Manalyze report for 4d79fb72dece514ff7ddee6c37ba289a1b2783b7237e1b41d85520714167656d

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2026-Jul-30 06:33:37
Detected languages	English - United States

Plugin Output

Info	Matching compiler(s):	`MASM/TASM - sig1(h)`
Suspicious	Strings found in the binary may indicate undesirable behavior:	`Miscellaneous malware strings: cmd.exe` `Contains domain names: api.steampowered.com github.com http://www.microsoft.com http://www.microsoft.com/whdc/ddk/debugging/ http://www.w3.org http://www.w3.org/1999/xlink http://www.w3.org/2000/svg https://api.country.is https://api.country.is/ https://api.steampowered.com https://api.steampowered.com/ISteamApps/GetSDRConfig/v1/?appid https://github.com microsoft.com paintStack.top steampowered.com www.microsoft.com www.w3.org`
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to CRC32`
Malicious	The PE contains functions mostly used by malware.	`[!] The program may be hiding some of its imports: GetProcAddress LoadLibraryW` `Can access the registry: RegisterHotKey RegEnumValueW RegCloseKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegOpenKeyExW RegQueryValueExW RegSetValueExW` `Can create temporary files: GetTempPathW CreateFileW` `Uses functions commonly found in keyloggers: CallNextHookEx MapVirtualKeyW GetAsyncKeyState` `Leverages the raw socket API to access the Internet: WS2_32.dll` `Enumerates local disk drives: GetLogicalDriveStringsW GetDriveTypeW` `Can take screenshots: GetDC CreateCompatibleDC BitBlt`
Suspicious	No VirusTotal score.	`This file has never been scanned on VirusTotal.`

Hashes

MD5	`e15ccd93a00c158178bcb6aa4f78f681` 🔍
SHA1	`f5403ea3a406f5655bb5aab36001bfd861519f2d` 🔍
SHA256	`4d79fb72dece514ff7ddee6c37ba289a1b2783b7237e1b41d85520714167656d` 🔍
SHA3	`31cf140c93af85de0b220bafc4f9c4e07228931914f06b5e22193faba351e340` 🔍
SSDeep	`49152:7eKGXYnlSfTWJCOSCj2kYaNgMJ4Pj0sKVQ92sVhNxqn7Ik8x95B8KYOqBtJnOLn:7fIoTLeVA/VEVUMviJI` 🔍
Imports Hash	`26512b168af8f76e81a1374b3df6344e` 🔍

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x118`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`6`
TimeDateStamp	2026-Jul-30 06:33:37
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0x305000`
SizeOfInitializedData	`0x272000`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x00000000002E56C0 (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x140000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x57b000`
SizeOfHeaders	`0x400`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`e26ebe9e98acc919bc8caeb6df610394 🔍`
SHA1	`dd53e1472fc55d565b8950dcf30551df9702eeaa 🔍`
SHA256	`dcadce0c831f44549bc77e0c987063bde132d617a86065210bfd8938da221b24 🔍`
SHA3	`ab66c689e6b48aa3220f2781c53597ba34fae59ba8120e9183befc64568a6c05 🔍`
VirtualSize	`0x304fcc`
VirtualAddress	`0x1000`
SizeOfRawData	`0x305000`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.43231`

.rdata

MD5	`834fc2f16e6b8fa03d2d38abd2df0344 🔍`
SHA1	`d7735796be2609908de3df0baa3638540650877e 🔍`
SHA256	`8fc04afe97e321f352a48995e3065a20504ed6beced6153e6c5a89256a27b8ba 🔍`
SHA3	`06623d88aee3a76ca9711214789f5c6fa07b976bb92f1cd572969ad373104f08 🔍`
VirtualSize	`0x1981b6`
VirtualAddress	`0x306000`
SizeOfRawData	`0x198200`
PointerToRawData	`0x305400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.64181`

.data

MD5	`49093df736a34a597b8ef92051a2e320 🔍`
SHA1	`a0878385abdf68ad6e1adf7d85365e7eff28ffc0 🔍`
SHA256	`12bf2fcf513a025c3bee03cb93e40de04a2f67f1dd9c505b791011d12ff51cb0 🔍`
SHA3	`a2b41a319f88aedbdacfd659ced2026a4066232988671cda34b6f2a535becf37 🔍`
VirtualSize	`0x41bb0`
VirtualAddress	`0x49f000`
SizeOfRawData	`0x13c00`
PointerToRawData	`0x49d600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`4.34923`

.pdata

MD5	`0823aa6b5227981e668117169f4688b0 🔍`
SHA1	`effa1d9af99b81a4a860b5414a160dbabd45e6ee 🔍`
SHA256	`e434acfdb0f735ba6dbccd62c58889064e10a834194a64be52e97633c6b979bc 🔍`
SHA3	`0e56715fcfe9026a0bdb463b317a8c79d6766432e6d3bc4bef8641a06299a1e9 🔍`
VirtualSize	`0x20220`
VirtualAddress	`0x4e1000`
SizeOfRawData	`0x20400`
PointerToRawData	`0x4b1200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.21799`

.rsrc

MD5	`824f387080a0a36a5d037fdce4f3757b 🔍`
SHA1	`d3ba618fae3f0438cf93afd0db132b75759065fc 🔍`
SHA256	`82446bb049f5301c87ffe31fc37121113e25fc6a6a7c649ee1bbe43a70827224 🔍`
SHA3	`621dd35234e74e59de8dcf908cbf6caf8e72f8ddf42a33b36665f2822dcaf34c 🔍`
VirtualSize	`0x60020`
VirtualAddress	`0x502000`
SizeOfRawData	`0x60200`
PointerToRawData	`0x4d1600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`1.86227`

.reloc

MD5	`d783282700ad7d7710cc937aa1b1f4c4 🔍`
SHA1	`e017e7b5f2cb2d54651689cd628032cf79d9c1fd 🔍`
SHA256	`12944b5885457a8970bf2667c862722ca6b31439f7545af571bd53f6c180f3ef 🔍`
SHA3	`c80fe21688fd6144bcac785a458effdc90832c820d10842f706f0e6b46da4922 🔍`
VirtualSize	`0x17b48`
VirtualAddress	`0x563000`
SizeOfRawData	`0x17c00`
PointerToRawData	`0x531800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.45181`

Imports

KERNEL32.dll	`WakeAllConditionVariable` `SleepConditionVariableSRW` `SetUnhandledExceptionFilter` `GetStartupInfoW` `IsBadStringPtrA` `IsBadReadPtr` `GetACP` `RtlCaptureContext` `GetLogicalDriveStringsW` `GetDriveTypeW` `ReleaseSRWLockExclusive` `WaitForMultipleObjects` `QueryPerformanceFrequency` `QueryPerformanceCounter` `ExpandEnvironmentStringsW` `CreateEventW` `SetEvent` `GetProcAddress` `GetCPInfo` `IsValidCodePage` `FindResourceW` `SizeofResource` `LockResource` `LoadResource` `GetModuleFileNameW` `GetNativeSystemInfo` `GetVersionExW` `GetDiskFreeSpaceExW` `GetEnvironmentVariableW` `TlsFree` `TlsSetValue` `TlsAlloc` `AcquireSRWLockExclusive` `GetCurrentThread` `GetCurrentProcess` `WaitForSingleObject` `OutputDebugStringW` `GetCurrentProcessId` `GetCommandLineW` `GetSystemTimeAsFileTime` `GetTempPathW` `GetTempFileNameW` `GetLongPathNameW` `FindFirstFileW` `FindClose` `ReplaceFileW` `CopyFileW` `CloseHandle` `GetFileType` `GetFileAttributesW` `CreateFileW` `SetCurrentDirectoryW` `WideCharToMultiByte` `MultiByteToWideChar` `FormatMessageW` `LocalFree` `SetErrorMode` `GetModuleHandleW` `GlobalFree` `GlobalHandle` `GlobalSize` `LoadLibraryW` `FreeLibrary` `DeleteCriticalSection` `LeaveCriticalSection` `EnterCriticalSection` `InitializeCriticalSection` `GlobalLock` `GlobalUnlock` `GlobalAlloc` `GetCurrentThreadId` `ExitProcess` `SetLastError` `GetLastError` `MulDiv` `ReadConsoleOutputCharacterA` `SetConsoleCursorPosition` `GetConsoleScreenBufferInfo` `FillConsoleOutputCharacterW` `WriteConsoleW` `WriteConsoleA` `AttachConsole` `FreeConsole` `GetStdHandle` `InitializeSListHead`
USER32.dll	`SetRect` `DrawStateW` `DrawFocusRect` `DrawTextW` `GetDlgItem` `CreateDialogParamW` `SystemParametersInfoW` `GetScrollInfo` `SetScrollInfo` `IsDialogMessageW` `CallNextHookEx` `UnhookWindowsHookEx` `SetWindowsHookExW` `GetWindow` `SetParent` `GetParent` `SetWindowLongPtrW` `GetWindowLongPtrW` `SetWindowLongW` `GetWindowLongW` `PtInRect` `InflateRect` `FillRect` `GetSysColor` `ChildWindowFromPointEx` `WindowFromPoint` `MapWindowPoints` `ScreenToClient` `ClientToScreen` `GetCursorPos` `SetCursor` `SetCursorPos` `GetWindowRect` `SetRectEmpty` `SetWindowTextW` `EnableScrollBar` `ScrollWindow` `RedrawWindow` `InvalidateRect` `GetUpdateRgn` `UpdateWindow` `GetMenuItemInfoW` `TrackPopupMenu` `GetMenuItemCount` `GetSystemMetrics` `IsWindowEnabled` `EnableWindow` `ReleaseCapture` `GetSysColorBrush` `RegisterClassW` `UnregisterClassW` `GetKeyState` `MessageBoxW` `MonitorFromWindow` `GetMonitorInfoW` `SetLayeredWindowAttributes` `FlashWindowEx` `IsIconic` `BringWindowToTop` `IsZoomed` `CreateDialogIndirectParamW` `GetDialogBaseUnits` `DrawMenuBar` `GetSystemMenu` `EnableMenuItem` `SetForegroundWindow` `RegisterWindowMessageW` `CopyRect` `OffsetRect` `SetWindowRgn` `GetClientRect` `GetWindowPlacement` `SetCapture` `GetCapture` `MapVirtualKeyW` `VkKeyScanW` `GetAsyncKeyState` `GetFocus` `GetActiveWindow` `SetFocus` `IsWindowVisible` `EndDeferWindowPos` `DeferWindowPos` `BeginDeferWindowPos` `SetWindowPos` `MoveWindow` `AnimateWindow` `GetProcessDefaultLayout` `CheckMenuRadioItem` `ChangeDisplaySettingsExW` `LoadCursorW` `LoadBitmapW` `LoadIconW` `LoadImageW` `PostMessageW` `EnumDisplaySettingsW` `MonitorFromPoint` `EnumDisplayMonitors` `NotifyWinEvent` `IsClipboardFormatAvailable` `SetMenu` `GetMenuBarInfo` `DestroyIcon` `GetWindowTextW` `GetWindowTextLengthW` `MessageBeep` `GetClassNameW` `GetMessageW` `PostThreadMessageW` `ValidateRect` `DrawIconEx` `DestroyCursor` `GetDoubleClickTime` `GetCaretBlinkTime` `CreateAcceleratorTableW` `DestroyAcceleratorTable` `TranslateAcceleratorW` `ValidateRgn` `IsRectEmpty` `GetMenuState` `ShowWindow` `DestroyWindow` `IsWindow` `CreateWindowExW` `CallWindowProcW` `PostQuitMessage` `DefWindowProcW` `SendMessageW` `GetMessageTime` `GetMessagePos` `UnregisterHotKey` `RegisterHotKey` `PeekMessageW` `DispatchMessageW` `TranslateMessage` `CreateIconIndirect` `ReleaseDC` `GetDC` `GetIconInfo` `wsprintfW` `MsgWaitForMultipleObjects` `SetTimer` `CreateMenu` `CreatePopupMenu` `DestroyMenu` `KillTimer` `DdeInitializeW` `DdeUninitialize` `DdeConnect` `DdeDisconnect` `DdePostAdvise` `DdeNameService` `DdeClientTransaction` `DdeCreateDataHandle` `DdeGetData` `DdeFreeDataHandle` `DdeGetLastError` `DdeCreateStringHandleW` `DdeQueryStringW` `DdeFreeStringHandle` `CheckMenuItem` `DrawFrameControl` `DrawEdge` `GetClipboardFormatNameW` `GetSubMenu` `InsertMenuW` `AppendMenuW` `ModifyMenuW` `RemoveMenu` `SetMenuInfo` `InsertMenuItemW` `SetMenuItemInfoW` `GetWindowDC` `BeginPaint` `EndPaint` `UnionRect` `GetDesktopWindow` `GetComboBoxInfo` `IsMenu` `keybd_event` `HideCaret` `ChildWindowFromPoint` `FindWindowExW` `RegisterClipboardFormatW` `GetMenuItemID`
GDI32.dll	`MaskBlt` `Pie` `PolyPolygon` `Rectangle` `RoundRect` `SelectClipRgn` `ExtSelectClipRgn` `SetGraphicsMode` `SetMapMode` `SetLayout` `GetLayout` `SetPixel` `SetPolyFillMode` `StretchBlt` `StretchDIBits` `SetROP2` `SetStretchBltMode` `GetWorldTransform` `SetWorldTransform` `ModifyWorldTransform` `CreatePolygonRgn` `DPtoLP` `LPtoDP` `Polygon` `Polyline` `PolyBezier` `SetViewportExtEx` `SetWindowExtEx` `SetWindowOrgEx` `CreatePalette` `GetNearestPaletteIndex` `GetPaletteEntries` `CreateHatchBrush` `CreatePatternBrush` `GetStockObject` `RealizePalette` `CreateDIBitmap` `GetDIBits` `CreateDIBSection` `GetDIBColorTable` `SetDIBColorTable` `CombineRgn` `EqualRgn` `GetRgnBox` `PtInRegion` `RectInRegion` `GetTextExtentPoint32W` `CreateRectRgnIndirect` `GetCharABCWidthsW` `GetTextExtentExPointW` `CreateICW` `CreateDCW` `GetSystemPaletteEntries` `SetViewportOrgEx` `CloseEnhMetaFile` `CreateEnhMetaFileW` `DeleteEnhMetaFile` `GetEnhMetaFileW` `GetEnhMetaFileHeader` `EnumFontFamiliesExW` `SetAbortProc` `StartDocW` `EndDoc` `StartPage` `EndPage` `GetPixel` `GetObjectType` `GetClipBox` `ExtFloodFill` `Ellipse` `ExtTextOutW` `Arc` `MoveToEx` `LineTo` `GetBkColor` `OffsetRgn` `GetRegionData` `ExtCreateRegion` `GetWindowExtEx` `GetViewportExtEx` `GetGraphicsMode` `CreateSolidBrush` `SetTextColor` `SetBkMode` `GdiFlush` `SetBrushOrgEx` `CreatePen` `ExcludeClipRect` `CreateRectRgn` `SelectPalette` `GetTextMetricsW` `GetOutlineTextMetricsW` `GetDeviceCaps` `CreateFontIndirectW` `SetBkColor` `SelectObject` `DeleteDC` `PlayEnhMetaFile` `CreateCompatibleDC` `CreateCompatibleBitmap` `CreateBitmapIndirect` `CreateBitmap` `BitBlt` `GetObjectW` `ExtCreatePen` `DeleteObject`
COMDLG32.dll	`PrintDlgW` `GetSaveFileNameW` `GetOpenFileNameW` `CommDlgExtendedError` `ChooseFontW` `PageSetupDlgW`
WINSPOOL.DRV	`ClosePrinter` `GetPrinterW` `OpenPrinterW` `DocumentPropertiesW`
SHELL32.dll	`SHGetFolderPathW` `CommandLineToArgvW` `#6` `SHGetFileInfoW` `ShellExecuteExW` `DragAcceptFiles` `DragFinish` `DragQueryPoint` `DragQueryFileW` `ExtractIconExW` `ExtractIconW`
SHLWAPI.dll	`SHAutoComplete`
COMCTL32.dll	`#16` `ImageList_GetImageInfo` `ImageList_GetIconSize` `ImageList_Replace` `ImageList_Draw` `ImageList_SetBkColor` `ImageList_Add` `ImageList_GetImageCount` `ImageList_Destroy` `ImageList_Create` `#17`
ole32.dll	`OleUninitialize` `RegisterDragDrop` `RevokeDragDrop` `OleInitialize` `CoTaskMemAlloc` `ReleaseStgMedium` `CoCreateInstance` `CoInitializeEx` `DoDragDrop` `CoLockObjectExternal` `CoUninitialize` `OleSetClipboard` `OleGetClipboard` `OleFlushClipboard` `OleIsCurrentClipboard` `CoTaskMemFree`
OLEAUT32.dll	`SafeArrayGetVartype` `SysAllocString` `SysFreeString` `VariantInit` `VariantClear` `SafeArrayUnlock` `SafeArrayLock` `VariantChangeType` `VarBstrFromCy` `SafeArrayDestroy` `SafeArrayCreate` `SystemTimeToVariantTime` `SysStringLen`
RPCRT4.dll	`RpcStringFreeW` `UuidToStringW`
ADVAPI32.dll	`RegEnumValueW` `GetUserNameW` `RegCloseKey` `RegCreateKeyExW` `RegDeleteKeyW` `RegDeleteValueW` `RegEnumKeyW` `RegOpenKeyExW` `RegQueryValueExW` `RegSetValueExW`
WS2_32.dll	`inet_addr`
OLEACC.dll	`LresultFromObject` `CreateStdAccessibleObject`
UxTheme.dll	`GetThemeBackgroundExtent` `GetCurrentThemeName` `IsThemePartDefined` `GetThemeSysFont` `GetThemeSysColor` `GetThemeInt` `GetThemePartSize` `SetWindowTheme` `GetThemeFont` `IsAppThemed` `IsThemeActive` `GetThemeMargins` `DrawThemeParentBackground` `GetThemeColor` `IsThemeBackgroundPartiallyTransparent` `GetThemeBackgroundContentRect` `DrawThemeBackground` `CloseThemeData` `OpenThemeData`
MSVCP140.dll	`??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z` `??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAJ@Z` `?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ` `?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ` `?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ` `?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ` `?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ` `?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z` `?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z` `?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z` `?width@ios_base@std@@QEAA_J_J@Z` `?width@ios_base@std@@QEBA_JXZ` `?flags@ios_base@std@@QEBAHXZ` `?good@ios_base@std@@QEBA_NXZ` `?uncaught_exception@std@@YA_NXZ` `?__ExceptionPtrRethrow@@YAXPEBX@Z` `?__ExceptionPtrCurrentException@@YAXPEAX@Z` `?__ExceptionPtrToBool@@YA_NPEBX@Z` `?__ExceptionPtrAssign@@YAXPEAXPEBX@Z` `?__ExceptionPtrCopy@@YAXPEAXPEBX@Z` `?__ExceptionPtrDestroy@@YAXPEAX@Z` `?__ExceptionPtrCreate@@YAXPEAX@Z` `?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z` `?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ` `?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z` `?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z` `?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z` `?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z` `?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z` `?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ` `?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ` `?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ` `?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z` `?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ` `?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ` `??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ` `??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ` `?_Throw_Cpp_error@std@@YAXH@Z` `_Cnd_do_broadcast_at_thread_exit` `_Thrd_detach` `?_Xout_of_range@std@@YAXPEBD@Z` `?_Xbad_function_call@std@@YAXXZ` `?_Xlength_error@std@@YAXPEBD@Z`
IPHLPAPI.DLL	`IcmpCreateFile` `IcmpSendEcho2` `IcmpCloseHandle`
MSIMG32.dll	`GradientFill` `AlphaBlend`
VCRUNTIME140_1.dll	`__CxxFrameHandler4`
VCRUNTIME140.dll	`__std_terminate` `__C_specific_handler` `wcschr` `memset` `memcmp` `memmove` `_CxxThrowException` `__std_type_info_compare` `__std_exception_destroy` `__std_exception_copy` `__RTtypeid` `__intrinsic_setjmp` `__current_exception_context` `__current_exception` `strrchr` `_set_se_translator` `wcsstr` `longjmp` `strchr` `_purecall` `memcpy` `strstr`
api-ms-win-crt-heap-l1-1-0.dll	`malloc` `_callnewh` `free` `calloc` `realloc` `_set_new_mode`
api-ms-win-crt-string-l1-1-0.dll	`strncmp` `strncpy` `iswalnum` `iswalpha` `iswdigit` `iswspace` `towupper` `toupper` `iswxdigit` `_strdup` `strlen` `wcslen` `wcsncpy` `_wcsicmp` `wcspbrk` `wcscpy` `towlower` `tolower` `wcscmp` `iswprint` `isspace` `strcmp`
api-ms-win-crt-runtime-l1-1-0.dll	`exit` `_errno` `_beginthreadex` `abort` `_cexit` `_seh_filter_exe` `_crt_atexit` `_register_onexit_function` `_initialize_onexit_table` `_initialize_narrow_environment` `_configure_narrow_argv` `_set_app_type` `_register_thread_local_exe_atexit_callback` `_get_narrow_winmain_command_line` `_initterm` `_initterm_e` `_exit` `_c_exit` `terminate`
api-ms-win-crt-stdio-l1-1-0.dll	`__p__commode` `__stdio_common_vfprintf` `fflush` `__stdio_common_vfwprintf` `_fileno` `_get_osfhandle` `__stdio_common_vsscanf` `_wsopen_dispatch` `__stdio_common_vswscanf` `fclose` `_open_osfhandle` `__stdio_common_vsprintf` `__stdio_common_vswprintf_p` `__stdio_common_vswprintf` `_ftelli64` `fwrite` `fread` `__acrt_iob_func` `_set_fmode` `_close` `_commit` `_read` `_write` `_lseeki64` `_telli64` `_fseeki64` `ferror` `feof` `_wfopen` `clearerr`
api-ms-win-crt-convert-l1-1-0.dll	`wcstol` `wcstoul` `_wcstoi64` `_wcstoui64` `_wtol` `atof` `wcstod` `_wcstod_l` `strtol` `_wtoi` `strtoull` `strtod` `strtoll`
api-ms-win-crt-locale-l1-1-0.dll	`_free_locale` `_create_locale` `setlocale` `_configthreadlocale` `localeconv`
api-ms-win-crt-math-l1-1-0.dll	`lround` `_fdopen` `floor` `ceil` `sqrt` `sin` `atan2` `fmod` `ceilf` `__setusermatherr` `lroundf` `fmodf` `tanf` `sqrtf` `sinf` `pow` `acosf` `atan2f` `cosf` `floorf` `cos`
api-ms-win-crt-filesystem-l1-1-0.dll	`_wmkdir` `_wremove` `_wrename`
api-ms-win-crt-time-l1-1-0.dll	`_mktime64` `_time64` `wcsftime` `_get_timezone` `_gmtime64` `_localtime64` `_tzset`
api-ms-win-crt-utility-l1-1-0.dll	`bsearch` `qsort`
api-ms-win-crt-environment-l1-1-0.dll	`getenv` `_wgetenv` `_wgetcwd`

Delayed Imports

1

Type	`RT_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.8231`
MD5	`7730422691917ff5753f6abf0651a8a5 🔍`
SHA1	`8597239590dbbb338ac068a7fbeab8bc3d3fdac8 🔍`
SHA256	`23cc5b21fffe38c27110ec2568adede64c29a94bc45946ebda1a8aa8e13b6a60 🔍`
SHA3	`ea286dc34779449a7b7ccb0c2d20ac926917013293f285e508afaf736713d2e4 🔍`

2

Type	`RT_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.58151`
MD5	`2888bee6f44816fc32502eb68c51a863 🔍`
SHA1	`be6d468fefb7134cf905f803789e516d469fb088 🔍`
SHA256	`f8f88fe49566eb92d6c455b57ce8a309eedc8259766bf0336769ee6a3e18ac54 🔍`
SHA3	`71ca3f316c1ba236121655ff6224f038ef65317bbfbea34cba144091ba45cba7 🔍`

3

Type	`RT_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.38255`
MD5	`1813408e98b404104ab0fe4b664ce23d 🔍`
SHA1	`d7ab1aae95a9a82d8f6cedf30f97fe493074b1f7 🔍`
SHA256	`f4ef7287fb8d537ec61f7913bd72bcd4401682ca4d436a8110eab5d128c8bec5 🔍`
SHA3	`0f149d163071604f827f1ac01e55c98a4e7d53c8927b359c6d29e6ee0661ec22 🔍`

4

Type	`RT_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.30709`
MD5	`3abe4f384ee9f68c4a0f147f18c7fc70 🔍`
SHA1	`8a71133160e7351320a9bc2c0b02dee94ff71322 🔍`
SHA256	`d0d74eeaf626f9dffca979a1b3e75750d1582957f21906ac718e43e49e42734c 🔍`
SHA3	`ca9fb005c63fa3f81d63d8eb3c00fe7be1ad217452e4853dc589c5dc2f8e01b8 🔍`

5

Type	`RT_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.54523`
MD5	`3d43604be2f4ce777f585fd71da66176 🔍`
SHA1	`62fb19398a95be348e1b7226bcb982937630e1d3 🔍`
SHA256	`9ca67b84b3ac26a7b604ace26ebef920b0eb7e6870f301e94c53b5e732e628bb 🔍`
SHA3	`06adcfc4696a51c098201e9af297a845bf27de31bb56d2c37cdfa6f3526e7563 🔍`

6

Type	`RT_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.05581`
MD5	`9030eebc8a87c454cd8732f8c9f85e85 🔍`
SHA1	`8a4dfb2b30790bd27dbb7f0e7ab7e0b0a75330bd 🔍`
SHA256	`17033ce37aca4adbd209c37dc832f3e4d6e85c3d0a2c7d776396cf6a13091ba7 🔍`
SHA3	`8cd908f3be5a6c9f152ef9ff9ad34cd857d74bc3d12b0c56eff0ddbf91aa53e0 🔍`

7

Type	`RT_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.21025`
MD5	`622dcf4aa6c09a296da8eeaf051c0b17 🔍`
SHA1	`7ebae58cf38cd76ba551b148b238c3d2929f02ec 🔍`
SHA256	`021cfb98ecde7c2dc8dafe914245948be067ea1dca9fbda2dbb327bcdc32ea6f 🔍`
SHA3	`210210eecadef0fbf3eecb4d0512518ec9f50e9d59252071df74d3e928469b06 🔍`

8

Type	`RT_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.2093`
MD5	`b76628d4abbfa961b0ee4a25868cb118 🔍`
SHA1	`c2850fe2f164e4369cc0b2a99680af3e07329288 🔍`
SHA256	`f5c3c72acf420ca63fe80c0114a1e53b5aacfc867e934ab9fe29df41359848d0 🔍`
SHA3	`ca83fc6b200efa6388fdb02889b1dcf0b04a1028d9eff158959a071eb22cec0c 🔍`

9

Type	`RT_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.14151`
MD5	`216372bfc20f8f32318ef19b09cd2e16 🔍`
SHA1	`1e07e5f0b44d56a91e40f2d72e85a5b7b3560a96 🔍`
SHA256	`946370032ee874d7b229ac7cb89703f59dee1de76607bcc6bd82d8e437cc8074 🔍`
SHA3	`97b6a32531803fd1e6502cd2af2e464828db6b2b39190c346aa9b9cbea5693be 🔍`

10

Type	`RT_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.52552`
MD5	`cfae091f9ff026a5f99c80131b0dc51c 🔍`
SHA1	`682707d71baa91e49170648680537a4261ba33a0 🔍`
SHA256	`b2e2924fba5b92f232540929fd7cb716ee21ab3f6d06de393876dc014c41c23e 🔍`
SHA3	`47a199ee4112b88494c88d27b12d3b2a3dcece7e6d410f7c64f379d8106b32cb 🔍`

CSQUERY

Type	`RT_BITMAP`
Language	English - United States
Codepage	UNKNOWN
Size	`0xc0`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.7399`
MD5	`fd772cfd1856cdecefda82cf48a407b2 🔍`
SHA1	`30f3dc76bd536f1ed11375393a5b7c9f6f2fc518 🔍`
SHA256	`15456451dcbae39de264556612302a4bdf7c630725d2bded8d2232cd61b2e9dd 🔍`
SHA3	`9270f0592fc4529d40ad5075b915fbcd55f2c3d4a92ef98faf1c67e0ea383230 🔍`
Preview

WXBITMAP_STD_COLOURS

Type	`RT_BITMAP`
Language	English - United States
Codepage	UNKNOWN
Size	`0x6c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.66779`
MD5	`d815b9430f8c9650bec75bacda39bd4e 🔍`
SHA1	`da68fa3aa014f55cf8cd74f40fc22bf2dfc3e2c1 🔍`
SHA256	`f9c1ba80ca366f4a0732c4ffd5c380650cb1c9d7425bc064db222b4dfeeccd44 🔍`
SHA3	`b752f5f34836e8c7f9176981a3395dd0b68eb1eeabbd11b66a7953a533cb3813 🔍`
Preview

11

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x2e8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.42618`
MD5	`aeaafddb5f76eb6d80c175106fa2b1de 🔍`
SHA1	`eb6f24530af59def82b81d5b717606a61e6f3672 🔍`
SHA256	`8af2d52ff2c1684a62ed7f2756048e40ff75b62d68b22bb665eff9f89e6870bb 🔍`
SHA3	`5a64967673aac55bef1b047070f4001412593c64b4ca7adae783e9f65441d60f 🔍`

12

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x128`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.159`
MD5	`88bca8862f779bcaf4ce6ac40aed9fc3 🔍`
SHA1	`6992d24ee318a14e435b21e1515b168b7449df03 🔍`
SHA256	`07820fc15fb00eaf3f05c7e3c5c2bdaef1d45060134dd61a9feda1254121192a 🔍`
SHA3	`ed9c3ff81ff596406ce1af6085a9d5b419dd33ac17ff236f209f5199c7b5bd88 🔍`

13

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x568`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.9915`
MD5	`3ee9f52830efe31dd7dc814cfe87bafb 🔍`
SHA1	`a84da146711ca0a423d621dceab31c90a95fcd15 🔍`
SHA256	`e2bcb95262b9c7c8209303a2f6859d1ee30ff8ff4711a8a8141be553d47868cb 🔍`
SHA3	`049da61124a8c0c6e53e44e3754667d17f1d47584284f8264330b4228d5d5d31 🔍`

14

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x128`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.67871`
MD5	`65758ce64f37fbee179082f66eba6c5c 🔍`
SHA1	`786d9537367de7a664c9019823d4d1687fb7d1b3 🔍`
SHA256	`66b618eb8da70d65392ba2abe24d3bdf289f316e3acccaaf65ce727b6d2e67e1 🔍`
SHA3	`e98b1894d8311dc6d0305c693b88ed5b5ee6e1640ad9dd993d0e0e52d0ebb0aa 🔍`

15

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x568`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.05787`
MD5	`7e6774aa2c72ed3afe87b5695ba590f3 🔍`
SHA1	`43c28ed00aa0b3c19d40dc62f50730f9c669f9ce 🔍`
SHA256	`7e088d54ac49fc0742d4d547ff9a54d2de6a811f359777f146a37bf970ef708b 🔍`
SHA3	`486a69eedd5da61891958aa8c25a9c447935aae99fe5a8a83b687341dbc7a1e0 🔍`

16

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x128`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.4542`
MD5	`ebc16c56773834f59791b474a9ba0ed0 🔍`
SHA1	`e0633300011b34a557bb13ca40ee1df5fe866753 🔍`
SHA256	`d63841346702a11e34b5f31a800409253039e7d6fa8b8767249e2feaa0fb71bb 🔍`
SHA3	`2a0e88510b6ca86b0cfb60ba247b6295a464429ea0b0ff46a425ff60900f5ad9 🔍`

17

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x568`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.08194`
MD5	`a771dc2bf670b2368ddf54d5e737b323 🔍`
SHA1	`ff3bf5a29f393e319e658a1ab10adec001633aa0 🔍`
SHA256	`0b9d98bef7166ca525f8136d1653d4e04cc319f53f2fe0f5648cc124de1c3da7 🔍`
SHA3	`2d295359c0c7d0087bb6193438be354f53709e8cc7d9bcf4266284c5b293211d 🔍`

18

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x128`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.70204`
MD5	`d476635a97e4611ef65b2278299a1dc4 🔍`
SHA1	`09100b911c1e11fbeed227540d8fa1d6fe479bae 🔍`
SHA256	`924c70ddf2559bbc77b451212548ce165d1df447c5d05560822e834af80918da 🔍`
SHA3	`be6673a1733a3f0ceb6098d00ed29165751103607dca886188797d425dfda6d1 🔍`

19

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x568`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.08549`
MD5	`352d057722c6ed4ddd20e570efc23d75 🔍`
SHA1	`67de593b835e224ccdea006b59496aea6f0bd49b 🔍`
SHA256	`d0c1a34ac9f9255018184b6c7a33ea0911904b3e58005fcdc6ee28c57d40d248 🔍`
SHA3	`ed1f9d760cd66281eadbdc2257d45c1f80c6d3d36def8662c6ec12144c418201 🔍`

20

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x128`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.68212`
MD5	`257cc91c03dae86b07a63eb18b7fe0c9 🔍`
SHA1	`f7695343bc256ecea8d51e3c7a4600de46ccb92d 🔍`
SHA256	`3414684b4b6e31c187796ae98851ec4a2634ca864d35682b299b02797a156d21 🔍`
SHA3	`03501bcd51e4113d9f0b9bc0dae6e3f29c88b7572f5a4806828d335b21229ec7 🔍`

21

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x568`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.07953`
MD5	`e6b33d06ab70322fb979ccda44343d24 🔍`
SHA1	`4c367480c6371f2033d18914308e455050f20f6f 🔍`
SHA256	`35f8bfba0ad31bfe163e6d08701724ff0b76d7971ed486673abe456edc3a73ca 🔍`
SHA3	`dbe2bea78d0722606eebca5e4432759f00d094cd3388ee6d2d859984b79f4264 🔍`

22

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x128`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.83409`
MD5	`33b18a58bcaa48ca8ebe2a2f2aab0219 🔍`
SHA1	`16336c5c5cef016bfd60f26676b512d98e1db4f4 🔍`
SHA256	`837201a28bcfe677ae91c0bb9661d64e16eded10bb45957bedecca9cd88a37fc 🔍`
SHA3	`4e735624045362fc97fb70fef2a05adf93621dcd7668d285361ffb6467906f63 🔍`

23

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x568`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.04794`
MD5	`3a8f421f4d83cce1de871512f4882600 🔍`
SHA1	`6a85802742f56c6a7fd7dbb566c3aece119c6fba 🔍`
SHA256	`310a324496d9fe7ca58f31c7385509763eafe7f5850dff16cc4e67bd3e390d9a 🔍`
SHA3	`1d239df205b727937fe34a8e2997b00d21c3d37d5426ec8a1a7ec07c9712fd52 🔍`

24

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x128`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.72829`
MD5	`234be8708b6df2b99d0e15deec2367cc 🔍`
SHA1	`fd8d4a547023ea2d745bf1bb7e7bbbc0d0b11188 🔍`
SHA256	`dddbd135beaaddc125b63949ceb18a6cec6df01fd2f4202fcde3e680346e5b4e 🔍`
SHA3	`f3433ecdb043dd877b2ae54bdefa762298cf5855f19028beb0605a61423abecc 🔍`

25

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x568`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.99155`
MD5	`44a56e7ff7ced119870f9ed8504f674e 🔍`
SHA1	`2c9dcab53003c8d56589c6a4b9558f65a4790157 🔍`
SHA256	`48957bbad4d18cad1a5280c3d977cc5345958225146ad057633c6e0fe7deaafa 🔍`
SHA3	`b04ac7effb4b1469b373aa11df2377b3411b39aabd34b26aecd73c964c9020bc 🔍`

26

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x128`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.92812`
MD5	`6bc1b04011317faf7673dc01453c5c52 🔍`
SHA1	`9b8f5e3fe35fbcbc4e5963fac164205dbbb18c71 🔍`
SHA256	`cacf03790c286b9e316d3b1a7c43aa12831efd7892bcf566ff8ccf4d6c10c5a1 🔍`
SHA3	`73f241ea719b18b6b1007555aff06041ae82f7ab79b2c2a6ec0748e745502882 🔍`

27

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x568`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.12993`
MD5	`f9250401befcad41e87937d36f57bae2 🔍`
SHA1	`ac199cbdee98df796114b13fe97881b529b13af4 🔍`
SHA256	`038340e900a9c4ed740f6e7cbd2f3255bc35137dfdb69f5cf25362df73465864 🔍`
SHA3	`a39cb209379675815cbbe8bc27953fa7b7455be609d4f7583e680dfbfda6cdbd 🔍`

28

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x128`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.79`
MD5	`1322a1216b2f7e49e63e44b7bcb48da9 🔍`
SHA1	`738615c8ba1a3bf5e42bce490f5938a584dee0e8 🔍`
SHA256	`f368d8c5c2f260b015a5bd4bca96832219dbc48b481f4e2357b849671b04d48c 🔍`
SHA3	`9124d24e533be82490caa36234003da12189ecac371db5e96e9307b528ae7318 🔍`

29

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.15848`
MD5	`27c8326716161009544c0a039a9b1425 🔍`
SHA1	`d85f5e33e2a9814afafa90fa9b26a878e4d83faf 🔍`
SHA256	`a812969208241e7ea31fccf362ac21223f2af02dcaea4c4c4e3c84e27241a26c 🔍`
SHA3	`922fac57b9beed0c34ac48f2db40319a6f9196301c21920e43d8b7df1e78b251 🔍`

30

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.36964`
MD5	`9eb10f3ff70fd06b6ac70fdda4055278 🔍`
SHA1	`aa5f3367ee288e35f8f6af1a7308c9e0b3547167 🔍`
SHA256	`53b73446d97a756ab8fed02bb91f50ff3b8b2130538b03bb4ea6fe92f0ab6006 🔍`
SHA3	`992255986ea878cd68ff945d4d124de3f37e678ca8e21f94cf5dca26700ff090 🔍`

31

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x25a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.8801`
MD5	`9770e2f55b720c8370a9d84d6b85a37c 🔍`
SHA1	`a354136770bdfb13c12b6ea411ff5fe4b9916c5e 🔍`
SHA256	`a93c4dfb6013e022e8c39cd49b345ec7c8c19a44a63e84dbe2f4c286133d9a8d 🔍`
SHA3	`2db61b0bd5aa82a53c3624439473ba9244d91f78b74dfbc6f338b14c8cb51786 🔍`

32

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x4228`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.42273`
MD5	`dc265b2d1cf7be5b73bc02abdbb93566 🔍`
SHA1	`d3ceb23b05a38a99eaff993e9d213550642ae491 🔍`
SHA256	`1ac93e173ec138879a86948c8115d61a31a0594bd71e8f80e18727f86f6fe98f 🔍`
SHA3	`c421cb67d56d06a9803211c7be8c6302fd5208cadce42e699c50fb898ca677ea 🔍`

33

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x10828`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.81804`
MD5	`391b2f7b504c570567744bbe625b2d73 🔍`
SHA1	`967301676e39437c92d0b83bf8db3f178ff89684 🔍`
SHA256	`f4b8e40d2f7f6fd2d8be80492ac5618588d1c59b3dd7aaa5d1563f015ca42ff6 🔍`
SHA3	`2e172a48e0a243ab4321332cfade1636a62b3d700060080b998ee742b75b8c3c 🔍`

34

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x42028`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.38324`
MD5	`21082ce5b3beea000c23f284cc8397b5 🔍`
SHA1	`abae933befd68c55392ccb112bb225f35ef4d0af 🔍`
SHA256	`2e304297e85ec6a2327996055714ecc7a510c16051febedb9283b09fff293e72 🔍`
SHA3	`9df6f7b933c45d52c4cdb24e0abd08ba33be22076be0f2a92e0f04695b35a2b4 🔍`

WXWINDOWMENU

Type	`RT_MENU`
Language	English - United States
Codepage	UNKNOWN
Size	`0xb4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.17038`
MD5	`5a1fd46fc63f64ada514bb71b7eb3d1e 🔍`
SHA1	`40d7fcc43de28c2da9808d67681a613f6f0374a9 🔍`
SHA256	`0370d9ecdf682e403dddb46d309ffdc91dfe72a5c14ff39116b9d5633b9ec3b3 🔍`
SHA3	`8e2042b4f4cb19ab4db16bd55c54a28b0b9eb87b978166b2355e80f42aa0319a 🔍`

WXCURSOR_BLANK

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`ebb32ed08b06ab16f79c997b7963c57c 🔍`
SHA1	`c87e290caff3cf222d5ec678a51927ff22637949 🔍`
SHA256	`9c17b4621412d6ded24a76aed74d4425ae61f86b6d4092ca1e28ca66b7c71399 🔍`
SHA3	`fb70f94bf4a64a26f2d83b588fe2a233796083fd03aae7835387aeba2646b847 🔍`
Preview

WXCURSOR_BULLSEYE

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.91924`
Detected Filetype	Cursor file
MD5	`aff0f5e372bd49ceb9f615b9a04c97df 🔍`
SHA1	`e3205724d7ee695f027ab5ea8d8e1a453aaad0dd 🔍`
SHA256	`b07e022f8ef0a8e5fd3f56986b2e5bf06df07054e9ea9177996b0a6c27d74d7c 🔍`
SHA3	`9cb042121a5269b80d18c3c5a94c0e453890686aedade960097752377dfa9712 🔍`
Preview

WXCURSOR_CROSS

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`e6a3323fcb21bc5b90ee077f41a24061 🔍`
SHA1	`91e468b891f8306afeb6ac33bc31d67efb2cbe9d 🔍`
SHA256	`a92f60b25322592e7ddd13d88e4006c097666f4d87c8cb0c21ffdccd53b31d78 🔍`
SHA3	`ffc4266780334ccca3790e5f703fab0a138d252e16d1ad1145c1929f51d31d38 🔍`
Preview

WXCURSOR_HAND

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.83876`
Detected Filetype	Cursor file
MD5	`a2baa01ccdea3190e4998a54dbc202a4 🔍`
SHA1	`e8217df98038141ab4e449cb979b1c3bbea12da3 🔍`
SHA256	`c53efa8085835ba129c1909beaff8a67b45f50837707f22dfff0f24d8cd26710 🔍`
SHA3	`8874564c406835306368adf5e869422e1bb97109b97c1499caa8af219990e8dc 🔍`
Preview

WXCURSOR_MAGNIFIER

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`1ae28d964ba1a2b1b73cd813a32d4b40 🔍`
SHA1	`8883cd93b8ef7c15928177de37711f95f9e4cd22 🔍`
SHA256	`ff47a48c11c234903a7d625cb8b62101909f735ad84266c98dd4834549452c39 🔍`
SHA3	`a85dadd416ce2d22aa291c0794c45766a0613b853c6e3b884a2b05fc791427b8 🔍`
Preview

WXCURSOR_PBRUSH

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`dcaa3c032fe97281b125d0d8f677c219 🔍`
SHA1	`58fe36409f932549e2f101515abee7a40cf47b2c 🔍`
SHA256	`6e1e7738a1b6373d8829f817915822ef415a1727bb5bb7cfe809e31b3c143ac5 🔍`
SHA3	`02ef292e1b4a70e439e362af6b4fa213e3816ade45222b78dabab712b6afba54 🔍`
Preview

WXCURSOR_PENCIL

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`48e064acaba0088aa097b52394887587 🔍`
SHA1	`310b283d52aa218e77c0c08db694c970378b481d 🔍`
SHA256	`43f40dd5140804309a4c901ec3c85b54481316e67a6fe18beb9d5c0ce3a42c3a 🔍`
SHA3	`38753084b0ada40269914e80dbacf7656dc94764048bd5dff649b08b700f3ed5 🔍`
Preview

WXCURSOR_PLEFT

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`a95c7c78d0a0b30b87e3c4976e473508 🔍`
SHA1	`b19f3999f1b302a2d28977cb18a3416c918d486c 🔍`
SHA256	`326c048595bbc72e3f989cb3b95fbf09dc83739ced3cb13eb6f03336f95d74f1 🔍`
SHA3	`8157b4e6afa7ed2e2ffc174d655bec9fb81db609e4c5864faa5ead931ff60689 🔍`
Preview

WXCURSOR_PRIGHT

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`b3dbdfe1835416bbc3f5065baca9aca9 🔍`
SHA1	`334d5af1355f6a13c35be4ad16e76baaecf209f1 🔍`
SHA256	`ec26c438d10e3e84ec855c47f07a176e6c11bbfae1557d526490711b80f087fe 🔍`
SHA3	`2409b439f48a139d3764b226eda46c6a629d5bd208991369ae0c85e37c17c71d 🔍`
Preview

WXCURSOR_ROLLER

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`0893f6ba80d82936ebe7a8216546cd9a 🔍`
SHA1	`0754cbdf56c53de9ed7fbd47859d20b788c6f056 🔍`
SHA256	`a0adcedb82b57089f64e2857f97cefd6cf25f4d27eefc6648bda83fd5fef66bb 🔍`
SHA3	`ce6148ade08ef9b829f83cb13b4c650d9d4a7012bfd1ab697a7870a05f4104f8 🔍`
Preview

DLSP

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x5a`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.81615`
Detected Filetype	Icon file
MD5	`d9da813b2adb31e36336178fb59816e4 🔍`
SHA1	`7b64394bef8402a5b15b1a041cea2cadc385544c 🔍`
SHA256	`9fcaaae9fa78c69b9ae05d2b49421dbc36b00e4293f93a80f46376e16be35b59 🔍`
SHA3	`af09bf18efc283ab7b5d4a45ae80e6abf086cda609f14d645ff94955d33c7b0a 🔍`

WXICON_AAA

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x22`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.55805`
Detected Filetype	Icon file
MD5	`8ca8a31e5c4362b3d293fb036640c239 🔍`
SHA1	`0d81a6ef859724e3180b65eb97623459ab9b8873 🔍`
SHA256	`c43a8099c2a399bdeabf85e367e1da389c984b2067df919f0d2e0630834e499d 🔍`
SHA3	`7c3d1daca7b748b04a4f5d99d3af64c9a10b868c152ba5efc1f2c8ca94367bff 🔍`

WXICON_SMALL_CDROM

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x22`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.46698`
Detected Filetype	Icon file
MD5	`1660e734b91f92ff87f7f5030e3bf968 🔍`
SHA1	`0e708ecf247461716530288fa1eaa202e6f1d1aa 🔍`
SHA256	`f910bf68ed6e870752fcdc5c868a3dd17f8968b3d6d51f87e7db8d674bcb634b 🔍`
SHA3	`9b5ba235f99b7f7691a8538f14c6d90542f8f04de5b05a6e6ef4fc78e442fb78 🔍`

WXICON_SMALL_CLOSED_FOLDER

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x22`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.46698`
Detected Filetype	Icon file
MD5	`95227346e8c6ea3b3ae077023a970676 🔍`
SHA1	`abde842d658fc84c018efee84ae30ef0b526453e 🔍`
SHA256	`9d86fe17407b66e8df20f833e34a117a3d6214114346d2a8bb585048debf8e4a 🔍`
SHA3	`07d6aa13666f8c4c105dcb7b9b7f4af3eb245cdc03a93ce51a8ca3548d82e2f1 🔍`

WXICON_SMALL_COMPUTER

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x22`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.46698`
Detected Filetype	Icon file
MD5	`345cd31a322ed9218289d3d6f3180dfc 🔍`
SHA1	`899b00080fbd87318c1c8fd141a50e43e45231ba 🔍`
SHA256	`659d63120c5155285a8d76c4a98408bad3e710ba2556f957148c00e1116eb8d0 🔍`
SHA3	`cceba68d4a883aa866814360ecefd7f44a0632f35de97e27ffaf89c4fbc33429 🔍`

WXICON_SMALL_DRIVE

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x22`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.46698`
Detected Filetype	Icon file
MD5	`68071049dd10d6444b7f8d8051b009f1 🔍`
SHA1	`4c6f325f8de507ca94e9688647165ec4e5a91813 🔍`
SHA256	`cb49d829264d0ab18c747ed7c7187bd0a0e5690d8c4d7138b8535895b886e133 🔍`
SHA3	`11f220ce14eec9001ebd23bd5b4369265507870704138062019b346ebfafe3e9 🔍`

WXICON_SMALL_FILE

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x22`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.46698`
Detected Filetype	Icon file
MD5	`9a4f118d12d4e69967344d56097f99c6 🔍`
SHA1	`192bdbde76fd70e7ac4dd55a3c092425fb0cd5c3 🔍`
SHA256	`de00a947a2c16d5a4c18a8845cec939a91c409cb631b6ba34019b7918da916b9 🔍`
SHA3	`3e9791e2564403c771d85c0d26cac2335786d147ed9428758534f908e22c7649 🔍`

WXICON_SMALL_FLOPPY

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x22`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.46698`
Detected Filetype	Icon file
MD5	`7744448c75ee298cf016d8d61bd7f76f 🔍`
SHA1	`955f368f92f8e46fe1d7bd9aa7d1eb8b88e326e2 🔍`
SHA256	`a005637bc1b47ad8ca3da09383adef172290e87820a7504d34328acfa0df47f4 🔍`
SHA3	`167d204fd0388ce121abb8aa05c466e716432e2d323b0919903943a4a28a2836 🔍`

WXICON_SMALL_OPEN_FOLDER

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x22`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.35227`
Detected Filetype	Icon file
MD5	`1b03521f27c4ac7952e7a932946c20d8 🔍`
SHA1	`f45c43e244dacc176411cd66c27bef603cbf7538 🔍`
SHA256	`606ead51c60cb3246b00925ddc590c08b11b2faa7c7e31255118d98a4529eb6f 🔍`
SHA3	`cf1bb5dea6104ac1f058192fca7c9ca86d73f10fd52aa3a94af1b0a3cb368f58 🔍`

WXICON_SMALL_REMOVEABLE

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x22`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.46698`
Detected Filetype	Icon file
MD5	`c0ebba089d5bdb5110ac9b6bf4d89f6d 🔍`
SHA1	`e632dcb29cdc24168672e026e68ef5ec87e30961 🔍`
SHA256	`bd7c76c78748bb74f48b4dee358193b72198c25377d4134a03ebf28d61f6fcdc 🔍`
SHA3	`a8bf01cad064fed4eba6e97502d18ee2dd9a992a36eb15014dfcc317c7a39ada 🔍`

1 (#2)

Type	`RT_MANIFEST`
Language	English - United States
Codepage	UNKNOWN
Size	`0x2df`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.78009`
MD5	`1cfb603eaca0de909e4f0ae54373517e 🔍`
SHA1	`f30e8a65dd1bb8da3084b755b676f31051e47563 🔍`
SHA256	`d827f6114c692412d62ce7a1f2c52d93d99cee1827e8083a3dbc546c04f5e20b 🔍`
SHA3	`89bcd225bf9a6fe47103f8064577a5aaa27d09d1685da4161540f248c8226efe 🔍`

Version Info

IMAGE_DEBUG_TYPE_POGO

Characteristics	`0`
TimeDateStamp	2026-Jul-30 06:33:37
Version	`0.0`
SizeofData	`892`
AddressOfRawData	`0x44d4d8`
PointerToRawData	`0x44c8d8`

TLS Callbacks

StartAddressOfRawData	`0x14044d878`
EndAddressOfRawData	`0x14044d88c`
AddressOfIndex	`0x1404e0b80`
AddressOfCallbacks	`0x140308e70`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_ALIGN_8BYTES`
Callbacks	`(EMPTY)`

Load Configuration

Size	`0x140`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x1404a40c0`

RICH Header

XOR Key	`0xe176e19d`
Unmarked objects	`0`
Imports (VS2008 SP1 build 30729)	`22`
253 (35721)	`1`
ASM objects (35721)	`4`
C objects (35721)	`10`
C++ objects (35721)	`34`
Imports (35721)	`6`
C objects (33145)	`9`
C objects (CVTCIL) (33145)	`1`
Imports (33145)	`37`
Total imports	`829`
C objects (36248)	`25`
C++ objects (36248)	`304`
Resource objects (36248)	`1`
151	`1`
Linker (36248)	`1`

Errors

Leave a comment

No comments yet.