9f1PSdyeN3PgphnJ.exe
- IMPHASH 6ce77955e16cbfd677a6f6b45b75d4a9
- SHA256 2402dc20d83e4a1feb263ca0a87fd066c444c1ea3b2a1a7909f901672bbfe977
- MD5 c37d8e3b7cd5bb4e540104210d407949
- SHA1 e20cd60b651dc1bf93f1089ca1a63ef8faf014a1
- SHA512 c5de4a7dd4e5019405240d886764a1730f0cf1519023dc59a8a415858e2ad878da65fedadef1f11d54a5f809b25a39f213fac3c101596dd1aa5792dd3b82e822
- SSDEEP 98304:IXp9ddnysc3eBKtuPiVQSvtTJYUNzxkL90+rEo6rOcnPqT:Q9ryscbcPGQYtVRxw90yEo6rhPqT
- TLSH T122968D73E796129CC576C53C865ECB22E37FB8011720A7DB63C069656F83AE45ABD380
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
8765440
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d3d11
D3D11CreateDeviceAndSwapChain
d3dcompiler_43
D3DCompile
ntdll
NtQuerySystemInformation
RtlCaptureContext
RtlVirtualUnwind
NtClose
RtlLookupFunctionEntry
VerSetConditionMask
kernel32
K32GetModuleInformation
GetEnvironmentVariableW
ExpandEnvironmentStringsW
CreateDirectoryW
DeleteFileA
FindNextFileA
GetFileAttributesW
GetFileAttributesExA
WriteFile
GetTempPathW
GetTempPathA
InitializeCriticalSectionEx
DeleteCriticalSection
GetTickCount
GetWindowsDirectoryA
VirtualQuery
GetModuleFileNameW
AddDllDirectory
LoadLibraryW
SetDllDirectoryW
MoveFileExW
GetSystemTimes
SetUnhandledExceptionFilter
Module32NextW
Thread32Next
Thread32First
SetConsoleTextAttribute
FreeConsole
FindResourceA
QueryFullProcessImageNameW
CreateFileMappingA
lstrcmpW
VirtualProtectEx
VirtualProtect
GetSystemDirectoryA
GetThreadContext
ResumeThread
GetExitCodeThread
OpenThread
GetCurrentThread
CreateRemoteThread
CreateThread
WaitForMultipleObjects
CreateEventW
ResetEvent
SetEvent
CheckRemoteDebuggerPresent
IsDebuggerPresent
GetFileAttributesA
FindFirstFileA
GetFileSizeEx
ReadFile
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
LoadLibraryExW
EnterCriticalSection
LeaveCriticalSection
SleepEx
VerifyVersionInfoA
MoveFileExA
WaitForSingleObjectEx
GetFileType
PeekNamedPipe
SetLastError
FormatMessageA
AddVectoredExceptionHandler
HeapDestroy
HeapSize
GetModuleFileNameA
InitializeCriticalSection
LocalFree
GetSystemInfo
GetLocaleInfoEx
GetCurrentDirectoryW
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetFileInformationByHandle
AreFileApisANSI
GetFileInformationByHandleEx
FindClose
CreateFileW
CreateFileA
GetEnvironmentVariableA
Module32FirstW
Process32Next
Process32First
Process32NextW
Process32FirstW
GetSystemWow64DirectoryA
CreateToolhelp32Snapshot
GetConsoleWindow
SetCurrentConsoleFontEx
GetCurrentConsoleFontEx
GlobalFindAtomA
GetStartupInfoA
CreateSemaphoreA
lstrcmpiA
GetModuleHandleW
VirtualUnlock
ReadProcessMemory
VirtualFree
VirtualAlloc
GetTickCount64
OpenProcess
TerminateProcess
ExitProcess
GetCurrentProcessId
GetCurrentProcess
Sleep
WaitForSingleObject
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetLastError
CloseHandle
GetCommandLineA
GetStdHandle
LoadLibraryA
GetProcAddress
GetModuleHandleA
FreeLibrary
QueryPerformanceFrequency
QueryPerformanceCounter
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
GlobalLock
SleepConditionVariableSRW
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
K32GetModuleFileNameExA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
WriteProcessMemory
WakeAllConditionVariable
InitOnceComplete
InitOnceBeginInitialize
GetCurrentThreadId
GlobalAlloc
GlobalUnlock
UnhandledExceptionFilter
sdl3
SDL_OpenGamepad
SDL_IsGamepad
SDL_Init
SDL_PollEvent
SDL_Quit
SDL_GetGamepadID
SDL_GetJoysticks
SDL_free
SDL_CloseGamepad
urlmon
URLDownloadToFileA
shell32
ShellExecuteA
SHGetFolderPathW
user32
GetWindowTextA
GetActiveWindow
SetWindowPos
ShowWindow
EnumDisplaySettingsA
LoadIconA
GetDesktopWindow
SetWindowLongA
GetWindowLongA
MessageBoxA
SetForegroundWindow
GetSystemMetrics
MapVirtualKeyA
keybd_event
GetKeyboardState
SetFocus
SetWindowDisplayAffinity
SetLayeredWindowAttributes
RegisterClassExA
GetWindowLongPtrA
DefWindowProcA
PeekMessageA
DispatchMessageA
TranslateMessage
GetKeyboardLayout
ToUnicodeEx
LoadCursorA
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
GetClientRect
ReleaseDC
GetDC
SetWindowLongPtrA
EnumChildWindows
FindWindowA
FindWindowW
EnumWindows
GetWindowThreadProcessId
MessageBoxW
GetForegroundWindow
IsWindowUnicode
ReleaseCapture
SetCapture
GetCapture
GetKeyState
GetMessageExtraInfo
TrackMouseEvent
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
GetAsyncKeyState
PostQuitMessage
gdi32
CreateCompatibleDC
StretchBlt
SetStretchBltMode
CreateCompatibleBitmap
DeleteObject
DeleteDC
SelectObject
advapi32
SystemFunction036
ConvertSidToStringSidA
CryptDestroyHash
CryptHashData
CopySid
RegDeleteKeyA
RegCreateKeyExA
CryptEncrypt
CryptImportKey
CryptDestroyKey
SetThreadToken
OpenProcessToken
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CreateProcessAsUserA
RegSetValueExA
RegOpenKeyW
RegOpenKeyA
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyW
SetSecurityInfo
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyExA
RegCreateKeyExW
RegCloseKey
IsValidSid
InitializeAcl
GetLengthSid
AdjustTokenPrivileges
AddAccessAllowedAce
GetUserNameA
LookupPrivilegeValueA
SetTokenInformation
RevertToSelf
PrivilegeCheck
GetTokenInformation
DuplicateTokenEx
ole32
StringFromGUID2
CoCreateInstance
CoUninitialize
CreateStreamOnHGlobal
CoInitialize
d3dx11_43
D3DX11CreateShaderResourceViewFromMemory
msvcp140
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Id_cnt@id@locale@std@@0HA
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?_Xbad_function_call@std@@YAXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?uncaught_exceptions@std@@YAHXZ
_Query_perf_counter
_Query_perf_frequency
_Thrd_detach
_Mtx_lock
_Mtx_unlock
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
??Bios_base@std@@QEBA_NXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Xtime_get_ticks
?setf@ios_base@std@@QEAAHHH@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
_Thrd_join
_Thrd_id
_Thrd_hardware_concurrency
??7ios_base@std@@QEBA_NXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?_Random_device@std@@YAIXZ
??0facet@locale@std@@IEAA@_K@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Strxfrm
_Strcoll
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??1facet@locale@std@@MEAA@XZ
wininet
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetReadFile
imm32
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext
dwmapi
DwmExtendFrameIntoClientArea
pdh
PdhCollectQueryData
PdhGetFormattedCounterValue
PdhAddCounterA
PdhOpenQueryA
psapi
GetModuleInformation
dinput8
DirectInput8Create
gdiplus
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipDisposeImage
GdipSaveImageToStream
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipCloneImage
wldap32
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord41
ord26
ord143
ord217
ord46
ord211
ord60
ord45
ord50
ord22
ws2_32
ioctlsocket
__WSAFDIsSet
listen
htonl
accept
WSACleanup
WSAStartup
WSAIoctl
WSASetLastError
select
getaddrinfo
freeaddrinfo
recvfrom
sendto
socket
setsockopt
gethostname
ntohl
ntohs
bind
closesocket
htons
getsockopt
getsockname
getpeername
connect
recv
WSAGetLastError
send
crypt32
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertFindExtension
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
normaliz
IdnToAscii
userenv
UnloadUserProfile
vcruntime140
__current_exception
__current_exception_context
__intrinsic_setjmp
longjmp
wcsstr
wcsrchr
strstr
memset
memmove
__C_specific_handler
_local_unwind
__std_terminate
strchr
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memcpy
memchr
memcmp
strrchr
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
strerror
__p___argv
_beginthreadex
_register_thread_local_exe_atexit_callback
terminate
_getpid
_c_exit
__p___argc
__sys_nerr
_exit
abort
_initterm_e
_invalid_parameter_noinfo
exit
_resetstkoflw
_errno
_invoke_watson
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
system
_get_initial_narrow_environment
_initterm
api-ms-win-crt-stdio-l1-1-0
fwrite
_set_fmode
setvbuf
ungetc
_lseeki64
__stdio_common_vsprintf
__acrt_iob_func
__p__commode
_wfopen
feof
fputs
_read
_write
_close
_open
_pclose
fseek
fopen
ftell
freopen_s
__stdio_common_vfprintf
__stdio_common_vsscanf
_get_stream_buffer_pointers
fsetpos
fread
fclose
fputc
_popen
fflush
fgetc
fgetpos
_fseeki64
fgets
getchar
__stdio_common_vsprintf_s
api-ms-win-crt-filesystem-l1-1-0
_unlink
_unlock_file
_lock_file
_access
_stat64
_fstat64
api-ms-win-crt-heap-l1-1-0
malloc
realloc
free
calloc
_callnewh
_set_new_mode
api-ms-win-crt-convert-l1-1-0
wcstombs_s
strtod
strtoull
strtol
strtoll
atof
atoi
strtoul
api-ms-win-crt-environment-l1-1-0
getenv
_dupenv_s
api-ms-win-crt-string-l1-1-0
_stricmp
_wcsicmp
wcscpy_s
isspace
isupper
strncmp
strcmp
wcscmp
strspn
toupper
strcpy
isalnum
_strdup
strpbrk
strncpy
strcspn
strcpy_s
wcslen
strlen
tolower
api-ms-win-crt-time-l1-1-0
_difftime64
_time64
_gmtime64
_localtime64_s
_gmtime64_s
_localtime64
strftime
api-ms-win-crt-math-l1-1-0
atan2
atan2f
sqrt
tanf
logf
log
asin
powf
atan
acosf
sqrtf
sinf
fmodf
cosf
_dsign
pow
expf
_dclass
ceilf
__setusermatherr
api-ms-win-crt-locale-l1-1-0
localeconv
_configthreadlocale
___lc_codepage_func
api-ms-win-crt-utility-l1-1-0
rand
srand
qsort
api-ms-win-crt-multibyte-l1-1-0
_mbsicmp
api-ms-win-crt-conio-l1-1-0
_getch
shlwapi
PathFindFileNameW
Name
.text
Size
2.3MB
Virtual Size
2.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.ndfzhvy
Size
3.3MB
Virtual Size
3.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.ttrpbbi
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.sdvcjui
Size
79KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rtunxgd
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.qnvwoua
Size
654KB
Virtual Size
653KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE