| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date |
2026-Mar-11 17:38:28
|
| Detected languages |
English - United States
|
| CompanyName |
KVS Ltd
|
| FileDescription |
QUICKSURFACE
|
| FileVersion |
8.0.61.0
|
| InternalName |
quicksurface.exe
|
| LegalCopyright |
Copyright (c) 2018-2026 KVS Ltd
|
| OriginalFilename |
quicksurface.exe
|
| ProductName |
QUICKSURFACE
|
| ProductVersion |
8.0.61.0
|
| Info |
Interesting strings found in the binary: |
Contains domain names:
- comodoca.com
- crl.comodoca.com
- crl.sectigo.com
- crl.usertrust.com
- crt.sectigo.com
- http://crl.comodoca.com
- http://crl.comodoca.com/AAACertificateServices.crl04
- http://crl.sectigo.com
- http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
- http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
- http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
- http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
- http://crl.usertrust.com
- http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl05
- http://crt.sectigo.com
- http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
- http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
- http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
- http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
- http://ocsp.comodoca.com0
- http://ocsp.sectigo.com0
- http://ocsp.sectigo.com0$
- http://ocsp.usertrust.com0
- https://sectigo.com
- sectigo.com
- usertrust.com
|
| Info |
Cryptographic algorithms detected in the binary: |
Uses constants related to SHA256
Microsoft's Cryptography API
|
| Malicious |
This PE is packed with Themida |
Unusual section name found:
Unusual section name found:
Unusual section name found:
Unusual section name found:
Unusual section name found:
Unusual section name found:
Unusual section name found: .themida
Section .themida is both writable and executable.
Unusual section name found: .boot
The RICH header checksum is invalid.
|
| Suspicious |
The PE contains functions most legitimate programs don't use. |
Uses Microsoft's cryptographic API:
Has Internet access capabilities:
- URLOpenBlockingStreamW
- WinHttpOpenRequest
- InternetReadFile
Leverages the raw socket API to access the Internet:
|
| Info |
The PE is digitally signed. |
Signer: KVS Ltd
Issuer: Sectigo Public Code Signing CA R36
|
| Suspicious |
VirusTotal score: 1/72 (Scanned on 2026-03-24 15:42:43) |
DeepInstinct:
MALICIOUS
|
| MD5 |
53022c953d7ca13ea40217d915f8316d
|
| SHA1 |
3f9e2bb420bd638df0194fab111a3e4e972af6bd
|
| SHA256 |
c3ff51d5ffaf88aa57a30bbee08bef264e641744fa9b3657365447521c2bb881
|
| SHA3 |
3fe139f243f4a6fb1d60d44e7082a2fd9b61f98f5b1f63b86181875516d5792b
|
| SSDeep |
393216:pvRPTiz6L207dZpkrRFVfEpOR4ZPGZiEY:p5TE657irRTfEQR4ZPGZO
|
| Imports Hash |
5baa1959d97f4c8829d4ec9e1d0bfb2b
|
| e_magic |
MZ
|
| e_cblp |
0x90
|
| e_cp |
0x3
|
| e_crlc |
0
|
| e_cparhdr |
0x4
|
| e_minalloc |
0
|
| e_maxalloc |
0xffff
|
| e_ss |
0
|
| e_sp |
0xb8
|
| e_csum |
0
|
| e_ip |
0
|
| e_cs |
0
|
| e_ovno |
0
|
| e_oemid |
0
|
| e_oeminfo |
0
|
| e_lfanew |
0x138
|
| Signature |
PE
|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections |
13
|
| TimeDateStamp |
2026-Mar-11 17:38:28
|
| PointerToSymbolTable |
0
|
| NumberOfSymbols |
0
|
| SizeOfOptionalHeader |
0xf0
|
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
|
| Magic |
PE32+
|
| LinkerVersion |
14.0
|
| SizeOfCode |
0xdd1000
|
| SizeOfInitializedData |
0x75da000
|
| SizeOfUninitializedData |
0
|
| AddressOfEntryPoint |
0x00000000089FF058 (Section: .boot)
|
| BaseOfCode |
0x1000
|
| ImageBase |
0x140000000
|
| SectionAlignment |
0x1000
|
| FileAlignment |
0x200
|
| OperatingSystemVersion |
6.0
|
| ImageVersion |
0.0
|
| SubsystemVersion |
6.0
|
| Win32VersionValue |
0
|
| SizeOfImage |
0x8d6f000
|
| SizeOfHeaders |
0x600
|
| Checksum |
0xc34256
|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve |
0x100000
|
| SizeofStackCommit |
0x1000
|
| SizeofHeapReserve |
0x100000
|
| SizeofHeapCommit |
0x1000
|
| LoaderFlags |
0
|
| NumberOfRvaAndSizes |
16
|
| MD5 |
824151a843569d5f2b378538ac072d87
|
| SHA1 |
3e4db1cb19445ac7450b0ed79a343b80b4f1c5af
|
| SHA256 |
c999471c5526eb53402cc91e0c0b9973c06707b002c9614aff468da5a2cfb955
|
| SHA3 |
1fd7874f81032aac4b47ce5cc7b08dd969f4addcd5deef58418035a0dc575126
|
| VirtualSize |
0xdd0eef
|
| VirtualAddress |
0x1000
|
| SizeOfRawData |
0x494a00
|
| PointerToRawData |
0x600
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy |
7.98121
|
| MD5 |
8cb5e747f905d258b3158d33b3b5b46d
|
| SHA1 |
8a0350feb18b26924c50ffdcf2325ed8fb01e857
|
| SHA256 |
e2896c9d672221ba2828d411408a29feead8d14b5269d794f65ab9ddb325adb9
|
| SHA3 |
5b106cd9ff8297dbefe772e1203812e95e645b8bb518faf1fffcb259b0043cd1
|
| VirtualSize |
0x635944
|
| VirtualAddress |
0xdd2000
|
| SizeOfRawData |
0x147a00
|
| PointerToRawData |
0x495000
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
7.89606
|
| MD5 |
8f6b7af096f8774409e57d5644d6821e
|
| SHA1 |
1f31651688000def35f48e0a63afac064434f82c
|
| SHA256 |
3e94e5062d20dda70d51c282a886812d5f11761a7c0e34da5c905d01cac3fd46
|
| SHA3 |
f1fbdb5ac63492c858a124219b4bad2f4fb15bbbdf311b0dc0944b46e9ec5a8a
|
| VirtualSize |
0x60aa7d8
|
| VirtualAddress |
0x1408000
|
| SizeOfRawData |
0x9600
|
| PointerToRawData |
0x5dca00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
7.95989
|
| MD5 |
739c7efc21dfa5fa72064c9ae7a79998
|
| SHA1 |
15e1875ce9c30e2527772b0ec4c09382e64b9240
|
| SHA256 |
fc32434518d6dacf3172a21181fc817d4670568beec867cda8b3872f25d3ba1d
|
| SHA3 |
d499fe2087cf17960fc55c7e041c1aa434571019dff4f469ffc8619bf7420d5c
|
| VirtualSize |
0x5d948
|
| VirtualAddress |
0x74b3000
|
| SizeOfRawData |
0x37000
|
| PointerToRawData |
0x5e6000
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
7.67567
|
| MD5 |
d8789a5e1eae9593210fc5ffe7f36e97
|
| SHA1 |
a830c130a824be5f75fbe19416fa1d465c341ff3
|
| SHA256 |
7aefa66cbb0bac76365c992f9511cb33bc49ace3a04be848de0ea5da63c0097b
|
| SHA3 |
046d67d57c5b20957513f8666ef3d052bec1ed986c322ab9df16f2a48c11ecc2
|
| VirtualSize |
0xe500d0
|
| VirtualAddress |
0x7511000
|
| SizeOfRawData |
0x28b000
|
| PointerToRawData |
0x61d000
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
7.9688
|
| MD5 |
a664dac9ed7285c79bf568a8c13f2e9c
|
| SHA1 |
4e817eb93da9c5d3df8a7939db491604c75d30e4
|
| SHA256 |
1bc66a11a3120802a8e4cb7f7391d26a1f250ce9cc2b11c537df529255844a97
|
| SHA3 |
217f07e6f9a063025fe12d2fe1d5e1cddf8b6943a1f5d4f3360fdaa64f6815ac
|
| VirtualSize |
0x4c088
|
| VirtualAddress |
0x8362000
|
| SizeOfRawData |
0xa400
|
| PointerToRawData |
0x8a8000
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
7.67845
|
| MD5 |
27ffd4e9463d6cbb4f9f5197a22fdb68
|
| SHA1 |
77acba86adc6e7f50bc2fb2c2b808564c1c7bab6
|
| SHA256 |
7c8ee1e5a0c74ccefa48bd0902ccddacf26ed2aaaba56f6759b646ef84360c2e
|
| SHA3 |
dc735da1ec88b2d0da258569f967db0fa232266e326a9873ce9ebaf7d720f3be
|
| VirtualSize |
0x4e00
|
| VirtualAddress |
0x83af000
|
| SizeOfRawData |
0x4e00
|
| PointerToRawData |
0x8b2400
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
5.73779
|
| MD5 |
03dd72eaf0d1a6c2fd560e555f5a29d6
|
| SHA1 |
5a82a9ceb84c1fe7636ab115d11c2932d964b2e5
|
| SHA256 |
bf4c5275d1266a971f5ba512b68214e814b2a8022299151333f979d662dcba22
|
| SHA3 |
8a4ceca3183a8e4dc7402ba708b1b84ebee1aaa1fba01bec9f10723a13190067
|
| VirtualSize |
0x1200
|
| VirtualAddress |
0x83b4000
|
| SizeOfRawData |
0x1200
|
| PointerToRawData |
0x8b7200
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
4.6598
|
| MD5 |
e65d43b953fe362e0a949cdaf6708c0e
|
| SHA1 |
8ef566bd4035693ebd53ee99b3d5bfcae0492b59
|
| SHA256 |
8bc787d41c2de94f30535570cbb7edc9fc2d0c25d28653dafc7e7000bfc1abcf
|
| SHA3 |
fb3cd16e581bb1907b84210145785f8694e6c458cd551af7efd2ea575e63dc47
|
| VirtualSize |
0x1000
|
| VirtualAddress |
0x83b6000
|
| SizeOfRawData |
0x200
|
| PointerToRawData |
0x8b8400
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
0.288475
|
| MD5 |
2a16271e3484a35ba1bc65127b4e9c86
|
| SHA1 |
a01b96ae0f1e61052cbe86992ea0e5648b050dfb
|
| SHA256 |
72e711e68c2dcde165a61371aeb12bf4c3163841d808abafad08143193ac8da0
|
| SHA3 |
48c6f58d0c8c24a0e3f309638842a82ab5617f55b13773729394d8dab3e8e57e
|
| VirtualSize |
0x7a00
|
| VirtualAddress |
0x83b7000
|
| SizeOfRawData |
0x7a00
|
| PointerToRawData |
0x8b8600
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
5.57869
|
| MD5 |
d41d8cd98f00b204e9800998ecf8427e
|
| SHA1 |
da39a3ee5e6b4b0d3255bfef95601890afd80709
|
| SHA256 |
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
| SHA3 |
a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
|
| VirtualSize |
0x640000
|
| VirtualAddress |
0x83bf000
|
| SizeOfRawData |
0
|
| PointerToRawData |
0x8c0000
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| MD5 |
29b50d7fa41cfeacb460ff451373ea12
|
| SHA1 |
d8dadc34cda992114b7b775a530325ac17ae7863
|
| SHA256 |
3180a85aa6ed07133535ae9ce480744729875991040425889c4878dcdc2972bc
|
| SHA3 |
19e385094ddedb2b90d809f59023c6326e632a3184b0c2429c49c4896fcc58db
|
| VirtualSize |
0x36e200
|
| VirtualAddress |
0x89ff000
|
| SizeOfRawData |
0x36e200
|
| PointerToRawData |
0x8c0000
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy |
7.92845
|
| MD5 |
131b311e717e5df6ecf11a7c8e8097c8
|
| SHA1 |
033151df3f89c330269e4d7fdae2cc72312b27e2
|
| SHA256 |
563aa0034c0071d2d123d413c2c06c0407836d57edbd67cdf400a6df2efbc8dd
|
| SHA3 |
94bf2e3f1dfb6109a17d5b1d96175af29714882f7e542eb57c11bb569f35a2d4
|
| VirtualSize |
0x1000
|
| VirtualAddress |
0x8d6e000
|
| SizeOfRawData |
0x10
|
| PointerToRawData |
0xc2e200
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_MEM_READ
|
| Entropy |
2.73346
|
| kernel32.dll |
GetModuleHandleA
|
| dwmapi.dll |
DwmSetWindowAttribute
|
| VERSION.dll |
GetFileVersionInfoSizeW
|
| gdiplus.dll |
GdiplusStartup
|
| TKBO.dll |
??0BRepAlgoAPI_BuilderAlgo@@QEAA@XZ
|
| TKBool.dll |
??0TopOpeBRepDS_PointIterator@@QEAA@AEBV?$NCollection_List@V?$handle@VTopOpeBRepDS_Interference@@@opencascade@@@@@Z
|
| TKBRep.dll |
?D2@BRepAdaptor_Curve@@UEBAXNAEAVgp_Pnt@@AEAVgp_Vec@@1@Z
|
| TKernel.dll |
??0Standard_Failure@@QEAA@AEBV0@@Z
|
| TKFillet.dll |
??0BRepFilletAPI_MakeFillet2d@@QEAA@AEBVTopoDS_Face@@@Z
|
| TKG2d.dll |
?get_type_descriptor@Geom2d_Ellipse@@SAAEBV?$handle@VStandard_Type@@@opencascade@@XZ
|
| TKG3d.dll |
?LastParameter@Adaptor3d_Curve@@UEBANXZ
|
| TKGeomAlgo.dll |
?NbExtrema@Geom2dAPI_ExtremaCurveCurve@@QEBAHXZ
|
| TKGeomBase.dll |
??0GCPnts_AbscissaPoint@@QEAA@NAEBVAdaptor3d_Curve@@NN@Z
|
| TKIGES.dll |
?Write@IGESControl_Writer@@QEAA_NQEBD_N@Z
|
| TKMath.dll |
?GetStateNumber@math_Function@@UEAAHXZ
|
| TKMesh.dll |
??0BRepMesh_IncrementalMesh@@QEAA@AEBVTopoDS_Shape@@N_NN1@Z
|
| TKOffset.dll |
??0BRepOffsetAPI_ThruSections@@QEAA@_N0N@Z
|
| TKPrim.dll |
??1BRepSweep_NumLinearRegularSweep@@UEAA@XZ
|
| TKShHealing.dll |
??0ShapeAnalysis_Edge@@QEAA@XZ
|
| TKSTEP.dll |
?Model@STEPControl_Writer@@QEAA?AV?$handle@VStepData_StepModel@@@opencascade@@_N@Z
|
| TKTopAlgo.dll |
?Circuit@MAT2d_Tool2d@@QEBA?AV?$handle@VMAT2d_Circuit@@@opencascade@@XZ
|
| TKXSBase.dll |
??0APIHeaderSection_MakeHeader@@QEAA@AEBV?$handle@VStepData_StepModel@@@opencascade@@@Z
|
| PSKERNEL.dll |
PK_ENTITY_ask_class
|
| OPENGL32.dll |
glTexParameteri
|
| GLU32.dll |
gluPerspective
|
| mfc140u.dll |
#9889
|
| USER32.dll |
LoadCursorW
|
| GDI32.dll |
CreatePen
|
| ADVAPI32.dll |
CryptDeriveKey
|
| SHELL32.dll |
DragAcceptFiles
|
| COMCTL32.dll |
_TrackMouseEvent
|
| SHLWAPI.dll |
PathAppendW
|
| UxTheme.dll |
SetWindowTheme
|
| ole32.dll |
CoTaskMemAlloc
|
| OLEAUT32.dll |
VariantChangeType
|
| urlmon.dll |
URLOpenBlockingStreamW
|
| MSVCP140.dll |
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
|
| CONCRT140.dll |
??0_Cancellation_beacon@details@Concurrency@@QEAA@XZ
|
| WS2_32.dll |
WSAResetEvent
|
| WINHTTP.dll |
WinHttpOpenRequest
|
| WININET.dll |
InternetReadFile
|
| IPHLPAPI.DLL |
GetAdaptersInfo
|
| VCRUNTIME140.dll |
__std_exception_destroy
|
| api-ms-win-crt-heap-l1-1-0.dll |
malloc
|
| api-ms-win-crt-runtime-l1-1-0.dll |
_set_app_type
|
| api-ms-win-crt-math-l1-1-0.dll |
asin
|
| api-ms-win-crt-string-l1-1-0.dll |
_wcsicmp
|
| api-ms-win-crt-stdio-l1-1-0.dll |
fsetpos
|
| api-ms-win-crt-filesystem-l1-1-0.dll |
_wsplitpath_s
|
| api-ms-win-crt-convert-l1-1-0.dll |
_wtof
|
| api-ms-win-crt-utility-l1-1-0.dll |
div
|
| api-ms-win-crt-time-l1-1-0.dll |
_localtime64_s
|
| api-ms-win-crt-locale-l1-1-0.dll |
localeconv
|
| api-ms-win-crt-environment-l1-1-0.dll |
getenv
|
| Ordinal |
1
|
| Address |
0x15bb10
|
| Ordinal |
2
|
| Address |
0x15b850
|
| Ordinal |
3
|
| Address |
0x1721a0
|
| Ordinal |
4
|
| Address |
0x174170
|
| Ordinal |
5
|
| Address |
0x174320
|
| Ordinal |
6
|
| Address |
0x174020
|
| Ordinal |
7
|
| Address |
0x493020
|
| Ordinal |
8
|
| Address |
0x4336c0
|
| Ordinal |
9
|
| Address |
0x433680
|
| Ordinal |
10
|
| Address |
0x433400
|
| Ordinal |
11
|
| Address |
0x179c00
|
| Ordinal |
12
|
| Address |
0x45eef0
|
| Ordinal |
13
|
| Address |
0x45ee70
|
| Ordinal |
14
|
| Address |
0x466ab0
|
| Ordinal |
15
|
| Address |
0x46e330
|
| Ordinal |
16
|
| Address |
0x4642d0
|
| Ordinal |
17
|
| Address |
0x470240
|
| Ordinal |
18
|
| Address |
0x1cc1d0
|
| Ordinal |
19
|
| Address |
0x1cc290
|
| Ordinal |
20
|
| Address |
0x1cc060
|
| Ordinal |
21
|
| Address |
0x433860
|
| Ordinal |
22
|
| Address |
0x433830
|
| Ordinal |
23
|
| Address |
0x4337b0
|
| Ordinal |
24
|
| Address |
0x47f130
|
| Ordinal |
25
|
| Address |
0x4339e0
|
| Ordinal |
26
|
| Address |
0x4806b0
|
| Ordinal |
27
|
| Address |
0x4805c0
|
| Ordinal |
28
|
| Address |
0x1d26d0
|
| Ordinal |
29
|
| Address |
0x1d2520
|
| Ordinal |
30
|
| Address |
0x1e7720
|
| Ordinal |
31
|
| Address |
0x1e7590
|
| Ordinal |
32
|
| Address |
0x2b5850
|
| Ordinal |
33
|
| Address |
0x4337f0
|
| Ordinal |
34
|
| Address |
0x433750
|
| Ordinal |
35
|
| Address |
0x433710
|
| Ordinal |
36
|
| Address |
0x433930
|
| Ordinal |
37
|
| Address |
0x4338c0
|
| Ordinal |
38
|
| Address |
0x433440
|
| Ordinal |
39
|
| Address |
0x199680
|
| Ordinal |
40
|
| Address |
0x1caa10
|
| Ordinal |
41
|
| Address |
0x158e00
|
| Ordinal |
42
|
| Address |
0x199900
|
| Ordinal |
43
|
| Address |
0x199950
|
| Ordinal |
44
|
| Address |
0x1499f0
|
| Ordinal |
45
|
| Address |
0x1996e0
|
| Ordinal |
46
|
| Address |
0x1e7140
|
| Ordinal |
47
|
| Address |
0x15a950
|
| Ordinal |
48
|
| Address |
0x1e7320
|
| Ordinal |
49
|
| Address |
0x1998c0
|
| Ordinal |
50
|
| Address |
0x199aa0
|
| Ordinal |
51
|
| Address |
0x172180
|
| Ordinal |
52
|
| Address |
0x172190
|
| Ordinal |
53
|
| Address |
0x1996a0
|
| Ordinal |
54
|
| Address |
0x1999d0
|
| Ordinal |
55
|
| Address |
0x199690
|
| Ordinal |
56
|
| Address |
0x1a8310
|
| Ordinal |
57
|
| Address |
0x1999a0
|
| Ordinal |
58
|
| Address |
0x149660
|
| Ordinal |
59
|
| Address |
0x1998a0
|
| Ordinal |
60
|
| Address |
0x4334e0
|
| Ordinal |
61
|
| Address |
0x1d2c10
|
| Ordinal |
62
|
| Address |
0x466bc0
|
| Ordinal |
63
|
| Address |
0x4643b0
|
| Ordinal |
64
|
| Address |
0x46e370
|
| Ordinal |
65
|
| Address |
0x433450
|
| Ordinal |
66
|
| Address |
0x466bd0
|
| Ordinal |
67
|
| Address |
0x46e460
|
| Ordinal |
68
|
| Address |
0x470760
|
| Ordinal |
69
|
| Address |
0x470570
|
| Ordinal |
70
|
| Address |
0x45c580
|
| Ordinal |
71
|
| Address |
0x174400
|
| Ordinal |
72
|
| Address |
0x119420
|
| Ordinal |
73
|
| Address |
0x463230
|
| Ordinal |
74
|
| Address |
0x1d0a50
|
| Ordinal |
75
|
| Address |
0x172e60
|
| Ordinal |
76
|
| Address |
0x1d09e0
|
| Ordinal |
77
|
| Address |
0x17e4c0
|
| Ordinal |
78
|
| Address |
0x47d110
|
| Ordinal |
79
|
| Address |
0x1d06b0
|
| Ordinal |
80
|
| Address |
0x470a20
|
| Ordinal |
81
|
| Address |
0x433640
|
| Ordinal |
82
|
| Address |
0x1d2820
|
| Ordinal |
83
|
| Address |
0x1e7900
|
| Ordinal |
84
|
| Address |
0x1e79a0
|
| Ordinal |
85
|
| Address |
0x45e660
|
| Ordinal |
86
|
| Address |
0x45efe0
|
| Ordinal |
87
|
| Address |
0x172240
|
| Ordinal |
88
|
| Address |
0x4710d0
|
| Ordinal |
89
|
| Address |
0x1d01b0
|
| Ordinal |
90
|
| Address |
0x17bba0
|
| Ordinal |
91
|
| Address |
0x179cc0
|
| Ordinal |
92
|
| Address |
0x1d0340
|
| Ordinal |
93
|
| Address |
0x1d03a0
|
| Ordinal |
94
|
| Address |
0x1d0400
|
| Ordinal |
95
|
| Address |
0x1d0460
|
| Ordinal |
96
|
| Address |
0x1d04d0
|
| Ordinal |
97
|
| Address |
0x1d07f0
|
| Ordinal |
98
|
| Address |
0x1d2470
|
| Ordinal |
99
|
| Address |
0x1e74e0
|
| Ordinal |
100
|
| Address |
0x1d0700
|
| Ordinal |
101
|
| Address |
0x462cb0
|
| Ordinal |
102
|
| Address |
0x46f710
|
| Ordinal |
103
|
| Address |
0x45ce60
|
| Ordinal |
104
|
| Address |
0x473380
|
| Ordinal |
105
|
| Address |
0x47dcb0
|
| Ordinal |
106
|
| Address |
0x1d0150
|
| Ordinal |
107
|
| Address |
0x1d6cd0
|
| Ordinal |
108
|
| Address |
0x1eb370
|
| Ordinal |
109
|
| Address |
0x1ebcc0
|
| Ordinal |
110
|
| Address |
0x1e8650
|
| Ordinal |
111
|
| Address |
0x1ef740
|
| Ordinal |
112
|
| Address |
0x1eaae0
|
| Ordinal |
113
|
| Address |
0x1fb150
|
| Ordinal |
114
|
| Address |
0x1e8780
|
| Ordinal |
115
|
| Address |
0x1ff860
|
| Ordinal |
116
|
| Address |
0x1fcac0
|
| Ordinal |
117
|
| Address |
0x1fc8a0
|
| Ordinal |
118
|
| Address |
0x1fc780
|
| Ordinal |
119
|
| Address |
0x166240
|
| Ordinal |
120
|
| Address |
0x1f45d0
|
| Ordinal |
121
|
| Address |
0x1f6530
|
| Ordinal |
122
|
| Address |
0x1e3ac0
|
| Ordinal |
123
|
| Address |
0x1f81f0
|
| Ordinal |
124
|
| Address |
0x1eb2b0
|
| Ordinal |
125
|
| Address |
0x1e0c90
|
| Ordinal |
126
|
| Address |
0x1dca60
|
| Ordinal |
127
|
| Address |
0x1f9e50
|
| Ordinal |
128
|
| Address |
0x1d8d50
|
| Ordinal |
129
|
| Address |
0x1d8c50
|
| Ordinal |
130
|
| Address |
0x1e5780
|
| Ordinal |
131
|
| Address |
0x1eb560
|
| Ordinal |
132
|
| Address |
0x1e8360
|
| Ordinal |
133
|
| Address |
0x1ecf00
|
| Ordinal |
134
|
| Address |
0x1f2eb0
|
| Ordinal |
135
|
| Address |
0x1ead20
|
| Ordinal |
136
|
| Address |
0x1ed120
|
| Ordinal |
137
|
| Address |
0x1e8530
|
| Ordinal |
138
|
| Address |
0x1eb8e0
|
| Ordinal |
139
|
| Address |
0x1dfed0
|
| Ordinal |
140
|
| Address |
0x1e4300
|
| Ordinal |
141
|
| Address |
0x1fbde0
|
| Ordinal |
142
|
| Address |
0x1e3b90
|
| Ordinal |
143
|
| Address |
0x162b70
|
| Ordinal |
144
|
| Address |
0x176080
|
| Ordinal |
145
|
| Address |
0x15bf70
|
| Ordinal |
146
|
| Address |
0x172f30
|
| Ordinal |
147
|
| Address |
0x173120
|
| Ordinal |
148
|
| Address |
0x173180
|
| Ordinal |
149
|
| Address |
0x1d0130
|
| Ordinal |
150
|
| Address |
0x118ea0
|
| Ordinal |
151
|
| Address |
0x1d0120
|
| Ordinal |
152
|
| Address |
0x1d0110
|
| Ordinal |
153
|
| Address |
0x47da90
|
| Ordinal |
154
|
| Address |
0x1d0110
|
| Ordinal |
155
|
| Address |
0x1d0140
|
| Ordinal |
156
|
| Address |
0x1d0130
|
| Ordinal |
157
|
| Address |
0x45eb40
|
| Ordinal |
158
|
| Address |
0x1d0650
|
| Ordinal |
159
|
| Address |
0x172d00
|
| Ordinal |
160
|
| Address |
0x149b30
|
| Ordinal |
161
|
| Address |
0x4633d0
|
| Ordinal |
162
|
| Address |
0x463880
|
| Ordinal |
163
|
| Address |
0x1d0750
|
| Ordinal |
164
|
| Address |
0x15bc10
|
| Ordinal |
165
|
| Address |
0x174220
|
| Ordinal |
166
|
| Address |
0x1743e0
|
| Ordinal |
167
|
| Address |
0x17e490
|
| Ordinal |
168
|
| Address |
0x466b30
|
| Ordinal |
169
|
| Address |
0x464330
|
| Ordinal |
170
|
| Address |
0x47f1a0
|
| Ordinal |
171
|
| Address |
0x4807b0
|
| Ordinal |
172
|
| Address |
0x1d2970
|
| Ordinal |
173
|
| Address |
0x1d2a40
|
| Ordinal |
174
|
| Address |
0x1d2b00
|
| Ordinal |
175
|
| Address |
0x1e7a60
|
| Ordinal |
176
|
| Address |
0x1e7a10
|
| Ordinal |
177
|
| Address |
0x4604e0
|
| Ordinal |
178
|
| Address |
0x17df10
|
| Ordinal |
179
|
| Address |
0x1d01d0
|
| Ordinal |
180
|
| Address |
0x1d0260
|
| Ordinal |
181
|
| Address |
0x15bf50
|
| Ordinal |
182
|
| Address |
0x172cf0
|
| Ordinal |
183
|
| Address |
0x17e520
|
| Ordinal |
184
|
| Address |
0x462ff0
|
| Ordinal |
185
|
| Address |
0x46fa50
|
| Ordinal |
186
|
| Address |
0x46fa50
|
| Ordinal |
187
|
| Address |
0x47d8f0
|
| Ordinal |
188
|
| Address |
0x1d0270
|
| Ordinal |
189
|
| Address |
0x1d0870
|
| Ordinal |
190
|
| Address |
0x49d020
|
| Ordinal |
191
|
| Address |
0x463450
|
| Ordinal |
192
|
| Address |
0x463870
|
| Ordinal |
193
|
| Address |
0x4703e0
|
| Ordinal |
194
|
| Address |
0x463890
|
| Ordinal |
195
|
| Address |
0x15c870
|
| Ordinal |
196
|
| Address |
0x47c070
|
| Ordinal |
197
|
| Address |
0x1d0180
|
| Ordinal |
198
|
| Address |
0x1d0660
|
| Ordinal |
199
|
| Address |
0x1cc800
|
| Ordinal |
200
|
| Address |
0x1e7ca0
|
| Ordinal |
201
|
| Address |
0x1e7ac0
|
| Ordinal |
202
|
| Address |
0x17da30
|
| Ordinal |
203
|
| Address |
0x47a070
|
| Ordinal |
204
|
| Address |
0x477e70
|
| Ordinal |
205
|
| Address |
0x46e520
|
| Ordinal |
206
|
| Address |
0x476890
|
| Ordinal |
207
|
| Address |
0x472b60
|
| Ordinal |
208
|
| Address |
0x164ad0
|
| Ordinal |
209
|
| Address |
0x47b1b0
|
| Ordinal |
210
|
| Address |
0x17e4a0
|
| Ordinal |
211
|
| Address |
0x49dd60
|
| Ordinal |
212
|
| Address |
0x1e7d60
|
| Ordinal |
213
|
| Address |
0x1d01c0
|
| Ordinal |
214
|
| Address |
0x1d0970
|
| Ordinal |
215
|
| Address |
0x1d08f0
|
| Ordinal |
216
|
| Address |
0x463280
|
| Ordinal |
217
|
| Address |
0x463280
|
| Ordinal |
218
|
| Address |
0x4664b0
|
| Ordinal |
219
|
| Address |
0x46c980
|
| Ordinal |
220
|
| Address |
0x15bf60
|
| Ordinal |
221
|
| Address |
0x17e4b0
|
| Ordinal |
222
|
| Address |
0x46f8a0
|
| Ordinal |
223
|
| Address |
0x17e500
|
| Ordinal |
224
|
| Address |
0x172d50
|
| Ordinal |
225
|
| Address |
0x172d60
|
| Ordinal |
226
|
| Address |
0x172dc0
|
| Ordinal |
227
|
| Address |
0x1d07a0
|
| Ordinal |
228
|
| Address |
0x15c880
|
| Ordinal |
229
|
| Address |
0x175960
|
| Ordinal |
230
|
| Address |
0x493700
|
| Ordinal |
231
|
| Address |
0x497c90
|
| Ordinal |
232
|
| Address |
0x469770
|
| Ordinal |
233
|
| Address |
0x465270
|
| Ordinal |
234
|
| Address |
0x47f2c0
|
| Ordinal |
235
|
| Address |
0x47f1e0
|
| Ordinal |
236
|
| Address |
0x1d3a40
|
| Ordinal |
237
|
| Address |
0x1e7de0
|
| Ordinal |
238
|
| Address |
0x15e420
|
| Ordinal |
239
|
| Address |
0x1d0290
|
| Ordinal |
240
|
| Address |
0x163720
|
| Ordinal |
241
|
| Address |
0x162b80
|
| Ordinal |
242
|
| Address |
0x47c670
|
| Ordinal |
243
|
| Address |
0x172ac0
|
| Ordinal |
244
|
| Address |
0x463540
|
| Ordinal |
245
|
| Address |
0x1d0630
|
| Ordinal |
246
|
| Address |
0x463290
|
| Ordinal |
247
|
| Address |
0x4640e0
|
| Ordinal |
248
|
| Address |
0x1a8320
|
| Ordinal |
249
|
| Address |
0x463820
|
| Ordinal |
250
|
| Address |
0x17e510
|
| Ordinal |
251
|
| Address |
0x1743f0
|
| Ordinal |
252
|
| Address |
0x462db0
|
| Ordinal |
253
|
| Address |
0x1e78c0
|
| Ordinal |
254
|
| Address |
0x1e78f0
|
| Ordinal |
255
|
| Address |
0x1d2930
|
| Ordinal |
256
|
| Address |
0x1d28f0
|
| Ordinal |
257
|
| Address |
0x1d2870
|
| Ordinal |
258
|
| Address |
0x1d28b0
|
| Ordinal |
259
|
| Address |
0x1e7890
|
| Ordinal |
260
|
| Address |
0x1cc350
|
| Ordinal |
261
|
| Address |
0x15bf60
|
| Ordinal |
262
|
| Address |
0x4709e0
|
| Ordinal |
263
|
| Address |
0x118ea0
|
| Ordinal |
264
|
| Address |
0x1e2a00
|
| Ordinal |
265
|
| Address |
0x1e3260
|
| Ordinal |
266
|
| Address |
0x4630b0
|
| Ordinal |
267
|
| Address |
0x15bf60
|
| Ordinal |
268
|
| Address |
0x1d01e0
|
| Ordinal |
269
|
| Address |
0x163f20
|
| Ordinal |
270
|
| Address |
0x1fbb90
|
| Ordinal |
271
|
| Address |
0x1d02f0
|
| Ordinal |
272
|
| Address |
0x46d440
|
| Ordinal |
273
|
| Address |
0x4664c0
|
| Ordinal |
274
|
| Address |
0x1d2470
|
| Ordinal |
275
|
| Address |
0x1e74e0
|
| Type |
RT_ICON
|
| Language |
UNKNOWN
|
| Codepage |
UNKNOWN
|
| Size |
0x2e8
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
4.2267
|
| MD5 |
47750271774f85cae3c823ba297758da
|
| SHA1 |
7eec27df29585e572396838a65a950e44968684a
|
| SHA256 |
9677b8587d18c9459e65470340156de33d8d76ceba6ebba63b8d73f44f26a805
|
| SHA3 |
12c3849e52856029ed4ead9a6fd48db0973b397bfdcac570041f013818984b84
|
| Type |
RT_ICON
|
| Language |
UNKNOWN
|
| Codepage |
UNKNOWN
|
| Size |
0x1e8
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
4.13849
|
| MD5 |
bc040faedac63274cb85116a275ce96d
|
| SHA1 |
df1be51d374e47857b57ce6bcef73128f62a3069
|
| SHA256 |
deee7ae780243f85a1757de57c56978e7f2440881eff2af6ecbd98dcfbef20c7
|
| SHA3 |
5deb84ab315c418270d158c9f517d1f4fdb4e83f1197c04a781673c9dff61d8f
|
| Type |
RT_ICON
|
| Language |
UNKNOWN
|
| Codepage |
UNKNOWN
|
| Size |
0x128
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
3.84817
|
| MD5 |
207192fbc850b7e7c8aa5edb4e11b818
|
| SHA1 |
de0349944d435c934f4fb6badf04c9b82bb636a4
|
| SHA256 |
52bbfead1d4735ec714ff31c0135154026d0e8b29de542c1e1849ba4a50cda8f
|
| SHA3 |
27e9eea746179421889ada66e565ffc9c656bde43579d7bf440683eb1de86186
|
| Type |
RT_ICON
|
| Language |
UNKNOWN
|
| Codepage |
UNKNOWN
|
| Size |
0xea8
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
5.45021
|
| MD5 |
c616e815113d474a3146cca7f6ba30c9
|
| SHA1 |
b1a3184fc56132d66b0f2addc1a32e88721c5c1f
|
| SHA256 |
4444b381932d43b955ceb74c5d08f22b718dc79f2ce5029cac95aa1e77be162c
|
| SHA3 |
8a51c3fd42fe82e36db80d0ec50ceb0029f75c535355f9f9cc7c97d90e81ad9c
|
| Type |
RT_ICON
|
| Language |
UNKNOWN
|
| Codepage |
UNKNOWN
|
| Size |
0x8a8
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
5.80111
|
| MD5 |
d57faae3fbf5446f3cc07f811aabb062
|
| SHA1 |
5c047b028e2f117d14f15d893645b5bfa1fc27a8
|
| SHA256 |
7ff6a43d26e506f5d83789089239f6cb9083caaa471c4382f57caf9a66502fb6
|
| SHA3 |
6a091def1cc947d5d83d601e3145be61961a715fd2186259827ded88bf085b4b
|
| Type |
RT_ICON
|
| Language |
UNKNOWN
|
| Codepage |
UNKNOWN
|
| Size |
0x6c8
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
5.46219
|
| MD5 |
c9d082095690fa1b37fee65fe540c87b
|
| SHA1 |
b39dfb01020f7e2147ef40ca08b622171d4a3206
|
| SHA256 |
5c9fed68bc2e06009352ca1b1428cbfe942f3a00b256873e19c5025c8e5e89d2
|
| SHA3 |
d1ebbcc188498a5b69cc2baf1a1a88c256f4c75df99d722eaf6156ef1c84078e
|
| Type |
RT_ICON
|
| Language |
UNKNOWN
|
| Codepage |
UNKNOWN
|
| Size |
0x568
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
5.2203
|
| MD5 |
861c6977da9a6a0954c54a3f3e9d0c6f
|
| SHA1 |
9296c9aa352b08687952d629182e7946aaf0fde4
|
| SHA256 |
7df610427774a69de05808160263798dc7e30e16182be60fe6c95a0b09f1795f
|
| SHA3 |
ce254f0bda101eaa078a7b6d034343b1766cefb8b0090d4507c7b6ae67f1269f
|
| Type |
RT_ICON
|
| Language |
UNKNOWN
|
| Codepage |
UNKNOWN
|
| Size |
0x25a8
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
5.09742
|
| MD5 |
add4388b5f099ca84f1655a614915e24
|
| SHA1 |
2732491c638ce5902664090131a44b61368b0148
|
| SHA256 |
b0211734f5e7f4250dc7348a860985845aa6226135ef316c1b0be556a20b28da
|
| SHA3 |
d10b3185a215b5ef6203e3ca8181115069ffd28c9edfc11e1aa9a52da443e692
|
| Type |
RT_ICON
|
| Language |
UNKNOWN
|
| Codepage |
UNKNOWN
|
| Size |
0x10a8
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
5.64687
|
| MD5 |
aa4627b7ebebe89faeb4d43a4b5c5e2c
|
| SHA1 |
24cd0b478092ccf96a1039ac6d1d015d3111689a
|
| SHA256 |
6ee0e39b86cf0a04735a81fb0c148e4b0a1cb61a55b903d1365a8bea862794fe
|
| SHA3 |
fdc1fa9539549759a1efade18953d2defe3080c1279515a5feb87ffceb12f50d
|
| Type |
RT_ICON
|
| Language |
UNKNOWN
|
| Codepage |
UNKNOWN
|
| Size |
0x988
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
5.59847
|
| MD5 |
49949d12fe7749020ec006556a61cb06
|
| SHA1 |
a0d83d2555bd77e6fa1cc518d7b9357460325d87
|
| SHA256 |
e090ccd00cc88be8bfc08edd7836622a10506b8e075cd9ff0ea3bada38a395f0
|
| SHA3 |
bfd8c36ed510515d543b064aa4f5eeaa4ebaf0d3600a51da325dd316f8d493f6
|
| Type |
RT_ICON
|
| Language |
UNKNOWN
|
| Codepage |
UNKNOWN
|
| Size |
0x468
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
5.93755
|
| MD5 |
e531bb9930b36dd452dafdac984adda4
|
| SHA1 |
5e321409d55915fd0fd80aa2fe36888d684d300b
|
| SHA256 |
dc4399c2e69941870f8a685bda56cc1997d1e517291e498baaed66a9c255c3ea
|
| SHA3 |
de5c35efb89bed43a928166d1cfbc33c063723eb05ef0c7e592355a598159bc2
|
| Type |
RT_STRING
|
| Language |
UNKNOWN
|
| Codepage |
UNKNOWN
|
| Size |
0xb0
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
2.75364
|
| MD5 |
6b249a1cbabd257041deb41a676a6875
|
| SHA1 |
82c30a6c32e4e54c5d526a133a3074860be5831f
|
| SHA256 |
1cbf8d21cb93ee9ae512d4b814ea3c6f956a1f5cf35770dd4108c49b6b3c1eca
|
| SHA3 |
d9eebdf4a8bba5062597ee90142e12a3365b755c29c87592f87263edf5192023
|
| Type |
RT_GROUP_ICON
|
| Language |
UNKNOWN
|
| Codepage |
UNKNOWN
|
| Size |
0xa0
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
3.02235
|
| Detected Filetype |
Icon file
|
| MD5 |
4c341bfcc5b1d317fbb00194c26214c8
|
| SHA1 |
6e1ca7bc89c55acbbac48c2773d0d3dea84363e1
|
| SHA256 |
4bb0a2482f42edfa66768eb6fc48df719d20f5748fe9b44f747aee7c76d342f3
|
| SHA3 |
3e2bc93c75152d69eaf8f6710ca1f674b1fa1733a2e809b6f71f5159ab438412
|
| Type |
RT_VERSION
|
| Language |
UNKNOWN
|
| Codepage |
UNKNOWN
|
| Size |
0x2ec
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
3.424
|
| MD5 |
a67dd8f1803d71d5356c42382b8cac8f
|
| SHA1 |
d959f3ae26c37bbecc3e8e40d04c3b77e620839f
|
| SHA256 |
0df83d5e0e9b3a3e0fe43a11ffacff80616edcbd8102b0d04e070eaa3da8fe18
|
| SHA3 |
d93ed0ac4bd540ebcdc6403ed8d6541796bccb34aece8c2e452d88bdc73c202b
|
| Type |
RT_MANIFEST
|
| Language |
English - United States
|
| Codepage |
UNKNOWN
|
| Size |
0x31e
|
| TimeDateStamp |
1980-Jan-01 00:00:00
|
| Entropy |
5.11673
|
| MD5 |
f180bf36c92968767ce1b354441ef2cc
|
| SHA1 |
434b8a298f3af4fbd16c71d8ca0a601d199366a7
|
| SHA256 |
f0247a0621b4007c7ea536026c5297c6f1c1777dde8c763e9d7b690999f754c0
|
| SHA3 |
7c9c7f681da91a71b3010c8ba06c2ad6e6f46f0d6d65b7f9d5bfea2fea14548d
|
| QUICKSURFACE |
| \QUICKSURFACE |
|
| \QUICKSURFACE.Document\QUICKSURFACE.Document |
| Signature |
0xfeef04bd
|
| StructVersion |
0x10000
|
| FileVersion |
8.0.61.0
|
| ProductVersion |
8.0.61.0
|
| FileFlags |
(EMPTY)
|
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language |
UNKNOWN
|
| CompanyName |
KVS Ltd
|
| FileDescription |
QUICKSURFACE
|
| FileVersion (#2) |
8.0.61.0
|
| InternalName |
quicksurface.exe
|
| LegalCopyright |
Copyright (c) 2018-2026 KVS Ltd
|
| OriginalFilename |
quicksurface.exe
|
| ProductName |
QUICKSURFACE
|
| ProductVersion (#2) |
8.0.61.0
|
| XOR Key |
0xba803ebc
|
| Unmarked objects |
0
|
| Imports (VS2008 SP1 build 30729) |
22
|
| C objects (VS2008 SP1 build 30729) |
4
|
| Imports (2207) |
2
|
| 199 (41118) |
2
|
| C objects (VS 2015/2017 runtime 26706) |
10
|
| ASM objects (VS 2015/2017 runtime 26706) |
3
|
| C++ objects (VS 2015/2017 runtime 26706) |
46
|
| Imports (VS 2015/2017 runtime 26706) |
8
|
| C++ objects (27054) |
112
|
| Imports (VS2022 (17.0.0-1) compiler 30705) |
2
|
| Imports (27048) |
36
|
| Imports (VS2017 v14.15 compiler 26715) |
41
|
| Total imports |
4480
|
| C++ objects (LTCG) (27054) |
970
|
| Exports (27054) |
1
|
| Resource objects (27054) |
1
|
| 151 |
1
|
| Linker (27054) |
1
|
[!] Error: Could not reach the TLS callback table.
[*] Warning: Section .themida has a size of 0!