29ca887e6cd4d21e7b8ffdc872de5208eb684492a512a667b01e48d73b7011db

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2026-Jun-27 17:33:21
Detected languages English - United States
Debug artifacts C:\Dev\-master\master\x64\Release\kdmapper_Release.pdb

Plugin Output

Info Matching compiler(s): MASM/TASM - sig1(h)
Suspicious Strings found in the binary may indicate undesirable behavior: May have dropper capabilities:
  • %temp%
  • CurrentControlSet\Services
 Contains another PE executable:
  • This program cannot be run in DOS mode.
 Miscellaneous malware strings:
  • exploit
 Contains domain names:
  • 2010-aia.verisign.com
  • 2010-crl.verisign.com
  • aia.verisign.com
  • aia.ws.symantec.com
  • crl.microsoft.com
  • crl.thawte.com
  • crl.verisign.com
  • crl.ws.symantec.com
  • csc3-2010-aia.verisign.com
  • csc3-2010-crl.verisign.com
  • http://crl.microsoft.com
  • http://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0
  • http://crl.thawte.com
  • http://crl.thawte.com/ThawteTimestampingCA.crl0
  • http://crl.verisign.com
  • http://crl.verisign.com/pca3-g5.crl04
  • http://csc3-2010-aia.verisign.com
  • http://csc3-2010-aia.verisign.com/CSC3-2010.cer0
  • http://csc3-2010-crl.verisign.com
  • http://csc3-2010-crl.verisign.com/CSC3-2010.crl0D
  • http://logo.verisign.com
  • http://logo.verisign.com/vslogo.gif04
  • http://ocsp.thawte.com0
  • http://ocsp.verisign.com0
  • http://ts-aia.ws.symantec.com
  • http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
  • http://ts-crl.ws.symantec.com
  • http://ts-crl.ws.symantec.com/tss-ca-g2.crl0
  • http://ts-ocsp.ws.symantec.com07
  • https://www.verisign.com
  • https://www.verisign.com/cps0
  • https://www.verisign.com/rpa
  • https://www.verisign.com/rpa0
  • logo.verisign.com
  • microsoft.com
  • symantec.com
  • thawte.com
  • ts-aia.ws.symantec.com
  • ts-crl.ws.symantec.com
  • verisign.com
  • ws.symantec.com
  • www.verisign.com
Info Cryptographic algorithms detected in the binary: Uses constants related to SHA1
Suspicious The PE contains functions most legitimate programs don't use. Functions which can be used for anti-debugging purposes:
  • CreateToolhelp32Snapshot
  • NtQuerySystemInformation
 Can access the registry:
  • RegCloseKey
  • RegCreateKeyW
  • RegOpenKeyW
  • RegSetKeyValueW
 Uses Windows's Native API:
  • NtLoadDriver
  • NtUnloadDriver
  • NtQuerySystemInformation
 Can create temporary files:
  • GetTempPathW
  • CreateFileW
 Manipulates other processes:
  • Process32NextW
  • Process32FirstW
Malicious VirusTotal score: 40/70 (Scanned on 2026-07-17 03:53:48) ALYac: Gen:Variant.Application.Zusy.313981
APEX: Malicious
AhnLab-V3: Trojan/Win.Generic.R713405
Antiy-AVL: HackTool/Win32.DriverLoader
Arcabit: Trojan.Application.Zusy.D4CA7D
Avira: TR/W64.MalwareX
BitDefender: Gen:Variant.Application.Zusy.313981
Bkav: W32.Malware.A0948B25
CTX: exe.unknown.zusy
ClamAV: Win.Tool.Zusy-10033075-0
CrowdStrike: win/grayware_confidence_100% (D)
Cynet: Malicious (score: 99)
DrWeb: Tool.VulnDriver.22
ESET-NOD32: Win64/HackTool.GameHack.Q trojan
Elastic: malicious (high confidence)
Emsisoft: Gen:Variant.Application.Zusy.313981 (B)
F-Secure: Trojan.TR/W64.MalwareX
Fortinet: W64/GameHack.Q!tr
GData: Gen:Variant.Application.Zusy.313981
Google: Detected
K7AntiVirus: Hacktool ( 005c5c791 )
K7GW: Hacktool ( 005ce6bf1 )
Kaspersky: HEUR:HackTool.Win32.DriverLoader.gen
Malwarebytes: Malware.AI.3823127304
MaxSecure: Trojan.Malware.121218.susgen
McAfeeD: ti!29CA887E6CD4
MicroWorld-eScan: Gen:Variant.Application.Zusy.313981
Microsoft: Trojan:Win64/DriverLoader.RDB!MTB
Panda: Trj/GdSda.A
Rising: Trojan.DriverLoader!8.18C1C (TFE:5:1JfkGo7NYMU)
Sangfor: Suspicious.Win32.Save.a
SentinelOne: Static AI - Suspicious PE
Sophos: ATK/Kdmapper-A
Symantec: ML.Attribute.HighConfidence
Tencent: Malware.Win32.Gencirc.14abff50
VIPRE: Gen:Variant.Application.Zusy.313981
Varist: W64/Dacic.F.gen!Eldorado
Zillya: Tool.GameHack.Win64.11268
ZoneAlarm: ATK/Kdmapper-A
huorong: HackTool/DriverLoader.a

Hashes

MD5 500bf8ffdcff52b9d6e03dc0ba7ed6fd
SHA1 391a3f43f6aa838196c58f577171a3ca31f31cc3
SHA256 29ca887e6cd4d21e7b8ffdc872de5208eb684492a512a667b01e48d73b7011db
SHA3 914f5359f73752d978ee939d0f5c8a102f73c19bfc88fb48dff72a9795072d8f
SSDeep 3072:BQeuLZ8OB7/UE7sMDcFS0DzZckwBmJTQSaMm5/6Y/XH5Xz:BgNpBDUE7ncFSQFlJWlj/Vz
Imports Hash fe1529edef766e6c0d25b8ae1722ece5

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0xf8

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2026-Jun-27 17:33:21
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x10200
SizeOfInitializedData 0x15c00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000000000000FD8C (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x2a000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 da561e572940839d8d91605cc0cc75b2
SHA1 f384e4ed2eecc664340a6ad90e0bc70319feb5d3
SHA256 884347b8443e2fc4218789a61bc1fc86d0e4b6c4b745a1fa1598cbca639e4ace
SHA3 f431fee477d944e6a89aa17df2175529cc51d93484ab7744ed6e9003663ffa2d
VirtualSize 0x1004f
VirtualAddress 0x1000
SizeOfRawData 0x10200
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.23964

.rdata

MD5 fd0427110927085bd3d6d786f2fcd552
SHA1 c81bf3877fa68fc05a36cf595fab4ad414e7c729
SHA256 9dfbbb812f159a5e9e98dc1013cc54076131bc45cc3309e705462a1f0ecc409b
SHA3 6d565661dc74773c37a788b5d246be2e0d6ddae2299b0a01dd6bbe64070e91ae
VirtualSize 0x13ad2
VirtualAddress 0x12000
SizeOfRawData 0x13c00
PointerToRawData 0x10600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.8365

.data

MD5 04baa640d22ba5d2ae3f005c1f038b00
SHA1 a218ef6b983807c4254d29663ce896d0ee141438
SHA256 41125ed1b136df01e658ae77313bfb1840afde39ed4b6266e99c295342779827
SHA3 59f37a66ee0c8d3f8a9d1b9ebdfef30fe2c9d93b64d1d8acb2041a006ca7702b
VirtualSize 0xcb8
VirtualAddress 0x26000
SizeOfRawData 0x600
PointerToRawData 0x24200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.53792

.pdata

MD5 d991b1a4e394386df27d4f423040b6d0
SHA1 4a998605357a59329581d676e6e06fa90e07a77b
SHA256 8d287a16ac3ff376d5f594468bc4e5fe46df1aca2734ca90171371630d193d04
SHA3 4b8e3ddd0600c167e43c6dc31e22f6ad97c2c3354a783ebd194e2a7c8a874dd0
VirtualSize 0xd50
VirtualAddress 0x27000
SizeOfRawData 0xe00
PointerToRawData 0x24800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.87057

.rsrc

MD5 81aa168c1f8bb6151bd8e101b2bf9c64
SHA1 7ef6f5ffd42fef46d24c4e8efdedb4710bceaec3
SHA256 567b62339ecec3449984b5b020a86d3b8c7cc920d29cf570a867ec644710a5fc
SHA3 5ad6d4f9401aa9e887419b5e4244e6445b7b93eed40a3ad060d9e8c6eafb21a2
VirtualSize 0x1e8
VirtualAddress 0x28000
SizeOfRawData 0x200
PointerToRawData 0x25600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.76666

.reloc

MD5 f04be954f3a6292881ee44f579f7ec4d
SHA1 d9218c099979b3c5efe3fb0223562f06f5f5a982
SHA256 de56e52f25897234d908e23ff32e54bc34eb3750a1ff9b3566e11fe27113cb2d
SHA3 abaea21d0caed405d9b75898640a7014895cbec6406794dcf8cddf7dc7172b87
VirtualSize 0x10c
VirtualAddress 0x29000
SizeOfRawData 0x200
PointerToRawData 0x25800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 3.22984

Imports

KERNEL32.dll CloseHandle
GetProcAddress
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
GetModuleHandleA
GetTempPathW
FormatMessageA
GetLocaleInfoEx
GetCurrentThreadId
CreateFileW
VirtualAlloc
DeviceIoControl
SetUnhandledExceptionFilter
VirtualFree
FindClose
FindFirstFileW
GetFileAttributesExW
AreFileApisANSI
GetLastError
GetModuleHandleW
GetFileInformationByHandleEx
WideCharToMultiByte
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
LocalFree
USER32.dll GetShellWindow
GetWindowThreadProcessId
ADVAPI32.dll RegCloseKey
RegDeleteTreeW
RegCreateKeyW
RegOpenKeyW
RegSetKeyValueW
MSVCP140.dll ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?good@ios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Xbad_alloc@std@@YAXXZ
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?id@?$ctype@_W@std@@2V0locale@2@A
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Xlength_error@std@@YAXPEBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
ntdll.dll NtLoadDriver
NtUnloadDriver
NtQuerySystemInformation
RtlAdjustPrivilege
RtlInitUnicodeString
VCRUNTIME140_1.dll __CxxFrameHandler4
VCRUNTIME140.dll memcpy
memcmp
_CxxThrowException
__std_terminate
wcsstr
__std_exception_copy
__std_exception_destroy
memset
__current_exception_context
__current_exception
__C_specific_handler
memmove
api-ms-win-crt-stdio-l1-1-0.dll _fseeki64
fread
fsetpos
ungetc
_get_stream_buffer_pointers
fputc
setvbuf
fgetpos
fwrite
_set_fmode
__p__commode
fgetc
fflush
fclose
api-ms-win-crt-utility-l1-1-0.dll srand
rand
api-ms-win-crt-runtime-l1-1-0.dll _initialize_wide_environment
_invoke_watson
__p___wargv
_get_initial_wide_environment
_initterm
_configure_wide_argv
terminate
_c_exit
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
__p___argc
abort
_register_thread_local_exe_atexit_callback
_initterm_e
_exit
exit
_set_app_type
api-ms-win-crt-filesystem-l1-1-0.dll _wremove
_unlock_file
_lock_file
api-ms-win-crt-string-l1-1-0.dll _stricmp
_wcsicmp
api-ms-win-crt-time-l1-1-0.dll _time64
api-ms-win-crt-heap-l1-1-0.dll malloc
_callnewh
free
_set_new_mode
api-ms-win-crt-locale-l1-1-0.dll _configthreadlocale
___lc_codepage_func
api-ms-win-crt-math-l1-1-0.dll __setusermatherr

Delayed Imports

1

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x188
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.89623
MD5 b8e76ddb52d0eb41e972599ff3ca431b
SHA1 fc12d7ad112ddabfcd8f82f290d84e637a4d62f8
SHA256 165c5c883fd4fd36758bcba6baf2faffb77d2f4872ffd5ee918a16f91de5a8a8
SHA3 37f83338b28cb102b1b14f27280ba1aa3fffb17f7bf165cb7b675b7e8eb7cddd

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Jun-27 17:33:21
Version 0.0
SizeofData 79
AddressOfRawData 0x21a9c
PointerToRawData 0x2009c
Referenced File C:\Dev\-master\master\x64\Release\kdmapper_Release.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Jun-27 17:33:21
Version 0.0
SizeofData 20
AddressOfRawData 0x21aec
PointerToRawData 0x200ec

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Jun-27 17:33:21
Version 0.0
SizeofData 912
AddressOfRawData 0x21b00
PointerToRawData 0x20100

IMAGE_DEBUG_TYPE_ILTCG

Characteristics 0
TimeDateStamp 2026-Jun-27 17:33:21
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

StartAddressOfRawData 0x140021eb0
EndAddressOfRawData 0x140021eb8
AddressOfIndex 0x140026b38
AddressOfCallbacks 0x140012698
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_4BYTES
Callbacks (EMPTY)

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140026040

RICH Header

XOR Key 0x672c7dc0
Unmarked objects 0
Imports (VS2008 SP1 build 30729) 18
ASM objects (35207) 4
C objects (35207) 10
C++ objects (35207) 35
Imports (35207) 6
Imports (33145) 9
Total imports 235
C++ objects (LTCG) (35225) 7
Resource objects (35225) 1
Linker (35225) 1

Errors

Leave a comment

No comments yet.