Malwarebytes_Premium_4.6.8.311.rar
- SHA256 1ecebd923e9ad467f15616dcfcd565b33234c6f783bd6f87d70498c42faf9e26
Password
123
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Patch_MB_4.6.x.exe
Resource
win10ltsc2021-20250113-en
windows10-ltsc 2021-x64
33 signatures
300 seconds
General
- Target Malwarebytes_Premium_4.6.8.311.rar
- Size 338.2MB
- Sample250116-n26dpayphx
- SHA256 1ecebd923e9ad467f15616dcfcd565b33234c6f783bd6f87d70498c42faf9e26
- MD5 242a23447a12655317e79864fe2e5103
- SHA1 ce09a5a0bd7fb9a57d46c04e50d59bee07125dda
- SHA512 da8ce0705a64466de059a7e59861fb6696b5a43dd3c4f6e83c9d81f8fdea45aeb218d398107fa687b96a621a182967f22bfe20cf47236e3fcceb40b5e627d852
- SSDEEP 6291456:3qFLKcfUskZ1e1LLA+Ffwl8HYo21TOGXntmwsIGAfTHEWJl3VtRUwWqdSh3vhRy7:6Mc3euHYoHGXnILAfZrtQUShfA
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Patch_MB_4.6.x.exe
File Explorer
-
Malwarebytes_Premium_4.6.8.311.rar.rar 338.2MB
-
How to Install.txt165B
-
Patch/Patch.7z.7z 64.9MB
-
Patch_MB_4.6.x.exe.exe 65.2MB
-
Patch/readme.txt1KB
-
Setup/MBSetup.exe.exe 287.0MB
How to Install.txt
- SHA256 a90af4edb105156a7d470f990cc158f7e7e962e0e013d484f36674a6aa2e14bd
- MD5 04f9f8a2552ce1f4d8f656269d6c0a19
- SHA1 2ee9fdeed53a65ec16396f801d413bb52d84675b
- SHA512 95c757a2d5c435ef80eaf7b60188dbe8f5bc29fa9f30976abbf7307123a505f5431a364102878ee74e98754615bf187af94ce8eb708fbe169e537f2b47dfb59f
- MD5 SHA1 SHA512
Patch/Patch.7z
- SHA256 0a7123e2a0a02951c72048495c56fa5d38ea804d178268e24347be4db7a3c219
- MD5 8a582ac6dc360876421cea9e8f861980
- SHA1 6919461dc29b5cadb50fb261cb1acdc1d759f504
- SHA512 e32a7e89b8375bcebcb22666bbd9b09b71bf31d080115a881a7a9b9241b4f34d9b6c436958ea35fdb4fe560c41296d42879978f45b89abf25a35a7b5b7791763
- SSDEEP 1572864:HRqVKa7D6XdsVfVAhN+EHVFBEqBEGUmJH7rd2FQ9cDqjrzoPMUCcExzArh:HR07D6XdsZV8N+oKqKiH7rdDcDOXoPMk
- MD5 SHA1 SHA512 SSDEEP
Password
123
Patch_MB_4.6.x.exe
- IMPHASH 81530254b85f34245257b4cb8cfcd6a1
- SHA256 139d053d79773b0a222c1217511f860e3bc1b6f82f0694fcd8be34417fa4d1c7
- MD5 3f44b49e3adca0e1a5f82553a72362c3
- SHA1 0c1070cb840ad39150467df43456c8f39a2ba7a6
- SHA512 7f33016a43e0dc786d4fb99ac3b6cb8453aebe5ecd926b2cf26cefc16e1e8902c91891493d58c526d0471b8900a865b0737c6e7e59f069450bbe38f04f4b653d
- SSDEEP 1572864:SEsyRx4b2ot/G1+aGepsIq3gkJfDzkRl8fwAmpWnhEgo5BTEePUox7KQnx:SER4b2ot/c+3epxmJE38fwA7hE1jTEeL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Password
123
Minor OS version
2
Major OS version
5
Entry point
381344
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
user32
MessageBoxA
CharNextW
LoadStringW
OemToCharW
MessageBoxW
LoadStringW
GetSystemMetrics
CharUpperW
CharLowerBuffW
kernel32
Sleep
VirtualFree
VirtualAlloc
HeapFree
HeapAlloc
GetProcessHeap
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwindEx
RtlUnwind
RaiseException
ExitProcess
SwitchToThread
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
LocalFree
LocalAlloc
GetModuleHandleW
FreeLibrary
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQueryEx
VirtualQuery
VirtualFree
UnmapViewOfFile
SwitchToThread
SizeofResource
SetLastError
SetFileTime
SetFilePointer
SetEvent
SetEnvironmentVariableW
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReadFile
MapViewOfFile
LockResource
LocalFree
LocalFileTimeToFileTime
LoadResource
LeaveCriticalSection
IsValidLocale
InitializeCriticalSection
GetVersionExW
GetTickCount
GetThreadLocale
GetTempPathW
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCommandLineW
GetCPInfo
FreeResource
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
EnterCriticalSection
DosDateTimeToFileTime
DeleteFileW
DeleteCriticalSection
CreateProcessW
CreateFileMappingW
CreateFileW
CreateEventW
CreateDirectoryW
CompareStringW
CloseHandle
Sleep
shfolder
SHGetFolderPathW
msvcrt
memcpy
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Name
.text
Size
371KB
Virtual Size
370KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
37KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
512B
Virtual Size
396B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
150B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
416B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Patch/readme.txt
- SHA256 a98612fc95105ee46a85733d779d7b8cb915c642cfa12bf799c199f142396989
- MD5 0f28cf81ba931593a7c4005b13706a34
- SHA1 d51b0e0f03b797861b5a9cda68d4883b797e32d5
- SHA512 0798b1ff1d854611dbf1df3c4eb9b6ce614e6667bbdf704db858c7213a8ceadb0d8e9316e336b76d10a28f161c1c71bbe66add5d22cac6c2468ca23db75110f5
- MD5 SHA1 SHA512
Setup/MBSetup.exe
- IMPHASH 64f7bc8815496ea07e67416229607846
- SHA256 9921c3ae6574481589dcfa1b0cec01347b99d553d70a231a0055f05831e3024c
- MD5 93d330f24a9b0318585ac86d6f18d3c9
- SHA1 92f70c42cfa336a6e087e93bbcb1b447f2d33fa3
- SHA512 71625539bc24e84be9d5aa63d6d59aa985c74d3020cfd9ddbf91db0dad79f4b88cbc0c018f53dff8bc66f8a28a2ca55b4958d3310db2d7dd4965fad3800dcf1a
- SSDEEP 6291456:+vq4Rmv9rthzxQDb6sivo3r4NarthzxQDb6v5S09u6xQqrrgLL5C0Og:YxmlxQDF+oENGxQDOS09u6xQqr0JC0z
- MD5 SHA1 SHA512 SSDEEP
Password
123
PE Signature issue
Digest
4e:1b:ef:11:90:c3:4e:0e:0c:b8:c1:a6:7e:84:d1:ea:db:eb:76:91:47:66:05:ab:a9:73:48:5a:b9:9a:45:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=CA,C=US
Chains
Jan 3, 2024
Digest
4e:1b:ef:11:90:c3:4e:0e:0c:b8:c1:a6:7e:84:d1:ea:db:eb:76:91:47:66:05:ab:a9:73:48:5a:b9:9a:45:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Malwarebytes Inc.,O=Malwarebytes Inc.,ST=California,C=US
Chains
Jan 3, 2024
CN=Malwarebytes Inc.,O=Malwarebytes Inc.,ST=California,C=US
CN=Sectigo RSA Code Signing CA 2,O=Sectigo Limited,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Subject
CN=Malwarebytes Inc.,O=Malwarebytes Inc.,ST=California,C=US
Serial Number
a6:57:f7:78:b3:1a:e5:23:d6:67:13:17:18:d1:6e:b2
Issuer
CN=Sectigo RSA Code Signing CA 2,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 23, 2022 - Mar 16, 2025
Subject
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Serial Number
01:fd:6d:30:fc:a3:ca:51:a8:1b:bc:64:0e:35:03:2d
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 1, 2010 - Jan 18, 2038
Subject
CN=Sectigo RSA Code Signing CA 2,O=Sectigo Limited,C=GB
Serial Number
9e:02:b0:e9:4a:ce:b2:10:9c:a1:e9:83:6b:e0:c2:db
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2021 - May 24, 2036
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Serial Number
54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 16, 2020 - Apr 16, 2045
Subject
CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=CA,C=US
Serial Number
33:00:00:c5:7d:36:b4:80:9d:a9:d6:4c:e8:00:00:00:00:c5:7d
Issuer
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 3, 2024 - Jan 6, 2024
Subject
CN=Malwarebytes Inc,O=Malwarebytes Inc,L=Santa Clara,ST=CA,C=US
Serial Number
33:00:00:c5:7d:36:b4:80:9d:a9:d6:4c:e8:00:00:00:00:c5:7d
Issuer
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 3, 2024 - Jan 6, 2024
Subject
CN=Microsoft ID Verified CS AOC CA 02,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:04:96:50:4b:d2:db:ee:cb:88:00:00:00:00:00:04
Issuer
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 13, 2021 - Apr 13, 2026
Subject
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 1, 2021 - Apr 1, 2036
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
448169
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
d:\jenkins\workspace\A_MB4_MBSetup\bin\Win32\Offline Release\MBSetup.pdb
kernel32
lstrcmpiW
LeaveCriticalSection
RaiseException
EnterCriticalSection
GetLastError
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
InitializeCriticalSectionEx
DeleteCriticalSection
IsWow64Process
GetCurrentProcess
VerifyVersionInfoW
VerSetConditionMask
GetSystemDirectoryW
CreateFileW
DeviceIoControl
CloseHandle
GetCurrentThreadId
SetLastError
LockResource
FindResourceExW
Sleep
GlobalFree
LocalFree
FormatMessageW
LocalAlloc
CallNamedPipeW
GetWindowsDirectoryW
SetCurrentDirectoryW
GetCommandLineW
GetModuleHandleW
CreateMutexW
GetNativeSystemInfo
GetDiskFreeSpaceExW
FindFirstFileW
FindClose
CreateProcessW
FindNextFileW
WideCharToMultiByte
GlobalAlloc
GlobalLock
SetThreadUILanguage
LoadLibraryW
CreateDirectoryW
GetLogicalDrives
GetTempPathW
DeleteFileW
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
OpenProcess
ResumeThread
TerminateProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
K32GetModuleFileNameExW
GetCurrentDirectoryW
GetCurrentProcessId
OutputDebugStringW
SetEndOfFile
WriteConsoleW
SetStdHandle
FreeLibrary
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
DecodePointer
MulDiv
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
GetStringTypeW
FindFirstFileExW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
RemoveDirectoryW
AreFileApisANSI
CopyFileW
DuplicateHandle
WaitForSingleObjectEx
SwitchToThread
GetCurrentThread
QueryPerformanceCounter
TryEnterCriticalSection
EncodePointer
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
IsDebuggerPresent
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
SetEvent
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
CreateTimerQueue
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
GetVersionExW
ReleaseSemaphore
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RtlUnwind
ExitProcess
GetModuleHandleExW
GetCommandLineA
ExitThread
GetStdHandle
WriteFile
GetFileType
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
GetFileSizeEx
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadConsoleW
GetTimeZoneInformation
dwmapi
DwmGetWindowAttribute
crypt32
CertCloseStore
CertFreeCertificateContext
CertGetNameStringW
CertFindCertificateInStore
CryptMsgGetParam
CryptQueryObject
CryptMsgClose
rpcrt4
RpcStringFreeW
UuidToStringW
UuidCreate
UuidToStringA
RpcStringFreeA
Name
.text
Size
726KB
Virtual Size
726KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
178KB
Virtual Size
177KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
283.5MB
Virtual Size
283.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=259, version=26213,
count=186, id=261, version=26213,
count=23, id=259, version=26706,
count=37, id=260, version=26706,
count=140, id=261, version=26706,
count=28, id=260, version=26213,
count=2, id=262, version=26213,
count=11, id=257, version=26213,
count=436, id=1, productName=Unmarked objects,
count=34, id=265, version=27049,
count=1, id=255, version=27049,
count=2, id=151,
count=1, id=258, version=27049,