b72bb11789e6a2659564bd88dd97e6aa7dac200753f7a11c0c7a4d9a6b497908

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2021-Nov-25 23:15:30
Detected languages English - United Kingdom
English - United States
CompanyName MeltingParrotGames
FileDescription A Horror Action Adventure
FileVersion 1.0.0.0
LegalCopyright (c) 2021 Melting Parrot Games
PrivateBuild 01.00.00.00
ProductName Dap 1.0.1
ProductVersion 1.0.0.0

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ v6.0 DLL
Microsoft Visual C++ 6.0 - 8.0
Info Interesting strings found in the binary: Contains domain names:
  • RetroUSB.com
  • adobe.com
  • http://ns.adobe.com
  • http://ns.adobe.com/xap/1.0/
  • http://ns.adobe.com/xap/1.0/mm/
  • http://ns.adobe.com/xap/1.0/sType/ResourceRef#
  • http://www.w3.org
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#
  • https://store.steampowered.com
  • https://store.steampowered.com/app/1372210/Dap/
  • https://yoyogames.zendesk.com
  • https://yoyogames.zendesk.com/hc/en-us/articles/360002243797
  • ns.adobe.com
  • steampowered.com
  • store.steampowered.com
  • www.w3.org
  • yoyogames.zendesk.com
  • zendesk.com
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Uses constants related to MD5
Uses constants related to SHA1
Suspicious The PE is possibly packed. Unusual section name found: .mydata
Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • LoadLibraryExW
  • GetProcAddress
  • LoadLibraryW
 Can access the registry:
  • RegQueryValueExW
  • RegOpenKeyExW
  • RegCloseKey
 Possibly launches other programs:
  • CreateProcessW
  • ShellExecuteW
 Has Internet access capabilities:
  • InternetReadFile
  • InternetConnectA
  • InternetCloseHandle
  • InternetOpenA
  • InternetCanonicalizeUrlA
  • InternetGetConnectedState
  • InternetCrackUrlA
 Leverages the raw socket API to access the Internet:
  • WS2_32.dll
 Enumerates local disk drives:
  • GetDriveTypeW
 Reads the contents of the clipboard:
  • GetClipboardData
Suspicious VirusTotal score: 1/70 (Scanned on 2026-08-09 03:37:35) Jiangmin: Backdoor.IRCBot.aam

Hashes

MD5 917cd50c26719ee83bc9380f856306ae 🔍
SHA1 bec7ae494a72824753980cf1449044ff2415adf4 🔍
SHA256 b72bb11789e6a2659564bd88dd97e6aa7dac200753f7a11c0c7a4d9a6b497908 🔍
SHA3 7e312cb0c2e8bb75f364a868e737d8cfe4b1aa3482cc8f08d3fa68adabedc238 🔍
SSDeep 196608:d35uiHIuncDG3fgMrUmLEqN8OC0XJDJXQtu8asa5BJWdeUtIOkq8AjJEiipw/Be:1cDG3fgMrUmLEqN8OC0XJDJXQDxspw/ 🔍
Imports Hash 50a447bd46eb98b51a1efb5cfe1f34bf 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x130

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 7
TimeDateStamp 2021-Nov-25 23:15:30
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32
LinkerVersion 14.0
SizeOfCode 0x947400
SizeOfInitializedData 0x275a00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0069D5BC (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x949000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xe1e000
SizeOfHeaders 0x400
Checksum 0xbc0683
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 c0df832e89ee09bc8f0f7b794fc30949 🔍
SHA1 7ed37b05513597d780fa73228f4aaac842180fd7 🔍
SHA256 c7037a5b992d94d240ad525fdc8f664d463af0c399b5450a4982545f83d7b075 🔍
SHA3 41f35a53e3c4ef19429a5a25a0e8ca52e4fc815f49ab5101a9e0c83b610a9f10 🔍
VirtualSize 0x947229
VirtualAddress 0x1000
SizeOfRawData 0x947400
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 5.91367

.rdata

MD5 ee45ccb3ec8341684192cd1bb80c7806 🔍
SHA1 65db05757f9713a2a476b238cee82d5b077fef8d 🔍
SHA256 3f9397e5abf1ed37de2357f8143b72729f9068f07620b003460ebd171d40b26d 🔍
SHA3 da6cf3c770134223f884660502b6c5abde57a77cbb5280f795d2691cafb426e3 🔍
VirtualSize 0x1225ac
VirtualAddress 0x949000
SizeOfRawData 0x122600
PointerToRawData 0x947800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.72623

.data

MD5 c25079866152cde15968c06a63ad372d 🔍
SHA1 5944fc2f2087e481a64926cbd83b97f1b0e7b930 🔍
SHA256 f55a50886df1614fae566242817d713e9be1453cc7049f8c55cd056b10a394a1 🔍
SHA3 61838d2b3c891f1e378cfa09c4a49df6c4839f43a770e308366576fc8681b059 🔍
VirtualSize 0x312ed8
VirtualAddress 0xa6c000
SizeOfRawData 0xb7800
PointerToRawData 0xa69e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.30923

.mydata

MD5 5b71e4c27591ccb21954d71d656b28fb 🔍
SHA1 9cf3bdc3e0e647cb864581406250a7c21f51524d 🔍
SHA256 6bafe4f53b35a27d41c72c80d8fdfcd2aca79ce310b990ee55c7a04d65b6e96f 🔍
SHA3 efdeae6073a6cce468f62cdbdfc2d0f9ea3d196156860e5cac0d2038149f9a3e 🔍
VirtualSize 0x8
VirtualAddress 0xd7f000
SizeOfRawData 0x200
PointerToRawData 0xb21600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_SHARED
IMAGE_SCN_MEM_WRITE
Entropy 0.0203931

_RDATA

MD5 94a2b60a779d50fa77b4a151fb31b2e5 🔍
SHA1 5d24bc035bb811cb6b905b953bcb9879a4f3b05c 🔍
SHA256 3488e32cd683f202d4b905ea698e5f4a8298cf411a4111068a18893464e4c042 🔍
SHA3 ad1cfd9c39f5a94971a0e052eafe487ef176a96d62712a75724ed291997dac43 🔍
VirtualSize 0x22110
VirtualAddress 0xd80000
SizeOfRawData 0x22200
PointerToRawData 0xb21800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.3692

.rsrc

MD5 13bd9d79da05ea4a13c94b06add428ae 🔍
SHA1 37ad614bc1be8cd73b74c12b22eedbac6244fb2f 🔍
SHA256 e3bc57d2f9dd453c68a71c382e7e7ccd7551a07e3f31232e404422110d84550c 🔍
SHA3 32ef8ac48202e7bce23f1acb5cb804ce767c27f7c0eae79fb4c9036d6a60e8e3 🔍
VirtualSize 0x2b268
VirtualAddress 0xda3000
SizeOfRawData 0x2b400
PointerToRawData 0xb43a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.72935

.reloc

MD5 e2632eab066283318121368b1a5cb34e 🔍
SHA1 f519f263ea5a4207fbfb3b83369506ea06b23c8d 🔍
SHA256 86ccfd509e9dc4d092003ff949dca158a400fa17c47b8c78d4d631ed9777308c 🔍
SHA3 9c096ea374fe4361b669a1178afecd9ec33f22d0a5e54d080e1cf4b74a45462f 🔍
VirtualSize 0x4e3c8
VirtualAddress 0xdcf000
SizeOfRawData 0x4e400
PointerToRawData 0xb6ee00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.72545

Imports

WININET.dll InternetReadFile
InternetConnectA
HttpSendRequestA
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetCanonicalizeUrlA
HttpOpenRequestA
InternetGetConnectedState
InternetCrackUrlA
d3d11.dll D3D11CreateDevice
WINMM.dll mciSendStringA
mciGetErrorStringA
joyGetPos
joyGetPosEx
joyGetDevCapsA
WS2_32.dll WSAStartup
socket
shutdown
setsockopt
sendto
send
select
recvfrom
ntohs
getaddrinfo
inet_ntoa
inet_addr
getsockopt
ioctlsocket
connect
closesocket
bind
listen
htons
htonl
WSAGetLastError
freeaddrinfo
getpeername
__WSAFDIsSet
recv
accept
gdiplus.dll GdiplusStartup
GdiplusShutdown
COMCTL32.dll InitCommonControlsEx
KERNEL32.dll DecodePointer
GetProcessHeap
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
EnumSystemLocalesW
IsValidLocale
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapAlloc
HeapFree
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
ReadFile
SetFileAttributesW
GetFileAttributesExW
HeapWalk
HeapValidate
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
GetModuleHandleExW
WriteFile
GetStdHandle
RaiseException
LoadLibraryExW
EncodePointer
RtlUnwind
GetConsoleCP
GetConsoleMode
GetFileSizeEx
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
SetFilePointerEx
ExpandEnvironmentStringsW
CreateFileW
GetFullPathNameW
CloseHandle
GetLastError
SetErrorMode
Sleep
GetModuleFileNameW
MoveFileA
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceFrequency
WaitForSingleObject
SetWaitableTimer
GetTickCount
CreateWaitableTimerW
SetCurrentDirectoryA
GetCurrentDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CreateThread
SetThreadPriority
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
OutputDebugStringA
GetConsoleWindow
GetCurrentThread
SetPriorityClass
GlobalAlloc
GlobalLock
GlobalUnlock
GetEnvironmentVariableW
GetCurrentDirectoryW
CreateDirectoryW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
GetExitCodeProcess
CreateProcessW
SetLastError
GetExitCodeThread
LocalFree
FormatMessageW
GetVersionExW
GetLocaleInfoW
GetUserDefaultLCID
ExitProcess
lstrlenA
WaitForSingleObjectEx
CreateEventExW
HeapReAlloc
FlushFileBuffers
ReadConsoleW
MoveFileExW
HeapSize
GetTimeZoneInformation
SetEndOfFile
WriteConsoleW
GetCommandLineW
USER32.dll DestroyWindow
ShowWindow
SetWindowPos
BringWindowToTop
GetKeyState
SetCapture
ReleaseCapture
GetSystemMetrics
SetForegroundWindow
GetClientRect
GetWindowRect
AdjustWindowRectEx
SetCursor
LoadCursorW
LoadImageW
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
GetFocus
SetWindowTextA
UpdateWindow
SetCursorPos
GetCursorPos
SetWindowLongW
ChangeDisplaySettingsW
EnumDisplaySettingsW
CreateWindowExW
GetMonitorInfoW
wsprintfW
GetDC
ReleaseDC
CreateDialogParamW
DialogBoxParamW
EndDialog
GetDlgItem
SetDlgItemTextW
GetDlgItemTextW
DrawTextW
SetWindowTextW
ScreenToClient
GetAsyncKeyState
keybd_event
MoveWindow
ClientToScreen
MapWindowPoints
SetDlgItemTextA
GetRawInputDeviceInfoA
GetRawInputDeviceList
RegisterClassExW
GetActiveWindow
MessageBoxW
SetProcessDPIAware
IsDialogMessageW
SetFocus
PostMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
MessageBoxA
DefWindowProcW
MonitorFromWindow
SendMessageW
GDI32.dll SelectObject
GetDeviceCaps
COMDLG32.dll GetOpenFileNameW
GetSaveFileNameW
ADVAPI32.dll RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SHELL32.dll ShellExecuteW
SHGetFolderPathW
ole32.dll CoCreateInstance
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoInitialize
dxgi.dll CreateDXGIFactory1
dwmapi.dll DwmGetCompositionTimingInfo
VERSION.dll GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Delayed Imports

135

Type GIF
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1436
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.33764
Detected Filetype Bitmap graphic
MD5 0e502e77b617a3843b7d45f3de521a2c 🔍
SHA1 2d3fdf653979d1642a868d2ce2d4b7708c858426 🔍
SHA256 cb297aa243552ededd5aa0c25955322c287d36aa0d69ec68790900521ca1f211 🔍
SHA3 0a11d650715449bac5a4e6a89d9aa0c3ebb2dfd1b3e38efafdd48bc486467599 🔍

136

Type GIF
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1436
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.993047
Detected Filetype Bitmap graphic
MD5 0d483ad6da4e6f42f3c93d1b5924bb63 🔍
SHA1 e46c97a01a3fdd8edde15863148008298f703352 🔍
SHA256 b063e8200a53924c74d2992d56e43e6f7fff8383365d39e7dc880a2ce75b8b5f 🔍
SHA3 2c873b21dcbd04d9e547d9af7906ce201679192d92e2412bea1ccc1532a99aa3 🔍

137

Type GIF
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1436
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.15256
Detected Filetype Bitmap graphic
MD5 3be49c28e1fdb8aa1df022b36cede81e 🔍
SHA1 ff9e3ba28f30b560f0a946902d21b96cf7d8b090 🔍
SHA256 d04274209f89c47c9806b94082e05d1a072fc077c28ccf48f800c8bdbb9880c8 🔍
SHA3 122b324b232907b9d5342f2f081dce1c736dc825993a133b5ac6907416109bd1 🔍

138

Type GIF
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1436
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.89372
Detected Filetype Bitmap graphic
MD5 9e0d1b8218f2c07c149209f4991280d4 🔍
SHA1 9e22b219e4093f8ab599576c9da8ff851f004143 🔍
SHA256 eeac23e7bb8ce9b4ab0722f69bcf79ac5a9b5c0d7ad5e67dedbf1d77c2d8ade6 🔍
SHA3 1ab3de0e9285a8c7c82fecce41d4d6077ca94910ad2e735a2c643aba79eb0957 🔍

139

Type GIF
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1436
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.76889
Detected Filetype Bitmap graphic
MD5 6dbdee0c8e0ee023e9b57a9eecc0ee1d 🔍
SHA1 12ae24109df25a5dad2b7d34f13c89a8b1726c76 🔍
SHA256 3ac5bf02e1bb1a0975966df1ca1a515f866eb50baf156c4d5c614be342a42268 🔍
SHA3 48017038ccb6a5ee432c3fcfd0f9b4f00b6477085f4651859970fea7582fca7c 🔍

140

Type GIF
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1436
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.5738
Detected Filetype Bitmap graphic
MD5 fe8f56958aad10589723b7314317b833 🔍
SHA1 3c4f024fc0fc6690accfbd3a6eb167d84c4a563f 🔍
SHA256 f3c1366344b2898e928ad38699a61337ecd8c79604b338d8bafe931f67184ef7 🔍
SHA3 dcbd16085a4c18bfaf9afb3be726675825f19d2fc5081119cbae69fb390658fe 🔍

141

Type GIF
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1436
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.35572
Detected Filetype Bitmap graphic
MD5 55894bb63626eb9849b6f8eacc62da92 🔍
SHA1 88b8670956ae3c8fb1b2bde8a44b5c8c8ef20473 🔍
SHA256 d3631b49f188c12b8e45436a6219421eb6e623f680d108a111e5b97a366d8925 🔍
SHA3 371d3f3e3214d1ed1344c9b98e9d774e17a66f306c77cb935d4dea1cfecf8b86 🔍

142

Type GIF
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1436
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.77467
Detected Filetype Bitmap graphic
MD5 2407cb5a8ae0830297eb2b34611a288e 🔍
SHA1 dcfb184b9b17b29f1a4ad6b1a06721ec4b07a2a6 🔍
SHA256 c868e02eade177601671c64315a5eee20883ab9cb0fc4efce212016afcee7dc7 🔍
SHA3 35163e1fd5d64dfed87502a46c5c36cfc9f297560ae68bdba590c1d4dd513474 🔍

143

Type GIF
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1436
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.19257
Detected Filetype Bitmap graphic
MD5 9ddc3df1155230511f45d1677c70dcb3 🔍
SHA1 799f847c6b512acc5e846559d216ae6394919028 🔍
SHA256 4b84982fb983a64480c589cb3d2c7fce20bc8cea86b9eb2f0ba3c11ab55fa1a2 🔍
SHA3 954017ae7356108b957bf37b7c74f10887bf2d2e12670d49b62c8c177d9553ac 🔍

144

Type GIF
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1436
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.76158
Detected Filetype Bitmap graphic
MD5 16430adab8190094cbe4a553692347de 🔍
SHA1 8f2cd135001304b4b766b1f3e061bd1d2407e212 🔍
SHA256 fd67c51055c3f203782d8d3a13a34697d95afddcbc06c5183284c9fe0d950a52 🔍
SHA3 0092b52ca7e99c11646dd8825d525459b29308d0ca77699e07eedae730962645 🔍

145

Type GIF
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1436
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.61258
Detected Filetype Bitmap graphic
MD5 7c261bcb470a60bb330dcd1f88cdd234 🔍
SHA1 182e7329dcca5817a907580c067d3e623fe0535b 🔍
SHA256 e5ca37c2b2bdcbe8e4b5857f1113eb3e0642118e4acded05b5c02e8df3ad52fd 🔍
SHA3 0e8dee8293df10ef065f5acf7e4c4823f44a12e4a8cd056392eee29d5166d467 🔍

146

Type GIF
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1436
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.52092
Detected Filetype Bitmap graphic
MD5 10d42c236cedc22ab8758ae3a2d99060 🔍
SHA1 001436d0e4188cffdd58d40081a651173185968e 🔍
SHA256 d32391f1bd6a81a326289c2e1276a3f7326c2f14d71591f40779fc833c5c91c5 🔍
SHA3 b79832c0228a740166020259b0fba9e04ea7ce6540eac99c8fde6e90385f96b6 🔍

147

Type GIF
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1436
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.36284
Detected Filetype Bitmap graphic
MD5 f3f29eadb4ae02d0d6691c418e46f3ab 🔍
SHA1 9bcf0bd1e89802ca25e764a81676aebb8d154002 🔍
SHA256 497abbc44a14af8460963a561b9c3353b41605349b7a903efa287e4d113cd4f5 🔍
SHA3 907ee5ab4c252e60672903517682d4477509d58c74fe90fda360d0878e9d1a32 🔍

148

Type GIF
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1436
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.48054
Detected Filetype Bitmap graphic
MD5 7aa9f99487a51a26033a557a2700c405 🔍
SHA1 1407f1c2016fdcce786c4e1a8c0a67d128407786 🔍
SHA256 caa7fcd55f3db50af6e9e4273c71cd182ece9be9755dd53f75ff473fb88a5f5f 🔍
SHA3 c264454c9a231d4bb18fffd46a7d01cbda72346f2baf69ee335415a971f8db53 🔍

149

Type GIF
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1436
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.27853
Detected Filetype Bitmap graphic
MD5 fbca651b85b45550d204bd2000cf9dd2 🔍
SHA1 5d3145149b881ac59a59e4adaf292dc5bba4f40d 🔍
SHA256 37b0ae57f593dad56c65b1acef50ddca2d641bb0cf1b801e49666cd0ac49e807 🔍
SHA3 528c5ab896e5a3656f5f593165024372a8007fb8a58b2a6b8537b702c37a8c1e 🔍

133

Type RT_BITMAP
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x4a0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.98789
MD5 a7299671f9ac143b68b89cbd7073aa56 🔍
SHA1 a0d4904fe608d1f758112b229cb2fe89cabdc3f1 🔍
SHA256 87d20d7e08ef065a0f44de6591e796d41f570e68fb14ddb5cd10ac674a72385d 🔍
SHA3 fb7ed8aa15af3bd248c2648f9e60dcbf695825cd2b2fa93443c0a676570d6993 🔍
Preview

165

Type RT_BITMAP
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x7558
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.8406
MD5 ae5be74113b8108d4092667015f88cbf 🔍
SHA1 61bcde019fd6d3d64614b579e593ec2512b692c1 🔍
SHA256 c3430c1ad6b9e3585ce6020e6337b78c863123fb0d07d65b1938769c17009648 🔍
SHA3 87541209302c2bacd518c828a19283b9cc3fa0bb21701dbba7ecdafce32b2f60 🔍
Preview

176

Type RT_BITMAP
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1b28
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.57572
MD5 32700ebf36f9c1cdebbabf17777894f3 🔍
SHA1 7e51fc29c8197724249ef357d1d0e319a1867400 🔍
SHA256 eb691c31eb5148a74ead4bb72e3b669801d4cab4c61787ece6b40311711065b7 🔍
SHA3 9054795488cbed4be2cd5f7d5f64758ef1b292981ddc81aa97ca89e8b77f39c5 🔍
Preview

177

Type RT_BITMAP
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1b28
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.92841
MD5 97c1fa00e9c580e8762c3827c9efd995 🔍
SHA1 4440fd9725c6fbfe350ed7f05605f12dac59ab96 🔍
SHA256 0179374b52eaffac22872e7ca9249a06dfe9a911607316509e58e226c002411d 🔍
SHA3 875b2107e0bce723b0817d1b3ac4f44e02d1bdd9921f80b7e9b65f2c439bd365 🔍
Preview

178

Type RT_BITMAP
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1b28
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.92841
MD5 97c1fa00e9c580e8762c3827c9efd995 🔍
SHA1 4440fd9725c6fbfe350ed7f05605f12dac59ab96 🔍
SHA256 0179374b52eaffac22872e7ca9249a06dfe9a911607316509e58e226c002411d 🔍
SHA3 875b2107e0bce723b0817d1b3ac4f44e02d1bdd9921f80b7e9b65f2c439bd365 🔍
Preview

1

Type RT_ICON
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0xb94
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.77657
Detected Filetype PNG graphic file
MD5 3081d85d3206bed95e153b77123cd0de 🔍
SHA1 b28f47d0042a62841aa69694176081ca1f3269d4 🔍
SHA256 4ff9fb0d9f2aeba8895ebf42fe0768c829ff1ae472c61ca484c895afd5b829fd 🔍
SHA3 a19984d4615a0e42e354bafde40ec9864cb799ccc1a5f2a6b090ccd0f34f8984 🔍

2

Type RT_ICON
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.82125
MD5 321b6eb0cfc492b05a0ae704778cf8da 🔍
SHA1 dad6688c99e31a89cd6c072c26d1874d10801f34 🔍
SHA256 83ba6397a41864e194119773191276c9b8897d6f926c45c9824e3f1e90dc47d7 🔍
SHA3 d169791335b24cca839b51d0b49a85c86b92a72cbcefb89a7a9dfaea4ce121fa 🔍

3

Type RT_ICON
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.89367
MD5 713948be21003dfb618ecdb185e50a59 🔍
SHA1 e1b814c0073be99d0f28e2ddb7d13b073f3dc67c 🔍
SHA256 f07f55d8a2d3e560f02673c49c8469b51a8d3548d7a1f0ee47355d6f080c9de8 🔍
SHA3 c1a3d3c7b76024fac53f24210b659a9bb52b0c6230589d095090e6b7e467fd2a 🔍

4

Type RT_ICON
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1628
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.36684
MD5 4b54f097cdb6fa39423033d47fa200db 🔍
SHA1 bde6c7a67f2b92f27aa875d4955999a9772ff2bf 🔍
SHA256 6a73143cfacd86719eecf2cc45bb66c23391ac62d0ffa167a1acda97b218a1a1 🔍
SHA3 2d1407d8b37f12533b8c67a507e830cf7c707f921c4f1dc2bb2f685733046eda 🔍

5

Type RT_ICON
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x4c28
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.04121
MD5 5862fb822647bb0222206552d93026f2 🔍
SHA1 c8df9419ceba783553fc9f5da52146a52d950867 🔍
SHA256 91b02dbfc7de3d446cfa0c582ffcd94754e063ab54450b8545e926755c301d9f 🔍
SHA3 00567047bfdf427cf64883cba41b3bee99520b33a6ad22c0d5d8f2108cee0d5e 🔍

6

Type RT_ICON
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1ae3
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.86085
Detected Filetype PNG graphic file
MD5 e602c6a4d4ddd15813cc8ab00888f496 🔍
SHA1 60bf529178e5f05463719555bd52551798e6ac88 🔍
SHA256 22813a19603dfdabbc152571db92cadd0f0a4192d8cff8942baae650c820c808 🔍
SHA3 58da0492c870c76a71c95de41ddb4735f69f314788516ad71b50c190c14b3cb7 🔍

IDD_ERROR_CODE

Type RT_DIALOG
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x120
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.11903
MD5 ac3f07c5aa93e413823a32f659240ad1 🔍
SHA1 d78e110cb30ccff6366e410f6a16009383f8f2e9 🔍
SHA256 b45c6a3366adc913f8d1f3cd2289aeddc2b4dae28c0e39daa911009f50234c43 🔍
SHA3 89f27075d14968fef9bdad5097adf1e3f751b7238149ba82eec741da3e19086a 🔍

IDD_INPUTQUERY

Type RT_DIALOG
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0xf0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.09333
MD5 9f9f2c8a6f4b306b41dda835d90c37eb 🔍
SHA1 3b12f1b6d8c5e887caaeac46f8918808543f708f 🔍
SHA256 bf96593a642a5a7785b22ab22e69e3609f3c361e6ae90982ce4c1e1056d40ef1 🔍
SHA3 ed7e786cd66ca80dd9f0842dca11025d91ba8d222429026534dbde9c2b6325a5 🔍

IDD_LOGIN_ASYNC

Type RT_DIALOG
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x13c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.07583
MD5 6b0f04cd06a91ff5ee96decd8eb6dbc6 🔍
SHA1 240236f7e7f1c2cea21c1d5eac0bef98094eb18a 🔍
SHA256 28ae1807e280b537ef8a9b5df66942cd52adf418cd5a2e0b07ef48b25bd08955 🔍
SHA3 f3d6f5a0f7c6fb4bd8a283c4f8bfc9337364cb28e696784dcb8f543d9d79e89b 🔍

IDD_MESSAGE_ASYNC

Type RT_DIALOG
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x9c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.00453
MD5 ed9d6ad0e3e5f287913a8c39386eb08e 🔍
SHA1 3856ad95adbb8ffdb971bd44a43e32ff7da10c9e 🔍
SHA256 09ae8082cc363799b57616423e47409390c11fc632c0958826d98420683aa83a 🔍
SHA3 19d277b2aea915c99d664198e3339347acae3070829ba1269eda8de02a6b820e 🔍

IDD_QUESTION

Type RT_DIALOG
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0xcc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.14448
MD5 a1cb026f8ac0e660d2dbb8b8de96ea59 🔍
SHA1 74271f454c727706fcdae5cc75fb59d2f54116a1 🔍
SHA256 3981d095cf944141f06895b29e6606015852408d2636844c6a8eef781c6067a2 🔍
SHA3 e896b8b0cc00a316588ed19d413a5c1f2963591a80916246895f3112feb029ce 🔍

101

Type RT_DIALOG
Language English - United States
Codepage Latin 1 / Western European
Size 0x8a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.97604
MD5 a12fa2524c10e9d3aa595a0a61af48c3 🔍
SHA1 1b50a67f54de04a27c268720bb4d3dd26739f535 🔍
SHA256 095689eb7e4e8c2e31c1718463a158554c0261e9872bf9c3a497e6baee29d0e3 🔍
SHA3 7b1dd499012d4bace7e2758b1e829120463cadf602af2b8c39e1bceb46f6d040 🔍

102

Type RT_DIALOG
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x40
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.4002
MD5 cb861dfde44d04231e4880679d8c4c27 🔍
SHA1 d5fea594012e7305e3c871d47128b7d2ecb2d5dc 🔍
SHA256 78d86ff624bedba3c25db2571361a13a13bcb6d064f88c5e586747b9c5fa179c 🔍
SHA3 59f409436199cefd5e86941fd7a17bcc74a9281b15f18e9a521afb1ba97bb0e7 🔍

129

Type RT_DIALOG
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x60
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.48825
MD5 fc397f24ff24058e906c80aa0ba293b0 🔍
SHA1 5a595d303f58d30ce064a363b06b52ac5abadb66 🔍
SHA256 cff945155a9afffac367c241b1435a70f7667ddf4dfa097f6f1160de9aea96b7 🔍
SHA3 0a4e851708d2ac9cdd97f3951f1be23880728eddc20d6ffdd9eabaf9739f0d5c 🔍

188

Type RT_DIALOG
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0xbc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.98411
MD5 b575ec076bc372b21c1332d665a56db6 🔍
SHA1 05b8ac0f862665caea395eac0f88d9a0369af081 🔍
SHA256 228733761baa9bec731d5830271e716af779a29d6fbae25dee72a6d51706e438 🔍
SHA3 4cf5a0abcafe469752d2f2dd365bd616993eb63b939a985a6c633c1c72cbf665 🔍

7

Type RT_STRING
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x1c0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.6517
MD5 fe86798eb9a185aa07757fc60cccb701 🔍
SHA1 fe8578f4d1eab03a0520a25cb5146b669988a598 🔍
SHA256 194604625fffb999d1d570f9bd69f763810364fffb8fe43037795099062135df 🔍
SHA3 9c075faec10d0a13da88b59bfb6c5d68760b4a5174a3523988ad960fae6e952e 🔍

152

Type RT_GROUP_ICON
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.51664
Detected Filetype Icon file
MD5 69e70d8ecd99a9929f2228c62c33ac29 🔍
SHA1 f93934a22d5a9fe45a9590a0096296d08c5af9d5 🔍
SHA256 4e2862f63cff8c1cef765f1bca7391469f6692054d4aa792e4b916ae13b631fd 🔍
SHA3 a8998594dd4431d8db9ed71aa7afa88c77458323071ba840f61301ed8c01fad2 🔍

1 (#2)

Type RT_VERSION
Language English - United Kingdom
Codepage Latin 1 / Western European
Size 0x2b0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.3511
MD5 5366c826bb66a8fd749833abbe3c193e 🔍
SHA1 961e62cd8da35a64396c47078c9cc7866546e36b 🔍
SHA256 28db49798aa1d9d265f59cba54a1bee77c50a5214fa16f02df4e91c7e9db7e5e 🔍
SHA3 37b7333df0e86cd728a8a235b84f812b739d4ce575f284b79c3a1295fe53dcea 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage Latin 1 / Western European
Size 0x3b1
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.08809
MD5 24bce3bb8cd9c354f1d8576eabda2af8 🔍
SHA1 0d51ad758c62b56466ef860ccd1d0dd66aac372a 🔍
SHA256 047a49866c5b41fc70cc8f558b161b1f63ff0e983b2acdc071288f5b6b56b6cb 🔍
SHA3 e37231d14c5ba83df93c8def939359dc2d85a3466923993dcfaec65b063afe71 🔍

String Table contents

OLE initialization failed. Make sure that the OLE libraries are the correct version.
Windows sockets initialization failed.
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.0.0.0
ProductVersion 1.0.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_DLL
Language English - United Kingdom
CompanyName MeltingParrotGames
FileDescription A Horror Action Adventure
FileVersion (#2) 1.0.0.0
LegalCopyright (c) 2021 Melting Parrot Games
PrivateBuild 01.00.00.00
ProductName Dap 1.0.1
ProductVersion (#2) 1.0.0.0
Resource LangID English - United Kingdom

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2021-Nov-25 23:15:30
Version 0.0
SizeofData 900
AddressOfRawData 0xa61124
PointerToRawData 0xa5f924

TLS Callbacks

Load Configuration

Size 0xbc
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0xe99878
SEHandlerTable 0xe60658
SEHandlerCount 685

RICH Header

XOR Key 0xd45bad34
Unmarked objects 0
C++ objects (VS2010 build 30319) 1
ASM objects (VS2017 v14.15 compiler 26715) 52
C++ objects (VS2017 v14.15 compiler 26715) 212
C objects (VS2017 v14.15 compiler 26715) 35
C++ objects (CVTCIL) (VS2017 v14.15 compiler 26715) 1
C++ objects (VS2015 UPD3.1 build 24215) 284
C objects (VS2015 UPD3.1 build 24215) 130
253 (28518) 4
C++ objects (30034) 49
C objects (30034) 21
ASM objects (30034) 36
Imports (VS2017 v14.15 compiler 26715) 35
Total imports 273
Unmarked objects (#2) 5007
Resource objects (VS2019 Update 11 (16.11.6-7) compiler 30137) 1
Linker (VS2019 Update 11 (16.11.6-7) compiler 30137) 1

Errors

Leave a comment

No comments yet.