0b4de4d23d36d9c15b59bd53095b2ebd34e418a7bd1000635b7f434a73909131
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2026-May-04 06:40:33 |
| Detected languages |
English - United States
|
| FileDescription | DF Antivirus Setup |
| FileVersion | 1.1.0 |
| LegalCopyright | Free & open source |
| ProductName | DF Antivirus |
Plugin Output
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Suspicious | The PE is an NSIS installer | Unusual section name found: .ndata |
| Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
| Suspicious | The file contains overlay data. |
29128110 bytes of data starting at offset 0x2c000.
The overlay data has an entropy of 7.99999 and is possibly compressed or encrypted. Overlay data amounts for 99.3851% of the executable. |
| Malicious | VirusTotal score: 3/69 (Scanned on 2026-11-08 05:28:06) |
Gridinsoft:
Trojan.Win32.Wacatac.oa!s1
Kaspersky: HEUR:Trojan-PSW.Python.Disco.gen Trapmine: malicious.high.ml.score |
Hashes
| MD5 | 5b2ec23672b7f5bc2a2821a3a9d92493 🔍 |
|---|---|
| SHA1 | 1e612fc5607747eb318dabff7b4c1e907976e16f 🔍 |
| SHA256 | 0b4de4d23d36d9c15b59bd53095b2ebd34e418a7bd1000635b7f434a73909131 🔍 |
| SHA3 | 887d6ae90c129c9b5fd9d82fa164cfd99d4fa03f85a6f87809b41718936a3ba5 🔍 |
| SSDeep | 786432:5aE5jyPirGxREsbuK4/lFuqI3uT6Zjg5QvMIYrd:YKjcC3FM3ugc5QA 🔍 |
| Imports Hash | f4d1e4cd7416ef83f79f7c6a038875b3 🔍 |
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x80 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 7 |
| TimeDateStamp | 2026-May-04 06:40:33 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 2.0 |
| SizeOfCode | 0x9400 |
| SizeOfInitializedData | 0x14200 |
| SizeOfUninitializedData | 0x1f800 |
| AddressOfEntryPoint | 0x0000461C (Section: .text) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0xb000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 4.0 |
| ImageVersion | 6.0 |
| SubsystemVersion | 4.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x77000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x200000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
| MD5 | eb2c3bfffdd12a8d8a4426a0909d8b5b 🔍 |
|---|---|
| SHA1 | 78c2e5ae2ebc7c5a93f844bb50fe05a86f9cb66b 🔍 |
| SHA256 | d233b849f351cbc3ba4d897b0b992d6af573c914b5c3c2e391bbe5c30298093b 🔍 |
| SHA3 | 67fc1c90d39b4077dca24723f0613d463c4c81260c97f689f856c6952a81b6cd 🔍 |
| VirtualSize | 0x9348 |
| VirtualAddress | 0x1000 |
| SizeOfRawData | 0x9400 |
| PointerToRawData | 0x400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 6.08396 |
.data
| MD5 | 66cbf5e1921ab575bdabbded8cc617ff 🔍 |
|---|---|
| SHA1 | 27679d5356064411731b150cb90f1abf30b1aa1f 🔍 |
| SHA256 | 1c74bb2384cb4f0a04ea7464916b0e1251b0bc6a0b0ff0175adc81942ff0732d 🔍 |
| SHA3 | 45e37f293318b1911a9e5004ac0647ec7d701cebd568b298628df2dd4b438b87 🔍 |
| VirtualSize | 0xe0 |
| VirtualAddress | 0xb000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x9800 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 1.56763 |
.rdata
| MD5 | a419a675a7695d5691f8216b1d65f7f4 🔍 |
|---|---|
| SHA1 | b55d2bab14690bbce91e9ec40e21124a41756eaa 🔍 |
| SHA256 | 33659d2b0d0cf61c08563411848a7d06b84554e36c59651de253436f663eeade 🔍 |
| SHA3 | a504567b8ee08b35c51ca42130c3b30789bb2c43b8c2743f0ec73119dd84d586 🔍 |
| VirtualSize | 0x11744 |
| VirtualAddress | 0xc000 |
| SizeOfRawData | 0x11800 |
| PointerToRawData | 0x9a00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 7.326 |
.bss
| MD5 | d41d8cd98f00b204e9800998ecf8427e 🔍 |
|---|---|
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍 |
| SHA3 | a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍 |
| VirtualSize | 0x1f640 |
| VirtualAddress | 0x1e000 |
| SizeOfRawData | 0 |
| PointerToRawData | 0 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
.idata
| MD5 | 24fcb2d1187d93c5fb72008f6a46baac 🔍 |
|---|---|
| SHA1 | 050c2ac64e1d069e19398e83ba1a44b1eb52f889 🔍 |
| SHA256 | 8ef346bd1a4fa9e80d0d0f292bfc70a500ecd0c367134774121a5b24f79856a0 🔍 |
| SHA3 | 1518a5ecc2edce8e06a94c3936b253d819ba21aefd9c6adb0720eea3375de6a6 🔍 |
| VirtualSize | 0x13b0 |
| VirtualAddress | 0x3e000 |
| SizeOfRawData | 0x1400 |
| PointerToRawData | 0x1b200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 5.39383 |
.ndata
| MD5 | bf619eac0cdf3f68d496ea9344137e8b 🔍 |
|---|---|
| SHA1 | 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5 🔍 |
| SHA256 | 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560 🔍 |
| SHA3 | 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59 🔍 |
| VirtualSize | 0x27000 |
| VirtualAddress | 0x40000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x1c600 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 0 |
.rsrc
| MD5 | 534b6a5299313e25de7ebd9c2dd3b7c7 🔍 |
|---|---|
| SHA1 | cf8e512f4c0224af950ebbff2eb1f9a1206d4980 🔍 |
| SHA256 | 3b385d9da9c4581d92d8eca5b92f13a4ad98db1d2bf020e77041506403aa3de3 🔍 |
| SHA3 | ed7a440d0c0e9891dc0426473cc3ec473bda70c586b024772bc5c9dae9c3660f 🔍 |
| VirtualSize | 0xf6a0 |
| VirtualAddress | 0x67000 |
| SizeOfRawData | 0xf800 |
| PointerToRawData | 0x1c800 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 7.80272 |
Imports
| ADVAPI32.dll |
AdjustTokenPrivileges
LookupPrivilegeValueW OpenProcessToken RegCloseKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW |
|---|---|
| COMCTL32.dll |
ImageList_AddMasked
ImageList_Create ImageList_Destroy InitCommonControls |
| GDI32.dll |
CreateBrushIndirect
CreateFontIndirectW DeleteObject GetDeviceCaps SelectObject SetBkColor SetBkMode SetTextColor |
| KERNEL32.dll |
CloseHandle
CompareFileTime CopyFileW CreateDirectoryW CreateFileW CreateProcessW CreateThread DeleteFileW ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileW FindNextFileW FreeLibrary GetCommandLineW GetCurrentProcess GetDiskFreeSpaceW GetExitCodeProcess GetFileAttributesW GetFileSize GetFullPathNameW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetPrivateProfileStringW GetProcAddress GetShortPathNameW GetSystemDirectoryW GetTempFileNameW GetTempPathW GetTickCount GetVersionExW GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalUnlock LoadLibraryExW MoveFileExW MoveFileW MulDiv MultiByteToWideChar ReadFile RemoveDirectoryW SearchPathW SetCurrentDirectoryW SetEnvironmentVariableW SetErrorMode SetFileAttributesW SetFilePointer SetFileTime Sleep WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringW lstrcatW lstrcmpW lstrcmpiA lstrcmpiW lstrcpyA lstrcpynW lstrlenA lstrlenW |
| ole32.dll |
CoCreateInstance
CoTaskMemFree IIDFromString OleInitialize OleUninitialize |
| SHELL32.dll |
SHBrowseForFolderW
SHFileOperationW SHGetFileInfoW SHGetPathFromIDListW ShellExecuteExW |
| USER32.dll |
AppendMenuW
BeginPaint CallWindowProcW CharNextA CharNextW CharPrevW CheckDlgButton CloseClipboard CreateDialogParamW CreatePopupMenu CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndDialog EndPaint ExitWindowsEx FillRect FindWindowExW GetClassInfoW GetClientRect GetDC GetDlgItem GetDlgItemTextW GetMessagePos GetSysColor GetSystemMenu GetSystemMetrics GetWindowLongW GetWindowRect InvalidateRect IsWindow IsWindowEnabled IsWindowVisible LoadCursorW LoadImageW MessageBoxIndirectW OpenClipboard PeekMessageW PostQuitMessage RegisterClassW ReleaseDC ScreenToClient SendMessageTimeoutW SendMessageW SetClassLongW SetClipboardData SetCursor SetDlgItemTextW SetForegroundWindow SetTimer SetWindowLongW SetWindowPos SetWindowTextW ShowWindow SystemParametersInfoW TrackPopupMenu wsprintfA wsprintfW |
Delayed Imports
1
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x7c28 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.97791 |
| Detected Filetype | PNG graphic file |
| MD5 | 55c2c5c02a4fb5fc7c4cf09aeb9c353b 🔍 |
| SHA1 | 1c343b0ab5846f380468ee09581f6c44d769648d 🔍 |
| SHA256 | 4d3dc448add47655f9060b94a9db6f950eeaa115c36072348cfcd3a0ce04a12d 🔍 |
| SHA3 | a1c791a058f0a1525e54f230d2266a80434c8bdfca633baecc0e04e961de1278 🔍 |
2
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x32f3 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.96397 |
| Detected Filetype | PNG graphic file |
| MD5 | ca1282ce380583829e2c2ba26034ab18 🔍 |
| SHA1 | cae8f0dfc559b16bc2aeac2526a763880f0731aa 🔍 |
| SHA256 | d527d430890d8e23a3e12dd743ac206fe8056a78ecd633180558977fde29912c 🔍 |
| SHA3 | 205b120babc5b62e93c9f0f66e3d7817cd2e0a1c2553d742520adb63e51dfb91 🔍 |
3
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x13ee |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.93375 |
| Detected Filetype | PNG graphic file |
| MD5 | 02d359e8a12506f65680f39fe7e5d369 🔍 |
| SHA1 | ee3b7c162c3ddc7426ea576afab29457cbc5397d 🔍 |
| SHA256 | 6551aa609be2f985dab6d8ec5c078dc0427e8abb41e7b1710aaa9af1418f60d4 🔍 |
| SHA3 | fa8940aa3ac42a623f22acc9355cce3b20dc5c783e5daa329c9b48ba7b73d0a3 🔍 |
4
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xd32 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.90312 |
| Detected Filetype | PNG graphic file |
| MD5 | 9da29b04bcd65129dd1538848983750c 🔍 |
| SHA1 | 531abf9c7070e7fb7e5e761fbcdfd0f551e6aedf 🔍 |
| SHA256 | 1623483a42db4140a85c76a82937c08276a9edab5b04d4c8c63017d6679cea9a 🔍 |
| SHA3 | 1a3de85dd99f1f9bb9dbd33225a25b320d818da3d4781c3b2838851e0121907a 🔍 |
5
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x771 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.88024 |
| Detected Filetype | PNG graphic file |
| MD5 | b61bd944076112049eb4c8c13fe3d4ee 🔍 |
| SHA1 | 8081b55020c74b60bb01fdfb152dc77ebb37e303 🔍 |
| SHA256 | 3f27275e58dbf81aaa816eb582d201be42424261042253cf0ab2ea0117f386f3 🔍 |
| SHA3 | e646ce49f84ed114f94d3cc73508f63b020b281beb4bdcfc968d87331924657e 🔍 |
6
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x508 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.80527 |
| Detected Filetype | PNG graphic file |
| MD5 | d05c04eead2ead5cbd67886e5ade07db 🔍 |
| SHA1 | 73ad120a11af1e04ca8bb1b334fcad325f576913 🔍 |
| SHA256 | 9cf7810f05b2317b12ffbda4f2e4045e6203225dcb7db2d1cb99e113af1f7c6d 🔍 |
| SHA3 | 3bfdfc98a25ff0547629411a58a36ea9f053af8841438fbbecc3f52d52bf2168 🔍 |
7
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x2d4 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 7.64459 |
| Detected Filetype | PNG graphic file |
| MD5 | dcd7694ecbbf76931494a7d81acc196e 🔍 |
| SHA1 | 3ccd219ecac8b654d3e72a5e1311eb23d80f8132 🔍 |
| SHA256 | bfee6c364f5d256bbee303e174592d12db744e993df57e304f96feea541a31f3 🔍 |
| SHA3 | f65cc5c3c6affff5a18dea1fde820d3bb898471a621080770f3b443bf91dfe1d 🔍 |
103
| Type |
RT_DIALOG
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x144 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.62375 |
| MD5 | 1d958df872e65e9a04f929c89155e3f3 🔍 |
| SHA1 | 5fff638c5caa7a6f598bfbafd8d8e7fe4f5764cd 🔍 |
| SHA256 | e6065cad9c0f4a4c7ec1de33c05b192b04cb96ad6cfb0e2ae0188fcaea6ea7c3 🔍 |
| SHA3 | b29b01b665ef63d2e0f362ce3bf145b41d860ddb989398de87df16d48ac8483b 🔍 |
105
| Type |
RT_DIALOG
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x23e |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.72007 |
| MD5 | 4e06b9c226906d7d31f90453697d36c0 🔍 |
| SHA1 | 5d9a8b5dd5fe583227a0ab81fba83d98c4eb5452 🔍 |
| SHA256 | 4b8679b0520596391355fd3b18c8b5979337aaa321c322f951fde6c053a6d845 🔍 |
| SHA3 | c3546d405a8722220c4e5652e54350941e3f2cadc30fdfc258fe377d9fef6354 🔍 |
106
| Type |
RT_DIALOG
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x104 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.84976 |
| MD5 | b756cf50afdc5a248bf9f3ff865177a6 🔍 |
| SHA1 | 267b0f95a9f852b7af09e5d909a3febc24ca3ccb 🔍 |
| SHA256 | c47426270cabd4199bbff8e4fc363265990a8a935c023a8c7d6597a0378e5f5f 🔍 |
| SHA3 | 1fb62d573cc8b6fdf137fd2c44249ba4f1c6d687bd878a786a395448d6069438 🔍 |
107
| Type |
RT_DIALOG
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xa0 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.52183 |
| MD5 | 6ffba239dcfcab2080195f23947b70aa 🔍 |
| SHA1 | bcda1ca8ee9bb9878bde83aa06c670bb5a4d5843 🔍 |
| SHA256 | a7e5ea849cb343e9b58de221aeb25c9dd4a3748070bfba879a30c4265fc39023 🔍 |
| SHA3 | a75544b4c3fcbcb32fe4e02d1a631e045b2e58516aa1065bb96cce681aea7030 🔍 |
111
| Type |
RT_DIALOG
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xee |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.85529 |
| MD5 | f90fecb69f0cde5d64f508884dcb0404 🔍 |
| SHA1 | 4baf5e55965823176fa6910a5ec9fdca077995f9 🔍 |
| SHA256 | 45ac0526fc85b64bcbb69ca682b0ca4d866a5e42709deaed11ce79395fec63d7 🔍 |
| SHA3 | 8e5819e3997885152c58d0ec124c1b14288188081f3719777d414d72f5b13e5a 🔍 |
203
| Type |
RT_DIALOG
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x144 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.87162 |
| MD5 | 41c7a6a3ac78ff6413d02f624fa5a976 🔍 |
| SHA1 | ba65ad0c98a82bc87a30fac3d9f71f21ae54838c 🔍 |
| SHA256 | d48a10fcf79cbe2e6cbc316798ca7db637c57c31d4cff53fb604fcfeb2e6b2f5 🔍 |
| SHA3 | 763ba05351831c759bac86551b48f45d8b89287303982cf130cf9dbefc539d33 🔍 |
205
| Type |
RT_DIALOG
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x23e |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.0149 |
| MD5 | d21a2558630cae9e5e5b040f0c195942 🔍 |
| SHA1 | 2158abb9bd2c65c083ffb151f4900dc3d43eb6b2 🔍 |
| SHA256 | 6a725a4bde352604259ecb6619eb67655ce77bec9df75876d6b3494a84b85a1d 🔍 |
| SHA3 | b9d6ed6ff6e6aca7b2ffb89f625ed96e7ab6c46d9845e72ed1624b4afb94566f 🔍 |
206
| Type |
RT_DIALOG
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x104 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.04873 |
| MD5 | 023218e558a88386c1ddf83aa27e5d16 🔍 |
| SHA1 | 0abbcaed1865698c5e2925a11d08622cd9c61b61 🔍 |
| SHA256 | 597dfe9fba32cc94839b5b78833cea16d6196f1f00162263a167628adfeaf7f0 🔍 |
| SHA3 | c4964b45ebe880f9e233043589220d5a052cc64ba8da9f78581ad31f95684152 🔍 |
207
| Type |
RT_DIALOG
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xa0 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.79455 |
| MD5 | f487ea2664475901e7728e27028f78e1 🔍 |
| SHA1 | 05a70c71e7e06c712ca99e8ce88bf6dd5779bdf2 🔍 |
| SHA256 | e705e251daa451ade5cc3f36278401ce4eb8b3e32ca0a7d5b7e03f525934d770 🔍 |
| SHA3 | 33f0ad42457a216bac4cb66e6209ff5ba1aa1b9895f7e906a6d70fb58c9ed675 🔍 |
211
| Type |
RT_DIALOG
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0xee |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.01911 |
| MD5 | 582ba3154fb8191d8288acd25e778f6b 🔍 |
| SHA1 | 891323673a8428a7a6a838c894bbb11060478145 🔍 |
| SHA256 | 0d022bebfa690ce3fbf128bcfc44bf6936c2fd6626f9460da89ca49632368939 🔍 |
| SHA3 | 4277a513a71389354d89d15fbc015f2009db12c53deda668d3c1dd315a40a9d1 🔍 |
103 (#2)
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x68 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.65771 |
| Detected Filetype | Icon file |
| MD5 | dab07fb5997251da2cd6a094b9b0ee73 🔍 |
| SHA1 | 950e5e0afed38ea75d1c8d885b8ebec110a22a78 🔍 |
| SHA256 | 0fc4124e7ee75acef51a9db0bd7eebadb11ce6158650b23404a33ab867e2a811 🔍 |
| SHA3 | ca0ad006417d0bf8d0f94f5be6badeb91eee3cedd8c7165d6ea1203e033305fb 🔍 |
1 (#2)
| Type |
RT_VERSION
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x1e0 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 3.17931 |
| MD5 | 3efaa4af0bfe94e9decc68592951998c 🔍 |
| SHA1 | f4c6ddf543e915104a6cc1e951b0ca6a02f57b8b 🔍 |
| SHA256 | 4e5a13adcd0b837a8e9d829fcccfa5aa6ad4f8edf3a3ebb87d63905936d79dc7 🔍 |
| SHA3 | 69c41f520d9e4c4fb455dc937c96381c4855e113ec05f381abed995ea4d4dcfe 🔍 |
1 (#3)
| Type |
RT_MANIFEST
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x430 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 5.28957 |
| MD5 | bd397c3cd0e27f251ad4687e26c016d1 🔍 |
| SHA1 | 04962112aeccb6a33c7aeb5e583927880bad6a14 🔍 |
| SHA256 | 5babf00d8976014bd8aef9cf558b7575dafa6261699407fe359fa114c110ca23 🔍 |
| SHA3 | 6cb966d1d12f1e8c07fdb7be98600e50835bbe722abc2ec6675a0bf30328fe95 🔍 |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0 |
| FileVersion | 1.1.0.0 |
| ProductVersion | 1.1.0.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| FileDescription | DF Antivirus Setup |
| FileVersion (#2) | 1.1.0 |
| LegalCopyright | Free & open source |
| ProductName | DF Antivirus |
| Resource LangID | English - United States |
|---|
TLS Callbacks
Load Configuration
RICH Header
Errors
[*] Warning: Section .bss has a size of 0!
Leave a comment
No comments yet.