Spencer-Macro-Utilities-3.1.0.zip
- SHA256 4e7d67c6c8827820e9cde754e4e84aa1f3805a25250668b4d1daf7af95cf2318
Static task
static1
Behavioral task
behavioral1
Sample
suspend.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
suspend.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target Spencer-Macro-Utilities-3.1.0.zip
- Size 1003KB
- Sample260802-3ynf2ayzbv
- SHA256 4e7d67c6c8827820e9cde754e4e84aa1f3805a25250668b4d1daf7af95cf2318
- MD5 55815d9231a4438e436d018796f103d1
- SHA1 3e35f43cb9ed1fe306acbab37bd0da062e424f5f
- SHA512 769d2e167dc86597ac8c903231159283737a2a57f1a50a0d6c8db6e62233bf93f2ec69dcc8cd41a7a67ab0f2856e4fedee29e252bf7e2a4b715ed52217cadb44
- SSDEEP 12288:X4CJ6GmB+id8f3b0q6gTnJbGOfWW3dCn097MkoH1:oCQGZf3b+gTnJbGOfWXn097MPV
- TLSH T15425AF1B76D902F8C0A3E178E587A127EE317C980B7056EB67E49A291F936D05F7E301
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
Spencer-Macro-Utilities-3.1.0.zip.zip 1003KB
-
README.md4KB
-
suspend.exe.exe 998KB
README.md
- SHA256 a22ac93cea13ff1385577146979618c461ff9dc5cd4c682064bd953c0cee276b
- MD5 428fcd01800662e2498a62a7c0135bd5
- SHA1 55c6070892e2cf12d4ad696c88d0922a8169f595
- SHA512 6ef76166108b275c89886114c1b73ecc514e6b5c1d903c0b0bd7d2b829340c454417409f01ae585e8f1fb3449eab9abbfa1314759557a0c7024f6c5d72bdc169
- SSDEEP 96:C/y049zFI46HXH3gt1v4B/WNmsIkJEEkFAksEo4CTPfdjePhX4:GyLq463Av4B/OI4rltf7TtSN4
- TLSH T12A91C4FF6E0A16A60E71C7D1A50D12A9F327455AD6A78568FC1D400CB308576C73E5BC
- MD5 SHA1 SHA512 SSDEEP TLSH
suspend.exe
- IMPHASH 7e993ba1e921d188515b28c5f657c800
- SHA256 f6e2e3856680e45f3250313d29101ce9b6845edaf0d497d337222e2c3bbe238f
- MD5 2d90a343a3c3670c1920bd0ee59b769e
- SHA1 451da885a00128df917c251d44f4c2e38ee0e180
- SHA512 30dfbd199fc4795abe8dbe96319e933f012ccd77e734e76ade34297cbbf1e7edf743b97ce179c9830da63778814d6514aa2b5eec015efaca6a0dce610dc4880e
- SSDEEP 12288:m4CJ6GmB+id8f3b0q6gTnJbGOfWW3dCn097MkoHF:/CQGZf3b+gTnJbGOfWXn097MPl
- TLSH T11525AF1B76D902F8C0A3E178E587A127EE317C980B7056EB67E49A291F936D05F7E301
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ca:7d:c4:5e:b8:d5:55:5f:4d:e9:cf:41:89:17:0d:9d:a0:ca:50:73:99:9e:a2:38:69:32:f8:9b:d7:69:05:68
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=SignPath Foundation,O=SignPath Foundation,L=Lewes,ST=Delaware,C=US
Chains
Oct 5, 2025
CN=SignPath Foundation,O=SignPath Foundation,L=Lewes,ST=Delaware,C=US
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
76:53:fe:ac:75:46:48:93:f5:e5:d7:4a:48:3a:4e:f8
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 18, 2020 - Mar 18, 2045
Subject
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=SignPath Foundation,O=SignPath Foundation,L=Lewes,ST=Delaware,C=US
Serial Number
09:52:82:50:0e:6d:27:ae:07:63:1b:a1
Issuer
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 11, 2025 - Sep 7, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
588420
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\Spencer-Macro-Utilities\Spencer-Macro-Utilities\visual studio\x64\Release\suspend.pdb
kernel32
ReadFile
GetModuleFileNameA
SizeofResource
SetHandleInformation
GetCurrentProcess
SetProcessInformation
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessId
SetThreadPriority
CreatePipe
GetTempPathW
GetEnvironmentVariableA
WaitForSingleObject
CreateFileW
GetCurrentThreadId
UnmapViewOfFile
OpenProcess
SetCurrentDirectoryA
CreateToolhelp32Snapshot
Sleep
GetTempPathA
GetLastError
Process32NextW
CreateFileA
GetCurrentThread
LockResource
DeleteFileW
Process32FirstW
CloseHandle
LoadResource
FindResourceW
CreateFileMappingA
GetModuleHandleW
CreateProcessA
MapViewOfFile
AllocConsole
SetConsoleTitleW
GetProcessTimes
GetLocaleInfoA
TerminateProcess
FreeLibrary
GetLocaleInfoEx
FormatMessageA
LocalFree
GetFileInformationByHandleEx
AreFileApisANSI
SetFileInformationByHandle
GetCurrentDirectoryW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
GetProcAddress
QueryPerformanceFrequency
GetModuleHandleA
GlobalUnlock
WideCharToMultiByte
GlobalLock
LoadLibraryA
GlobalFree
GlobalAlloc
MultiByteToWideChar
user32
GetCapture
ScreenToClient
ClientToScreen
TrackMouseEvent
GetKeyboardLayout
GetWindowThreadProcessId
GetMessageW
DefWindowProcW
VkKeyScanExW
MapVirtualKeyW
GetWindow
GetForegroundWindow
FindWindowExW
GetWindowRect
DestroyWindow
IsWindowVisible
SetWindowPos
MessageBoxW
GetDpiForWindow
SetWindowLongPtrW
CreateWindowExW
CallNextHookEx
LoadCursorW
GetMessageExtraInfo
GetKeyState
SendInput
SetForegroundWindow
UpdateWindow
SetCapture
SetCursor
SetProcessDpiAwarenessContext
SetClipboardData
PostQuitMessage
SetWindowsHookExW
LoadIconW
TranslateMessage
RegisterRawInputDevices
SetLayeredWindowAttributes
UnhookWindowsHookEx
MapVirtualKeyA
AttachThreadInput
GetRawInputData
PeekMessageW
DispatchMessageW
GetAsyncKeyState
GetKeyNameTextA
ShowWindow
VkKeyScanA
RegisterClassExW
GetWindowLongPtrW
UnregisterClassW
GetSystemMetrics
IsWindowUnicode
ReleaseCapture
SetCursorPos
GetClientRect
GetClipboardData
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
advapi32
RegOpenKeyExA
RegCloseKey
shell32
ShellExecuteA
ShellExecuteW
d3d11
D3D11CreateDeviceAndSwapChain
winmm
timeEndPeriod
timeBeginPeriod
imm32
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow
d3dcompiler_47
D3DCompile
dwmapi
DwmSetWindowAttribute
msvcp140
??7ios_base@std@@QEBA_NXZ
?rdstate@ios_base@std@@QEBAHXZ
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
??Bios_base@std@@QEBA_NXZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?sync_with_stdio@ios_base@std@@SA_N_N@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
_Query_perf_frequency
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Throw_Cpp_error@std@@YAXH@Z
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Xbad_alloc@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Id_cnt@id@locale@std@@0HA
?_Xout_of_range@std@@YAXPEBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Winerror_map@std@@YAHH@Z
?_Xbad_function_call@std@@YAXXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Random_device@std@@YAIXZ
?_Xlength_error@std@@YAXPEBD@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Syserror_map@std@@YAPEBDH@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_id
_Query_perf_counter
_Thrd_detach
_Thrd_join
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
wininet
InternetOpenW
InternetCloseHandle
InternetSetOptionW
InternetOpenUrlW
InternetReadFile
shlwapi
PathFindFileNameW
PathRemoveFileSpecW
PathStripPathW
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception_context
__C_specific_handler
memset
_CxxThrowException
__std_terminate
memchr
memcmp
strchr
memcpy
__current_exception
__std_exception_destroy
__std_exception_copy
strstr
strrchr
memmove
api-ms-win-crt-stdio-l1-1-0
ftell
__acrt_iob_func
__p__commode
_set_fmode
_get_stream_buffer_pointers
fflush
_fseeki64
fsetpos
fclose
ungetc
setvbuf
fgetpos
fseek
__stdio_common_vfprintf
fgetc
fwrite
_wfopen
fputc
__stdio_common_vsprintf
__stdio_common_vsscanf
fread
freopen_s
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-string-l1-1-0
isspace
strcpy_s
wcscpy_s
strcmp
_wcsicmp
strncmp
toupper
strncpy
tolower
api-ms-win-crt-heap-l1-1-0
_callnewh
_set_new_mode
realloc
malloc
free
api-ms-win-crt-convert-l1-1-0
atoi
strtod
strtof
atof
strtoll
strtoull
strtol
api-ms-win-crt-runtime-l1-1-0
_register_thread_local_exe_atexit_callback
_c_exit
_exit
_initterm_e
_initterm
_errno
abort
terminate
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
_beginthreadex
_cexit
_invoke_watson
_crt_atexit
exit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
api-ms-win-crt-math-l1-1-0
logf
ceilf
round
_dsign
fmodf
powf
sqrtf
roundf
_dclass
acosf
__setusermatherr
sinf
cosf
api-ms-win-crt-environment-l1-1-0
_putenv
api-ms-win-crt-filesystem-l1-1-0
remove
_lock_file
_unlock_file
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
localeconv
_configthreadlocale
api-ms-win-crt-time-l1-1-0
_mktime64
Name
.text
Size
596KB
Virtual Size
595KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
146KB
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
208KB
Virtual Size
207KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=35207,
count=4, id=259, version=35207,
count=10, id=260, version=35207,
count=36, id=261, version=35207,
count=25, id=257, version=33140,
count=451, id=1, productName=Unmarked objects,
count=9, id=265, version=35217,
count=1, id=255, version=35217,
count=1, id=151,
count=1, id=258, version=35217,