rustdesk-1.4.9-x86_64.zip
- SHA256 3d867f6ae1f5dd908da93569d939e3f6ff6b8ca2b73d8f9e1ed7bc1514d79ba8
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
rustdesk-1.4.9-x86_64.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
16 signatures
300 seconds
Behavioral task
behavioral2
Sample
rustdesk-1.4.9-x86_64.zip
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
300 seconds
Behavioral task
behavioral3
Sample
rustdesk-1.4.9-x86_64.zip
Resource
win11-20260911-en
windows11-21h2-x64
15 signatures
300 seconds
Behavioral task
behavioral4
Sample
rustdesk-1.4.9-x86_64.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
General
- Target rustdesk-1.4.9-x86_64.zip
- Size 33.7MB
- Sample261001-tyjcmsybrf
- SHA256 3d867f6ae1f5dd908da93569d939e3f6ff6b8ca2b73d8f9e1ed7bc1514d79ba8
- MD5 c6a1b98a5ea8a16fa8cb6f8dd285ed1b
- SHA1 b3f641901209cf8a9e8c5ab6cd3a75588fc1d796
- SHA512 ea573064c27419663a85a23bbed773fb2c1ba5f098533d5bfe44896951118fadbed0c34ebfacb3bd3cfc480a28b0397b755074b5fed7ed6360db129895ba6d11
- SSDEEP 786432:w7FXsf4OXI9LSC08+pFanDZb3XTT8eGpwbEyQQtSMNqcAupA:wZR8I9LSo+eDT8TyQuNqcAuK
- TLSH T162773360ACE6708AEA3B62002D278D29E7FA7C94F0485E940775587A6DCF1ED197CF4C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Setup/DeviceSettingsProvider.dll
File Explorer
-
rustdesk-1.4.9-x86_64.zip.zip 33.7MB
-
Setup/DeviceSettingsProvider.dll.dll 24.0MB
-
setup.exe.exe 33.5MB
Setup/DeviceSettingsProvider.dll
- IMPHASH ce1807eff5c1524710d965392349a301
- SHA256 b390125f0a484a901b18fb25fd99f00bb5e391aaac37c0990dae1f442203004b
- MD5 a9128e187b0665212885cf21a18e8d0d
- SHA1 13d2a4927e5cf13343b2633e02983746cd0c5a58
- SHA512 0b92e813f9ff10f267512460a714c52221cd01d917ef67a0b544e3ba2a4f114d17d94b7f909cf02742d887b038e4af990ec7e135f4fbdcacf158cfea106603d1
- SSDEEP 393216:UZBbOqPJsN6pyECip5+99+lhN9GcOUqiulbyxfnr6vNDdOthpsendlHuj4Q:UZBbs1a89+l7QcOUAlby1nr9PldlU4Q
- TLSH T1BF473300BD991C9ADE57B1B619234A35959D28F0D3ACFBBB03D7272A0FA13E4117F684
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
272088
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
WriteConsoleW
LocalFree
LoadLibraryA
GetLastError
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
LCMapStringW
GetProcessHeap
GetStringTypeW
SetFilePointerEx
SetStdHandle
HeapSize
HeapReAlloc
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
CloseHandle
CreateFileW
advapi32
EqualSid
GetSecureValue
IsAGSComplianceDataCollectionAllowed
IsDataCollectionAllowed
IsDownloadEnabled
IsFedRampCloudServiceEnabled
IsInternetConnectionAllowed
IsSystemServiceAllowed
SecureSettingExists
SetLogger
Name
.text
Size
370KB
Virtual Size
370KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
114KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
501KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
23.5MB
Virtual Size
23.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
setup.exe
- IMPHASH 9a1908305d69921afbc397a097a8fc5f
- SHA256 b60a4f1a970c22bcf82616b68ded58330314b77ceffa3763603e95b04d755ab5
- MD5 34d5da293c28ea8dbd17904027216fce
- SHA1 7073666f5db46067e129783991015a06f04290e0
- SHA512 a0902dd03b518b698264f6aadc5b6a3aab1d1e556ea7be038dea5fe46a2ab369b72323ff3a4d0027dcb01a16a34e52692d30534aff2c7932ccdd0968a8ee06c2
- SSDEEP 393216:pcLq1CrXb4cGNUeUBFIajwYW15QVYcSHnl:pcLq1Y7FVwxQVYj
- TLSH T12D77D52F17AA19ADD4B6A3BED5051F80A03FB055076246CF079141F67CAEADC8FFA520
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c4:ac:04:5d:e0:0a:ec:f0:61:bc:94:c2:55:86:4f:39:d4:17:2d:37:3f:9e:6d:88:d5:ea:7e:83:7e:75:aa:92
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Autodesk\, Inc.,O=Autodesk\, Inc.,L=San Francisco,ST=California,C=US
Chains
Feb 6, 2026
CN=Autodesk\, Inc.,O=Autodesk\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Autodesk\, Inc.,O=Autodesk\, Inc.,L=San Francisco,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Autodesk\, Inc.,O=Autodesk\, Inc.,L=San Francisco,ST=California,C=US
Serial Number
09:98:cc:9b:18:23:74:b5:ce:81:d9:a8:60:e6:03:5e
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Sep 16, 2025 - Sep 15, 2026
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
15258816
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\build\target\Windows\x64\symbols\Release\Installer.pdb
authz
AuthzInitializeContextFromSid
AuthzFreeResourceManager
AuthzInitializeResourceManager
AuthzFreeContext
AuthzAccessCheck
shlwapi
PathFileExistsW
PathRemoveFileSpecW
PathIsUNCW
PathUnquoteSpacesW
PathAppendW
version
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoA
GetFileVersionInfoSizeA
msi
ord173
ord217
mpr
WNetGetConnectionW
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
wtsapi32
WTSEnumerateSessionsW
WTSQueryUserToken
WTSQuerySessionInformationW
WTSFreeMemory
secur32
LsaFreeReturnBuffer
LsaEnumerateLogonSessions
LsaGetLogonSessionData
ws2_32
gethostname
WSAStartup
WSACleanup
accept
bind
closesocket
connect
ioctlsocket
ntohs
ntohl
htons
htonl
FreeAddrInfoW
GetAddrInfoW
WSAWaitForMultipleEvents
WSASocketW
WSASetEvent
WSASend
WSAResetEvent
WSAEventSelect
WSACreateEvent
WSACloseEvent
WSAGetLastError
WSASetLastError
shutdown
setsockopt
send
recv
listen
wsock32
getsockname
getsockopt
select
gethostbyname
ioctlsocket
inet_addr
gethostbyaddr
getpeername
recvfrom
sendto
getservbyname
getservbyport
socket
crypt32
CertEnumCertificatesInStore
CertOpenSystemStoreW
CryptQueryObject
CertFreeCertificateContext
CertDuplicateCertificateContext
CertOpenStore
CertGetCertificateContextProperty
CertFindCertificateInStore
CertCloseStore
CryptMsgClose
ntdll
RtlPcToFileHeader
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
VerSetConditionMask
RtlVirtualUnwind
RtlUnwind
kernel32
SetFileInformationByHandle
GetStringTypeW
GetNativeSystemInfo
WakeAllConditionVariable
GetLocaleInfoEx
QueryPerformanceCounter
QueryPerformanceFrequency
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
SleepConditionVariableSRW
GetTickCount64
FindFirstFileExW
CopyFileW
CreateHardLinkW
GetFileInformationByHandleEx
GetLastError
FormatMessageA
FormatMessageW
WideCharToMultiByte
LocalFree
DecodePointer
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
GetModuleFileNameW
GetProcAddress
LoadLibraryExW
FreeLibrary
SetDllDirectoryW
ExpandEnvironmentStringsW
CloseHandle
WaitForSingleObject
MultiByteToWideChar
AreFileApisANSI
TerminateProcess
GetExitCodeProcess
CreateProcessA
GetSystemDirectoryW
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
ReleaseMutex
CreateMutexA
OpenProcess
OpenMutexA
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetCurrentProcess
GetModuleHandleW
GlobalAlloc
GlobalFree
Sleep
GetCurrentThreadId
LocalAlloc
GetSystemInfo
CreateFileW
GetFileAttributesExW
GetFileSize
ReadFile
MoveFileExW
GetDiskFreeSpaceExW
GetDriveTypeW
GetLogicalDriveStringsW
GetVolumeInformationW
QueryDosDeviceW
GetVolumeNameForVolumeMountPointW
LoadLibraryW
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteFile
SetHandleInformation
CreatePipe
CreateProcessW
GetFileAttributesW
GetFullPathNameW
GetCurrentProcessId
ProcessIdToSessionId
GetWindowsDirectoryW
CreateFileMappingW
MapViewOfFile
CreateSymbolicLinkW
AddDllDirectory
lstrcpyW
QueryFullProcessImageNameW
WTSGetActiveConsoleSessionId
Module32FirstW
Module32NextW
K32EnumProcessModules
K32GetModuleFileNameExW
GetTempPathW
RaiseException
SetUnhandledExceptionFilter
SetErrorMode
GetProcessTimes
GetSystemTime
WriteProcessMemory
SystemTimeToFileTime
LocaleNameToLCID
GetSystemDefaultLocaleName
CreateMutexW
OpenMutexW
GetFileInformationByHandle
GetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
DeleteFileW
FlushFileBuffers
GetFinalPathNameByHandleW
GetFileTime
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFilePointerEx
SetFileTime
DeviceIoControl
CreateDirectoryExW
CopyFileExW
CreateEventA
SetEvent
WaitForSingleObjectEx
GetLocaleInfoA
EnumSystemLocalesA
IsValidCodePage
FoldStringW
LCMapStringW
CompareStringW
GetDateFormatW
GetTimeFormatW
GetLocaleInfoW
GetCurrencyFormatW
IsDBCSLeadByteEx
GetStdHandle
IsDebuggerPresent
OutputDebugStringA
OutputDebugStringW
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
SetThreadStackGuarantee
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
VerifyVersionInfoW
SwitchToThread
LockFileEx
UnlockFile
GetFileType
AllocConsole
GetConsoleMode
WriteConsoleW
CreateFileA
ConnectNamedPipe
DisconnectNamedPipe
GetOverlappedResult
CancelIo
CreateEventW
CreateNamedPipeA
WaitNamedPipeA
UnlockFileEx
PeekNamedPipe
SetLastError
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemDirectoryA
LoadLibraryA
VirtualAlloc
VirtualProtect
VirtualFree
VirtualLock
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
ReleaseSemaphore
GetExitCodeThread
CreateSemaphoreA
GetModuleHandleExW
GetACP
GetSystemTimeAsFileTime
SwitchToFiber
DeleteFiber
CreateFiberEx
ConvertFiberToThread
ConvertThreadToFiberEx
SetConsoleMode
ReadConsoleA
ReadConsoleW
FindClose
FindFirstFileW
FindNextFileW
EncodePointer
InitOnceExecuteOnce
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
FreeLibraryWhenCallbackReturns
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
LCMapStringEx
CompareStringEx
GetCPInfo
InitializeSListHead
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InterlockedPushEntrySList
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
SetConsoleCtrlHandler
DuplicateHandle
GetConsoleOutputCP
SetStdHandle
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
GetCommandLineA
GetCommandLineW
GetCurrentThread
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
GetTimeZoneInformation
SetEnvironmentVariableW
GetOEMCP
WakeConditionVariable
UnmapViewOfFile
user32
CreateWindowExW
RegisterClassExW
PostQuitMessage
DefWindowProcW
PostThreadMessageW
DispatchMessageW
GetMessageW
CallNextHookEx
GetWindowLongW
SetWindowsHookExW
PostMessageW
SendMessageW
MessageBoxW
GetDesktopWindow
UnregisterClassW
GetWindowThreadProcessId
GetProcessWindowStation
SetWindowLongW
GetUserObjectInformationW
EnumWindows
ExitWindowsEx
UnhookWindowsHookEx
GetShellWindow
LoadIconW
shell32
SHGetSpecialFolderLocation
SHCreateDirectoryExW
ShellExecuteExW
ord51
SHGetKnownFolderPath
SHGetFileInfoW
SHBindToParent
SHBrowseForFolderW
CommandLineToArgvW
SHGetPathFromIDListW
SHGetMalloc
ole32
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitialize
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoTaskMemAlloc
oleaut32
SetErrorInfo
SysFreeString
VariantInit
VariantClear
GetErrorInfo
CreateErrorInfo
SysAllocString
VariantChangeType
advapi32
OpenProcessToken
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
AllocateAndInitializeSid
EqualSid
FreeSid
GetTokenInformation
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegGetValueW
LookupAccountNameW
CreateWellKnownSid
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
RegDeleteKeyExW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegQueryValueExW
RegRenameKey
RegDeleteTreeW
CreateProcessAsUserW
AdjustTokenPrivileges
CheckTokenMembership
DuplicateTokenEx
ImpersonateLoggedOnUser
RevertToSelf
LookupAccountSidW
LookupPrivilegeValueW
CreateProcessWithTokenW
ConvertSidToStringSidW
GetUserNameW
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
CopySid
GetLengthSid
DeregisterEventSource
RegisterEventSourceW
ReportEventW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CryptAcquireContextW
CryptReleaseContext
CryptGenRandom
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptDecrypt
CryptGetUserKey
CryptExportKey
comctl32
ord345
wintrust
WinVerifyTrust
bcrypt
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptGenRandom
??0ErrorCenter@CER@@IEAA@XZ
??0ErrorCenter@CER@@QEAA@AEBV01@@Z
??1ErrorCenter@CER@@UEAA@XZ
??4ErrorCenter@CER@@QEAAAEAV01@AEBV01@@Z
??_7ErrorCenter@CER@@6B@
Name
.text
Size
24.6MB
Virtual Size
24.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5.0MB
Virtual Size
5.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1.8MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
178KB
Virtual Size
178KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
232KB
Virtual Size
231KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=259, version=30795,
count=207, id=261, version=30795,
count=10, id=259, version=34321,
count=19, id=260, version=34321,
count=118, id=261, version=34321,
count=1, id=262, version=30795,
count=805, id=260, version=34444,
count=42, productName=Unmarked objects (old),
count=46, id=261, version=33814,
count=31, id=260, version=30795,
count=43, id=257, version=30795,
count=456, id=1, productName=Unmarked objects,
count=155, id=261, version=34444,
count=1, id=256, version=34444,
count=1, id=255, version=34444,
count=1, id=151,
count=1, id=258, version=34444,