2026-05-22_08593d77b9a1c41c17f6fe39175c7f47_coinminer_glassworm_icedid_njrat_remcos_ryuk_sliver

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-22_08593d77b9a1c41c17f6fe39175c7f47_coinminer_glassworm_icedid_njrat_remcos_ryuk_sliver
Size 36.5MB
Sample260522-spl7hafv2n
SHA256 ed93f11962a598d4df3327cc06f474e2ca170a3b16698e8853697df37587aa67
MD5 08593d77b9a1c41c17f6fe39175c7f47
SHA1 530f115d6e209bf6b24c8f206c8999520c13d4cd
SHA512 2120188387d8d7b1f29b27775987e3fb4ba4d4fbc64b0ec78750ae078de13c723f66eeddd8e47479b67c1d31f53ea1ffedd4674be126c4543bae213b48d527d5
SSDEEP 786432:nCgvIb7qQ7Yp6S1+0K7SXydU0gaZ/ilxEBy:nCgiJYp6So0dN
TLSH
T17487BE8A76A401D8D0B3C17CCE678547E771B4166B3597DF226856A92F33AF0AA3F310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-05-22_08593d77b9a1c41c17f6fe39175c7f47_coinminer_glassworm_icedid_njrat_remcos_ryuk_sliver

File Explorer

2026-05-22_08593d77b9a1c41c17f6fe39175c7f47_coinminer_glassworm_icedid_njrat_remcos_ryuk_sliver

.exe 36.5MB

2026-05-22_08593d77b9a1c41c17f6fe39175c7f47_coinminer_glassworm_icedid_njrat_remcos_ryuk_sliver

IMPHASH 2b2983c2cbcd8cf2467c389f96cdc1e5
SHA256 ed93f11962a598d4df3327cc06f474e2ca170a3b16698e8853697df37587aa67
MD5 08593d77b9a1c41c17f6fe39175c7f47
SHA1 530f115d6e209bf6b24c8f206c8999520c13d4cd
SHA512 2120188387d8d7b1f29b27775987e3fb4ba4d4fbc64b0ec78750ae078de13c723f66eeddd8e47479b67c1d31f53ea1ffedd4674be126c4543bae213b48d527d5
SSDEEP 786432:nCgvIb7qQ7Yp6S1+0K7SXydU0gaZ/ilxEBy:nCgiJYp6So0dN
TLSH
T17487BE8A76A401D8D0B3C17CCE678547E771B4166B3597DF226856A92F33AF0AA3F310
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

4a:b0:ae:f9:3b:9c:f3:ba:ba:da:b9:b9:d0:5d:3b:3a:e2:97:c1:fb:07:81:a6:d3:b9:4b:04:68:0c:ff:c9:48

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=938 754 702 00018,CN=ADLICE,O=ADLICE,ST=Loire-Atlantique,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652

Chains

Mar 11, 2025

SERIALNUMBER=938 754 702 00018,CN=ADLICE,O=ADLICE,ST=Loire-Atlantique,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

PE Signature issue

Digest

0d:d7:9c:3f:e9:71:f9:47:dc:bd:47:e0:42:ea:68:69:fe:24:5f:40

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

SERIALNUMBER=938 754 702 00018,CN=ADLICE,O=ADLICE,ST=Loire-Atlantique,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652

Chains

Mar 11, 2025

SERIALNUMBER=938 754 702 00018,CN=ADLICE,O=ADLICE,ST=Loire-Atlantique,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Subject

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Serial Number

7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f

Issuer

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Serial Number

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Mar 21, 2036

Subject

CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB

Serial Number

3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89

Issuer

CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 15, 2024 - Apr 14, 2035

Subject

CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB

Serial Number

36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 22, 2021 - Jan 18, 2038

Subject

SERIALNUMBER=938 754 702 00018,CN=ADLICE,O=ADLICE,ST=Loire-Atlantique,C=FR,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#13024652

Serial Number

ff:72:a1:3e:68:c0:cd:c5:75:04:b3:f7:11:cb:92:a3

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 3, 2025 - Mar 2, 2028

Minor OS version

Major OS version

Entry point

16984464

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

E:\Adlice\RogueKillerQt\x64\RelWithDebInfo\RogueKiller.pdb

ws2_32

getnameinfo freeaddrinfo getaddrinfo WSAIoctl inet_pton

winmm

timeKillEvent timeSetEvent PlaySoundW

netapi32

NetShareEnum NetApiBufferFree NetUserGetInfo

kernel32

CreateFiber QueryPerformanceCounter ConvertFiberToThread ConvertThreadToFiber LoadLibraryA GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW FormatMessageA InitializeCriticalSectionEx SleepEx QueryPerformanceFrequency GetSystemDirectoryA VerifyVersionInfoA WaitForSingleObjectEx ExpandEnvironmentStringsA CreateFileMappingA SwitchToThread WTSGetActiveConsoleSessionId CheckRemoteDebuggerPresent GlobalUnlock GlobalLock GlobalSize lstrcmpW CreateFileA GetFileSizeEx GetUserDefaultLangID CompareStringEx GetLocalTime SetThreadPriority GetThreadPriority GetTickCount64 OutputDebugStringW IsProcessorFeaturePresent GetCurrencyFormatW GetUserDefaultLCID GetUserPreferredUILanguages GetStartupInfoW GetLogicalDrives SetEndOfFile SetFileTime GetFileInformationByHandleEx CompareStringW LCMapStringW FindCloseChangeNotification FindFirstChangeNotificationW FindNextChangeNotification FindFirstFileExW UnregisterWaitEx RegisterWaitForSingleObject GetTimeZoneInformation InterlockedPushEntrySList RtlUnwindEx IsDebuggerPresent InitializeSListHead DeleteFiber UnhandledExceptionFilter GetCPInfo DecodePointer EncodePointer GetStringTypeW SwitchToFiber GetStdHandle GetModuleHandleExW TlsFree TlsSetValue TlsGetValue TlsAlloc GetCurrentThreadId GlobalFree GlobalAlloc LoadLibraryExW QueueUserWorkItem SetStdHandle GetConsoleCP GetACP HeapReAlloc IsValidLocale EnumSystemLocalesW HeapSize WriteProcessMemory GetModuleFileNameA GetVersionExA GetCurrentThread OutputDebugStringA RtlCaptureContext lstrcpyW lstrcmpA IsBadWritePtr SetEnvironmentVariableA SetEnvironmentVariableW WriteConsoleW IsValidCodePage GetOEMCP FindFirstFileExA FindNextFileA GetEnvironmentStringsW FreeEnvironmentStringsW LoadResource LockResource SizeofResource FindResourceW HeapDestroy GetPrivateProfileStringW GetFileSize HeapCreate VirtualQueryEx AreFileApisANSI LockFile UnlockFileEx HeapValidate GetTempPathA GetDiskFreeSpaceA GetFileAttributesA FlushViewOfFile DeleteFileA HeapCompact UnlockFile LockFileEx SetUnhandledExceptionFilter SetFilePointer IsBadReadPtr lstrlenW lstrcmpiW VirtualFree VirtualAlloc GetVolumeNameForVolumeMountPointW SetFilePointerEx GetVolumePathNameW GetFileType GetFileInformationByHandle GetDiskFreeSpaceW ResumeThread OpenThread CreateThread LocalAlloc GetSystemTimeAsFileTime RaiseException GetEnvironmentVariableW UnmapViewOfFile MapViewOfFile CreateFileMappingW GetTempPathW GetTempFileNameW GetVolumePathNamesForVolumeNameW QueryDosDeviceW DefineDosDeviceW K32GetModuleInformation Module32NextW Module32FirstW CreateRemoteThread DeviceIoControl CreateMutexW ReleaseMutex GetVersionExW VerSetConditionMask CancelIo GetOverlappedResult WaitNamedPipeW CreateNamedPipeW PeekNamedPipe SetNamedPipeHandleState DisconnectNamedPipe ConnectNamedPipe SetHandleInformation WriteFile ReadFile FlushFileBuffers GetComputerNameW FormatMessageW GetSystemDirectoryW GetSystemInfo GetSystemTimes SetErrorMode GetCommandLineW WideCharToMultiByte MultiByteToWideChar LoadLibraryW FreeLibrary LocalFree GetThreadLocale GetUserGeoID GetGeoInfoW GetLocaleInfoW GetModuleHandleW GetModuleFileNameW Sleep GetProcessHeap HeapFree HeapAlloc GetFullPathNameA Thread32Next Thread32First Process32NextW Process32FirstW CreateToolhelp32Snapshot K32GetProcessImageFileNameW K32GetModuleFileNameExW K32GetModuleBaseNameW TerminateJobObject AssignProcessToJobObject CreateJobObjectW GetProcAddress GetModuleHandleA ReadProcessMemory OpenProcess GetProcessId CreateProcessW TerminateThread GetExitCodeProcess TerminateProcess GetProcessTimes SetLastError DuplicateHandle GetCurrentProcessId GetCurrentProcess MoveFileExW MoveFileW CopyFileW GetLastError SetFileAttributesW RemoveDirectoryW GetFileTime GetFileAttributesExW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CreateFileW CreateDirectoryW GetShortPathNameW GetFullPathNameW GetCurrentDirectoryW ExpandEnvironmentStringsW GetTimeFormatW GetDateFormatW SystemTimeToFileTime FileTimeToSystemTime TzSpecificLocalTimeToSystemTime SystemTimeToTzSpecificLocalTime GetSystemTime CompareFileTime GetTickCount DeleteCriticalSection TryEnterCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection WaitForMultipleObjects CreateEventW WaitForSingleObject ResetEvent SetEvent GetConsoleWindow GetDriveTypeW GetLongPathNameW GetVolumeInformationW CloseHandle ExitProcess SetConsoleCtrlHandler ExitThread FreeLibraryAndExitThread GetCommandLineA InitializeCriticalSection

user32

LoadIconW EnumDisplayMonitors GetMonitorInfoW MonitorFromWindow SetMenuItemInfoW GetMenuItemInfoW TrackPopupMenu RemoveMenu ModifyMenuW AppendMenuW InsertMenuW DestroyMenu CreatePopupMenu CreateMenu DrawMenuBar SetMenu LoadImageW GetSysColorBrush ChildWindowFromPointEx WindowFromPoint GetCursorPos GetFocus IsHungAppWindow GetClassInfoW UnregisterClassW UnregisterPowerSettingNotification RegisterPowerSettingNotification GetKeyboardLayoutList GetAncestor MonitorFromPoint KillTimer RegisterDeviceNotificationW GetDC ReleaseDC DrawIconEx GetIconInfo GetSystemMenu EnableMenuItem GetSystemMetrics GetSysColor SystemParametersInfoW MessageBoxW CharNextExA SetClipboardViewer ChangeClipboardChain RegisterClipboardFormatW GetKeyboardLayout RegisterWindowMessageW IsWindowEnabled CreateCaret DestroyCaret HideCaret ShowCaret SetCaretPos PeekMessageW IsZoomed GetKeyState GetKeyboardState ToAscii ToUnicode MapVirtualKeyW TrackPopupMenuEx SetCursorPos GetCursor LoadCursorW CreateCursor CreateIconIndirect UnregisterDeviceNotification GetCursorInfo RegisterClassW EnumDisplayDevicesW GetClipboardFormatNameW TrackMouseEvent GetMessageExtraInfo GetAsyncKeyState GetTouchInputInfo CloseTouchInputHandle RealGetWindowClassW ChangeWindowMessageFilterEx TranslateMessage DispatchMessageW GetQueueStatus MsgWaitForMultipleObjectsEx RegisterClassExW PostMessageW SetTimer EnumWindows GetWindowThreadProcessId ExitWindowsEx ShowWindow SendMessageW IsWindowVisible GetForegroundWindow GetWindowTextW DestroyCursor GetWindow CharNextW SetParent GetParent SetWindowLongPtrW GetWindowLongPtrW SetWindowLongW GetWindowLongW ScreenToClient ClientToScreen SetCursor AdjustWindowRectEx GetWindowRect GetClientRect SetWindowTextW InvalidateRect SetWindowRgn GetUpdateRect EndPaint BeginPaint SetForegroundWindow GetMenu ReleaseCapture SetCapture GetCapture IsTouchWindow UnregisterTouchWindow RegisterTouchWindow SetFocus IsIconic SetWindowPlacement GetWindowPlacement SetWindowPos MoveWindow FlashWindowEx SetLayeredWindowAttributes UpdateLayeredWindow DestroyWindow IsChild CreateWindowExW DefWindowProcW AttachThreadInput UpdateLayeredWindowIndirect GetDesktopWindow GetCaretBlinkTime MessageBeep IsWindow GetDoubleClickTime FindWindowA SendMessageA GetUserObjectInformationW EnumChildWindows GetClassNameW DestroyIcon GetProcessWindowStation

gdi32

CreateFontIndirectW EnumFontFamiliesExW GetFontData GetStockObject AddFontResourceExW RemoveFontResourceExW AddFontMemResourceEx RemoveFontMemResourceEx GetTextMetricsW GetTextFaceW GetCharABCWidthsW SetPixelFormat GetGlyphOutlineW GdiFlush GetTextExtentPoint32W GetCharABCWidthsI SetBkMode SetGraphicsMode SetTextColor SetTextAlign SetWorldTransform ExtTextOutW GetPixelFormat DescribePixelFormat ChoosePixelFormat CreateBitmap CreateDCW GetRegionData GetObjectW GetBitmapBits GetOutlineTextMetricsW SwapBuffers CreateCompatibleBitmap GetDeviceCaps SetLayout SelectClipRgn OffsetRgn CreateRectRgn CombineRgn BitBlt CreateDIBSection GetDIBits DeleteObject DeleteDC GetCharABCWidthsFloatW CreateCompatibleDC SelectObject

shell32

SHBrowseForFolderW SHGetKnownFolderIDList SHGetPathFromIDListW SHCreateItemFromIDList ord727 SHGetStockIconInfo SHGetFileInfoW SHGetFolderPathW SHGetMalloc CommandLineToArgvW ShellExecuteW Shell_NotifyIconW ord51 SHCreateItemFromParsingName Shell_NotifyIconGetRect SHGetKnownFolderPath ShellExecuteExW

ole32

CoTaskMemAlloc OleSetClipboard OleGetClipboard OleFlushClipboard OleIsCurrentClipboard DoDragDrop ReleaseStgMedium CoGetMalloc CoInitialize OleUninitialize OleInitialize RevokeDragDrop RegisterDragDrop CoLockObjectExternal CoSetProxyBlanket StringFromCLSID PropVariantClear CoCreateInstance CoInitializeSecurity CoInitializeEx CoUninitialize CoCreateGuid StringFromGUID2 CoTaskMemFree CoTaskMemRealloc

oleaut32

SysAllocString SysFreeString SysStringLen VariantInit VariantClear SafeArrayPutElement SafeArrayCreateVector VarUI4FromStr

advapi32

GetSecurityInfo BuildTrusteeWithSidW GetEffectiveRightsFromAclW MapGenericMask AccessCheck CreateProcessAsUserW OpenProcessToken RegFlushKey SystemFunction036 GetSidSubAuthorityCount GetSidSubAuthority AdjustTokenPrivileges DuplicateTokenEx LookupPrivilegeValueW DeregisterEventSource RegisterEventSourceW ReportEventW RegCloseKey RegCreateKeyExW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegSetValueExW ChangeServiceConfigW ChangeServiceConfig2W CloseServiceHandle ControlService CreateServiceW DeleteService EnumDependentServicesW EnumServicesStatusW OpenSCManagerW OpenServiceW CryptEnumProvidersW CryptSignHashW CryptDestroyHash CryptCreateHash CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey CryptReleaseContext CryptAcquireContextW RevertToSelf ImpersonateLoggedOnUser LookupAccountNameW GetLengthSid CopySid ConvertStringSidToSidW ConvertSidToStringSidW SetNamedSecurityInfoW GetNamedSecurityInfoW GetExplicitEntriesFromAclW RegSetKeySecurity RegGetKeySecurity LookupAccountSidW IsValidSid GetAce GetUserNameW DuplicateToken RegQueryInfoKeyW RegEnumValueW RegEnumKeyExW RegDeleteValueW SetEntriesInAclW QueryServiceConfigW QueryServiceConfig2W QueryServiceStatus QueryServiceStatusEx SetServiceObjectSecurity StartServiceW AllocateAndInitializeSid CheckTokenMembership FreeSid GetTokenInformation InitializeAcl InitializeSecurityDescriptor IsValidSecurityDescriptor SetSecurityDescriptorDacl SetSecurityDescriptorOwner

mpr

WNetGetConnectionW

userenv

UnloadUserProfile GetProfilesDirectoryW GetUserProfileDirectoryW DestroyEnvironmentBlock CreateEnvironmentBlock LoadUserProfileW

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

shlwapi

PathRemoveBackslashW StrCmpIW StrDupW SHStrDupW AssocQueryStringW StrFormatByteSizeW PathUnExpandEnvStringsW PathUnquoteSpacesW PathSearchAndQualifyW PathRemoveFileSpecW PathRemoveExtensionW PathRemoveBlanksW PathRemoveArgsW PathQuoteSpacesW PathIsNetworkPathW PathIsRelativeW PathIsPrefixW PathIsDirectoryW PathGetDriveNumberW PathGetArgsW PathFindFileNameW PathFindExtensionW PathFileExistsW PathCommonPrefixW PathAppendW PathAddBackslashW

wtsapi32

WTSQueryUserToken WTSFreeMemory WTSEnumerateSessionsW WTSQuerySessionInformationW

wininet

InternetGetConnectedState

ntdll

RtlLookupFunctionEntry RtlVirtualUnwind NtUnloadDriver RtlPcToFileHeader NtQuerySystemInformation NtQueryKey NtCreateKey RtlInitUnicodeString NtLoadDriver NtSetValueKey NtDeleteValueKey NtOpenKey NtDeleteKey

wsock32

shutdown getsockopt ntohs WSAStartup WSACleanup inet_ntoa WSAAsyncSelect gethostname sendto recvfrom htonl select __WSAFDIsSet htons getpeername socket setsockopt listen connect closesocket bind accept WSASetLastError send recv WSAGetLastError getsockname

crypt32

CertGetNameStringW CertNameToStrW CertFreeCertificateContext CryptQueryObject CertCloseStore CryptMsgGetParam CryptMsgClose CryptDecodeObject CertOpenStore CertEnumCertificatesInStore CertDuplicateCertificateContext CertFindCertificateInStore CertGetCertificateContextProperty

wintrust

CryptCATAdminAcquireContext CryptCATAdminReleaseContext CryptCATAdminReleaseCatalogContext CryptCATAdminEnumCatalogFromHash CryptCATCatalogInfoFromContext WinVerifyTrust CryptCATAdminCalcHashFromFileHandle

bcrypt

BCryptGenRandom BCryptDeriveKeyPBKDF2 BCryptDestroyHash BCryptFinishHash BCryptHashData BCryptCreateHash BCryptDestroyKey BCryptEncrypt BCryptGenerateSymmetricKey BCryptCloseAlgorithmProvider BCryptSetProperty BCryptGetProperty BCryptOpenAlgorithmProvider

dwmapi

DwmIsCompositionEnabled DwmSetWindowAttribute DwmGetWindowAttribute DwmEnableBlurBehindWindow

uxtheme

GetCurrentThemeName IsAppThemed OpenThemeData GetThemePartSize GetThemeColor GetThemeInt GetThemeEnumValue GetThemeMargins GetThemePropertyOrigin GetThemeTransitionDuration CloseThemeData ord47 GetThemeBackgroundRegion IsThemeBackgroundPartiallyTransparent GetThemeBool SetWindowTheme IsThemeActive

imm32

ImmGetCompositionStringW ImmGetDefaultIMEWnd ImmGetContext ImmReleaseContext ImmAssociateContext ImmAssociateContextEx ImmGetOpenStatus ImmNotifyIME ImmSetCompositionWindow ImmSetCandidateWindow ImmGetVirtualKey

propsys

PSGetNameFromPropertyKey PropVariantToString

Name

.text

Size

18.3MB

Virtual Size

18.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

10.5MB

Virtual Size

10.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

311KB

Virtual Size

590KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

305B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.qtmetad

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.qtmimed

Size

315KB

Virtual Size

315KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

1024B

Virtual Size

524B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

1024B

Virtual Size

544B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5.8MB

Virtual Size

5.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

114KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=2, id=261, version=23013,

count=30, id=241, version=40116,

count=202, id=243, version=40116,

count=53, id=242, version=40116,

count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=7, id=199, version=41118,

count=14, id=259, version=24123,

count=81, id=261, version=24123,

count=42, id=260, version=24123,

count=2, id=209, version=65501,

count=4, id=206, version=65501,

count=4, id=208, version=65501,

count=1, id=259, productName=VS2019 v16.4.0 build 28314, version=28314,

count=14, id=260, productName=VS2015 UPD3 build 24213, version=24213,

count=7, id=264, version=24215,

count=1056, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=57, id=203, version=65501,

count=871, id=1, productName=Unmarked objects,

count=1041, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=2, id=151,

count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,