d2f3a61b77168fe4b5d2f838dc4cb7539caa2a30e200168edaa191eb2ca9941a

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Sep-04 07:23:32
Detected languages English - United States
Debug artifacts winmm.pdb
CompanyName SOVEREIGN
FileDescription SOVEREIGN Steamclient Proxy
FileVersion 1.0.0.0
InternalName winmm.dll
OriginalFilename winmm.dll
ProductName SOVEREIGN
ProductVersion 1.0.0.0

Plugin Output

Info Matching compiler(s): MASM/TASM - sig1(h)
Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • GetProcAddress
  • LoadLibraryW
 Functions which can be used for anti-debugging purposes:
  • CreateToolhelp32Snapshot
 Uses Windows's Native API:
  • NtReadFile
  • NtWriteFile
 Memory manipulation functions often used by packers:
  • VirtualAlloc
  • VirtualProtect
Malicious VirusTotal score: 23/70 (Scanned on 2026-09-18 15:55:28) Alibaba: Trojan:Win32/DLLhijack.de65d0cf
Antiy-AVL: Trojan/Win32.DLLhijack
CAT-QuickHeal: Trojan.DLLhijack
CTX: dll.trojan.dllhijack
Fortinet: W32/PossibleThreat
GData: Win64.Trojan.Agent.HTCP95
Google: Detected
Ikarus: Win32.SuspectCrc
Kaspersky: Trojan.Win32.DLLhijack.anyz
Kingsoft: Win32.Trojan.DLLhijack.anyz
Lionic: Trojan.Win32.DLLhijack.4!c
MaxSecure: Trojan.Malware.704105476.susgen
McAfeeD: ti!D2F3A61B7716
Microsoft: Trojan:Win32/Pomal!rfn
Rising: Trojan.DLLhijack!8.1B50 (CLOUD)
Skyhigh: BehavesLike.Win64.Injector.ch
Sophos: Mal/Generic-S
Symantec: Trojan.Gen.MBT
TrellixENS: Artemis!B05F6511D078
TrendMicro: Trojan.Win32.DLLHIJACK.USBLIB26
TrendMicro-HouseCall: Trojan.Win32.DLLHIJACK.USBLIB26
Varist: W64/ABTrojan.IAGW-7503
alibabacloud: Trojan:Win/Pomal.Gen

Hashes

MD5 b05f6511d078575bbcfe2a6a9e10ab7a 🔍
SHA1 3ffda1d5516088a9845b25063a8fc3fee1809d87 🔍
SHA256 d2f3a61b77168fe4b5d2f838dc4cb7539caa2a30e200168edaa191eb2ca9941a 🔍
SHA3 da83cbb64740087f8d8c44e0eb204a3c2d60b44443a7c224a3840ab0349a7a50 🔍
SSDeep 3072:aPIzymrvVAOvtrxMJSeW3/SZG5byG6SNsGX1ye2:awumLV1rxMUeW3/j5SqX1ye 🔍
Imports Hash a4865ebe91c3aca7d260a045144b4e50 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x100

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2026-Sep-04 07:23:32
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x1aa00
SizeOfInitializedData 0xc200
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000019F40 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x180000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x2b000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 9bc15a77116f342f2f2e5513ea9ce680 🔍
SHA1 dc90754410a1de363a61b403fce05de7629b3a51 🔍
SHA256 8af5de78e4c8254e87cd084f43e726c43850fe691ad97110b00dd62019fbcd68 🔍
SHA3 bf9ae362de906bc30dbca5973b479c6167119a2e07843e67051d7af158d0c832 🔍
VirtualSize 0x1a9a8
VirtualAddress 0x1000
SizeOfRawData 0x1aa00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.45638

.rdata

MD5 8e67cc7248616214e78653abd1d643cf 🔍
SHA1 5084f8adb2b43a7a026923622ec72301f3ba9953 🔍
SHA256 259d6cb9869b1693af36f21bfed9f8af1f2dcd2456f7192b34b74e4a6c053060 🔍
SHA3 acf667860f39d6c27b0bb6379f316b6ec7890cddad8f83b3e2df468349ec550e 🔍
VirtualSize 0x9acc
VirtualAddress 0x1c000
SizeOfRawData 0x9c00
PointerToRawData 0x1ae00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.75873

.data

MD5 559cded013495ed6e82f4a30c201ff8c 🔍
SHA1 3e6e47a492343ee8c04d10c28abf6e54bce8aa04 🔍
SHA256 0710818473aef59b6cb93be13f4de2b2c88de5f297ed6a7adb71952a61242f4c 🔍
SHA3 9fd24b87eff9d7d9f44b80c298664d4cec10b79cde2b4f90e054bc11d48a3677 🔍
VirtualSize 0x4f0
VirtualAddress 0x26000
SizeOfRawData 0x400
PointerToRawData 0x24a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.48507

.pdata

MD5 e8b5c9d986d9da5eeeb318a490a3ad7c 🔍
SHA1 85ea64e456ce4ad181ca2915985b83ce99632600 🔍
SHA256 0042effaf5f3d9aee09fab9243067eda9dafe86e695029dde576b6bd4dfe0afa 🔍
SHA3 12e5b879bf498084f733647dcf6e3aee6f5ddb919810312f8fd99efac456efb7 🔍
VirtualSize 0x1644
VirtualAddress 0x27000
SizeOfRawData 0x1800
PointerToRawData 0x24e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.84909

.rsrc

MD5 c311774f4742a44d0aed183cad73cb67 🔍
SHA1 83312a2729c65f2c3a0d37ef2f2d2cd1387b43ea 🔍
SHA256 43db0468a2f2f111324ad523463e3cc4b9376ceca6b76edf5624e2fc6fcda2c2 🔍
SHA3 85cbc439bca03e6e56f49159842d9ecdb852f9f90a4d75aff37a8eb7b7f38997 🔍
VirtualSize 0x2d8
VirtualAddress 0x29000
SizeOfRawData 0x400
PointerToRawData 0x26600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 2.37229

.reloc

MD5 413969264b7efedd545263184e15cefb 🔍
SHA1 8274e3fd35327c591d5a34d0ca6ea5a029411417 🔍
SHA256 f89a77dc830fc9a68cb218bc3419d2be2e2b9692e2d077fb324dfb3117905d84 🔍
SHA3 1edaa20f0bee36d9169e186b11a44f1cd924c83f6fb0a9638837837935ac929f 🔍
VirtualSize 0x204
VirtualAddress 0x2a000
SizeOfRawData 0x400
PointerToRawData 0x26a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 3.39071

Imports

api-ms-win-core-synch-l1-2-0.dll WakeByAddressSingle
WakeByAddressAll
WaitOnAddress
KERNEL32.dll Sleep
InitializeSListHead
GetSystemTimeAsFileTime
GetModuleHandleA
GetModuleFileNameW
GetPrivateProfileStringA
CreateThread
CloseHandle
VirtualAlloc
GetProcessHeap
HeapFree
HeapReAlloc
GetLastError
SetLastError
GetEnvironmentVariableW
GetCurrentThreadId
GetCurrentDirectoryW
RtlCaptureContext
GetCurrentProcess
RtlLookupFunctionEntry
WaitForSingleObjectEx
LoadLibraryA
GetProcAddress
lstrlenW
GetCurrentProcessId
CreateMutexA
ReleaseMutex
WideCharToMultiByte
RtlVirtualUnwind
GetStdHandle
GetConsoleMode
GetConsoleOutputCP
WaitForSingleObject
MultiByteToWideChar
WriteConsoleW
HeapAlloc
GetSystemDirectoryA
LoadLibraryW
GetFullPathNameW
CreateFileW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileAttributesW
HeapCreate
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualProtect
CreateToolhelp32Snapshot
Thread32First
Thread32Next
GetSystemInfo
VirtualFree
VirtualQuery
QueryPerformanceCounter
ntdll.dll NtReadFile
RtlNtStatusToDosError
NtWriteFile
VCRUNTIME140.dll __std_type_info_destroy_list
memcpy
memcmp
__CxxFrameHandler3
memset
__C_specific_handler
api-ms-win-crt-runtime-l1-1-0.dll _initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
_initterm

Delayed Imports

CloseDriver

Ordinal 1
Address 0x1000

DefDriverProc

Ordinal 2
Address 0x1043

DllMain

Ordinal 3
Address 0x1092

DriverCallback

Ordinal 4
Address 0x19ee

DrvGetModuleHandle

Ordinal 5
Address 0x1a36

GetDriverModuleHandle

Ordinal 6
Address 0x1a67

OpenDriver

Ordinal 7
Address 0x1a98

PlaySound

Ordinal 8
Address 0x1adb

PlaySoundA

Ordinal 9
Address 0x1b1e

PlaySoundW

Ordinal 10
Address 0x1b61

SOVEREIGN_LoadRealSteamclient

Ordinal 11
Address 0x14cbc

SendDriverMessage

Ordinal 12
Address 0x1ba4

WOWAppExit

Ordinal 13
Address 0x1bf1

auxGetDevCapsA

Ordinal 14
Address 0x1c22

auxGetDevCapsW

Ordinal 15
Address 0x1c65

auxGetNumDevs

Ordinal 16
Address 0x1ca8

auxGetVolume

Ordinal 17
Address 0x1cd0

auxOutMessage

Ordinal 18
Address 0x1d08

auxSetVolume

Ordinal 19
Address 0x1d50

joyConfigChanged

Ordinal 20
Address 0x1d86

joyGetDevCapsA

Ordinal 21
Address 0x1db5

joyGetDevCapsW

Ordinal 22
Address 0x1df8

joyGetNumDevs

Ordinal 23
Address 0x1e3b

joyGetPos

Ordinal 24
Address 0x1e63

joyGetPosEx

Ordinal 25
Address 0x1e9b

joyGetThreshold

Ordinal 26
Address 0x1ed3

joyReleaseCapture

Ordinal 27
Address 0x1f0b

joySetCapture

Ordinal 28
Address 0x1f3a

joySetThreshold

Ordinal 29
Address 0x1f87

mciDriverNotify

Ordinal 30
Address 0x1fbd

mciDriverYield

Ordinal 31
Address 0x1ffe

mciExecute

Ordinal 32
Address 0x202d

mciFreeCommandResource

Ordinal 33
Address 0x205e

mciGetCreatorTask

Ordinal 34
Address 0x208f

mciGetDeviceIDA

Ordinal 35
Address 0x20be

mciGetDeviceIDFromElementIDA

Ordinal 36
Address 0x20ef

mciGetDeviceIDFromElementIDW

Ordinal 37
Address 0x2127

mciGetDeviceIDW

Ordinal 38
Address 0x215f

mciGetDriverData

Ordinal 39
Address 0x2190

mciGetErrorStringA

Ordinal 40
Address 0x21bf

mciGetErrorStringW

Ordinal 41
Address 0x2200

mciGetYieldProc

Ordinal 42
Address 0x2241

mciLoadCommandResource

Ordinal 43
Address 0x2279

mciSendCommandA

Ordinal 44
Address 0x22bc

mciSendCommandW

Ordinal 45
Address 0x2304

mciSendStringA

Ordinal 46
Address 0x234c

mciSendStringW

Ordinal 47
Address 0x239b

mciSetDriverData

Ordinal 48
Address 0x23ea

mciSetYieldProc

Ordinal 49
Address 0x2422

midiConnect

Ordinal 50
Address 0x2463

midiDisconnect

Ordinal 51
Address 0x24a6

midiInAddBuffer

Ordinal 52
Address 0x24e9

midiInClose

Ordinal 53
Address 0x252c

midiInGetDevCapsA

Ordinal 54
Address 0x255d

midiInGetDevCapsW

Ordinal 55
Address 0x25a0

midiInGetErrorTextA

Ordinal 56
Address 0x25e3

midiInGetErrorTextW

Ordinal 57
Address 0x2624

midiInGetID

Ordinal 58
Address 0x2665

midiInGetNumDevs

Ordinal 59
Address 0x269f

midiInMessage

Ordinal 60
Address 0x26c7

midiInOpen

Ordinal 61
Address 0x2714

midiInPrepareHeader

Ordinal 62
Address 0x2761

midiInReset

Ordinal 63
Address 0x27a4

midiInStart

Ordinal 64
Address 0x27d5

midiInStop

Ordinal 65
Address 0x2806

midiInUnprepareHeader

Ordinal 66
Address 0x2837

midiOutCacheDrumPatches

Ordinal 67
Address 0x287a

midiOutCachePatches

Ordinal 68
Address 0x28c7

midiOutClose

Ordinal 69
Address 0x2914

midiOutGetDevCapsA

Ordinal 70
Address 0x2945

midiOutGetDevCapsW

Ordinal 71
Address 0x2988

midiOutGetErrorTextA

Ordinal 72
Address 0x29cb

midiOutGetErrorTextW

Ordinal 73
Address 0x2a0c

midiOutGetID

Ordinal 74
Address 0x2a4d

midiOutGetNumDevs

Ordinal 75
Address 0x2a87

midiOutGetVolume

Ordinal 76
Address 0x2aaf

midiOutLongMsg

Ordinal 77
Address 0x2ae9

midiOutMessage

Ordinal 78
Address 0x2b2c

midiOutOpen

Ordinal 79
Address 0x2b79

midiOutPrepareHeader

Ordinal 80
Address 0x2bc6

midiOutReset

Ordinal 81
Address 0x2c09

midiOutSetVolume

Ordinal 82
Address 0x2c3a

midiOutShortMsg

Ordinal 83
Address 0x2c72

midiOutUnprepareHeader

Ordinal 84
Address 0x2caa

midiStreamClose

Ordinal 85
Address 0x2ced

midiStreamOpen

Ordinal 86
Address 0x2d1e

midiStreamOut

Ordinal 87
Address 0x2d6d

midiStreamPause

Ordinal 88
Address 0x2db0

midiStreamPosition

Ordinal 89
Address 0x2de1

midiStreamProperty

Ordinal 90
Address 0x2e24

midiStreamRestart

Ordinal 91
Address 0x2e67

midiStreamStop

Ordinal 92
Address 0x2e98

mixerClose

Ordinal 93
Address 0x2ec9

mixerGetControlDetailsA

Ordinal 94
Address 0x2efa

mixerGetControlDetailsW

Ordinal 95
Address 0x2f3d

mixerGetDevCapsA

Ordinal 96
Address 0x2f80

mixerGetDevCapsW

Ordinal 97
Address 0x2fc3

mixerGetID

Ordinal 98
Address 0x3006

mixerGetLineControlsA

Ordinal 99
Address 0x3040

mixerGetLineControlsW

Ordinal 100
Address 0x3083

mixerGetLineInfoA

Ordinal 101
Address 0x30c6

mixerGetLineInfoW

Ordinal 102
Address 0x3109

mixerGetNumDevs

Ordinal 103
Address 0x314c

mixerMessage

Ordinal 104
Address 0x3174

mixerOpen

Ordinal 105
Address 0x31c1

mixerSetControlDetails

Ordinal 106
Address 0x320e

mmioAdvance

Ordinal 107
Address 0x3251

mmioAscend

Ordinal 108
Address 0x3294

mmioClose

Ordinal 109
Address 0x32d7

mmioCreateChunk

Ordinal 110
Address 0x330f

mmioDescend

Ordinal 111
Address 0x3352

mmioFlush

Ordinal 112
Address 0x33a1

mmioGetInfo

Ordinal 113
Address 0x33d9

mmioInstallIOProcA

Ordinal 114
Address 0x341c

mmioInstallIOProcW

Ordinal 115
Address 0x345d

mmioOpenA

Ordinal 116
Address 0x349e

mmioOpenW

Ordinal 117
Address 0x34e1

mmioRead

Ordinal 118
Address 0x3524

mmioRenameA

Ordinal 119
Address 0x3567

mmioRenameW

Ordinal 120
Address 0x35b6

mmioSeek

Ordinal 121
Address 0x3605

mmioSendMessage

Ordinal 122
Address 0x3646

mmioSetBuffer

Ordinal 123
Address 0x3693

mmioSetInfo

Ordinal 124
Address 0x36e2

mmioStringToFOURCCA

Ordinal 125
Address 0x3725

mmioStringToFOURCCW

Ordinal 126
Address 0x375d

mmioWrite

Ordinal 127
Address 0x3795

mmsystemGetVersion

Ordinal 128
Address 0x37d8

sndPlaySoundA

Ordinal 129
Address 0x3800

sndPlaySoundW

Ordinal 130
Address 0x3838

timeBeginPeriod

Ordinal 131
Address 0x3870

timeEndPeriod

Ordinal 132
Address 0x389f

timeGetDevCaps

Ordinal 133
Address 0x38ce

timeGetSystemTime

Ordinal 134
Address 0x3906

timeGetTime

Ordinal 135
Address 0x393e

timeKillEvent

Ordinal 136
Address 0x3966

timeSetEvent

Ordinal 137
Address 0x3995

waveInAddBuffer

Ordinal 138
Address 0x39dd

waveInClose

Ordinal 139
Address 0x3a20

waveInGetDevCapsA

Ordinal 140
Address 0x3a51

waveInGetDevCapsW

Ordinal 141
Address 0x3a94

waveInGetErrorTextA

Ordinal 142
Address 0x3ad7

waveInGetErrorTextW

Ordinal 143
Address 0x3b18

waveInGetID

Ordinal 144
Address 0x3b59

waveInGetNumDevs

Ordinal 145
Address 0x3b93

waveInGetPosition

Ordinal 146
Address 0x3bbb

waveInMessage

Ordinal 147
Address 0x3bfe

waveInOpen

Ordinal 148
Address 0x3c4b

waveInPrepareHeader

Ordinal 149
Address 0x3c98

waveInReset

Ordinal 150
Address 0x3cdb

waveInStart

Ordinal 151
Address 0x3d0c

waveInStop

Ordinal 152
Address 0x3d3d

waveInUnprepareHeader

Ordinal 153
Address 0x3d6e

waveOutBreakLoop

Ordinal 154
Address 0x3db1

waveOutClose

Ordinal 155
Address 0x3de2

waveOutGetDevCapsA

Ordinal 156
Address 0x3e13

waveOutGetDevCapsW

Ordinal 157
Address 0x3e56

waveOutGetErrorTextA

Ordinal 158
Address 0x3e99

waveOutGetErrorTextW

Ordinal 159
Address 0x3eda

waveOutGetID

Ordinal 160
Address 0x3f1b

waveOutGetNumDevs

Ordinal 161
Address 0x3f55

waveOutGetPitch

Ordinal 162
Address 0x3f7d

waveOutGetPlaybackRate

Ordinal 163
Address 0x3fb7

waveOutGetPosition

Ordinal 164
Address 0x3ff1

waveOutGetVolume

Ordinal 165
Address 0x4034

waveOutMessage

Ordinal 166
Address 0x406e

waveOutOpen

Ordinal 167
Address 0x40bb

waveOutPause

Ordinal 168
Address 0x4108

waveOutPrepareHeader

Ordinal 169
Address 0x4139

waveOutReset

Ordinal 170
Address 0x417c

waveOutRestart

Ordinal 171
Address 0x41ad

waveOutSetPitch

Ordinal 172
Address 0x41de

waveOutSetPlaybackRate

Ordinal 173
Address 0x4216

waveOutSetVolume

Ordinal 174
Address 0x424e

waveOutUnprepareHeader

Ordinal 175
Address 0x4286

waveOutWrite

Ordinal 176
Address 0x42c9

1

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x278
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.24769
MD5 27a456ee2047b75e2e104255f969b316 🔍
SHA1 7dd2f1f82e09604320d84fb77d2c9ee0fce3a401 🔍
SHA256 a1a980a51b8a9d1c178bfacf4566c49428e457d839f5f7abc4b90c9a7bf8c9b8 🔍
SHA3 2d08bf1fb72f46deed6c521f6af8b1c02bf5d08b1fa6b034e08828efe1ff93b8 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 0.1.0.0
ProductVersion 0.1.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
FileType VFT_APP
Language UNKNOWN
CompanyName SOVEREIGN
FileDescription SOVEREIGN Steamclient Proxy
FileVersion (#2) 1.0.0.0
InternalName winmm.dll
OriginalFilename winmm.dll
ProductName SOVEREIGN
ProductVersion (#2) 1.0.0.0
Resource LangID English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2026-Sep-04 07:23:32
Version 0.0
SizeofData 34
AddressOfRawData 0x22404
PointerToRawData 0x21204
Referenced File winmm.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2026-Sep-04 07:23:32
Version 0.0
SizeofData 20
AddressOfRawData 0x22428
PointerToRawData 0x21228

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Sep-04 07:23:32
Version 0.0
SizeofData 752
AddressOfRawData 0x2243c
PointerToRawData 0x2123c

TLS Callbacks

StartAddressOfRawData 0x180022750
EndAddressOfRawData 0x180022770
AddressOfIndex 0x180026460
AddressOfCallbacks 0x18001c2f8
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_8BYTES
Callbacks (EMPTY)

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x1800262c0

RICH Header

XOR Key 0x329e6fea
Unmarked objects 0
Imports (VS2008 SP1 build 30729) 2
Imports (35721) 2
ASM objects (35721) 4
C objects (35721) 8
C++ objects (35721) 12
Imports (33145) 5
Total imports 88
C objects (36256) 4
Unmarked objects (#2) 4
Exports (36256) 1
Resource objects (36256) 1
Linker (36256) 1

Errors

Leave a comment

No comments yet.