0c5675a08cd71fd6d31ca87e992a915054bd8b80d268bff0561d7ecc2067e342

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2005-Dec-01 01:06:20
Detected languages English - United States
Debug artifacts F:\mw\Speed\PC\CDMWCollectors\NfsMWCollectorsRelease.pdb

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 7.1
Microsoft Visual C++ 6.0 - 8.0
InstallShield 2000
MASM/TASM - sig1(h)
Microsoft Visual C++
Microsoft Visual C++ v6.0
Microsoft Visual C++ v5.0/v6.0 (MFC)
Suspicious PEiD Signature: SafeDisc v4
SafeDisc 4
Suspicious Strings found in the binary may indicate undesirable behavior: Tries to detect virtualized environments:
  • HARDWARE\DESCRIPTION\System
 Contains domain names:
  • demangler.ea.com
  • http://patches.ea.com
  • http://patches.ea.com/nfs_mostwanted/DA/home.html
  • http://patches.ea.com/nfs_mostwanted/DE/home.html
  • http://patches.ea.com/nfs_mostwanted/EN-UK/home.html
  • http://patches.ea.com/nfs_mostwanted/EN-US/home.html
  • http://patches.ea.com/nfs_mostwanted/ES/home.html
  • http://patches.ea.com/nfs_mostwanted/FR/home.html
  • http://patches.ea.com/nfs_mostwanted/IT/home.html
  • http://patches.ea.com/nfs_mostwanted/JP/home.html
  • http://patches.ea.com/nfs_mostwanted/KO/home.html
  • http://patches.ea.com/nfs_mostwanted/NL/home.html
  • http://patches.ea.com/nfs_mostwanted/SV/home.html
  • http://patches.ea.com/nfs_mostwanted/TH/home.html
  • http://patches.ea.com/nfs_mostwanted/TW/home.html
  • http://patches.ea.com/nfs_mostwanted/ZH/home.html
  • patches.ea.com
  • pcnfs06.ea.com
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Uses constants related to MD5
Uses constants related to SHA1
Suspicious The PE is possibly packed. Unusual section name found:
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryA
 Functions which can be used for anti-debugging purposes:
  • CreateToolhelp32Snapshot
 Can access the registry:
  • RegCreateKeyA
  • RegOpenKeyExA
  • RegCloseKey
  • RegSetValueExA
  • RegQueryValueExA
  • RegOpenKeyA
 Possibly launches other programs:
  • CreateProcessA
  • ShellExecuteA
 Uses functions commonly found in keyloggers:
  • GetForegroundWindow
  • MapVirtualKeyA
 Memory manipulation functions often used by packers:
  • VirtualAlloc
  • VirtualProtect
 Leverages the raw socket API to access the Internet:
  • shutdown
  • WSASetEvent
  • bind
  • connect
  • listen
  • accept
  • sendto
  • send
  • recv
  • recvfrom
  • select
  • getpeername
  • getsockname
  • gethostbyname
  • gethostname
  • WSAIoctl
  • WSACleanup
  • getsockopt
  • WSAGetLastError
  • WSACreateEvent
  • setsockopt
  • socket
  • WSACloseEvent
  • ioctlsocket
  • WSARecv
  • WSARecvFrom
  • closesocket
  • WSAStartup
  • WSAGetOverlappedResult
  • WSAWaitForMultipleEvents
  • WSAResetEvent
 Enumerates local disk drives:
  • GetDriveTypeA
 Manipulates other processes:
  • Process32Next
  • Process32First
 Can take screenshots:
  • BitBlt
  • CreateCompatibleDC
 Can use the microphone to record audio:
  • waveInOpen
Suspicious VirusTotal score: 2/70 (Scanned on 2026-08-05 20:40:43) Jiangmin: Trojan.Convagent.auc
MaxSecure: Trojan.Malware.300983.susgen

Hashes

MD5 8d1d88dba3b0cdbaf45751ea2f671607
SHA1 f5586d5950a7cdc4ed773d0021184d5d1608a41c
SHA256 0c5675a08cd71fd6d31ca87e992a915054bd8b80d268bff0561d7ecc2067e342
SHA3 5f5537443b9cf4636dbf7c5fb15642faaed4b352352a6b793319e114640d3932
SSDeep 98304:F3AmIHzLwNuccUa7k9c59PnpoZ4Ds40KlNNF8jCwz:F3RITeuccUL9EPnpo+L0kA
Imports Hash c08ad863d5294c684e8689c881780e5c

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x108

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 5
TimeDateStamp 2005-Dec-01 01:06:20
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 7.0
SizeOfCode 0x495000
SizeOfInitializedData 0x1d0000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x003C4040 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x490000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x1000
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x660000
SizeOfHeaders 0x1000
Checksum 0x5b560a
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 ed6af509eb175bde50db1263503f631b
SHA1 79f1642f0dc3b9b48363f9ad7880858840ab3468
SHA256 8ea83928ba38b6ec58964d83de176d5a041e0c69ff52059e1d3e4e92a3a47454
SHA3 9c00ed40e82afb9948188ac12b5b650980a0ed2898c5fd116d07ef839f654522
VirtualSize 0x48e2a5
VirtualAddress 0x1000
SizeOfRawData 0x48f000
PointerToRawData 0x1000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.51352

.rdata

MD5 a448fbbf764e11238baba0943137b17e
SHA1 daee3acb8059653fef578ae02c0ce47597ad89f7
SHA256 1c509f7177b41c847c43a2282276a0d8cb4f515dcd272a75871ffda9aa04decd
SHA3 2c327fec6609ad3a9231e502420b537a265e297cb58ae846cec41367759685dd
VirtualSize 0x5971d
VirtualAddress 0x490000
SizeOfRawData 0x5a000
PointerToRawData 0x490000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.36338

.data

MD5 cce53f54d88664efa79cca811e1e6686
SHA1 ee6c260cb0a6b53ed9c00a0d52f1211e56b24994
SHA256 2f00dcd3c0321f2da51d2b09e23ace8c3491400dc5e78da635d15b8ad3daa190
SHA3 819e42a54322c55b49abf4d16ee0c175766f7833cb22aab9084ba468a2c4fee5
VirtualSize 0xdce10
VirtualAddress 0x4ea000
SizeOfRawData 0x24000
PointerToRawData 0x4ea000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.95602

.rsrc

MD5 8d583dfb4b7dfd655f16ed559acd5668
SHA1 11ee7fad76a8fe47b4614810ee7ccc72e8afdd91
SHA256 2c7c90ba0acbfbad18344903142396a21303a9c08220cb90f018ce8c4f3943c4
SHA3 3695cea5cff766fc5ae6433c441a3038bb1178b0cc8cd90629176400424b59df
VirtualSize 0x57004
VirtualAddress 0x5c7000
SizeOfRawData 0x58000
PointerToRawData 0x50e000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.67591

MD5 db4b7e5f9c81bb22f0a45fa3793edcc5
SHA1 3c63013b8ec9f2f3d142808e7ede9210e89cb5d9
SHA256 4e12cf73df895c4e6e7eefb9a6da0080cfa46172dbf27cdf5ca0ad29d4501386
SHA3 e5eeb4de3057dcd4f80048ed1eb73bea363a836b6a629df9a09a2c7e273a8f8e
VirtualSize 0x40e4e
VirtualAddress 0x61f000
SizeOfRawData 0x41000
PointerToRawData 0x566000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.47284

Imports

KERNEL32.dll GetPriorityClass
GetCurrentThread
GetCurrentProcess
GetLongPathNameA
SetErrorMode
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateDirectoryA
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
GetTickCount
IsDebuggerPresent
RemoveDirectoryA
GetFullPathNameA
SetCurrentDirectoryA
GetDiskFreeSpaceA
FileTimeToLocalFileTime
FileTimeToSystemTime
ExitThread
GetThreadPriority
GetProcessAffinityMask
SetPriorityClass
SetThreadPriority
SetProcessAffinityMask
Sleep
GetVersionExA
GetLogicalDrives
GetDriveTypeA
GlobalMemoryStatusEx
ResumeThread
SuspendThread
DeleteFileA
MultiByteToWideChar
FindFirstFileA
FindNextFileA
FindClose
FatalAppExitA
DebugBreak
SetupComm
SetCommTimeouts
GetCommConfig
SetCommConfig
GetCommState
SetCommState
PurgeComm
WaitForMultipleObjects
SetCommMask
GetOverlappedResult
WaitCommEvent
GetProcessHeap
QueueUserAPC
SetThreadAffinityMask
ReleaseSemaphore
CreateSemaphoreA
ReleaseMutex
CreateMutexA
CreateThread
GlobalFree
GlobalAlloc
GetDiskFreeSpaceExA
GetFileSize
MoveFileA
GetCurrentDirectoryA
ResetEvent
QueryPerformanceCounter
QueryPerformanceFrequency
CreateProcessA
GetLastError
IsBadReadPtr
OutputDebugStringA
CreateEventA
SetEvent
CreateWaitableTimerA
GetSystemTime
GetCommandLineA
RtlUnwind
RaiseException
IsBadWritePtr
HeapValidate
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
ExitProcess
GetTimeZoneInformation
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsAlloc
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
SetLastError
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
HeapAlloc
HeapReAlloc
VirtualAlloc
GetCPInfo
CompareStringA
CompareStringW
ReadFile
SetConsoleCtrlHandler
GetACP
GetOEMCP
InitializeCriticalSection
VirtualQuery
InterlockedExchange
IsBadCodePtr
GetTimeFormatA
GetDateFormatA
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
VirtualProtect
GetSystemInfo
SetFilePointer
GetCurrentProcessId
FlushFileBuffers
SetStdHandle
CreateFileA
SetEndOfFile
GetLocaleInfoW
SetEnvironmentVariableA
DuplicateHandle
TerminateThread
SleepEx
GetExitCodeThread
SetWaitableTimer
WaitForSingleObject
SystemTimeToFileTime
d3d9.dll Direct3DCreate9
d3dx9_26.dll D3DXMatrixMultiply
D3DXVec4Transform
D3DXVec3Transform
D3DXMatrixInverse
D3DXCreateEffectFromResourceA
D3DXCreateEffectPool
D3DXMatrixOrthoLH
D3DXMatrixPerspectiveLH
D3DXMatrixTranslation
D3DXVec3TransformCoordArray
D3DXVec3Normalize
D3DXVec3TransformNormal
D3DXMatrixTranspose
DINPUT8.dll DirectInput8Create
USER32.dll SetWindowPos
SetWindowLongA
BeginPaint
EndPaint
PostMessageA
IsIconic
PostQuitMessage
SetCapture
ReleaseCapture
DefWindowProcA
wvsprintfA
GetCursorPos
PeekMessageA
ShowCursor
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
MapVirtualKeyExA
GetKeyboardLayout
GetDesktopWindow
GetForegroundWindow
wsprintfA
PostThreadMessageA
SendInput
LoadIconA
LoadCursorA
RegisterClassExA
GetWindowRect
GetClientRect
MapVirtualKeyA
ToUnicode
MessageBoxA
AdjustWindowRect
CreateWindowExA
UpdateWindow
SetCursor
SetFocus
SetForegroundWindow
ShowWindow
DestroyWindow
ADVAPI32.dll RegCreateKeyA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
SHFOLDER.dll SHGetFolderPathA
SHELL32.dll ShellExecuteA
DSOUND.dll #6
#1
WINMM.dll waveOutGetDevCapsA
waveOutGetNumDevs
waveOutWrite
waveOutGetPosition
waveOutSetVolume
waveInStart
waveInAddBuffer
waveInGetPosition
timeEndPeriod
timeGetTime
timeBeginPeriod
waveOutReset
waveOutOpen
waveOutClose
waveInStop
waveInGetNumDevs
waveInGetDevCapsA
waveInReset
waveInOpen
waveInClose
waveInUnprepareHeader
waveOutUnprepareHeader
waveInPrepareHeader
waveOutPrepareHeader
GDI32.dll ExtTextOutA
BitBlt
GetPixel
DeleteObject
DeleteDC
SetBkMode
SetBkColor
SetTextColor
CreateFontA
CreateBitmap
SelectObject
CreateCompatibleDC
TAPI32.dll lineGetDevCaps
lineShutdown
lineInitialize
lineAnswer
lineMakeCall
lineGetID
lineClose
lineNegotiateAPIVersion
lineOpen
NETAPI32.dll Netbios
WS2_32.dll shutdown
WSASetEvent
bind
connect
listen
accept
sendto
send
recv
recvfrom
select
getpeername
getsockname
gethostbyname
gethostname
WSAIoctl
WSACleanup
getsockopt
WSAGetLastError
WSACreateEvent
setsockopt
socket
WSACloseEvent
ioctlsocket
WSARecv
WSARecvFrom
closesocket
WSAStartup
WSAGetOverlappedResult
WSAWaitForMultipleEvents
WSAResetEvent

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x1574
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.77688
Detected Filetype PNG graphic file
MD5 fda92c0c698ebeeb63fad2730a2e8f28
SHA1 6912a352ce6035811d54b2aa32db9156fd50e1c1
SHA256 fd43b592ef10d44882a1c3ed37a44c7417009b995c0f505cae24e1b14a5a4a2b
SHA3 055006aae606afbc91664e0367d084136b232278cf0b49856db16254d600852e

IDI_CARDEPTH_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xd10
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.54586
MD5 67dc5eee887d19b82bafe854da476bac
SHA1 b7255da4cdcb5259f897b7531985a293fb524bce
SHA256 c24f5a36f3a7ef63528a22519ff1f24adb0ece94a5e16a797d55a43c731adc36
SHA3 ec8bbf7e7e74d60a73de504cecfaa93e9c26ba4867ace818078b3dbf2027b654

IDI_CAR_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x44ac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.82869
MD5 7de798053b3260e82fa976e2835dea0b
SHA1 50decd18e36f8c32f58d413be811dcb358acc1db
SHA256 4a41ff00e9bdfccdd827876e285da641f8b6d61d79c77c3c85f1bd8a35aca163
SHA3 4becf7b1f1fc8f68518503af65996c7bbf5c16d722f6fd31d32df0267f09eb29

IDI_CAR_SHADOW_MAP_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x1618
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.49805
MD5 e26f82779133c7a1872b3aad4ed3c054
SHA1 2f7f38397b5ef555ad53b356fc92331f1f05de46
SHA256 6d38dfc54d3c90e05b30b25bc7092553de1a53824142b1c10c94797533d1dd26
SHA3 e557f36404a907949644de12d7cb6bd1949c8ad664dd609114491dd32d9f74ec

IDI_FE_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x27d0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.14413
MD5 de86fe1ca8afa66bd11708529823b140
SHA1 f79ec0d38772dadbc49b67b3824b485ea68347ba
SHA256 77399852f4e8bafef0f6b0f0d8c5341dc734d760062bf74e0a81a46e0ba3ef61
SHA3 89ff87e3383419d9fcc6176866a9a000e7ba1c3a4f76bd00568865c7ae9372d3

IDI_FE_MASK_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x25f4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.16268
MD5 0e511f9a310e6ac6ce2ceb26045d65ef
SHA1 2a79094ab8eae88e196556f9af4ded8e300da787
SHA256 ca10021053fa4dcfb32f00b4ac14c788a9f20e9e97cb383668699e4ff1eb8130
SHA3 90521f76184c57b789fae26c0c0b621e2cab0c7b3f482f49676626127926a20d

IDI_FILTER_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x5268
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.30471
MD5 93b723bda63d8e605e422e3ff6ce743d
SHA1 2d220fad07c5d978ffc1915c9feb9dda1ea89022
SHA256 ca28ad00d631ae8b650a6cdcc978f8d35ebca1ba0d83c65a1ade8f21d4f1b096
SHA3 3c8707bc475b7040a06ae1ada8bdd808a88f5caf40e330d3c45f64c75238cba8

IDI_GLASSREFLECTSHADER_FX

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x28d4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.67803
MD5 2f78740344d2684197b38b8be829f810
SHA1 8c4470621f2b80920b060019bf1765a6686e8f24
SHA256 752a2348115d5a41a595e888bbaaaa608d232f3758d12e9c6f36a5bf66084c13
SHA3 3b4a4e14af7ef84e5e007536247f87378b7504654f3a5fe3265a0d77f7a9a41f

IDI_GLOSSYWINDOWDEPTH_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xd04
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.54405
MD5 e308f8a5649d0053dcd501427aff848f
SHA1 b87f04df96fee3275da78155c5bdcf0f22dbfa71
SHA256 d84af0ff4b9945ddcc844152210769ca5709586f3fda9ba6fd1338f84fafe1a0
SHA3 cb33c72a06e2002e64bd874d6cab9b4adde4ebc78b7566d2af141a36710baf0d

IDI_GLOSSYWINDOW_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2794
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.63855
MD5 05622448f923cbe6179bdb017c49aa18
SHA1 f1f0995b7a1c7b23014c975300c6a3bde0ed9088
SHA256 5d389f73fd6c39a0dadb1da896fd4c43eed5a5bcbd2dc01181392e0bf429e24c
SHA3 d54417a4df94adc394305a205058649d39c662bc614d7e5517f19936e74ece73

IDI_OVERBRIGHT_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x5a14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.76686
MD5 87197a91a397829a449db6d9b7992e8d
SHA1 21ad82d04bfd9339ef74ce02ce103b8b90a940cf
SHA256 68b2c03a383a2023a17dd3492f1b2bb895d63ead4a9d4eefa6c20b3247874420
SHA3 2bfaa9d1903f6042f559bcc79aa91b5a676c8e1e7150d22e414312dba6753172

IDI_PARTICLES_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x3ca4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.34011
MD5 23ed96f15a999dc1e81883eb3c8997c4
SHA1 535fdeb2e37bbeedf640a07b6c388f0fb315942b
SHA256 f395a29d3c6a043fb6cf6ff38926c9ac04bb748a45bc2ddecdb1f92afa705e7f
SHA3 3309f9a5aac2f3a13f78c251ac4b122f8128e3fddfe80b7a2a3f3cb0cf35f6bc

IDI_RAIN_DROP_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xa74
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.93057
MD5 97219a87d7fa804fa99491f6d193ea18
SHA1 2fb78267d3444b9b81657c317ee4be57c3be85a8
SHA256 b498ca06ffd9a363669a22e0ccb33fd7701d1329723eb3d560453a76149c93cd
SHA3 d31459514f5c87d4a414bc51f4c12a0f264f896b98695059ad5605f97ffce9c7

IDI_RUNWAYLIGHT_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2cd8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.19119
MD5 daf467ea7d213bd0a37101e6c69e275e
SHA1 a88feb10b100495ef299514cb35818fd48ee481d
SHA256 8064142ac8b2c7683a7e0254f4ff2d68d2cc960a3bc4793754a13d1690899851
SHA3 b0e10514badb35ef778b758248e486ac40ea62e24d53601d98f729a490c87121

IDI_SCREENFILTER_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x3ef4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.24943
MD5 b01e307e0ff05b2c5489eece27c0de7b
SHA1 32156e2614514e1ef666fd3507f032dbe3218a18
SHA256 387d739479185f8c5bd509ac4847854004380cc2e2d84c95764b6a0274b26874
SHA3 1296c85efa03cab80fd16b507df105f43d8a574f898a582a1c0ca0365cfbf5bc

IDI_SHADOW_CG_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2524
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.32815
MD5 0e1414fb3cc309c2349a1ed74fa7b07d
SHA1 96243d59eac7cf44a10d0be6222b9afb799ebd4b
SHA256 5da6d6bb38146ab5496826ce54425a76d0a08d18084587486d18b9eea02d8b30
SHA3 1dcf54161040954f98358a7a877ef9d15a89e9086e43d3f2a6af9367b94d677c

IDI_SHADOW_MAP_MESH_DEPTH_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x5e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.32082
MD5 5c6d6254ccfabd2e968b796e7a5f1b22
SHA1 d5a4fc3cef5a3b878caef4163047299c68e6f860
SHA256 a8d7071074a081c74093fc432d430822a70e985ee059f65756e233d9a0530330
SHA3 5f920f8d3d2da1bbeaa7cf061c4105cce6d169c15bd1264fff2b74f255458b86

IDI_SHADOW_MAP_MESH_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x5bc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.16802
MD5 490461b4b61c64e3a7210b23de5342e5
SHA1 09afb9eaff8f1b4efccbf5b696788345b6268335
SHA256 20bffc66acfccc6f6cbd071fe37ae51320510d28fb9b5c9a77cab0dc8abe6010
SHA3 e4c81473256c2de9afb555856c68bf33464e7344f95acb241684dbfffcf37b7a

IDI_SKYBOX_CG_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x1f2c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.21273
MD5 9173ab70991a661b24041dddf9e8f2a6
SHA1 4f38191d9579719f83fb5ae5f6b8c88b3c26cbec
SHA256 4eebc7131e192ba7268c914b75aafb89a746c8beed0824741b80888f68362d03
SHA3 ea9ed01ac6642bffc4e7404b020c8dfaffac65b7bf0e5d989751fda7fd0e83ef

IDI_SKYBOX_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x202c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.45177
MD5 19d47629e955644d43d956264b7c1603
SHA1 51b3a0665edaccd639705e747b91a1094c2822a4
SHA256 59ecc7c9e9587136c7a7a3066ee7f1d90bd4e7c3022b90db7c9ef23d2c083724
SHA3 8d8f2ad75d0ed1acc58c2b81c4905c0094d265ee46df7ec52fb4ddcf20ae0cac

IDI_TREEDEPTH_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xdc8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.5951
MD5 b95ce776d2bb8b478839ad397f2b2902
SHA1 6a98ffee437f1ff86b2c5b0cabe40c0980adfd4e
SHA256 f502b4f704fc69bfe142118f518c5047c5bd4c72a7e8d5c1ef95f8d58e1703f4
SHA3 f5afd8aeb8d592814f2c7426cc870e767b526974fb05696ddce86af5b307a341

IDI_TREE_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2170
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.52146
MD5 0229241750f201a0ce0bcbcd4916213e
SHA1 cfad94cc2bcbf077dd3c55a60d382bb37723adab
SHA256 19ea8376221a7178bea1d2850e53c794b1c9a87afc0ac77aa63a0d8ae0be27ce
SHA3 6733306580ffb2d43152010ee7992337c24d60499e59e4922339629054d84533

IDI_VISUALTREATMENT_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x4888
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.73265
MD5 098d4eefc7791f2060967d4cc6dcc254
SHA1 ec196233cf823ec9fd42e6433ec475530fc27ac4
SHA256 11662611f39c9418178f5021b4263486536934748b71888cd54ba7cc05a77050
SHA3 bdfa48d38723bb864690947230c9b61ea03da9ea332e025953f64972695bcf2f

IDI_WORLDBONE_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2adc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.10669
MD5 4f7f188e01c822b8cc13f7eb94646b8a
SHA1 24288435146d63057a10598ba0a3a975da8f673a
SHA256 257837b912498cbd7e971223991cae52e0ac5524279e70e7a3425218fa5aeb66
SHA3 02503a382be558555dd9dd91becb6a3a45a3cfded28fae040725d03372b762b1

IDI_WORLDDEPTH_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xa9f0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.81756
MD5 211738aff183b1b122ebbae577e8f00b
SHA1 9e13e16f30a07b8aec6a5ecb0bf2feff17830644
SHA256 05e8f8e0f65c74dcf5743608d967fa97d53952cc97c342215be056cdfb84d10f
SHA3 7a4185599a92d468057b3d541c086ebb6482733ab34ce8e6230ed9055a6b722e

IDI_WORLDMIN_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2c4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.44742
MD5 6d18573d1277bfbedd14d6e107420359
SHA1 25c1a186b779b5d3209625311c010d482ed2c899
SHA256 27f3344757f110e11d0e46738bde173ebaa17e2a83265d6839e24f38776498bb
SHA3 8a2e4530959e736ea29d826587844092d40cb094dcec4f122c9963042bb7cc64

IDI_WORLDNOFOG_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x27ac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.53554
MD5 8fe9bd6a32d2e648b3b6c1a71fb0e2d1
SHA1 813b501a0fbc3011c0e2e13888c79e7ee2789255
SHA256 e6334a98cff67235560fa478f1c391e33e63b141c0612740f789f14f436430bf
SHA3 69c22ad8f33e2be8cc8c897aa2e81b0389948fa4e15962fbad3fdcc55779bd58

IDI_WORLDNORMALMAPDEPTH_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xd04
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.54705
MD5 9d9c2e53c37dc76b3986f382e77dc992
SHA1 d83b0794e0406e4c4b73c974bced3b50d2181180
SHA256 71654b764239e0ef5319f63e6793184a42c3c16d7a332b13fb0b6f6b10b81189
SHA3 a861748bd9c20e293557c482a737265454084552b5f909bc8e2cd6cb558dc5eb

IDI_WORLDNORMALMAPNOFOG_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x1568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.24383
MD5 490c6d5586ce6e76d256ea8a61f9a45a
SHA1 54c3301fc31e258e0de27140047fb33ce7e6ab41
SHA256 98cd83f64a84780f4e2d961877d39bfd0775c0817f6592571e2c4abf1ee1d90c
SHA3 6ed9c1074a01c371806439c1bd7c9d7bbe234cbc325f2ae5dade8859d0097007

IDI_WORLDNORMALMAP_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x3614
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.63155
MD5 56083af2bd5e2a3f5174f0f7aa42256e
SHA1 e24893a5e2a50630c41e362274c9aacc11be12bc
SHA256 76480713130b5811027af6f28e2b5cb0c9334c3849fb964f62c76a12ea59d2c9
SHA3 517bd0f62c18a10bee5087819a1acd3d9418ae060f97f476dd2a87e9d5d1eac6

IDI_WORLDPRELIT_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x1540
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.33736
MD5 400ec306781a04c54386de2bf835e9d7
SHA1 33e308afb2defe8f00a36cc4bd4bb46f52f4f334
SHA256 b9380a02bb8a72c4bb768904da34b40127fe082a78d5f42778f3aa4791ffeaa8
SHA3 697aea3a8129b9ee2cd10dec9be0133adb33488f33b5538e0702e9a83cb2df32

IDI_WORLDREFLECT_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x5c58
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.73581
MD5 602dd842fc23d892da35188a44c244d7
SHA1 aa481c8a1cbdfeffd1e90f837f0484d9a72ba508
SHA256 aa940050506496279e85fff9142b387b9fab6df074c22caa6f0ce0a0f4f449b3
SHA3 ce54cfeedc82f0e59a44013e6d2f450544b0650cc845ac63bce99e42a64b8e3b

IDI_WORLD_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2b68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.5803
MD5 d5a48ee2efb8b8fee0c2fa7c0914cadb
SHA1 c948ea5ae2f4cff6e8987b7e9190dd641f09fb72
SHA256 316d26bc18d8a7e330007169f5ab4d9b87a5eb0eddfed920875723d1761cff6e
SHA3 c3bbe9f94945ba3fa3fb267548d91ce96fe99a1d1a8655f48f6240ec75812252

IDI_ICON1

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.51664
Detected Filetype Icon file
MD5 39e569c27d864df161abc72053e37723
SHA1 3e67e6c28ec7231cc96e34e50592d7163cca48b4
SHA256 33da59ff266715f1f677f9e4a39cd112e4e331d983850a68c6bf90b7e3cbe97a
SHA3 a2ef190cc23325eac663330900e5fc33b00561031b0ca6ceab4164d4883f201d

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2005-Dec-01 01:06:20
Version 0.0
SizeofData 81
AddressOfRawData 0x4c849c
PointerToRawData 0x4c849c
Referenced File F:\mw\Speed\PC\CDMWCollectors\NfsMWCollectorsRelease.pdb

TLS Callbacks

Load Configuration

RICH Header

XOR Key 0x41088198
Unmarked objects 0
Imports (9210) 2
Imports (2067) 2
C objects (VS2003 (.NET) build 4035) 3
C++ objects (VS2003 (.NET) build 4035) 1
Imports (VS2003 (.NET) build 4035) 8
105 (2067) 3
ASM objects (VS2003 (.NET) build 3077) 62
C objects (VS2003 (.NET) build 3077) 276
Imports (2179) 17
Total imports 300
C++ objects (VS2003 (.NET) build 3077) 327
94 (VS2003 (.NET) build 3052) 1
Linker (VS2003 (.NET) build 3077) 1

Errors

Leave a comment

No comments yet.