28ef49fcfee3fcbe3cef47c31707f9221c8b070e092821c17093154b0cdd059c

Sharing

Copy URL Twitter E-mail

General

Target
28ef49fcfee3fcbe3cef47c31707f9221c8b070e092821c17093154b0cdd059c
Size 8.9MB
Sample260723-wp1lnsthja
SHA256 28ef49fcfee3fcbe3cef47c31707f9221c8b070e092821c17093154b0cdd059c
MD5 04380ab6000bb13c40d538603c3b5655
SHA1 3b60351edb325c87a27f62358c794b2bf8193c9e
SHA512 17ff849448f263bc56cb8a33f1cbee54f36ceccc567e8c24b04cc8591c284d52b0f8577d6c226bfac6a264ecb87350d4d23341d158173bbbbbd1225bebb841f9
SSDEEP 98304:QPJGszBr0zGfmW2kfMhm6SrPtENXr8f/Obg4EescniAJTcjBodL:zGfmnjhmzPtENbm/kcN0sSdL
TLSH
T13B969D30B605C574DDA100B0ADBCBB6F522C9B795B2918C3D3D81AAC1EB45D32FB2D5A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28ef49fcfee3fcbe3cef47c31707f9221c8b070e092821c17093154b0cdd059c

File Explorer

28ef49fcfee3fcbe3cef47c31707f9221c8b070e092821c17093154b0cdd059c

.exe 8.9MB

28ef49fcfee3fcbe3cef47c31707f9221c8b070e092821c17093154b0cdd059c

IMPHASH 22fcca32a6e66395ff145721a4e5f36d
SHA256 28ef49fcfee3fcbe3cef47c31707f9221c8b070e092821c17093154b0cdd059c
MD5 04380ab6000bb13c40d538603c3b5655
SHA1 3b60351edb325c87a27f62358c794b2bf8193c9e
SHA512 17ff849448f263bc56cb8a33f1cbee54f36ceccc567e8c24b04cc8591c284d52b0f8577d6c226bfac6a264ecb87350d4d23341d158173bbbbbd1225bebb841f9
SSDEEP 98304:QPJGszBr0zGfmW2kfMhm6SrPtENXr8f/Obg4EescniAJTcjBodL:zGfmnjhmzPtENbm/kcN0sSdL
TLSH
T13B969D30B605C574DDA100B0ADBCBB6F522C9B795B2918C3D3D81AAC1EB45D32FB2D5A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6934273

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\PW\PWClient_152_source\client_side\client\CElement\CElementClient\DbgReleaseLAA\ElementClient.pdb

zlibwapi

ord26 ord46 ord2

elementskill

?SetAbility@ElementSkill@GNET@@SAHIH@Z ?SetLevel@ElementSkill@GNET@@SAHIH@Z ?LoadSkillData@ElementSkill@GNET@@SAXPAX@Z ?LearnCondition@ElementSkill@GNET@@SAHIAAULearnRequirement@2@H@Z ?Condition@ElementSkill@GNET@@SAHIAAUUseRequirement@2@H@Z ?PetLearn@ElementSkill@GNET@@SAHIAAUPetRequirement@2@H@Z ?GetNativeName@ElementSkill@GNET@@SAPBDI@Z ?Create@ElementSkill@GNET@@SAPAV12@IH@Z ?Destroy@ElementSkill@GNET@@QAEXXZ ?GoblinCondition@ElementSkill@GNET@@SAHIAAUGoblinUseRequirement@2@H@Z ?GetEffect@ElementSkill@GNET@@SAPBDI@Z ?Query@VisibleState@GNET@@SAPBV12@HH@Z ?GetName@ElementSkill@GNET@@SAPB_WI@Z ?GetCommonCoolDown@ElementSkill@GNET@@SAHI@Z ?GetIcon@ElementSkill@GNET@@SAPBDI@Z ?InitStaticData@ElementSkill@GNET@@SAXXZ ?GetComboSkPreSkill@ElementSkill@GNET@@SAHI@Z ?GetInherentSkills@ElementSkill@GNET@@SAABV?$vector@IV?$allocator@I@std@@@std@@H@Z ?NextSkill@ElementSkill@GNET@@SAII@Z ?IsMovingSkill@ElementSkill@GNET@@SA_NI@Z ?GetComboSkActivated@ElementSkill@GNET@@SAXABUComboSkillState@2@AAV?$vector@U?$pair@IH@std@@V?$allocator@U?$pair@IH@std@@@2@@std@@@Z ?GetExecuteTime@ElementSkill@GNET@@SAHIH@Z ?GetVersion@ElementSkill@GNET@@SAHXZ ?GoblinLearn@ElementSkill@GNET@@SAHIAAUGoblinRequirement@2@H@Z ?GetMaxAbility@ElementSkill@GNET@@SAHIH@Z ?GetRequiredBook@ElementSkill@GNET@@SAHIH@Z ?GetAbility@ElementSkill@GNET@@SAHI@Z ?GetRequiredRealmLevel@ElementSkill@GNET@@SAHIH@Z ?GetRequiredLevel@ElementSkill@GNET@@SAHIH@Z ?IsOverridden@ElementSkill@GNET@@SA_NI@Z ?GetType@ElementSkill@GNET@@SADI@Z ?IsGoblinSkill@ElementSkill@GNET@@SA_NI@Z ?Query@TeamState@GNET@@SAPBV12@H@Z ?GetRequiredMoney@ElementSkill@GNET@@SAHIH@Z ?GetRequiredSp@ElementSkill@GNET@@SAHIH@Z ?GetAbilityPercent@ElementSkill@GNET@@SAHI@Z

winmm

timeGetTime

ws2_32

WSACleanup closesocket socket ioctlsocket WSAStartup inet_ntoa gethostbyname inet_addr WSAGetLastError __WSAFDIsSet bind getsockname select htons ntohs recv send sendto setsockopt connect

imm32

ImmGetProperty ImmGetContext ImmReleaseContext ImmAssociateContext ImmGetCompositionStringW ImmNotifyIME ImmSetCompositionWindow ImmSetCandidateWindow ImmGetCandidateListW ImmIsIME ImmGetDescriptionW

d3d8

Direct3DCreate8

ddraw

DirectDrawCreate

dsound

ord11

speedtreert

?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z ?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ?SetTime@CSpeedTreeRT@@SAXM@Z ?Authorize@CSpeedTreeRT@@SAXPBD@Z ??0SGeometry@CSpeedTreeRT@@QAE@XZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??0CSpeedTreeRT@@QAE@XZ ??1CSpeedTreeRT@@QAE@XZ ??2CSpeedTreeRT@@SAPAXI@Z ??3CSpeedTreeRT@@SAXPAX@Z ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z ?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ ?SetLodLevel@CSpeedTreeRT@@QAEXM@Z ?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z ?GetDiscreteLeafLodLevel@CSpeedTreeRT@@QBEGM@Z ?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z

ftdriver

?CreateFTManager@@YAPAVIFTManager@@HHH@Z

shlwapi

PathFindExtensionA StrToIntW PathFindFileNameA PathFileExistsA PathFileExistsW PathAppendW

wininet

HttpOpenRequestA InternetCloseHandle InternetOpenA HttpQueryInfoA InternetConnectA InternetReadFile InternetOpenUrlW HttpAddRequestHeadersA HttpSendRequestA

kernel32

VirtualFree FormatMessageA VirtualAlloc InterlockedPushEntrySList InterlockedPopEntrySList EncodePointer GetStartupInfoW GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter UnhandledExceptionFilter CreateFileMappingW WinExec GlobalSize GlobalReAlloc WaitForSingleObjectEx LoadLibraryExA UnmapViewOfFile CreateFileMappingA MapViewOfFile GetVersionExA IsProcessorFeaturePresent SetFilePointer IsDBCSLeadByte GetWindowsDirectoryA GlobalFree LocalAlloc GetTickCount GetCommandLineA GetFileAttributesA CreateFileW CloseHandle GetLastError EnterCriticalSection LeaveCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId FreeLibrary GetModuleFileNameA GetModuleFileNameW GetProcAddress LoadLibraryW lstrcpyW IsBadReadPtr LoadLibraryA InitializeCriticalSection DeleteCriticalSection WaitForSingleObject CreateThread VirtualProtect GetModuleHandleA TerminateProcess OpenProcess VirtualQueryEx ReadProcessMemory CreateToolhelp32Snapshot Process32First Process32Next CreateFileA DeviceIoControl Sleep GlobalMemoryStatusEx GetSystemInfo GetVersionExW GlobalMemoryStatus lstrlenA GetComputerNameW HeapAlloc HeapFree GetProcessHeap GetSystemTime SystemTimeToFileTime GetModuleHandleW FlushInstructionCache ReleaseMutex CreateMutexW IsBadWritePtr GlobalAlloc GlobalUnlock GlobalLock WideCharToMultiByte DeleteFileA MultiByteToWideChar GetCurrentDirectoryW DecodePointer RaiseException InitializeCriticalSectionAndSpinCount SetEvent CreateEventW ExitThread CreateDirectoryA FindFirstFileA FindNextFileA GetFileSize ResetEvent WaitForMultipleObjects GetExitCodeThread GetLocalTime CopyFileA ReadFile GetCommandLineW OutputDebugStringA ExitProcess ResumeThread FindClose WriteFile ConnectNamedPipe CreateNamedPipeW CreateMutexA CreateProcessW GetDiskFreeSpaceA OutputDebugStringW SignalObjectAndWait SetThreadPriority SetThreadPriorityBoost GetPrivateProfileStringW WritePrivateProfileStringW SetCurrentDirectoryA GetCurrentDirectoryA IsDebuggerPresent GetVersion DuplicateHandle SuspendThread GetPrivateProfileIntA GetPrivateProfileStringA SetCurrentDirectoryW OpenFile ReleaseSemaphore CreateSemaphoreW SetLastError QueueUserAPC LoadLibraryExW LoadResource SizeofResource FindResourceW MulDiv lstrcmpW lstrcmpiW IsDBCSLeadByteEx QueryPerformanceCounter QueryPerformanceFrequency

user32

RegisterClipboardFormatW InvalidateRect DestroyCursor LoadCursorFromFileA GetAsyncKeyState IntersectRect SetRect WindowFromDC CreateWindowExA EnumThreadWindows AdjustWindowRectEx IsWindowUnicode SetCaretPos GetClipboardData GetKeyboardLayout CreateCaret GetAncestor GetParent GetDesktopWindow SetWindowLongA FillRect GetSysColor GetWindowTextLengthW RedrawWindow InvalidateRgn ReleaseDC GetDC DestroyAcceleratorTable CreateAcceleratorTableW KillTimer SetTimer keybd_event GetFocus SetFocus CharNextW GetDlgItem DestroyWindow IsChild GetClassInfoExW CharLowerBuffW GetMenuBarInfo EnumChildWindows SetActiveWindow GetActiveWindow IsWindow UnregisterClassW SendMessageW GetClassNameW FindWindowW GetWindowLongW GetWindowTextW IsWindowEnabled IsZoomed IsIconic CallWindowProcW GetMessageW RegisterWindowMessageW MessageBoxW LoadCursorW AdjustWindowRect SetForegroundWindow IsWindowVisible SetWindowPos ShowWindow GetClientRect PostMessageW ClientToScreen GetKeyState EmptyClipboard SetClipboardData CloseClipboard OpenClipboard ScreenToClient GetCursorPos PostQuitMessage UpdateWindow GetSystemMetrics MoveWindow CreateWindowExW RegisterClassExW DefWindowProcW wsprintfW ReleaseCapture SetCapture GetCapture GetGUIThreadInfo ChangeDisplaySettingsW LoadIconW SetCursor EnumWindows CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW FindWindowA PtInRect IsRectEmpty GetWindowRect GetWindow GetWindowThreadProcessId GetTopWindow GetClassNameA GetWindowTextA MessageBoxA EndPaint BeginPaint GetForegroundWindow PeekMessageW DispatchMessageW TranslateMessage SetWindowTextW SetCursorPos SetWindowLongW GetWindowDC

gdi32

CreateFontIndirectW BitBlt GetStockObject CreateCompatibleDC CreateSolidBrush DeleteDC DeleteObject GetDeviceCaps SelectObject GetObjectW GetDIBits TextOutA ExtTextOutW SetBkColor SetTextColor SetTextAlign CreateDIBSection CreateFontW GetTextExtentPoint32W SetMapMode CreateCompatibleBitmap CreateEllipticRgn GetGlyphOutlineW EnumFontFamiliesExW CreatePolygonRgn PtInRegion

advapi32

OpenProcessToken OpenThreadToken RegCloseKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyExW RegOpenKeyExW RegQueryInfoKeyW RegSetValueExW RegQueryValueExA RegOpenKeyA GetUserNameW LookupPrivilegeValueW AdjustTokenPrivileges

shell32

ShellExecuteW ShellExecuteExA ShellExecuteA Shell_NotifyIconW SHOpenFolderAndSelectItems SHGetFolderPathW

ole32

CoInitialize CoTaskMemRealloc CoTaskMemFree StringFromGUID2 OleUninitialize OleLockRunning CLSIDFromProgID CLSIDFromString CoCreateInstance CoGetClassObject CoUninitialize CoTaskMemAlloc OleInitialize CreateStreamOnHGlobal

oleaut32

VariantClear VariantCopy LoadTypeLi LoadRegTypeLi VariantInit VarUI4FromStr SysFreeString SysAllocString SysAllocStringLen SysStringLen OleCreateFontIndirect DispCallFunc

msvcp140

?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z ?id@?$ctype@_W@std@@2V0locale@2@A ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ ?getloc@ios_base@std@@QBE?AVlocale@2@XZ ?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z ?widen@?$ctype@_W@std@@QBE_WD@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ??Bid@locale@std@@QAEIXZ ?_Xout_of_range@std@@YAXPBD@Z ?uncaught_exception@std@@YA_NXZ ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?_Xlength_error@std@@YAXPBD@Z ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ

urlmon

URLDownloadToFileW

vcruntime140

_except_handler4_common __current_exception_context _setjmp3 __current_exception longjmp __CxxFrameHandler __std_type_info_name memchr strchr wcschr wcsrchr wcsstr _local_unwind4 _CxxThrowException __std_exception_destroy __std_exception_copy __RTDynamicCast memmove strstr _purecall memset memcpy __CxxFrameHandler3 strrchr __std_terminate

api-ms-win-crt-utility-l1-1-0

qsort srand rand

api-ms-win-crt-math-l1-1-0

_CIacos _libm_sse2_pow_precise frexp ldexp _CIcosh _libm_sse2_tan_precise _libm_sse2_log10_precise __setusermatherr _ftol ceil _CIpow _CItanh _CIsinh _CIatan2 modf _finite _libm_sse2_atan_precise floor _libm_sse2_sin_precise _libm_sse2_cos_precise _CIfmod _libm_sse2_asin_precise _libm_sse2_log_precise _libm_sse2_exp_precise _libm_sse2_acos_precise _libm_sse2_sqrt_precise _isnan

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf ftell _fileno fclose fseek fopen __stdio_common_vfscanf __stdio_common_vfprintf fread __acrt_iob_func __stdio_common_vswprintf_s tmpnam freopen ferror getc clearerr _pclose _wfopen fflush __stdio_common_vfwprintf __stdio_common_vswscanf fgets feof __stdio_common_vsscanf fgetws fgetwc _set_fmode setvbuf tmpfile fputs __stdio_common_vsprintf __p__commode _popen fwrite ungetc

api-ms-win-crt-time-l1-1-0

_difftime64 strftime _time32 clock _mktime32 _localtime64 _time64 _gmtime32 _gmtime64 asctime _localtime32 _mktime64

api-ms-win-crt-string-l1-1-0

strncpy iscntrl isdigit strcoll isalnum isalpha _strdup _strlwr _wcsicmp isspace _strnicmp _strupr strcspn _stricmp _wcslwr strncmp wcsncpy_s islower wcsncpy ispunct isxdigit tolower isupper toupper strpbrk strncat wcsncat wcsncmp _wcsupr iswdigit

api-ms-win-crt-filesystem-l1-1-0

rename remove _rmdir _stat32 _fstat64i32 _findnext64i32 _wremove _mkdir _stat64i32 _findclose _findnext32 _access _findfirst32 _findfirst64i32 _splitpath

api-ms-win-crt-convert-l1-1-0

strtoul atof _itoa _wtoi strtod atoi atol _itow

api-ms-win-crt-heap-l1-1-0

_recalloc _set_new_mode _callnewh free malloc realloc calloc

api-ms-win-crt-runtime-l1-1-0

_beginthreadex _beginthread _register_thread_local_exe_atexit_callback _c_exit _cexit _exit _initterm_e _initterm _get_wide_winmain_command_line _initialize_wide_environment _configure_wide_argv _set_app_type _seh_filter_exe _initialize_onexit_table _register_onexit_function _invalid_parameter_noinfo _errno strerror _wassert _resetstkoflw exit system _crt_atexit _invalid_parameter_noinfo_noreturn _controlfp_s terminate

api-ms-win-crt-locale-l1-1-0

setlocale _configthreadlocale localeconv

api-ms-win-crt-environment-l1-1-0

getenv

Name

.text

Size

7.1MB

Virtual Size

7.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

229KB

Virtual Size

445KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

468KB

Virtual Size

467KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=9, id=253, version=28518,

count=12, id=260, version=30034,

count=19, id=259, version=30034,

count=4, id=257, version=30034,

count=5, id=260, version=27412,

count=29, id=264, version=30159,

count=4, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=28, version=9178,

count=89, id=29, version=9178,

count=1, id=18, version=8444,

count=8, productName=Unmarked objects (old),

count=2, id=25, version=9210,

count=1, id=261, version=27412,

count=45, id=261, version=30034,

count=30, id=257, version=27412,

count=2, id=257, version=30159,

count=77, id=261, productName=VS2019 v16.9.2 build 29913, version=29913,

count=31, id=260, productName=VS2019 v16.9.2 build 29913, version=29913,

count=3, id=93, productName=VS2003 (.NET) build 3077, version=3077,

count=773, id=1, productName=Unmarked objects,

count=1046, id=261, version=30159,

count=1, id=255, version=30159,

count=1, id=151,

count=1, id=258, version=30159,