| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| Compilation Date | 2026-Oct-25 21:03:00 |
| Detected languages |
English - United States
|
| TLS Callbacks | 2 callback(s) detected. |
| Debug artifacts |
Embedded COFF debugging symbols
|
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Info | Cryptographic algorithms detected in the binary: |
Uses constants related to CRC32
Uses constants related to SHA256 Uses constants related to RC5 or RC6 Uses known Mersenne Twister constants |
| Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
| Suspicious | The file contains overlay data. | 6101408 bytes of data starting at offset 0xe62c00. |
| Suspicious | VirusTotal score: 1/71 (Scanned on 2026-11-07 10:13:15) | ClamAV: Win.Packed.Vmprotect-10035966-0 |
| MD5 | e7855c57415c0624d84bcae836bad531 🔍 |
|---|---|
| SHA1 | bf190db7833869fcd99dc66482ea40c4e8c290cd 🔍 |
| SHA256 | 092f46bb9f9bdd6b0b2d7e842dd995a7d46225ebe913a6620ad0b431a1d88034 🔍 |
| SHA3 | 543084eee6dce1f33f18e41e9bd21df769c79768845c5115e77a2f3bbcc19c05 🔍 |
| SSDeep | 98304:qhdVbQE8CQoQx6tADy3nGyW/mL85+xj9myAyJs3oUzQkhLA9/JhO6uEETk0UGBOJ:oYMowCBPbT7k4OhIa7Yykn3QOTNRNM 🔍 |
| Imports Hash | 77e18ca860fc59b71b408bf153107060 🔍 |
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x80 |
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 10 |
| TimeDateStamp | 2026-Oct-25 21:03:00 |
| PointerToSymbolTable | 0xe62c00 |
| NumberOfSymbols | 135956 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_LINE_NUMS_STRIPPED
|
| Magic | PE32+ |
|---|---|
| LinkerVersion | 2.0 |
| SizeOfCode | 0xbde000 |
| SizeOfInitializedData | 0x284800 |
| SizeOfUninitializedData | 0x13800 |
| AddressOfEntryPoint | 0x0000000000001490 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 4.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 5.2 |
| Win32VersionValue | 0 |
| SizeOfImage | 0xe7b000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0x14357d0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
|
| SizeofStackReserve | 0x200000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
| MD5 | 7ecb13e4dfa80cac2c0cf08a72c4dd78 🔍 |
|---|---|
| SHA1 | 1f667634391a2f7c66c382863cec82d2ff382aa8 🔍 |
| SHA256 | e07e58a93dd19bc7ad6078de84c7820189bc93acfdd3d0d68c7e898aa494a899 🔍 |
| SHA3 | 7e77119733f274bcab6aab9c79e44c403d41c246490c390101ea4433a55cb456 🔍 |
| VirtualSize | 0xbdde80 |
| VirtualAddress | 0x1000 |
| SizeOfRawData | 0xbde000 |
| PointerToRawData | 0x400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 6.32507 |
| MD5 | 1e0ef65d34c9087851d2d6e7caca2d49 🔍 |
|---|---|
| SHA1 | f80c98a9a4964a7e7e2333ab72dec0c4930cf6eb 🔍 |
| SHA256 | 7e358c6189de14230205adfefb10093ae23ebb9cdbdf97d59c923232de934d26 🔍 |
| SHA3 | 73c2187532643a62b9860ab8d94dbfac4ee7bff57118e461b1d779dd2d305ef8 🔍 |
| VirtualSize | 0x1cbd0 |
| VirtualAddress | 0xbdf000 |
| SizeOfRawData | 0x1cc00 |
| PointerToRawData | 0xbde400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 5.69724 |
| MD5 | d811adef4db6e504578c7e2e9b379451 🔍 |
|---|---|
| SHA1 | cbf145c953deb4803e833d55217a2a59c942393d 🔍 |
| SHA256 | bb932e07c09158367017ace49d2f16ca7c104fbd073901389ba0c1f25f12dc1a 🔍 |
| SHA3 | 94f3226385060a74e57ed14c17015660f33c1de6fd9c08ad898882da1bae44c1 🔍 |
| VirtualSize | 0x194540 |
| VirtualAddress | 0xbfc000 |
| SizeOfRawData | 0x194600 |
| PointerToRawData | 0xbfb000 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 6.15936 |
| MD5 | 4daeea9bb5fc76e9c392f754a5ab9bc7 🔍 |
|---|---|
| SHA1 | 22ac7060b37018eda8a63896776d8d9794e50c86 🔍 |
| SHA256 | b93c62c2ff54ed7f32dd81064fbebbc31932dcee1dc3bf732c2c30de71866419 🔍 |
| SHA3 | e0b39499351d76979ac6613e6472cce37c398920e4f4b1e5348ab0ef79e6a995 🔍 |
| VirtualSize | 0x3ffcc |
| VirtualAddress | 0xd91000 |
| SizeOfRawData | 0x40000 |
| PointerToRawData | 0xd8f600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 6.45096 |
| MD5 | 9e445ae71fd8bea6688cdd1ea00ed465 🔍 |
|---|---|
| SHA1 | 1b81fa468d7410de8ef41559e40a1ab869c080c1 🔍 |
| SHA256 | 4d18e39d90efe30d2ca92318c24ba7cd91af4b6ca5b2d0b8bebe8acfa861da3c 🔍 |
| SHA3 | cd3cf8ffdb99032bdc2fea6fac0c2839e9a548fb2080c26fce05aeb14ce27c34 🔍 |
| VirtualSize | 0x7e464 |
| VirtualAddress | 0xdd1000 |
| SizeOfRawData | 0x7e600 |
| PointerToRawData | 0xdcf600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 5.59973 |
| MD5 | d41d8cd98f00b204e9800998ecf8427e 🔍 |
|---|---|
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍 |
| SHA3 | a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍 |
| VirtualSize | 0x13710 |
| VirtualAddress | 0xe50000 |
| SizeOfRawData | 0 |
| PointerToRawData | 0 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| MD5 | a6ef9a277243b40e7f54203c56c9c2c0 🔍 |
|---|---|
| SHA1 | 69e7c71c8df47c44db30a5ee24f53174649687fb 🔍 |
| SHA256 | 3807e41da15ee16e466fdf067937bb39fb9ffefd6ff0d906470ff039a7b912cf 🔍 |
| SHA3 | c15ae5d8667813636fc61cc5c38546f0e0d6f50d8d8fc03b08983637c1a86725 🔍 |
| VirtualSize | 0x5a98 |
| VirtualAddress | 0xe64000 |
| SizeOfRawData | 0x5c00 |
| PointerToRawData | 0xe4dc00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 4.67408 |
| MD5 | 80b60edacf28449c633cc1cd7f287dfe 🔍 |
|---|---|
| SHA1 | e51883d5914a1061af83824ca990187c6c8c5158 🔍 |
| SHA256 | 47517cce4db2ab3f11bf420ebce8dfe6bef455c87caadf9a1ca0c1d87b139a8e 🔍 |
| SHA3 | bef4d9b15b3c78995ded6acfec384f9157e7149e1d3232fd59b3307c53356855 🔍 |
| VirtualSize | 0x110 |
| VirtualAddress | 0xe6a000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0xe53800 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 0.0611629 |
| MD5 | fb7fcc3a40ebc60214ea8af3f5b80b19 🔍 |
|---|---|
| SHA1 | 0bb09b4190458d5ef3f55732d12dc5958c1af5b4 🔍 |
| SHA256 | 8a9d9ce34f2fe1db35ffd40026a7e97b6bdb8e2b8874a351fcb3457912b6823a 🔍 |
| SHA3 | 35fe0cc89f65c758f6171a1c8488514601be7a2e2682edddd4df6c90f9d53121 🔍 |
| VirtualSize | 0x63b8 |
| VirtualAddress | 0xe6b000 |
| SizeOfRawData | 0x63b8 |
| PointerToRawData | 0xe53a00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 7.90429 |
| MD5 | 0a29572d68629b4ed0e688a342b965dd 🔍 |
|---|---|
| SHA1 | ea27c6a0bcacef566921a4725fb0d2793749283e 🔍 |
| SHA256 | b483916d9224f1e730136a655f7b176832324e125799131ab71e604b533aa39f 🔍 |
| SHA3 | 43cd507a52792183faa17ee7dc4a67aa4c68e3df8278be9a6fd1c1be71a43550 🔍 |
| VirtualSize | 0x8d9c |
| VirtualAddress | 0xe72000 |
| SizeOfRawData | 0x8e00 |
| PointerToRawData | 0xe59e00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 5.45789 |
| ADVAPI32.dll |
RegCloseKey
RegDeleteKeyValueW RegOpenKeyExW RegQueryValueExW RegSetKeyValueW |
|---|---|
| GDI32.dll |
BitBlt
ChoosePixelFormat CombineRgn CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateDCW CreateDIBSection CreateFontIndirectW CreateRectRgn CreateSolidBrush DeleteDC DeleteObject DescribePixelFormat GetDIBits GetDeviceCaps GetICMProfileW GetPixelFormat GetTextExtentPoint32A GetTextMetricsW SelectObject SetPixel SetPixelFormat SwapBuffers |
| HID.DLL |
HidD_FreePreparsedData
HidD_GetAttributes HidD_GetHidGuid HidD_GetPreparsedData HidP_GetCaps |
| IMM32.dll |
ImmAssociateContext
ImmGetCandidateListW ImmGetCompositionFontW ImmGetCompositionStringW ImmGetContext ImmGetIMEFileNameA ImmNotifyIME ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionStringW ImmSetCompositionWindow |
| KERNEL32.dll |
AddVectoredExceptionHandler
AttachConsole CancelIo CloseHandle CompareStringA CopyFileExW CreateDirectoryW CreateEventA CreateEventW CreateFileA CreateFileMappingA CreateFileW CreateHardLinkW CreateMutexW CreatePipe CreateProcessW CreateSemaphoreA CreateSemaphoreW CreateThread DeleteCriticalSection DeleteFileW DeviceIoControl DuplicateHandle EnterCriticalSection EnumResourceNamesW ExitProcess FileTimeToSystemTime FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary GenerateConsoleCtrlEvent GetCommandLineW GetConsoleMode GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDiskFreeSpaceExW GetEnvironmentStringsW GetEnvironmentVariableA GetExitCodeProcess GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileSize GetFileSizeEx GetFileTime GetFileType GetFullPathNameW GetLastError GetLocaleInfoA GetLocaleInfoW GetLogicalDrives GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessAffinityMask GetProcessHeap GetProcessTimes GetStdHandle GetSystemDirectoryW GetSystemInfo GetSystemPowerStatus GetSystemTime GetSystemTimeAsFileTime GetTempFileNameW GetTempPathW GetThreadContext GetThreadPriority GetThreadTimes GetTickCount GetTimeZoneInformation GlobalAlloc GlobalFree GlobalLock GlobalMemoryStatusEx GlobalSize GlobalUnlock HeapAlloc HeapFree InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount IsProcessorFeaturePresent IsWow64Process LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LocalAlloc LocalFree MapViewOfFile MoveFileExW MulDiv MultiByteToWideChar OpenProcess OutputDebugStringA OutputDebugStringW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReleaseMutex ReleaseSemaphore RemoveDirectoryW RemoveVectoredExceptionHandler ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetEnvironmentVariableA SetErrorMode SetEvent SetFilePointer SetFilePointerEx SetHandleInformation SetLastError SetNamedPipeHandleState SetProcessAffinityMask SetSystemTime SetThreadContext SetThreadExecutionState SetThreadPriority SetUnhandledExceptionFilter Sleep SleepConditionVariableCS SuspendThread SystemTimeToFileTime SystemTimeToTzSpecificLocalTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection UnmapViewOfFile VerSetConditionMask VerifyVersionInfoW VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile |
| api-ms-win-crt-convert-l1-1-0.dll |
_i64toa
_itoa _ltoa _ui64toa _ultoa atof atoi atoll mbrtowc mbsrtowcs strtod strtol strtoll strtoul strtoull wcrtomb wcstol wcstoll wcstoul wcstoull |
| api-ms-win-crt-environment-l1-1-0.dll |
__p__environ
_putenv_s _wgetcwd getenv |
| api-ms-win-crt-filesystem-l1-1-0.dll |
_findclose
_fstat64 _lock_file _unlock_file _wchdir _wchmod _wfindfirst64i32 _wfindnext64i32 _wfullpath _wmkdir _wstat64 |
| api-ms-win-crt-heap-l1-1-0.dll |
_msize
_set_new_mode calloc free malloc realloc |
| api-ms-win-crt-locale-l1-1-0.dll |
___mb_cur_max_func
_configthreadlocale localeconv setlocale |
| api-ms-win-crt-math-l1-1-0.dll |
__setusermatherr
_fdopen acos acosf acosh asin asinf asinh atan atan2 atan2f atanf atanh cbrt ceil ceilf cos cosf cosh exp exp2f expf expm1 floor floorf fmaxf fminf fmod fmodf frexp hypot log log10 log10f log1p log2 log2f logf lrint lround lroundf modf modff pow powf round roundf sin sinf sinh sqrt sqrtf tan tanf tanh trunc truncf |
| api-ms-win-crt-private-l1-1-0.dll |
__intrinsic_setjmp
longjmp memchr memcmp memcpy memmove strchr strrchr strstr wcsstr |
| api-ms-win-crt-runtime-l1-1-0.dll |
__p___argc
__p___argv _assert _beginthreadex _cexit _configure_narrow_argv _crt_atexit _endthreadex _errno _exit _fpreset _get_errno _initialize_narrow_environment _seh_filter_exe _initterm _initterm_e _register_thread_local_exe_atexit_callback _set_app_type _set_errno _set_invalid_parameter_handler abort exit signal strerror |
| api-ms-win-crt-stdio-l1-1-0.dll |
__acrt_iob_func
__p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vsprintf _chsize_s _close _fileno _fseeki64 _ftelli64 _get_osfhandle _lseeki64 _pclose _popen _read _wfopen _wopen _write fclose feof fflush fgets fopen fputc fputs fread fseek ftell fwrite getc getwc putc putchar putwc setvbuf ungetc ungetwc |
| api-ms-win-crt-string-l1-1-0.dll |
_strdup
_strrev isalnum isalpha isdigit islower isspace isupper iswctype isxdigit mbrlen memset strcmp strcoll strcpy strcspn strlen strncmp strncpy strnlen strpbrk strxfrm tolower toupper towlower towupper wcscat wcscmp wcscoll wcscpy wcslen wcsncmp wcsnlen wcsxfrm wctype |
| api-ms-win-crt-time-l1-1-0.dll |
_localtime64
_localtime64_s _time64 _wutime64 strftime wcsftime |
| api-ms-win-crt-utility-l1-1-0.dll |
qsort
rand rand_s srand |
| ole32.dll |
CLSIDFromString
CoCreateInstance CoInitializeEx CoTaskMemFree CoUninitialize OleInitialize OleUninitialize PropVariantClear RegisterDragDrop ReleaseStgMedium RevokeDragDrop |
| OLEAUT32.dll |
SysFreeString
|
| SETUPAPI.dll |
CM_Get_Device_IDA
CM_Get_Parent CM_Locate_DevNodeA SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiEnumDeviceInterfaces SetupDiGetClassDevsA SetupDiGetDeviceInstanceIdA SetupDiGetDeviceInterfaceDetailA SetupDiGetDeviceRegistryPropertyW |
| SHELL32.dll |
CommandLineToArgvW
DragAcceptFiles DragFinish DragQueryFileW SHBrowseForFolderW SHGetFolderPathW SHGetPathFromIDListW ShellExecuteW Shell_NotifyIconW |
| USER32.dll |
AdjustWindowRectEx
AttachThreadInput BeginPaint CallNextHookEx CallWindowProcW ChangeDisplaySettingsExW CheckMenuItem ClientToScreen ClipCursor CloseClipboard CreateIconFromResource CreateIconFromResourceEx CreateIconIndirect CreatePopupMenu CreateWindowExA CreateWindowExW DefWindowProcW DeleteMenu DestroyCursor DestroyIcon DestroyMenu DestroyWindow DialogBoxIndirectParamW DispatchMessageW DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndDialog EndPaint EnumClipboardFormats EnumDisplayDevicesW EnumDisplayMonitors EnumDisplaySettingsW EnumWindows FillRect FlashWindowEx GetAsyncKeyState GetClassInfoExW GetClientRect GetClipCursor GetClipboardData GetClipboardFormatNameA GetClipboardSequenceNumber GetCursorPos GetDC GetDesktopWindow GetDlgItem GetDoubleClickTime GetFocus GetForegroundWindow GetKeyState GetKeyboardLayout GetKeyboardState GetMenu GetMenuItemInfoW GetMessageA GetMessageExtraInfo GetMessagePos GetMessageTime GetMessageW GetMonitorInfoW GetPropW GetQueueStatus GetRawInputBuffer GetRawInputData GetRawInputDeviceInfoA GetRawInputDeviceList GetSystemMetrics GetUpdateRect GetWindowLongA GetWindowLongPtrW GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId InsertMenuW IntersectRect IsClipboardFormatAvailable IsIconic IsWindow IsZoomed KillTimer LoadCursorW LoadIconW MapVirtualKeyW MessageBoxA MonitorFromPoint MonitorFromWindow MsgWaitForMultipleObjects OpenClipboard PeekMessageW PostMessageW PostThreadMessageW PtInRect RegisterClassExA RegisterClassExW RegisterClassW RegisterClipboardFormatW RegisterDeviceNotificationW RegisterRawInputDevices RegisterWindowMessageA RegisterWindowMessageW ReleaseCapture ReleaseDC RemovePropW ScreenToClient SendMessageW SetActiveWindow SetCapture SetClipboardData SetCursor SetCursorPos SetFocus SetForegroundWindow SetLayeredWindowAttributes SetMenuItemInfoW SetParent SetPropW SetRectEmpty SetTimer SetWindowLongA SetWindowLongPtrW SetWindowLongW SetWindowPos SetWindowRgn SetWindowTextW SetWindowsHookExW ShowWindow SystemParametersInfoA SystemParametersInfoW ToUnicode TrackMouseEvent TrackPopupMenu TranslateMessage UnhookWindowsHookEx UnregisterClassA UnregisterClassW UnregisterDeviceNotification ValidateRect |
| VERSION.dll |
GetFileVersionInfoA
GetFileVersionInfoSizeA VerQueryValueA |
| WINMM.dll |
timeBeginPeriod
timeEndPeriod |
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x33e |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.69768 |
| Detected Filetype | PNG graphic file |
| MD5 | 109afa4d27014e2330f733777c5143ac 🔍 |
| SHA1 | cb6dd6e84c9c243b3561c2a4d36a58223ab9843e 🔍 |
| SHA256 | 9498107493779fae67d651d5b73175e0e71af894c705615b1b4bf50d8cc0064b 🔍 |
| SHA3 | 76fc668c36f8db1e68087861bc16a7b52ad87d77a5ebf17f82991cce4e362cc8 🔍 |
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x649 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.84505 |
| Detected Filetype | PNG graphic file |
| MD5 | e7af3da34d8bd3cab635aa365546ecfe 🔍 |
| SHA1 | 1ecdfc25a42187df0963eef9fd50a8e8609709a3 🔍 |
| SHA256 | f519348ca872867c771345c7275d6715d8afc884c12568e37193d67360402155 🔍 |
| SHA3 | 44118de3dcd5414d50dc267307a3cb50918d9cbc4b5d326c0002cd7fa0208f6a 🔍 |
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x98f |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.88764 |
| Detected Filetype | PNG graphic file |
| MD5 | 14a45624bd6c8bc5ebc1d729a213e90d 🔍 |
| SHA1 | 464531f8f56779c6f85e5ff9704a5d44e2b5236e 🔍 |
| SHA256 | 4872a69c3880030fda08de3a1b4133d5f88f9c5b73234f33427c05d3f7507bd9 🔍 |
| SHA3 | d6ef8fd2bcf7f404fd90209f98a3abb4ac158f92c965a339d656b153b3aaf6b3 🔍 |
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xc7c |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.91416 |
| Detected Filetype | PNG graphic file |
| MD5 | 4415dd7c1966e8872019b4a8023f8888 🔍 |
| SHA1 | 71e148da9926e7fd3f50bd09711d9dff28cab28c 🔍 |
| SHA256 | 81d47f41875d8cde79ef33d03059106e3ad48c92dae15d4d330fe4650180c37d 🔍 |
| SHA3 | dbc14937d817f96d7a4d6c4a25c8d0ba627359b2b7880d89909b6600d1911a43 🔍 |
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x16ab |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.9335 |
| Detected Filetype | PNG graphic file |
| MD5 | d21b566aaa627dea08e3c5673d4932a9 🔍 |
| SHA1 | 15310e88d8011f11faa11bc39b37d071bcb7f73e 🔍 |
| SHA256 | e16647c0ac97414e8788eb861256dfd9f952fb3dd94641e1f877e878788d22e4 🔍 |
| SHA3 | b647903b8e4351d9c1830bac76b6715d7fbc8c28dacf4776564f96315d82e14a 🔍 |
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x283f |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.91699 |
| Detected Filetype | PNG graphic file |
| MD5 | bd27ff4b5e1b7218796e1e54a1a1feea 🔍 |
| SHA1 | cbfeea611616dbd718f6934e79966c5ff41480f3 🔍 |
| SHA256 | e64701d59c74e52b1b194f53a2f56457c674bc37ce40e4c9a000e1df2a1c4105 🔍 |
| SHA3 | f6a9213034385031f4a2fce7ffebbc0ca10a5cc1ef7f4b3852346252225a666d 🔍 |
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x5a |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.88804 |
| Detected Filetype | Icon file |
| MD5 | 83ed0f244bf3b88740c8e5b0fd837d21 🔍 |
| SHA1 | 7a8999a13cd26e38f3df7ebdcd0153eba886ffee 🔍 |
| SHA256 | 84cd398da86354c1d1a884e9fa23f56df33da9b3e2540541a1915e08c30c2bca 🔍 |
| SHA3 | 9cd76a17c51567e7314b6944b367794b449380a20cf70a8d029653c6b9e1fa91 🔍 |
| Type |
RT_MANIFEST
|
|---|---|
| Language | UNKNOWN |
| Codepage | UNKNOWN |
| Size | 0x2c6 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.31884 |
| MD5 | 9ad96638d72bbbbc6440da9c856e4c39 🔍 |
| SHA1 | 29afb0ef053afc70b447be919383f8c8fd562df9 🔍 |
| SHA256 | e989bc9ba32a3f5b1f5a565d5971e07462a2d6a504e7af682bd36cc8cc263f29 🔍 |
| SHA3 | bc609fa29e449d5658a65d53fff8f9bf73c07e46d140fc507870fc7b6a6f9857 🔍 |
| StartAddressOfRawData | 0x140e6a000 |
|---|---|
| EndAddressOfRawData | 0x140e6a108 |
| AddressOfIndex | 0x140bf8760 |
| AddressOfCallbacks | 0x140d904e8 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_ALIGN_8BYTES
|
| Callbacks |
0x00000001409682C0
0x000000014097E510 |
No comments yet.