Manalyze report for 69b75d7c8075605170e901a5f058399d791e34d6666710255d4740e1c3f4df8e

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2026-May-21 07:35:37
Detected languages	English - United States
TLS Callbacks	1 callback(s) detected.
Debug artifacts	spwlauncher.pdb
CompanyName	spworlds
FileDescription	SPWlauncher
FileVersion	`0.0.92`
ProductName	SPWlauncher
ProductVersion	`0.0.92`

Plugin Output

Suspicious	Strings found in the binary may indicate undesirable behavior:	`Miscellaneous malware strings: cmd.exe` Contains domain names: adobe.com adoptium.net api.adoptium.net api.github.com api.minecraftservices.com api.modrinth.com api.mojang.com auth.xboxlive.com birthpopuptypesapplyImagebeinguppernoteseveryshowsmeansextramatchtrackknownearlybegansuperpapernorthlearngivennamedendedTermspartsGroupbrandusingwomanfalsereadyaudiotakeswhile.com counter.onrender.com developer.microsoft.com device.auth.xboxlive.com download.minecraft.net dropbox.com fabricmc.net files.prismlauncher.org genretrucklooksValueFrame.net github.com http://127.0.0.1 http://auth.xboxlive.comhttps http://namemc-result.internal http://ns.adobe.com http://ns.adobe.com/xmp/extension/ http://ns.adobe.iso http://www.C http://www.a http://www.css http://www.hortcut http://www.icon http://www.interpretation http://www.language http://www.style http://www.text-decoration http://www.w3.org http://www.w3.org/shortcut http://www.wencodeURIComponent http://www.years http://xboxlive.comUseModernGamertaghttps https://adoptium.net https://api.adoptium.net https://api.adoptium.net/v3/assets/latest/ https://api.github.com https://api.github.com/repos/ https://api.github.com/repos/Ganakas/SPCreate_Modpack/releases/latest https://api.github.com/repos/Ganakas/SPWlauncher_beta_releases/releases/latest https://api.minecraftservices.com https://api.minecraftservices.com/authentication/login_with_xbox https://api.minecraftservices.com/entitlements/mcstore https://api.minecraftservices.com/launcher/loginAccept https://api.minecraftservices.com/minecraft/profile https://api.minecraftservices.com/minecraft/profile/capes/activeha https://api.minecraftservices.com/minecraft/profile/skinsNo https://api.modrinth.com https://api.modrinth.com/v2/searchfacets https://api.mojang.com https://api.mojang.com/users/profiles/minecraft/ https://api.vintagestory.at https://api.vintagestory.at/stable.jsonsrc\game\external\vintagestory.rs https://api.vintagestory.at/unstable.json https://corretto.aws https://developer.microsoft.com https://developer.microsoft.com/en-us/microsoft-edge/webview2 https://device.auth.xboxlive.com https://device.auth.xboxlive.com/device/authenticate/device/authenticate https://docs.rs https://files.prismlauncher.org https://files.prismlauncher.org/maven/io/github/zekerzhayard/ForgeWrapper/prism-2025-12-07/ForgeWrapper-prism-2025-12-07.jar https://github.com https://launchermeta.mojang.com https://launchermeta.mojang.com/v1/products/java-runtime/2ec0cc96c44e5a76b9c8b7c39df7210883d12871/all.jsonUser-AgentSPWLauncher https://libraries.minecraft.net https://libraries.minecraft.net/ https://login.live.com https://login.live.com/oauth20_authorize.srf https://login.live.com/oauth20_connect.srfresponse_typedevice_code https://login.live.com/oauth20_desktop.srf1794566092https https://login.live.com/oauth20_token.srfclient_idcode_verifiergrant_typeauthorization_coderedirect_uriscope https://login.microsoftonline.com https://login.microsoftonline.com/consumers/oauth2/v2.0/authorize https://login.microsoftonline.com/consumers/oauth2/v2.0/tokenXboxLive.signin https://maven.fabricmc.net https://maven.fabricmc.net/ https://maven.minecraftforge.net https://maven.minecraftforge.net/ https://maven.neoforged.net https://maven.neoforged.net/releases https://maven.neoforged.net/releases/ https://maven.neoforged.net/releases/net/neoforged/neoforge/ https://meta.fabricmc.net https://meta.prismlauncher.org https://meta.prismlauncher.org/v1/net.minecraftforge/ https://meta.prismlauncher.org/v1/net.minecraftforge/index.json https://meta.prismlauncher.org/v1/net.neoforged/ https://meta.prismlauncher.org/v1/net.neoforged/index.json https://meta.quiltmc.org https://namemc.com https://nmsr.nickac.dev https://nmsr.nickac.dev/face/ https://piston-meta.mojang.com https://piston-meta.mojang.com/mc/game/version_manifest_v2.json https://resources.download.minecraft.net https://resources.download.minecraft.net/ https://s.namemc.com https://s.namemc.com/i/ https://sessionserver.mojang.com https://sessionserver.mojang.com/session/minecraft/profile/ec561538f3fd461daff5086b22154bceproperties https://sisu.xboxlive.com https://sisu.xboxlive.com/authenticate/authenticate https://sisu.xboxlive.com/authorize/authorize https://spwlauncher-counter.onrender.com https://spwlauncherfeedback.stamm911.workers.devspw_2026_a8q3e2d3b8c4076523ef911dsrc https://spwlauncherfeedback.stamm911.workers.devspw_2026_a8q3e2d3b8c4076523ef911dsrc\feedback.rs https://user.auth.xboxlive.com https://user.auth.xboxlive.com/user/authenticate https://www.World https://www.dropbox.com https://www.dropbox.com/scl/fi/w1k1zph04xgef3e8ys6mf/spwlauncherbeta_version.txt?rlkey https://www.recent https://xsts.auth.xboxlive.com https://xsts.auth.xboxlive.com/xsts/authorize/xsts/authorize launchermeta.mojang.com libraries.minecraft.net login.live.com login.microsoftonline.com maven.fabricmc.net maven.minecraftforge.net maven.neoforged.net meta.fabricmc.net meta.mojang.com meta.prismlauncher.org meta.quiltmc.org microsoft.com microsoftonline.com minecraft.net minecraftforge.net minecraftservices.com modrinth.com mojang.com namemc.com neoforged.net ns.adobe.com onrender.com piston-meta.mojang.com prismlauncher.org quiltmc.org resources.download.minecraft.net s.namemc.com sessionserver.mojang.com sisu.xboxlive.com spwlauncher-counter.onrender.com texture.namemc.com thing.org user.auth.xboxlive.com www.dropbox.com www.w3.org xboxlive.com xsts.auth.xboxlive.com
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to CRC32` `Uses constants related to SHA1` `Uses constants related to SHA256` `Uses constants related to RC5 or RC6`
Malicious	The PE contains functions mostly used by malware.	`[!] The program may be hiding some of its imports: GetProcAddress LoadLibraryW LoadLibraryExA LoadLibraryExW LoadLibraryA` `Functions which can be used for anti-debugging purposes: SwitchToThread` `Can access the registry: RegGetValueW RegOpenKeyExW RegCloseKey RegQueryValueExW` `Possibly launches other programs: CreateProcessW ShellExecuteW` `Uses Windows's Native API: NtWriteFile NtCancelIoFileEx NtReadFile NtDeviceIoControlFile NtCreateNamedPipeFile NtCreateFile NtOpenFile` `Can create temporary files: GetTempPathW CreateFileW` `Uses functions commonly found in keyloggers: GetForegroundWindow GetAsyncKeyState MapVirtualKeyW` `Leverages the raw socket API to access the Internet: shutdown send recv freeaddrinfo getaddrinfo WSACleanup WSAStartup accept listen socket bind getsockname getsockopt connect ioctlsocket WSASocketW WSASend WSAIoctl setsockopt closesocket getpeername WSAGetLastError` `Manipulates other processes: OpenProcess` `Can take screenshots: CreateCompatibleDC BitBlt GetDC` `Interacts with the certificate store: CertOpenStore CertAddCertificateContextToStore`
Suspicious	VirusTotal score: 1/69 (Scanned on 2026-07-05 03:42:18)	`Trapmine: malicious.high.ml.score`

Hashes

MD5	`0c17112dabadf1cd7c511316f37e436c`
SHA1	`d7fb9ef98b10934ae01e130028d542bbb0fc4101`
SHA256	`69b75d7c8075605170e901a5f058399d791e34d6666710255d4740e1c3f4df8e`
SHA3	`4ffdbb81a2e81cf91034c935f7e9fe604cfd1f753896fa7160f976373b5dcfd8`
SSDeep	`196608:rMZ4UdtH2yj2Dd71eNdudvxpvP3T4r4JU3O3eFhmdecq:FBoEpvdJUJsxq`
Imports Hash	`9a94a1a309ba467da60187b7ea42c7de`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0xf0`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`6`
TimeDateStamp	2026-May-21 07:35:37
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0x581a00`
SizeOfInitializedData	`0x377000`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0000000000560BBC (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x140000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x8fd000`
SizeOfHeaders	`0x400`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`1734fbb29902d9c7c6cb1a201e372a76`
SHA1	`58c2f8708d65389678681cb1edf8e64341d41a38`
SHA256	`14c07e83edf875f2ef32eeab5c4f7ff48fce0b487e302210f7871c000a6549fc`
SHA3	`afc84cfcd60d562c99dacbdefad852f950a7586eb23ee5b81ba60d3aaf4a4d88`
VirtualSize	`0x581930`
VirtualAddress	`0x1000`
SizeOfRawData	`0x581a00`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.28837`

.rdata

MD5	`a1970cbba54c04e3ef1af1f02914c0ab`
SHA1	`58607c98dc0b4a5333a3cc3623a821ae3be64785`
SHA256	`e0589640137450dbf6b63b5d9593037d0a414206a7d8b9c140c019243ffbb327`
SHA3	`71458f7ac4289938cfd375b74152649faed45004c8aab6fe99282189e164605c`
VirtualSize	`0x347100`
VirtualAddress	`0x583000`
SizeOfRawData	`0x347200`
PointerToRawData	`0x581e00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`7.63802`

.data

MD5	`778e57ce4109da9151706f91ff19bc8b`
SHA1	`faa673832fb338d67daca91907dcee3791787aad`
SHA256	`e174c7f711c81d20c464416b2afc73486f61888567baebb5f075b08a1b1868e5`
SHA3	`a4975cfa85c234fe2e27d092900519d18cb3f626611c7835ab86727a117167d6`
VirtualSize	`0x3ca8`
VirtualAddress	`0x8cb000`
SizeOfRawData	`0x1800`
PointerToRawData	`0x8c9000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`3.86354`

.pdata

MD5	`7764a654339954add0eb8a7b6a39bdf0`
SHA1	`e479d6d84f6c1fe45b2149b9b3f71d1849776077`
SHA256	`784634b8daf9333f0fc04fb36b3adcff1d7e8ed56d488f65fc8a5c009d998cc1`
SHA3	`11c4ae24b1b5f82115d753d2cffefec4f93017f06ab832d386582ab9967056d5`
VirtualSize	`0x1c344`
VirtualAddress	`0x8cf000`
SizeOfRawData	`0x1c400`
PointerToRawData	`0x8ca800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.3504`

.rsrc

MD5	`0805f2fa207606ee19ca6faa49da2c7a`
SHA1	`377dd1d562d4e78657cf9146f2251adec0a70cdb`
SHA256	`968c1dce52b6aae27bcc5c008c48cc6d038ec2666e3db3dfd335727c5ea50b14`
SHA3	`3f075b4a0c06a4fc3ec6b60ffdf32018405f40e35e41a396e0d536343c6c498c`
VirtualSize	`0x9550`
VirtualAddress	`0x8ec000`
SizeOfRawData	`0x9600`
PointerToRawData	`0x8e6c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`7.9049`

.reloc

MD5	`964f74467f197ee6ad036c97260fcfce`
SHA1	`66967933d9a074a19996e760c77821c85230d26c`
SHA256	`2bea8bb5bf2aaee6c7bddf2bf593003010c85e0eb25fbd2d3e402cfa7514d730`
SHA3	`0aecf6be227babfe7f01a796c73078a1ca97a760fdcd10aa9d0651941020a986`
VirtualSize	`0x64ac`
VirtualAddress	`0x8f6000`
SizeOfRawData	`0x6600`
PointerToRawData	`0x8f0200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.45248`

Imports

kernel32.dll	`ReleaseMutex` `MultiByteToWideChar` `FlsGetValue` `FormatMessageW` `GetModuleFileNameW` `SetHandleInformation` `SleepEx` `SetWaitableTimer` `ExitProcess` `CompareStringOrdinal` `GetSystemDirectoryW` `GetExitCodeProcess` `DuplicateHandle` `WaitForMultipleObjects` `GlobalMemoryStatusEx` `FlsSetValue` `FlsFree` `EncodePointer` `WideCharToMultiByte` `WaitForSingleObject` `GetCurrentProcessId` `SetLastError` `HeapAlloc` `SwitchToThread` `lstrlenW` `GetSystemTimePreciseAsFileTime` `HeapFree` `HeapReAlloc` `GetProcessHeap` `GetCurrentThread` `SetThreadStackGuarantee` `GetModuleHandleA` `Sleep` `GetProcAddress` `GetProcessId` `SleepConditionVariableSRW` `FindNextFileW` `GetFileAttributesW` `CreateProcessW` `CancelIo` `CreateEventW` `CreateWaitableTimerExW` `GetCurrentProcess` `WriteFileEx` `CreateThread` `DeviceIoControl` `GetLastError` `MoveFileExW` `CopyFileExW` `DeleteFileW` `GetTempPathW` `SetFilePointerEx` `GetFileInformationByHandleEx` `GetFileInformationByHandle` `WaitForSingleObjectEx` `SetFileInformationByHandle` `SetFileTime` `FindFirstFileExW` `GetFullPathNameW` `CreateDirectoryW` `WriteConsoleW` `GetConsoleOutputCP` `GetConsoleMode` `GetStdHandle` `CreateMutexA` `RemoveDirectoryW` `FindClose` `WakeAllConditionVariable` `AcquireSRWLockExclusive` `ReleaseSRWLockExclusive` `GetSystemInfo` `GetCurrentThreadId` `CreateFileW` `RtlLookupFunctionEntry` `LCIDToLocaleName` `GetUserDefaultUILanguage` `FlsAlloc` `GetModuleHandleW` `UnregisterWaitEx` `LoadLibraryW` `RaiseException` `RtlPcToFileHeader` `GetSystemTimeAsFileTime` `LoadLibraryExA` `GetTimeZoneInformationForYear` `CloseHandle` `TerminateProcess` `OutputDebugStringA` `OutputDebugStringW` `LoadLibraryExW` `FreeLibrary` `CancelIoEx` `SetFileCompletionNotificationModes` `OpenProcess` `LoadLibraryA` `ReadFileEx` `RegisterWaitForSingleObject` `CreateIoCompletionPort` `GetQueuedCompletionStatusEx` `GetFinalPathNameByHandleW` `GetWindowsDirectoryW` `AllocConsole` `SetConsoleTitleW` `ReadFile` `PostQueuedCompletionStatus` `WriteFile` `GetOverlappedResult`
bcryptprimitives.dll	`ProcessPrng`
ntdll.dll	`NtWriteFile` `RtlGetVersion` `NtCancelIoFileEx` `RtlUnwindEx` `NtReadFile` `NtDeviceIoControlFile` `NtCreateNamedPipeFile` `NtCreateFile` `NtOpenFile` `RtlCaptureContext` `RtlNtStatusToDosError` `RtlVirtualUnwind`
shell32.dll	`SHAppBarMessage` `ILCreateFromPathW` `ILFree` `SHOpenFolderAndSelectItems` `DragFinish` `ShellExecuteExW` `SHGetKnownFolderPath` `ShellExecuteW` `SHCreateItemFromParsingName` `DragQueryFileW`
ole32.dll	`CoInitializeEx` `CoUninitialize` `CoInitialize` `CoCreateFreeThreadedMarshaler` `CoTaskMemAlloc` `OleInitialize` `RegisterDragDrop` `CoTaskMemFree` `RevokeDragDrop` `CoCreateInstance`
advapi32.dll	`RegGetValueW` `SystemFunction036` `RegOpenKeyExW` `RegCloseKey` `RegQueryValueExW`
api-ms-win-core-synch-l1-2-0.dll	`WakeByAddressSingle` `WakeByAddressAll` `WaitOnAddress`
gdi32.dll	`SetTextColor` `CreateCompatibleDC` `CreateDIBSection` `SelectObject` `DeleteDC` `SetBkMode` `GetDeviceCaps` `BitBlt` `CombineRgn` `CreateRectRgn` `DeleteObject` `CreateSolidBrush`
comctl32.dll	`TaskDialogIndirect` `RemoveWindowSubclass` `DefSubclassProc` `SetWindowSubclass`
user32.dll	`GetForegroundWindow` `FlashWindowEx` `InvalidateRect` `RegisterTouchWindow` `IsWindow` `UpdateWindow` `IsWindowEnabled` `IsIconic` `CreateIcon` `RemoveMenu` `IsWindowVisible` `GetAsyncKeyState` `EnableWindow` `SetPropW` `GetKeyboardState` `SetWindowTextW` `GetWindowTextW` `GetWindowTextLengthW` `GetKeyState` `MonitorFromRect` `ToUnicodeEx` `MapVirtualKeyExW` `GetKeyboardLayout` `SetMenu` `GetActiveWindow` `ClipCursor` `PostMessageW` `SystemParametersInfoA` `SendMessageW` `ShowWindow` `GetSystemMetrics` `GetClipCursor` `SetMenuItemInfoW` `DrawMenuBar` `CreatePopupMenu` `ScreenToClient` `ShowCursor` `SystemParametersInfoW` `SetCapture` `SetWindowLongW` `GetSystemMenu` `GetMonitorInfoW` `GetWindowPlacement` `GetWindow` `LoadCursorW` `DefWindowProcW` `RegisterRawInputDevices` `AdjustWindowRectEx` `GetMenu` `GetWindowLongW` `InvalidateRgn` `ReleaseCapture` `CreateMenu` `CreateAcceleratorTableW` `GetTouchInputInfo` `CloseTouchInputHandle` `TrackMouseEvent` `RegisterWindowMessageA` `FindWindowExW` `GetParent` `DestroyAcceleratorTable` `DestroyIcon` `TranslateAcceleratorW` `MsgWaitForMultipleObjectsEx` `MapVirtualKeyW` `GetUpdateRect` `PeekMessageW` `PostThreadMessageW` `ValidateRect` `GetRawInputData` `SetWindowLongPtrW` `DispatchMessageW` `GetMessageW` `DestroyWindow` `SetCursor` `DestroyMenu` `SetWindowRgn` `EnumChildWindows` `DispatchMessageA` `TranslateMessage` `GetMessageA` `SetWindowPos` `CreateWindowExW` `RegisterClassExW` `GetWindowLongPtrW` `SetFocus` `RedrawWindow` `AdjustWindowRect` `EnumDisplayMonitors` `MonitorFromPoint` `SetParent` `ChangeDisplaySettingsExW` `SetCursorPos` `SetWindowDisplayAffinity` `SetWindowPlacement` `IsProcessDPIAware` `MonitorFromWindow` `TrackPopupMenu` `SetForegroundWindow` `ClientToScreen` `GetCursorPos` `EnableMenuItem` `DrawIconEx` `GetDC` `AppendMenuW` `InsertMenuW` `SendInput` `CheckMenuItem` `DrawTextW` `ReleaseDC` `FillRect` `GetWindowDC` `OffsetRect` `GetWindowRect` `MapWindowPoints` `GetClientRect` `GetMenuBarInfo` `GetMenuItemInfoW` `PostQuitMessage`
oleaut32.dll	`SetErrorInfo` `SysStringLen` `GetErrorInfo` `SysFreeString`
shlwapi.dll	`SHCreateMemStream`
dwmapi.dll	`DwmEnableBlurBehindWindow` `DwmSetWindowAttribute` `DwmGetWindowAttribute`
ws2_32.dll	`shutdown` `send` `recv` `freeaddrinfo` `getaddrinfo` `WSACleanup` `WSAStartup` `accept` `listen` `socket` `bind` `getsockname` `getsockopt` `connect` `ioctlsocket` `WSASocketW` `WSASend` `WSAIoctl` `setsockopt` `closesocket` `getpeername` `WSAGetLastError`
bcrypt.dll	`BCryptGenRandom`
crypt32.dll	`CertGetCertificateChain` `CertCloseStore` `CertVerifyCertificateChainPolicy` `CertOpenStore` `CertFreeCertificateChain` `CertEnumCertificatesInStore` `CertDuplicateCertificateChain` `CertDuplicateCertificateContext` `CertAddCertificateContextToStore` `CertDuplicateStore` `CertFreeCertificateContext`
secur32.dll	`FreeCredentialsHandle` `DecryptMessage` `ApplyControlToken` `FreeContextBuffer` `AcceptSecurityContext` `EncryptMessage` `QueryContextAttributesW` `InitializeSecurityContextW` `AcquireCredentialsHandleA` `DeleteSecurityContext`
ADVAPI32.dll	`EventWriteTransfer` `EventSetInformation` `EventRegister` `EventUnregister`
KERNEL32.dll	`GetEnvironmentStringsW` `K32GetPerformanceInfo` `InitializeSListHead` `InitializeCriticalSectionEx` `FreeEnvironmentStringsW` `DeleteCriticalSection` `AddVectoredExceptionHandler` `SetEnvironmentVariableW` `K32GetProcessMemoryInfo` `GetCurrentDirectoryW` `GetEnvironmentVariableW` `GetCommandLineW` `QueryPerformanceCounter` `QueryPerformanceFrequency` `SetUnhandledExceptionFilter`
pdh.dll	`PdhCloseQuery` `PdhRemoveCounter`
api-ms-win-crt-math-l1-1-0.dll	`floor` `round` `trunc` `log2` `__setusermatherr` `expf` `ceilf` `floorf` `sinf` `roundf` `pow`
api-ms-win-crt-string-l1-1-0.dll	`_wcsicmp` `wcscmp` `strcpy_s` `strlen` `wcslen`
api-ms-win-crt-heap-l1-1-0.dll	`_set_new_mode` `_callnewh` `malloc` `calloc` `free`
api-ms-win-crt-runtime-l1-1-0.dll	`abort` `_get_initial_narrow_environment` `_initterm` `terminate` `exit` `_crt_atexit` `_wassert` `_exit` `_configure_narrow_argv` `__p___argc` `_register_onexit_function` `_initialize_onexit_table` `__p___argv` `_seh_filter_exe` `_initialize_narrow_environment` `_register_thread_local_exe_atexit_callback` `_set_app_type` `_initterm_e` `_c_exit` `_cexit`
api-ms-win-crt-utility-l1-1-0.dll	`_rotl64`
api-ms-win-crt-convert-l1-1-0.dll	`_ultow_s` `_wtoi` `wcstol`
api-ms-win-crt-stdio-l1-1-0.dll	`__p__commode` `_set_fmode`
api-ms-win-crt-locale-l1-1-0.dll	`_configthreadlocale`

Delayed Imports

1

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x42a`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.56064`
Detected Filetype	PNG graphic file
MD5	`9cadf1dc0b4c38bfa4d9ae4ba4c4342e`
SHA1	`b234a148205488ce3158fb19cbb7e91249953be7`
SHA256	`2bbf23a8b05aee7523f6b67e2fc53bdad539c41cb76cbae33bcd871fdd175c8f`
SHA3	`8d783731d553d982a62aed0501dc32a11c971da7594e90ce3e11ab823aa02bd4`

2

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x210`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.33828`
Detected Filetype	PNG graphic file
MD5	`36376b094ec10696f0db640c6c11127a`
SHA1	`a5e8b158c2d418738d802485863a0b72d2843fd6`
SHA256	`d6fe79239b9df2f282735a061efc913610904e0344730c737ca3182598d166a6`
SHA3	`b68d771b3aaf58a361c9b01ac7e609047c6b3fe5a4c719f0957a75691a1570a1`

3

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x30d`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.51286`
Detected Filetype	PNG graphic file
MD5	`5d3a96ef8c486a329fd1035b50e6bd3b`
SHA1	`8b45c20062d3df97d270b20a13d8adb9ce02f721`
SHA256	`6542ffb81b2353731a20953b466d8a06d8b1a00c938307479917b5d3b11216a2`
SHA3	`282fa75b0ba9ad58e06ea801d085d3492d6d70f682267686fa409ee021f3471f`

4

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x5d9`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.49337`
Detected Filetype	PNG graphic file
MD5	`3deadc7e775fabc11987c36bcf7b481b`
SHA1	`20ab556259649b4590c88e89e5ed7b63920656ab`
SHA256	`d80c4641525e1e06b9a6573d98417f951a861193d0c89bd72d56e4b278cb53bd`
SHA3	`5d48a738f71658a071e93765876509600f958a69f7626ac05b1efc0f1712bc7e`

5

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x86d`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.50825`
Detected Filetype	PNG graphic file
MD5	`45868c12b1beab091bf808fdde49f66c`
SHA1	`b4d292cac8157727d4eb308d12eb4c6f980062b3`
SHA256	`8c5d03f0096522d37ff9f7d9a04fa9da391a387bcfe12c7f0b9322bcb95f2d93`
SHA3	`4a5d1335abe5835290b618892929f8c0a1d42643789653c3610655d395cbd2a0`

6

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x77ed`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.9861`
Detected Filetype	PNG graphic file
MD5	`20a8168bedc4d60de79000c037454aac`
SHA1	`c694de6f1425de79e13ea61f716e72244ee986b4`
SHA256	`a960e558ed0558d8403aa20b36b442b3e92aceaa29c8a6d2f1b775e97dc285f9`
SHA3	`d9af10c5a9e704f49dff753971597faace273e7070b30fa594ea078068b8c86b`

32512

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x5a`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.74926`
Detected Filetype	Icon file
MD5	`e5a17c8828301aed6bbcdf0768ac2e40`
SHA1	`e9cbc4c7a1685794e8ca57b4bc5c07f3bd2cd421`
SHA256	`0e0399e4458cd80045612cb93be272dfef3b771f7e7f1224693fcd8a5cad4bd7`
SHA3	`20da7f8489d481cd2bbd4bf5ddabaa44dfc6ee48be6569095758a26bcc1584b1`

1 (#2)

Type	`RT_VERSION`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1ec`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.17848`
MD5	`4d871921c684800d58abd1d161d39edf`
SHA1	`36c4889e5cdda2ee9dee17302812dd2fecd55040`
SHA256	`1b0cf8295f6b8e3b6fe47641faaf5fd9c61c668eec2d8266f8282957de2448c2`
SHA3	`9bae1e9fb643ed443d149cc30ad57bd2b4cdef4d2bf421dbd133a4707a48ee85`

1 (#3)

Type	`RT_MANIFEST`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.96056`
MD5	`01e4c8c046a47771f13cd120b53303e7`
SHA1	`2a4224d31c916a5cff4f2636a3cb47fdd84a5cc9`
SHA256	`b1cb832f790c153aa0e9a66f76e75460263cf1d41971d2dbcc9a4d87ec18b7d8`
SHA3	`680120ec819e7ba66519d9a8a3e446973c4cb28aa0146c91cceaa8c8fadc90ae`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	0.0.92.0
ProductVersion	0.0.92.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT` `VOS_NT_WINDOWS32` `VOS_WINCE` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
CompanyName	spworlds
FileDescription	SPWlauncher
FileVersion (#2)	0.0.92
ProductName	SPWlauncher
ProductVersion (#2)	0.0.92

Resource LangID	English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2026-May-21 07:35:37
Version	`0.0`
SizeofData	`40`
AddressOfRawData	`0x8b8954`
PointerToRawData	`0x8b7754`
Referenced File	spwlauncher.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics	`0`
TimeDateStamp	2026-May-21 07:35:37
Version	`0.0`
SizeofData	`20`
AddressOfRawData	`0x8b897c`
PointerToRawData	`0x8b777c`

IMAGE_DEBUG_TYPE_POGO

Characteristics	`0`
TimeDateStamp	2026-May-21 07:35:37
Version	`0.0`
SizeofData	`1048`
AddressOfRawData	`0x8b8990`
PointerToRawData	`0x8b7790`

TLS Callbacks

StartAddressOfRawData	`0x1408b8df0`
EndAddressOfRawData	`0x1408b8fc4`
AddressOfIndex	`0x1408ceb3c`
AddressOfCallbacks	`0x140583e08`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_ALIGN_8BYTES`
Callbacks	`0x0000000140428340`

Load Configuration

Size	`0x140`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x1408cc600`

RICH Header

XOR Key	`0x4263889c`
Unmarked objects	`0`
Imports (VS2008 SP1 build 30729)	`16`
ASM objects (35403)	`9`
C objects (35403)	`13`
C++ objects (35403)	`46`
Imports (33145)	`5`
Total imports	`418`
C objects (35721)	`78`
Unmarked objects (#2)	`61`
Resource objects (35721)	`1`
Linker (35721)	`1`

Errors

Leave a comment

No comments yet.