Dorion_6.13.2_win64_portable.zip
- SHA256 65a8c72a0fb32ec3aa50a73f91451b3b2ea30c801cd6ad0bb14f5e4913e11b8e
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Dorion.exe
Resource
win11-20260911-en
windows11-21h2-x64
12 signatures
900 seconds
Behavioral task
behavioral2
Sample
extension/background.js
Resource
win11-20260911-en
windows11-21h2-x64
1 signatures
900 seconds
Behavioral task
behavioral3
Sample
injection/shelter.js
Resource
win11-20260911-en
windows11-21h2-x64
1 signatures
900 seconds
Behavioral task
behavioral4
Sample
updater.exe
Resource
win11-20260911-en
windows11-21h2-x64
0 signatures
900 seconds
General
- Target Dorion_6.13.2_win64_portable.zip
- Size 7.1MB
- Sample261003-2a3elsyz2p
- SHA256 65a8c72a0fb32ec3aa50a73f91451b3b2ea30c801cd6ad0bb14f5e4913e11b8e
- MD5 48c5b259b0134fedf03026a99a19f649
- SHA1 94e7c811364b087d8562e9172bbcf4789771cbfd
- SHA512 8eeadd77cafc368f9d85cd7f537a244724aa3b39f565689c5cce06ed3765d05552a3f14d91e0900b312ec90245029c8288e0b64de22f20a6d050b3f3f43e7ac6
- SSDEEP 196608:e6VRiq16oP6bxE7DG3+lV364eu4x5idi7rDoCLOB0fBy7:lVpfydEY+lV36S46inDo4OL7
- TLSH T13276336875F823B3E729D9231FA73A48B7459CBF6E946342100B0472B95B3E6F706871
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Dorion.exe unpack001/updater.exe
File Explorer
-
Dorion_6.13.2_win64_portable.zip.zip 7.1MB
-
Dorion.exe.exe 18.2MB
-
extension/background.js885B
-
extension/dnr-rules.json327B
-
extension/manifest.json637B
-
icons/icon.ico33KB
-
injection/shelter.js.js 221KB
-
updater.exe.exe 2.2MB
Dorion.exe
- IMPHASH 67a0a4a4142dc9e5dde10cdbb732508f
- SHA256 493748bde88b065fdf76abecc63f364cd92a100836446be286c7dd39210db1c8
- MD5 c66cd842df1a16a0dbedead92aa25fc3
- SHA1 3be81fd9540efd5f6dd79bc977abf9a10f17e51c
- SHA512 a884fe60db4be6c4ea6a1392211ccb70b952181503387d4d44288fc8de69915cb1ef53742e63b317f9c5805acdc4c2e8a1de83f93970002bcf69927cc5b8fe01
- SSDEEP 98304:G5Aw5c1qhtdhIHu73wZZH9f8XV05k7WuvVpiUyZfUIOVtBOoNrP9Rj2CnOjC0bQp:DwtF77jyUIOV5mu0cb/KrE7p
- TLSH T14F1707117A5B99ACC19AC870834A8A734E2130DF0A36B9BF45C456393F6DBF46F2C359
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
13693952
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Dorion.pdb
kernel32
CreateWaitableTimerExW
SetEnvironmentVariableW
GetCommandLineW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetCurrentDirectoryW
WaitForMultipleObjects
GetTickCount
WriteConsoleW
GetSystemInfo
SleepEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
WaitForSingleObjectEx
GetCurrentProcess
CreateMutexA
GetProcessTimes
FormatMessageW
SetHandleInformation
ExitProcess
CreateEventW
GetSystemDirectoryW
GetWindowsDirectoryW
CreateProcessW
DuplicateHandle
GetSystemTimes
GetProcessIoCounters
GetConsoleOutputCP
OpenProcess
Process32NextW
Process32FirstW
GetConsoleMode
ReadProcessMemory
GetStdHandle
VirtualQueryEx
DisconnectNamedPipe
ConnectNamedPipe
SetNamedPipeHandleState
SleepConditionVariableSRW
LocalFree
WakeAllConditionVariable
LocalAlloc
AcquireSRWLockExclusive
CreateToolhelp32Snapshot
ReleaseSRWLockExclusive
AddVectoredExceptionHandler
ReleaseMutex
SetThreadStackGuarantee
GetSystemTimePreciseAsFileTime
CreateNamedPipeW
SetWaitableTimer
GetCurrentThread
HeapReAlloc
EncodePointer
QueryPerformanceFrequency
LoadLibraryExW
OutputDebugStringW
OutputDebugStringA
TerminateProcess
QueryPerformanceCounter
Sleep
GetCurrentThreadId
FlsFree
FlsSetValue
SetLastError
FlsGetValue
FlsAlloc
FreeLibrary
SetFilePointerEx
DeleteFileW
GetTempPathW
GetModuleFileNameW
GetFileAttributesW
CompareStringOrdinal
CancelIo
CreateMutexW
GetExitCodeProcess
CreateDirectoryW
GetFileInformationByHandleEx
GetFileInformationByHandle
FindFirstFileExW
SetFileInformationByHandle
GetLastError
WaitForSingleObject
GetProcAddress
SwitchToThread
LoadLibraryExA
GetTimeZoneInformationForYear
InitializeCriticalSectionEx
SetFileTime
GetFullPathNameW
HeapAlloc
CloseHandle
GetModuleHandleA
FindClose
GetOverlappedResult
MultiByteToWideChar
WideCharToMultiByte
WriteFileEx
ReadFileEx
lstrlenW
FindNextFileW
CopyFileExW
CreateFileW
HeapFree
LoadLibraryW
RaiseException
GetProcessId
CreateThread
RtlPcToFileHeader
GetCurrentProcessId
RtlUnwindEx
SetUnhandledExceptionFilter
InitializeSListHead
GetModuleHandleW
GetFinalPathNameByHandleW
SetFileCompletionNotificationModes
CreateIoCompletionPort
GetQueuedCompletionStatusEx
CancelIoEx
ReadFile
WriteFile
CreatePipe
GetSystemTimeAsFileTime
PostQueuedCompletionStatus
FlushFileBuffers
LoadLibraryA
GetProcessHeap
GetUserDefaultUILanguage
LCIDToLocaleName
DeleteCriticalSection
advapi32
GetAclInformation
SystemFunction036
GetSecurityDescriptorControl
RegSetValueExW
RegCloseKey
RegDeleteTreeW
RegQueryValueExW
SetSecurityDescriptorOwner
RegCreateKeyTransactedW
RegCreateKeyExW
RegOpenKeyTransactedW
RegOpenKeyExW
RegDeleteValueW
FreeSid
IsValidSid
SetSecurityDescriptorControl
GetSidSubAuthorityCount
GetSidLengthRequired
CopySid
InitializeAcl
GetAce
AddAce
GetSecurityDescriptorDacl
RegGetValueW
GetLengthSid
GetTokenInformation
OpenProcessToken
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetSecurityDescriptorSacl
EventRegister
EventSetInformation
EventWriteTransfer
EventUnregister
SetSecurityDescriptorSacl
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
SetSecurityDescriptorGroup
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressSingle
WakeByAddressAll
shell32
CommandLineToArgvW
ShellExecuteW
Shell_NotifyIconGetRect
DragFinish
ILCreateFromPathW
SHOpenFolderAndSelectItems
ILFree
ShellExecuteExW
Shell_NotifyIconW
SetCurrentProcessExplicitAppUserModelID
DragQueryFileW
SHAppBarMessage
SHGetKnownFolderPath
user32
SetFocus
GetWindow
ValidateRect
GetUpdateRect
SetParent
TrackPopupMenu
EnumWindows
GetLastInputInfo
SetWindowRgn
SendMessageA
CloseWindow
PostThreadMessageW
DispatchMessageW
GetMessageW
PeekMessageW
BeginPaint
TranslateMessage
SetTimer
KillTimer
RedrawWindow
GetParent
EndPaint
FindWindowExW
GetMenu
SetWindowLongW
GetSystemMenu
MsgWaitForMultipleObjectsEx
ClipCursor
GetClipCursor
PostMessageW
GetMenuItemInfoW
ShowCursor
ToUnicodeEx
GetKeyboardLayout
ScreenToClient
DrawTextW
ClientToScreen
MonitorFromWindow
GetWindowDC
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
RegisterWindowMessageA
SetPropW
MapVirtualKeyExW
OffsetRect
MapWindowPoints
MonitorFromRect
GetAsyncKeyState
SetMenuItemInfoW
GetMonitorInfoW
DrawIconEx
FillRect
ReleaseDC
GetTouchInputInfo
GetDC
CloseTouchInputHandle
RegisterClassExW
GetKeyState
EnumDisplayMonitors
MonitorFromPoint
InvalidateRect
UpdateWindow
InvalidateRgn
GetDoubleClickTime
RegisterTouchWindow
RegisterClassW
GetMenuBarInfo
DestroyIcon
GetWindowLongW
CreateIcon
DestroyMenu
EnableMenuItem
RemoveMenu
CreatePopupMenu
CreateMenu
GetClientRect
GetCursorPos
GetSystemMetrics
IsProcessDPIAware
GetKeyboardState
CheckMenuItem
PostQuitMessage
ReleaseCapture
SystemParametersInfoW
SystemParametersInfoA
CreateAcceleratorTableW
DestroyAcceleratorTable
AppendMenuW
InsertMenuW
VkKeyScanW
SetCapture
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
TrackMouseEvent
AllowSetForegroundWindow
GetWindowThreadProcessId
FindWindowW
TranslateAcceleratorW
ChangeWindowMessageFilterEx
DestroyWindow
GetRawInputData
DrawMenuBar
SetMenu
EnumChildWindows
DispatchMessageA
GetMessageA
AdjustWindowRect
GetWindowPlacement
SetWindowPlacement
DefWindowProcW
SetWindowLongPtrW
SetWindowDisplayAffinity
IsWindow
AdjustWindowRectEx
SetCursorPos
GetWindowRect
SendInput
MapVirtualKeyW
SetForegroundWindow
GetForegroundWindow
FlashWindowEx
GetActiveWindow
IsWindowEnabled
IsIconic
IsWindowVisible
EnableWindow
RegisterRawInputDevices
SendMessageW
ShowWindow
CreateWindowExW
ChangeDisplaySettingsExW
GetWindowLongPtrW
SetWindowPos
LoadCursorW
SetCursor
ntdll
NtCancelIoFileEx
NtDeviceIoControlFile
RtlGetVersion
NtQueryInformationProcess
NtWriteFile
NtReadFile
NtCreateFile
RtlNtStatusToDosError
NtCreateNamedPipeFile
NtOpenFile
comctl32
RemoveWindowSubclass
SetWindowSubclass
DefSubclassProc
TaskDialogIndirect
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
shlwapi
SHStrDupW
SHCreateMemStream
psapi
GetModuleFileNameExW
GetProcessMemoryInfo
pdh
PdhCloseQuery
PdhRemoveCounter
powrprof
CallNtPowerInformation
oleaut32
SetErrorInfo
GetErrorInfo
SysStringLen
SysFreeString
combase
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoIncrementMTAUsage
CoTaskMemAlloc
bcryptprimitives
ProcessPrng
ole32
CoInitialize
CoInitializeEx
CoUninitialize
OleInitialize
RevokeDragDrop
PropVariantClear
CoCreateInstance
RegisterDragDrop
dwmapi
DwmGetWindowAttribute
DwmEnableBlurBehindWindow
DwmSetWindowAttribute
gdi32
CreateSolidBrush
DeleteDC
GetDeviceCaps
SetBkMode
SetTextColor
DeleteObject
CreateDIBSection
BitBlt
CreateCompatibleDC
SetBkColor
CreatePen
MoveToEx
LineTo
TextOutW
CreateFontW
SelectObject
CreateRectRgn
CombineRgn
ws2_32
bind
ioctlsocket
closesocket
getpeername
WSAGetLastError
WSAIoctl
setsockopt
getsockname
accept
connect
getaddrinfo
getsockopt
listen
WSASend
shutdown
send
recv
WSAStartup
WSACleanup
freeaddrinfo
WSASocketW
secur32
AcceptSecurityContext
DeleteSecurityContext
DecryptMessage
ApplyControlToken
InitializeSecurityContextW
QueryContextAttributesW
FreeCredentialsHandle
EncryptMessage
AcquireCredentialsHandleA
FreeContextBuffer
crypt32
CertOpenStore
CertFreeCertificateContext
CertCloseStore
CertDuplicateCertificateContext
CertAddCertificateContextToStore
CertDuplicateStore
CertDuplicateCertificateChain
CertFreeCertificateChain
CertEnumCertificatesInStore
CertGetCertificateChain
CertVerifyCertificateChainPolicy
bcrypt
BCryptGenRandom
winmm
PlaySoundW
api-ms-win-crt-math-l1-1-0
roundf
pow
floor
__setusermatherr
round
trunc
api-ms-win-crt-string-l1-1-0
wcslen
strlen
wcscmp
strcpy_s
_wcsicmp
api-ms-win-crt-heap-l1-1-0
calloc
malloc
_set_new_mode
free
_callnewh
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstol
_ultow_s
api-ms-win-crt-runtime-l1-1-0
_initterm
_initterm_e
_cexit
_initialize_narrow_environment
_c_exit
__p___argv
_set_app_type
_get_initial_narrow_environment
exit
_register_thread_local_exe_atexit_callback
_seh_filter_exe
__p___argc
abort
_configure_narrow_argv
terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_exit
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
13.3MB
Virtual Size
13.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4.3MB
Virtual Size
4.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
606KB
Virtual Size
606KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
41KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=259, version=35721,
count=13, id=260, version=35721,
count=46, id=261, version=35721,
count=481, id=1, productName=Unmarked objects,
count=27, id=260, version=36256,
count=91, productName=Unmarked objects (old),
count=1, id=255, version=36256,
count=1, id=258, version=36256,
extension/background.js
- SHA256 1b4368ab5b4f68a873b0ebb032fc28969ae128745d3fca2c46450f223ad91e02
- MD5 1c14b14559385dc7734b3155c1d830d4
- SHA1 2d735c4c109760f11b0a7f9b9df127e1e57a9e67
- SHA512 3bfe6c869df37afc121b5968f9db0144f0e483b457f2e2ad2d3da6399dcca5fd87edecfcda10a69ba2d077d8ad76aeb5d6ece124bec171c7bc967073bf858d2b
- TLSH T19D1100AF1C92811911F14B65CB13CBCAEB342C3E6272A1AC355C8AAA17F02C5465DBCD
- MD5 SHA1 SHA512 TLSH
extension/dnr-rules.json
- SHA256 056079f5522a15e72a1651640f7db320f7adbfecdde0692356a2b637f5bf3957
- MD5 e35d273c4f6caa59d846acd305193b88
- SHA1 6a1d5379ae8353a9d21d1ccfe1d2e4f32b589efd
- SHA512 ef16938935070edc8e484bd495c701a7bafdcd16726b39daf1515602b701a9f33c86e211247f4738b1d97da03fc2edbf1a6fca1c9737d8fd0cb557ac4eba1961
- TLSH T1E3E01237C9596D3702F66338D0A55605E4B0430B6650451F3DBC405E5FB12655A45F4E
- MD5 SHA1 SHA512 TLSH
extension/manifest.json
- SHA256 24d30380215fedd44f1c287fe006f38522fc174c12fec7397e72f6c86cad316f
- MD5 487b689d22c19d74786eb517d1ca18aa
- SHA1 98f98b5870ffbba0c19dde5be91f9ef1fe16cf02
- SHA512 daab422151ebbf4ac07b4d146f15f96c5ebe32bcbe28b75710c6ec146857ee64d888289d6dd257b02ce9412c879e2304661cb09baf6dc0db470c8d04dad4d189
- TLSH T132F0F433C884193699B89B25EE350242F731074F51A41C5FB57E506D0F712B3816AF0D
- MD5 SHA1 SHA512 TLSH
icons/icon.ico
- SHA256 f6dd8fb2aa0ddecad3b5b744516d7b061d00642275f67c5c65fe3f26586ed638
- MD5 43369fadb94e0eeed6d431ae07620363
- SHA1 3252b318b68c00817ab375af21d2326ebf117937
- SHA512 1645336af77896cde83eb0583a143d17b6d3e562105cf52b3a4b1f8a49fb710b3901e6cf1fa896b4aa034637eeef8f046777e41794fd72af46a3e3836401625a
- SSDEEP 768:W+9TsFzusK2ZRHAtC6KMWHCUm+aH/FQhF2AUlI4K:WKQ5gtjEhctQX2AKU
- TLSH T12DF2F1C3A5886434EF27A2330B5009A8E17A47171BEB6DE7065BB84E1D917D8D93C8DE
- MD5 SHA1 SHA512 SSDEEP TLSH
injection/shelter.js
- SHA256 9f40d258d0702ffef1ed9988b75181a006e9997f1078895ee1fc76837d380d67
- MD5 91a3423ce5d0b5582c05ff465b37940b
- SHA1 b4d7c20c5e3e663a203c14ab22f9b0d4801367c6
- SHA512 29a71c53f4c0833d6801518120b3600ff26e6e4ebc324145a3088cc27faaa1ebd1c360d804fe05a668cafdbbb0b9f60434b79964a3a81d350ca082318b0a07a8
- SSDEEP 3072:5fCrrm6sYE38UpI9Z8gzCvtySKBz/+t6pMm5KEx7KSSqcnBXjrGV9bG8wn2UewMa:lMeyb+96YAwew8Li
- TLSH T1AB246B957360B2BEA79F42D5983D4185B33D64B7306E043CFBBC97A02A8194997E7F20
- MD5 SHA1 SHA512 SSDEEP TLSH
updater.exe
- IMPHASH 4756b915c0a901f19beb4e6d08a1be9d
- SHA256 117f8d821a9a0032601e6c301a58007fa7c5bb898d40a375939d5f52b2c1488a
- MD5 2ee387e5c96c32c149e356373c600c85
- SHA1 cc662ff233ba107839546675be17cc60860a871d
- SHA512 0eae109fb4934f310a7c31ecb23e8b5ca2c9c7a699535ac2d332b95b8688bc5530bd853729d97918fa8b6cdd32ee22f0c545f7285a0a391a34e38f4b65da8aa7
- SSDEEP 49152:o8P9mSlEj/uhCE7YDqX9QI/hbfgFhm3Xz78KqY5fIU6iGwzS:7ASmDuxPw+GwzS
- TLSH T14CA55A12BA5FD4ECD199C474934B4A726E2274CB0B26B9FF01D859393E6BAE01B3C705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1525664
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
updater.pdb
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
bcryptprimitives
ProcessPrng
bcrypt
BCryptGenRandom
advapi32
SystemFunction036
kernel32
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
SetWaitableTimer
CreateWaitableTimerExW
AddVectoredExceptionHandler
InitializeSListHead
Sleep
GetProcessHeap
HeapFree
HeapReAlloc
GetLastError
GetSystemTimePreciseAsFileTime
GetCurrentThreadId
SetLastError
GetCurrentDirectoryW
RtlCaptureContext
GetCurrentProcess
RtlLookupFunctionEntry
WaitForSingleObjectEx
LoadLibraryA
GetProcAddress
lstrlenW
GetCurrentProcessId
CreateMutexA
CloseHandle
ReleaseMutex
RtlVirtualUnwind
WideCharToMultiByte
GetStdHandle
GetConsoleMode
GetConsoleOutputCP
WaitForSingleObject
MultiByteToWideChar
WriteConsoleW
HeapAlloc
GetEnvironmentVariableW
ReadFileEx
SleepEx
WriteFileEx
QueryPerformanceFrequency
GetModuleHandleW
FormatMessageW
QueryPerformanceCounter
SetHandleInformation
GetCurrentThread
SetThreadStackGuarantee
GetModuleHandleA
GetFullPathNameW
CreateFileW
SetFileTime
SetFileInformationByHandle
FindFirstFileExW
FindClose
GetFileInformationByHandle
GetFileInformationByHandleEx
CreateDirectoryW
ExitProcess
GetExitCodeProcess
GetEnvironmentStringsW
FreeEnvironmentStringsW
CompareStringOrdinal
GetSystemDirectoryW
GetWindowsDirectoryW
CreateProcessW
GetFileAttributesW
GetModuleFileNameW
DuplicateHandle
CreateThread
GetTempPathW
GetCommandLineW
ntdll
NtOpenFile
RtlNtStatusToDosError
NtCreateNamedPipeFile
NtWriteFile
ws2_32
WSAStartup
WSACleanup
WSASocketW
closesocket
getsockopt
setsockopt
WSADuplicateSocketW
getsockname
send
freeaddrinfo
getaddrinfo
getpeername
WSARecv
recv
ioctlsocket
connect
select
bind
listen
accept
WSAGetLastError
WSASend
vcruntime140
memmove
memcpy
memcmp
__current_exception_context
__current_exception
__CxxFrameHandler3
__C_specific_handler
_CxxThrowException
memset
api-ms-win-crt-runtime-l1-1-0
_set_app_type
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_seh_filter_exe
_initterm_e
exit
_exit
__p___argc
__p___argv
_cexit
_c_exit
_crt_atexit
terminate
_initterm
_initialize_onexit_table
_register_onexit_function
_register_thread_local_exe_atexit_callback
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
640KB
Virtual Size
640KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35721,
count=4, id=259, version=35721,
count=10, id=260, version=35721,
count=24, id=261, version=35721,
count=11, id=257, version=33145,
count=140, id=1, productName=Unmarked objects,
count=12, id=260, version=36256,
count=19, productName=Unmarked objects (old),
count=1, id=258, version=36256,