Manalyze report for fcf96de9618a5353d2413067cfe78e7a9d9518fbbd03c64a12e9a06cfe4b882b

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2026-Nov-09 13:31:27
Detected languages	English - United States
Debug artifacts	C:\Users\LiLanas\Desktop\Night\Discord Q\Discord-Quest-Completer-main (1)\Discord-Quest-Completer-main\KayzeLauncher\x64\Release\KAYZE Discord Quest Completer.pdb

Plugin Output

Info	Interesting strings found in the binary:	Contains domain names: api.github.com cdn.discordapp.com com.onrender.com discordapp.com github.com http://scripts.sil.org http://scripts.sil.org/OFLThis http://scripts.sil.org/OFLhttp http://www.indiantypefoundry.comSatya https-night-project-onrender-com.onrender.com https://api.github.com https://api.github.com/repos/kayzedevx0/Discord-Quest-Completer/releases/latest https://cdn.discordapp.com https://cdn.discordapp.com/detectables/games.json https://discord.gg https://github.com indiantypefoundry.com night-project-onrender-com.onrender.com onrender-com.onrender.com onrender.com project-onrender-com.onrender.com scripts.sil.org
Info	The PE contains common functions which appear in legitimate applications.	`[!] The program may be hiding some of its imports: GetProcAddress LoadLibraryA LoadLibraryExW` `Possibly launches other programs: CreateProcessA ShellExecuteA ShellExecuteW` `Has Internet access capabilities: URLDownloadToFileA InternetOpenUrlA InternetCloseHandle InternetOpenA InternetReadFile WinHttpOpen WinHttpCloseHandle WinHttpConnect WinHttpReadData WinHttpQueryDataAvailable WinHttpOpenRequest WinHttpSendRequest WinHttpReceiveResponse` `Reads the contents of the clipboard: GetClipboardData`
Malicious	VirusTotal score: 6/69 (Scanned on 2026-11-10 01:20:19)	`Alibaba: TrojanDropper:Application/Generic.21003cbb` `CrowdStrike: win/malicious_confidence_90% (W)` `Elastic: malicious (high confidence)` `Rising: Dropper.Agent!8.2F (TFE:5:v9SpHE7am8K)` `SentinelOne: Static AI - Suspicious PE` `Symantec: ML.Attribute.HighConfidence`

Hashes

MD5	`4ad2d0c84e69d97a4f6af43d3a786ced` 🔍
SHA1	`26f9300125c339b3f7b2526547e73bba5aa6a0a9` 🔍
SHA256	`fcf96de9618a5353d2413067cfe78e7a9d9518fbbd03c64a12e9a06cfe4b882b` 🔍
SHA3	`9c15d1e0ba49b971b7aee29571be357343cd83a1e741792a35034f5636e76fc6` 🔍
SSDeep	`24576:S0zL4bNHQkEUZwqJHG3iShnPjS3GoRGb7oV8QdoMHJCyV:S0zMxEgfYnLSWoRGbexky` 🔍
Imports Hash	`621ca3ea19334d962886fe29a99158d8` 🔍

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x108`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`7`
TimeDateStamp	2026-Nov-09 13:31:27
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0xb2800`
SizeOfInitializedData	`0x11a800`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0000000000083CA0 (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x140000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x1d1000`
SizeOfHeaders	`0x400`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`3ef55baf554cd649da8dbc8d52c00138 🔍`
SHA1	`3a2d32b994ae00f6493a039a40f159ba0f96a23e 🔍`
SHA256	`6bd42ef5ff0e25f99a4de6214d39e798c9ce18098f02677e68550b74e3537367 🔍`
SHA3	`743c1cbf4f6c83fbb1b8aa9438eab2c440bbd266b6e16214a2dfa70dc4dd9e03 🔍`
VirtualSize	`0xb264c`
VirtualAddress	`0x1000`
SizeOfRawData	`0xb2800`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.52776`

.rdata

MD5	`6f810c952ee5e073a160f3f6e5efd2ce 🔍`
SHA1	`989d9ef6b76d0a423a68c278e43690d1b890a4d1 🔍`
SHA256	`e07781a60be79993a14d0b50194a3c54e9e42958d3801b59aeb8de6d8f863c5e 🔍`
SHA3	`33b7c8b42c62c48a112934530feaf8b7764ddadbe1109e74573728cbec83eea2 🔍`
VirtualSize	`0xdfa90`
VirtualAddress	`0xb4000`
SizeOfRawData	`0xdfc00`
PointerToRawData	`0xb2c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.36271`

.data

MD5	`51fcddcd8907b3abe4d2e3e185d06df9 🔍`
SHA1	`5429c17ea8b8d7e9892d7651ba8246d35c9b56ea 🔍`
SHA256	`b4c54f75c2209ba6fe4e5faa8725b427c7bf43727331705046ed2c15648c21b7 🔍`
SHA3	`ac7539d7b1452d1c4d9c4365015a00487b626fbe7e6644ec869c490b21faf98c 🔍`
VirtualSize	`0x2da8`
VirtualAddress	`0x194000`
SizeOfRawData	`0x1a00`
PointerToRawData	`0x192800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`3.12286`

.pdata

MD5	`c9ea5c8c763631513a89d628a2ca484a 🔍`
SHA1	`cc51625601b50e16ef87e122f41ec5f6d5f8f37d 🔍`
SHA256	`6c5f9bc80883424a99b210ca14f4cca55241d6de7775df211399c7aab306aa9e 🔍`
SHA3	`316285cd73600ae3ba905186b02341b3a26148c4030b417cfc9e46ad06873b0e 🔍`
VirtualSize	`0x807c`
VirtualAddress	`0x197000`
SizeOfRawData	`0x8200`
PointerToRawData	`0x194200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.98335`

.fptable

MD5	`bf619eac0cdf3f68d496ea9344137e8b 🔍`
SHA1	`5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5 🔍`
SHA256	`076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560 🔍`
SHA3	`622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59 🔍`
VirtualSize	`0x100`
VirtualAddress	`0x1a0000`
SizeOfRawData	`0x200`
PointerToRawData	`0x19c400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0`

.rsrc

MD5	`fa4c491d9e24655e4dbd0ba6b20e867c 🔍`
SHA1	`05abedcac0ca2375efd191550fea10de86ec3a4b 🔍`
SHA256	`0c0600590176eecb7e6f81a02812a16558222cf0c3499af0a38490198c832c85 🔍`
SHA3	`f0c64b66d884e4d9b54f4f040fb4e5a6216a4127f16c6fe9949fa2b615ccb2a8 🔍`
VirtualSize	`0x2eb98`
VirtualAddress	`0x1a1000`
SizeOfRawData	`0x2ec00`
PointerToRawData	`0x19c600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`7.9941`

.reloc

MD5	`d12639a92b0e52cac6779e70d5c6f8ce 🔍`
SHA1	`5e886a700a08a3ecb56582ecf4ebe8dfd58ed711 🔍`
SHA256	`2ba0e1f32e2f26e0410669699cbb80b174a323d4554d148d54bf5f07eadb6e3e 🔍`
SHA3	`3a24a29259fe00b9d568c49224211239b592f990da65148617e62efcda5c2548 🔍`
VirtualSize	`0xc1c`
VirtualAddress	`0x1d0000`
SizeOfRawData	`0xe00`
PointerToRawData	`0x1cb200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.10219`

Imports

KERNEL32.dll	`GetModuleHandleW` `GetProcAddress` `LoadLibraryA` `GetLocaleInfoA` `IsDBCSLeadByte` `DeleteFileA` `FindClose` `FindFirstFileA` `FindNextFileA` `GetFileAttributesA` `RemoveDirectoryA` `SetFileAttributesA` `CloseHandle` `WaitForSingleObject` `Sleep` `TerminateProcess` `CreateProcessA` `GetModuleFileNameA` `CopyFileA` `MoveFileExA` `WriteConsoleW` `SetEndOfFile` `HeapSize` `CreateFileW` `HeapReAlloc` `GetProcessHeap` `SetStdHandle` `SetEnvironmentVariableW` `FreeEnvironmentStringsW` `GetEnvironmentStringsW` `GetOEMCP` `GetACP` `IsValidCodePage` `FindNextFileW` `FindFirstFileExW` `CreateDirectoryW` `GetFileSizeEx` `SetFilePointerEx` `ReadConsoleW` `GetConsoleMode` `GetModuleHandleA` `FlushFileBuffers` `GetFileType` `EnumSystemLocalesW` `GetUserDefaultLCID` `IsValidLocale` `GetLocaleInfoW` `LCMapStringW` `CompareStringW` `LoadLibraryExW` `VirtualProtect` `HeapFree` `HeapAlloc` `UnhandledExceptionFilter` `IsDebuggerPresent` `RtlVirtualUnwind` `RtlCaptureContext` `IsProcessorFeaturePresent` `GetCommandLineW` `GetCommandLineA` `GetModuleFileNameW` `WriteFile` `GetStdHandle` `FreeLibraryAndExitThread` `ExitThread` `CreateThread` `GetModuleHandleExW` `ExitProcess` `GetCurrentProcess` `ReadFile` `FlsFree` `FlsSetValue` `FlsGetValue` `FlsAlloc` `SetLastError` `FreeLibrary` `QueryPerformanceFrequency` `QueryPerformanceCounter` `VerSetConditionMask` `WideCharToMultiByte` `RaiseException` `MultiByteToWideChar` `GlobalFree` `GlobalLock` `GlobalAlloc` `GlobalUnlock` `GetConsoleOutputCP` `OutputDebugStringA` `RtlPcToFileHeader` `RtlUnwindEx` `RtlLookupFunctionEntry` `GetCPInfo` `GetStringTypeW` `LCMapStringEx` `RtlUnwind` `DecodePointer` `EncodePointer` `DeleteCriticalSection` `InitializeCriticalSectionEx` `LeaveCriticalSection` `EnterCriticalSection` `ReleaseSRWLockExclusive` `AcquireSRWLockExclusive` `WakeAllConditionVariable` `SleepConditionVariableSRW` `GetCurrentProcessId` `GetCurrentThreadId` `GetSystemTimeAsFileTime` `InitializeSListHead` `SetUnhandledExceptionFilter` `GetStartupInfoW` `GetLastError`
USER32.dll	`IsIconic` `BringWindowToTop` `SetFocus` `GetKeyState` `GetCapture` `SetLayeredWindowAttributes` `OpenClipboard` `CloseClipboard` `ShowWindow` `GetClipboardData` `EmptyClipboard` `GetKeyboardLayout` `TrackMouseEvent` `GetMessageExtraInfo` `DefWindowProcW` `UnregisterClassW` `RegisterClassExW` `CreateWindowExW` `IsChild` `SetWindowPos` `SetClipboardData` `MonitorFromWindow` `SetCapture` `LoadIconW` `FillRect` `EndPaint` `BeginPaint` `UpdateWindow` `GetSystemMetrics` `CreateWindowExA` `RegisterClassExA` `PostQuitMessage` `DefWindowProcA` `PeekMessageW` `DispatchMessageW` `DispatchMessageA` `TranslateMessage` `GetMessageA` `EnumDisplayMonitors` `GetMonitorInfoW` `ReleaseCapture` `LoadCursorW` `SetWindowLongPtrW` `SetWindowLongW` `GetWindowLongW` `WindowFromPoint` `ScreenToClient` `ClientToScreen` `GetCursorPos` `SetCursor` `SetCursorPos` `AdjustWindowRectEx` `GetClientRect` `GetPropA` `SetPropA` `ReleaseDC` `GetDC` `SetForegroundWindow` `GetForegroundWindow` `IsWindowUnicode` `DestroyWindow`
GDI32.dll	`GetDeviceCaps` `GetStockObject`
SHELL32.dll	`ShellExecuteA` `ShellExecuteW`
IMM32.dll	`ImmReleaseContext` `ImmSetCompositionWindow` `ImmSetCandidateWindow` `ImmGetContext`
D3DCOMPILER_47.dll	`D3DCompile`
dwmapi.dll	`DwmExtendFrameIntoClientArea`
d3d11.dll	`D3D11CreateDeviceAndSwapChain`
urlmon.dll	`URLDownloadToFileA`
WININET.dll	`InternetOpenUrlA` `InternetCloseHandle` `InternetOpenA` `DeleteUrlCacheEntryA` `InternetReadFile`
WINHTTP.dll	`WinHttpOpen` `WinHttpCloseHandle` `WinHttpConnect` `WinHttpReadData` `WinHttpQueryDataAvailable` `WinHttpOpenRequest` `WinHttpSendRequest` `WinHttpReceiveResponse`

Delayed Imports

1

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x2e90c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.99526`
Detected Filetype	PNG graphic file
MD5	`728a6e46538782813f20621fd081eb34 🔍`
SHA1	`5183eb288a59057412367f552f5a43cc2a28df84 🔍`
SHA256	`2a17acfd7e063d8c04a1b43cca25bfc3caa2551610c9b308cacf05db9cbcda0e 🔍`
SHA3	`f0afba2675ba3e0c828ab94e14698c90bf2791b51dcc8e8c4a813b9c3abd2645 🔍`

101

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.77095`
Detected Filetype	Icon file
MD5	`7e0740f41954d672a6dfb3b7b2717fee 🔍`
SHA1	`b8978f423ddc3084b0d8b7b09289570de7792b26 🔍`
SHA256	`2421308f7ae4b3ff10f8e51e97c6fe010eefe6eb6048c738a60d2c5115673dbc 🔍`
SHA3	`4a576695672afba4675c4f6f54eb1035697b6605e4369e37db7e92007a45122d 🔍`

1 (#2)

Type	`RT_MANIFEST`
Language	English - United States
Codepage	UNKNOWN
Size	`0x17d`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.91161`
MD5	`1e4a89b11eae0fcf8bb5fdd5ec3b6f61 🔍`
SHA1	`4260284ce14278c397aaf6f389c1609b0ab0ce51 🔍`
SHA256	`4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df 🔍`
SHA3	`4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353 🔍`

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2026-Nov-09 13:31:27
Version	`0.0`
SizeofData	`187`
AddressOfRawData	`0x185540`
PointerToRawData	`0x184140`
Referenced File	C:\Users\LiLanas\Desktop\Night\Discord Q\Discord-Quest-Completer-main (1)\Discord-Quest-Completer-main\KayzeLauncher\x64\Release\KAYZE Discord Quest Completer.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics	`0`
TimeDateStamp	2026-Nov-09 13:31:27
Version	`0.0`
SizeofData	`20`
AddressOfRawData	`0x1855fc`
PointerToRawData	`0x1841fc`

IMAGE_DEBUG_TYPE_POGO

Characteristics	`0`
TimeDateStamp	2026-Nov-09 13:31:27
Version	`0.0`
SizeofData	`1052`
AddressOfRawData	`0x185610`
PointerToRawData	`0x184210`

TLS Callbacks

StartAddressOfRawData	`0x140185a78`
EndAddressOfRawData	`0x140185a80`
AddressOfIndex	`0x140195af8`
AddressOfCallbacks	`0x1400b4760`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_ALIGN_4BYTES`
Callbacks	`(EMPTY)`

Load Configuration

Size	`0x140`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x140194140`

RICH Header

XOR Key	`0xdafda341`
Unmarked objects	`0`
C++ objects (33145)	`180`
C objects (33145)	`33`
ASM objects (33145)	`23`
ASM objects (35721)	`10`
C objects (35721)	`17`
C++ objects (35721)	`92`
Imports (33145)	`23`
Total imports	`226`
C++ objects (36260)	`8`
Resource objects (36260)	`1`
151	`1`
Linker (36260)	`1`

Errors

Leave a comment

No comments yet.