9b1738a6cea02b38c25047ee33b7361f62dfe410a129d55ffb6105af6b55a8f6
Summary
| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2026-Oct-18 19:55:35 |
| Detected languages |
English - United States
|
Plugin Output
| Info | Interesting strings found in the binary: |
Contains domain names:
|
| Suspicious | The PE is possibly packed. | Unusual section name found: .retplne |
| Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
| Safe | VirusTotal score: 0/68 (Scanned on 2026-10-19 03:02:01) | All the AVs think this file is safe. |
Hashes
| MD5 | 3114b8c5b1244ce9f7a36a624afdaa3b 🔍 |
|---|---|
| SHA1 | 377d3a075e2cff41ad3c0b14eb7ca365ba359425 🔍 |
| SHA256 | 9b1738a6cea02b38c25047ee33b7361f62dfe410a129d55ffb6105af6b55a8f6 🔍 |
| SHA3 | cc74f7ef081576b115f782960d2f9c4971c25a43ea320687e5b8a1302b8685ea 🔍 |
| SSDeep | 49152:gt1HUueLv7qkgrD/rzK/dfdFu9tuJFwsbh3wKyMIm7U2XdtIAzpks0d0Z7zgzNg:g8YDM1Fis/dwKwZAZ0IKsO0 🔍 |
| Imports Hash | 901cc78cd2474e154847b7cca2c65756 🔍 |
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x78 |
| e_cp | 0x1 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0 |
| e_ss | 0 |
| e_sp | 0 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x78 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections | 8 |
| TimeDateStamp | 2026-Oct-18 19:55:35 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xf0 |
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
Image Optional Header
| Magic | PE32+ |
|---|---|
| LinkerVersion | 14.0 |
| SizeOfCode | 0x298c00 |
| SizeOfInitializedData | 0xbb400 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x00000000002992C4 (Section: .text) |
| BaseOfCode | 0x1000 |
| ImageBase | 0x140000000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x362000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
| MD5 | c12b0d6e2db6724ee987ac099eef2dbb 🔍 |
|---|---|
| SHA1 | 57a85558a62b60dcae1b30e9a2ee6b3e1315d68d 🔍 |
| SHA256 | beb4575f76ec887a5cce12b7d0fba76e9bb97bcdeb3a0f5947d6a4c7b7a305f2 🔍 |
| SHA3 | 237d03c2404cfe0e7e09740962eaa1e487a8ee33180b7e449ccf8bbfd371eee6 🔍 |
| VirtualSize | 0x298ba6 |
| VirtualAddress | 0x1000 |
| SizeOfRawData | 0x298c00 |
| PointerToRawData | 0x400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy | 6.52276 |
.rdata
| MD5 | 10a4e7b5710de6d8d55d3ae4a6c94bbd 🔍 |
|---|---|
| SHA1 | 42acd883b73bbd3c7492fe3aa4406cb263ebd34b 🔍 |
| SHA256 | 16d18fa3d66bb81c29a9d48837f2794d8ea1f67689a7183c3a363cd95162b658 🔍 |
| SHA3 | 48ae495ae501a65a3db7da9a7c8b5ce2679b84ae72f197f91e16e7fff509e9dd 🔍 |
| VirtualSize | 0x952bc |
| VirtualAddress | 0x29a000 |
| SizeOfRawData | 0x95400 |
| PointerToRawData | 0x299000 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 6.21241 |
.data
| MD5 | 84395488bff6d10b04b39311c86b5ec5 🔍 |
|---|---|
| SHA1 | cfb8882d125b669b02c59d8dbb16f659678ac122 🔍 |
| SHA256 | e930c1b0fc785213f4c8eae3ea15276ab486cf3f8b2896ab84c9c0280f3f4457 🔍 |
| SHA3 | 2747c9542677ea16b6220d6e652dbf47b9ae2750cc5af9e6014cb469d2070e6a 🔍 |
| VirtualSize | 0x131f8 |
| VirtualAddress | 0x330000 |
| SizeOfRawData | 0xae00 |
| PointerToRawData | 0x32e400 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 3.58155 |
.pdata
| MD5 | a034e0bb88091d26ab5b40ac6b8977dd 🔍 |
|---|---|
| SHA1 | 5d8a652772b9b84778e3cbd9b53f1c322ee3373c 🔍 |
| SHA256 | 22b894e09bcf1cc1353f11969645757f71bc6a37c55f8a478b87697274e4c733 🔍 |
| SHA3 | 9dac7f26f74a53cb62b8139076bdb1b32a34f65ea07992a778b5f56d8f55f7d9 🔍 |
| VirtualSize | 0x1398c |
| VirtualAddress | 0x344000 |
| SizeOfRawData | 0x13a00 |
| PointerToRawData | 0x339200 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 6.16489 |
.retplne
| MD5 | 60e7349e46063b144cf642326da037fd 🔍 |
|---|---|
| SHA1 | b460edcbab5b1a810f5a49e37211c8b64d64a2d4 🔍 |
| SHA256 | 3a6f947c12cb31b02dd9ef5695f1256f6ad2e1d55bd485b4c18fd240c9845e57 🔍 |
| SHA3 | 9097209013f8570830645631ef1b1a0f8b9e84bed08525b21f9737f86435b8e3 🔍 |
| VirtualSize | 0x24 |
| VirtualAddress | 0x358000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x34cc00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics | (EMPTY) |
| Entropy | 0.556127 |
.tls
| MD5 | d18614894cc9dda36b18929d7f66bf77 🔍 |
|---|---|
| SHA1 | 21592be7b71d8213a9c45353c3ee7998b1091d99 🔍 |
| SHA256 | 56367120c08380b27d3c4faf6d9ef5df2fe0cf7235f2c022235d1b23f45c6ed4 🔍 |
| SHA3 | d48ab780d53fd55f56993ca0e63eab14fbc696e241d2dfd0d8d6bf3b4d2a4a6c 🔍 |
| VirtualSize | 0x2d |
| VirtualAddress | 0x359000 |
| SizeOfRawData | 0x200 |
| PointerToRawData | 0x34ce00 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy | 0.0203931 |
.rsrc
| MD5 | 6ee36e75c534a5341d7914d02acf2a11 🔍 |
|---|---|
| SHA1 | 82c8cd25698516fbf0463f2dcecaa3403544526c 🔍 |
| SHA256 | 746797efaf5ff0b471835475243d4a4f742cd14da75b51864d4bf1dc54e3310a 🔍 |
| SHA3 | 65291ca62cd2b2ea2d404a915460583c4dd2dffe4f4ebd98b5d4e012e2bcd2a5 🔍 |
| VirtualSize | 0x3ec0 |
| VirtualAddress | 0x35a000 |
| SizeOfRawData | 0x4000 |
| PointerToRawData | 0x34d000 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy | 6.53524 |
.reloc
| MD5 | 7aa92670eeb74afbf241deeeea84cff0 🔍 |
|---|---|
| SHA1 | 72b5e40c9f8bdfbe4285c0712dd1487c6172984b 🔍 |
| SHA256 | 4020e14cd19b8b06e4e69fb87ad15a3ac3e97f1c4f75a1a54c6c6e20ff0caed8 🔍 |
| SHA3 | 8cc032b762312feedb0f184186e4cd784ad9982acaabd6740f37f8c5fb8a7d11 🔍 |
| VirtualSize | 0x3404 |
| VirtualAddress | 0x35e000 |
| SizeOfRawData | 0x3600 |
| PointerToRawData | 0x351000 |
| PointerToRelocations | 0 |
| PointerToLineNumbers | 0 |
| NumberOfLineNumbers | 0 |
| NumberOfRelocations | 0 |
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy | 5.4147 |
Imports
| d3d11.dll |
D3D11CreateDeviceAndSwapChain
|
|---|---|
| d3d12.dll |
#101
|
| dxgi.dll |
CreateDXGIFactory1
|
| SHELL32.dll |
CommandLineToArgvW
DragAcceptFiles DragFinish DragQueryFileW SHBrowseForFolderW SHGetFolderPathW SHGetPathFromIDListW ShellExecuteW |
| KERNEL32.dll |
AcquireSRWLockExclusive
AddVectoredExceptionHandler AreFileApisANSI AttachConsole CancelIo CloseHandle CompareStringA CopyFileExW CopyFileW CreateDirectoryW CreateEventW CreateFileA CreateFileW CreatePipe CreateProcessW CreateSemaphoreW CreateThread DeleteCriticalSection DeleteFileW DeviceIoControl DuplicateHandle EnterCriticalSection EnumResourceNamesW ExitProcess FileTimeToSystemTime FindClose FindFirstFileExW FindFirstFileW FindNextFileW FlushFileBuffers FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary GenerateConsoleCtrlEvent GetCommandLineW GetConsoleMode GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetEnvironmentStringsW GetEnvironmentVariableA GetExitCodeProcess GetFileAttributesExW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSizeEx GetFileTime GetFileType GetFinalPathNameByHandleW GetLastError GetLocaleInfoA GetLocaleInfoEx GetLocaleInfoW GetLogicalDrives GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOverlappedResult GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetSystemInfo GetSystemTimeAsFileTime GetTickCount GlobalAlloc GlobalFree GlobalLock GlobalMemoryStatusEx GlobalSize GlobalUnlock HeapAlloc HeapFree InitializeCriticalSectionAndSpinCount InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsWow64Process LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LocalFree MoveFileExW MulDiv MultiByteToWideChar OutputDebugStringW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReleaseSRWLockExclusive ReleaseSemaphore RemoveDirectoryW RemoveVectoredExceptionHandler ResetEvent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetEnvironmentVariableA SetErrorMode SetEvent SetFilePointer SetFilePointerEx SetHandleInformation SetLastError SetNamedPipeHandleState SetThreadExecutionState SetThreadPriority SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW SystemTimeToFileTime SystemTimeToTzSpecificLocalTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection UnhandledExceptionFilter VerSetConditionMask VerifyVersionInfoW WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile |
| USER32.dll |
AdjustWindowRectEx
AttachThreadInput BeginPaint CallNextHookEx CallWindowProcW ChangeDisplaySettingsExW ClientToScreen ClipCursor CloseClipboard CreateIconFromResource CreateIconFromResourceEx CreateIconIndirect CreateWindowExA CreateWindowExW DefWindowProcW DestroyCursor DestroyIcon DestroyWindow DialogBoxIndirectParamW DispatchMessageW DrawTextW EmptyClipboard EnableWindow EndDialog EndPaint EnumClipboardFormats EnumDisplayDevicesW EnumDisplayMonitors EnumDisplaySettingsW EnumWindows FillRect FlashWindowEx GetAsyncKeyState GetClassInfoExW GetClientRect GetClipCursor GetClipboardData GetClipboardFormatNameA GetClipboardSequenceNumber GetCursorPos GetDC GetDesktopWindow GetDlgItem GetDoubleClickTime GetFocus GetForegroundWindow GetKeyState GetKeyboardLayout GetKeyboardState GetMenu GetMessageA GetMessageExtraInfo GetMessagePos GetMessageTime GetMessageW GetMonitorInfoW GetPropW GetQueueStatus GetRawInputBuffer GetRawInputData GetRawInputDeviceInfoA GetRawInputDeviceList GetSystemMetrics GetUpdateRect GetWindowLongPtrW GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId IntersectRect IsClipboardFormatAvailable IsIconic IsWindow IsZoomed KillTimer LoadCursorW LoadIconW MapVirtualKeyW MessageBoxA MonitorFromPoint MonitorFromWindow MsgWaitForMultipleObjects OpenClipboard PeekMessageW PostMessageW PostThreadMessageW PtInRect RegisterClassExA RegisterClassExW RegisterClassW RegisterClipboardFormatW RegisterDeviceNotificationW RegisterRawInputDevices RegisterWindowMessageA ReleaseCapture ReleaseDC RemovePropW ScreenToClient SendMessageW SetActiveWindow SetCapture SetClipboardData SetCursor SetCursorPos SetFocus SetForegroundWindow SetLayeredWindowAttributes SetParent SetPropW SetRectEmpty SetTimer SetWindowLongPtrW SetWindowLongW SetWindowPos SetWindowRgn SetWindowTextW SetWindowsHookExW ShowWindow SystemParametersInfoA SystemParametersInfoW ToUnicode TrackMouseEvent TranslateMessage UnhookWindowsHookEx UnregisterClassA UnregisterClassW UnregisterDeviceNotification ValidateRect |
| IMM32.dll |
ImmAssociateContext
ImmGetCandidateListW ImmGetCompositionFontW ImmGetCompositionStringW ImmGetContext ImmGetIMEFileNameA ImmNotifyIME ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionStringW ImmSetCompositionWindow |
| MSVCP140.dll |
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0_Lockit@std@@QEAA@H@Z ??0ios_base@std@@IEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1_Lockit@std@@QEAA@XZ ??1ios_base@std@@UEAA@XZ ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Id_cnt@id@locale@std@@0HA ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?_Syserror_map@std@@YAPEBDH@Z ?_Throw_Cpp_error@std@@YAXH@Z ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Winerror_map@std@@YAHH@Z ?_Xbad_alloc@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?bad@ios_base@std@@QEBA_NXZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?classic@locale@std@@SAAEBV12@XZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?fail@ios_base@std@@QEBA_NXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?good@ios_base@std@@QEBA_NXZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IEAAXPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z ?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?uncaught_exceptions@std@@YAHXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z _Mtx_lock _Mtx_unlock |
| D3DCOMPILER_47.dll |
D3DCompile
|
| WINMM.dll |
timeBeginPeriod
timeEndPeriod |
| ADVAPI32.dll |
RegCloseKey
RegOpenKeyExW RegQueryValueExW |
| ole32.dll |
CLSIDFromString
CoCreateInstance CoInitializeEx CoTaskMemFree CoUninitialize OleInitialize OleUninitialize PropVariantClear RegisterDragDrop ReleaseStgMedium RevokeDragDrop |
| SETUPAPI.dll |
CM_Get_Device_IDA
CM_Get_Parent CM_Locate_DevNodeA SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiEnumDeviceInterfaces SetupDiGetClassDevsA SetupDiGetDeviceInstanceIdA SetupDiGetDeviceInterfaceDetailA SetupDiGetDeviceRegistryPropertyW |
| GDI32.dll |
BitBlt
CombineRgn CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateDCW CreateDIBSection CreateFontIndirectW CreateRectRgn CreateSolidBrush DeleteDC DeleteObject DescribePixelFormat GetDIBits GetDeviceCaps GetICMProfileW GetPixelFormat GetTextExtentPoint32A GetTextMetricsW SelectObject SetPixel SetPixelFormat |
| VERSION.dll |
GetFileVersionInfoA
GetFileVersionInfoSizeA VerQueryValueA |
| HID.DLL |
HidD_FreePreparsedData
HidD_GetAttributes HidD_GetHidGuid HidD_GetPreparsedData HidP_GetCaps |
| VCRUNTIME140.dll |
_CxxThrowException
__C_specific_handler __CxxFrameHandler3 __current_exception __current_exception_context __std_exception_copy __std_exception_destroy __std_terminate memchr memcmp memcpy memmove memset strchr strrchr strstr wcsstr |
| api-ms-win-crt-locale-l1-1-0.dll |
___lc_codepage_func
_configthreadlocale |
| api-ms-win-crt-stdio-l1-1-0.dll |
__acrt_iob_func
__p__commode __stdio_common_vfprintf __stdio_common_vsprintf __stdio_common_vsscanf _fseeki64 _get_stream_buffer_pointers _set_fmode _wfopen fclose feof ferror fflush fgetc fgetpos fgets fopen_s fputc fread fseek fsetpos ftell fwrite setvbuf ungetc |
| api-ms-win-crt-runtime-l1-1-0.dll |
_beginthreadex
_c_exit _cexit _configure_narrow_argv _crt_atexit _endthreadex _exit _get_narrow_winmain_command_line _initialize_narrow_environment _initialize_onexit_table _initterm _initterm_e _invoke_watson _register_onexit_function _register_thread_local_exe_atexit_callback _seh_filter_exe _set_app_type abort exit signal terminate |
| api-ms-win-crt-convert-l1-1-0.dll |
_i64toa
_itoa _ltoa _ui64toa _ultoa atof atoi strtod strtol strtoll strtoul strtoull wcstol |
| api-ms-win-crt-filesystem-l1-1-0.dll |
_lock_file
_unlock_file |
| api-ms-win-crt-string-l1-1-0.dll |
_strrev
isalnum strcmp strlen strncmp strncpy strnlen strpbrk wcscmp wcslen wcsncmp wcsnlen |
| api-ms-win-crt-math-l1-1-0.dll |
__setusermatherr
acos acosf asin asinf atan atan2 atan2f atanf cos cosf exp expf fmod fmodf ldexp log log10 log10f logf lround lroundf modf modff pow powf round roundf scalbn scalbnf sin sinf sqrt sqrtf tan tanf |
| api-ms-win-crt-heap-l1-1-0.dll |
_aligned_free
_callnewh _set_new_mode calloc free malloc realloc |
| api-ms-win-crt-utility-l1-1-0.dll |
qsort
|
Delayed Imports
1
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x468 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 6.40073 |
| MD5 | e92f5445cfda9c228b8a212b66ce6789 🔍 |
| SHA1 | 09999f1e824d02439f70b7fc2c0143f61121070b 🔍 |
| SHA256 | ae921a64614f549baaf033a15b6eed267aa00de777d5bc7d08f9c2bd10873810 🔍 |
| SHA3 | 81b8fce2bcf1610547d787044b0d529f62a2521f6413cdb305201baf7efa9563 🔍 |
2
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x1128 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 6.56518 |
| MD5 | b6e2e119d15d8a7832cfef3bff217c8e 🔍 |
| SHA1 | 6ffbb418558c08f5c1408cca25e172d80e4287db 🔍 |
| SHA256 | f7d76b21dbf7c3d8c0080b77fa65d32980dbe7789dd92e679fc3df48b36bcfc1 🔍 |
| SHA3 | 999e30f5c55ce3a7d0b4db88a043d53b185bc1317123da583743c143e85095e6 🔍 |
3
| Type |
RT_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x2668 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 6.58235 |
| MD5 | 04937c0336217c2dd4c4805195cd6917 🔍 |
| SHA1 | 689c9af035f77422d7699ef47b708e5ab9b2fb5b 🔍 |
| SHA256 | 8353f1a55879444c43599cebb1a86e590c2d05998c1afec62cf51f92a4bcbd6e 🔍 |
| SHA3 | b0936d67027f760ae25845ea90f58456480aa4f06ceea8bd5f678e1b3f020246 🔍 |
1 (#2)
| Type |
RT_GROUP_ICON
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x30 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 2.51589 |
| Detected Filetype | Icon file |
| MD5 | 298232997883411f1ee110d990f9551c 🔍 |
| SHA1 | 4ffeb8f324718a55a88d60510e45437add99e956 🔍 |
| SHA256 | d688200ab02f6fe049104a3e63ed160087c953b6d812e469db2aa2275e366cec 🔍 |
| SHA3 | 9da59cc538741e621778c8be995153688357f472f6c6a9c481d5f33ff19c500a 🔍 |
1 (#3)
| Type |
RT_MANIFEST
|
|---|---|
| Language | English - United States |
| Codepage | UNKNOWN |
| Size | 0x143 |
| TimeDateStamp | 1980-Jan-01 00:00:00 |
| Entropy | 4.71208 |
| MD5 | 9ce8c70178061cc4cf4a6bb1e291df93 🔍 |
| SHA1 | dc9804dd3aa348fb0c05f53c53c698518af514a0 🔍 |
| SHA256 | 6f88bc7cb02ccb2dbc26b5f4ce53e355b331e31bb920b2ba8cbbcd1b5d4cd5a0 🔍 |
| SHA3 | 9492809889cb617928395fd8b46fc6dd11eeb9b1101175bd478b7c4ca5bc10e1 🔍 |
Version Info
TLS Callbacks
| StartAddressOfRawData | 0x140359000 |
|---|---|
| EndAddressOfRawData | 0x14035902c |
| AddressOfIndex | 0x140340500 |
| AddressOfCallbacks | 0x140306fb8 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_ALIGN_8BYTES
|
| Callbacks | (EMPTY) |
Load Configuration
| Size | 0x140 |
|---|---|
| TimeDateStamp | 1970-Jan-01 00:00:00 |
| Version | 0.0 |
| GlobalFlagsClear | (EMPTY) |
| GlobalFlagsSet | (EMPTY) |
| CriticalSectionDefaultTimeout | 0 |
| DeCommitFreeBlockThreshold | 0 |
| DeCommitTotalFreeThreshold | 0 |
| LockPrefixTable | 0 |
| MaximumAllocationSize | 0 |
| VirtualMemoryThreshold | 0 |
| ProcessAffinityMask | 0 |
| ProcessHeapFlags | (EMPTY) |
| CSDVersion | 0 |
| Reserved1 | 0 |
| EditList | 0 |
| SecurityCookie | 0x1403374c0 |
RICH Header
Errors
Leave a comment
No comments yet.