b9166b3c6507a64378629281409f5c866343ba2e5ba4a964744fd90382881a44

Sharing

Copy URL Twitter E-mail

General

Target
b9166b3c6507a64378629281409f5c866343ba2e5ba4a964744fd90382881a44
Size 15.5MB
Sample261014-mk8xtatsdt
SHA256 b9166b3c6507a64378629281409f5c866343ba2e5ba4a964744fd90382881a44
MD5 5569dbdd860541c2275804f841c466c2
SHA1 fda04fcf49f2e4fbddf2c97b273339fdcb28cdb6
SHA512 531899451f31aca98139d762cbf24ded7e953394c44eb069f6a98e6f5bf0944362013782c03e1d81123599b8cac4bee67bc19f2f8832a5acb6a8366e635c64d7
SSDEEP 393216:Fdx7q2umFM9FJ/FR66GU4ZT8X2zNpXSyIKe/O6bL7:1q2MFJ/v6btdXkKO
TLSH
T1A1F633F8C6D2C4D4944DD388ABBA359FE6C123152953BBE80B9223E5ACF4944C8CF54E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

b9166b3c6507a64378629281409f5c866343ba2e5ba4a964744fd90382881a44

.zip 15.5MB
core/m2hm04.dll

.exe 15.6MB

b9166b3c6507a64378629281409f5c866343ba2e5ba4a964744fd90382881a44

SHA256 b9166b3c6507a64378629281409f5c866343ba2e5ba4a964744fd90382881a44
MD5 5569dbdd860541c2275804f841c466c2
SHA1 fda04fcf49f2e4fbddf2c97b273339fdcb28cdb6
SHA512 531899451f31aca98139d762cbf24ded7e953394c44eb069f6a98e6f5bf0944362013782c03e1d81123599b8cac4bee67bc19f2f8832a5acb6a8366e635c64d7
SSDEEP 393216:Fdx7q2umFM9FJ/FR66GU4ZT8X2zNpXSyIKe/O6bL7:1q2MFJ/v6btdXkKO
TLSH
T1A1F633F8C6D2C4D4944DD388ABBA359FE6C123152953BBE80B9223E5ACF4944C8CF54E
MD5 SHA1 SHA512 SSDEEP TLSH

core/m2hm04.dll

IMPHASH 97e8034a9baee1956883079d895f24e2
SHA256 d707c1bf9ced85b8e710c44943ded235fc84b6311651836a259ab9cead1b2166
MD5 2918f27e6f4d63d740b884fc1ad84e7d
SHA1 60a7ba2f1c2c22d60687e7e11b25bdeaa74a12ef
SHA512 f6422e4d97ccfd1caecb409dac72adad60a8bedf9a101a4b15f5130c34f395ea4a404a66607ff5ac44e3459a5d0cd2c172ba88b5179b8d36387cd9574c7f9960
SSDEEP 393216:MkWqwehqNpbhBPcQEJfV39bz3cMjiQaLGcdMK:MPqEpbhBcvJ939X3UQc
TLSH
T156F6339DAAE780E5DCC901F8DB2BA5EB72F216861D934C7447C260887CF1BB2D05F586
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

e0:1b:83:ca:88:a6:a1:b4:e2:31:d8:ce:7c:dd:c7:58:07:36:ac:e7:c0:69:e7:02:41:c2:49:f3:62:06:97:a0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Guangdong Li Wei Network Technology Co.ltd.,O=Guangdong Li Wei Network Technology Co.ltd.,L=Guangzhou,ST=Guangdong Province,C=CN

Chains

Oct 14, 2026

CN=Guangdong Li Wei Network Technology Co.ltd.,O=Guangdong Li Wei Network Technology Co.ltd.,L=Guangzhou,ST=Guangdong Province,C=CN

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Guangdong Li Wei Network Technology Co.ltd.,O=Guangdong Li Wei Network Technology Co.ltd.,L=Guangzhou,ST=Guangdong Province,C=CN

Serial Number

0f:fa:21:11:1f:dc:64:83:52:e6:a9:ff:2d:3b:40:12

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 11, 2025 - Nov 10, 2026

Subject

CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE

Serial Number

84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4

Issuer

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 15, 2025 - Jan 10, 2037

Subject

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Serial Number

83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f

Issuer

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 16, 2025 - Jul 16, 2041

Subject

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:4a:aa:81:73:66:9c:90:09:54:e4:21:c9:47:eb:c0

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 9, 2020 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

45072909

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\newyunxiao\hm04_client\m2hm04_win_cmake2_release\workspace\svn_dir\build-cmake-win32\MinSizeRel\ClientLoader.pdb

openal32

alcCloseDevice alGetEnumValue alcMakeContextCurrent alcOpenDevice alcDestroyContext alGenSources alBufferData alDeleteBuffers alGenBuffers alGetError alSourcePause alSourceStop alSourcePlay alGetSourcei alSourcei alSourcef alDeleteSources alcCreateContext

glint

ord101 ord100 ord102 ord7 ord23 ord9 ord24 ord12 ord8 ord1 ord34 ord3 ord25 ord5 ord32 ord4 ord22 ord14

glimpl

ord33 ord31 ord40 ord44 ord52 ord53 ord64 ord131 ord208 ord303 ord305 ord314 ord36 ord50 ord10 ord12 ord20 ord210 ord269 ord13 ord14 ord15 ord16 ord17 ord19 ord28 ord42 ord47 ord48 ord49 ord89 ord92 ord93 ord97 ord100 ord102 ord104 ord142 ord196 ord203 ord279 ord319 ord321 ord6 ord22 ord23 ord25 ord51 ord95 ord111 ord180 ord194 ord204 ord206 ord320 ord101 ord103 ord105 ord115 ord276 ord277 ord70 ord188 ord190 ord191 ord193 ord8 ord83 ord39 ord43 ord61 ord46 ord187 ord192 ord255 ord315 ord317 ord62 ord72 ord54 ord91 ord106 ord109 ord41 ord141 ord37 ord29 ord209 ord2 ord3 ord21 ord26 ord27 ord34 ord55 ord56 ord58 ord65 ord66 ord68 ord69 ord71 ord77 ord90 ord99 ord112 ord113 ord114 ord116 ord117 ord118 ord119 ord120 ord121 ord122 ord123 ord124 ord125 ord126 ord127 ord128 ord129 ord130 ord1 ord4 ord5 ord7 ord32 ord30

gpdl_x32

ZmdlApi_GetVersion ZmdlApi_ShareFile ZmdlApi_CancelCheckHash ZmdlApi_SetExtInfo ZmdlApi_SetNetState ZmdlApi_StartDownload ZmdlApi_NotifyTaskResult ZmdlApi_CancelDownload ZmdlApi_UnInit ZmdlApi_StartCheckHash ZmdlApi_Init

libcurl

curl_easy_strerror curl_easy_init curl_easy_setopt curl_slist_free_all curl_easy_cleanup curl_easy_getinfo curl_global_init curl_easy_pause curl_easy_perform curl_formfree curl_slist_append curl_formadd

libcrypto-1_1

EVP_MD_CTX_new RSA_free RSA_private_decrypt RSA_public_decrypt RSA_private_encrypt RSA_public_encrypt RSA_size BIO_new_mem_buf BIO_ctrl BIO_free ERR_error_string_n ERR_get_error EVP_aes_256_ctr EVP_aes_192_gcm EVP_aes_192_ctr EVP_aes_128_gcm EVP_DigestUpdate EVP_aes_256_gcm EVP_CIPHER_CTX_ctrl EVP_CIPHER_CTX_free EVP_CIPHER_CTX_new EVP_DecryptFinal_ex EVP_DecryptUpdate EVP_DecryptInit_ex EVP_EncryptFinal_ex EVP_EncryptUpdate EVP_EncryptInit_ex EVP_CIPHER_block_size SHA256_Init EVP_DigestSignInit EVP_DigestSignFinal EVP_DigestVerifyInit SHA256_Update EVP_sha1 EVP_aes_128_cbc EVP_CipherFinal EVP_CipherUpdate EVP_CipherInit EVP_MD_CTX_free SHA256_Final EVP_sha256 EVP_sha384 EVP_sha512 EVP_PKEY_set1_RSA EVP_PKEY_new EVP_PKEY_free PEM_read_bio_RSAPrivateKey PEM_read_bio_RSAPublicKey PEM_read_bio_RSA_PUBKEY EVP_aes_128_ctr PKCS5_PBKDF2_HMAC_SHA1 EVP_DigestVerifyFinal EVP_sha224

ws2_32

getservbyname getservbyport gethostbyname gethostbyaddr socket shutdown setsockopt sendto recvfrom ntohs ntohl listen inet_ntoa inet_addr htons htonl getsockopt getsockname getpeername connect bind WSAGetLastError WSAAddressToStringW WSAAddressToStringA gethostname WSACleanup send select recv getprotobyname WSASetLastError WSAEnumProtocolsW getaddrinfo freeaddrinfo getnameinfo WSAPoll inet_pton WSAIoctl WSAStartup inet_ntop ioctlsocket closesocket accept __WSAFDIsSet

opengl32

wglMakeCurrent

winmm

waveInGetNumDevs timeEndPeriod timeGetDevCaps waveInClose timeBeginPeriod waveInOpen waveOutGetNumDevs mciSendCommandW waveInPrepareHeader waveInUnprepareHeader waveInAddBuffer waveInStart timeGetTime waveInStop

hid

HidP_GetCaps HidP_GetButtonCaps HidP_GetValueCaps HidP_GetUsages HidP_GetUsageValue HidD_GetProductString

setupapi

SetupDiGetDevicePropertyW SetupDiGetDeviceRegistryPropertyW SetupDiGetClassDevsW SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList

kernel32

CreateProcessA OpenProcess GetModuleFileNameA CreateToolhelp32Snapshot Process32FirstW Process32NextW GetCommandLineA GetTickCount ReleaseMutex CreateMutexA GetCurrentThreadId GetVersionExW MapViewOfFile UnmapViewOfFile FreeLibrary GetModuleHandleA GetProcAddress LoadLibraryW LocalFree lstrcpynA CreateFileMappingA OutputDebugStringW MultiByteToWideChar VerSetConditionMask GetCurrentDirectoryW CreateFileW QueryPerformanceCounter QueryPerformanceFrequency DeviceIoControl GetProcessTimes GetCurrentProcessId CreateThread GetCurrentThread OpenThread SleepConditionVariableSRW SuspendThread ResumeThread GetSystemTimes GlobalMemoryStatusEx GetSystemInfo GetLocalTime GetVersionExA GetNativeSystemInfo ReadProcessMemory GetModuleHandleW GlobalUnlock GlobalLock GetProcessIoCounters lstrcpyW GetComputerNameW VerifyVersionInfoW GetSystemPowerStatus GetLocaleInfoW GetUserDefaultLCID GetUserDefaultLocaleName Thread32First Thread32Next FindClose RaiseException Sleep GetUserDefaultUILanguage RtlCaptureContext IsDebuggerPresent SetUnhandledExceptionFilter AddVectoredExceptionHandler RemoveVectoredExceptionHandler CreateEventW OpenEventW CreateProcessW OutputDebugStringA FindFirstFileA FindNextFileA GetFileTime LocalFileTimeToFileTime SetFileTime DosDateTimeToFileTime InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection GetModuleFileNameW LocalAlloc FileTimeToSystemTime SetPriorityClass LoadLibraryExW GetEnvironmentVariableA GetEnvironmentVariableW SetEnvironmentVariableA SetEnvironmentVariableW SetCurrentDirectoryA SetCurrentDirectoryW GetCurrentDirectoryA CreateDirectoryA CreateDirectoryW CreateFileA GetExitCodeThread DeleteFileW FindFirstFileW FindFirstFileExA FindFirstFileExW FindNextFileW GetDiskFreeSpaceExA GetDiskFreeSpaceExW GetFileAttributesA WaitForSingleObject GetFileAttributesExA GetFileAttributesExW GetFullPathNameW GetFullPathNameA RemoveDirectoryA RemoveDirectoryW SetFileAttributesA SetFileAttributesW CreateMutexW CreateEventA CreateFileMappingW OpenFileMappingW LoadLibraryExA LoadLibraryA OpenFileMappingA GlobalAddAtomA MoveFileA MoveFileW SetConsoleTitleA SetConsoleTitleW ExitProcess GlobalAlloc GlobalFree VirtualAlloc VirtualFree FreeResource LoadResource LockResource SizeofResource FindResourceW GetStartupInfoW GetModuleHandleExW SetLastError GetThreadContext WriteFile DuplicateHandle SetNamedPipeHandleState TransactNamedPipe WaitNamedPipeW SetEvent ResetEvent WaitForMultipleObjects ReleaseSemaphore CreateSemaphoreW TerminateThread GetProcessId GetDriveTypeA GetLogicalDrives GetLogicalDriveStringsW DecodePointer InitializeCriticalSectionEx GetLogicalDriveStringsA K32GetProcessMemoryInfo GetFileSize SetEndOfFile SetFilePointer MapViewOfFileEx TlsAlloc TlsGetValue TlsSetValue TlsFree IsBadStringPtrA IsBadStringPtrW FormatMessageW GetLargePageMinimum GetFileSizeEx ReadFile CreateSemaphoreA FormatMessageA GetConsoleCP GetConsoleOutputCP GetFileInformationByHandle SetConsoleCtrlHandler GetLocaleInfoEx HeapFree GetProcessHeap IsDBCSLeadByte GetModuleHandleExA SetErrorMode GetFileType CreatePipe GetExitCodeProcess GetSystemTime GetVersion SystemTimeToFileTime GenerateConsoleCtrlEvent GetACP GetLocaleInfoA FlushViewOfFile ExpandEnvironmentStringsW GetStdHandle HeapReAlloc HeapSize SetThreadAffinityMask GetStringTypeW InitializeConditionVariable TryAcquireSRWLockExclusive CreateThreadpoolWork SubmitThreadpoolWork WaitForThreadpoolWorkCallbacks CloseThreadpoolWork GetSystemTimeAsFileTime SleepConditionVariableCS CloseHandle WideCharToMultiByte VirtualQueryEx GetCurrentProcess WaitForSingleObjectEx TryEnterCriticalSection AcquireSRWLockExclusive ReleaseSRWLockExclusive InitializeSRWLock TerminateProcess EncodePointer LCMapStringEx CompareStringEx GetCPInfo InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter IsProcessorFeaturePresent InitializeSListHead RtlUnwind InterlockedPushEntrySList ExitThread FreeLibraryAndExitThread GetTimeZoneInformation GetDriveTypeW PeekNamedPipe SystemTimeToTzSpecificLocalTime GetTempPathW WriteConsoleW SetFilePointerEx VirtualProtect VirtualQuery SetStdHandle FlushFileBuffers LockFileEx UnlockFileEx HeapCompact TzSpecificLocalTimeToSystemTime WakeConditionVariable GetFileAttributesW DeleteFileA WakeAllConditionVariable GetConsoleMode ReadConsoleW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW SetThreadPriority IsValidLocale EnumSystemLocalesW IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetConsoleMode GetNumberOfConsoleInputEvents ReadConsoleInputW PeekConsoleInputA GetCommandLineW GetLastError HeapAlloc

user32

GetPriorityClipboardFormat IsWindowVisible SetCapture ReleaseCapture InvalidateRect CreateIconFromResource SystemParametersInfoW IsClipboardFormatAvailable CharPrevA IsWindowEnabled GetKeyboardState GetFocus TrackMouseEvent TranslateMessage DispatchMessageW PeekMessageW EmptyClipboard EnumClipboardFormats SetClipboardData GetKeyboardLayout UnregisterHotKey RegisterHotKey LoadIconW LoadIconA MessageBoxW GetMessageTime MessageBoxA GetWindowTextW GetWindowTextA SetWindowTextA RegisterClipboardFormatW SetDlgItemTextW SetDlgItemTextA CharUpperBuffA OffsetRect GetDesktopWindow GetRawInputDeviceInfoW GetRawInputData LoadImageW DestroyCursor LoadCursorW GetWindow GetWindowLongW PtInRect WindowFromPoint ClientToScreen GetCursorPos SetCursor DestroyIcon GetWindowRect GetClientRect SetWindowTextW ReleaseDC GetDC SetActiveWindow MapVirtualKeyW GetAsyncKeyState GetKeyState GetActiveWindow SetFocus IsZoomed SetWindowPos ShowWindow CreateWindowExW UnregisterDeviceNotification UnhookWindowsHookEx UnregisterClassW EnumDisplayDevicesW RegisterClassW RegisterClassExW MoveWindow SetWindowsHookExW EnumWindows FindWindowExW FindWindowW GetForegroundWindow GetClipboardData CloseClipboard OpenClipboard BringWindowToTop SetForegroundWindow wsprintfW SendMessageW GetWindowThreadProcessId SetWindowLongA GetWindowLongA EndPaint BeginPaint DestroyWindow IsWindow CreateWindowExA RegisterClassExA UnregisterClassA DefWindowProcW PostMessageW SetPropW GetPropW EnumDisplaySettingsExW EnumDisplaySettingsW ChangeDisplaySettingsExW RegisterDeviceNotificationW GetRawInputDeviceList PostMessageA KillTimer SetTimer PostQuitMessage GetSystemMetrics SetWindowLongW ClipCursor RemovePropW ScreenToClient EnableWindow SetCursorPos CallWindowProcW FlashWindow GetParent SetParent GetAncestor AdjustWindowRectEx GetMessageW DrawTextW

gdi32

RemoveFontResourceExW AddFontMemResourceEx RemoveFontMemResourceEx SelectObject SetBkMode SetTextColor GetObjectW SetDIBitsToDevice CreateFontW SetDeviceGammaRamp CreateDCW DescribePixelFormat GetObjectA CreateDIBSection SelectPalette RealizePalette CreateDCA CreateCompatibleBitmap BitBlt GetTextMetricsW CreateSolidBrush SetBkColor SwapBuffers SetPixelFormat ChoosePixelFormat AddFontResourceExW GetStockObject GetDIBits DeleteObject DeleteDC CreateFontIndirectW CreateCompatibleDC CreateBitmap GetDeviceCaps GetGlyphOutlineW

shell32

DragAcceptFiles DragQueryPoint ShellExecuteA ExtractIconW DragQueryFileW SHChangeNotify DragQueryFileA DragFinish ShellExecuteW SHGetPathFromIDListW SHGetFolderPathW SHBrowseForFolderW Shell_NotifyIconA Shell_NotifyIconW

ole32

CoCreateInstance CoSetProxyBlanket CoInitializeSecurity CoUninitialize CoInitialize PropVariantClear CoTaskMemFree ProgIDFromCLSID

oleaut32

SysAllocStringLen VariantInit SysAllocStringByteLen SysStringLen VariantClear GetErrorInfo SysFreeString SysAllocString

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

RegQueryValueExW RegConnectRegistryA CryptReleaseContext RegQueryValueExA RegQueryInfoKeyA SetSecurityDescriptorDacl InitializeSecurityDescriptor FreeSid AllocateAndInitializeSid GetUserNameW RegOpenKeyExW RegSetValueExW RegCreateKeyExW RegQueryInfoKeyW RegOpenKeyExA CryptGenRandom CryptAcquireContextW RegSetValueExA RegSetValueA RegSaveKeyA RegQueryValueA RegLoadKeyA RegFlushKey RegDeleteValueA RegDeleteKeyA RegCreateKeyExA RegCreateKeyA RegEnumValueA RegEnumKeyExA ConvertStringSecurityDescriptorToSecurityDescriptorW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW RegCloseKey

iphlpapi

GetBestInterface GetAdaptersInfo GetAdaptersAddresses

psapi

GetProcessMemoryInfo

wininet

InternetGetConnectedState

imm32

ImmAssociateContext ImmGetCandidateListW ImmSetCompositionFontW ImmGetCompositionWindow ImmSetCompositionWindow ImmGetContext ImmReleaseContext

wtsapi32

WTSUnRegisterSessionNotification WTSRegisterSessionNotification

dbghelp

MiniDumpWriteDump

crypt32

CryptUnprotectData CryptProtectData

version

GetFileVersionInfoW GetFileVersionInfoA GetFileVersionInfoSizeW GetFileVersionInfoSizeA VerQueryValueA VerQueryValueW

msacm32

acmStreamUnprepareHeader acmStreamPrepareHeader acmStreamConvert acmStreamSize acmStreamOpen acmFormatSuggest

powrprof

PowerReadDCValue PowerSetActiveScheme PowerWriteDCValueIndex PowerGetActiveScheme PowerEnumerate PowerWriteACValueIndex PowerReadACValue

imshareutil

ord19 ord18 ord17 ord16 ord15 ord14 ord13 ord12 ord11 ord10 ord9 ord8 ord7 ord6 ord24 ord5 ord4 ord20 ord2 ord50 ord1 ord40 ord41 ord42 ord43 ord44 ord45 ord46 ord47 ord21 ord25 ord26 ord27 ord28 ord29 ord30 ord31 ord22 ord3 ord23 ord32 ord33 ord34 ord35 ord36 ord37 ord38 ord49 ord39

Name

.text

Size

Virtual Size

19.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

4.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

13.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.=8*

Size

Virtual Size

4.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.SJd

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.DVP

Size

15.4MB

Virtual Size

15.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

145KB

Virtual Size

144KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=65, id=259, version=27412,

count=257, id=261, version=27412,

count=24, id=253, version=28518,

count=21, id=260, version=30034,

count=29, id=259, version=30034,

count=118, id=261, version=30034,

count=1, id=263, version=27412,

count=54, id=260, version=27412,

count=5, id=262, version=27412,

count=46, id=257, version=27412,

count=13, id=261, version=27031,

count=2, id=221, productName=VS2013 UPD4 build 31101, version=31101,

count=2, id=221, productName=VS2013 UPD5 build 40629, version=40629,

count=8, id=257, version=30143,

count=2, id=203, productName=VS2012 UPD4 build 61030, version=61030,

count=24, id=206, version=61219,

count=23, id=261, productName=VS2019 v16.11.1 build 30133, version=30133,

count=43, id=170, productName=VS2010 SP1 build 40219, version=40219,

count=92, id=260, productName=VS2019 v16.11.1 build 30133, version=30133,

count=3, id=257, productName=VS2015 UPD3.1 build 24215, version=24215,

count=963, id=1, productName=Unmarked objects,

count=363, id=260, version=30143,

count=1271, id=261, version=30143,

count=1, id=256, version=30143,

count=1, id=255, version=30143,

count=1, id=151,

count=1, id=258, version=30143,