2026-08-04_16352156144b8043325dd571460c4f40_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_revil_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-04_16352156144b8043325dd571460c4f40_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_revil_smoke-loader
Size 8.5MB
Sample260804-zz2hhazgrc
SHA256 51b0403c5d3fca7909e6671bc6068fa7640439b9e6d3c39aa86d1bf6f6bf7e06
MD5 16352156144b8043325dd571460c4f40
SHA1 7ee2b5a5652cefa2de3c3daa35935abfe4636e84
SHA512 bbae6c90b104c3ef48bb1ef5a64d85ee75dfc484e5cc30642df2b792331caa16502c09112fbabdf60f2070964e6f28b1a34400a93f49d29b96cbb659d7182675
SSDEEP 98304:OvBmiF0Zp4XNQrr8jw3xob7jOQzfJzU275ZA:asaQruwqzfpU29ZA
TLSH
T107964A207B1DC522F58240FCD56F6AAB842DAE2007A1B0F3B2953DD5B5F4AF229356C7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-08-04_16352156144b8043325dd571460c4f40_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_revil_smoke-loader

.exe 8.5MB

2026-08-04_16352156144b8043325dd571460c4f40_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_revil_smoke-loader

IMPHASH 712fde70e825a1305116340560ca2dde
SHA256 51b0403c5d3fca7909e6671bc6068fa7640439b9e6d3c39aa86d1bf6f6bf7e06
MD5 16352156144b8043325dd571460c4f40
SHA1 7ee2b5a5652cefa2de3c3daa35935abfe4636e84
SHA512 bbae6c90b104c3ef48bb1ef5a64d85ee75dfc484e5cc30642df2b792331caa16502c09112fbabdf60f2070964e6f28b1a34400a93f49d29b96cbb659d7182675
SSDEEP 98304:OvBmiF0Zp4XNQrr8jw3xob7jOQzfJzU275ZA:asaQruwqzfpU29ZA
TLSH
T107964A207B1DC522F58240FCD56F6AAB842DAE2007A1B0F3B2953DD5B5F4AF229356C7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

d6:17:36:f9:27:cb:c8:b5:56:f1:d7:be:50:de:2c:9e:58:c2:7e:37:1e:87:fc:db:91:92:b8:23:9b:d1:8b:35

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91120116MA07A8KQXQ,CN=天津微极智科技有限公司,O=天津微极智科技有限公司,ST=天津市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c27e6bba8e6b5b7e696b0e58cbae9ab98e696b0e68a80e69cafe4baa7e4b89ae5bc80e58f91e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e5a4a9e6b4a5e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Jul 22, 2026

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

09:85:12:44:f3:c2:51:f4:33:a2:1a:9f:b0:e3:a7:1f

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 10, 2025 - Mar 9, 2028

Subject

CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE

Serial Number

84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4

Issuer

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 15, 2025 - Jan 10, 2037

Subject

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Serial Number

83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f

Issuer

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 16, 2025 - Jul 16, 2041

Subject

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:4a:aa:81:73:66:9c:90:09:54:e4:21:c9:47:eb:c0

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 9, 2020 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

3594667

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\jenkins\.jenkins\workspace\LDSGameCenter\LDSGameCenterNew\LDSGameCenterNew\Release\MGameBox.pdb

shell32

SHFileOperationW SHGetSpecialFolderLocation SHGetFolderPathA SHCreateDirectoryExA Shell_NotifyIconW SHAppBarMessage ShellExecuteA ord165 SHGetFolderPathW ExtractIconExW SHBrowseForFolderW SHGetPathFromIDListW SHGetSpecialFolderPathW ShellExecuteExW ShellExecuteW SHGetMalloc SHGetDesktopFolder SHChangeNotify SHCreateDirectoryExW

wininet

DeleteUrlCacheEntryW InternetOpenW InternetCrackUrlW InternetGetCookieW InternetSetCookieW InternetCloseHandle InternetGetConnectedState HttpQueryInfoW FindFirstUrlCacheEntryW FindNextUrlCacheEntryW FindCloseUrlCache InternetReadFile InternetOpenUrlW InternetGetCookieExW

iphlpapi

GetAdaptersInfo

winmm

timeKillEvent timeSetEvent timeGetTime mciSendStringW

kernel32

GetTempFileNameW VerSetConditionMask VerifyVersionInfoW OpenEventW MoveFileExW lstrcpynW OpenMutexW IsBadCodePtr GetFullPathNameW CompareStringW GetThreadLocale SetThreadLocale InitializeCriticalSectionAndSpinCount GetStdHandle GetFileTime GetExitCodeProcess VirtualAllocEx ReadProcessMemory WriteProcessMemory VirtualFreeEx AllocConsole GetConsoleWindow CreateToolhelp32Snapshot Process32FirstW Process32NextW WaitForMultipleObjects TerminateProcess LocalAlloc LocalFree Module32FirstW Module32NextW GetExitCodeThread GetSystemInfo GetSystemDefaultLangID CreateFileMappingW MapViewOfFile UnmapViewOfFile GetFileAttributesW DuplicateHandle SetHandleInformation CreatePipe SetUnhandledExceptionFilter VirtualProtect IsBadReadPtr LockFile UnlockFile GetLongPathNameW GetFileSizeEx ReleaseMutex CreateMutexW ProcessIdToSessionId lstrcmpW WTSGetActiveConsoleSessionId SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetTimeZoneInformation GetSystemTimeAsFileTime SystemTimeToFileTime CreateThread GetCurrentThread DeleteFileA QueryPerformanceFrequency GetCurrentProcess CopyFileW SetFilePointer SetFileAttributesW RemoveDirectoryW ReadFile GetFileSize GetFileAttributesExW FlushFileBuffers CreateDirectoryW WriteFile CreateFileW SetLastError GetVolumeInformationW GetDriveTypeW GetDiskFreeSpaceExW LoadLibraryExW RaiseException DecodePointer DebugBreak WideCharToMultiByte WritePrivateProfileStringW GetPrivateProfileIntW lstrlenW lstrcmpiW FreeLibrary GetSystemDirectoryW GetStartupInfoW CreateProcessW GetLocalTime GetTempPathW GetVersionExW SleepEx LoadLibraryA GetSystemTime OutputDebugStringW OutputDebugStringA FindNextFileW FindFirstFileW FindClose LoadLibraryW GetProcAddress InitializeCriticalSectionEx MultiByteToWideChar GetTickCount Sleep GetModuleFileNameW lstrcpyW WriteConsoleW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA FindFirstFileExW GetOEMCP IsValidCodePage GetConsoleOutputCP SetFilePointerEx EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetTimeFormatW GetDateFormatW IsThreadAFiber FlsFree FlsSetValue FlsGetValue FlsAlloc SetConsoleCtrlHandler SetStdHandle PeekNamedPipe ExitThread RtlUnwind WaitForMultipleObjectsEx CreateTimerQueue UnregisterWaitEx QueryDepthSList InterlockedFlushSList ReleaseSemaphore SetProcessAffinityMask GetModuleHandleA FreeLibraryAndExitThread GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation MoveFileW FindResourceW SizeofResource LockResource LoadResource GetModuleHandleW FindResourceExW GetCurrentThreadId CreateEventW WaitForSingleObject ResetEvent CreateDirectoryA SetEvent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy GetLastError CloseHandle DeleteFileW QueryPerformanceCounter TlsFree TlsSetValue PulseEvent TlsGetValue TlsAlloc SwitchToThread GetCPInfo TryEnterCriticalSection FormatMessageW GetStringTypeW OpenFileMappingW GetShortPathNameW LoadLibraryExA SetProcessWorkingSetSize OpenProcess GetPrivateProfileStringW VirtualFree VirtualAlloc GetCurrentProcessId IsProcessorFeaturePresent FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead EncodePointer LCMapStringW GetLocaleInfoW GetACP GetThreadPriority SetThreadPriority SignalObjectAndWait GetSystemWindowsDirectoryW lstrcmpiA lstrcmpA DeviceIoControl ReadConsoleW ReadConsoleA SetConsoleMode GetConsoleMode ConvertThreadToFiber ConvertFiberToThread CreateFiber DeleteFiber SetCurrentDirectoryW GetCurrentDirectoryW InterlockedIncrement InterlockedDecrement GlobalAlloc FreeResource MulDiv ExitProcess GlobalLock GlobalUnlock InterlockedExchange InterlockedCompareExchange ResumeThread SwitchToFiber GetFileType GetEnvironmentVariableW GetModuleHandleExW VirtualQuery Thread32Next Thread32First SetThreadContext GetThreadContext SuspendThread OpenThread DosDateTimeToFileTime FileTimeToDosDateTime LocalFileTimeToFileTime FileTimeToLocalFileTime FindNextFileA FindFirstFileA GetFileInformationByHandle CompareFileTime GetLogicalDriveStringsW FindFirstChangeNotificationW FindCloseChangeNotification GetWindowsDirectoryW SetFileTime SearchPathW UnhandledExceptionFilter AreFileApisANSI HeapCreate GetDiskFreeSpaceW GetFullPathNameA UnlockFileEx IsDebuggerPresent RtlCaptureStackBackTrace HeapValidate GetTempPathA GetDiskFreeSpaceA GetFileAttributesA FlushViewOfFile CreateFileA WaitForSingleObjectEx GetVersionExA HeapCompact CreateFileMappingA LockFileEx GlobalFree FormatMessageA SetEndOfFile GetVersion

user32

UnregisterClassW RegisterClassExW GetClassInfoExW CreateWindowExW LoadCursorW ExitWindowsEx SetForegroundWindow IsZoomed EnableWindow GetClientRect ScreenToClient MapWindowPoints GetParent MonitorFromWindow GetMonitorInfoW GetKeyNameTextW CreateIconFromResourceEx CreateIconFromResource SetFocus EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard UnregisterClassA GetUserObjectInformationW GetProcessWindowStation GetWindowDC GetWindowTextLengthW GetWindowTextW SetWindowTextW SetRect DrawTextW CharPrevW RedrawWindow SetLayeredWindowAttributes CallWindowProcW InvalidateRgn CreateAcceleratorTableW GetSysColor GetCaretPos SetCaretPos ShowCaret CreateCaret DrawIconEx DestroyIcon CopyImage SendMessageTimeoutW CharNextW DefWindowProcW SendMessageW CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW EnumDisplayDevicesW SystemParametersInfoW FindWindowW SetWindowLongW GetWindowLongW GetWindowRect InvalidateRect SwitchToThisWindow IsIconic MoveWindow ShowWindow PostQuitMessage PostThreadMessageW PostMessageW GetWindow KillTimer SetTimer IsWindowVisible SetWindowPos DestroyWindow IsWindow FillRect ClientToScreen LookupIconIdFromDirectory UnregisterHotKey IntersectRect GetClassNameW GetUpdateRect EndPaint BeginPaint ReleaseCapture SetCapture GetKeyState GetFocus UpdateLayeredWindow IsChild AdjustWindowRectEx GetMenu RegisterClassW UnionRect GetAncestor GetWindowInfo MonitorFromPoint EnumDisplaySettingsW GetDesktopWindow WindowFromPoint GetForegroundWindow wsprintfW LoadStringW GetShellWindow WaitForInputIdle GetIconInfo GetWindowThreadProcessId ReleaseDC GetDC MsgWaitForMultipleObjects RemovePropW GetPropW SetPropW SetWindowLongA LoadImageW LoadIconW MessageBoxW DispatchMessageW TranslateMessage RegisterWindowMessageW OffsetRect CopyRect SetWindowRgn GetAsyncKeyState GetActiveWindow CreateDialogParamW PeekMessageW GetMessageW GetSystemMetrics TrackMouseEvent FindWindowExW IsRectEmpty InflateRect RegisterHotKey PtInRect GetCursorPos IsWindowEnabled HideCaret MapVirtualKeyW wvsprintfW SetCursor

gdi32

CreateFontIndirectW CreatePen Rectangle RestoreDC SaveDC GetTextMetricsW SetWindowOrgEx GetDeviceCaps CombineRgn CreateRectRgnIndirect GetCharABCWidthsW GetClipBox LineTo RoundRect SelectClipRgn ExtSelectClipRgn SetBkColor BitBlt StretchBlt SetStretchBltMode SetTextColor MoveToEx TextOutW ExtTextOutW GdiFlush CreateSolidBrush CreateDCW SetDIBitsToDevice GetPixel SetPixelV GetPaletteEntries CreateHalftonePalette GetStockObject GetTextExtentPoint32W GetDIBits DeleteDC CreateRoundRectRgn DeleteObject CreateCompatibleBitmap CreateCompatibleDC SelectObject CreateDIBSection SetBkMode SetDIBColorTable GetObjectW

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

ReportEventW RegisterEventSourceW DeregisterEventSource CryptContextAddRef CryptDecrypt CryptEncrypt CryptImportKey CryptAcquireContextW CryptReleaseContext QueryServiceStatus OpenServiceW OpenSCManagerW CloseServiceHandle RegEnumValueW EqualSid OpenThreadToken RegOpenCurrentUser RevertToSelf ImpersonateLoggedOnUser GetTokenInformation CreateProcessAsUserW GetUserNameW RegQueryValueExA RegOpenKeyA CryptDestroyKey CryptSetKeyParam RegEnumKeyA FreeSid CheckTokenMembership AllocateAndInitializeSid SetTokenInformation GetLengthSid DuplicateTokenEx CreateWellKnownSid RegCreateKeyW LookupPrivilegeValueW RegOpenKeyExA RegEnumKeyExA AdjustTokenPrivileges OpenProcessToken RegSetValueExW RegQueryInfoKeyW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegEnumKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey CryptGenRandom RegGetValueW

ole32

CoInitializeEx OleLockRunning CreateStreamOnHGlobal CoUninitialize CoInitialize CoCreateInstance CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree OleInitialize OleUninitialize StringFromGUID2 CoCreateGuid CLSIDFromProgID CoInitializeSecurity StringFromCLSID CLSIDFromString CoSetProxyBlanket

oleaut32

SysStringByteLen VariantChangeType VariantCopy VarCmp VarUI4FromStr SysAllocStringLen VariantInit SysStringLen SysFreeString SysAllocString SafeArrayUnaccessData SafeArrayCreateVector SysAllocStringByteLen VariantClear GetErrorInfo SetErrorInfo CreateErrorInfo SafeArrayCreate SafeArrayDestroy SafeArrayAccessData SafeArrayPutElement

shlwapi

StrTrimA StrCmpNIW SHSetValueA StrToIntExW PathAppendA SHRegGetPathW PathRemoveFileSpecW PathFileExistsW StrStrIA PathIsDirectoryW PathIsRelativeW PathAppendW SHGetValueW PathCombineW PathFindExtensionW StrChrW StrStrIW StrCmpIW StrToIntW wnsprintfW StrCmpNA StrRChrA SHGetValueA PathIsDirectoryA PathFindFileNameW SHSetValueW SHDeleteValueW PathRenameExtensionW PathFileExistsA PathCompactPathW PathFindExtensionA PathFindFileNameA PathCanonicalizeW AssocQueryStringW PathIsRootW StrStrW PathRemoveExtensionW

comctl32

InitCommonControlsEx _TrackMouseEvent ord17

gdiplus

GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromFileICM GdipCreateBitmapFromFile GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageEncoders GdipGetImageEncodersSize GdipSaveImageToFile GdipDeleteGraphics GdipDrawImageI GdipCloneImage GdipGraphicsClear GdipDrawImageRectI GdipGetPropertyItem GdipGetPropertyItemSize GdipLoadImageFromFileICM GdipLoadImageFromFile GdipFree GdipAlloc GdiplusShutdown GdiplusStartup GdipDrawImageRectRectI GdipDrawImagePointsI GdipFillPath GdipCreateBitmapFromHBITMAP GdipBitmapUnlockBits GdipDisposeImage GdipSetInterpolationMode GdipCloneBitmapAreaI GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipCreateTexture GdipAddPathArcI GdipClosePathFigure GdipGetImageGraphicsContext GdipCloneBrush GdipDeleteBrush GdipCreateSolidFill GdipLoadImageFromStream GdipLoadImageFromStreamICM GdipCreateFromHDC GdipSetSmoothingMode GdipFillEllipseI GdipCreatePath GdipDeletePath GdipAddPathArc GdipCreatePen1 GdipDeletePen GdipDrawPath GdipDrawEllipseI GdipImageGetFrameDimensionsCount GdipImageGetFrameDimensionsList GdipImageGetFrameCount GdipImageSelectActiveFrame

ws2_32

__WSAFDIsSet accept bind closesocket WSASetLastError ioctlsocket getpeername getsockname getsockopt htonl htons listen gethostbyname ntohs recv recvfrom select send sendto setsockopt shutdown socket WSAStartup WSAGetLastError getnameinfo gethostname inet_ntoa ntohl freeaddrinfo getaddrinfo WSACleanup connect

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW VerQueryValueA

urlmon

URLDownloadToFileW URLDownloadToCacheFileA URLDownloadToCacheFileW CoInternetSetFeatureEnabled

psapi

EnumProcesses GetModuleFileNameExW EnumProcessModules

dbghelp

MiniDumpWriteDump

secur32

GetUserNameExW

wtsapi32

WTSQueryUserToken

userenv

CreateEnvironmentBlock

winhttp

WinHttpSendRequest WinHttpReceiveResponse WinHttpQueryHeaders WinHttpSetTimeouts WinHttpSetOption WinHttpQueryDataAvailable WinHttpReadData WinHttpConnect WinHttpCloseHandle WinHttpOpen WinHttpCrackUrl WinHttpOpenRequest

crypt32

CryptBinaryToStringW CryptBinaryToStringA CryptStringToBinaryW CertGetNameStringW CryptStringToBinaryA

wintrust

WTHelperProvDataFromStateData WinVerifyTrust

msimg32

AlphaBlend GradientFill

imm32

ImmGetContext ImmReleaseContext ImmSetCompositionWindow

Name

.text

Size

5.6MB

Virtual Size

5.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

110KB

Virtual Size

170KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

265KB

Virtual Size

264KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=37, id=259, version=33145,

count=10, id=261, productName=VS2017 v15.7.5 build 26433, version=26433,

count=21, productName=Unmarked objects (old),

count=491, id=260, version=27031,

count=6, id=261, version=27032,

count=4, id=260, productName=VS2017 v15.8.5 build 26732, version=26732,

count=6, id=199, version=41118,

count=27, id=259, version=26706,

count=1, id=260, productName=VS2017 v15.9.11 build 27030, version=27030,

count=2, id=261, productName=VS2017 v15.9.11 build 27030, version=27030,

count=64, id=261, version=27031,

count=36, id=260, version=26706,

count=1, id=263, version=33145,

count=142, id=261, version=26706,

count=43, id=260, version=33145,

count=240, id=261, version=33145,

count=772, id=1, productName=Unmarked objects,

count=55, id=257, version=33145,

count=2, id=262, version=33145,

count=2, id=260, version=27054,

count=58, id=261, version=27054,

count=134, id=261, version=27051,

count=1, id=255, version=27051,

count=1, id=151,

count=1, id=258, version=27051,