01786f1091757f7107380047103d5887953502acc4a1faf8743aec15c67bbadf
Summary
| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2026-Jun-27 04:54:52 |
| Detected languages |
English - United States
|
| CompanyName | Tier1Timer |
| FileDescription | Windows Timer Resolution Optimizer |
| FileVersion | 1.0.1.0 |
| InternalName | Tier1Timer |
| OriginalFilename | Tier1Timer.exe |
| ProductName | Tier1Timer |
| ProductVersion | 1.0.1.0 |
Plugin Output
| Suspicious | Strings found in the binary may indicate undesirable behavior: |
May have dropper capabilities:
|
| Suspicious | The PE contains functions most legitimate programs don't use. |
[!] The program may be hiding some of its imports:
|
| Info | The PE is digitally signed. |
Signer: Matthew Jacobi
Issuer: Microsoft ID Verified CS EOC CA 03 |
| Suspicious | VirusTotal score: 1/68 (Scanned on 2026-07-10 13:09:39) | Google: Detected |
Hashes
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x100 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 6 |
| TimeDateStamp | 2026-Jun-27 04:54:52 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Image Optional Header
| Magic | PE32+ |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0xb9800 |
| SizeOfInitializedData | 0x49c00 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0000000000089034 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x106000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0x112c6b |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
.rdata
.data
.pdata
.rsrc
.reloc
Imports
| d3d11.dll |
D3D11CreateDeviceAndSwapChain
|
|---|---|
| D3DCOMPILER_47.dll |
D3DCompile
|
| dwmapi.dll |
DwmSetWindowAttribute
|
| WINHTTP.dll |
WinHttpQueryDataAvailable
WinHttpCrackUrl WinHttpConnect WinHttpSetTimeouts WinHttpReceiveResponse WinHttpOpen WinHttpQueryHeaders WinHttpReadData WinHttpOpenRequest WinHttpCloseHandle WinHttpSendRequest |
| ole32.dll |
StringFromGUID2
CoCreateGuid |
| KERNEL32.dll |
FindNextFileW
FindFirstFileExW FindClose HeapReAlloc ReadConsoleW GetProcAddress GetModuleHandleW WaitForSingleObject CreateToolhelp32Snapshot CreateEventW Process32NextW SetEvent Process32FirstW CloseHandle ResetEvent SetConsoleCtrlHandler CreateMutexW ReleaseMutex GetLastError SetUnhandledExceptionFilter SetThreadPriority Sleep GetCurrentThread QueryPerformanceFrequency QueryPerformanceCounter MultiByteToWideChar CreateDirectoryW GetModuleFileNameW WideCharToMultiByte GetTickCount64 GlobalAlloc GlobalFree GlobalLock GlobalUnlock GetLocaleInfoA LoadLibraryA FreeLibrary GetConsoleMode GetConsoleOutputCP FlushFileBuffers SetFilePointerEx GetFileSizeEx GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW IsValidCodePage FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc WriteFile GetStdHandle ExitProcess ReadFile FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError RtlUnwindEx InitializeSListHead GetCurrentProcessId GetStartupInfoW IsDebuggerPresent TerminateProcess GetCurrentProcess UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo GetStringTypeW GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW GetSystemTimeAsFileTime FreeEnvironmentStringsW GetProcessHeap SetStdHandle RtlUnwind CreateFileW HeapSize WriteConsoleW SetEndOfFile LCMapStringW ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId WaitForSingleObjectEx GetExitCodeThread RtlPcToFileHeader RaiseException IsProcessorFeaturePresent FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW InitOnceComplete InitOnceBeginInitialize WakeAllConditionVariable SleepConditionVariableSRW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx |
| USER32.dll |
GetKeyState
GetMessageExtraInfo ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout SetCapture SetCursor IsWindowUnicode ReleaseCapture SetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData GetSystemMetrics CreatePopupMenu TrackPopupMenu DestroyMenu AppendMenuW LoadImageW GetCursorPos DefWindowProcW DestroyWindow SetWindowLongPtrW CreateWindowExW UnregisterClassW WaitMessage GetWindowLongPtrW RegisterClassExW ShowWindow DispatchMessageW PeekMessageW BringWindowToTop TranslateMessage LoadIconW LoadCursorW GetClientRect PostQuitMessage UpdateWindow SetForegroundWindow IsIconic GetWindowRect MonitorFromWindow GetShellWindow GetMonitorInfoW GetForegroundWindow PostMessageW SetProcessDpiAwarenessContext MessageBoxW FindWindowW |
| GDI32.dll |
CreateSolidBrush
|
| SHELL32.dll |
Shell_NotifyIconW
ShellExecuteW SHGetFolderPathW ShellExecuteA |
| ADVAPI32.dll |
RegQueryValueExW
RegDeleteValueW RegOpenKeyExW RegCloseKey RegSetValueExW |
| IMM32.dll |
ImmSetCompositionWindow
ImmGetContext ImmReleaseContext ImmSetCandidateWindow |
Delayed Imports
1
2
3
4
5
6
101
VS_VERSION_INFO
1 (#2)
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 1.0.1.0 |
| ProductVersion | 1.0.1.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| CompanyName | Tier1Timer |
| FileDescription | Windows Timer Resolution Optimizer |
| FileVersion (#2) | 1.0.1.0 |
| InternalName | Tier1Timer |
| OriginalFilename | Tier1Timer.exe |
| ProductName | Tier1Timer |
| ProductVersion (#2) | 1.0.1.0 |
| Resource LangID | English - United States |
|---|
IMAGE_DEBUG_TYPE_POGO
| Characteristics |
0
|
|---|---|
| TimeDateStamp | 2026-Jun-27 04:54:52 |
| Version | 0.0 |
| SizeofData | 1032 |
| AddressOfRawData | 0xdb538 |
| PointerToRawData | 0xda138 |
TLS Callbacks
| StartAddressOfRawData | 0x1400db998 |
|---|---|
| EndAddressOfRawData | 0x1400db9a0 |
| AddressOfIndex | 0x1400ee9fc |
| AddressOfCallbacks | 0x1400bb7a8 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_ALIGN_4BYTES
|
| Callbacks | (EMPTY) |
Load Configuration
| Size | 0x140 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x1400eb2c0 |
RICH Header
| XOR Key | 0x8ca080ac |
|---|---|
| Unmarked objects | 0 |
| ASM objects (30795) | 25 |
| C++ objects (30795) | 180 |
| C objects (30795) | 23 |
| C objects (35207) | 17 |
| ASM objects (35207) | 12 |
| C++ objects (35207) | 96 |
| Imports (30795) | 23 |
| Total imports | 251 |
| C++ objects (LTCG) (35224) | 19 |
| Resource objects (35224) | 1 |
| 151 | 1 |
| Linker (35224) | 1 |
Errors
Leave a comment
No comments yet.