Manalyze report for b13f23643fddce3f41b6908a00051b6688788668c81d698994c140bf6290c2d6

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
Compilation Date	2024-May-28 09:26:28
Detected languages	English - United States
Debug artifacts	C:\Users\Lenovo\Desktop\Developer\valorant-example-external-main\x64\Release\ValorantExternalFree.pdb

Plugin Output

Suspicious	Strings found in the binary may indicate undesirable behavior:	`May have dropper capabilities: CurrentControlSet\Services` `Contains another PE executable: This program cannot be run in DOS mode.` Contains domain names: 2010-aia.verisign.com 2010-crl.verisign.com aia.verisign.com aia.ws.symantec.com crl.microsoft.com crl.thawte.com crl.verisign.com crl.ws.symantec.com csc3-2010-aia.verisign.com csc3-2010-crl.verisign.com http://crl.microsoft.com http://crl.microsoft.com/pki/crl/products/MicrosoftCodeVerifRoot.crl0 http://crl.thawte.com http://crl.thawte.com/ThawteTimestampingCA.crl0 http://crl.verisign.com http://crl.verisign.com/pca3-g5.crl04 http://csc3-2010-aia.verisign.com http://csc3-2010-aia.verisign.com/CSC3-2010.cer0 http://csc3-2010-crl.verisign.com http://csc3-2010-crl.verisign.com/CSC3-2010.crl0D http://logo.verisign.com http://logo.verisign.com/vslogo.gif04 http://ocsp.thawte.com0 http://ocsp.verisign.com0 http://ts-aia.ws.symantec.com http://ts-aia.ws.symantec.com/tss-ca-g2.cer0 http://ts-crl.ws.symantec.com http://ts-crl.ws.symantec.com/tss-ca-g2.crl0 http://ts-ocsp.ws.symantec.com07 https://www.verisign.com https://www.verisign.com/cps0 https://www.verisign.com/rpa https://www.verisign.com/rpa0 logo.verisign.com microsoft.com symantec.com thawte.com ts-aia.ws.symantec.com ts-crl.ws.symantec.com verisign.com ws.symantec.com www.verisign.com
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to CRC32` `Uses constants related to SHA1` `Uses known Mersenne Twister constants`
Malicious	The PE contains functions mostly used by malware.	`[!] The program may be hiding some of its imports: LoadLibraryA GetProcAddress` `Functions which can be used for anti-debugging purposes: CreateToolhelp32Snapshot FindWindowA NtQuerySystemInformation` `Code injection capabilities (PowerLoader): GetWindowLongA FindWindowA` `Can access the registry: RegOpenKeyW RegCreateKeyW RegDeleteKeyW RegCloseKey RegSetKeyValueW` `Possibly launches other programs: system` `Can create temporary files: CreateFileW GetTempPathW` `Uses functions commonly found in keyloggers: GetAsyncKeyState GetForegroundWindow` `Manipulates other processes: Process32First Process32Next` `Reads the contents of the clipboard: GetClipboardData`
Malicious	VirusTotal score: 55/72 (Scanned on 2026-02-09 16:00:59)	`ALYac: Application.GenericFCA.31` `APEX: Malicious` `AVG: Win64:MalwareX-gen [Trj]` `AhnLab-V3: Trojan/Win.Generic.R657512` `Alibaba: HackTool:Win32/GameHack_AGen.5bf6c23e` `Antiy-AVL: HackTool/Win64.Gamehack` `Arcabit: Application.GenericFCA.31` `Avast: Win64:MalwareX-gen [Trj]` `Avira: HEUR/AGEN.1371957` `BitDefender: Application.GenericFCA.31` `Bkav: W64.AIDetectMalware` `CTX: exe.hacktool.agen` `CrowdStrike: win/malicious_confidence_100% (W)` `Cylance: Unsafe` `Cynet: Malicious (score: 99)` `DeepInstinct: MALICIOUS` `DrWeb: Tool.VulnDriver.22` `ESET-NOD32: Win64/HackTool.GameHack_AGen.O trojan` `Elastic: malicious (high confidence)` `Emsisoft: Application.GenericFCA.31 (B)` `F-Secure: Heuristic.HEUR/AGEN.1371957` `Fortinet: W64/GameHack_AGen.O!tr` `GData: Application.GenericFCA.31` `Google: Detected` `Ikarus: Trojan-Downloader.Win64.Agent` `Jiangmin: HackTool.Gamehack.ajsa` `K7AntiVirus: Hacktool ( 005cdf0d1 )` `K7GW: Hacktool ( 005cdf0d1 )` `Kaspersky: HackTool.Win32.Gamehack.dfgb` `Kingsoft: Win32.HackTool.GameHack.a` `Lionic: Hacktool.Win32.GameHack.3!c` `Malwarebytes: Malware.AI.1817745936` `MaxSecure: Trojan.Malware.273257511.susgen` `McAfeeD: Trojan:Win/Vulndriver.EAG` `MicroWorld-eScan: Application.GenericFCA.31` `Microsoft: Trojan:Win32/Casdet!rfn` `NANO-Antivirus: Trojan.Win64.Gamehack.kvqgjt` `Paloalto: generic.ml` `Panda: Trj/GdSda.A` `Rising: HackTool.GameHack!8.59E (TFE:5:oxM8JQn3x8U)` `Sangfor: Virus.Win32.Save.a` `SentinelOne: Static AI - Malicious PE` `Skyhigh: BehavesLike.Win64.Injector.ch` `Sophos: Mal/Generic-S` `Symantec: ML.Attribute.HighConfidence` `TACHYON: Trojan/W64.Agent.827904` `Tencent: Malware.Win32.Gencirc.1414e364` `TrellixENS: Artemis!4AC882EBDBC1` `VIPRE: Application.GenericFCA.31` `Varist: W64/Gamehack.U` `VirIT: Trojan.Win64.Agent.GZJ` `Xcitium: Malware@#w1w17bkpu3tv` `Yandex: Riskware.HackTool!0r/EMyZdn/k` `Zillya: Tool.GameHackAGen.Win64.412` `huorong: HackTool/DriverLoader.a`

Hashes

MD5	`4ac882ebdbc1431cdd3ab45e1712ada1`
SHA1	`b871304fd060b700fd66ce0c87014ec955d12979`
SHA256	`b13f23643fddce3f41b6908a00051b6688788668c81d698994c140bf6290c2d6`
SHA3	`c614fd5e3cc593dd4eded49f78b6ee3008c1e02b6884d0ab1cd33833bfa00d1c`
SSDeep	`24576:65MOrT+F0sIE9JqsC6mVFyCsffzMS6pcsP9Qtce0TBs/lPsoCyEbDb7Br5oANn9:+bjnS`
Imports Hash	`5397e91e3bea53fd788a5ca1224e7738`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x100`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`6`
TimeDateStamp	2024-May-28 09:26:28
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0xaa800`
SizeOfInitializedData	`0x21200`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x00000000000A996C (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x140000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0xd0000`
SizeOfHeaders	`0x400`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`da9ea3c5711fd7abb0d6fd4d1c1b6503`
SHA1	`4f8c69266cc21fb836c4d20402ae79de269bb67a`
SHA256	`88cbc87d584f87310f7f419ca90ab138ff85b1e2cedb76fd5a7ed6bbb7984330`
SHA3	`5adbdc0c567fb388470132ad31af370749e9bcfc3ac4c0b17376a2d03e765513`
VirtualSize	`0xaa6d0`
VirtualAddress	`0x1000`
SizeOfRawData	`0xaa800`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.00912`

.rdata

MD5	`a2e6c83f6781d83b6802587b50738e2f`
SHA1	`e4e029f002d6eec08ff424308159d8579473bf6b`
SHA256	`1def3475672964e58dd33a7e76cbfaf01e6fc85961d5177dd3b586084251e4c7`
SHA3	`ab667faf5165c62f7c461c0d2d380a27f9f4ab6066b8dbb1e039c153558d5e7d`
VirtualSize	`0x1a872`
VirtualAddress	`0xac000`
SizeOfRawData	`0x1aa00`
PointerToRawData	`0xaac00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.34277`

.data

MD5	`d085ad231fee77f5c3f2c40c9800d0b9`
SHA1	`651f092775a5655e603c6da95d99d9e6a50c8d10`
SHA256	`ea6c05eb857d57296e5dc9d2981bb7871c967af67ecf2c3f26e37a87efe01eef`
SHA3	`d767b5525d2fe840fd64e3aff1675b91a78c8e26f6c2daf859843dd0c4c23e84`
VirtualSize	`0x2580`
VirtualAddress	`0xc7000`
SizeOfRawData	`0xa00`
PointerToRawData	`0xc5600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`2.42586`

.pdata

MD5	`f3471457149cd37bf2ffbad18fe744f3`
SHA1	`371abbe53422ed75389e836854d66a1aa9261306`
SHA256	`b033f07ddcfb31c904847710fadbc8021a97be4d424d10a5281e72f66f065ad5`
SHA3	`96bfc49eb6e0290b9fdbdca948cae6e636dcc306e8cd648b9ca593b36267d1a0`
VirtualSize	`0x3b1c`
VirtualAddress	`0xca000`
SizeOfRawData	`0x3c00`
PointerToRawData	`0xc6000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.94633`

.rsrc

MD5	`a9a0e1632294f4e90a8023a2a65f1c55`
SHA1	`6ab5865435fe0442fb4b9ffa9382a5d60bbd9f6d`
SHA256	`c8dd31d36dffc1ff5e02454698980d5588098df41b01da7b241f9e4cafb0ca3d`
SHA3	`a63f1bb7896c137bab5e9cdfbe5de61725c4b5161379b5e491d96b428c881416`
VirtualSize	`0x1e8`
VirtualAddress	`0xce000`
SizeOfRawData	`0x200`
PointerToRawData	`0xc9c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.77204`

.reloc

MD5	`f4fb32d396b93af889eee4d29c3d80f4`
SHA1	`f9c17956de4cab64849c50681e08156b6a7adfed`
SHA256	`a2705677d7fecc60b336c9e97fcea0e6c85436c7168737e3506744c2a60b3a21`
SHA3	`81f1462f585316c793a8123d4c249bafb2ceb6169584e65d4b5c7cbe69713b2a`
VirtualSize	`0x3d8`
VirtualAddress	`0xcf000`
SizeOfRawData	`0x400`
PointerToRawData	`0xc9e00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.11106`

Imports

KERNEL32.dll	`InitializeCriticalSectionEx` `CreateFileW` `GetCurrentThreadId` `GetLastError` `CloseHandle` `DeleteCriticalSection` `GetCurrentProcessId` `GetTempPathW` `Process32First` `SetLastError` `SetConsoleTitleA` `CreateToolhelp32Snapshot` `Sleep` `Process32Next` `CreateThread` `DeviceIoControl` `OutputDebugStringW` `InitializeSListHead` `GetSystemTimeAsFileTime` `GetModuleHandleW` `IsDebuggerPresent` `SleepConditionVariableSRW` `WakeAllConditionVariable` `AcquireSRWLockExclusive` `ReleaseSRWLockExclusive` `IsProcessorFeaturePresent` `TerminateProcess` `GetCurrentProcess` `SetUnhandledExceptionFilter` `UnhandledExceptionFilter` `VirtualAlloc` `VirtualFree` `QueryPerformanceCounter` `LoadLibraryA` `GetModuleHandleA` `GlobalUnlock` `WideCharToMultiByte` `GlobalLock` `GlobalFree` `GlobalAlloc` `FreeLibrary` `GetProcAddress` `QueryPerformanceFrequency` `MultiByteToWideChar`
USER32.dll	`SetCapture` `SetCursor` `GetClientRect` `IsWindowUnicode` `GetWindowThreadProcessId` `DispatchMessageA` `GetWindowRect` `DestroyWindow` `SetWindowPos` `GetSystemMetrics` `ShowWindow` `GetAsyncKeyState` `SetWindowLongA` `GetWindowLongA` `EnumWindows` `DefWindowProcA` `CreateWindowExA` `TranslateMessage` `PeekMessageA` `PostQuitMessage` `GetDesktopWindow` `FindWindowA` `RegisterClassExA` `UpdateWindow` `SetForegroundWindow` `UnregisterClassA` `GetKeyState` `OpenClipboard` `LoadCursorA` `ScreenToClient` `GetCapture` `ClientToScreen` `TrackMouseEvent` `ReleaseCapture` `GetForegroundWindow` `SetCursorPos` `GetCursorPos` `CloseClipboard` `EmptyClipboard` `GetClipboardData` `SetClipboardData`
ADVAPI32.dll	`RegOpenKeyW` `RegCreateKeyW` `RegDeleteKeyW` `RegCloseKey` `RegSetKeyValueW`
IMM32.dll	`ImmSetCompositionWindow` `ImmReleaseContext` `ImmGetContext` `ImmSetCandidateWindow`
D3DCOMPILER_47.dll	`D3DCompile`
dwmapi.dll	`DwmExtendFrameIntoClientArea`
MSVCP140.dll	`_Query_perf_frequency` `?good@ios_base@std@@QEBA_NXZ` `_Query_perf_counter` `?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A` `?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z` `?_Random_device@std@@YAIXZ` `??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z` `?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z` `?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ` `??1_Lockit@std@@QEAA@XZ` `??0_Lockit@std@@QEAA@H@Z` `?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ` `?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A` `?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z` `?_Xlength_error@std@@YAXPEBD@Z` `?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z` `?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z` `??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ` `?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ` `?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ` `?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z` `?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z` `?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z` `??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ` `??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z` `??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ` `?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ` `?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z` `?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z` `??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ` `??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ` `?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z` `??7ios_base@std@@QEBA_NXZ` `?always_noconv@codecvt_base@std@@QEBA_NXZ` `??Bid@locale@std@@QEAA_KXZ` `?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A` `?uncaught_exception@std@@YA_NXZ` `?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ` `?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z` `?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z` `?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z`
ntdll.dll	`RtlInitUnicodeString` `RtlCaptureContext` `RtlLookupFunctionEntry` `RtlVirtualUnwind` `NtQuerySystemInformation`
d3d11.dll	`D3D11CreateDeviceAndSwapChain`
VCRUNTIME140_1.dll	`__CxxFrameHandler4`
VCRUNTIME140.dll	`memmove` `memset` `_CxxThrowException` `__std_terminate` `strstr` `memcpy` `memcmp` `memchr` `__current_exception_context` `__current_exception` `__C_specific_handler` `__std_exception_copy` `__std_exception_destroy`
api-ms-win-crt-stdio-l1-1-0.dll	`__acrt_iob_func` `__p__commode` `_set_fmode` `__stdio_common_vsnprintf_s` `fflush` `ftell` `__stdio_common_vsprintf` `__stdio_common_vsprintf_s` `_get_stream_buffer_pointers` `_fseeki64` `fsetpos` `ungetc` `fclose` `fseek` `setvbuf` `fgetpos` `fgetc` `__stdio_common_vfprintf` `fwrite` `fputc` `_wfopen` `__stdio_common_vsscanf` `fread`
api-ms-win-crt-utility-l1-1-0.dll	`srand` `rand` `qsort`
api-ms-win-crt-string-l1-1-0.dll	`strcpy_s` `strncmp` `_stricmp` `strncpy` `strcmp`
api-ms-win-crt-heap-l1-1-0.dll	`malloc` `free` `_set_new_mode` `_callnewh`
api-ms-win-crt-convert-l1-1-0.dll	`atof`
api-ms-win-crt-filesystem-l1-1-0.dll	`_unlock_file` `_lock_file` `_wremove`
api-ms-win-crt-time-l1-1-0.dll	`_time64`
api-ms-win-crt-runtime-l1-1-0.dll	`_initialize_narrow_environment` `_initialize_onexit_table` `_register_onexit_function` `_crt_atexit` `_cexit` `_seh_filter_exe` `_set_app_type` `terminate` `_get_initial_narrow_environment` `_initterm` `_initterm_e` `_exit` `system` `__p___argc` `__p___argv` `_c_exit` `_register_thread_local_exe_atexit_callback` `_configure_narrow_argv` `exit` `_invalid_parameter_noinfo_noreturn`
api-ms-win-crt-math-l1-1-0.dll	`ceilf` `atan2f` `fmodf` `asinf` `cosf` `atanf` `sqrtf` `acosf` `sinf` `__setusermatherr` `powf` `tanf`
api-ms-win-crt-locale-l1-1-0.dll	`_configthreadlocale`

Delayed Imports

1

Type	`RT_MANIFEST`
Language	English - United States
Codepage	UNKNOWN
Size	`0x188`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.89623`
MD5	`b8e76ddb52d0eb41e972599ff3ca431b`
SHA1	`fc12d7ad112ddabfcd8f82f290d84e637a4d62f8`
SHA256	`165c5c883fd4fd36758bcba6baf2faffb77d2f4872ffd5ee918a16f91de5a8a8`
SHA3	`37f83338b28cb102b1b14f27280ba1aa3fffb17f7bf165cb7b675b7e8eb7cddd`

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2024-May-28 09:26:28
Version	`0.0`
SizeofData	`126`
AddressOfRawData	`0xbd7bc`
PointerToRawData	`0xbc3bc`
Referenced File	C:\Users\Lenovo\Desktop\Developer\valorant-example-external-main\x64\Release\ValorantExternalFree.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics	`0`
TimeDateStamp	2024-May-28 09:26:28
Version	`0.0`
SizeofData	`20`
AddressOfRawData	`0xbd83c`
PointerToRawData	`0xbc43c`

IMAGE_DEBUG_TYPE_POGO

Characteristics	`0`
TimeDateStamp	2024-May-28 09:26:28
Version	`0.0`
SizeofData	`912`
AddressOfRawData	`0xbd850`
PointerToRawData	`0xbc450`

IMAGE_DEBUG_TYPE_ILTCG

Characteristics	`0`
TimeDateStamp	2024-May-28 09:26:28
Version	`0.0`
SizeofData	`0`
AddressOfRawData	`0`
PointerToRawData	`0`

TLS Callbacks

StartAddressOfRawData	`0x1400bdc00`
EndAddressOfRawData	`0x1400bdc08`
AddressOfIndex	`0x1400c7e18`
AddressOfCallbacks	`0x1400ac8c0`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_ALIGN_4BYTES`
Callbacks	`(EMPTY)`

Load Configuration

Size	`0x140`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x1400c7040`

RICH Header

XOR Key	`0x72916314`
Unmarked objects	`0`
Imports (VS2008 SP1 build 30729)	`20`
Imports (33218)	`6`
C++ objects (33218)	`36`
C objects (33218)	`10`
ASM objects (33218)	`4`
Imports (30795)	`19`
Total imports	`312`
C++ objects (LTCG) (33523)	`13`
Resource objects (33523)	`1`
Linker (33523)	`1`

Errors

Leave a comment

No comments yet.