Desktop.zip
- SHA256 1fce58ffe0128534abafeb30ae89422bb6ab648b5e88324bf4348462879e4db9
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
csrss.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral2
Sample
enkD34B.tmp.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
300 seconds
Behavioral task
behavioral3
Sample
enkD34C.tmp.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
300 seconds
Behavioral task
behavioral4
Sample
smss.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
300 seconds
General
- Target Desktop.zip
- Size 4.8MB
- Sample260817-sxt73scc26
- SHA256 1fce58ffe0128534abafeb30ae89422bb6ab648b5e88324bf4348462879e4db9
- MD5 8107fbcb8ff198b4a7cacf33233d0153
- SHA1 53893c79ec10b7be763532c18bd43c7562929aeb
- SHA512 c16678b3c8445ff3c6f9cddde2361d9c151cd8cee2773852022d80841bd6ef7b04d90f6bf4d188e9a3daf9e0f8839d1e30a5da982d1473a1c7e97ac7a76439c4
- SSDEEP 98304:+C1g71ATLlE8J5x+9myQGzgecLY/1SWjfhuEAVc1D8yEjMZwI2q:lexATLlLJ5o9mlvY/4WEE2EAPjMZw5q
- TLSH T1DB363399A4DF2781B2B72FD327119E9580600BAB1C2537CE85CD7100D2FB93B46E9797
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/csrss.exe unpack001/enkD34B.tmp.exe unpack001/enkD34C.tmp.exe unpack001/smss.exe
File Explorer
-
Desktop.zip.zip 4.8MB
-
csrss.exe.exe 1.0MB
-
enkD34B.tmp.exe.exe 3.1MB
-
enkD34C.tmp.exe.exe 3.2MB
-
smss.exe.exe 1.0MB
csrss.exe
- IMPHASH d9711b9575b82efcf5acbac1e4eb30e9
- SHA256 8b259e08d803f31cc8ecca85a75f5e6fd108bb15420d584afb0adc7958c939a3
- MD5 473e81fd42b07fe330d4c844a4605ca1
- SHA1 9dc45e3e3bedfe2775e2f82aeb7e415675f8f58c
- SHA512 4ca684c249994846ed8179c68f7da592ad6add2fd3c74293973fcf230dc85774b6c25a492e6910a2497515e4cbfb9713fd3e43a2e758c5d34c147e1d072dee20
- SSDEEP 96:n8LNtWXKzVGHK3oKO1lwQGIHm6fUHKthRUEWlmw3Q5tfPYx9VIsuEP:nEM6hJoP1lwmxfUHKlUEA3Q5tfAxrT
- TLSH T16635098EF6678CFADE284238CA73458670B6B7281F0277DB4754D0292C677D9A6312CD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\source\repos\ConsoleApplication1\x64\Release\ConsoleApplication1.pdb
kernel32
Sleep
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
vcruntime140
__C_specific_handler
__current_exception
__current_exception_context
memcpy
api-ms-win-crt-runtime-l1-1-0
_register_thread_local_exe_atexit_callback
_initterm_e
__p___argc
_seh_filter_exe
_exit
_cexit
_register_onexit_function
_crt_atexit
terminate
_set_app_type
_c_exit
_initialize_onexit_table
__p___argv
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
exit
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
324B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35721,
count=3, id=259, version=35721,
count=10, id=260, version=35721,
count=18, id=261, version=35721,
count=3, id=257, version=33145,
count=40, id=1, productName=Unmarked objects,
count=1, id=265, version=36248,
count=1, id=255, version=36248,
count=1, id=258, version=36248,
enkD34B.tmp.exe
- IMPHASH 0aed56d8c898a7fed3cc264783569cb9
- SHA256 f3b93c77004295029ca13aeb2880e7f0146a8ceadee0ce9198ce69ebef8a744e
- MD5 0295d8ce8fbda184b344dcfc8c17c305
- SHA1 12da3a78f700381cad574eb8d818f324ad8bfdf2
- SHA512 dfdca990654f0184c293e48b85ba0dbacfcbe35a2553353a9c051a52983da8b424d08adac2d71e863a97af76e95d87649ae62b631cb1771a1341b120abd31425
- SSDEEP 49152:QBAesKrFX1wiWO+QU6h/jwXW/VWK1bkatU7szCtTqoRn:Qecx7EyV7NU7suQo
- TLSH T1BBE5D003E69981E8D55EC17CC7969632EA36B88E0B31B2EF17D40B253E17B909F2D345
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
941280
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
runner.pdb
kernel32
GetTickCount
CreateThread
WaitForSingleObject
GetExitCodeProcess
FindNextFileW
FindFirstFileExW
SetFileAttributesW
GetComputerNameW
CopyFileExW
GetModuleHandleA
GetModuleFileNameW
GetLocalTime
SetThreadStackGuarantee
GetCurrentThread
LockResource
HeapReAlloc
SwitchToThread
GetOverlappedResult
WriteFile
PostQueuedCompletionStatus
ReadFile
GetStringTypeW
SetStdHandle
SetLastError
GetFinalPathNameByHandleW
GetQueuedCompletionStatusEx
SetEnvironmentVariableW
GetCPInfo
CreateIoCompletionPort
SetFileCompletionNotificationModes
GetOEMCP
CancelIoEx
LoadResource
SizeofResource
FindResourceW
GetACP
IsValidCodePage
GetProcAddress
UnhandledExceptionFilter
GetModuleHandleW
FindClose
LoadLibraryExA
IsDebuggerPresent
GetCommandLineA
RtlPcToFileHeader
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
RaiseException
EncodePointer
CreateFileW
FormatMessageW
GetLastError
CompareStringW
RtlUnwindEx
SetUnhandledExceptionFilter
InitializeSListHead
SetFilePointerEx
GetCurrentThreadId
WaitForSingleObjectEx
LoadLibraryA
GetCurrentProcess
GetCurrentProcessId
CreateMutexA
ReleaseMutex
GetFileSizeEx
LCMapStringW
ReadFileEx
SleepEx
WriteFileEx
HeapSize
SetHandleInformation
GetFullPathNameW
SetFileTime
SetFileInformationByHandle
GetFileInformationByHandle
GetFileInformationByHandleEx
FlushFileBuffers
CreateDirectoryW
ExitProcess
GetSystemDirectoryW
GetWindowsDirectoryW
CreateProcessW
GetFileAttributesW
DuplicateHandle
LoadLibraryExW
VirtualProtect
HeapAlloc
IsProcessorFeaturePresent
FreeLibrary
HeapFree
TerminateProcess
GetProcessHeap
GetModuleHandleExW
GetFileType
OutputDebugStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SystemTimeToFileTime
FileTimeToSystemTime
AddVectoredExceptionHandler
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetCurrentDirectoryW
lstrlenW
WideCharToMultiByte
GetStdHandle
GetConsoleMode
GetConsoleOutputCP
MultiByteToWideChar
WriteConsoleW
GetEnvironmentVariableW
QueryPerformanceFrequency
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
CompareStringOrdinal
GetCommandLineW
GetStartupInfoW
CloseHandle
GetSystemTimeAsFileTime
advapi32
GetUserNameW
CheckTokenMembership
FreeSid
RegQueryValueExW
AllocateAndInitializeSid
RegOpenKeyExW
RegCloseKey
oleaut32
SysStringLen
VariantClear
SysFreeString
SysAllocStringLen
GetErrorInfo
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
ws2_32
recv
closesocket
shutdown
WSASend
WSAStartup
WSAIoctl
getaddrinfo
freeaddrinfo
send
ioctlsocket
getsockname
WSAGetLastError
getpeername
connect
getsockopt
setsockopt
bind
WSASocketW
WSACleanup
ntdll
NtCreateFile
NtDeviceIoControlFile
RtlNtStatusToDosError
NtOpenFile
NtCreateNamedPipeFile
NtCancelIoFileEx
NtWriteFile
crypt32
CertCloseStore
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertGetCertificateChain
CertAddCertificateContextToStore
CertOpenStore
CertDuplicateStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertDuplicateCertificateChain
CertEnumCertificatesInStore
secur32
QueryContextAttributesW
AcquireCredentialsHandleA
ApplyControlToken
AcceptSecurityContext
DecryptMessage
FreeCredentialsHandle
DeleteSecurityContext
EncryptMessage
FreeContextBuffer
InitializeSecurityContextW
bcryptprimitives
ProcessPrng
shell32
ShellExecuteExW
ShellExecuteW
iphlpapi
GetAdaptersInfo
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
408KB
Virtual Size
408KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=147, id=261, version=33145,
count=12, id=260, version=33145,
count=7, id=259, version=33145,
count=9, id=259, version=35721,
count=16, id=260, version=35721,
count=40, id=261, version=35721,
count=43, id=260, version=36252,
count=207, id=1, productName=Unmarked objects,
count=35, productName=Unmarked objects (old),
count=1, id=255, version=36252,
count=1, id=258, version=36252,
enkD34C.tmp.exe
- IMPHASH 0aed56d8c898a7fed3cc264783569cb9
- SHA256 fe9ece31049bf0458628efc5f7af5c8b925c11e00d04d6abc6b15bcb300d8748
- MD5 c23e75cba879d979e26d4c56623c0962
- SHA1 7a45357a4a28a162f33ff43affe219cef3a657d7
- SHA512 ed89394708bbee92804c46b3087352f24410236beb7ee536c0501fb13593179162196fde3a1f623aabb0025feb7cdb1ef6f7c5ca0f1f887f7b8f8ade652ad188
- SSDEEP 49152:PdnHOPFtBX8i6iG79B6oqxnAV7O4fS4uSD3Q0y/4HdToAYf5CSKBE8v/O:PK9DpSRfzuqE/+dToA4LKBE4W
- TLSH T136F5E003E69881E8D55EC17CC7969632EA32B88A0B34B6EF17D40B153E27FA05F2D745
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
941296
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
runner.pdb
kernel32
GetTickCount
CreateThread
WaitForSingleObject
GetExitCodeProcess
FindNextFileW
FindFirstFileExW
SetFileAttributesW
GetComputerNameW
CopyFileExW
GetModuleHandleA
GetModuleFileNameW
GetLocalTime
SetThreadStackGuarantee
GetCurrentThread
LockResource
HeapReAlloc
SwitchToThread
GetOverlappedResult
WriteFile
PostQueuedCompletionStatus
ReadFile
GetStringTypeW
SetStdHandle
SetLastError
GetFinalPathNameByHandleW
GetQueuedCompletionStatusEx
SetEnvironmentVariableW
GetCPInfo
CreateIoCompletionPort
SetFileCompletionNotificationModes
GetOEMCP
CancelIoEx
LoadResource
SizeofResource
FindResourceW
GetACP
IsValidCodePage
GetProcAddress
UnhandledExceptionFilter
GetModuleHandleW
FindClose
LoadLibraryExA
IsDebuggerPresent
GetCommandLineA
RtlPcToFileHeader
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
RaiseException
EncodePointer
CreateFileW
FormatMessageW
GetLastError
CompareStringW
RtlUnwindEx
SetUnhandledExceptionFilter
InitializeSListHead
SetFilePointerEx
GetCurrentThreadId
WaitForSingleObjectEx
LoadLibraryA
GetCurrentProcess
GetCurrentProcessId
CreateMutexA
ReleaseMutex
GetFileSizeEx
LCMapStringW
ReadFileEx
SleepEx
WriteFileEx
HeapSize
SetHandleInformation
GetFullPathNameW
SetFileTime
SetFileInformationByHandle
GetFileInformationByHandle
GetFileInformationByHandleEx
FlushFileBuffers
CreateDirectoryW
ExitProcess
GetSystemDirectoryW
GetWindowsDirectoryW
CreateProcessW
GetFileAttributesW
DuplicateHandle
LoadLibraryExW
VirtualProtect
HeapAlloc
IsProcessorFeaturePresent
FreeLibrary
HeapFree
TerminateProcess
GetProcessHeap
GetModuleHandleExW
GetFileType
OutputDebugStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SystemTimeToFileTime
FileTimeToSystemTime
AddVectoredExceptionHandler
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetCurrentDirectoryW
lstrlenW
WideCharToMultiByte
GetStdHandle
GetConsoleMode
GetConsoleOutputCP
MultiByteToWideChar
WriteConsoleW
GetEnvironmentVariableW
QueryPerformanceFrequency
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
CompareStringOrdinal
GetCommandLineW
GetStartupInfoW
CloseHandle
GetSystemTimeAsFileTime
advapi32
GetUserNameW
CheckTokenMembership
FreeSid
RegQueryValueExW
AllocateAndInitializeSid
RegOpenKeyExW
RegCloseKey
oleaut32
SysStringLen
VariantClear
SysFreeString
SysAllocStringLen
GetErrorInfo
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
ws2_32
recv
closesocket
shutdown
WSASend
WSAStartup
WSAIoctl
getaddrinfo
freeaddrinfo
send
ioctlsocket
getsockname
WSAGetLastError
getpeername
connect
getsockopt
setsockopt
bind
WSASocketW
WSACleanup
ntdll
NtCreateFile
NtDeviceIoControlFile
RtlNtStatusToDosError
NtOpenFile
NtCreateNamedPipeFile
NtCancelIoFileEx
NtWriteFile
crypt32
CertCloseStore
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertGetCertificateChain
CertAddCertificateContextToStore
CertOpenStore
CertDuplicateStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertDuplicateCertificateChain
CertEnumCertificatesInStore
secur32
QueryContextAttributesW
AcquireCredentialsHandleA
ApplyControlToken
AcceptSecurityContext
DecryptMessage
FreeCredentialsHandle
DeleteSecurityContext
EncryptMessage
FreeContextBuffer
InitializeSecurityContextW
bcryptprimitives
ProcessPrng
shell32
ShellExecuteExW
ShellExecuteW
iphlpapi
GetAdaptersInfo
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
408KB
Virtual Size
408KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=147, id=261, version=33145,
count=12, id=260, version=33145,
count=7, id=259, version=33145,
count=9, id=259, version=35721,
count=16, id=260, version=35721,
count=40, id=261, version=35721,
count=43, id=260, version=36248,
count=207, id=1, productName=Unmarked objects,
count=35, productName=Unmarked objects (old),
count=1, id=255, version=36248,
count=1, id=258, version=36248,
smss.exe
- IMPHASH d9711b9575b82efcf5acbac1e4eb30e9
- SHA256 8b259e08d803f31cc8ecca85a75f5e6fd108bb15420d584afb0adc7958c939a3
- MD5 473e81fd42b07fe330d4c844a4605ca1
- SHA1 9dc45e3e3bedfe2775e2f82aeb7e415675f8f58c
- SHA512 4ca684c249994846ed8179c68f7da592ad6add2fd3c74293973fcf230dc85774b6c25a492e6910a2497515e4cbfb9713fd3e43a2e758c5d34c147e1d072dee20
- SSDEEP 96:n8LNtWXKzVGHK3oKO1lwQGIHm6fUHKthRUEWlmw3Q5tfPYx9VIsuEP:nEM6hJoP1lwmxfUHKlUEA3Q5tfAxrT
- TLSH T16635098EF6678CFADE284238CA73458670B6B7281F0277DB4754D0292C677D9A6312CD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\source\repos\ConsoleApplication1\x64\Release\ConsoleApplication1.pdb
kernel32
Sleep
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
vcruntime140
__C_specific_handler
__current_exception
__current_exception_context
memcpy
api-ms-win-crt-runtime-l1-1-0
_register_thread_local_exe_atexit_callback
_initterm_e
__p___argc
_seh_filter_exe
_exit
_cexit
_register_onexit_function
_crt_atexit
terminate
_set_app_type
_c_exit
_initialize_onexit_table
__p___argv
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
exit
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
324B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
688B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35721,
count=3, id=259, version=35721,
count=10, id=260, version=35721,
count=18, id=261, version=35721,
count=3, id=257, version=33145,
count=40, id=1, productName=Unmarked objects,
count=1, id=265, version=36248,
count=1, id=255, version=36248,
count=1, id=258, version=36248,