| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2025-Aug-26 05:16:54 |
| Detected languages |
Chinese - PRC
English - United States |
| Debug artifacts |
D:\work\crack\app_reset\IDM\Release\idm_keygen.pdb
|
| CompanyName | goldenegg@pediy |
| FileDescription | idm_keygen |
| FileVersion | 1.0.0.2 |
| InternalName | idm_keygen.exe |
| OriginalFilename | idm_keygen.exe |
| ProductName | IDM keygen |
| ProductVersion | 1.0.0.2 |
| Info | Matching compiler(s): |
Microsoft Visual C++ v6.0 DLL
Microsoft Visual C++ 6.0 - 8.0 |
| Suspicious | Strings found in the binary may indicate undesirable behavior: |
Contains another PE executable:
|
| Info | Cryptographic algorithms detected in the binary: |
Uses constants related to SHA256
Uses known Mersenne Twister constants |
| Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
| Malicious | The PE is possibly a dropper. |
Resource 130 is possibly compressed or encrypted.
Resource 131 detected as a PE Executable. Resource 132 detected as a PE Executable. |
| Suspicious | VirusTotal score: 1/71 (Scanned on 2025-12-29 14:56:08) | CrowdStrike: win/malicious_confidence_60% (D) |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x108 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 5 |
| TimeDateStamp | 2025-Aug-26 05:16:54 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
|
| Magic | PE32 |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x17e400 |
| SizeOfInitializedData | 0x236000 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x00146DD4 (Section: .text) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x180000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x3b8000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| KERNEL32.dll |
VirtualAlloc
GetSystemInfo HeapQueryInformation GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread GetCommandLineW GetCommandLineA ExitProcess GetCPInfo GetStringTypeW LCMapStringEx RaiseException OutputDebugStringW VirtualQuery QueryPerformanceFrequency SetStdHandle GetFileType SetFilePointerEx GetConsoleOutputCP GetConsoleMode ReadConsoleW LCMapStringW IsValidLocale EnumSystemLocalesW GetTimeZoneInformation FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter SleepConditionVariableSRW WakeAllConditionVariable GetStdHandle AcquireSRWLockExclusive ReleaseSRWLockExclusive IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter FindResourceExW GetUserDefaultLCID GetTempFileNameW GetWindowsDirectoryW SearchPathW GetProfileIntW GetTickCount64 Sleep SystemTimeToTzSpecificLocalTime GetFileTime GetFileSizeEx GetFileAttributesExW FileTimeToLocalFileTime SetErrorMode VirtualProtect lstrcmpiW GetCurrentProcess DuplicateHandle WriteFile UnlockFile SetEndOfFile ReadFile LockFile GetVolumeInformationW GetFullPathNameW FlushFileBuffers FindFirstFileW FindClose FileTimeToSystemTime GlobalGetAtomNameW GetTempPathW SetFilePointer GetFileSize CreateFileW GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW GetCurrentDirectoryW LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection InitializeCriticalSectionAndSpinCount CompareStringW GlobalFindAtomW GetSystemDirectoryW EncodePointer GlobalAddAtomW ResumeThread SetThreadPriority WaitForSingleObject CopyFileW FormatMessageW MulDiv LocalFree GlobalSize GetCurrentProcessId VerifyVersionInfoW VerSetConditionMask GlobalFree GlobalUnlock WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW LoadLibraryA lstrcpyW WideCharToMultiByte lstrcmpW lstrcmpA GlobalDeleteAtom GlobalLock GlobalAlloc LoadLibraryW LoadLibraryExW GetProcAddress GetModuleHandleW GetModuleHandleA GetModuleFileNameW FreeLibrary GetVersionExW GetCurrentThreadId GetCurrentThread SetLastError OutputDebugStringA GetProcessHeap DeleteCriticalSection DecodePointer HeapAlloc HeapReAlloc HeapSize InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection SizeofResource HeapFree MoveFileExW DeleteFileW MultiByteToWideChar GetFileAttributesW CloseHandle Process32NextW Process32FirstW CreateToolhelp32Snapshot GetLastError GetVolumeInformationA FindResourceW LoadResource LockResource WriteConsoleW |
|---|---|
| USER32.dll |
CloseClipboard
OpenClipboard KillTimer SetTimer RealChildWindowFromPoint DeleteMenu CopyImage WindowFromPoint ReleaseCapture SetCapture WaitMessage MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo GetTopWindow GetClassLongW EqualRect AdjustWindowRectEx RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow SetForegroundWindow GetForegroundWindow TrackPopupMenu SetMenu GetMenu GetCapture EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement IsChild IsMenu CreateWindowExW GetClassInfoExW RegisterClassW CallWindowProcW GetMessageTime GetMessagePos IsDialogMessageW SetWindowLongW GetWindowTextLengthW GetWindowTextW SetWindowTextW SetFocus GetDlgCtrlID SetClipboardData SetDlgItemTextW SetWindowPos ShowWindow IntersectRect GetMenuItemInfoW DestroyMenu GetClassNameW UpdateWindow SetCursor ShowOwnedPopups ValidateRect GetKeyState PeekMessageW DispatchMessageW TranslateMessage GetMessageW LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions GetMenuDefaultItem EnableMenuItem CheckMenuItem CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW PtInRect GetCursorPos ScreenToClient ClientToScreen SetMenuDefaultItem ModifyMenuW DestroyAcceleratorTable GetWindow LoadIconW GetSystemMenu AppendMenuW SendMessageW EndPaint BeginPaint ReleaseDC GetWindowDC GetDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW RemoveMenu InsertMenuW GetMenuItemCount GetMenuItemID GetSubMenu GetMenuState GetMenuStringW GetLastActivePopup GetWindowThreadProcessId EmptyClipboard DestroyIcon LoadImageW SetParent MonitorFromPoint TrackMouseEvent IsZoomed CharUpperW GetAsyncKeyState LoadMenuW MessageBeep NotifyWinEvent SetCursorPos SetRect MessageBoxW EnumDisplayMonitors UnionRect BringWindowToTop CreatePopupMenu LockWindowUpdate EnableScrollBar GetDoubleClickTime GetIconInfo CheckDlgButton GetClientRect IsIconic GetSystemMetrics DrawIcon FrameRect MoveWindow InvalidateRect EnableWindow UnregisterClassW PostMessageW PostQuitMessage RegisterWindowMessageW DrawEdge DrawFrameControl IsWindowVisible GetFocus DrawStateW SetWindowRgn RedrawWindow GetWindowRect MapWindowPoints GetSysColor GetSysColorBrush DrawFocusRect FillRect InflateRect OffsetRect IsRectEmpty GetParent DrawIconEx IsWindow DestroyWindow CreateDialogIndirectParamW EndDialog GetDlgItem GetNextDlgTabItem GetActiveWindow IsWindowEnabled SetActiveWindow GetWindowLongW GetDesktopWindow DefWindowProcW GetClassInfoW SetClassLongW GetUpdateRect SendDlgItemMessageA SetLayeredWindowAttributes SetRectEmpty CopyRect LoadCursorW SystemParametersInfoW GetMonitorInfoW CopyIcon ToUnicodeEx GetKeyboardLayout GetKeyboardState MapVirtualKeyW LoadAcceleratorsW CreateAcceleratorTableW CopyAcceleratorTableW UpdateLayeredWindow MapDialogRect TranslateAcceleratorW InsertMenuItemW UnpackDDElParam ReuseDDElParam GetKeyNameTextW SubtractRect RegisterClipboardFormatW CharUpperBuffW InvertRect HideCaret GetWindowRgn DestroyCursor CreateMenu GetComboBoxInfo TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar MapVirtualKeyExW IsCharLowerW GetNextDlgGroupItem PostThreadMessageW IsClipboardFormatAvailable SetMenuItemBitmaps |
| GDI32.dll |
GetStockObject
GetTextCharsetInfo GetObjectW CopyMetaFileW CreateDCW CreateBitmap Escape ExcludeClipRect GetClipBox GetObjectType GetPixel GetViewportExtEx GetWindowExtEx IntersectClipRect LineTo PtVisible RectVisible RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectObject SelectPalette SetBkColor SetBkMode SetMapMode SetLayout GetLayout SetPolyFillMode SetROP2 SetTextColor SetTextAlign MoveToEx TextOutW GetDeviceCaps SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx SetRectRgn DPtoLP RealizePalette SetPixel StretchBlt CreateDIBSection SetDIBColorTable CreateRoundRectRgn Rectangle GetRgnBox OffsetRgn RoundRect CreatePalette GetPaletteEntries GetNearestPaletteIndex GetSystemPaletteEntries EnumFontFamiliesExW ExtFloodFill SetPaletteEntries FillRgn FrameRgn GetBoundsRect PtInRegion GetViewportOrgEx LPtoDP GetWindowOrgEx SetPixelV GetTextFaceW EnumFontFamiliesW DeleteObject CreatePatternBrush CreatePen CreateFontIndirectW CreateDIBitmap CreateCompatibleDC CreateCompatibleBitmap BitBlt GetTextMetricsW Polygon CreatePolygonRgn ExtTextOutW PatBlt GetTextExtentPoint32W GetTextColor GetBkColor Ellipse CreateSolidBrush CreateRectRgnIndirect CreateRectRgn CreateHatchBrush CreateEllipticRgn CombineRgn Polyline DeleteDC |
| MSIMG32.dll |
AlphaBlend
TransparentBlt |
| WINSPOOL.DRV |
OpenPrinterW
DocumentPropertiesW ClosePrinter |
| ADVAPI32.dll |
RegQueryValueW
RegQueryValueExA RegCloseKey RegDeleteKeyA RegOpenKeyExW RegQueryValueExW RegCreateKeyExW RegDeleteKeyW RegEnumKeyExW RegEnumValueW RegOpenKeyExA RegEnumKeyW RegSetValueExW RegDeleteValueW |
| SHELL32.dll |
SHGetPathFromIDListW
SHGetSpecialFolderLocation SHBrowseForFolderW SHGetDesktopFolder SHAppBarMessage SHGetFileInfoW ShellExecuteW DragFinish DragQueryFileW SHGetMalloc |
| COMCTL32.dll |
InitCommonControlsEx
|
| SHLWAPI.dll |
PathFindExtensionW
PathIsUNCW PathStripToRootW StrFormatKBSizeW PathRemoveFileSpecW PathFindFileNameW |
| UxTheme.dll |
GetCurrentThemeName
GetThemeSysColor IsThemeBackgroundPartiallyTransparent GetThemePartSize GetWindowTheme DrawThemeText OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor DrawThemeParentBackground IsAppThemed |
| ole32.dll |
OleTranslateAccelerator
IsAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor OleLockRunning RevokeDragDrop RegisterDragDrop CoLockObjectExternal OleGetClipboard DoDragDrop CoDisconnectObject CreateStreamOnHGlobal CoInitializeEx ReleaseStgMedium OleDuplicateData CoTaskMemFree CoTaskMemAlloc CoInitialize CoCreateInstance CoCreateGuid CoUninitialize |
| OLEAUT32.dll |
LoadTypeLib
SystemTimeToVariantTime VariantTimeToSystemTime SysAllocString SysFreeString VariantChangeType VariantCopy VarBstrFromDate VariantClear VariantInit SysAllocStringLen SysStringLen |
| gdiplus.dll |
GdipDrawImageRectI
GdipSetInterpolationMode GdipCreateFromHDC GdipCreateBitmapFromHBITMAP GdipDrawImageI GdipDeleteGraphics GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdiplusShutdown GdipAlloc GdipFree GdiplusStartup GdipCloneImage GdipDisposeImage |
| CRYPT32.dll |
CertOpenStore
CertFreeCertificateContext CertAddCertificateContextToStore CertCloseStore CertCreateCertificateContext |
| OLEACC.dll |
AccessibleObjectFromWindow
LresultFromObject CreateStdAccessibleObject |
| IMM32.dll |
ImmGetContext
ImmReleaseContext ImmGetOpenStatus |
| WINMM.dll |
PlaySoundW
|
| ntdll.dll |
RtlUnwind
|
| &About idm_keygen... |
| You should select an image! |
| You should enter a text! |
| Can't create a new image! |
| Can't paste bitmap image from the clipboard! |
| You can paste bitmap with the size (%d x %d) only! |
| Menu Bar |
| Can't customize menus! |
| Toolbar internal error. Please contact your application vendor. |
| [Unassigned] |
| Can't copy bitmap image into the clipboard! |
| Hide docked window |
| Expand docked window |
| Contract docked window |
| New Menu |
| File |
| Folder |
| New |
| Existing |
| Recent |
| Delete |
| Move Item Up |
| Move Item Down |
| Executable (*.exe)|*.exe|Command (*.com)|*.com|Information (*.pdf)|*.pdf|Batch (*.bat)|*.bat|All Files (*.*)|*.*|| |
| You may define up to %d tools. |
| Expand (%Ts) |
| More Buttons |
| New |
| Drag to make this menu float |
| Command |
| Keys |
| Description |
| Close |
| Auto Hide |
| Scroll Left |
| Scroll Right |
| Auto Hide All |
| Customize |
| <Untitled> |
| Close |
| Default Menu |
| Default application menu. Appears when no documents are open. |
| ------------------------------------------------------------------------------------------- |
| Do you really want to delete the toolbar '%Ts'? |
| All Commands |
| All your changes will be lost! Do you really want to reset the toolbar '%Ts'? |
| All your changes will be lost! Do you really want to reset all toolbars and menus? |
| All your changes will be lost! Do you really want to reset the menu '%Ts'? |
| Default |
| All your changes will be lost! Do you really want to reset the keyboard assignments? |
| You can't create more than %d user-defined toolbars! |
| This will delete the record of commands you've used in this application and restore the default set of visible commands to the menus and toolbars. It will not undo any explicit customizations. Are you sure you want to do this? |
| &Reset Toolbar |
| Fill Tool |
| Fill |
| Pencil Tool |
| Pencil |
| Select Color Tool |
| Select Color |
| Line Tool |
| Line |
| Rectangle Tool |
| Rectangle |
| Ellipse Tools |
| Ellipse |
| Copy Tool |
| Copy |
| Paste Tool |
| Paste |
| Clear Tool |
| Clear |
| Toolbar Options |
| &Add or Remove Buttons |
| Tasks Pane |
| Back |
| Forward |
| Home |
| Close |
| Other Task Panes |
| Close Full Screen |
| Full Screen |
| S&how Buttons on One Row |
| S&how Buttons on Two Rows |
| Show More Buttons |
| Show Fewer Buttons |
| Navigation Pane Options... |
| Window Position |
| &Floating |
| &Docking |
| &Auto Hide |
| &Hide |
| Active Files |
| Show Quick Access Toolbar Below the Ribbon |
| Show Quick Access Toolbar Above the Ribbon |
| Add to Quick Access Toolbar |
| Remove from Quick Access Toolbar |
| Customize Quick Access Toolbar... |
| Minimize the Ribbon |
| Status Bar Configuration |
| &Tabbed Document |
| &Print Preview |
| Zoom |
| Preview |
| <Separator> |
| Customize Quick Access Toolbar |
| More Commands... |
| Show Below the Ribbon |
| Show Above the Ribbon |
| Cancel |
| Undo %d Actions |
| Undo 1 Action |
| More |
| Row %d of %d |
| Row %d-%d of %d |
| None |
| Unfold |
| Slide |
| Fade |
| [Default] |
| Row Up |
| Row Down |
| Name |
| Size |
| Type |
| Modified |
| Close Print Preview |
| &Close |
| Toggle One/Two Pages display |
| Toggle One/Two Pages display |
| Next Page |
| Next Page |
| Previous Page |
| Previous Page |
| Print Document |
| Zoom In |
| Zoom In |
| Zoom Out |
| Zoom Out |
| Open |
| Save As |
| All Files (*.*) |
| Untitled |
| an unnamed file |
| &Hide |
| No error message is available. |
| Attempted an unsupported operation. |
| A required resource was unavailable. |
| Out of memory. |
| An unknown error has occurred. |
| Encountered an improper argument. |
| Incorrect filename. |
| Failed to open document. |
| Failed to save document. |
| Save changes to %1? |
| Failed to create empty document. |
| The file is too large to open. |
| Could not start print job. |
| Failed to launch help. |
| Internal application error. |
| Command failed. |
| Insufficient memory to perform operation. |
| System registry entries have been removed and the INI file (if any) was deleted. |
| Not all of the system registry entries (or INI file) were removed. |
| This program requires the file %Ts, which was not found on this system. |
| This program is linked to the missing export %Ts in the file %Ts. This machine may have an incompatible version of %Ts. |
| Enter an integer. |
| Enter a number. |
| Enter an integer between %1 and %2. |
| Enter a number between %1 and %2. |
| Enter no more than %1 characters. |
| Select a button. |
| Enter an integer between 0 and 255. |
| Enter a positive integer. |
| Enter a date and/or time. |
| Enter a currency. |
| Enter a GUID. |
| Enter a time. |
| Enter a date. |
| Unexpected file format. |
| %1 |
| Cannot find this file. |
| Verify that the correct path and file name are given. |
| Destination disk drive is full. |
| Unable to read from %1, it is opened by someone else. |
| Unable to write to %1, it is read-only or opened by someone else. |
| Encountered an unexpected error while reading %1. |
| Encountered an unexpected error while writing %1. |
| %1: %2 |
| Continue running script? |
| Dispatch exception: %1 |
| Unable to read write-only property. |
| Unable to write read-only property. |
| Unable to load mail system support. |
| Mail system DLL is invalid. |
| Send Mail failed to send message. |
| No error occurred. |
| An unknown error occurred while accessing %1. |
| %1 was not found. |
| %1 contains an incorrect path. |
| Could not open %1 because there are too many open files. |
| Access to %1 was denied. |
| An incorrect file handle was associated with %1. |
| Could not remove %1 because it is the current directory. |
| Could not create %1 because the directory is full. |
| Seek failed on %1 |
| Encountered a hardware I/O error while accessing %1. |
| Encountered a sharing violation while accessing %1. |
| Encountered a locking violation while accessing %1. |
| Disk full while accessing %1. |
| Attempted to access %1 past its end. |
| No error occurred. |
| An unknown error occurred while accessing %1. |
| Attempted to write to the reading %1. |
| Attempted to access %1 past its end. |
| Attempted to read from the writing %1. |
| %1 has a bad format. |
| %1 contained an unexpected object. |
| %1 contains an incorrect schema. |
| pixels |
| Uncheck |
| Check |
| Mixed |
| One or more auto-saved documents were found. |
| These are more recently saved than the currently open documents and contain changes that were made before the application closed. |
| Do you want to recover these auto-saved documents? |
| Note that if you choose to recover the auto-saved documents, you must explicitly save them to overwrite the original documents. If you choose to not recover the auto-saved versions, they will be deleted. |
| Recover the auto-saved documents |
| Open the auto-saved versions instead of the explicitly saved versions |
| Don't recover the auto-saved documents |
| Use the last explicitly saved versions of the documents |
| %Ts [Recovered] |
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 1.0.0.2 |
| ProductVersion | 1.0.0.2 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| CompanyName | goldenegg@pediy |
| FileDescription | idm_keygen |
| FileVersion (#2) | 1.0.0.2 |
| InternalName | idm_keygen.exe |
| OriginalFilename | idm_keygen.exe |
| ProductName | IDM keygen |
| ProductVersion (#2) | 1.0.0.2 |
| Resource LangID | English - United States |
|---|
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2025-Aug-26 05:16:54 |
| Version | 0.0 |
| SizeofData | 75 |
| AddressOfRawData | 0x1c2a24 |
| PointerToRawData | 0x1c1224 |
| Referenced File | D:\work\crack\app_reset\IDM\Release\idm_keygen.pdb |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2025-Aug-26 05:16:54 |
| Version | 0.0 |
| SizeofData | 20 |
| AddressOfRawData | 0x1c2a70 |
| PointerToRawData | 0x1c1270 |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2025-Aug-26 05:16:54 |
| Version | 0.0 |
| SizeofData | 984 |
| AddressOfRawData | 0x1c2a84 |
| PointerToRawData | 0x1c1284 |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2025-Aug-26 05:16:54 |
| Version | 0.0 |
| SizeofData | 0 |
| AddressOfRawData | 0 |
| PointerToRawData | 0 |
| StartAddressOfRawData | 0x5c2e6c |
|---|---|
| EndAddressOfRawData | 0x5c2e74 |
| AddressOfIndex | 0x5de628 |
| AddressOfCallbacks | 0x580ca0 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_ALIGN_4BYTES
|
| Callbacks | (EMPTY) |
| Size | 0xc0 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x5d5fc0 |
| SEHandlerTable | 0x5c1a9c |
| SEHandlerCount | 864 |
| XOR Key | 0xc73ef36c |
|---|---|
| Unmarked objects | 0 |
| ASM objects (30795) | 27 |
| C objects (30795) | 36 |
| C++ objects (30795) | 207 |
| C objects (CVTCIL) (30795) | 1 |
| ASM objects (34321) | 25 |
| C objects (34321) | 21 |
| C++ objects (34321) | 400 |
| Imports (30795) | 39 |
| Total imports | 781 |
| C++ objects (LTCG) (34808) | 3 |
| Resource objects (34808) | 1 |
| 151 | 1 |
| Linker (34808) | 1 |
No comments yet.