| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2026-Sep-27 00:33:19 |
| Detected languages |
English - United States
|
| TLS Callbacks | 2 callback(s) detected. |
| Debug artifacts |
D:\a\cb-launcher\cb-launcher\build\bin\x64\Release\cb-launcher.pdb
|
| CompanyName | CB Servers |
| FileDescription | CB Servers Launcher |
| FileVersion | 3.5.2.343 |
| InternalName | launcher |
| LegalCopyright | Copyright (C) 2026 CB Servers. All rights reserved. |
| Licence | GPLv3 |
| Info | https://cbservers.xyz/ |
| OriginalFilename | cb-launcher.exe |
| ProductName | CB Servers Launcher |
| ProductVersion | 3.5.2 |
| Suspicious | Strings found in the binary may indicate undesirable behavior: |
Miscellaneous malware strings:
|
| Info | Cryptographic algorithms detected in the binary: |
Uses constants related to CRC32
Uses constants related to SHA1 Uses constants related to SHA256 Uses constants related to SHA512 Uses constants related to AES Uses known Mersenne Twister constants Microsoft's Cryptography API |
| Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
| Info | The PE is digitally signed. |
Signer: SignPath Foundation
Issuer: GlobalSign GCC R45 CodeSigning CA 2020 |
| Safe | VirusTotal score: 0/71 (Scanned on 2026-10-14 21:43:53) | All the AVs think this file is safe. |
| MD5 | f7efe101c24d9ed4cd782a1619874cea 🔍 |
|---|---|
| SHA1 | ee0aec8d5d215434efe78038c87ebf333e82c90d 🔍 |
| SHA256 | fac134bc0c66c726fe9acf2dc5ff1d4cb132a359a9ffc2595796e9842a8ccf1a 🔍 |
| SHA3 | b9d32fd6993d32d5b73659924eb38bffa9d042c89e1f522e71d859147b7e59eb 🔍 |
| SSDeep | 49152:HLL43y/rDadfYIpfP9/izjkQswB3xgfoANp7kETUEBFibGQFejiNr+NK54m:S0rDKf5lg3Gxe5bGQFr5b 🔍 |
| Imports Hash | dc3287ec1f0326b04f7aad1f4a8d223e 🔍 |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x118 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 8 |
| TimeDateStamp | 2026-Sep-27 00:33:19 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
| Magic | PE32+ |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x261200 |
| SizeOfInitializedData | 0x122800 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x000000000021B0F0 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x389000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0x3855a0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| MD5 | c8a6b5e4bebcb92b40211bd1514bdcc8 🔍 |
|---|---|
| SHA1 | 933d09808dd10bc7d81224eefee6891a45ac3b95 🔍 |
| SHA256 | e404ab49f1abe455c9607610bb04165e37c1eefc8d3113ff23e05585c2e9333d 🔍 |
| SHA3 | 026d0cc447e8703c857e5443ef5d450b6cba5ff6460d478313e7e7a26668aedd 🔍 |
| VirtualSize | 0x26103c |
| VirtualAddress | 0x1000 |
| SizeOfRawData | 0x261200 |
| PointerToRawData | 0x400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 6.4186 |
| MD5 | c77e8f6a78667ec3a99d03d753a5f8b4 🔍 |
|---|---|
| SHA1 | 70fb60af302b42a48290a3ce5b9b8072045046b9 🔍 |
| SHA256 | 64b6a569ca040403a1d12940283719e6709951d794de81ea9a1efbb7bd557cc7 🔍 |
| SHA3 | 559a9581dea5ca35b30d6194c5ffcc49b2e3307bd7e08a5e12872f14500deeb8 🔍 |
| VirtualSize | 0xca5fc |
| VirtualAddress | 0x263000 |
| SizeOfRawData | 0xca600 |
| PointerToRawData | 0x261600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 5.85287 |
| MD5 | 09cdb8238717d399bd1015f48673eb3f 🔍 |
|---|---|
| SHA1 | ca6691b37cb7901c6c60841c9f738c8d5280536d 🔍 |
| SHA256 | a66bbf8687267253271eb3444c89374e6f1f5232ff828ff8b033806dc21b2c53 🔍 |
| SHA3 | 98e443abe09b34c1520f1f71aff9e2e4640162c623357b460a84d7d13c66bd3d 🔍 |
| VirtualSize | 0x30499 |
| VirtualAddress | 0x32e000 |
| SizeOfRawData | 0x28400 |
| PointerToRawData | 0x32bc00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 5.04792 |
| MD5 | 0cb2d1412ba9a2512e9f6a69616826d1 🔍 |
|---|---|
| SHA1 | 95a309c45fb95f0d05788a2a558d242e1c1a03d7 🔍 |
| SHA256 | 0ff18af911522480f3e9198ea32b73b548e54b2983451f1fd1e2cb26240d33e2 🔍 |
| SHA3 | 9432c8c63dff63dc1690d23e2791e8339f5b4b3be6633b6e67343d5adb871239 🔍 |
| VirtualSize | 0x17f58 |
| VirtualAddress | 0x35f000 |
| SizeOfRawData | 0x18000 |
| PointerToRawData | 0x354000 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 6.29327 |
| MD5 | 129194a7e701323af06ae287571b0d03 🔍 |
|---|---|
| SHA1 | 1dc462a0c48c16161d0763cc9af62c85faecfff6 🔍 |
| SHA256 | 861b806bd036d358cff07064bf0678740cac70fdd640d021e3a376f9a8ce23f9 🔍 |
| SHA3 | 6bdd60005a5a3f995943ce0adaf748f8fadf023b4a5d6e69b17fe7f9af18ec08 🔍 |
| VirtualSize | 0x5b0 |
| VirtualAddress | 0x377000 |
| SizeOfRawData | 0x600 |
| PointerToRawData | 0x36c000 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 3.45828 |
| MD5 | bf619eac0cdf3f68d496ea9344137e8b 🔍 |
|---|---|
| SHA1 | 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5 🔍 |
| SHA256 | 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560 🔍 |
| SHA3 | 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59 🔍 |
| VirtualSize | 0x100 |
| VirtualAddress | 0x378000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x36c600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 0 |
| MD5 | 7454f959b20fb31aeb137655c6424889 🔍 |
|---|---|
| SHA1 | f6ecfb46875b422fa9d80282cc81f5d5827441d0 🔍 |
| SHA256 | ce6ab95532ede9d432d7792be9a6e15368ade44677036030ed8584bc3c0b6594 🔍 |
| SHA3 | 018fbd9eacfcc001a9316e6d66861ae9db029a86705ae2362d89040432250551 🔍 |
| VirtualSize | 0xabf0 |
| VirtualAddress | 0x379000 |
| SizeOfRawData | 0xac00 |
| PointerToRawData | 0x36c800 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 7.92501 |
| MD5 | 34c152feca1350f12b10b92e8a284de5 🔍 |
|---|---|
| SHA1 | 459610ddc58420fa850f82b9229d2f586875ca67 🔍 |
| SHA256 | de6fed0b77d753a5721f3769b58be01bff0f931a79241c1bdd0e6b8a9f4ade62 🔍 |
| SHA3 | 345881396c771d15baf540fc9735786357166462dbf53cb2c700139b61740e32 🔍 |
| VirtualSize | 0x4788 |
| VirtualAddress | 0x384000 |
| SizeOfRawData | 0x4800 |
| PointerToRawData | 0x377400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 5.45205 |
| KERNEL32.dll |
GetProcessIoCounters
OpenProcess GetProcessId WaitForMultipleObjects GetOverlappedResult CancelIoEx CreateNamedPipeW DisconnectNamedPipe ConnectNamedPipe ReadFile ExpandEnvironmentStringsW FindFirstFileExW FindNextFileW FindClose GetExitCodeProcess GetWindowsDirectoryW GetCurrentProcessId GetVolumeInformationW AttachConsole SetThreadPriority GetCurrentThread SetEvent RtlUnwind Sleep GetEnvironmentVariableW K32GetModuleFileNameExW WaitNamedPipeW CloseHandle WaitForSingleObject WriteFile CreateFileW GetCommandLineW LocalFree GetConsoleWindow AllocConsole DecodePointer WriteConsoleW HeapSize GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage GetTimeZoneInformation SetEndOfFile SetStdHandle ReadConsoleW SetFilePointerEx GetConsoleMode GetConsoleOutputCP HeapReAlloc EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW CopyFileW SetDefaultDllDirectories GetCommandLineA CreateEventW ResetEvent FlushFileBuffers GetNamedPipeClientProcessId DeleteCriticalSection InitializeCriticalSectionEx GetLastError GetSystemDirectoryW LoadLibraryW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc GetStdHandle ExitProcess FileTimeToSystemTime SystemTimeToTzSpecificLocalTime PeekNamedPipe GetDriveTypeW GetFileType FreeLibraryAndExitThread ExitThread TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlUnwindEx LoadLibraryExA VirtualProtect GetSystemInfo OutputDebugStringW InitializeSListHead GetStartupInfoW IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo LCMapStringEx ReleaseSRWLockExclusive AcquireSRWLockExclusive SetLastError GetModuleHandleA GetSystemDirectoryA LoadLibraryA QueryPerformanceFrequency FreeLibrary EnterCriticalSection LeaveCriticalSection SleepEx FormatMessageW GetFullPathNameW MultiByteToWideChar WideCharToMultiByte QueryPerformanceCounter GetTickCount VerSetConditionMask VerifyVersionInfoW GetEnvironmentVariableA WaitForSingleObjectEx CreateThread MoveFileExA GetFileSizeEx CreateFileA Process32First AddDllDirectory GetCurrentProcess TerminateProcess GetModuleFileNameW CreateToolhelp32Snapshot Process32Next GetCurrentDirectoryW CreateProcessW QueryFullProcessImageNameW LoadLibraryExW DeviceIoControl GetVolumePathNameW GetVolumeNameForVolumeMountPointW GetFileAttributesExW DeleteFileW MoveFileExW MoveFileW CreateMutexA ReleaseMutex VirtualQuery FormatMessageA TryAcquireSRWLockExclusive GetCurrentThreadId SetCurrentDirectoryW CreateDirectoryW FindFirstFileW GetDiskFreeSpaceExW GetFileAttributesW GetFileInformationByHandle GetFinalPathNameByHandleW SetFileInformationByHandle AreFileApisANSI GetModuleHandleW CreateHardLinkW GetFileInformationByHandleEx CreateSymbolicLinkW GetLocaleInfoEx GetExitCodeThread GetNativeSystemInfo GetStringTypeW ReleaseSRWLockShared AcquireSRWLockShared SleepConditionVariableSRW GetTickCount64 WakeAllConditionVariable RtlPcToFileHeader RaiseException InitOnceBeginInitialize InitOnceComplete IsProcessorFeaturePresent GetModuleHandleExW GetSystemTimeAsFileTime EncodePointer GetProcAddress |
|---|---|
| USER32.dll |
SetForegroundWindow
FlashWindowEx EnumChildWindows GetPropA SetPropA GetWindowRect GetWindowLongPtrA LoadIconA PostMessageA IsIconic SetWindowRgn GetWindowPlacement GetWindowLongPtrW SetWindowLongPtrW DefWindowProcW ReleaseCapture MonitorFromWindow SetWindowPos RemovePropA GetForegroundWindow SetProcessDPIAware MessageBoxA GetWindowThreadProcessId IsWindowVisible IsZoomed ShowWindow MonitorFromPoint GetMonitorInfoW MonitorFromRect SetParent EnumWindows CharLowerBuffW GetDlgItemTextW GetWindowTextW |
| GDI32.dll |
CreateRoundRectRgn
CombineRgn SetRectRgn DeleteObject CreateRectRgn PtInRegion |
| ADVAPI32.dll |
CryptAcquireContextW
RegGetValueW RegCloseKey RegQueryValueExW RegOpenKeyExW CryptReleaseContext CryptGetHashParam CryptDestroyHash CryptHashData CryptCreateHash CryptAcquireContextA GetTokenInformation OpenProcessToken RegSetValueExW RegCreateKeyExW CryptGenRandom |
| SHELL32.dll |
ShellExecuteA
CommandLineToArgvW SetCurrentProcessExplicitAppUserModelID ShellExecuteExW SHCreateItemFromParsingName SHGetKnownFolderPath ShellExecuteW |
| WS2_32.dll |
htons
recvfrom socket ioctlsocket setsockopt sendto select closesocket WSACleanup WSAGetLastError WSAEnumNetworkEvents getsockopt WSAWaitForMultipleEvents send WSAResetEvent WSAEventSelect WSACreateEvent WSACloseEvent ntohs recv inet_addr getsockname getpeername WSASetLastError WSAIoctl bind accept __WSAFDIsSet freeaddrinfo WSAStartup listen htonl getaddrinfo connect |
| WINTRUST.dll |
WinVerifyTrust
|
| ole32.dll |
CoTaskMemAlloc
PropVariantClear CoInitialize CoTaskMemFree CoCreateInstance CoCreateGuid CoInitializeEx CoUninitialize |
| libcef.dll (delay-loaded) |
cef_string_utf8_clear
cef_string_utf8_to_utf16 cef_string_utf16_set cef_string_utf16_to_utf8 cef_string_utf16_clear cef_initialize cef_quit_message_loop cef_string_userfree_utf16_free cef_run_message_loop cef_api_hash cef_execute_process cef_string_list_alloc cef_parse_url cef_post_task cef_shutdown cef_register_scheme_handler_factory cef_string_list_free cef_browser_host_create_browser_sync cef_log cef_stream_reader_create_for_data cef_string_map_alloc cef_string_map_free cef_string_multimap_key cef_string_list_append cef_string_utf16_cmp cef_string_multimap_value cef_string_map_append cef_string_list_value cef_string_list_size cef_string_map_size cef_string_multimap_size cef_string_map_value cef_string_map_key cef_string_multimap_append cef_string_multimap_alloc cef_string_multimap_free |
| Attributes | 0x1 |
|---|---|
| Name | libcef.dll |
| ModuleHandle | 0x356320 |
| DelayImportAddressTable | 0x377488 |
| DelayImportNameTable | 0x329aa8 |
| BoundDelayImportTable | 0x32b100 |
| UnloadDelayImportTable | 0 |
| TimeStamp | 1970-Jan-01 00:00:00 |
| Ordinal | 1 |
|---|---|
| Address | 0x32f184 |
| Ordinal | 2 |
|---|---|
| Address | 0x32f180 |
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x9e01 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.97541 |
| Detected Filetype | PNG graphic file |
| MD5 | 02cc727fe474135d7553ac1679e2306f 🔍 |
| SHA1 | fd83e631fd8d94e53e33f3e01594b6e01e4a2954 🔍 |
| SHA256 | 9ca68b3f546bbb74db4f5b19b08c9d4df30a03e6447c350c114656408ca86657 🔍 |
| SHA3 | 086bf438ebb3fb363f8d7a4bd7c16da3cc91746b2bac41f2cfea3d4559293f5f 🔍 |
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x14 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 1.33616 |
| Detected Filetype | Icon file |
| MD5 | a5f54ffacf326b48afaac3ecfd2d771b 🔍 |
| SHA1 | 678fad9b54d7c1668e42f3ee7e50dfa2316eb6f6 🔍 |
| SHA256 | f4c1c5bdf52b3640668ba27653a71e92e1ebc731e2f41a044870422f3c81b9de 🔍 |
| SHA3 | 6cc5be0a9ad574855f6b2c95b1ed44d1afa20613b8093b42a3d5e62ce5c7bbf3 🔍 |
| Type |
RT_VERSION
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x37c |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.49025 |
| MD5 | 55991b804946cb83473482d2d40d9cdf 🔍 |
| SHA1 | f972e547c04f6ab784ca3dcad839397f923e62de 🔍 |
| SHA256 | 2010f44d8fc704f78a5e9816faca502125436fcb4b2d7ef6efd94702b9b71ecb 🔍 |
| SHA3 | 9d43ba6be28b8b97e0117d4b94f55b3f3935495c031d584741f0d43d116241b3 🔍 |
| Type |
RT_MANIFEST
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x91c |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.22145 |
| MD5 | c574293dd3bcb6dad2fc1ebf46cd28e2 🔍 |
| SHA1 | a6bdc6c66322e1989b9c03da62d799af15ca53c8 🔍 |
| SHA256 | b111db3ed5ebd20d908412a6f95f42c1c0c3db1237a3c59b36188340428b0d04 🔍 |
| SHA3 | f38e56cd5f33ef637b43c38b15730c3664c62f7df38e25a595b36ad697f2a07f 🔍 |
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 3.5.2.343 |
| ProductVersion | 3.5.2.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| CompanyName | CB Servers |
| FileDescription | CB Servers Launcher |
| FileVersion (#2) | 3.5.2.343 |
| InternalName | launcher |
| LegalCopyright | Copyright (C) 2026 CB Servers. All rights reserved. |
| Licence | GPLv3 |
| Info | https://cbservers.xyz/ |
| OriginalFilename | cb-launcher.exe |
| ProductName | CB Servers Launcher |
| ProductVersion (#2) | 3.5.2 |
| Resource LangID | English - United States |
|---|
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Sep-27 00:33:19 |
| Version | 0.0 |
| SizeofData | 91 |
| AddressOfRawData | 0x2f2b98 |
| PointerToRawData | 0x2f1198 |
| Referenced File | D:\a\cb-launcher\cb-launcher\build\bin\x64\Release\cb-launcher.pdb |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Sep-27 00:33:19 |
| Version | 0.0 |
| SizeofData | 20 |
| AddressOfRawData | 0x2f2bf4 |
| PointerToRawData | 0x2f11f4 |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Sep-27 00:33:19 |
| Version | 0.0 |
| SizeofData | 1284 |
| AddressOfRawData | 0x2f2c08 |
| PointerToRawData | 0x2f1208 |
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Sep-27 00:33:19 |
| Version | 0.0 |
| SizeofData | 4 |
| AddressOfRawData | 0x2f3134 |
| PointerToRawData | 0x2f1734 |
| StartAddressOfRawData | 0x1402f3160 |
|---|---|
| EndAddressOfRawData | 0x1402f4734 |
| AddressOfIndex | 0x1403570f8 |
| AddressOfCallbacks | 0x140263c40 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_ALIGN_16BYTES
|
| Callbacks |
0x000000014021B3B0
0x000000014021B490 |
| Size | 0x140 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0x800 |
| EditList | 0 |
| SecurityCookie | 0x14032e300 |
| GuardCFCheckFunctionPointer | 5371214192 |
| GuardCFDispatchFunctionPointer | 0 |
| GuardCFFunctionTable | 0 |
| GuardCFFunctionCount | 0 |
| GuardFlags | (EMPTY) |
| CodeIntegrity.Flags | 0 |
| CodeIntegrity.Catalog | 0 |
| CodeIntegrity.CatalogOffset | 0 |
| CodeIntegrity.Reserved | 0 |
| GuardAddressTakenIatEntryTable | 0 |
| GuardAddressTakenIatEntryCount | 0 |
| GuardLongJumpTargetTable | 0 |
| GuardLongJumpTargetCount | 0 |
| XOR Key | 0xe2ab07b6 |
|---|---|
| Unmarked objects | 0 |
| C++ objects (33145) | 197 |
| ASM objects (33145) | 9 |
| 253 (35207) | 5 |
| C objects (35207) | 18 |
| ASM objects (35207) | 12 |
| C++ objects (35207) | 118 |
| C objects (33145) | 22 |
| C objects (CVTCIL) (33145) | 1 |
| Imports (33145) | 17 |
| Total imports | 995 |
| C++ objects (LTCG) (35229) | 571 |
| Exports (35229) | 1 |
| Resource objects (35229) | 1 |
| 151 | 1 |
| Linker (35229) | 1 |
No comments yet.