93e6a1a4f69cddb1917b3866e660f7202a898a386f4044bd88c6c65f82ac0ee0

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Sep-26 18:11:52
Detected languages English - United States

Plugin Output

Info Matching compiler(s): MASM/TASM - sig1(h)
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 14fd142f4ca12450f311f404f10696f7 🔍
SHA1 7837fff2a834c63d8fc731a68a13300d24dd9a94 🔍
SHA256 93e6a1a4f69cddb1917b3866e660f7202a898a386f4044bd88c6c65f82ac0ee0 🔍
SHA3 0b1bd34ed71a1caa9e75dc3f50526637c28a402aafe3407b002e7af611fff686 🔍
SSDeep 384:6vsbQE4tMrZ0EoIoTddpXlcuhxk4hsjY2E+mrb3:6vsbQE6sZBoT3PBxk4SjOrb3 🔍
Imports Hash fc27ce4a789db40032d9b9b8bb30b46b 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0xf8

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2026-Sep-26 18:11:52
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x1800
SizeOfInitializedData 0x4800
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00000000000018A0 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xb000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 99727519c9d7c2badf1d80bf9b6f3d71 🔍
SHA1 79bf6d95c7c9a93ab67a828077506a2eaf9b1017 🔍
SHA256 88f738ad34f864d73d8dd3d76d30ffac4b46739a0c7717ad14d50db0fb43d3cf 🔍
SHA3 196a4abb0c057dcfaed1c99e0e9463908c5b0a523528aeabe8ef7fde1a5dd929 🔍
VirtualSize 0x16d8
VirtualAddress 0x1000
SizeOfRawData 0x1800
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.71025

.rdata

MD5 575bb613efb16aacb140f776a5f5c7fb 🔍
SHA1 e8bc41d6470146c549b2ee6723a71609a6c1a09d 🔍
SHA256 d82eaee405f9de8c92828add50db6698b12aa95d4d76fba1e7a3f849b1de06c8 🔍
SHA3 0f2af7f44450db9581fac60a46456e52a0912bd7b4569b6c006a7014325d7a0d 🔍
VirtualSize 0x1d54
VirtualAddress 0x3000
SizeOfRawData 0x1e00
PointerToRawData 0x1c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.22419

.data

MD5 fbbb60570ee55a89705e45ec144bbaf2 🔍
SHA1 75b7eb88abc2a22a3564e2fc5ee0cba270ef7487 🔍
SHA256 0a9a6c395d614150070676494152b7b6c8d51b24c1e555ea58ba80cdf52f4b14 🔍
SHA3 725f0ac9a62deb89a115b4bedffd3b42590efed5ed98b9dd518ae4d8b58c0d5d 🔍
VirtualSize 0x21b8
VirtualAddress 0x5000
SizeOfRawData 0x200
PointerToRawData 0x3a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.06652

.pdata

MD5 35ac1ad06566245b9fd656bd4fac32a3 🔍
SHA1 b670a5dec7927e0f2bfab2c6bba6d7a3be4032d9 🔍
SHA256 8ac454868f124d2a95333bc0a5754121fcc91870055ee41fa5d1b5458314ad9c 🔍
SHA3 be6edd88382af2007cf63e6302516036505d95acfee60789243f4b6477915c3e 🔍
VirtualSize 0x1e0
VirtualAddress 0x8000
SizeOfRawData 0x200
PointerToRawData 0x3c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.53484

.rsrc

MD5 826c2ae4261263e2c5b4767d9730ebc7 🔍
SHA1 5258c62761d6c53568ae0d13767cbb1b9878a55e 🔍
SHA256 9631b4a00552b2587e88aa4a7505d2a66f8dca2f12ff61cb13c7e21a94e64578 🔍
SHA3 75c074921f657a78455c6f96fa6cfe7e17a6b124d88e19c43aab9eed39f1292f 🔍
VirtualSize 0x2b0
VirtualAddress 0x9000
SizeOfRawData 0x400
PointerToRawData 0x3e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.01482

.reloc

MD5 c2c8e85e275adac13aa1ceccabdc9462 🔍
SHA1 64f1f6c20129bc2e3c3e1ea406363c5041e09cdf 🔍
SHA256 a0e0e091031692d423354adc23e3ef238d26e62a852e053e1a1b046a85989c0a 🔍
SHA3 f584aafe5c5ecf26cf0e3de54a7d1bbe365946dee653cc5d7bffd8a1fdf61387 🔍
VirtualSize 0x54
VirtualAddress 0xa000
SizeOfRawData 0x200
PointerToRawData 0x4200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 1.16495

Imports

KERNEL32.dll GetModuleHandleW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
USER32.dll DispatchMessageA
GetMessageA
DefWindowProcW
PostQuitMessage
CreateWindowExW
TranslateMessage
RegisterClassW
ShowWindow
SetWindowLongPtrW
GetWindowLongPtrW
VCRUNTIME140.dll _CxxThrowException
__std_exception_destroy
__std_exception_copy
__current_exception
__current_exception_context
__C_specific_handler
memcpy
api-ms-win-crt-stdio-l1-1-0.dll _set_fmode
__p__commode
api-ms-win-crt-heap-l1-1-0.dll malloc
_set_new_mode
_callnewh
free
api-ms-win-crt-runtime-l1-1-0.dll _exit
exit
_register_thread_local_exe_atexit_callback
_c_exit
_initterm
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_get_wide_winmain_command_line
_initialize_wide_environment
_seh_filter_exe
_cexit
_configure_wide_argv
_set_app_type
_initterm_e
api-ms-win-crt-math-l1-1-0.dll __setusermatherr
api-ms-win-crt-locale-l1-1-0.dll _configthreadlocale

Delayed Imports

1

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x249
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.06044
MD5 f7e7c81035fc42015d50fadd75b9300f 🔍
SHA1 df759518191bad6608c336186b31c120b3dadb34 🔍
SHA256 72ae19a66b5d012088d762d3e2de6498a9b3b8fc153352ca6c76cf045d1fe96e 🔍
SHA3 1038ef4fa889f000231ecd6b7f2eb0759548ed2a8e5da6ca3e19b38062e60dbd 🔍

Version Info

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Sep-26 18:11:52
Version 0.0
SizeofData 720
AddressOfRawData 0x4148
PointerToRawData 0x2d48

IMAGE_DEBUG_TYPE_ILTCG

Characteristics 0
TimeDateStamp 2026-Sep-26 18:11:52
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x140005000

RICH Header

XOR Key 0xa3c88f16
Unmarked objects 0
Imports (VS2008 SP1 build 30729) 10
Imports (35721) 2
ASM objects (35721) 3
C objects (35721) 10
C++ objects (35721) 24
Imports (33145) 5
Total imports 57
C++ objects (LTCG) (36260) 1
Resource objects (36260) 1
Linker (36260) 1

Errors

Leave a comment

No comments yet.