1397b2f7014900d2b203bda64816accbd4211dd6ce347479ac169f683e1a2f61

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2018-Oct-15 10:31:50
Detected languages English - United States
Debug artifacts D:\17\guardiansvc-git\latest\main\RA\LMIGuardian\x86\LMIGuardianSvc.pdb
CompanyName LogMeIn, Inc.
FileDescription LMIGuardianSvc
FileVersion 10.1.1744
InternalName LMIGuardianSvc
LegalCopyright Copyright © 1998-2018 LogMeIn, Inc. All rights reserved.
OriginalFilename LMIGuardianSvc.exe
ProductName LMIGuardianSvc
ProductVersion 10.1.1744

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 6.0 - 8.0
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryA
  • LoadLibraryExW
Info The PE is digitally signed. Signer: LogMeIn
Issuer: DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
Safe VirusTotal score: 0/71 (Scanned on 2026-10-03 15:45:12) All the AVs think this file is safe.

Hashes

MD5 f8e8932263c7289bc8069f897a4c71eb 🔍
SHA1 42a7192f31a3a36b31c3094f9d63f2842824b005 🔍
SHA256 1397b2f7014900d2b203bda64816accbd4211dd6ce347479ac169f683e1a2f61 🔍
SHA3 993ce1fae5bc1ff42f096dbc13c656907f1df7f35f65e2204d5601b0ddfd7a84 🔍
SSDeep 3072:vsyl4iFnMAxRLY5GtqBOVLpbayC8uIdYbXurcxA84/LFtJU2l8Qx:RzMAgib4p0/BtHmC 🔍
Imports Hash c176c7a34b0c667d9239c18972149a03 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x128

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 7
TimeDateStamp 2018-Oct-15 10:31:50
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Image Optional Header

Magic PE32
LinkerVersion 14.0
SizeOfCode 0xce00
SizeOfInitializedData 0x56400
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00002269 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0xe000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 5.1
ImageVersion 0.0
SubsystemVersion 5.1
Win32VersionValue 0
SizeOfImage 0x68000
SizeOfHeaders 0x400
Checksum 0x6d34c
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 14f55c7c21be4105beca05d2de0c47f8 🔍
SHA1 0e89420b6d18232ac32aead89a4d22d105d11bc4 🔍
SHA256 d4807f3b94a1b5b0bd3d2c543e7263e3c3c4e5696c21de6a0987fba3038eac09 🔍
SHA3 3f2b10b6dcd4c42318c53a0964907e1135f05c5e4ed627e3b5822df143214c0f 🔍
VirtualSize 0xcd0b
VirtualAddress 0x1000
SizeOfRawData 0xce00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.62091

.rdata

MD5 e025d4c91ee51fd5b4892cf2f714bf94 🔍
SHA1 6fa8eaa2d6ded012631f6b0d77a2c9d68dbf689c 🔍
SHA256 3c480670dbc7509797c7426d084fecdb35d7d02405e622da3a5fa1057aa556a6 🔍
SHA3 8e1e535ebbe3db15be29e1bbd5da51e2f9952b9bcb34d1ad3bb3bdf114328559 🔍
VirtualSize 0x7326
VirtualAddress 0xe000
SizeOfRawData 0x7400
PointerToRawData 0xd200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.68451

.data

MD5 6ad007963e4c74bd47f50496410d063f 🔍
SHA1 4118fe0aa4a975246791467aba1521b57c1b7962 🔍
SHA256 83a9306ad95214d70317f52f9f62741070803707bd2001766b887f9a3034d498 🔍
SHA3 f35926d4974c979ebecbf39b2a7d8a25108ed0a324d099e3813987cd2b584837 🔍
VirtualSize 0x2bfc
VirtualAddress 0x16000
SizeOfRawData 0xa00
PointerToRawData 0x14600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.82192

.tls

MD5 1f354d76203061bfdd5a53dae48d5435 🔍
SHA1 aa0d33a0c854e073439067876e932688b65cb6a9 🔍
SHA256 4c6474903705cb450bb6434c29e8854f17d8324efca1fdb9ee9008599060883a 🔍
SHA3 991fbbd46bbd69198269fe6c247d440e0f8a7d38259b7a1e04b74790301d1d2b 🔍
VirtualSize 0x9
VirtualAddress 0x19000
SizeOfRawData 0x200
PointerToRawData 0x15000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.0203931

.gfids

MD5 0934b0277b77a41d07add0f92fb3fcf7 🔍
SHA1 51bf1770402b778275ba0e6f8e1b09ef118698bc 🔍
SHA256 5fc1cae2e6f613425f9c949f985b5af5c13a101eaeb0be569e22a5296468168c 🔍
SHA3 4d635690ccc039b2311868bc2be4365ba26b16958bdd94d68d35842d41285ac1 🔍
VirtualSize 0xd8
VirtualAddress 0x1a000
SizeOfRawData 0x200
PointerToRawData 0x15200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 1.66591

.rsrc

MD5 2429fd41e592d9b899ff0eb06059800a 🔍
SHA1 6267a5f09397614722b22b6e09ecc82acfaafacb 🔍
SHA256 ab923f8e7fa2c74ea547cd5e2881dbc61a74caa965097dcbed601c8f131e569d 🔍
SHA3 35b20929c35e78ce9b8cc642fbe2349979acc2367aac1470e530b075cc3fabce 🔍
VirtualSize 0x4acb8
VirtualAddress 0x1b000
SizeOfRawData 0x4ae00
PointerToRawData 0x15400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.76114

.reloc

MD5 7c70e18a854bbaa45473926598d9ac4a 🔍
SHA1 9fec1bfe878d9f9db3ae2ad2ba5431b5a602d1bf 🔍
SHA256 6708682ef71119d3cd2b054d22c6ed22cb72b59945e54c355b8105a2ce9b8197 🔍
SHA3 382d6d7458948059f6e388081bf2edc4b076ddf7df301784189d2a1c76c5df00 🔍
VirtualSize 0x1118
VirtualAddress 0x66000
SizeOfRawData 0x1200
PointerToRawData 0x60200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.44608

Imports

KERNEL32.dll GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetStringTypeW
GetFileType
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentProcessId
GetCurrentProcess
CloseHandle
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
ExitProcess
HeapAlloc
HeapSize
HeapFree
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
SetLastError
GetSystemTimeAsFileTime
QueryPerformanceCounter
WriteFile
FlushFileBuffers
FindClose
GetStdHandle
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameW
GetModuleHandleExW
SetStdHandle
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
CreateFileW
GetCommandLineW
GetCommandLineA
LoadLibraryExW
RtlUnwind
EncodePointer
InitializeSListHead
GetCurrentThreadId
GetStartupInfoW
LCMapStringW
IsDebuggerPresent
OutputDebugStringW
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetACP

Delayed Imports

202

Type REGISTRY
Language English - United States
Codepage UNKNOWN
Size 0x123
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.42148
MD5 844f125093a841c8f9d43c8a8a37002b 🔍
SHA1 714f2c428d6e6d16f626b2864d2427f297315a2e 🔍
SHA256 3f9942f2dc24fcf3a5934e9780819b10fa9ee3bba94b18ae500862d7eb981503 🔍
SHA3 372d5fd42c0341a6fba09146b840bb43b61e0c0fbb36ef663ee18005d3c1b84c 🔍

204

Type REGISTRY
Language English - United States
Codepage UNKNOWN
Size 0x2b4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.42211
MD5 82211f586908e69275a46ee044093fd2 🔍
SHA1 3ed8c12feff8abb6f0b402fc3b574643e2c9c4f2 🔍
SHA256 7af73bb3920d54cf08f35ceeac5c2e7d154366dbeb17ffceebbc5f383c597ea2 🔍
SHA3 6db930056a4219b5753f1093d4959f430cda57066566d7ad6ee9c193861b73bb 🔍

1

Type TYPELIB
Language English - United States
Codepage UNKNOWN
Size 0x10b8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.24269
MD5 53f639cbd6a9d4684b238e4220480fbc 🔍
SHA1 e1fc9e6b467166a1632a6c7757a13abd7ef897f9 🔍
SHA256 5f9abc7883719863e73420edddf1028342b96bc145a35448b2ce2224d719e85d 🔍
SHA3 6ee533bec276cbc476d299756f4db7cb0404a059e779f832dc9748f45296002e 🔍

1 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.35877
MD5 98220772ea5472e0f2ab16df121e4a4f 🔍
SHA1 a78c23309d445d09ded751b66e3c5f0d41039aef 🔍
SHA256 ae29e2871ae59da3c148a528c26d657690cb22027fe93fab5e4c5dd99a0bd22c 🔍
SHA3 563de1787c5d81cd5330bfa2fa051fee951323d018153a7842849d110e015877 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.5651
MD5 fdcb7682340195e215558344321c2f4d 🔍
SHA1 b8b23a5d785966edeef09ca9ad791b22ccf60f4b 🔍
SHA256 e7e9c98d808ae541dd684ac183c0935d9108b5bfcb42210cbfe2ae5b8b6dcedd 🔍
SHA3 6d4303d254f54c6ca04f65cbbf437c1adc49aeb358aa8e24e9be643dea2add6f 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.04342
MD5 dfc2d766f81fab571989ac21e49e059a 🔍
SHA1 f6006c5b37341bd587088f4f2f771994fcf67e3d 🔍
SHA256 c5a87a0a688b4e386b3939149d9117fac39e651f2aa4d0e96cb34244dcad1d3a 🔍
SHA3 99a4fe5fd64341aaa30f5e7542d8b445a5dbe9e8c323ef81c7d4469ed961d421 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.09643
MD5 23d09d674940f53ce193411039012370 🔍
SHA1 5fd05f9a655553eee49e1b9a1d234eb9eb847239 🔍
SHA256 321b7c4f587ee2a197283aa0f33630237b1830ca0bb706573ec7e725c79a720a 🔍
SHA3 1afe28b44551e30ad2bf487c024ee7a71affd75a9503737ef54fa600ab456627 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.07416
MD5 ad39c345ed9372b4de5a87706cca536a 🔍
SHA1 671106d89319b1ae0ea83e085827f9995cf8136e 🔍
SHA256 6694829fd9e5291a4ecbb9c20e796a95d12c2d8c562c4c2b57a83837e5f94621 🔍
SHA3 cf82f7588f25f2f1d4d4c67b42a605787f610fe5343bc9d3a94fbfc131b505a6 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.03922
MD5 85854327752f64c3b0f3dd33bc5a660c 🔍
SHA1 07837cfd31f21c1b2f420c79cfb5175def23cc33 🔍
SHA256 898c526336170e6710c65fa08d667a321b5c15f442606f2777ecb66b51878952 🔍
SHA3 167e9156d465fa111311dff0cf1327c1ac524ae02d0ad2db8671d7beed72714f 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x42028
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.63478
MD5 a5735090f2b6293c11161bc57874b689 🔍
SHA1 8ff87f99a5954012aa2dfe6152a10ccbb13480c5 🔍
SHA256 ec6ce418696c50a25b7047a6e26b5198d8de92ef0d73660595990274ffa0ae3d 🔍
SHA3 811d25eb9fed370afc7735520316ad953c05740d9775562aa4aaee8412c522f3 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.80365
MD5 f2aed16606dce4e2144c8989e21cd562 🔍
SHA1 6195d1510385ea464ae08b99e36d9a38ec7c584e 🔍
SHA256 a8cd4db773910b2e9252ff18e9f3ac2be5d6cf78a9d3278dd620d9059d74975e 🔍
SHA3 f078467712a05336962a0327593fe99e0fe6e459d8fb59a27e4a5a87ff6cb128 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.87839
MD5 1b22b096e86907b7a6b52ea2138bee86 🔍
SHA1 71085b077fba80c9c02031e75456bfc34e5a7191 🔍
SHA256 77e841738866bcd6263661fd99bdd92e9765300667b07b780b26a4a7828c8701 🔍
SHA3 3c2bab31d7f69ff7b564b394ef86b1fd890a36c5b9c43b2753765e7a08903333 🔍

10

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.55812
MD5 e31f463943b900f0c7260704ed7c4c1a 🔍
SHA1 151df232d8902f6e6960e00593871ab54243cde1 🔍
SHA256 1b383e134d7b67fa64028dfffe955e831a962eff4c450a40717dbccb52125c99 🔍
SHA3 3dab7c317159d4df76ef0a567537f9375cf1f527e3f28ee34c48dbb6cc7d5d04 🔍

11

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.0524
MD5 b45ff871ef0733b1cd99d2cb74a72611 🔍
SHA1 272c9a1c94b7b1b64a082a2d02ffbc7f4050f003 🔍
SHA256 cec763da8f20021d3601d7c8b432e7344973b4d749599044c130f7c18e3e2337 🔍
SHA3 07b1f460d7d0fb89511580e421c8a47609227a31b50c8af6fee2c7fe7fc537da 🔍

12

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.03922
MD5 3fbcfc704871b234ab78a225fdbf53dc 🔍
SHA1 9009935a0bea84abebb80a30556ab451603d852b 🔍
SHA256 4254e8e9e5ebb160326469121887ba5697df34bcc16c20a806fd094b9900eb5e 🔍
SHA3 b51bdc5e2ca3829d7d6a9d780d94b39abb04232f177582e4b193d3115b27d4fe 🔍

13

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.51013
MD5 e118cce493d7294f683299c0fa485faa 🔍
SHA1 a0151235dd22ef27b471ebb55c5d79f6a56c1590 🔍
SHA256 cf7dfc553dce48ece8995870e8d415691f189c806b39e0cd964f7d981d1eec9e 🔍
SHA3 c72bb6c80b02317cf3bed8588ea2d2412e25c8d280cadfdef5ad345177d2ad17 🔍

131

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x92
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.88162
Detected Filetype Icon file
MD5 f31e83f3983ae6f10ef166a7a686c680 🔍
SHA1 54a844e25e8e2d64e6433dddffd8aeabf71fee22 🔍
SHA256 aebb98855fa8fc3adb0efcf4888a7354e50ed0e47688f6b6ad5e18a1db6399b7 🔍
SHA3 0073688807fe663926033471fd618b74f20dbd650604fbf8289887fb22248950 🔍

132

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x30
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.55787
Detected Filetype Icon file
MD5 a419f6e7651a505e239af577695142d4 🔍
SHA1 412b2f3a498c2484af1ace3b630c98d6a90f69ea 🔍
SHA256 58fe264b30a24c9e2e8e6b25a5fdcc80f8a6f68b10588d2dbae5c702671a7f93 🔍
SHA3 cc4f5debb03071c65846618ee6ba0045c9a1e606aea102719099ebd98cabfd80 🔍

1 (#3)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x35c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.48218
MD5 738f10c3513db8c9e12d12e46cf5692b 🔍
SHA1 33c268333a2bb963956ce6d06547b8431062d686 🔍
SHA256 78e8400762969282c1af54c6e146415dd6fae1082b6cc1032a77d4da9771a7be 🔍
SHA3 50e71f7d3351b17ea2efdad6ba482bbe2bb2400a31c8c49ab77670f00d39a4b8 🔍

1 (#4)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x25c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.08604
MD5 70f43e5991f762be74486ab9e95db450 🔍
SHA1 03ed24d2147134b55674dafcb704cdd0f881c4f8 🔍
SHA256 7f8e6992fbf1cf665a8264c142be018852f194e469a1acc32ed3af53601f547a 🔍
SHA3 a7c5d8feb4b1af6500886955c0c32b1029976ef8b38d497ba0b5b2e05558fe54 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 10.1.0.1744
ProductVersion 10.1.0.1744
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
CompanyName LogMeIn, Inc.
FileDescription LMIGuardianSvc
FileVersion (#2) 10.1.1744
InternalName LMIGuardianSvc
LegalCopyright Copyright © 1998-2018 LogMeIn, Inc. All rights reserved.
OriginalFilename LMIGuardianSvc.exe
ProductName LMIGuardianSvc
ProductVersion (#2) 10.1.1744
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2018-Oct-15 10:31:50
Version 0.0
SizeofData 96
AddressOfRawData 0x143ac
PointerToRawData 0x135ac
Referenced File D:\17\guardiansvc-git\latest\main\RA\LMIGuardian\x86\LMIGuardianSvc.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2018-Oct-15 10:31:50
Version 0.0
SizeofData 20
AddressOfRawData 0x1440c
PointerToRawData 0x1360c

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2018-Oct-15 10:31:50
Version 0.0
SizeofData 940
AddressOfRawData 0x14420
PointerToRawData 0x13620

TLS Callbacks

StartAddressOfRawData 0x419000
EndAddressOfRawData 0x419008
AddressOfIndex 0x416c0c
AddressOfCallbacks 0x40e1dc
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_4BYTES
Callbacks (EMPTY)

Load Configuration

Size 0x5c
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x416008
SEHandlerTable 0x414390
SEHandlerCount 7

RICH Header

XOR Key 0x66883f42
Unmarked objects 0
241 (40116) 13
243 (40116) 133
242 (40116) 26
199 (41118) 1
ASM objects (VS2015 UPD3 build 24123) 21
C++ objects (VS2015 UPD3 build 24123) 46
C objects (VS2015 UPD3 build 24123) 19
C++ objects (23013) 2
Imports (VS2008 SP1 build 30729) 12
Total imports 172
Imports (65501) 3
C++ objects (LTCG) (VS2015 UPD3.1 build 24215) 38
C++ objects (VS2015 UPD3.1 build 24215) 4
Resource objects (VS2015 UPD3 build 24210) 1
151 1
Linker (VS2015 UPD3.1 build 24215) 1

Errors

Leave a comment

No comments yet.