Manalyze report for aa492324d7b86b60f64d74ef986236a413c26fc26328908ba7d3de522d097055

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2026-Aug-14 09:51:10
Detected languages	English - United States
TLS Callbacks	1 callback(s) detected.
Debug artifacts	pno1_lean.pdb
CompanyName	pinkedandowned
FileDescription	PinkedAndOwned
FileVersion	`0.3.0`
ProductName	PinkedAndOwned
ProductVersion	`0.3.0`

Plugin Output

Suspicious	Strings found in the binary may indicate undesirable behavior:	`Miscellaneous malware strings: cmd.exe` Contains domain names: .zz.gz.br GoDaddy.com birthpopuptypesapplyImagebeinguppernoteseveryshowsmeansextramatchtrackknownearlybegansuperpapernorthlearngivennamedendedTermspartsGroupbrandusingwomanfalsereadyaudiotakeswhile.com developer.microsoft.com genretrucklooksValueFrame.net github.com http://127.0.0.1 http://dummy.test http://www.C http://www.a http://www.css http://www.hortcut http://www.icon http://www.interpretation http://www.language http://www.style http://www.text-decoration http://www.w3.org http://www.w3.org/shortcut http://www.wencodeURIComponent http://www.years https://developer.microsoft.com https://developer.microsoft.com/en-us/microsoft-edge/webview2 https://docs.rs https://github.com https://www.World https://www.pinkedandowned.com https://www.recent microsoft.com openssl.org pinkedandowned.com thing.org www.pinkedandowned.com www.w3.org zz.gz.br
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to CRC32` `Uses constants related to SHA1` `Uses constants related to SHA256` `Uses constants related to SHA512` `Uses constants related to RC5 or RC6`
Malicious	The PE contains functions mostly used by malware.	`[!] The program may be hiding some of its imports: GetProcAddress LoadLibraryA LoadLibraryExA LoadLibraryExW LoadLibraryW` `Functions which can be used for anti-debugging purposes: SwitchToThread` `Can access the registry: RegCloseKey RegGetValueW RegOpenKeyExW RegQueryValueExW` `Possibly launches other programs: CreateProcessW ShellExecuteW` `Uses Windows's Native API: NtCancelIoFileEx NtCreateFile NtCreateNamedPipeFile NtDeviceIoControlFile NtOpenFile NtReadFile NtWriteFile` `Can create temporary files: CreateFileW GetTempPathW` `Uses functions commonly found in keyloggers: GetAsyncKeyState GetForegroundWindow MapVirtualKeyW` `Leverages the raw socket API to access the Internet: ws2_32.dll` `Can take screenshots: GetDC BitBlt CreateCompatibleDC`
Suspicious	VirusTotal score: 1/53 (Scanned on 2026-10-12 04:54:12)	`Trapmine: malicious.high.ml.score`

Hashes

MD5	`8a8b3df8a4f353f16659ea99e2e8ba0c` 🔍
SHA1	`19b650c60e8e634ec77e11919f714e3bed645399` 🔍
SHA256	`aa492324d7b86b60f64d74ef986236a413c26fc26328908ba7d3de522d097055` 🔍
SHA3	`afdde5a1250d6923e2e7e1a0c0a19de514b294ccaa056a0ce9de8a8ea8099240` 🔍
SSDeep	`98304:5NjfuwhZSZb2QSzZ9/OYCeZ0m9Q+KEIU0M/uNbjEr/:5NbuoS2QOKmSZE` 🔍
Imports Hash	`139fb5b240c6001052ba95e9039dc653` 🔍

DOS Header

e_magic	`MZ`
e_cblp	`0x78`
e_cp	`0x1`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0`
e_ss	`0`
e_sp	`0`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x78`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`7`
TimeDateStamp	2026-Aug-14 09:51:10
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0x8cfc00`
SizeOfInitializedData	`0x382800`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x00000000008A47AC (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x140000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0xc5a000`
SizeOfHeaders	`0x400`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`9762678abcb3627f8b2e59dd3cecc9cc 🔍`
SHA1	`5881f8b55eb0322e4d82d195fbb2739be6c4f1b6 🔍`
SHA256	`14f2a283ed1d7b4d6d72500a5bcfca8e8f95b7a86feff410ed687724d8879bda 🔍`
SHA3	`c0a7fdf8eafce506fa193c2a7a052ae1297f591115243961e368fff4a1b5df73 🔍`
VirtualSize	`0x8cfbb6`
VirtualAddress	`0x1000`
SizeOfRawData	`0x8cfc00`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.24553`

.rdata

MD5	`13b23ccc29893f830bee9cde53308684 🔍`
SHA1	`42dda07f5e8120228db21d5975fb4334e2a8e4de 🔍`
SHA256	`6b4e04b3c9f80d210e35b8d2c6884bc023f8eff148039e3a29bc68e34deacd38 🔍`
SHA3	`2b4cac6ae405687f5b651ec6bac20ef7277821f2eda88694994336d863cafddb 🔍`
VirtualSize	`0x301a6c`
VirtualAddress	`0x8d1000`
SizeOfRawData	`0x301c00`
PointerToRawData	`0x8d0000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.95403`

.data

MD5	`093c03a871dc63dd6c48fd8ba62aaefb 🔍`
SHA1	`b09d94deba00663746a6549412d96a7f43cefd33 🔍`
SHA256	`06b065cea9c2d5b6add0d2860cf5b9ad03758bd0b9f1d1ca813bb51fe8fb3378 🔍`
SHA3	`42c881152cf08c421338f53ae983da0850771035e73d951f3da7e1a09940b3fa 🔍`
VirtualSize	`0x43e0`
VirtualAddress	`0xbd3000`
SizeOfRawData	`0x1a00`
PointerToRawData	`0xbd1c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`3.95423`

.pdata

MD5	`daad06c5b01532ea7b1da7d38c97ef10 🔍`
SHA1	`9c4b1d3ae2918758f3ed1216aeab77b557939694 🔍`
SHA256	`d01c7f4ef7e5d8c2567cd9915d44cb51971e9b4d55c6f2e16a2c2200ed1e280f 🔍`
SHA3	`2b6073752d7f85b539c5bdc9a520e65ca9ac8a9e96581fbb333c8c4199d298ba 🔍`
VirtualSize	`0x6f5e8`
VirtualAddress	`0xbd8000`
SizeOfRawData	`0x6f600`
PointerToRawData	`0xbd3600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.55705`

.tls

MD5	`77d13d9b5117dc7f59e73d51179a2369 🔍`
SHA1	`e5478d5f5249eab53a52855204257dc48c60e4d5 🔍`
SHA256	`c4022d917ff589aff5e983478301c333875e829cbb464d512224e8c5527ef2e9 🔍`
SHA3	`88d07af9b7725fcfd11c64307c7f3defbf5ed5b99d6739c09c37f6afce0deeb0 🔍`
VirtualSize	`0x22d`
VirtualAddress	`0xc48000`
SizeOfRawData	`0x400`
PointerToRawData	`0xc42c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0.0623788`

.rsrc

MD5	`bca3c84c60bad5c48c0724f6e738e7eb 🔍`
SHA1	`ca00911a666108476b6a65c7939dc59cd420308d 🔍`
SHA256	`a7ca765e4ebd4166e9367434dcf4c1b4f2c1499c83fd72b0ffbcc5d262a6013b 🔍`
SHA3	`9e0b6dfa68c23b12d1ac78c905d945fd2a62e69943dd1aa5d24b8c1b3e2e4a1c 🔍`
VirtualSize	`0x75d0`
VirtualAddress	`0xc49000`
SizeOfRawData	`0x7600`
PointerToRawData	`0xc43000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`7.88625`

.reloc

MD5	`009187d20f424916cbb2f683a52b2af9 🔍`
SHA1	`8a7471292a3e24ef380893279ff2bd9ecf394bcd 🔍`
SHA256	`7cab7e4dfb8469f06a4418932fd8c52ac87da15f3796958e74d7f6f81183008e 🔍`
SHA3	`7de98a09ba7dd7cd74311f753016c02fa76d10c6dd2c0e184b13465fc462e9e9 🔍`
VirtualSize	`0x81bc`
VirtualAddress	`0xc51000`
SizeOfRawData	`0x8200`
PointerToRawData	`0xc4a600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.44926`

Imports

kernel32.dll	`AcquireSRWLockExclusive` `AddVectoredExceptionHandler` `CloseHandle` `CompareStringOrdinal` `CopyFileExW` `CreateDirectoryW` `CreateFileW` `CreateIoCompletionPort` `CreateMutexA` `CreateProcessW` `CreateSymbolicLinkW` `CreateThread` `CreateWaitableTimerExW` `DeleteFileW` `DeviceIoControl` `DuplicateHandle` `ExitProcess` `FindClose` `FindFirstFileExW` `FindNextFileW` `FormatMessageW` `FreeEnvironmentStringsW` `FreeLibrary` `GetCommandLineW` `GetConsoleMode` `GetConsoleOutputCP` `GetCurrentDirectoryW` `GetCurrentProcess` `GetCurrentProcessId` `GetCurrentThread` `GetCurrentThreadId` `GetEnvironmentStringsW` `GetEnvironmentVariableW` `GetFileAttributesW` `GetFileInformationByHandle` `GetFileInformationByHandleEx` `GetFinalPathNameByHandleW` `GetFullPathNameW` `GetLastError` `GetModuleFileNameW` `GetModuleHandleA` `GetModuleHandleW` `GetProcAddress` `GetProcessHeap` `GetQueuedCompletionStatusEx` `GetStdHandle` `GetSystemDirectoryW` `GetSystemInfo` `GetSystemTimeAsFileTime` `GetSystemTimePreciseAsFileTime` `GetTempPathW` `GetUserDefaultUILanguage` `GetWindowsDirectoryW` `HeapAlloc` `HeapFree` `HeapReAlloc` `InitializeSListHead` `IsDebuggerPresent` `IsProcessorFeaturePresent` `LCIDToLocaleName` `LoadLibraryA` `LoadLibraryExA` `LoadLibraryExW` `LoadLibraryW` `LockFileEx` `MoveFileExW` `MultiByteToWideChar` `OutputDebugStringA` `OutputDebugStringW` `PostQueuedCompletionStatus` `QueryPerformanceCounter` `QueryPerformanceFrequency` `ReadFileEx` `ReleaseMutex` `ReleaseSRWLockExclusive` `RtlCaptureContext` `RtlLookupFunctionEntry` `RtlVirtualUnwind` `SetEnvironmentVariableW` `SetFileCompletionNotificationModes` `SetFileInformationByHandle` `SetFilePointerEx` `SetFileTime` `SetHandleInformation` `SetLastError` `SetThreadStackGuarantee` `SetUnhandledExceptionFilter` `SetWaitableTimer` `Sleep` `SleepConditionVariableSRW` `SleepEx` `SwitchToThread` `TerminateProcess` `UnhandledExceptionFilter` `UnlockFile` `WaitForSingleObject` `WaitForSingleObjectEx` `WakeAllConditionVariable` `WideCharToMultiByte` `WriteConsoleW` `WriteFileEx` `lstrlenW`
user32.dll	`AdjustWindowRect` `AdjustWindowRectEx` `AppendMenuW` `ChangeDisplaySettingsExW` `CheckMenuItem` `ClientToScreen` `ClipCursor` `CloseTouchInputHandle` `CreateAcceleratorTableW` `CreateIcon` `CreateMenu` `CreatePopupMenu` `CreateWindowExW` `DefWindowProcW` `DestroyAcceleratorTable` `DestroyIcon` `DestroyMenu` `DestroyWindow` `DispatchMessageA` `DispatchMessageW` `DrawIconEx` `DrawMenuBar` `DrawTextW` `EnableMenuItem` `EnableWindow` `EnumChildWindows` `EnumDisplayMonitors` `FillRect` `FindWindowExW` `FlashWindowEx` `GetActiveWindow` `GetAsyncKeyState` `GetClientRect` `GetClipCursor` `GetCursorPos` `GetDC` `GetForegroundWindow` `GetKeyState` `GetKeyboardLayout` `GetKeyboardState` `GetMenu` `GetMenuBarInfo` `GetMenuItemInfoW` `GetMessageA` `GetMessageW` `GetMonitorInfoW` `GetParent` `GetRawInputData` `GetSystemMenu` `GetSystemMetrics` `GetTouchInputInfo` `GetUpdateRect` `GetWindow` `GetWindowDC` `GetWindowLongPtrW` `GetWindowLongW` `GetWindowPlacement` `GetWindowRect` `GetWindowTextLengthW` `GetWindowTextW` `InsertMenuW` `InvalidateRect` `InvalidateRgn` `IsIconic` `IsProcessDPIAware` `IsWindow` `IsWindowEnabled` `IsWindowVisible` `LoadCursorW` `MapVirtualKeyExW` `MapVirtualKeyW` `MapWindowPoints` `MessageBoxW` `MonitorFromPoint` `MonitorFromRect` `MonitorFromWindow` `MsgWaitForMultipleObjectsEx` `OffsetRect` `PeekMessageW` `PostMessageW` `PostQuitMessage` `PostThreadMessageW` `RedrawWindow` `RegisterClassExW` `RegisterRawInputDevices` `RegisterTouchWindow` `RegisterWindowMessageA` `ReleaseCapture` `ReleaseDC` `RemoveMenu` `ScreenToClient` `SendInput` `SendMessageW` `SetCapture` `SetCursor` `SetCursorPos` `SetFocus` `SetForegroundWindow` `SetMenu` `SetMenuItemInfoW` `SetParent` `SetPropW` `SetWindowDisplayAffinity` `SetWindowLongPtrW` `SetWindowLongW` `SetWindowPlacement` `SetWindowPos` `SetWindowRgn` `SetWindowTextW` `ShowCursor` `ShowWindow` `SystemParametersInfoA` `SystemParametersInfoW` `ToUnicodeEx` `TrackMouseEvent` `TrackPopupMenu` `TranslateAcceleratorW` `TranslateMessage` `UpdateWindow` `ValidateRect` `VkKeyScanW`
ole32.dll	`CoCreateFreeThreadedMarshaler` `CoCreateInstance` `CoInitializeEx` `CoTaskMemAlloc` `CoTaskMemFree` `CoUninitialize` `OleInitialize` `RegisterDragDrop` `RevokeDragDrop`
gdi32.dll	`BitBlt` `CombineRgn` `CreateCompatibleDC` `CreateDIBSection` `CreateRectRgn` `CreateSolidBrush` `DeleteDC` `DeleteObject` `GetDeviceCaps` `SelectObject` `SetBkMode` `SetTextColor`
comctl32.dll	`DefSubclassProc` `RemoveWindowSubclass` `SetWindowSubclass` `TaskDialogIndirect`
dwmapi.dll	`DwmEnableBlurBehindWindow` `DwmGetWindowAttribute` `DwmSetWindowAttribute`
shlwapi.dll	`SHCreateMemStream`
api-ms-win-core-synch-l1-2-0.dll	`WaitOnAddress` `WakeByAddressAll` `WakeByAddressSingle`
ws2_32.dll	`WSACleanup` `WSADuplicateSocketW` `WSAGetLastError` `WSAIoctl` `WSARecv` `WSASend` `WSASocketW` `WSAStartup` `accept` `bind` `closesocket` `connect` `freeaddrinfo` `getaddrinfo` `getpeername` `getsockname` `getsockopt` `ioctlsocket` `listen` `recv` `select` `send` `setsockopt` `shutdown`
bcryptprimitives.dll	`ProcessPrng`
shell32.dll	`DragFinish` `DragQueryFileW` `SHAppBarMessage` `SHGetKnownFolderPath` `ShellExecuteW`
ADVAPI32.dll	`EventRegister` `EventSetInformation` `EventUnregister` `EventWriteTransfer` `RegCloseKey` `RegGetValueW` `RegOpenKeyExW` `RegQueryValueExW` `SystemFunction036`
ntdll.dll	`NtCancelIoFileEx` `NtCreateFile` `NtCreateNamedPipeFile` `NtDeviceIoControlFile` `NtOpenFile` `NtReadFile` `NtWriteFile` `RtlGetVersion` `RtlNtStatusToDosError`
oleaut32.dll	`GetErrorInfo` `SetErrorInfo` `SysFreeString` `SysStringLen`
bcrypt.dll	`BCryptGenRandom`
VCRUNTIME140.dll	`_CxxThrowException` `__C_specific_handler` `__CxxFrameHandler3` `__current_exception` `__current_exception_context` `__std_exception_copy` `__std_exception_destroy` `_purecall` `memcmp` `memcpy` `memmove` `memset` `wcsrchr`
VCRUNTIME140_1.dll	`__CxxFrameHandler4`
api-ms-win-crt-runtime-l1-1-0.dll	`__p___argc` `__p___argv` `_c_exit` `_cexit` `_configure_narrow_argv` `_crt_atexit` `_exit` `_get_initial_narrow_environment` `_initialize_narrow_environment` `_initialize_onexit_table` `_initterm` `_initterm_e` `_register_onexit_function` `_register_thread_local_exe_atexit_callback` `_seh_filter_exe` `_set_app_type` `_wassert` `exit` `terminate`
api-ms-win-crt-heap-l1-1-0.dll	`_callnewh` `_set_new_mode` `calloc` `free` `malloc`
api-ms-win-crt-stdio-l1-1-0.dll	`__p__commode` `_set_fmode`
api-ms-win-crt-math-l1-1-0.dll	`__setusermatherr` `floor` `pow` `round` `roundf` `trunc`
api-ms-win-crt-locale-l1-1-0.dll	`_configthreadlocale`
api-ms-win-crt-convert-l1-1-0.dll	`_ultow_s` `_wtoi` `wcstol`
api-ms-win-crt-string-l1-1-0.dll	`_wcsicmp` `strlen` `wcscmp` `wcslen`

Delayed Imports

1

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x790`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.83605`
Detected Filetype	PNG graphic file
MD5	`bcd071375eaccae4420484627ebbd8c1 🔍`
SHA1	`a3b2c7c993cd770c891f17143066d0ae46c07a7d 🔍`
SHA256	`71e640f0ef3ce61799fbd6c316ed0123a9b12cda6b6365afaa4bc4e4973703e2 🔍`
SHA3	`a82b259607330a5fb13462af82fc97ce261d58a472907eb8a8326fd931e7d236 🔍`

2

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x2e4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.61142`
Detected Filetype	PNG graphic file
MD5	`fab3475785495ae906badf6192889e14 🔍`
SHA1	`4ae564386a6cdc75399c820261f50f5d49f7ce7d 🔍`
SHA256	`b5e793ccaa233792992ab903205d7048416c9aa92009c7e1417bd0d13b59fb9a 🔍`
SHA3	`6ceaf9b44302f0d3e4f8c81700ef002d5f43471ea7b5b5b19499050214bbc891 🔍`

3

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x508`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.76723`
Detected Filetype	PNG graphic file
MD5	`e17f45139b6b50739cc5fd965ebc632c 🔍`
SHA1	`b3838944cadc270d8c1dcda05433efc549c94924 🔍`
SHA256	`bdeac57cba7a58272ae15cc55ce5dd5102977c6d9e106b5ee70192cc9495b009 🔍`
SHA3	`fbdc8b07a4333ae38dc9385d5c5531ad8c4e9ca6488040afa15a20ab93e088f3 🔍`

4

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0xc30`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.86215`
Detected Filetype	PNG graphic file
MD5	`bcd6adb0b3203b584cc659a8dda078a3 🔍`
SHA1	`131b0c218e5287f5c0beb30931a43c83da52a6d4 🔍`
SHA256	`9896ce8bd3610921ee3a34c0d95642c9976de24e7b39be2eaf45cc0e56b6a9bd 🔍`
SHA3	`5fb0112ca9d27dc02dd4f4b2ad294f9a372958c998578643a44825f7d8227bb3 🔍`

5

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1121`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.88438`
Detected Filetype	PNG graphic file
MD5	`bc9ce26491dec3e0910474a29fe824b5 🔍`
SHA1	`8913feff931970cda878e404bb17911062f71079 🔍`
SHA256	`793784defe23ba5c66b4a5263d81ea298d06a54669953d36b1de018864c0b042 🔍`
SHA3	`b84a66d6a27707854d4963c109fd144be84d6bd709dfc9ad5cd40280db874642 🔍`

6

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x4324`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.96046`
Detected Filetype	PNG graphic file
MD5	`d8b53d22ab8ba188a22cc9401678b4cd 🔍`
SHA1	`943f7049eb749ca8bd8d3e66234541f3e171de16 🔍`
SHA256	`4a414fd0489d9c3115c43be59a4241a3a2f5de9eee46e3b8ee22131202b31b14 🔍`
SHA3	`0570a423199ff96537ac8b69f799f27318c4970efe1e48c74ed3813444b55d5c 🔍`

32512

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x5a`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.79371`
Detected Filetype	Icon file
MD5	`8b9468174ca17111afc8573502435cff 🔍`
SHA1	`2d3405fb1e572c87eb11cdc364a58c6e9af284d8 🔍`
SHA256	`664398bd505aea8557d1da834fb5b4132245bd43b239c7ec913a6ca5475a5dd0 🔍`
SHA3	`124b5ee85be44948cf17fe252f8271ac43efe1b0d4eebe5e2bdf28ba46de2d97 🔍`

1 (#2)

Type	`RT_VERSION`
Language	English - United States
Codepage	UNKNOWN
Size	`0x200`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.14067`
MD5	`a1914f8e1c7e6af781dc2357ca2a82ae 🔍`
SHA1	`bf988a98964a260ecca78657472f81063b53b9c7 🔍`
SHA256	`cdbcb2d302a2e394122eb38865421ef99158932cb3e08584cb23d2dad937e94e 🔍`
SHA3	`d16d61107a2e4ce6b5945f9af961bd31b94bbeb0683a6c00f5d44fc9448ba249 🔍`

1 (#3)

Type	`RT_MANIFEST`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.96056`
MD5	`01e4c8c046a47771f13cd120b53303e7 🔍`
SHA1	`2a4224d31c916a5cff4f2636a3cb47fdd84a5cc9 🔍`
SHA256	`b1cb832f790c153aa0e9a66f76e75460263cf1d41971d2dbcc9a4d87ec18b7d8 🔍`
SHA3	`680120ec819e7ba66519d9a8a3e446973c4cb28aa0146c91cceaa8c8fadc90ae 🔍`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	0.3.0.0
ProductVersion	0.3.0.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT` `VOS_NT_WINDOWS32` `VOS_WINCE` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	UNKNOWN
CompanyName	pinkedandowned
FileDescription	PinkedAndOwned
FileVersion (#2)	0.3.0
ProductName	PinkedAndOwned
ProductVersion (#2)	0.3.0

Resource LangID	English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2026-Aug-14 09:51:10
Version	`0.0`
SizeofData	`38`
AddressOfRawData	`0xa1381c`
PointerToRawData	`0xa1281c`
Referenced File	pno1_lean.pdb

TLS Callbacks

StartAddressOfRawData	`0x140c48000`
EndAddressOfRawData	`0x140c4822c`
AddressOfIndex	`0x140bd6dc8`
AddressOfCallbacks	`0x140a138d0`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_ALIGN_8BYTES`
Callbacks	`0x000000014060AA20`

Load Configuration

Size	`0x140`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x140bd4840`

RICH Header

Errors

Leave a comment

No comments yet.