServiceHandle

  OpenServiceW

  OpenSCManagerW

  AccessCheck

  IsValidSecurityDescriptor

  GetTokenInformation

  GetLengthSid

  RegDeleteValueW

  RegOpenKeyExW

  RegSetValueExW

  RegEnumKeyExW

  RegCreateKeyExW

  RegDeleteKeyW

  RegQueryInfoKeyW

  RegCloseKey

  DeregisterEventSource

  RegisterEventSourceW

  ReportEventW

  CryptAcquireContextW

  CryptReleaseContext

  CryptDestroyKey

  CryptSetHashParam

  CryptGetProvParam

  CryptGetUserKey

  CryptExportKey

  CryptDecrypt

  CryptCreateHash

  CryptDestroyHash

  CryptSignHashW

  CryptEnumProvidersW

  GetNamedSecurityInfoW

  GetExplicitEntriesFromAclW

  InitializeAcl

  SetEntriesInAclW

  SetNamedSecurityInfoW

  OpenProcessToken

  RegQueryValueExW

  InitializeSecurityDescriptor

  SetSecurityDescriptorOwner

  RegSetKeySecurity

  AddAccessAllowedAce

  SetSecurityDescriptorDacl

  ConvertSidToStringSidW

  AdjustTokenPrivileges

  GetUserNameW

  DuplicateToken

  SetSecurityDescriptorGroup

  AllocateAndInitializeSid

  OpenThreadToken

  FreeSid

  shell32

  SHParseDisplayName

  ShellExecuteW

  SHOpenFolderAndSelectItems

  ole32

  CoTaskMemFree

  CreateStreamOnHGlobal

  CoInitializeEx

  CoTaskMemRealloc

  CoCreateInstance

  CoUninitialize

  CoInitialize

  CoTaskMemAlloc

  oleaut32

  VariantInit

  VariantClear

  SysAllocString

  VarUI4FromStr

  SysFreeString

  shlwapi

  StrCmpNIW

  ord1

  StrCmpIW

  comctl32

  ord410

  ord413

  ord412

  msimg32

  AlphaBlend

  bcrypt

  BCryptGenRandom

  Sections

  .text

  Size: 4.5MB - Virtual size: 4.5MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 893KB - Virtual size: 893KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 121KB - Virtual size: 166KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1.1MB - Virtual size: 1.1MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 202KB - Virtual size: 202KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ