loader[.]exe | Triage™

Resubmissions

12/07/2026, 09:19

260712-laaftshv3s10

12/07/2026, 09:10

260712-k4279sft4p10

12/07/2026, 08:59

260712-kxtbsae19m10

Sharing

Copy URL Twitter E-mail

General

Target
loader.exe
Size 12.1MB
Sample260712-kxtbsae19m
SHA256 f18fbae4d9a0be70812fd7c7d0c9312f55756e2f8a637d9fa31e97021c6f46ca
MD5 4aa8d2b9e7148b55341bbef8eb3bf0d5
SHA1 c2086c74ab93ab19354973b0f82b6547ef5bda53
SHA512 b061b764a49cd35850e7c9791722788deb364532d8adb617437cdb088c6807bac4bf9fe7ff9f842578976853e98bd91da877e19602094a28dd5b122a00746618
SSDEEP 196608:knw23vekm+QUjOm3lmB/Gjr0vsN6YL6rtuGOV6UZLMcKj46q12:2w23vvM/g0vsUfO8UZtNd2
TLSH
T151D6BE1BA69901F8C0BAD1789A478C53F67178894335A7DB3B9C46121FE3BE4BA3D311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
loader.exe

File Explorer

loader.exe

.exe 12.1MB

loader.exe

IMPHASH 3d3f13b29faf86dd6471e49c780f524d
SHA256 f18fbae4d9a0be70812fd7c7d0c9312f55756e2f8a637d9fa31e97021c6f46ca
MD5 4aa8d2b9e7148b55341bbef8eb3bf0d5
SHA1 c2086c74ab93ab19354973b0f82b6547ef5bda53
SHA512 b061b764a49cd35850e7c9791722788deb364532d8adb617437cdb088c6807bac4bf9fe7ff9f842578976853e98bd91da877e19602094a28dd5b122a00746618
SSDEEP 196608:knw23vekm+QUjOm3lmB/Gjr0vsN6YL6rtuGOV6UZLMcKj46q12:2w23vvM/g0vsUfO8UZtNd2
TLSH
T151D6BE1BA69901F8C0BAD1789A478C53F67178894335A7DB3B9C46121FE3BE4BA3D311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10896460

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\source\repos\Unbanned-newui\x64\Release\LoaderNeon.pdb

winhttp

WinHttpSetTimeouts WinHttpCrackUrl WinHttpQueryDataAvailable WinHttpReceiveResponse WinHttpReadData WinHttpOpen WinHttpOpenRequest WinHttpSetOption WinHttpCloseHandle WinHttpSendRequest WinHttpQueryHeaders WinHttpConnect

kernel32

OpenThread VirtualQueryEx CheckRemoteDebuggerPresent SuspendThread RaiseException SetThreadContext SetFileAttributesW K32EnumProcessModules GetTickCount VirtualProtect FlushInstructionCache LocalAlloc LocalFree K32GetModuleInformation GetThreadId GetVolumeInformationW GetCommandLineA ReadFile GetFileSizeEx GetVersionExW K32GetProcessMemoryInfo GetNativeSystemInfo GlobalMemoryStatusEx SetUnhandledExceptionFilter FindFirstFileA FindNextFileA FindClose GetSystemTimeAsFileTime GetProcessTimes WriteFile GetFileAttributesExW GetDiskFreeSpaceExW OutputDebugStringA LoadLibraryExW LoadLibraryW FreeLibrary HeapCreate HeapDestroy HeapReAlloc GetSystemInfo RtlCaptureContext LoadLibraryA SwitchToFiber DeleteFiber CreateFiber ConvertThreadToFiber VirtualLock CopyFileW AreFileApisANSI CreateThread SetEvent CreateEventW GetFileAttributesW VirtualAlloc GetCurrentProcess GetCommandLineW VirtualFree DeleteFileW CreateFileW GetTempPathW CreateDirectoryW FindResourceW LoadResource LockResource CreateMutexW SizeofResource GetExitCodeProcess IsDebuggerPresent DebugBreak CreateProcessA WideCharToMultiByte GetModuleHandleW CreateProcessW GetProcessHeap VirtualQuery ExitProcess CreateMutexExW GetProcAddress HeapAlloc CloseHandle Process32FirstW OpenSemaphoreW DeleteFileA WaitForSingleObjectEx OutputDebugStringW Process32NextW GetLastError GetTickCount64 FormatMessageW GetTempPathA Sleep CancelIoEx PostQueuedCompletionStatus GetQueuedCompletionStatusEx GetQueuedCompletionStatus CreateIoCompletionPort InitializeConditionVariable InitializeSRWLock MapViewOfFile CreateFileMappingW Module32NextW ReadProcessMemory DeleteCriticalSection MultiByteToWideChar CreateToolhelp32Snapshot OpenProcess ReleaseMutex GetCurrentThreadId WaitForSingleObject GetModuleFileNameW TerminateProcess GetModuleHandleExW ReleaseSemaphore SetLastError HeapFree CreateSemaphoreExW GetModuleFileNameA SetFileInformationByHandle GetFileInformationByHandle FindFirstFileExW GetLocaleInfoEx FormatMessageA GetSystemTime EnumSystemFirmwareTables RtlUnwind HeapQueryInformation GetWindowsDirectoryW DeviceIoControl GetSystemFirmwareTable ExpandEnvironmentStringsW SystemTimeToFileTime GetConsoleMode WriteConsoleA GetStdHandle SetConsoleTextAttribute HeapSize WriteConsoleW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage GetTimeZoneInformation SetEnvironmentVariableW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW FlsFree FlsSetValue FlsGetValue GetThreadContext Module32FirstW TerminateThread GetCurrentThread K32EnumProcessModulesEx GetModuleHandleA DuplicateHandle UnmapViewOfFile ResumeThread GetSystemDirectoryW Thread32First GetEnvironmentVariableW InitializeCriticalSection LeaveCriticalSection Thread32Next K32GetModuleFileNameExW GetProcessId EnterCriticalSection SetConsoleTitleW AllocConsole QueryFullProcessImageNameW MoveFileExW GetCurrentProcessId SetStdHandle FlsAlloc FlushFileBuffers GetFileType ReadConsoleW GetConsoleOutputCP FreeLibraryAndExitThread ExitThread TlsFree TlsSetValue TlsGetValue GetConsoleScreenBufferInfo GetThreadTimes IsWow64Process TlsAlloc InitializeCriticalSectionAndSpinCount RtlUnwindEx InitializeSListHead GetStartupInfoW UnhandledExceptionFilter GetCPInfo CompareStringEx LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx WakeAllConditionVariable WakeConditionVariable InitOnceBeginInitialize InitOnceComplete CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork GetExitCodeThread ResetEvent GetCurrentDirectoryW GetSystemWow64DirectoryW DeactivateActCtx ActivateActCtx ReleaseActCtx FreeLibraryWhenCallbackReturns IsProcessorFeaturePresent GetStringTypeW SleepConditionVariableSRW TryAcquireSRWLockExclusive AcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive QueryPerformanceFrequency GetLogicalDrives FindFirstFileW WriteProcessMemory FindNextFileW SetFilePointer SetEndOfFile SetCurrentDirectoryA GlobalAddAtomA CreateFileA FileTimeToSystemTime lstrcatW VirtualProtectEx VirtualAllocEx lstrcpyW CreateRemoteThread VerifyVersionInfoW GlobalFindAtomA VirtualFreeEx MoveFileW GetFileTime GetComputerNameA Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection QueryPerformanceCounter SetFilePointerEx CreateActCtxW GetTempFileNameW GetFileInformationByHandleEx GetSystemTimeAsFileTime CreateEventA GetModuleHandleA TerminateProcess GetCurrentProcess CreateToolhelp32Snapshot Thread32First GetCurrentProcessId GetCurrentThreadId OpenThread Thread32Next CloseHandle SuspendThread ResumeThread WriteProcessMemory GetSystemInfo VirtualAlloc VirtualProtect VirtualFree GetProcessAffinityMask SetProcessAffinityMask GetCurrentThread SetThreadAffinityMask Sleep LoadLibraryA FreeLibrary GetTickCount SystemTimeToFileTime FileTimeToSystemTime GlobalFree HeapAlloc HeapFree GetProcAddress ExitProcess EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection MultiByteToWideChar GetModuleHandleW LoadResource FindResourceExW FindResourceExA WideCharToMultiByte GetThreadLocale GetUserDefaultLCID GetSystemDefaultLCID EnumResourceNamesA EnumResourceNamesW EnumResourceLanguagesA EnumResourceLanguagesW EnumResourceTypesA EnumResourceTypesW CreateFileW LoadLibraryW GetLastError FlushFileBuffers FlsSetValue GetCommandLineA GetCPInfo GetACP GetOEMCP IsValidCodePage EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RaiseException RtlPcToFileHeader RtlUnwindEx LCMapStringA LCMapStringW SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize WriteFile SetFilePointer GetConsoleCP GetConsoleMode HeapReAlloc InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA

user32

DestroyWindow AppendMenuA DestroyMenu TrackPopupMenu CreatePopupMenu GetWindowLongPtrW wsprintfW CharLowerW LoadIconW MsgWaitForMultipleObjects ReleaseCapture InvalidateRect GetAsyncKeyState GetClassNameW SetWindowLongW GetCursorPos SetForegroundWindow UpdateWindow PostQuitMessage KillTimer GetClientRect LoadCursorW TranslateMessage SetLayeredWindowAttributes EnumWindows MessageBoxA PeekMessageW GetMonitorInfoW SetTimer DispatchMessageW IsWindow ShowWindow RegisterClassExW GetSystemMetrics SendMessageW ScreenToClient CreateWindowExW MessageBoxW SetWindowPos IsWindowVisible GetWindowRect MonitorFromPoint PostMessageW ExitWindowsEx DefWindowProcW GetMessageW GetWindowThreadProcessId GetWindowLongW ReleaseDC SetProcessDPIAware SystemParametersInfoW GetDesktopWindow MonitorFromWindow GetDC SetWindowLongPtrW

gdi32

GetStockObject GetDeviceCaps

comdlg32

GetOpenFileNameW

advapi32

RegSetKeyValueW SystemFunction036 RegGetValueW EventUnregister EventWriteTransfer EventSetInformation EventRegister RegEnumKeyExW LookupPrivilegeValueW AdjustTokenPrivileges RegCloseKey AllocateAndInitializeSid OpenProcessToken FreeSid CheckTokenMembership RegOpenKeyExW RegQueryValueExW GetUserNameW CryptAcquireContextW CryptCreateHash CryptHashData CryptDestroyHash CryptGetHashParam CryptReleaseContext GetTokenInformation RegEnumValueW RegDeleteValueW RegCreateKeyW RegCopyTreeW RegSetValueExA RegSetValueExW ControlService SetNamedSecurityInfoW RegCreateKeyExW GetUserNameA RegCreateKeyExA SetEntriesInAclW CloseServiceHandle ConvertSidToStringSidA RegQueryInfoKeyW RegDeleteKeyExW RegOpenKeyA MakeAbsoluteSD GetNamedSecurityInfoW BuildExplicitAccessWithNameW SetSecurityDescriptorDacl RegOpenKeyW ConvertStringSecurityDescriptorToSecurityDescriptorW OpenThreadToken RegDeleteTreeW CryptGenRandom ConvertSidToStringSidW OpenServiceA DeleteService OpenSCManagerA QueryServiceStatus LsaNtStatusToWinError

shell32

ShellExecuteW SHGetFolderPathW ShellExecuteExW ShellExecuteA Shell_NotifyIconW SHFileOperationW SHGetKnownFolderPath

ole32

StringFromGUID2 CoUninitialize CoCreateInstance CoSetProxyBlanket CoInitializeSecurity CoTaskMemAlloc CoInitializeEx CoInitialize CoTaskMemFree

api-ms-win-shcore-scaling-l1-1-1

SetProcessDpiAwareness GetDpiForMonitor

wintrust

WinVerifyTrust

crypt32

CertFreeCertificateContext CertGetNameStringA CryptStringToBinaryA CryptQueryObject CertGetCertificateContextProperty CertCreateCertificateContext CryptEncodeObjectEx CertCloseStore CertFindCertificateInStore CryptMsgGetParam CryptMsgClose

iphlpapi

GetAdaptersInfo GetBestRoute GetIfTable SendARP

ws2_32

closesocket bind accept WSASend WSASocketA inet_addr freeaddrinfo inet_ntop WSAStartup getaddrinfo WSACleanup connect WSARecv WSAIoctl WSAGetLastError WSASetLastError socket shutdown setsockopt ntohs inet_pton htons htonl getsockopt getsockname getpeername listen

dwmapi

DwmSetWindowAttribute DwmExtendFrameIntoClientArea

shlwapi

SHDeleteValueW StrStrW PathFileExistsW SHDeleteKeyW

ntdll

NtUnloadDriver RtlInitUnicodeString NtLoadDriver NtQuerySystemInformation RtlAddFunctionTable RtlVirtualUnwind RtlLookupFunctionEntry RtlAdjustPrivilege RtlPcToFileHeader NtAllocateUuids NtQueryInformationProcess VerSetConditionMask

bcrypt

BCryptHashData BCryptCloseAlgorithmProvider BCryptGenRandom BCryptOpenAlgorithmProvider BCryptGetProperty BCryptFinishHash BCryptCreateHash BCryptDestroyHash

dbghelp

SymCleanup SymGetModuleBase64 SymGetLineFromAddr64 SymFromAddr SymSetOptions MiniDumpWriteDump SymFunctionTableAccess64 SymInitialize StackWalk64

setupapi

SetupDiGetClassDevsA SetupDiGetDeviceInterfaceDetailA SetupDiOpenDevRegKey SetupDiGetDeviceRegistryPropertyA SetupDiEnumDeviceInterfaces SetupDiDestroyDeviceInfoList SetupDiGetClassDevsW SetupDiGetDeviceInterfaceDetailW

tbs

Tbsip_Context_Close Tbsip_Submit_Command Tbsi_Context_Create

ncrypt

NCryptOpenStorageProvider NCryptGetProperty NCryptFreeObject

oleaut32

SafeArrayGetUBound SafeArrayGetLBound SafeArrayAccessData VariantInit VariantClear SysAllocString SysFreeString SafeArrayUnaccessData

??0Assembler@asmjit@@QEAA@PEAURuntime@1@@Z ??0CodeGen@asmjit@@QEAA@PEAURuntime@1@@Z ??0HostRuntime@asmjit@@QEAA@XZ ??0JitRuntime@asmjit@@QEAA@XZ ??0Runtime@asmjit@@QEAA@XZ ??0StaticRuntime@asmjit@@QEAA@PEAX_K@Z ??0VMemMgr@asmjit@@QEAA@PEAX@Z ??0X86Assembler@asmjit@@QEAA@PEAURuntime@1@I@Z ??0Zone@asmjit@@QEAA@_K@Z ??1Assembler@asmjit@@UEAA@XZ ??1CodeGen@asmjit@@UEAA@XZ ??1HostRuntime@asmjit@@UEAA@XZ ??1JitRuntime@asmjit@@UEAA@XZ ??1Runtime@asmjit@@UEAA@XZ ??1StaticRuntime@asmjit@@UEAA@XZ ??1VMemMgr@asmjit@@QEAA@XZ ??1X86Assembler@asmjit@@UEAA@XZ ??1Zone@asmjit@@QEAA@XZ ??_FVMemMgr@asmjit@@QEAAXXZ ?_alloc@Zone@asmjit@@QEAAPEAX_K@Z ?_emit@X86Assembler@asmjit@@UEAAIIAEBUOperand@2@000@Z ?_grow@Assembler@asmjit@@QEAAI_K@Z ?_grow@PodVectorBase@asmjit@@IEAAI_K0@Z ?_newLabel@Assembler@asmjit@@QEAAIPEAULabel@2@@Z ?_newLabelLink@Assembler@asmjit@@QEAAPEAULabelLink@2@XZ ?_nullData@PodVectorBase@asmjit@@2UPodVectorData@2@B ?_registerIndexedLabels@Assembler@asmjit@@QEAAI_K@Z ?_relocCode@X86Assembler@asmjit@@UEBA_KPEAX_K@Z ?_reserve@Assembler@asmjit@@QEAAI_K@Z ?_reserve@PodVectorBase@asmjit@@IEAAI_K0@Z ?_x86CondToCmovcc@asmjit@@3QBIB ?_x86CondToJcc@asmjit@@3QBIB ?_x86CondToSetcc@asmjit@@3QBIB ?_x86InstExtendedInfo@asmjit@@3QBUX86InstExtendedInfo@1@B ?_x86InstInfo@asmjit@@3QBUX86InstInfo@1@B ?_x86ReverseCond@asmjit@@3QBIB ?add@JitRuntime@asmjit@@UEAAIPEAPEAXPEAUAssembler@2@@Z ?add@StaticRuntime@asmjit@@UEAAIPEAPEAXPEAUAssembler@2@@Z ?align@X86Assembler@asmjit@@UEAAIII@Z ?alloc@VMemMgr@asmjit@@QEAAPEAX_KI@Z ?alloc@VMemUtil@asmjit@@SAPEAX_KPEA_KI@Z ?allocProcessMemory@VMemUtil@asmjit@@SAPEAXPEAX_KPEA_KI@Z ?allocZeroed@Zone@asmjit@@QEAAPEAX_K@Z ?bind@Assembler@asmjit@@UEAAIAEBULabel@2@@Z ?callCpuId@X86CpuUtil@asmjit@@SAXIIPEATX86CpuId@2@@Z ?detect@X86CpuUtil@asmjit@@SAXPEAUX86CpuInfo@2@@Z ?detectHwThreadsCount@CpuInfo@asmjit@@SAIXZ ?dup@Zone@asmjit@@QEAAPEAXPEBX_K@Z ?embed@Assembler@asmjit@@UEAAIPEBXI@Z ?embedLabel@X86Assembler@asmjit@@QEAAIAEBULabel@2@@Z ?emit@Assembler@asmjit@@QEAAII@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@00@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@00H@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@00_K@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@0@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@0H@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@0_K@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@H@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@_K@Z ?emit@Assembler@asmjit@@QEAAIIH@Z ?emit@Assembler@asmjit@@QEAAII_K@Z ?flush@HostRuntime@asmjit@@UEAAXPEAX_K@Z ?getCpuInfo@HostRuntime@asmjit@@UEAAPEBUCpuInfo@2@XZ ?getHost@CpuInfo@asmjit@@SAPEBU12@XZ ?getPageGranularity@VMemUtil@asmjit@@SA_KXZ ?getPageSize@VMemUtil@asmjit@@SA_KXZ ?getStackAlignment@HostRuntime@asmjit@@UEAAIXZ ?make@Assembler@asmjit@@UEAAPEAXXZ ?noOperand@asmjit@@3UOperand@1@B ?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KAEBUX86Reg@2@IHI@Z ?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KHI@Z ?release@JitRuntime@asmjit@@UEAAIPEAX@Z ?release@StaticRuntime@asmjit@@UEAAIPEAX@Z ?release@VMemMgr@asmjit@@QEAAIPEAX@Z ?release@VMemUtil@asmjit@@SAIPEAX_K@Z ?releaseProcessMemory@VMemUtil@asmjit@@SAIPEAX0_K@Z ?relocCode@Assembler@asmjit@@QEBA_KPEAX_K@Z ?reset@Assembler@asmjit@@QEAAX_N@Z ?reset@PodVectorBase@asmjit@@QEAAX_N@Z ?reset@VMemMgr@asmjit@@QEAAXXZ ?reset@Zone@asmjit@@QEAAX_N@Z ?sdup@Zone@asmjit@@QEAAPEADPEBD@Z ?setArch@X86Assembler@asmjit@@QEAAII@Z ?setError@CodeGen@asmjit@@QEAAIIPEBD@Z ?setErrorHandler@CodeGen@asmjit@@QEAAIPEAUErrorHandler@2@@Z ?sformat@Zone@asmjit@@QEAAPEADPEBDZZ ?shrink@VMemMgr@asmjit@@QEAAIPEAX_K@Z ?x86RegData@asmjit@@3UX86RegData@1@B

Name

.text

Size

4.0MB

Virtual Size

4.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

294KB

Virtual Size

324KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

151KB

Virtual Size

150KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.iseeyou

Size

3.6MB

Virtual Size

3.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.iseeyou

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.iseeyou

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

107KB

Virtual Size

106KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=203, id=261, version=33145,

count=17, id=260, version=35207,

count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=10, id=259, version=35207,

count=118, id=261, version=35207,

count=1, id=259, version=35222,

count=2, id=257, productName=VS2015 UPD3.1 build 24215, version=24215,

count=1, id=260, version=26706,

count=7, id=261, version=32216,

count=13, id=259, version=33145,

count=29, id=260, version=33145,

count=1, id=262, version=33145,

count=45, id=257, version=33145,

count=585, id=1, productName=Unmarked objects,

count=40, id=261, version=35222,

count=57, id=260, version=35222,

count=6, productName=Unmarked objects (old),

count=134, id=265, version=35222,

count=1, id=256, version=35222,

count=1, id=255, version=35222,

count=1, id=151,

count=1, id=258, version=35222,