c759597e8aa305fd729ede0d3e9e0729bc719c9f2d670ba1f620a028c4574e62

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2018-Aug-02 13:09:59
Detected languages English - United States
TLS Callbacks 1 callback(s) detected.
CompanyName The Elements Browser Authors
FileDescription Elements Browser
FileVersion 64.13.3282.140
InternalName elementsbrowser_exe
LegalCopyright Copyright 2017 The Elements Browser Authors. All rights reserved.
OriginalFilename elementsbrowser.exe
ProductName Elements Browser / 1.1.13
ProductVersion 64.13.3282.140
CompanyShortName The Elements Browser Authors
ProductShortName Elements Browser
LastChange a666f93c834dc52cc3b76d334e1ec60b882c9284-
Official Build 1

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 6.0 - 8.0
Info Interesting strings found in the binary: Contains domain names:
  • chromium.org
  • crashpad.chromium.org
  • https://crashpad.chromium.org
  • https://crashpad.chromium.org/
  • https://crashpad.chromium.org/bug/new
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Uses constants related to MD5
Uses constants related to SHA1
Suspicious The PE is possibly packed. Unusual section name found: _text32
Unusual section name found: CPADinfo
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryExW
  • GetProcAddress
  • LoadLibraryW
  • LoadLibraryExA
 Code injection capabilities:
  • VirtualAlloc
  • OpenProcess
  • VirtualAllocEx
  • WriteProcessMemory
  • CreateRemoteThread
 Code injection capabilities (mapping injection):
  • CreateFileMappingW
  • MapViewOfFile
  • CreateRemoteThread
 Can access the registry:
  • RegCreateKeyExW
  • RegOpenKeyExW
  • RegCloseKey
  • RegQueryValueExW
  • RegDeleteValueW
  • RegSetValueExW
 Possibly launches other programs:
  • CreateProcessAsUserW
  • CreateProcessW
 Can create temporary files:
  • CreateFileW
  • GetTempPathW
 Memory manipulation functions often used by packers:
  • VirtualAlloc
  • VirtualProtect
  • VirtualAllocEx
  • VirtualProtectEx
 Has Internet access capabilities:
  • WinHttpSetTimeouts
  • WinHttpReceiveResponse
  • WinHttpWriteData
  • WinHttpSendRequest
  • WinHttpAddRequestHeaders
  • WinHttpOpenRequest
  • WinHttpConnect
  • WinHttpOpen
  • WinHttpCloseHandle
  • WinHttpQueryHeaders
  • WinHttpReadData
  • WinHttpCrackUrl
 Functions related to the privilege level:
  • OpenProcessToken
  • DuplicateTokenEx
  • DuplicateToken
 Enumerates local disk drives:
  • GetDriveTypeW
 Manipulates other processes:
  • OpenProcess
  • WriteProcessMemory
  • ReadProcessMemory
 Changes object ACLs:
  • SetSecurityInfo
  • SetKernelObjectSecurity
Info The PE is digitally signed. Signer: ELEMENTS BROWSER (Info Software lp)
Issuer: COMODO RSA Code Signing CA
Malicious VirusTotal score: 13/72 (Scanned on 2025-09-29 13:09:05) AVG: Win32:UnwantedX-gen [Bundl]
Avast: Win32:UnwantedX-gen [Bundl]
CAT-QuickHeal: Trojan.Ghanarava.17568007797aa2a3
DeepInstinct: MALICIOUS
DrWeb: Adware.Elemental.6
GData: Win32.Application.ElementsBrowser.A
Gridinsoft: PUP.Win32.Browser.ko!c
Malwarebytes: PUP.Optional.ElementsBrowser
MaxSecure: Adware.AdWare.Win32.DealPly.gen_214095
Rising: PUA.CoinMiner!8.4639 (C64:YzY0OrebYZRg/Cd7)
Sangfor: Adware.Win32.Agent.Uv3d
TrellixENS: Artemis!A0162E984EC2
VBA32: SigAdware.ELEMENTSBROWSER(InfoSoftwarelp)

Hashes

MD5 a0162e984ec2139387db902eb47aa2a3 🔍
SHA1 63ae4f1baff7176e2054c53ff3a23c361c79701f 🔍
SHA256 c759597e8aa305fd729ede0d3e9e0729bc719c9f2d670ba1f620a028c4574e62 🔍
SHA3 495e6bc8ed10f3011095037c2af93a6e002949e042c8b1bb897895de16950d4b 🔍
SSDeep 24576:bXlOD7i2Xj5XJdwKkQtaNVfFhKKXBAVE7x7f4iTjd+a25/LgOR:ckQtmFhKuSVEd4iT4XxR 🔍
Imports Hash f389e6abd29245fa619364cd86b18109 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x130

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 8
TimeDateStamp 2018-Aug-02 13:09:59
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32
LinkerVersion 14.0
SizeOfCode 0xf4400
SizeOfInitializedData 0x77e00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000C08A0 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0xf6000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 5.1
ImageVersion 0.0
SubsystemVersion 5.1
Win32VersionValue 0
SizeOfImage 0x172000
SizeOfHeaders 0x400
Checksum 0x16eca1
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 e75a04390d34f1182e0c423b38b03ac3 🔍
SHA1 36245af58dcbf9c16b07b1a870a80c0f4f02b4c4 🔍
SHA256 2c13f8e7be33b52b56f3a909bf20dcc950f6fa94773f07ce20b42c58cddc38b5 🔍
SHA3 d88279ab28d9d6aea670ebc47c80c3bbbad025823b8672f327988ba183337255 🔍
VirtualSize 0xe423f
VirtualAddress 0x1000
SizeOfRawData 0xe4400
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.71136

_text32

MD5 3c8e82eb2d084efb406845f957392867 🔍
SHA1 744d35e39269adb6714cbf1dc3aced1bc0b8f225 🔍
SHA256 704d5095ef7b4cdb9fe329652e92ca73864fb27cb81b99d1e952f52a9c6fb20f 🔍
SHA3 ec15d5ca74d44544a0e806511d1eb6b3aada5a75365bdccce55ab165ec5994f9 🔍
VirtualSize 0xfe88
VirtualAddress 0xe6000
SizeOfRawData 0x10000
PointerToRawData 0xe4800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.17409

.rdata

MD5 810b38a7560393b42530b4c791627c69 🔍
SHA1 77a68a251f2251473b1b85ebffca7d3f471b5be4 🔍
SHA256 3d5079474355d60d60b496ff346764141032bc9d3d3003610195202dab88cfea 🔍
SHA3 ba27c2b71bc80b6d963eccc601f9623f734747c6ba2daa68e412b3a677d00af6 🔍
VirtualSize 0x48528
VirtualAddress 0xf6000
SizeOfRawData 0x48600
PointerToRawData 0xf4800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.01749

.data

MD5 8f767223c56f7179fd3ac8f51bc98148 🔍
SHA1 5ccacecb893935dbe74e3e1032ecc15e595b6476 🔍
SHA256 a78818747618f03cfd92eeb56b31667a07315ddbea35210adcff477f01bcc97e 🔍
SHA3 7ae6aedc649bb9fd426d680eefd3b7049bd8a4d31604a09139add77b8e495135 🔍
VirtualSize 0x4cd0
VirtualAddress 0x13f000
SizeOfRawData 0x1a00
PointerToRawData 0x13ce00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.51236

.didat

MD5 9f6c510ac4024bfd94741220a465db71 🔍
SHA1 7d101a8b872c69a51203d448c8109d9e3fd98e02 🔍
SHA256 3658630b3e0e3d3b149f316cfca83188bb2c114b3d3c64099c3f8dea0e143b8c 🔍
SHA3 2133400d5e7bd81863b803d7cfd40127d9d255c171cf1e9a974c19ce1df273fd 🔍
VirtualSize 0x20
VirtualAddress 0x144000
SizeOfRawData 0x200
PointerToRawData 0x13e800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.286739

CPADinfo

MD5 842689af09e7bf563672a4b43f1a2286 🔍
SHA1 87fd79e9cdafca9f691aeb6345b577953f4f53d0 🔍
SHA256 c6ab4dedabd0103aa45921ac166f6a9046356cb6073e10e06a3a8503472530cf 🔍
SHA3 abbb3e8624739cecd33afe9b57a68095eefc456c46e7dcc62374ca1c59012890 🔍
VirtualSize 0x28
VirtualAddress 0x145000
SizeOfRawData 0x200
PointerToRawData 0x13ea00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.122276

.rsrc

MD5 4f7330f1f48256fbb94bc5f02d7f6987 🔍
SHA1 c8bdeb680671ed1ca7ee0b19f10f5b40e1521814 🔍
SHA256 5a4736d4b2f5e87f7cb244d6a080e45f63929da1ba529381e8a95c0b384e3c37 🔍
SHA3 9cd1559142e7f53e419989c92b7248ab4c1aef6e368643fa7441b10d4d7367e4 🔍
VirtualSize 0x21070
VirtualAddress 0x146000
SizeOfRawData 0x21200
PointerToRawData 0x13ec00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.37998

.reloc

MD5 c9f8d53a3eb30df6c8635793c5e022ab 🔍
SHA1 47235b6165aca20f9f5b2cf36a1cffe8a0e67cb9 🔍
SHA256 a95cd921e5b747984caee425a52ed15c1121b104afb31731abf4247aef510e68 🔍
SHA3 32757a07a5e02c0cf3b7095f314b326b265d25a799bcdff344835011f05c5121 🔍
VirtualSize 0x93e4
VirtualAddress 0x168000
SizeOfRawData 0x9400
PointerToRawData 0x15fe00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.68916

Imports

elementsbrowser_elf.dll GetInstallDetailsPayload
SignalChromeElf
SignalInitializeCrashReporting
ADVAPI32.dll ImpersonateNamedPipeClient
SetEntriesInAclW
GetSecurityInfo
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegDeleteValueW
RegSetValueExW
OpenProcessToken
GetTokenInformation
ConvertSidToStringSidW
CreateProcessAsUserW
EventRegister
EventUnregister
EventWrite
SystemFunction036
RevertToSelf
RegDisablePredefinedCache
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityInfo
ConvertStringSidToSidW
GetLengthSid
SetTokenInformation
GetKernelObjectSecurity
GetAce
SetKernelObjectSecurity
DuplicateTokenEx
SetThreadToken
CreateRestrictedToken
DuplicateToken
EqualSid
LookupPrivilegeValueW
CopySid
CreateWellKnownSid
KERNEL32.dll GetVersion
SleepEx
GetModuleFileNameW
CreateEventW
GetLastError
SetLastError
GetCurrentThreadId
GetCurrentProcess
DuplicateHandle
GetProcessId
WaitForSingleObject
SetCurrentDirectoryW
LoadLibraryExW
GetProcAddress
SetProcessShutdownParameters
VirtualAlloc
VirtualFree
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ReleaseSRWLockExclusive
GetCommandLineW
LocalFree
GetThreadId
GetModuleHandleA
IsDebuggerPresent
GetCurrentProcessId
OpenProcess
CloseHandle
RtlCaptureStackBackTrace
SetUnhandledExceptionFilter
GetCurrentThread
GetUserDefaultLangID
FindNextFileW
FindClose
FindFirstFileExW
GetFileAttributesW
GetModuleHandleW
VirtualQuery
VirtualProtect
GetModuleHandleExW
SetEnvironmentVariableW
GetEnvironmentVariableW
LoadLibraryW
GetLocaleInfoW
FreeLibrary
UnregisterWaitEx
RegisterWaitForSingleObject
ExpandEnvironmentStringsW
Sleep
GetTickCount
GetVersionExW
GetNativeSystemInfo
GetSystemDirectoryW
GetWindowsDirectoryW
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
IsWow64Process
RaiseException
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
GetSystemTimeAsFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
QueryPerformanceFrequency
QueryPerformanceCounter
QueryThreadCycleTime
GetThreadPriority
SetThreadPriority
FlushViewOfFile
TerminateProcess
GetExitCodeProcess
CreateProcessW
AssignProcessToJobObject
ResumeThread
SetHandleInformation
SetInformationJobObject
GetStdHandle
ReadFile
HeapSetInformation
GetProcessTimes
GetSystemInfo
VirtualQueryEx
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
SetEvent
ResetEvent
CreateNamedPipeW
CreateFileW
ConnectNamedPipe
WriteFile
PeekNamedPipe
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
SetFileAttributesW
DeleteFileW
RemoveDirectoryW
MoveFileExW
MoveFileW
ReplaceFileW
CreateDirectoryW
CopyFileW
GetTempPathW
QueryDosDeviceW
GetCurrentDirectoryW
SetFilePointerEx
GetFileSizeEx
SetEndOfFile
GetFileInformationByHandle
FlushFileBuffers
GetLocalTime
FormatMessageA
OutputDebugStringA
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
TlsGetValue
CreateThread
TlsSetValue
TlsAlloc
TlsFree
InitializeCriticalSectionAndSpinCount
DecodePointer
CreateSemaphoreW
ReleaseSemaphore
InitOnceExecuteOnce
GetTimeZoneInformation
OutputDebugStringW
GetComputerNameExW
LockFileEx
UnlockFileEx
GetFileType
SetConsoleCtrlHandler
VirtualAllocEx
TerminateJobObject
GetUserDefaultLCID
ProcessIdToSessionId
WriteProcessMemory
GetProcessHandleCount
GetProcessHeaps
SignalObjectAndWait
VirtualProtectEx
ReadProcessMemory
VirtualFreeEx
CreateRemoteThread
CreateJobObjectW
CreateMutexW
SearchPathW
lstrlenW
DebugBreak
LoadLibraryExA
GetThreadTimes
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
EnumSystemLocalesW
IsValidLocale
ReadConsoleW
GetACP
GetConsoleMode
GetConsoleCP
GetFullPathNameW
SetStdHandle
GetDriveTypeW
RtlUnwind
GetCPInfo
LCMapStringW
CompareStringW
EncodePointer
GetStringTypeW
GetStartupInfoW
InitializeSListHead
IsProcessorFeaturePresent
UnhandledExceptionFilter
WaitForSingleObjectEx
GetLongPathNameW
DisconnectNamedPipe
WaitNamedPipeW
SetNamedPipeHandleState
TransactNamedPipe
SuspendThread
GetThreadContext
GetThreadLocale
GetSystemDefaultLCID
GetFileInformationByHandleEx
PSAPI.DLL GetProcessMemoryInfo
GetPerformanceInfo
QueryWorkingSetEx
SHELL32.dll SHGetFolderPathW
SHGetKnownFolderPath
CommandLineToArgvW
SHLWAPI.dll PathMatchSpecW
USER32.dll SetProcessWindowStation
GetThreadDesktop
CreateWindowStationW
RegisterClassW
CloseWindowStation
CloseDesktop
wsprintfW
GetUserObjectInformationW
GetMessageW
GetProcessWindowStation
IsWindow
SendMessageTimeoutW
AllowSetForegroundWindow
TranslateMessage
PostQuitMessage
MsgWaitForMultipleObjectsEx
GetQueueStatus
SetTimer
PostMessageW
KillTimer
UnregisterClassW
SetProcessDPIAware
GetWindowThreadProcessId
DispatchMessageW
PeekMessageW
DefWindowProcW
SetWindowLongW
GetWindowLongW
FindWindowExW
CreateWindowExW
DestroyWindow
RegisterClassExW
CreateDesktopW
VERSION.dll VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
WINMM.dll timeBeginPeriod
timeGetTime
timeEndPeriod
WINHTTP.dll WinHttpSetTimeouts
WinHttpReceiveResponse
WinHttpWriteData
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpConnect
WinHttpOpen
WinHttpCloseHandle
WinHttpQueryHeaders
WinHttpReadData
WinHttpCrackUrl
dbghelp.dll (delay-loaded) MiniDumpWriteDump

Delayed Imports

Attributes 0x1
Name dbghelp.dll
ModuleHandle 0x142488
DelayImportAddressTable 0x144008
DelayImportNameTable 0x13c6f4
BoundDelayImportTable 0x13c770
UnloadDelayImportTable 0
TimeStamp 1970-Jan-01 00:00:00

GetHandleVerifier

Ordinal 1
Address 0x1aec0

IsSandboxedProcess

Ordinal 2
Address 0x7bb20

1

Type GOOGLEUPDATEAPPLICATIONCOMMANDS
Language English - United States
Codepage UNKNOWN
Size 0x4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.811278
MD5 4352d88a78aa39750bf70cd6f27bcaa5 🔍
SHA1 3c585604e87f855973731fea83e21fab9392d2fc 🔍
SHA256 67abdd721024f0ff4e0b3f4c2fc13bc5bad42d0b7851d456d88d203d15aaa450 🔍
SHA3 295cd1698c6ac5bd804a09e50f19f8549475e52db1c6ebd441ed0c7b256e1ddf 🔍

1 (#2)

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.72812
MD5 d4ff4e9e724f25f5265a3b0cd07d03d4 🔍
SHA1 9777e4e59ce089e4c8727910586b325f1cbfe12d 🔍
SHA256 8c5a126b0e59e2927158fe5008c375aeef5396adb797c682e07578d13c283a3f 🔍
SHA3 c75e4c8d4280cd1e4d3a7d59a7d7993be648ff029d47900a843807031484d03d 🔍

2

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.05033
MD5 717434e636786d3d0fb3f571f6109660 🔍
SHA1 2ed8ddea1a94e39f624dd752c1843648e5ad2aa6 🔍
SHA256 06db3222f267c74b72573a349de6a24bcfbb4bba9656d3dd6b50f4f64326e156 🔍
SHA3 11bf1f65e167fb701bcd216f1c0dfafb324c6d5c883989c59fcfcd08d93072a3 🔍

3

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.80214
MD5 97f6acbd9fba8933adafe9cef8193ff7 🔍
SHA1 3fcce71b59dd9806e573170748858cc02c00c260 🔍
SHA256 91baaad720c63aaff01b902deda14e2c8b355c31159b71c481dc6fb67bcbb4cf 🔍
SHA3 d5b9de20cb7ea1c27b6a8500de4b0e2b8b436804b1d70a4ddbd8d77ce60ef340 🔍

4

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.63098
MD5 14a8d213994c484121f0f0d63746601d 🔍
SHA1 3ad42569021b69060eb157875531fa0310b48e86 🔍
SHA256 2d2aea139c8f41675322a459ce75295ac168eb0e925ed5a75c0981b3693069aa 🔍
SHA3 e684a3170b7471ffd03ac8607f9d5d56a3892db7d3d21bc5d4ab9383fbebcb92 🔍

5

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x3c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.20118
MD5 949051d3e4cd407e696581501fef8c1e 🔍
SHA1 cb69313c16a86cac5ba55b5d808cea073ed580c6 🔍
SHA256 e885dbf2a5fce6c41a16ad6e633830cbeaa469512bbf15b8bb4ca51562aec60b 🔍
SHA3 5ffb72c181ab2dfd9d894992179b1f1d3c64c1cbc59b4ce3fd28be6675fb3020 🔍

6

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.55212
MD5 04a6442470e12c4f6931ecd090862ef9 🔍
SHA1 11704afd9e26ca32f68ede4e0c043405722ffba3 🔍
SHA256 a4319fd1d9a81d7a6dc9ef1818d85dc68ded85342754d2f5768e01d0edf46780 🔍
SHA3 37952f4114576bfe8616ef61541c8f81eddef30236d455ce5f74a30d98a8539f 🔍

7

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0xcac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.29146
MD5 db2dc0ce6ad8b8cdc5be830bf79a761b 🔍
SHA1 c9345712f79eed69677a5f165d115624da3de4cf 🔍
SHA256 ff8ccb25e747ead631922be99ebc2004a97295b0b606f40e83f15c2dc2bbbc81 🔍
SHA3 c0f08c34bfb83c0aebe052470d5b51b2367a2bb61bb911259c200931f6b0d42b 🔍

8

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.17845
MD5 35fffe5c3ef617079a0237e67ada2472 🔍
SHA1 70900b1268464c03c8c5f7192456b7e6efceb1da 🔍
SHA256 860a680c92db087b12dd6bf2ef581979c08ac13ed9657403dab974f387420555 🔍
SHA3 dd8b7568bca263f759c9dffa79fc19cf647abcbfdc473b14d2ac11a86fd45e70 🔍

9

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0xcac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.995644
MD5 1b905e5ca2a21da398c9c73124428505 🔍
SHA1 6f922d03bc5d6ec61789deb9731141893edf55a0 🔍
SHA256 5edad8d3d744070cb51e4dfdb02053a15101c8c954f952e4dfe57a4d7659e5b2 🔍
SHA3 f07b653197b1cf5483179f834c56415c8e7f11f3e59af3a35753df6cd0a94520 🔍

10

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x10ac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.666526
MD5 75bec5efc67babcf530d51321d95ed7e 🔍
SHA1 38eb531d42adfab051bc81ef0590d60a21d77498 🔍
SHA256 3bd84b82f6e6a2cb156d881bdc1f29567d5712ad81d2da33b0ff9cd8a5a9981f 🔍
SHA3 665bc39673c1b61060b16e7572c6520c7d50080a166343540e56f4dd9e233502 🔍

11

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x10ac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.84104
MD5 acd42b137b48d1f19ee65a10fc90814e 🔍
SHA1 d1f9068dee688563ae870c437900709795cc6dbe 🔍
SHA256 d87015c12fb89d2c54c2b1ea0b5f0feaf50bba50cddcf546668c62316597bf2f 🔍
SHA3 eafa118068102c848c31a6c914e40e8de8a682f2c36091294cb30b518fc5e6e5 🔍

12

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x10ac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.670417
MD5 6d9a8875e9bc6d3e9eae95b2b03257ce 🔍
SHA1 b7c15c9636773a47be134736c68bdd339922aeb9 🔍
SHA256 cbb310244272c36ea589f9257476e6c19b1eb6be0cd5193cd5901efd4d184c35 🔍
SHA3 744ffb0101cc0d94ee909ff8cdc163f79773c26af417370d25faffc4bc936155 🔍

13

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x10ac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.659108
MD5 fe9cc0eafbb8e74285bf641fb8e73244 🔍
SHA1 5ab52f22cb2de40638a657785c87df0ae3729fa7 🔍
SHA256 302d274cf49db7ebc8f97dd4320489781da8a44447cbb2a7346ccff84b1b944b 🔍
SHA3 2803d7cd35174ade40efc9c9f338db79b345777a589353be85b7c744e7a3a4fc 🔍

14

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x10ac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.65993
MD5 53fb50fe6ce1aa6722afa878db7289a8 🔍
SHA1 a31cf91b8df398a12b84c5fbd10494b2ff6b749d 🔍
SHA256 bc19a3937fe7fb79cf877d2bea8d1ab4ea30d1a05f4c60d42cf57142c81290e9 🔍
SHA3 6a4d76c847f3ef198074c93c4e25056a081fc8131151daa0473cd2a9394db239 🔍

15

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x10ac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.670417
MD5 12a2030014722c91cddfed04b83be533 🔍
SHA1 c462f3e4e6bc388726ba3d488506d366ea0c6999 🔍
SHA256 9534fac9229e10c53a85e5a6deb4224d12a7a3024b7ff9ccc1cb8717ffd7acaa 🔍
SHA3 11e87ce0be315125dcceaf8d8136b0ec09a3ed22b2fbc4724501aeaf38077e1c 🔍

16

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x10ac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.659108
MD5 94ea73b19eada640886c96389652ec8f 🔍
SHA1 aaaf2828cb9aed84f203efec44e302e5af20bafe 🔍
SHA256 faf155f58e17b8e1a98cc26aaa92597c62dc87ff98555cd708f6684eb8243d4c 🔍
SHA3 cb12ab171e7bf02f1c82573cf89cac99f83e304a66f3c4137bf54d4b742f4e7c 🔍

17

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x10ac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.65993
MD5 2dc824995511736d22408fb4dba702ba 🔍
SHA1 9aac0c12e6f517872128083df0f5b1105d6d8e7c 🔍
SHA256 f4bcc6750981e15e3fc8c751997156f4df9055cece8d16944e4dea2ce4bc911b 🔍
SHA3 56d609cc52f073b584c7138bb6349751b24e07fe66ba60fb56ea997b8bb1f078 🔍

18

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x10ac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.799151
MD5 6505e57c301902618e8f1d070667db1a 🔍
SHA1 c8a96d9801db8e9550741da0e8f4a55655253281 🔍
SHA256 787dc2d9d3f4034a91bd222034d01eafb01e1053ac3579a0fd033f141dcccb69 🔍
SHA3 92104dc773f9195f1795235be40b81774a87b52603a7e3089d48780829cf7bae 🔍

19

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.65872
MD5 ea82e850caed8b7eda4b753fb9d8c03a 🔍
SHA1 699e1bb7f568456fcc41c9ed9ecc9089d640d6a1 🔍
SHA256 236462dd2d629d67ff18c41f41cfa739549aff2933f7df2bd51630790b4d424e 🔍
SHA3 7cc9d637e593f742566b68ce8dd23201f2097429a4f48d55993f87da0d726754 🔍

20

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.46615
MD5 ff49a9a5c7e188634136611a03c441ed 🔍
SHA1 756344327134a9f9c1404185baaad435bf0a53fc 🔍
SHA256 3eba69eaec7cef56d2c964dee1f9c0226a365b3ae869a402690d548c82c16ba3 🔍
SHA3 a5bebb0afb2d86976c02d4f2befc5fa28d496be24ad98a8611055f9d67683c27 🔍

21

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.08719
MD5 b490b06239b76334192a94969717671b 🔍
SHA1 3f19007fbd45bebdd6fe4235fb95517bf67911c1 🔍
SHA256 2a53b434f3ab8d37381a5461163027d2a256f0bda3ea8f65795ed6d2c66b4e30 🔍
SHA3 5217b671e39ef4e252e5fa4e6b4f1a05d89627e53702a0842d0c9504b7aa3ee6 🔍

22

Type RT_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.07143
MD5 aac863f48e2b416af0febc82cd648345 🔍
SHA1 f4bec546c4c140e4436ca28d82148997a56f1ac0 🔍
SHA256 5b4c85e7d881d8c74760c07f9e4fe3d7427a72bed0e379aed6a78f7cbeca3199 🔍
SHA3 3c0698cb59f54d170bb85287b6fc265cf78e0a7a8b2502718f0c7899fdc95685 🔍

1 (#3)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.98669
MD5 428879af1802563e84d082b2a4f4fb9f 🔍
SHA1 be05c023f09d199e735d3a1bf362b1cf7ed5e05f 🔍
SHA256 463a88fa291c8b00a68e1d992ce149e670f73c5532c0a06468e9ce04a291e442 🔍
SHA3 6f3d88e35043d9fdea65799ea7e4ecea347ea2d8fa526461c68eb3c8d08ed5d3 🔍

2 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.58206
MD5 38240b04b65e4ac0204376e6cab013c2 🔍
SHA1 8174207d3642c52716f78eb936e84c6d58794a8e 🔍
SHA256 4ed1dffde7698fd776dde46a9b2f73a283c8b64ddb542cf5af473905356bf2d8 🔍
SHA3 49ef648367203f1895fd01af514cf56bdd3dedc7397e6d348bfef1d369200592 🔍

3 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.40055
MD5 63042da08fbed8c64f2ca6dd5a97136b 🔍
SHA1 838a29128219b43a635c0b17045355c8b539ef75 🔍
SHA256 cea5278a7d4aefdbd3963b0d8c3ebc20a6adf1f1d4dfa9d31ba124edc93bb88b 🔍
SHA3 810eb6fddd31be9a59b27a86894f91035dffa52fd7db5c52f0a0d75c5c5a36a9 🔍

4 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2d8d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.91744
Detected Filetype PNG graphic file
MD5 3c9077503fa4aba5c6fbe9f36d5257e7 🔍
SHA1 a20bed002078edcf885860176b6017b25e222b6c 🔍
SHA256 fcd5269d914d06d93a4ea3d4e3d0efa9c9a0da686691b4fc7f4e6f267edf0075 🔍
SHA3 5938c0d65f96390dde4bd4c32ad716019091004275d5cc7db3f45fbf61d9513d 🔍

5 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.1064
MD5 a51277562f1bb57a72bb8053a460ad46 🔍
SHA1 81d405b38917df696c6320f9b9242f64aa321568 🔍
SHA256 809267a4699b04502ef24a30bbf65460f2915673279eb687fc4a22e5441051db 🔍
SHA3 cfb7a35c7d7fbc6a458f03d6b6ff529cdf88e5ab1da4777aec45bf2f9593e5ab 🔍

6 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.9814
MD5 0573d6cac6084e79d937e012377b6f82 🔍
SHA1 e2625309d0ae89cc0cd22cd90b4cd1fd016630d9 🔍
SHA256 f787df69eb448aea4d4ac4d254a84e0f28a1c8fe98c97b39c631893d0c71f21e 🔍
SHA3 c977e3d1cbef40c2571297b3380936355a3d028e2df986058180c885c49a8bd8 🔍

7 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.35535
MD5 54fb8bd694a190d5cb2e1ae016cf53c0 🔍
SHA1 71904d0aedf6a9b2ffa62d7b11811b38c6a4b013 🔍
SHA256 6498986c860a0b6408f7876a373b8f47e7bd1b5aa94dff0415a2a9c0b40480d9 🔍
SHA3 d4b35cc62c6be748e4c9a2112f3b32e5e73ae8ce9aa9ca46841cad23eac3afb5 🔍

8 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.05163
MD5 1d631f6d8fa19398d2df5863be341a2c 🔍
SHA1 97243c848ad1a29da52855996d88fbdb092ef48f 🔍
SHA256 7abae35099733d994c7168b58edf433d9a87096ffacdbee04cacc5a05dd84909 🔍
SHA3 d6fbfd69d2f15297c09308bc2fc122cb08b379927f53cbf30c5974c6f62067a9 🔍

9 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.36687
MD5 f5a0e41bc60f9722f17d2eec66a72996 🔍
SHA1 db94b2c361fd617c8ef978dc1e4e5f71e0538d7c 🔍
SHA256 110d31262fc1d5c2a33c27059c94469b6fb4f7e4e16a91572c0492795c3f21b7 🔍
SHA3 2c2652334d23ef6e09283055ceb3997751854a44b3907deca030491f4fd46f59 🔍

10 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.32943
MD5 faaa6b184f0de776b3694d7333bb7dd3 🔍
SHA1 821091dda1f7b14e9d84a2114021773366aead18 🔍
SHA256 a8589c4aab8ed377a9602ef5bf3b6565e45a3357911efd6048f38a56b0a102c7 🔍
SHA3 3f0f8f6b4531727f1e8196654de4352ba230b90a335a6b5f621bbca551d72e9d 🔍

11 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x7c8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.26175
Detected Filetype PNG graphic file
MD5 44ecf3fd91cf33cfb4535bb2ea59e27a 🔍
SHA1 3090f24b36ec71739d9820d550aa3f4eed8e52e9 🔍
SHA256 977990ecb2a3a7bf7ef2edea2c484b538b73476eb46722791fb8591d19bcda4a 🔍
SHA3 b339de91d44a8b0b0dddcc8b659a82533fc85134b67ad2e7a6c70e9a13577924 🔍

12 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.32779
MD5 d790cb9b9086f45ea53fec385891355d 🔍
SHA1 20e3548d16dbba68b8f322a1c4f7086e38110d10 🔍
SHA256 18621604c0b5f4229416994b569e2afda775a608e1759d5ba7082a31458e1169 🔍
SHA3 b14e2bb5e8953ae807c2ec3b726942eb2ead7890772fdf6a410a8c9a71e81915 🔍

13 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.21995
MD5 7ab8c3240114b0f7ebc42c5c489060f6 🔍
SHA1 0de249b988a94d3374bbf9eb3585f00ace2e5499 🔍
SHA256 f5feb3ba96da36d90fb879e6f1af274a1c5f6fd4ba68332b1c25d97c6508d062 🔍
SHA3 def1c08500690c2ea7b272685c0a594f8ca5bf9865055bfb9c488d12a6955dfe 🔍

14 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.65783
MD5 d720ab3b897affd8516a5c73e9020b19 🔍
SHA1 36e5ac25f4b4f4b869d109c0072da7f6f1fd03c2 🔍
SHA256 f269848277f345c8fc62634f14c012bc8ee1afa4887e8819228e99c6915bbdf3 🔍
SHA3 c946f83fcb2547d27caf0a1adff84c375349fd416f64281d3fb2653a224affa0 🔍

15 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.70621
MD5 7a8fd82c16489f1ed6e5cdc5dc38c815 🔍
SHA1 595b39dc0c92b6e3943ea918a213cec58503daf4 🔍
SHA256 9260d8b6f0fd7fc00e9a960db1b1283180efd59049be2c8867a4e660b1ff0123 🔍
SHA3 2eec2ac06df13fa72c5317fe2f7e049cddea95363b53620674c73c866a7f8d52 🔍

16 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x1234
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.90997
MD5 11921cfff61b5877c53bb37c86b6d09c 🔍
SHA1 3800127e39a03ea9b2a9f79538d40227ef4d0c89 🔍
SHA256 c714566bd8b7f0be360e68950a5615a2fb365d53b14ea7c2812f23c458497799 🔍
SHA3 0e2df531413bcc400f2f42179d34b093d3229754f3ee9d7c982faacd2f766e18 🔍

17 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.72497
MD5 0e559d7f5897727c98dfdd1e6c3631e7 🔍
SHA1 fcd9803592250e14d186e9c8fd0f094e7debfdf0 🔍
SHA256 6e6dd7cc3df380721e4678fb1825b982df22a4dc058091634e733c33f3543b1f 🔍
SHA3 54cc4d475eb6e3066dda379e7ce197dad0d994522cc58d68673a5707d4aa46cf 🔍

18 (#2)

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x184b
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.91162
Detected Filetype PNG graphic file
MD5 e3e595605f7ba7a83a424e5698b342b4 🔍
SHA1 b7cf89a883818649ffeab77f323b07808b1b717e 🔍
SHA256 05de73b49e62f848770d877a92a4a920e2ef6812538b84ab3a3255ee89bf3666 🔍
SHA3 0a0834c7fc8c9270e4ef414eb9095219a154fefc631b38f811eb7639a46a3aec 🔍

26850

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.83876
Detected Filetype Cursor file
MD5 a2baa01ccdea3190e4998a54dbc202a4 🔍
SHA1 e8217df98038141ab4e449cb979b1c3bbea12da3 🔍
SHA256 c53efa8085835ba129c1909beaff8a67b45f50837707f22dfff0f24d8cd26710 🔍
SHA3 8874564c406835306368adf5e869422e1bb97109b97c1499caa8af219990e8dc 🔍
Preview

26851

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.91924
Detected Filetype Cursor file
MD5 aff0f5e372bd49ceb9f615b9a04c97df 🔍
SHA1 e3205724d7ee695f027ab5ea8d8e1a453aaad0dd 🔍
SHA256 b07e022f8ef0a8e5fd3f56986b2e5bf06df07054e9ea9177996b0a6c27d74d7c 🔍
SHA3 9cb042121a5269b80d18c3c5a94c0e453890686aedade960097752377dfa9712 🔍
Preview

26852

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 48e064acaba0088aa097b52394887587 🔍
SHA1 310b283d52aa218e77c0c08db694c970378b481d 🔍
SHA256 43f40dd5140804309a4c901ec3c85b54481316e67a6fe18beb9d5c0ce3a42c3a 🔍
SHA3 38753084b0ada40269914e80dbacf7656dc94764048bd5dff649b08b700f3ed5 🔍
Preview

26853

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 1ae28d964ba1a2b1b73cd813a32d4b40 🔍
SHA1 8883cd93b8ef7c15928177de37711f95f9e4cd22 🔍
SHA256 ff47a48c11c234903a7d625cb8b62101909f735ad84266c98dd4834549452c39 🔍
SHA3 a85dadd416ce2d22aa291c0794c45766a0613b853c6e3b884a2b05fc791427b8 🔍
Preview

26854

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.67095
Detected Filetype Cursor file
MD5 92aed2fe83f8aad05aada50cc1f7a0fd 🔍
SHA1 2cc1fd624e3ef76a96e82af2e5a13dbda3cb83d2 🔍
SHA256 40ef29652899604b7e4230bc75edd33ff374a1dd973b2d8f1165cfb10d17a950 🔍
SHA3 b7241bb804eb356f2c3f0688e55007d76707a5e16521535748f13728ff6846da 🔍
Preview

26855

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x22
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.46809
Detected Filetype Cursor file
MD5 2d827c2d818f44f66a086e7a32955cee 🔍
SHA1 24b12fd864db6a0b79a2ae15c5791987ece86d58 🔍
SHA256 d2c99a8724942e1e0e4496347817d9f07a3924c0237d0ad522c7d7f801ee9c59 🔍
SHA3 2acd7b0e30e038fd65393f9f8bd4aa76fbe183d219d487b386c2eeaa4e5ea5f9 🔍
Preview

26856

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x22
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.46809
Detected Filetype Cursor file
MD5 d28b61eccdefa5e37d7b0cdc9cbd3363 🔍
SHA1 580fc47123346dca56b9ad463469dd44454e16ce 🔍
SHA256 83067746fdd1cb6fdcf4a17e2600a5e481eb93f527a57b4dca6adf6ccb711b2d 🔍
SHA3 c4e01a49d8c4f348502ccaee05ad460e83cd2498f44dc6a20f0433ce6b72075b 🔍
Preview

26857

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.21924
Detected Filetype Cursor file
MD5 cc34525879592b62945fa5102955e7af 🔍
SHA1 1c1f341f0ff952d168ec070d95809224631c5f59 🔍
SHA256 c7f15e3e69f8bad21f5f9c9546b129828d66e90b38a8fe9cf33cf23846e62700 🔍
SHA3 1af1bcbf18cfdeb5e3d81c46ab15ef59bc0b1de5f5ff9dc32f491120f405f5c6 🔍
Preview

26858

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.21924
Detected Filetype Cursor file
MD5 cb8d29dff5278e39030b2ad47022cf49 🔍
SHA1 a48b5853b494a9095f0899e23414db872433d366 🔍
SHA256 fd27224dee56e50f926e0c003d1bdb8c31db4d1f0a089280d0f55b79ff45c1e7 🔍
SHA3 3eca032eb883d63cd63778223e4ed5d3982bcbc58eed6534f0a70d84a7a624e5 🔍
Preview

26859

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.21924
Detected Filetype Cursor file
MD5 874e41c97e9c38232490d3bea15ae8b3 🔍
SHA1 ae70b2c25c1566c2e13ac44e0057ef4f6daf8d91 🔍
SHA256 2c57fbd554735f2b8ff46f26b3d2d58a5a5e4152a02043e7fd6c552a43a3ceee 🔍
SHA3 b13a2c1efb8dad10ad85e8b4ce0067cbbea82053146cd5a81b0fecef2a15bf15 🔍
Preview

26860

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.21924
Detected Filetype Cursor file
MD5 24d6779f223eda66e958315d638d0b62 🔍
SHA1 12525fd20006775a0366d61620ae851ae090dbfb 🔍
SHA256 1133ff27d25ac052e4a0570865c18ce0e07a3afbb89577bc52af61435a91b8cc 🔍
SHA3 feab5af24df559fd8b9b078058f0cd7af2d943e88736af167b57482cff6597bc 🔍
Preview

26861

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.21924
Detected Filetype Cursor file
MD5 63e88d11b8e4a0868f5c2dcb5c944b1e 🔍
SHA1 19e86d2e68c188e8f8101e3c053bfa02ca714b97 🔍
SHA256 5907a1ab79be2dae328a84248db9750607aeb7b802af582f974a5ae59fb3c37c 🔍
SHA3 fe8a1640613ab39314806298ace08aae1c0f1d9f89c9aa23e7a270562db0dd0e 🔍
Preview

26862

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.21924
Detected Filetype Cursor file
MD5 08ffff653a54f5518c6bbcbd1c4e82f4 🔍
SHA1 4a8832e7ebf39d3e0398d4332748b00d5964e6e0 🔍
SHA256 d19508d8742527d523aa3ef78e1091ce417bec079e9632181cdc8ff245c53ce9 🔍
SHA3 7650fb4c907b38dfe5785926961a8e754ad52af5bd6eef810c761e1cd02a1fb6 🔍
Preview

26863

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.11924
Detected Filetype Cursor file
MD5 384df7c4869187442684d2fb5292ac78 🔍
SHA1 ffa445392454d9a208a18fc2520b7ad60e5936df 🔍
SHA256 1dac0833fe30898ce2c1df2c70b09d62d51f8f765ae0ffd90b811067e875ae98 🔍
SHA3 1fbbe841170dac2994db17d7b74b60a56ffe6ab959f8e1bb6c5605c6bcf2c705 🔍
Preview

26864

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.21924
Detected Filetype Cursor file
MD5 4e14da9e6db8978ffd0c5eb4b3e9e80a 🔍
SHA1 2a4d2df5f07e3a096a27db0f2297f46e7f8df507 🔍
SHA256 5fa51d73b8ea1316fb0c8f11c3740c6f755a8499a135e4e18ef6b823aad3ad70 🔍
SHA3 ea3bf238714cb012824de6f84f91faf385180340f7563976e327c4fef3750f5e 🔍
Preview

26865

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.21924
Detected Filetype Cursor file
MD5 015d385990b99272d167c51c508f427e 🔍
SHA1 f4591544894c9e23e281d023fb2210a1274d1628 🔍
SHA256 7794cf070f4c99cd9ec27a43faa84daab8d19e765f0489c981a9ef28468a3899 🔍
SHA3 514c273141a62c18cd8fc7252db9af2dcfd0226ea3c3efe8ef3ed5ad3b16be99 🔍
Preview

26866

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 8408eef234acfcac8a26e706cc35d85c 🔍
SHA1 5ecdc1e1be3f1e941b1ca11b45943aafe135c517 🔍
SHA256 3f02dcac38fffe306e1825846e2bc0458ee712696310d051e3a69ebda8330cc3 🔍
SHA3 0406ff4480e84661d58a225cdf84931c95f7ebf6fea388a3cb6bedbc0343b421 🔍
Preview

26867

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 79bc23c45190436b2c51ff2941fa8720 🔍
SHA1 0a8234176fad8831709703a0a34337a08987a983 🔍
SHA256 b328fe22a904a2e7e1341a95dbf00e2fdffc9ab350bc64c5ee348d3007c2b479 🔍
SHA3 b897f30ec85dad865a74be84cd616e0066da486befd0983d87e2b6f5d66a6c6b 🔍
Preview

26868

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 1e219dd609ce399df95ba7af59ef113f 🔍
SHA1 436a16dd20d5e3ec42342a4d005a664cd227f517 🔍
SHA256 8f51832638675f16ec5f251ab59251b3f85d84e5129025d44c45b3191b331c58 🔍
SHA3 9e44adcf523bb484f416a99197d947211027feae6b6665b457883e548218befd 🔍
Preview

26869

Type RT_GROUP_CURSOR
Language UNKNOWN
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.01924
Detected Filetype Cursor file
MD5 690a20e696fc4e33ffb377a8ef54fb97 🔍
SHA1 972159605fa069921dbdee9b7a35879e6f1928a6 🔍
SHA256 6c2ef97bca5cdc6aa6de65b1f1ae8328bcb3494a16025eee870231d991e2cd56 🔍
SHA3 fd9d56519b5bf976a4ae748fe0c51dcd47ac27ce6a7c271fa2bbb3e00f473b22 🔍
Preview

IDR_MAINFRAME

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.71858
Detected Filetype Icon file
MD5 770cef69edd3403c90e3fcfab92cfab7 🔍
SHA1 977fb8ddc1220a85e2ff4e075aa444784c86536e 🔍
SHA256 7374ae9a15985e0721aba584326daae9a201e74924e558b768fb4457b9ac6c7d 🔍
SHA3 4394eb822dcfe828b3fc03f2e204af28e693e5f3ce3c729f418961311986ec04 🔍

IDR_X001_APP_LIST

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.74665
Detected Filetype Icon file
MD5 69590c402866fba3f21839c1cc550427 🔍
SHA1 6339327b147004d2ba100bc5623c68061744ab1b 🔍
SHA256 d7f3662969a93e7b22aab51222b1b10a54fdd5f53b7975b94947bce2ba044ec4 🔍
SHA3 fa2c85ae72f67c19734d7a8534af7f950ae24c42bcc3aa52d7d26780e286d6f7 🔍

IDR_X003_INCOGNITO

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x3e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.68672
Detected Filetype Icon file
MD5 a400995690e99d45e2e7e9babe75c24c 🔍
SHA1 5e9093acb4477fb2088f326d7c4928409e8cff96 🔍
SHA256 71906c0048df8ede2056b81e473360c366e7552337d0385ad11af55e1574d9d5 🔍
SHA3 8f832c83fa479596486934306b8f08d91004c1d7440c4a6305414fe623bbc10f 🔍

1 (#4)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x4e4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.53032
MD5 cfe60139111ae886b6eda3863a91ce31 🔍
SHA1 3aecaf1daa47330ec2238ee2bb5da7edc5a10e0c 🔍
SHA256 cc6aa4a1c94134b3e9a01e891ff63ef6ecf6ca0275da7b172ac75e559bb4816f 🔍
SHA3 bb1b6f35881ba6e6e527aefef62f806d2e84ed5cedc87468b1d30b9c588ad2d5 🔍

1 (#5)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x4da
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.31041
MD5 8ea781885ee027dcde9ab333afc94850 🔍
SHA1 1ee3b891270d991fbe0a54da13ce594728c5a01e 🔍
SHA256 149c0e72fd781bee06ea982e923d35c36f9420aaafd61e41fdd4082436c14b0e 🔍
SHA3 8b5a5c70837fc28e86ea4175495780a8ccc35325671127ab46ad7c2e7b8d9642 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 64.13.3282.140
ProductVersion 64.13.3282.140
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
CompanyName The Elements Browser Authors
FileDescription Elements Browser
FileVersion (#2) 64.13.3282.140
InternalName elementsbrowser_exe
LegalCopyright Copyright 2017 The Elements Browser Authors. All rights reserved.
OriginalFilename elementsbrowser.exe
ProductName Elements Browser / 1.1.13
ProductVersion (#2) 64.13.3282.140
CompanyShortName The Elements Browser Authors
ProductShortName Elements Browser
LastChange a666f93c834dc52cc3b76d334e1ec60b882c9284-
Official Build 1
Resource LangID English - United States

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2018-Aug-02 13:09:59
Version 0.0
SizeofData 1180
AddressOfRawData 0x13b530
PointerToRawData 0x139d30

TLS Callbacks

StartAddressOfRawData 0x53b9e0
EndAddressOfRawData 0x53ba00
AddressOfIndex 0x5424b0
AddressOfCallbacks 0x4f6558
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_8BYTES
Callbacks 0x00458170

Load Configuration

Size 0x48
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0x200000
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x53f9f4
SEHandlerTable 0x53b4e0
SEHandlerCount 20
GuardCFCheckFunctionPointer 0
GuardCFDispatchFunctionPointer 0
GuardCFFunctionTable 0
GuardCFFunctionCount 0
GuardFlags (EMPTY)
CodeIntegrity.Flags 0
CodeIntegrity.Catalog 0
CodeIntegrity.CatalogOffset 0
CodeIntegrity.Reserved 0
GuardAddressTakenIatEntryTable 0
GuardAddressTakenIatEntryCount 0
GuardLongJumpTargetTable 0
GuardLongJumpTargetCount 0

RICH Header

XOR Key 0xe7b5cbd7
Unmarked objects 0
ASM objects (VS2015 v14.0.? compiler 24610) 37
C++ objects (VS2015 v14.0.? compiler 24610) 195
199 (41118) 4
ASM objects (VS2015/2017 runtime 25810) 28
C objects (VS2015/2017 runtime 25810) 40
C++ objects (CVTCIL) (VS2015 v14.0.? compiler 24610) 1
C objects (CVTCIL) (VS2015 v14.0.? compiler 24610) 6
C objects (VS2015 v14.0.? compiler 24610) 43
C++ objects (VS2015/2017 runtime 25810) 130
Imports (VS2015 v14.0.? compiler 24610) 30
ASM objects (VS2017 v15.5.3-4 build 25834) 3
Imports (VS2017 v15.5.3-4 build 25834) 3
Total imports 508
Unmarked objects (#2) 1185
Exports (VS2017 v15.5.3-4 build 25834) 1
Resource objects (VS2017 v15.5.3-4 build 25834) 1
151 3
Linker (VS2017 v15.5.3-4 build 25834) 1

Errors

Leave a comment

No comments yet.