Manalyze report for 21c7e568e8247cfde8c3c7f96bd80a1bc256f7181206dedeca231dcb7b2fa1e8

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	1970-Jan-01 00:00:00
Detected languages	English - United States
TLS Callbacks	2 callback(s) detected.
LegalCopyright	Copyright (c) 2019-2025 Springdale Creek Software Group
FileDescription	Monitors file hash signal meter in real time from the notification area
CompanyName	Springdale Creek Software Group
ProductName	File Hash Signal Meter
ProductVersion	`8.17.31`
FileVersion	`8.17.31.0`
OriginalFilename	FileHashSignalMeter.exe
InternalName	FileHashSignalMeter.exe

Plugin Output

Suspicious	PEiD Signature:	`HQR data file`
Info	Interesting strings found in the binary:	`Contains domain names: golang.org https://go.dev`
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to SHA256` `Uses constants related to SHA512` `Uses constants related to AES`
Suspicious	The PE is possibly packed.	`Unusual section name found: .xdata`
Suspicious	The PE contains functions most legitimate programs don't use.	`[!] The program may be hiding some of its imports: GetProcAddress LoadLibraryA LoadLibraryExW LoadLibraryW` `Functions which can be used for anti-debugging purposes: SwitchToThread` `Memory manipulation functions often used by packers: VirtualAlloc VirtualProtect`
Info	The PE is digitally signed.	`Signer: File Hash Signal Meter` `Issuer: File Hash Signal Meter`
Malicious	VirusTotal score: 12/71 (Scanned on 2026-06-10 14:34:10)	`AVG: MalwareX-gen [Cryp]` `Avast: MalwareX-gen [Cryp]` `Bkav: W32.Malware.3F713CA3` `DeepInstinct: MALICIOUS` `ESET-NOD32: WinGo/Kryptik_AGen.BO trojan` `Elastic: malicious (high confidence)` `Kaspersky: VHO:Trojan.Win64.DLLhijack.gen` `Malwarebytes: Trojan.MalPack` `Microsoft: Trojan:Win32/Phonzy.B!ml` `Rising: Trojan.Kryptik!8.8 (TFE:6:dlRxbQPDLMQ)` `Trapmine: malicious.high.ml.score` `huorong: Trojan/FakeDll.aj`

Hashes

MD5	`92c6cb31299d8b65f3cfc4dd0bc06f11`
SHA1	`606e2983306fa4218485098478c7085af7e28aaf`
SHA256	`21c7e568e8247cfde8c3c7f96bd80a1bc256f7181206dedeca231dcb7b2fa1e8`
SHA3	`e03cdcd817cc52e28614ffc353f7062edbf99449387dfc2ab4cb1c6fae9e4711`
SSDeep	`98304:q5FrxZuQFHYkU5io4xOVpSrAdNIAL2SKjMVRKtNGvMed0kqDML6chHtnIrXyfnbA:q5PZnlBJATFAgKnGbd0kqEFhHtIuTbM`
Imports Hash	`72d8fd7d53a64b79a1028f9534045520`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`12`
TimeDateStamp	1970-Jan-01 00:00:00
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_DEBUG_STRIPPED` `IMAGE_FILE_DLL` `IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE` `IMAGE_FILE_LINE_NUMS_STRIPPED` `IMAGE_FILE_LOCAL_SYMS_STRIPPED`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`2.0`
SizeOfCode	`0xda000`
SizeOfInitializedData	`0x706e00`
SizeOfUninitializedData	`0x4a400`
AddressOfEntryPoint	`0x00000000000012EF (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x2d8aa0000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.1`
ImageVersion	`0.0`
SubsystemVersion	`6.1`
Win32VersionValue	`0`
SizeOfImage	`0x832000`
SizeOfHeaders	`0x400`
Checksum	`0x7e5a0f`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x200000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`49962d797459ae8fe2f0cff4856fe141`
SHA1	`ce746c3bb771a8b3eef9568ddc05dffd782951cb`
SHA256	`7f526ccf5bb7a8f0448d3ce0a2dbeb6d4d0e47c7ad3771d9e71d459ef5bc6a4e`
SHA3	`8df9343bf7dbe62fc423727f1cc329a9c3e8b7dc0c9f5ee00ab08254fe601ef4`
VirtualSize	`0xd9ff0`
VirtualAddress	`0x1000`
SizeOfRawData	`0xda000`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.2793`

.data

MD5	`a60de82f84770149489335e72f198aa4`
SHA1	`303910a826a29764a81004a746e92d109f4d5831`
SHA256	`3de500294a9288988f688b722ebbbd104f6b58870bc9f56ca2c7d3fc49aa09d1`
SHA3	`ebaa99a9ef0b52dd0ab51545f7be06aa623f6af3c249314c6de5fedce92812fa`
VirtualSize	`0x5eaff0`
VirtualAddress	`0xdb000`
SizeOfRawData	`0x5eb000`
PointerToRawData	`0xda400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`7.99533`

.rdata

MD5	`4fa9ffba2b9406892aeb176e09c86d23`
SHA1	`7d2bbafc99e9abb7ab8ad0ebd6ca60a9d0146aa8`
SHA256	`f2ae4dda5e0eef5f50adec6fb94e32a6749e5977d9a6e03f718265a11c423f0a`
SHA3	`4059ce47dd14fc4a6d9acec6b727ca77f32f51935bd3b5594bd2d3ccf23cbb7d`
VirtualSize	`0x1013c0`
VirtualAddress	`0x6c6000`
SizeOfRawData	`0x101400`
PointerToRawData	`0x6c5400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.50592`

.eh_fram

MD5	`bf619eac0cdf3f68d496ea9344137e8b`
SHA1	`5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5`
SHA256	`076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560`
SHA3	`622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59`
VirtualSize	`0x4`
VirtualAddress	`0x7c8000`
SizeOfRawData	`0x200`
PointerToRawData	`0x7c6800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0`

.pdata

MD5	`340103941c4e366f4a1511e3897a6b66`
SHA1	`937b6ea13f3ecc14af631167dce39721593b7e15`
SHA256	`9a681ab3c1a708bcb0cb4a7d8765fc4f765dbbcd67e19964118c96a8d049905e`
SHA3	`d32551d53dcb478ad27aea5fbd60d5dfece496b0a0aa1279e77e9f8dc9e6bd97`
VirtualSize	`0x5fa0`
VirtualAddress	`0x7c9000`
SizeOfRawData	`0x6000`
PointerToRawData	`0x7c6a00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.40933`

.xdata

MD5	`821e4f3072884ab9e1f04b3bde35402e`
SHA1	`fb92f865bf3fc01fffbb1fb399217e2f68342f57`
SHA256	`66d40788399682a7cda26938d906eff415c4b1077abe54f3c72c6640ab5298c2`
SHA3	`250c30d64d8a45e24dc6d8309ce7f76aff4e670127676a1c9c555545f0aea2ce`
VirtualSize	`0x33c`
VirtualAddress	`0x7cf000`
SizeOfRawData	`0x400`
PointerToRawData	`0x7cca00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`3.406`

.bss

MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`
VirtualSize	`0x4a2d0`
VirtualAddress	`0x7d0000`
SizeOfRawData	`0`
PointerToRawData	`0`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_UNINITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`

.edata

MD5	`f57ae86dd985f284b91ffda81f242f3a`
SHA1	`2e82d4e70499dd5d1c2edee7823a2e7a148ab140`
SHA256	`f96df2ee8e074ac3a7f1b24dd99ded3a755c57739811d5dda7f0476a580ee0f9`
SHA3	`0bbcc0626c3c6d6a66d2e0d9c53cc2b4fbe6e3193d2e3516da3593e22237e55e`
VirtualSize	`0x116`
VirtualAddress	`0x81b000`
SizeOfRawData	`0x200`
PointerToRawData	`0x7cce00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`3.15313`

.idata

MD5	`b2738c55bc27d25e20558db9db92b0e1`
SHA1	`00fd9cfc0e1d92f7995e9ddc34ec97e63e967f8a`
SHA256	`a5c6cdb3a3366b9e7174ad2c80b7c5fdbc432ddb9103ac65bb13ca77694eda68`
SHA3	`f24ade1e80a4a2e56772c4f4cf2c79cc5e1bf5e3d060ef971417921dcdffbc78`
VirtualSize	`0xd40`
VirtualAddress	`0x81c000`
SizeOfRawData	`0xe00`
PointerToRawData	`0x7cd000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.3742`

.tls

MD5	`bf619eac0cdf3f68d496ea9344137e8b`
SHA1	`5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5`
SHA256	`076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560`
SHA3	`622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59`
VirtualSize	`0x10`
VirtualAddress	`0x81d000`
SizeOfRawData	`0x200`
PointerToRawData	`0x7cde00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0`

.reloc

MD5	`98d2fa216e73b948c40dddaf16797221`
SHA1	`c2a2903f2db026c1670e11c2f2bcbd7f64cf12be`
SHA256	`3496642a71dd747a8657b2f08fb80e05e37bc704eafe73b214ac5da0b44ac544`
SHA3	`9a774a1aa128eaa3201cc8ee958ae82d8d8a1d5a754cd6f0eb303e6a25e8c9fa`
VirtualSize	`0x47fc`
VirtualAddress	`0x81e000`
SizeOfRawData	`0x4800`
PointerToRawData	`0x7ce000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.43942`

.rsrc

MD5	`806a7b03fa8e5af6430eec5d55736312`
SHA1	`828c9fe52d2d5dddef9bc542047d01cca08e6cb2`
SHA256	`f47b734c2defb9123786c5664f84b5db87158138d00c7912778c986bbf6c195b`
SHA3	`9ec3f39fd6649c5abe0a5b139b8e5f68b1b08990ed60bebbcce1aee764b23fcb`
VirtualSize	`0xe91a`
VirtualAddress	`0x823000`
SizeOfRawData	`0xea00`
PointerToRawData	`0x7d2800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`7.83488`

Imports

KERNEL32.dll	`AddVectoredContinueHandler` `AddVectoredExceptionHandler` `CloseHandle` `CreateEventA` `CreateIoCompletionPort` `CreateThread` `CreateWaitableTimerExW` `DeleteCriticalSection` `DisableThreadLibraryCalls` `DuplicateHandle` `EnterCriticalSection` `ExitProcess` `FreeEnvironmentStringsW` `FreeLibrary` `GetConsoleMode` `GetCurrentThreadId` `GetEnvironmentStringsW` `GetErrorMode` `GetLastError` `GetModuleHandleA` `GetModuleHandleW` `GetProcAddress` `GetProcessAffinityMask` `GetQueuedCompletionStatusEx` `GetStdHandle` `GetSystemDirectoryA` `GetSystemInfo` `GetThreadContext` `InitializeCriticalSection` `LeaveCriticalSection` `LoadLibraryA` `LoadLibraryExW` `LoadLibraryW` `PostQueuedCompletionStatus` `RaiseFailFastException` `ResumeThread` `RtlLookupFunctionEntry` `RtlVirtualUnwind` `SetConsoleCtrlHandler` `SetErrorMode` `SetEvent` `SetProcessPriorityBoost` `SetThreadContext` `SetWaitableTimer` `Sleep` `SuspendThread` `SwitchToThread` `TlsAlloc` `TlsGetValue` `VirtualAlloc` `VirtualFree` `VirtualProtect` `VirtualQuery` `WaitForMultipleObjects` `WaitForSingleObject` `WerGetFlags` `WerSetFlags` `WriteConsoleW` `WriteFile`
api-ms-win-crt-heap-l1-1-0.dll	`calloc` `free` `malloc`
api-ms-win-crt-private-l1-1-0.dll	`memcpy`
api-ms-win-crt-runtime-l1-1-0.dll	`_execute_onexit_table` `_exit` `_initialize_onexit_table` `_initterm` `_initterm_e` `_register_onexit_function` `abort`
api-ms-win-crt-stdio-l1-1-0.dll	`__acrt_iob_func` `__stdio_common_vfprintf` `fwrite`
api-ms-win-crt-string-l1-1-0.dll	`_stricmp` `strcmp` `strlen` `strncmp`

Delayed Imports

DllRegisterServer

Ordinal	`1`
Address	`0xd8f80`

_cgo_dummy_export

Ordinal	`2`
Address	`0x81a190`

curl_easy_cleanup

Ordinal	`3`
Address	`0xd94c0`

curl_easy_duphandle

Ordinal	`4`
Address	`0xd94f0`

curl_easy_init

Ordinal	`5`
Address	`0xd9390`

curl_easy_perform

Ordinal	`6`
Address	`0xd9470`

curl_easy_setopt

Ordinal	`7`
Address	`0xd9400`

curl_easy_strerror

Ordinal	`8`
Address	`0xd9520`

1

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x854f`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.97877`
Detected Filetype	PNG graphic file
MD5	`8474fee4fd68c79c092fb04cf0ce2a77`
SHA1	`542e54f27844b249a6d95f0b7a84450b541f9536`
SHA256	`fc47ff54843b6b26342d44d2b4b6e088e314a22fe3866685237313f1021d108e`
SHA3	`916bf89f651a776cd6f8b51828040904caf9147ce56e961c789ef42dbddd3ba2`

2

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x2ce9`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.96965`
Detected Filetype	PNG graphic file
MD5	`15b3aca4d9b85f5f6d6a64521a6959d3`
SHA1	`8e514fae89036c62d45b4f294a8ada1240a53c47`
SHA256	`b7ca4467ec56f0b16e70c81617665dacc8e4b100b2a9bf55a040c2cf3c01a9dd`
SHA3	`4e0bea40953c1aecd1ca94504c4da1b22a0c114255621fa7648b72b0752b7b5c`

3

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0xf06`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.93433`
Detected Filetype	PNG graphic file
MD5	`8f6863cffa817919e65119612e09d32a`
SHA1	`da34dc78139d44804d72146720d97eb5904b9f07`
SHA256	`f119ef5568ed8620d3454624d757c9b9ea533e5223a9845467a0500aad9a4055`
SHA3	`69b57e8d89b41b2450f101d7379dfb009d96bbffeb5a772f35d471c2e7224d98`

4

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x9bd`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.91536`
Detected Filetype	PNG graphic file
MD5	`8b56d074b025e0c4f1f0754476cda2ef`
SHA1	`a1d03a1e49bd707d9406b07cb55cf1a0bde97da4`
SHA256	`e940dc6bf95f28890a743b426e284845b9bdb25dfcee9547ab1db52f7e75b88a`
SHA3	`da23c2c96ce38fa5b0d18c432b5f9a4ec6d34b09d20fe16acd8295e47a37c5ac`

5

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x560`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.81827`
Detected Filetype	PNG graphic file
MD5	`24ba8644a5742cfe48523a9d49f64ba8`
SHA1	`5ab9327ff176a1dd9d7d55fb8c9e640a849a1353`
SHA256	`0e44691c71f8304750e99227c65dc07893377cf875f961aa013f06c114b7d151`
SHA3	`148a81c90589fbf6a97c32ca9dc9ae6c97f23920b1dd5bbabf9ade3c46f3078c`

6

Type	`RT_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x216`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.53495`
Detected Filetype	PNG graphic file
MD5	`d0d77d0ac6a1b3a2abc9538e35ca27b4`
SHA1	`5251c7f71e518efd39a65ab5fc227a865bcaa175`
SHA256	`368d40a128d2eb4f7c56eb6091608684d46846bedb4e7dc093ccfd0ca48ddb2b`
SHA3	`bca3867b4620d1db8dd12f3d4d7c22c493cf34c0ceeb2bf935baefec02f6091d`

63

Type	`RT_STRING`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.23955`
MD5	`230998d5a214d7c58578c60bd9d51f0b`
SHA1	`0d101871f04def814bd9493d6b2f61f44386efd9`
SHA256	`221babcdbea5528f6d100e5a56fcb18d93dfc0d3dc92f14742f5e12eaa29c937`
SHA3	`f023140ba48a3fb543bc6b4f9d3f879abc3519c425e32435bc818a83a90697cd`

69

Type	`RT_STRING`
Language	English - United States
Codepage	UNKNOWN
Size	`0x7c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.5743`
MD5	`0c57183a7ad69044903fd7dab09eb320`
SHA1	`9fb865a46a0dff0b1e14cdffffcb6f63126bc7fa`
SHA256	`1f9ca9e7f46c491d316cca040d72732d312626bcc25b8382f076a63c80fb236b`
SHA3	`04902acaad6209105e2b863927d18bd1705c951580c060a06e4d8996d7a58c78`

126

Type	`RT_STRING`
Language	English - United States
Codepage	UNKNOWN
Size	`0x2f4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.17504`
MD5	`d893ed86d766790364cf797c7f86c630`
SHA1	`82244d923abc9797b80d00a2e3dc420a4e1b701f`
SHA256	`276b954bcdadf9a7635b8f0ec9838c05db21c31ebcbf50e5bde0489af97ae419`
SHA3	`4cf530cd3ad8a79a1ddccd8c388065bdfc822175f03c65b5e1e47801138a32d5`

188

Type	`RT_STRING`
Language	English - United States
Codepage	UNKNOWN
Size	`0xec`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.89573`
MD5	`8f8c199a60a4c3862e24b08265c2aa85`
SHA1	`da7f640a9b0375797a5c755c8a44f242284ef781`
SHA256	`b25e8e003ee50e3b9ada55956b5886179db7bda9faab65bed70e76a08332ce2a`
SHA3	`feace83decd93c8715e6e7aa668f652ea2f6227bc069993e96a9b903bce8a497`

251

Type	`RT_STRING`
Language	English - United States
Codepage	UNKNOWN
Size	`0x110`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.05619`
MD5	`d1f42c1fb4cb1661d77ed3c9c2ecfee9`
SHA1	`5cb31ff6254e871b80f763da69de8224b861a111`
SHA256	`59deafc42685a21ae9904cdac2b81373f7cf3d93c06ad9bc525725851f805e8e`
SHA3	`5c5ca56f1020db4babb89098a9b95fa16cfa5d52fb9587ac31715ce855ebf00e`

313

Type	`RT_STRING`
Language	English - United States
Codepage	UNKNOWN
Size	`0x164`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.30206`
MD5	`d9bb2ce45a286df67e71b983313fdf25`
SHA1	`83fb79eff86cc80d29b482872129623320a3fcc7`
SHA256	`d7b980a7454b7e2ecf1106698aae9c58f6c4c110c9d2013f168d7790ccba980d`
SHA3	`b79f963ae22e84099534023293ab7db27273a9b21e5ce53ae5a865c093538e25`

376

Type	`RT_STRING`
Language	English - United States
Codepage	UNKNOWN
Size	`0x118`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.01821`
MD5	`3d4ab3c9dab71c87fd8f00ffc8bbadd5`
SHA1	`1175acf87c280e96b5fda138f5fb98a9667cde24`
SHA256	`2dfa5e44773df10c2fe5ecef23877a2f7771e206f3da3e8cccdd95ab5d474839`
SHA3	`fdbf599f083f5a5e278e3983936d58cc21496e0b6bb93a9024d0b006acf19a3b`

1 (#2)

Type	`RT_GROUP_ICON`
Language	UNKNOWN
Codepage	UNKNOWN
Size	`0x5a`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.79371`
Detected Filetype	Icon file
MD5	`25f1d4b91cf032a2d3252b1263b82791`
SHA1	`c3ee2097bc1e79142bf11fb3e0fac93a30ece140`
SHA256	`91ee89e38f7ec8c74910af3cdcafab39f8f20990d037935e579a0aea2d5809b2`
SHA3	`515af77c7053def03f76550ce71d60c0d3c09e9909fb8d1880eae596dace4544`

1 (#3)

Type	`RT_VERSION`
Language	English - United States
Codepage	UNKNOWN
Size	`0x3e8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.42709`
MD5	`f0a62668e209f58020562527d1cf4c0b`
SHA1	`de2770ff5bf0e896bef491eec0adab0c320bb0e0`
SHA256	`d656fcee143fcc5dad51acdf79996c8d7788baee7949c9f417c8a03e38235ff2`
SHA3	`661ea8e2800b6edce5a9d3f518786e2460f628aa222e12cfa47ce72010835b73`

1 (#4)

Type	`RT_MANIFEST`
Language	English - United States
Codepage	UNKNOWN
Size	`0x542`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.17585`
MD5	`07b323f5cb567b615f9c2c49aa3aca5a`
SHA1	`f5b465053931674fec3a744987fe7c285fc88b60`
SHA256	`205de5912a9cc40378d469747a25276f68892e2cd5502e1b27ff81c72d189607`
SHA3	`4f8742d4c74ad314109c98e313202e69d20d5b4db4b7fa4e5d59fc0a9374c0b6`

String Table contents

File Hash Signal Meter
Monitors file hash signal meter in real time from the notification area
Springdale Creek Software Group
Version 8.17.31.0
Copyright (c) 2019-2025 Springdale Creek Software Group
Snap layouts available
Minimize
Initializing...
Build succeeded. 0 errors, 2 warnings.
An unexpected error has occurred.
Unable to write to the specified location.
The process cannot access the file because it is being used by another process.
This action cannot be undone.
Test run: 128 passed, 0 failed.
Camera access denied
The system cannot find the file specified.
Access is denied.
The specified path is invalid.
Item 3068: ready.
Item 1243: ready.
Item 1382: ready.
Item 5891: ready.
Item 1454: ready.
Item 1218: ready.
Item 2881: updated.
Item 3229: updated.
Item 2629: updated.
Downloading components...
Item 6011: updated.
Item 8831: updated.
Disconnected
DNS lookup succeeded.
SSL handshake completed.
Packets sent: 8,412
Proxy authentication required.
Network unavailable.
USB device connected.
Latency: 24 ms
Sign in to continue.
Subscription renewed.
Session expired. Please sign in again.
Work or school account added
Account verified.

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	8.17.31.0
ProductVersion	8.17.1.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS` `VOS_DOS_WINDOWS16` `VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS_OS232` `VOS_OS232_PM32` `VOS_WINCE` `VOS__WINDOWS32`
FileType	`VFT_DLL`
Language	English - United States
LegalCopyright	Copyright (c) 2019-2025 Springdale Creek Software Group
FileDescription	Monitors file hash signal meter in real time from the notification area
CompanyName	Springdale Creek Software Group
ProductName	File Hash Signal Meter
ProductVersion (#2)	8.17.31
FileVersion (#2)	8.17.31.0
OriginalFilename	FileHashSignalMeter.exe
InternalName	FileHashSignalMeter.exe

Resource LangID	English - United States

TLS Callbacks

StartAddressOfRawData	`0x2d92bd000`
EndAddressOfRawData	`0x2d92bd008`
AddressOfIndex	`0x2d92ba230`
AddressOfCallbacks	`0x2d9267398`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_TYPE_REG`
Callbacks	`0x00000002D8B79AC0` `0x00000002D8B79B79`

Load Configuration

RICH Header

Errors

[*] Warning: Section .bss has a size of 0!

Leave a comment

No comments yet.