7ebe99449533e08c09f3b0d6900673ec21e939821aa9e28a1095a8fff155daed

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Sep-26 23:53:58
Detected languages English - United States
TLS Callbacks 2 callback(s) detected.

Plugin Output

Suspicious PEiD Signature: PeStubOEP v1.x
Suspicious Strings found in the binary may indicate undesirable behavior: May have dropper capabilities:
  • %TEMP%
 Miscellaneous malware strings:
  • Exploit
 Contains domain names:
  • 101soundboards.com
  • apple.com
  • casedieresis.cn
  • casetilde.cn
  • commaaccentright.cn
  • connary.com
  • cyrillictail.cn
  • cyrillictic.cn
  • fontello.com
  • github.com
  • google.com
  • http://fontello.com
  • http://scripts.sil.org
  • http://scripts.sil.org/OFLOpen
  • http://scripts.sil.org/OFLhttp
  • http://www.apple.com
  • http://www.apple.com/Copyright
  • http://www.apple.com/http
  • https://github.com
  • https://rsms.me
  • https://www.google.com
  • https://www.google.com/fonts/license/productsans
  • koronisaccentleft.cn
  • scripts.sil.org
  • tildecross.cn
  • www.apple.com
  • www.google.com
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Uses constants related to RC5 or RC6
Uses known Mersenne Twister constants
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryW
  • LoadLibraryA
  • LoadLibraryExW
 Functions which can be used for anti-debugging purposes:
  • CreateToolhelp32Snapshot
 Possibly launches other programs:
  • ShellExecuteW
  • ShellExecuteA
 Can create temporary files:
  • CreateFileW
  • GetTempPathW
 Uses functions commonly found in keyloggers:
  • GetAsyncKeyState
  • GetForegroundWindow
 Memory manipulation functions often used by packers:
  • VirtualProtect
  • VirtualAlloc
 Reads the contents of the clipboard:
  • GetClipboardData
Info The PE's resources present abnormal characteristics. Resource 405 is possibly compressed or encrypted.
Malicious VirusTotal score: 3/57 (Scanned on 2026-10-05 19:16:18) CrowdStrike: win/malicious_confidence_70% (D)
Elastic: malicious (moderate confidence)
Symantec: ML.Attribute.HighConfidence

Hashes

MD5 4046b89e54388d0f114f898d79f10e1b 🔍
SHA1 478ad5b1db17953305f932344b6221b92ded289f 🔍
SHA256 7ebe99449533e08c09f3b0d6900673ec21e939821aa9e28a1095a8fff155daed 🔍
SHA3 d754f817fc5ab7326cdac929d9bcac2c31d3a2598a6fb5d379be70656ce7ed2b 🔍
SSDeep 49152:cyayttGiiewVNcrVd2FEbKCV8c9nE2Zr2yh4oTx7QTTgJ4Tit5LPYjjlgb1KSMy:px7mMWudeveaym1ud+oRJKt 🔍
Imports Hash b12c1cb1bff20e318581e275095bb3b2 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x110

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 2026-Sep-26 23:53:58
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x363a00
SizeOfInitializedData 0x2caa00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000000000031FB54 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x180000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x633000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 5a722a3b66c9b0524d3b68c01c1a4af9 🔍
SHA1 32aa08de7e2f9f88fd4fc44d283ecb14a366d29b 🔍
SHA256 bfc9cfb3d844313cebf760afd3f79b0d04ac7bc4425320d95b46e5e937592570 🔍
SHA3 300c23fc3723f01dc80b5c1dc605dfdbdfcbb1b173d0a0c4c4b99b9a61528fff 🔍
VirtualSize 0x3638f4
VirtualAddress 0x1000
SizeOfRawData 0x363a00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.56472

.rdata

MD5 a4ee37d83e0c7276e9a1742db6fb2ec6 🔍
SHA1 40a0702710acf74fca25b315b4ba75ee3c3dcae5 🔍
SHA256 a7f762c1cbe3203d51ec5e991712b9b404b5f33e63a815e912f497d09ad5357f 🔍
SHA3 035f49229c52dcd1028f7d830b5fe9c061d9bff789c5e2e610de2dc939e9bcb9 🔍
VirtualSize 0x85754
VirtualAddress 0x365000
SizeOfRawData 0x85800
PointerToRawData 0x363e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.09889

.data

MD5 8a15fc20cbdc6bbff42aeed3e96d7676 🔍
SHA1 5bccb3abbbb96670c31f48827280d1cac9361317 🔍
SHA256 66a1e79788c1f2f73fd5702e1a538380542b306c38f65a8fb106fe697fae873c 🔍
SHA3 f573ff5e93760daa30ffc531d52016ebb0ad718832e33398e1241a3818437095 🔍
VirtualSize 0xf8f0
VirtualAddress 0x3eb000
SizeOfRawData 0x5a00
PointerToRawData 0x3e9600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.62928

.pdata

MD5 eae699afeadc11833c6aa60bb2ba6446 🔍
SHA1 7749ebc7b46d72ac6a0da58b0ba9b388f7823d4a 🔍
SHA256 ac39a3d50b8ffe1ef6bdf13307bc30df28b8baff147e185ddae62dcc00840298 🔍
SHA3 f61c63d3b764b394de70fb9df04b771629e68c9bee29175f7141decf71fd52d6 🔍
VirtualSize 0x1b0cc
VirtualAddress 0x3fb000
SizeOfRawData 0x1b200
PointerToRawData 0x3ef000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.13937

.fptable

MD5 bf619eac0cdf3f68d496ea9344137e8b 🔍
SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5 🔍
SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560 🔍
SHA3 622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59 🔍
VirtualSize 0x100
VirtualAddress 0x417000
SizeOfRawData 0x200
PointerToRawData 0x40a200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0

.rsrc

MD5 24d8fcc6be81288f807eb1ea2c47c06c 🔍
SHA1 6214821f10a8aa73926473f3ae8901778ac058cc 🔍
SHA256 6c50e331e0be8150f571009ef1103206a77f5f877a12eb20d7958851432e90c1 🔍
SHA3 a8ec641c0d8449ad9e39be4c611186e4a11dd634563fd20506e430596404faf6 🔍
VirtualSize 0x217bd8
VirtualAddress 0x418000
SizeOfRawData 0x217c00
PointerToRawData 0x40a400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.45219

.reloc

MD5 d7a1e3edb40891c604d7b0a00afa5ae9 🔍
SHA1 64a82f0b3a9dd9a32cdafbeb7b56935e33a86817 🔍
SHA256 6e00085deaa0a399270c62da2dba2039473085b30650fbe97b49a9f7fa70faed 🔍
SHA3 e1c223c440a78ddf6104ab131216a50c8fb8ae7d80773fb46f4b466fb607c09b 🔍
VirtualSize 0x26a4
VirtualAddress 0x630000
SizeOfRawData 0x2800
PointerToRawData 0x622000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.40403

Imports

d3d11.dll D3D11CreateDeviceAndSwapChain
d3d12.dll D3D12SerializeRootSignature
#101
dxgi.dll CreateDXGIFactory1
WINMM.dll mciSendStringA
PlaySoundA
ole32.dll CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitializeEx
dbghelp.dll SymGetModuleBase64
StackWalk64
SymSetOptions
SymInitialize
SymFromAddr
SymFunctionTableAccess64
KERNEL32.dll GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
EnumSystemLocalesW
GetUserDefaultLCID
GetModuleFileNameA
OutputDebugStringA
GetCurrentProcess
VirtualQuery
GetModuleHandleW
K32GetModuleInformation
VirtualProtect
GetModuleFileNameW
WideCharToMultiByte
GetModuleHandleA
GlobalUnlock
GlobalLock
GetCurrentProcessId
IsBadReadPtr
CloseHandle
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WaitForSingleObject
CreateEventA
FlushInstructionCache
GetTickCount64
GetProcAddress
LoadLibraryW
IsDebuggerPresent
SetUnhandledExceptionFilter
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
GetCurrentThreadId
OpenThread
SuspendThread
ResumeThread
SetThreadStackGuarantee
GetThreadContext
GetModuleHandleExA
K32EnumProcessModules
K32GetModuleFileNameExA
CreateToolhelp32Snapshot
Thread32First
Thread32Next
CreateFileW
DeleteFileW
FlushFileBuffers
GetFileAttributesW
WriteFile
SetLastError
LoadResource
LockResource
SizeofResource
FindResourceW
MoveFileExW
GetUserDefaultUILanguage
CreateThread
ExitThread
DisableThreadLibraryCalls
FreeLibrary
GetCommandLineW
HeapFree
Sleep
HeapReAlloc
HeapAlloc
HeapDestroy
SetThreadContext
VirtualFree
VirtualAlloc
GetSystemInfo
MultiByteToWideChar
GlobalAlloc
GlobalFree
LoadLibraryA
VerSetConditionMask
QueryPerformanceCounter
QueryPerformanceFrequency
GetLocaleInfoA
GetSystemTimeAsFileTime
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetTimeZoneInformation
GetFileType
GetStdHandle
SetConsoleCtrlHandler
ExitProcess
ReadFile
GetModuleHandleExW
FreeLibraryAndExitThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
RtlUnwindEx
RaiseException
RtlPcToFileHeader
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
LCMapStringEx
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
DecodePointer
EncodePointer
SetStdHandle
HeapSize
WriteConsoleW
SetEndOfFile
HeapCreate
RtlUnwind
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
LocalFree
FormatMessageA
GetLocaleInfoEx
CreateDirectoryW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
SetFileInformationByHandle
GetTempPathW
AreFileApisANSI
CopyFileW
GetFileInformationByHandleEx
WaitForSingleObjectEx
GetExitCodeThread
GetNativeSystemInfo
SleepConditionVariableSRW
WakeConditionVariable
WakeAllConditionVariable
GetStringTypeW
RtlCaptureStackBackTrace
LoadLibraryExW
CreateThreadpoolWork
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
InitializeCriticalSectionEx
USER32.dll ClipCursor
ChangeWindowMessageFilterEx
OpenClipboard
CloseClipboard
GetClipboardData
GetKeyState
GetAsyncKeyState
UnregisterClassW
GetForegroundWindow
SetProcessDPIAware
MonitorFromWindow
LoadCursorA
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
GetClientRect
ReleaseDC
GetDC
IsWindowUnicode
ReleaseCapture
SetCapture
GetCapture
GetMessageExtraInfo
TrackMouseEvent
GetKeyboardLayout
EmptyClipboard
SetClipboardData
MessageBoxW
SetWindowLongPtrW
IsIconic
DestroyWindow
CreateWindowExW
RegisterClassExW
GetWindowThreadProcessId
CallWindowProcW
DefWindowProcW
PostMessageW
ShowCursor
GDI32.dll DeleteObject
GetDeviceCaps
CreateRectRgn
SHELL32.dll DragFinish
DragQueryFileW
DragAcceptFiles
ShellExecuteW
ShellExecuteA
VERSION.dll GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
IMM32.dll ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
ImmSetCandidateWindow
D3DCOMPILER_47.dll D3DCompile
dwmapi.dll DwmEnableBlurBehindWindow
DwmGetColorizationColor
DwmIsCompositionEnabled

Delayed Imports

201

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x27e2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.03905
MD5 2a86d2d613c61c69bd59db80a133263b 🔍
SHA1 54cddec3cf651b7b6ea70bff465ef306bebe4247 🔍
SHA256 f3c2485e165c96f79aa8adb5f753fb285c56eb854aef74bb01142a8b3e95a646 🔍
SHA3 88a0bf97ff5b5c84191061a5616c25c9dfb1992cef916e65a2ccc8d4dd4bd5f9 🔍

202

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x299b
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.06962
MD5 175d37470e769478f3ad9672dc1c4d07 🔍
SHA1 f1d23c1631c0a24424848486e48e3fd9b47e1372 🔍
SHA256 2ad0726b31540c76ea9ef37c13334387afe11a2ee0cd40d046c3c2ed5f87833a 🔍
SHA3 1a340c7bd38583864300b0a756265a114e95f42ebaddb5b21362e1efbcb45aef 🔍

203

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2a74
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.09139
MD5 aaf9eec2b51d2a14eac9a48abb1f6289 🔍
SHA1 b2bdc79c9c68df5561d3d8ddd11def3cf425efde 🔍
SHA256 e22acda42c728c44b542034d0c8a898cd495767774cec2be4dd22dc53f6d2b46 🔍
SHA3 f95c788047c31db83e4ea155c672b1c23d84287e1039a62e16e02f7dffcdacfb 🔍

204

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2a51
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.16729
MD5 abe7f76ac534df04784e346e24c59a8c 🔍
SHA1 04e699aeda298ffe29520c7220c091a26d2a66b2 🔍
SHA256 60a0470b6bd90339e872218141c0694c4a135572aa321f0dc44266f52894c9ec 🔍
SHA3 a8cbde9c281b9270edb7f80c05c603bac1bfaee850912bea6dc13de522044abc 🔍

301

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xa09c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.18799
Detected Filetype TrueType font file
MD5 eae9c18cee82a8a1a52e654911f8fe83 🔍
SHA1 49bdf6c2dc3ca0c772da5bc3d10ff5da23badee3 🔍
SHA256 b34cbb71d75b84eb4925f51e050249f65fb3e3550133aba0a4c161c6820aec82 🔍
SHA3 e2b70f700e641e0feea7b7ab8207e993d3892cadf887210b6cfb7cc3a7cc5b58 🔍

302

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xd8fc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.70719
Detected Filetype TrueType font file
MD5 dba0c688b8d5ee09a1e214aebd5d25e4 🔍
SHA1 e07e7ff0ec27cb309c74e5a8df2fb9ad16288f72 🔍
SHA256 8dbeee804c249634fd860cae932f54afe759de8c17c136995fcae57c24348cf9 🔍
SHA3 70a675dc8cf0e15a76b5b0dbf1ed2ac834d733a6bd082c56579ee938640f1b78 🔍

303

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2b08
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.12991
MD5 2c90030680a2fafd21f53fd39a0862e7 🔍
SHA1 1fcfab46713874334de3ab8e6cd8029154bc057f 🔍
SHA256 c5bcd562c9151e23deb35ce8fb069bf3f8d22e1b71f0e2b70e253ee3925c2174 🔍
SHA3 203ce71616cec616ee3c8b1a0acd33faa39cd2bf206736695f99ba9d6ebc70d5 🔍

304

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x1d358
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.21587
Detected Filetype TrueType font file
MD5 5d52a9d21d250f63c801571a99193679 🔍
SHA1 1dd3a8c5738b338c9d475ba0a8ddc035e3c9dced 🔍
SHA256 fb455469495f25313aac8a28be50d3226affe4f042e3f3597e5d67d862ac723c 🔍
SHA3 ea20ef7fbcdd03d353e9d62736b1310d91e20906fecc49719aef57ac8502bd0b 🔍

305

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x5e78
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.31687
Detected Filetype TrueType font file
MD5 aa99e03ee2bb3e42e8f663bf0b1a16b9 🔍
SHA1 f7257a78ec8b11860790ca1c0f0e1a316154660b 🔍
SHA256 b7c790d5417ab434a3a7429e213f7d67aebd03a778b0ce97bb6ccb28f58345e3 🔍
SHA3 c4d99427149fcb5ce847a344fa83114569e1331d63c093c5d5aeaee565d1223e 🔍

306

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x4ba44
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.25414
Detected Filetype TrueType font file
MD5 079af0e2936ccb99b391ddc0bbb73dcb 🔍
SHA1 7237d9cf55f177702066a28a4dde1e4c7e8ab576 🔍
SHA256 41ab0f707a2bfab8133ccdfcdab52282f5f79e5751f43a264805451c7bb95fb8 🔍
SHA3 4f3abf69ecc7d8cc792a4eb8d6cd34298f66deb4d4ef00b16989d6abcf9e086b 🔍

307

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x1ddc4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.20959
Detected Filetype TrueType font file
MD5 41970c05dc422ffd50354483a6ec425a 🔍
SHA1 f53002f220f2f9b48843593f31cb9523de47e9b2 🔍
SHA256 ca4e3c69c6e06b8d1889ab65c043670f0b869fa0c8f51da3741ce9c159cdae37 🔍
SHA3 ccb574f470d17891e1769f9a8b0799ef1e54d159c3106562f474816b834f0d9b 🔍

308

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x51e98
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.52929
MD5 51fd7406327f2b1dbc8e708e6a9da9a5 🔍
SHA1 a5f5e08dd38cac2f857fb7510f7e92a2399b6f5c 🔍
SHA256 cbfd17919856efcedabdd73781dad2984326928ae7c9635bef6227b1a7d71d21 🔍
SHA3 da8e86eba7fff78a1265e7bbe129abb003b2dfd8d53b10f23d0b7505208336a9 🔍

401

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2bd10
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.33734
Detected Filetype WAV Resource Interchange File Format
Detected Filetype (#2) Windows animated cursor
MD5 0e42f8ed42c92fac2bfceb23fb6a4e66 🔍
SHA1 bba356021f8809644e8992354497f23732769fc7 🔍
SHA256 18419263a15d1efa0ae4a37924443091e7c383f468e9e9a0f2dbe936ad49e250 🔍
SHA3 733180ac9bcb6b6a2120c0c45e184f70d22a3a896d6f4c6bd0267676e80d353a 🔍

402

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2bd0c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.33054
Detected Filetype WAV Resource Interchange File Format
Detected Filetype (#2) Windows animated cursor
MD5 d56f4f9c4fa9aa239e4933894b7c0179 🔍
SHA1 704de71b66bdd845957c99018868516a01c1f169 🔍
SHA256 e1d526649fc762cb5f70616edb69b10ccd49037dbfcf09edd9269746e1755dfe 🔍
SHA3 f4c5ca608aca4d92f5d64f448f1cbb12efd6d27eff3c0dc82aabcef516818652 🔍

403

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x52676
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.51015
Detected Filetype WAV Resource Interchange File Format
Detected Filetype (#2) Windows animated cursor
MD5 f96fb73c777daa2db8560767a4fcb9cc 🔍
SHA1 78999e9ae0c9611b2a80fdf192b469d9ed21720d 🔍
SHA256 9c162a5497d6a35e5cbd12c36098ea5eba124466b2a4ed0ba996ba72128e7d04 🔍
SHA3 4b46e692d3bc3235bea38751f3567402eb99682d40821cb33191a76bfa3de45c 🔍

404

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x45776
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.57524
Detected Filetype WAV Resource Interchange File Format
Detected Filetype (#2) Windows animated cursor
MD5 84e1b2115e0ad03d44ec9b7785801d62 🔍
SHA1 9767a9520f2bc15d012a543445d7b98e39d99dec 🔍
SHA256 25fc8bb01d2e7365c849c9c2a4efb0f51af3da83b832ea3f15769a47edd409b7 🔍
SHA3 7caa0a28d753e869b51b1a981526d300b7343f2d62a6656644fd82d88d2d5519 🔍

405

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x10539
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.95599
MD5 43bd4ea9bf33c74e26a39b679be8fa50 🔍
SHA1 fe6ab1b925e90d1a8c5fef2efada22fba688907b 🔍
SHA256 3acbe6def3ccba939833097f46dca53027f609a50d9906b5fad56faabdfa874f 🔍
SHA3 df05f547e3c53d3cbc6ee9c66d6f90c3156f6ca0e2282e50eedda2d124f492fe 🔍

501

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x268
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.30514
Detected Filetype PNG graphic file
MD5 2c39b8d8d8b16766bccc79162bbe5c1c 🔍
SHA1 0caa52f3db655d492122db31774dfd5fe568f549 🔍
SHA256 a1e04e2d5ffcfe59ce9098a4d46f18bbc4ec67e58c7e32b274300ffd0020425d 🔍
SHA3 d851e8782b35df5af16028dcf5dced0267eb7269e0f45b7379ed6bc6ec058fdb 🔍

502

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xaf
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.91805
Detected Filetype PNG graphic file
MD5 0d426375f5843e6798a772ed012b5b7d 🔍
SHA1 80fd2137a2d1d9bad91697438ae9bf8472683412 🔍
SHA256 28b7a2425072e300760ef31b45dbb20c612389c73f2f885dce2e31fd1b26aa37 🔍
SHA3 66fb1d068ee850d6760ee75d0475f5cb448c8b95f1804da10d9f9d27ded452af 🔍

503

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xca
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.32531
Detected Filetype PNG graphic file
MD5 66a65e7c4d7f01ca8629ba08a9bc2fdb 🔍
SHA1 e19c8f083217f3d66fd71075584418e5c63e208f 🔍
SHA256 1bc707eba558cd7ab58f21fd2d5f544f8d5db84f88a0d5a253f8ea3bd1f1a7f4 🔍
SHA3 b2f0b4b677b5d9489453ba1e3b8ea4baf8fdf88692b81459f318204297d12544 🔍

504

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xa5
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.82466
Detected Filetype PNG graphic file
MD5 99f84eeed63e4dc20636db3b369b8591 🔍
SHA1 6c4b722c9b3d2351be87c1669823b5be68db92f6 🔍
SHA256 49273d96cac8596863d4569e242668426a166aae85338c1c1686c1291daaf3ec 🔍
SHA3 318850df0179a5ec6c787d612133c094eacec7d6e0b5ea51837e51fcb9cabc0c 🔍

505

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xb1
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.94047
Detected Filetype PNG graphic file
MD5 e501f04f2dfa3dc40c11ba9038214b20 🔍
SHA1 46cd460086d538d51de5e9d171335ec8545d3eae 🔍
SHA256 c6af9c807088f61fb58b1f279e87e490d8ddb6bf15928c5074bada1fc7b70499 🔍
SHA3 2dd9d0eaad495d37745d3d5ce9d94c1a0c3faa48d90eebeaae37dee3d1d837df 🔍

506

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xc4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.29787
Detected Filetype PNG graphic file
MD5 936cd25a97e7c1014f11b256b23278e7 🔍
SHA1 9f19b44036e5bdfe63a3bf1d7e0ac7ab0284b37f 🔍
SHA256 f54f4bca4eeac183b39216665a1305c499160c76ab270bc2c40891e8be79c21e 🔍
SHA3 d626ce89f399d393a4de20e138699158cf226c31b40438e7c39692853968cc3f 🔍

507

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xe4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.64469
Detected Filetype PNG graphic file
MD5 43e75b428765af01c568f3592351222f 🔍
SHA1 f21e63366ba93966d7dc40b5cfbd36f9d086b499 🔍
SHA256 b82f965ee935fc1fa6e7a6f78b5b33aee494ff48a715b087cb1244e8f4e8c494 🔍
SHA3 e9f8b2f61e772a8e32a0c00a893cb9906e931395328da1c2a800d8d1ca7478cf 🔍

508

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xba
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.20351
Detected Filetype PNG graphic file
MD5 d45c5ad2629f31871aa65de8051a3564 🔍
SHA1 c83f69e3aa67086a1b215cae432042b2a0708a6a 🔍
SHA256 535a4886173111f40ed73a56f00ddde8e52be718f8395fca710338e3072f157c 🔍
SHA3 507c1da03725da799004f55fc24e38809fb8af90587ec08fdc81b4b39a7ceb2d 🔍

509

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xc9
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.17459
Detected Filetype PNG graphic file
MD5 7562c4334ab536a239b1271b7a29f465 🔍
SHA1 22d180d0944bd5fa183530762c416017b6503cf3 🔍
SHA256 6fc2f45889e2275a5352aa3469ac4e7269d95a1d615af52396abf497e905ed86 🔍
SHA3 b04bac44689577b40cbad58216591df68770cc76b44943c7c01f85f1f75675fb 🔍

510

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xc9
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.11743
Detected Filetype PNG graphic file
MD5 3f7dc0de0963751b96ed844b333f40e0 🔍
SHA1 653135b1f18cdc83d7cb01e8e4cf33324ace59dd 🔍
SHA256 664f904ca9a0f876d16d6f9135b4a920144a8cf61c55e5d3e57f1ee232f391c8 🔍
SHA3 54d043c52d97941d1ab44270c8fc56df895c21d4be033a99c456792e84710617 🔍

511

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xe7
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.5606
Detected Filetype PNG graphic file
MD5 42f8e8b28d3bec323327dc603e893ade 🔍
SHA1 6b45d4ffff5e538f7494534861dfd95557c9fc5b 🔍
SHA256 d4ffc3b093c037a789ce96d72fd95ce6d602f77e1fe3513a54e6b065e4488f2b 🔍
SHA3 5dc960ae2942bcee2246b1ad4cb676d9ee3eb95063a5b6f455509ab2a5be128e 🔍

512

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xb5
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.08006
Detected Filetype PNG graphic file
MD5 cf1ba0f9bccffa2f23d10de5c017154d 🔍
SHA1 3cf9b35f54d2c79c4cbc83512b72367eeb431990 🔍
SHA256 e7aa073d57c0fc1614fc09bfdda186035f49e337ebd805e0a470ee0ef263a85a 🔍
SHA3 f6af1dbda2f46dcbfec0fb42d37c04021d17bec3893040ab8ebb5c0de57fbac6 🔍

513

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xc7
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.27042
Detected Filetype PNG graphic file
MD5 24179469c8297ee1d245ec2bce924917 🔍
SHA1 064ff0866c1a09e38402934a28f92fb3beb66905 🔍
SHA256 8a4503f81167923fcd9bfb814a5e464553184720ccd25cdde2bbd66658486ba3 🔍
SHA3 6577a0d38d8cecbc970cf22a615c678ba148ddb8d52c9be3ed8ae87796139e58 🔍

514

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xc6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.15822
Detected Filetype PNG graphic file
MD5 4c9a897669be49c7cbe637acd740adb3 🔍
SHA1 6b681765d216c81b4a142817e987d4a006425ae0 🔍
SHA256 da439cc05cfdf0fab989e47a4ec131d1d51521565ab53c34c9d27f6d2ae2ffef 🔍
SHA3 145119f02f9394ee0097ee5a555554254c92d1acf1fff8fd90408486a42eaa07 🔍

515

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xf1
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.35735
Detected Filetype PNG graphic file
MD5 29899d0a65c4f52a2477ddd30098805c 🔍
SHA1 34f58bc63fa8a6d0bef8c5407c34733e5bc1e417 🔍
SHA256 5a97f2596af268bfbc7b5bbb1d7585a6a842ecf9fd18f3f60e0e78d4801a027d 🔍
SHA3 b4264120dcaeb1e238f366ba2ddf73c00dc2588824a3b5f33031a6670bc82336 🔍

516

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xbb
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.00958
Detected Filetype PNG graphic file
MD5 303b63072a5e53e0a37b254de8e9839c 🔍
SHA1 e96d2600ee6d6e14a38b8df7f37ece6a34902f5d 🔍
SHA256 5aef902756dc2fa0d4e02a1a114f39aceb0aed2d7fafd7f24ac25fc1f8127beb 🔍
SHA3 3f093b83d9d74fb1528b463eb5e1ca64a41ec071ec72775a3e4b2f3d3a8af32c 🔍

517

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xcb
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.07778
Detected Filetype PNG graphic file
MD5 3750942ad877ddd825be8b9ea9a46605 🔍
SHA1 db989263c7d7e5379886bc587b1a7925cb137a00 🔍
SHA256 6794973e15662ffe0555bedbc9cb9a916e979c0608b94abbfbfa0a04ba72810a 🔍
SHA3 03cdf6fde44512b4f651c0188b2e228970d1979d0e79b66326bc6a4cb2ec53c0 🔍

518

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xec
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.53347
Detected Filetype PNG graphic file
MD5 d08986ccff6c1a5b7494427b8e317085 🔍
SHA1 b0382b1fd2a212d990d1c30bdc5df946d10dd909 🔍
SHA256 97d69e6605911c447cfbe2f06189f18d34ecc92d79c808bf3910ef027ba478f1 🔍
SHA3 d9a44068833388219812fd14184396c64a3b4f167620910d371e6203d65a2ccd 🔍

519

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x24c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.31105
Detected Filetype PNG graphic file
MD5 47a72dd3c785220b2f5961de27c692b1 🔍
SHA1 3e42bf277bcfced43d0420ec7410ca37ea4dcf78 🔍
SHA256 003ef7b14e232df904e6b9cc556cfc008e7bc61f6c985274d796999f4ee334b0 🔍
SHA3 1c8fcda3b63ea52775c348f19cbe0d767cd81cdcdf1c67c9db1a6bcfc3c02bc9 🔍

520

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x238
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.15294
Detected Filetype PNG graphic file
MD5 d768b543e928943023617c613d85d606 🔍
SHA1 8de84c87073bd80f18ea54329348e57498b5280a 🔍
SHA256 cd969b053e7ae03a81d517d7efab9649d612c658d3328255245aca5af24c8b93 🔍
SHA3 ad4d86be8d9b603cf22d4e91bc77a7bcb2d2a3880e06e04990d9fd6e2ee04d42 🔍

521

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x241
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.20085
Detected Filetype PNG graphic file
MD5 078feeb10c6dd591a9a8c5cd584e0b06 🔍
SHA1 34f7843f6e12b0e747bf1e61308a72af99907ba5 🔍
SHA256 53dbdc3d732aa068b215b14280436f676728b4e30ba000bcb1514abac7b4173a 🔍
SHA3 6cf4f68a3579f074afe7bb9280c01d6d6a7f8994354f6d8954a17d3bd7a97f8d 🔍

522

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x1f2
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.55738
Detected Filetype PNG graphic file
MD5 b2ef2fa126dc93f6ad4ebc9aef1e0fb8 🔍
SHA1 8b73a4990acaa619a0352579fe406cf8860f2e45 🔍
SHA256 9dfca401035affa7d1c66ac42fe880c1f8c8a7869129cf5ddf3a8998b238bcd8 🔍
SHA3 af9dfa2be5fa869dd4516ddca4ae4eaa5bc8cf5672ce555363b57af3e0ec2bcd 🔍

523

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x200
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.63292
Detected Filetype PNG graphic file
MD5 f36c1f2162b2b81a20ac125d0ba081b5 🔍
SHA1 9d3653ee8148204459ef4283a8cf34fd5bfd4522 🔍
SHA256 78f7cb9743f3f9de041b78a3bcf2fb4d423a80a669609024468be0b01607c79a 🔍
SHA3 6438bd04764c50d8add128c7e0ed6281f5c4e6b8647bc9eb04402d8dbe6d088f 🔍

524

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x1eb
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.55356
Detected Filetype PNG graphic file
MD5 3fe9dbc19d73c44988dbaeda1715b833 🔍
SHA1 3c34d20a9ad2787146c9175bb8ea85888bf8ab87 🔍
SHA256 f7a9f4ddd5380d58d29708eea8a28364e39e626df0973c27bd5cd2ef81ed09ba 🔍
SHA3 d08166c1d59db4e6e86a290c66597af4a4cc2e6d466c347a566dc187aeeae75d 🔍

525

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x1ed
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.45359
Detected Filetype PNG graphic file
MD5 b66579ae38d5824daf642a130db8f804 🔍
SHA1 e30fdbf085928654860e418660a44e18a2c88ea7 🔍
SHA256 68f876f0c59e7ff902d83bc4a307f190efbb0a3dbea1bcd1b4a338fedbfeffcd 🔍
SHA3 7a09674ea4aab220e40e6e9823268e32e20d7f2361380d2f9fe905ec651665ac 🔍

526

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x1042
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.82169
Detected Filetype PNG graphic file
MD5 206b02c065c70de05a2561a64f6d9abd 🔍
SHA1 79d2100198b6faff2a40ed9e3da151cd9f237ad2 🔍
SHA256 4097134b0119e2437ddfb29b63777714743313cb9f8e96cb9b496f19516bc9eb 🔍
SHA3 8085f83c7fcdfd0a977b6a3b1aeeacc37fbccb1c14a18c1572c9c63a3c05a1af 🔍

527

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x101d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.60717
Detected Filetype PNG graphic file
MD5 990419934145ac1e84217a6d12fffd25 🔍
SHA1 b36749a68878ba177407c5183e8543300b9f62e6 🔍
SHA256 df48da2ea42bd63497b2f18fc759136d7253b5f63022bfac606ef9c7f218ff07 🔍
SHA3 ccf15e374b1f31e9c142cf7aaa9229826805b99ec360710938489b5f0156e474 🔍

528

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x9f8f
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.96867
Detected Filetype PNG graphic file
MD5 d065968a221be7c332ebe587444a535e 🔍
SHA1 a2bc3c234c0feba1bfa8ae5e95d70d92b0a4f75f 🔍
SHA256 3c5bac41bdd3defce019834eb0576a9f04e0e143d6ff0df0ca3c416118adc94e 🔍
SHA3 dfbd6106dad1ddc552d95ab99a29d1285a138b27d8d9be227899ffe402f6a664 🔍

529

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xd62
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.34662
Detected Filetype PNG graphic file
MD5 119d888ef7b29d9b9778bd40134231d8 🔍
SHA1 bc7f4dab2a08ff517beb6d55e83bd71568704add 🔍
SHA256 97991263aae333cb76a82dd7c55957efe5f1d98437a215731df98874e902eed6 🔍
SHA3 094b3325c0bdc213f517b777eeeb2a809ff1de72294bc4aac4a34919cf042b4a 🔍

530

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xe04
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.68714
Detected Filetype PNG graphic file
MD5 92f768d40677471da25dfe69e2e1a4fc 🔍
SHA1 9d59a404f1bdec6ab3ddca2387e3052268553aba 🔍
SHA256 70713cfdcddf172c441f724cd489cb0568d7179081b4a5c01cd91791f59fcf6b 🔍
SHA3 44aa17639493eb34eb5a186cd0314a9bcbc0e3324c5527249dffee2040ea329e 🔍

531

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2883
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.86582
Detected Filetype PNG graphic file
MD5 98957bcdea7a64427fc473f76701f8de 🔍
SHA1 a0a6b97004a7686d6111fdea1cd16203d584ad75 🔍
SHA256 48a83372b59d8a965b450518372aa9f789870a9e38c4954cbce81883efbc5a25 🔍
SHA3 b99966574d9aa0b39138c813d69012435cb0dc47a57d048f9d9808f77b5c7513 🔍

532

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x9ad
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.26
Detected Filetype PNG graphic file
MD5 35973b0e3ac7f91fe59c51d029e61b00 🔍
SHA1 45a72a11645d31a34f4afe809691266e7b438223 🔍
SHA256 058c697feec3e159b95943e7cbe769cc1abad1a7335c466b3e161d2ea87711ba 🔍
SHA3 cf3306b4e3c034fd32d2f699108efb88f5add5b7c13f19b1ff5cd3d898aceb55 🔍

533

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x1372
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.76455
Detected Filetype PNG graphic file
MD5 2397f0efdf4d102bdab7077f1cc3d204 🔍
SHA1 34362fe1f131a16aa400c60b23f9affa254b923d 🔍
SHA256 33579865113009da5a68b289e1d6a66e68f9828d0108f3168fd42ccdb3c3db2f 🔍
SHA3 1abfbc095a24be80f003e33ebabd1e7b63e7ecf53b712274602cd5b610b62394 🔍

2

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x17d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.91161
MD5 1e4a89b11eae0fcf8bb5fdd5ec3b6f61 🔍
SHA1 4260284ce14278c397aaf6f389c1609b0ab0ce51 🔍
SHA256 4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df 🔍
SHA3 4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353 🔍

Version Info

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Sep-26 23:53:58
Version 0.0
SizeofData 1072
AddressOfRawData 0x3cff68
PointerToRawData 0x3ced68

TLS Callbacks

StartAddressOfRawData 0x1803d03f0
EndAddressOfRawData 0x1803d0580
AddressOfIndex 0x1803f9788
AddressOfCallbacks 0x1803659f8
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_16BYTES
Callbacks 0x000000018031F44C
0x000000018031F6FC

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x1803ec9c0

RICH Header

XOR Key 0x5c7a17b
Unmarked objects 0
ASM objects (33145) 25
ASM objects (35207) 10
C objects (35207) 15
C++ objects (35207) 100
C objects (33145) 39
C++ objects (33145) 188
Imports (33145) 29
Total imports 277
C objects (LTCG) (35228) 4
C++ objects (35228) 59
Resource objects (35228) 1
151 1
Linker (35228) 1

Errors

Leave a comment

No comments yet.