57a38896366ab26e8fc8c1a918327a7ddd1706827fcfdb2bc302ab1537754d26

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
Compilation Date 2026-Nov-02 22:53:10
Detected languages English - United States
Debug artifacts C:\Users\x\Desktop\Fortnite Internal\fortnite injector\fortnite injector\fortnite injector\x64\Release\injector.pdb

Plugin Output

Info Matching compiler(s): MASM/TASM - sig1(h)
Suspicious Strings found in the binary may indicate undesirable behavior: Looks for VMWare presence:
  • VMware
  • vmtools
 Looks for VirtualBox presence:
  • VBoxService
  • VBoxTray
 Looks for Qemu presence:
  • QEMU
  • qemu
 May have dropper capabilities:
  • %TEMP%
 Contains another PE executable:
  • This program cannot be run in DOS mode.
 Miscellaneous malware strings:
  • Exploit
 Contains domain names:
  • cert.ssl.com
  • crls.ssl.com
  • http://cert.ssl.com
  • http://cert.ssl.com/SSL.com-timeStamping-I-RSA-R1.cer0Q
  • http://cert.ssl.com/SSLcom-SubCA-CodeSigning-RSA-4096-R1.cer0
  • http://crls.ssl.com
  • http://crls.ssl.com/SSL.com-timeStamping-I-RSA-R1.crl0
  • http://crls.ssl.com/SSLcom-SubCA-CodeSigning-RSA-4096-R1.crl0
  • http://crls.ssl.com/ssl.com-rsa-RootCA.crl0
  • http://ocsps.ssl.com0
  • http://ocsps.ssl.com0?
  • http://ocsps.ssl.com0Q
  • http://www.ssl.com
  • http://www.ssl.com/repository/SSLcomRootCertificationAuthorityRSA.crt0
  • https://pwfauth.com
  • https://www.ssl.com
  • https://www.ssl.com/repository0
  • pwfauth.com
  • www.ssl.com
Info Cryptographic algorithms detected in the binary: Uses constants related to SHA256
Malicious The PE contains functions mostly used by malware. Functions which can be used for anti-debugging purposes:
  • CreateToolhelp32Snapshot
 Can access the registry:
  • RegCloseKey
  • RegDeleteKeyW
  • RegCreateKeyExW
  • RegSetValueExW
  • RegOpenKeyExW
  • RegQueryValueExW
 Possibly launches other programs:
  • CreateProcessA
 Can create temporary files:
  • GetTempPathA
  • CreateFileW
  • GetTempPathW
 Has Internet access capabilities:
  • InternetReadFile
  • InternetCloseHandle
  • InternetConnectA
  • InternetOpenA
  • InternetSetOptionA
 Functions related to the privilege level:
  • AdjustTokenPrivileges
  • OpenProcessToken
  • CheckTokenMembership
 Enumerates local disk drives:
  • GetVolumeInformationA
 Manipulates other processes:
  • Process32NextW
  • Process32FirstW
  • OpenProcess
 Changes object ACLs:
  • SetNamedSecurityInfoW
Malicious VirusTotal score: 28/71 (Scanned on 2026-11-13 06:38:40) ALYac: Gen:Variant.Yogi.96298
APEX: Malicious
Antiy-AVL: RiskWare/Win32.Agent
Arcabit: Trojan.Yogi.D1782A
BitDefender: Gen:Variant.Yogi.96298
Bkav: W32.Malware.F96D372A
CTX: exe.unknown.yogi
CrowdStrike: win/malicious_confidence_90% (W)
Cylance: Unsafe
Cynet: Malicious (score: 100)
Elastic: malicious (high confidence)
Emsisoft: Gen:Variant.Yogi.96298 (B)
GData: Gen:Variant.Yogi.96298
Google: Detected
Gridinsoft: Trojan.Win64.Agent.sa
Lionic: Trojan.Win32.Generic.4!c
Malwarebytes: Generic.Malware/Suspicious
McAfeeD: ti!57A38896366A
MicroWorld-eScan: Gen:Variant.Yogi.96298
Microsoft: Trojan:Win32/Wacatac.B!ml
Paloalto: generic.ml
Rising: Trojan.Kryptik@AI.84 (RDML:9oQATh8RcTBhKYHh8w2DJQ)
SentinelOne: Static AI - Malicious PE
Sophos: Generic ML PUA (PUA)
Symantec: ML.Attribute.HighConfidence
TrellixENS: Artemis!18A54C4D6F87
VIPRE: Gen:Variant.Yogi.96298
Varist: W64/ABApplication.DKWC-4422

Hashes

MD5 18a54c4d6f87affed671c3eca51d7916 🔍
SHA1 9207ea55c31d055eb33c6ed5e78a43e752744c0e 🔍
SHA256 57a38896366ab26e8fc8c1a918327a7ddd1706827fcfdb2bc302ab1537754d26 🔍
SHA3 0aa9414083d67020b624aa3c3cf8bd15a5cc22461d89a61f8b967d7e0e1ad38a 🔍
SSDeep 12288:iJx8qDIhJaA+KndKbo1gJC4bBJP4tVbHaoKy:iJWqM3aAZndKboT4bLP4/bHx 🔍
Imports Hash bd377d9ce8e1b234f8c52f27d631e713 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0xf0

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2026-Nov-02 22:53:10
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x1a200
SizeOfInitializedData 0xb4e00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000016700 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xd4000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_CUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 7a18ef418766b7e7d9936a83783ed895 🔍
SHA1 3cd7235661b2c9de72794d10bb85265c5a8c33ef 🔍
SHA256 6d822037b1c1ed5f7c52d61f9fafd842f5caaa8218f2f0f8d36221b4d62b97bb 🔍
SHA3 dd67977bf579aec135cf01232c97420ef1ad6f9da2cbf0f665dd5cefbb1f7641 🔍
VirtualSize 0x1a0ab
VirtualAddress 0x1000
SizeOfRawData 0x1a200
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.24479

.rdata

MD5 432b1f8b9df2a8cd6ecc9b6e692e2d9a 🔍
SHA1 5de7c4f1886595c32d0a047497417011213fab74 🔍
SHA256 1a6abecc641addea484a1890a0b6515e6cabc9832bd876d164cd40134c6b4184 🔍
SHA3 90b211633399e482e8cc378c25dd1c8a43a259a42297adee6837a478fd9931bf 🔍
VirtualSize 0xb80e
VirtualAddress 0x1c000
SizeOfRawData 0xba00
PointerToRawData 0x1a600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.44263

.data

MD5 0a79ceee79eae13e085831e2c7c3bd55 🔍
SHA1 31115d83039de940fad5764f83380d7b493fbfdd 🔍
SHA256 fedf6275033ed9bc4a991f26767e8d0f34b86ccffde0bd7649b2613d42716da9 🔍
SHA3 47333c22629a2df8aaa3d007eeefd4fb3ab694a3eb7f33f5655f0df335b36d68 🔍
VirtualSize 0xa7b50
VirtualAddress 0x28000
SizeOfRawData 0xa7c00
PointerToRawData 0x26000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 6.46999

.pdata

MD5 6cb31778efed5b8adc7e1f1b276453d5 🔍
SHA1 5def9a25ef9bb86bbfd717d276c2b11de654b121 🔍
SHA256 f282f94d83887cdcc46e0a6c111e5c33b48ea10f5e5dce16f5d2735a2639203d 🔍
SHA3 3270a899d52a6d87dd2893ec7f968e11615da4e2794112b16423c15db8500fd1 🔍
VirtualSize 0x13bc
VirtualAddress 0xd0000
SizeOfRawData 0x1400
PointerToRawData 0xcdc00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.24371

.rsrc

MD5 9cd67f4d7f5eea38102d5980c6343346 🔍
SHA1 1d1017711c3aefa1d3a526bc29c7beddfa5e416a 🔍
SHA256 9b40fce6663ec2edbffffdace36559502fa3e9da8c32f08247e49c7628377c61 🔍
SHA3 0d22e036342e02231131824878e72db1bb72e8b016e1fe970f1847ff84620b94 🔍
VirtualSize 0x1e8
VirtualAddress 0xd2000
SizeOfRawData 0x200
PointerToRawData 0xcf000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.74928

.reloc

MD5 9c8ad18a6a36f1852f0136a4c815e033 🔍
SHA1 0fbaf9fe69cce3410f05d37fdba5393fd697dbcb 🔍
SHA256 36487a565ced0e6b4c52dfd67495b400d2f910c9d1c66e1defa0adfdb8f813d5 🔍
SHA3 766ce7fffd485b716c01e6d44aae5c5945fcacb403eec29e94d706d7de62ba12 🔍
VirtualSize 0x170
VirtualAddress 0xd3000
SizeOfRawData 0x200
PointerToRawData 0xcf200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.28309

Imports

KERNEL32.dll SetFileAttributesW
CreateToolhelp32Snapshot
MultiByteToWideChar
Sleep
GetConsoleMode
GetTempPathA
GetLastError
Process32NextW
K32GetModuleBaseNameW
MoveFileExA
DeleteFileA
DeleteFileW
Process32FirstW
CloseHandle
LocalFree
MoveFileExW
OpenProcess
GetCurrentProcessId
WideCharToMultiByte
GetConsoleWindow
CreateProcessA
K32EnumProcessModules
FormatMessageA
AllocConsole
SetConsoleTitleW
GetComputerNameA
AcquireSRWLockExclusive
GetFileInformationByHandleEx
GetFileAttributesW
CreateFileW
WaitForSingleObject
GetVolumeInformationA
GetTempPathW
RemoveDirectoryW
TerminateProcess
SetConsoleMode
WriteFile
GetStdHandle
GetCurrentProcess
GetConsoleScreenBufferInfo
ReadFile
GetSystemFirmwareTable
GetComputerNameW
CreateDirectoryW
AreFileApisANSI
WakeAllConditionVariable
SleepConditionVariableSRW
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsProcessorFeaturePresent
GetLocaleInfoEx
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetFileInformationByHandle
ReleaseSRWLockExclusive
CreateFile2
USER32.dll ShowWindow
SetLayeredWindowAttributes
SetWindowLongPtrW
SetWindowPos
GetWindowLongPtrW
ADVAPI32.dll LookupPrivilegeValueW
AdjustTokenPrivileges
RegCloseKey
RegDeleteKeyW
AllocateAndInitializeSid
SetEntriesInAclW
RegCreateKeyExW
SetNamedSecurityInfoW
RegDeleteTreeW
RegSetValueExW
OpenProcessToken
FreeSid
CheckTokenMembership
RegOpenKeyExW
RegQueryValueExW
SHELL32.dll SHCreateDirectoryExW
MSVCP140.dll ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?good@ios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
_Xtime_get_ticks
?_Syserror_map@std@@YAPEBDH@Z
?_Xlength_error@std@@YAXPEBD@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Winerror_map@std@@YAHH@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xout_of_range@std@@YAXPEBD@Z
?_Id_cnt@id@locale@std@@0HA
?_Xbad_alloc@std@@YAXXZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
WININET.dll InternetReadFile
HttpAddRequestHeadersA
InternetCloseHandle
InternetConnectA
InternetOpenA
HttpSendRequestA
HttpQueryInfoA
HttpOpenRequestA
InternetSetOptionA
bcrypt.dll BCryptDestroyKey
BCryptVerifySignature
BCryptDecrypt
BCryptOpenAlgorithmProvider
BCryptGenRandom
BCryptFinishHash
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptImportKeyPair
BCryptHashData
BCryptSetProperty
BCryptCreateHash
BCryptGenerateSymmetricKey
BCryptEncrypt
VCRUNTIME140_1.dll __CxxFrameHandler4
VCRUNTIME140.dll memcmp
memcpy
memset
__current_exception_context
__current_exception
__C_specific_handler
__std_terminate
__std_exception_destroy
_CxxThrowException
__std_exception_copy
memmove
api-ms-win-crt-stdio-l1-1-0.dll fread
ungetc
fclose
__p__commode
_set_fmode
_get_stream_buffer_pointers
freopen_s
setvbuf
fputc
__acrt_iob_func
fgetpos
fsetpos
fflush
fopen_s
__stdio_common_vsprintf_s
fgetc
fgets
fwrite
_fseeki64
api-ms-win-crt-heap-l1-1-0.dll _set_new_mode
malloc
free
_callnewh
api-ms-win-crt-string-l1-1-0.dll strlen
_wcsicmp
wcslen
_stricmp
api-ms-win-crt-time-l1-1-0.dll _time64
_localtime64_s
api-ms-win-crt-conio-l1-1-0.dll _getch
api-ms-win-crt-convert-l1-1-0.dll atoi
atof
atoll
strtoul
api-ms-win-crt-runtime-l1-1-0.dll _seh_filter_exe
_set_app_type
_crt_atexit
_initterm
_initterm_e
exit
_exit
_cexit
__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
_register_onexit_function
_initialize_onexit_table
terminate
_initialize_narrow_environment
_configure_narrow_argv
abort
_get_initial_narrow_environment
api-ms-win-crt-filesystem-l1-1-0.dll _unlock_file
_lock_file
api-ms-win-crt-math-l1-1-0.dll __setusermatherr
api-ms-win-crt-locale-l1-1-0.dll _configthreadlocale
___lc_codepage_func

Delayed Imports

1

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x188
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.89623
MD5 b8e76ddb52d0eb41e972599ff3ca431b 🔍
SHA1 fc12d7ad112ddabfcd8f82f290d84e637a4d62f8 🔍
SHA256 165c5c883fd4fd36758bcba6baf2faffb77d2f4872ffd5ee918a16f91de5a8a8 🔍
SHA3 37f83338b28cb102b1b14f27280ba1aa3fffb17f7bf165cb7b675b7e8eb7cddd 🔍

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Nov-02 22:53:10
Version 0.0
SizeofData 140
AddressOfRawData 0x22094
PointerToRawData 0x20694
Referenced File C:\Users\x\Desktop\Fortnite Internal\fortnite injector\fortnite injector\fortnite injector\x64\Release\injector.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Nov-02 22:53:10
Version 0.0
SizeofData 20
AddressOfRawData 0x22120
PointerToRawData 0x20720

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Nov-02 22:53:10
Version 0.0
SizeofData 912
AddressOfRawData 0x22134
PointerToRawData 0x20734

IMAGE_DEBUG_TYPE_ILTCG

Characteristics 0
TimeDateStamp 2026-Nov-02 22:53:10
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

StartAddressOfRawData 0x1400224e8
EndAddressOfRawData 0x1400224f0
AddressOfIndex 0x1400cfa78
AddressOfCallbacks 0x14001c8b0
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_4BYTES
Callbacks (EMPTY)

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140028040

RICH Header

XOR Key 0xbb785d8b
Unmarked objects 0
Imports (VS2008 SP1 build 30729) 20
Imports (36815) 6
ASM objects (36815) 4
C objects (36815) 11
C++ objects (36815) 32
Imports (33145) 13
Total imports 286
C objects (LTCG) (37025) 3
Resource objects (37025) 1
Linker (37025) 1

Errors

Leave a comment

No comments yet.