18a6b503dede075b5d9cd36154f1ad36bb7390e4ea9b8a987dbfd0b7ee1f9b15

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2026-Oct-14 18:09:01
Detected languages English - United States
CompanyName ClueHunters Technologies
FileDescription ClueHunters Technologies Desktop
FileVersion 1.0.16+18
InternalName cluehunters_tech
LegalCopyright Copyright (C) 2026 ClueHunters Technologies. All rights reserved.
OriginalFilename cluehunters_tech.exe
ProductName ClueHunters Technologies
ProductVersion 1.0.16+18

Plugin Output

Info Matching compiler(s): MASM/TASM - sig1(h)
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Info The PE contains common functions which appear in legitimate applications. [!] The program may be hiding some of its imports:
  • LoadLibraryA
  • GetProcAddress
 Can access the registry:
  • SharePlusWindowsPluginCApiRegisterWithRegistrar
  • RegGetValueW
Suspicious No VirusTotal score. This file has never been scanned on VirusTotal.

Hashes

MD5 72008355d8660dfcbe254d67bb3b400e 🔍
SHA1 ce31ed56409102ce8906f0247aea8bf5b63ad3e1 🔍
SHA256 18a6b503dede075b5d9cd36154f1ad36bb7390e4ea9b8a987dbfd0b7ee1f9b15 🔍
SHA3 73d5ebe309914580e114e8eb79486008d092bb03a374d6d140f82759745e2a1b 🔍
SSDeep 12288:IiYTu/C+chk3PJpmtFBtSFvsoPJL5dTDLzzz8tgX+bQA+d4hmg:Ii0r6fJpm7BtSFvRPJvTDLzzz8tgX+b 🔍
Imports Hash a17f14d058111ebf7528ad24966dcccc 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x130

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2026-Oct-14 18:09:01
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x8b800
SizeOfInitializedData 0x33e00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000085A70 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0xc3000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 919edbd0b76a7aa581f2ff8ee2ad786b 🔍
SHA1 e54d1a366845f32704c3ed62fed8686f98b68e82 🔍
SHA256 55e9eb39a2d31ac2f3321a09e5aa573ee7cc4ff38c3309134d8be6ab6165d75b 🔍
SHA3 4d7ea7f7b7d8816e02babbb8a4a9959d070aa0eed8cb682d79150a14127c75db 🔍
VirtualSize 0x8b771
VirtualAddress 0x1000
SizeOfRawData 0x8b800
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.31222

.rdata

MD5 3984575f5f9baeae5f056225f7fd5963 🔍
SHA1 676ef61a38a98b6405df21b93eae7b1c4923f25c 🔍
SHA256 b9ee168854a1ee3c43001ea3a17ba3844ec8ff41c0e243b976414c49ecd07e22 🔍
SHA3 048dcccd43cd0ff6ce0fa5a403aec7f802dde0394a03c827ec6ff65b294d5858 🔍
VirtualSize 0x259aa
VirtualAddress 0x8d000
SizeOfRawData 0x25a00
PointerToRawData 0x8bc00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.67716

.data

MD5 8ea569db6a97e327bfe1322ccc6d73bf 🔍
SHA1 1c317836a4f8bc25788f41c5c7fc8ac0979b94a9 🔍
SHA256 2af906017b7931615767d4e67f253439f0229665367b46d717a94b29eb4ed0c1 🔍
SHA3 e96299480b09cb74739a9da6596f5b89c8e0eecd591de957ab84c20bc1378672 🔍
VirtualSize 0x34d0
VirtualAddress 0xb3000
SizeOfRawData 0x2e00
PointerToRawData 0xb1600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.74174

.pdata

MD5 19981df74f6f42462a49c8b74e249d2e 🔍
SHA1 fc902336ec13d93b02c0bc5fc5662a3ba2887c57 🔍
SHA256 4b3dfdaed3bc2e2d87cb49f98f3c09c805265961cec197f3ab9684a45e4a1a8c 🔍
SHA3 3441dcefac464cdca9fb105306654ee408c11e10d0e130f205441ff3132b2308 🔍
VirtualSize 0x1584
VirtualAddress 0xb7000
SizeOfRawData 0x1600
PointerToRawData 0xb4400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.12858

.rsrc

MD5 c71165c203cbfc4057dc7cde04df7cb2 🔍
SHA1 338ea8f3ee7683b72aa635452e81fab3c848d258 🔍
SHA256 5a8db72e9ecf5a7ab855e1f7b702601231fe815f5e5fa2db0770bf16f0d53ef9 🔍
SHA3 a0b727de5dcb0787f61c1ca9859d40a2dbd21da77d36339fcfdedd678dbd856c 🔍
VirtualSize 0x8e80
VirtualAddress 0xb9000
SizeOfRawData 0x9000
PointerToRawData 0xb5a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.30734

.reloc

MD5 099bf08534754d4f732ba5746f0a57f6 🔍
SHA1 de140ab842e021bf3535d6c1d0daba07bf7be77f 🔍
SHA256 8f840207fd2c7a40aa0ac7d884c2f2e84df70d45f07bf5f5bfeba7d44aa1dd7f 🔍
SHA3 f01db73099ce6d1f7885d781d45bc1de341842e73e820e0deefe15ab3d4bcf50 🔍
VirtualSize 0x6ac
VirtualAddress 0xc2000
SizeOfRawData 0x800
PointerToRawData 0xbea00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.96996

Imports

dwmapi.dll DwmSetWindowAttribute
file_selector_windows_plugin.dll FileSelectorWindowsRegisterWithRegistrar
geolocator_windows_plugin.dll GeolocatorWindowsRegisterWithRegistrar
local_auth_windows_plugin.dll LocalAuthPluginRegisterWithRegistrar
permission_handler_windows_plugin.dll PermissionHandlerWindowsPluginRegisterWithRegistrar
printing_plugin.dll PrintingPluginRegisterWithRegistrar
record_windows_plugin.dll RecordWindowsPluginCApiRegisterWithRegistrar
share_plus_plugin.dll SharePlusWindowsPluginCApiRegisterWithRegistrar
url_launcher_windows_plugin.dll UrlLauncherWindowsRegisterWithRegistrar
ADVAPI32.dll RegGetValueW
ole32.dll CoInitializeEx
CoTaskMemFree
CoUninitialize
flutter_windows.dll FlutterDesktopMessengerSetCallback
FlutterDesktopRegistrarGetTextureRegistrar
FlutterDesktopPluginRegistrarGetMessenger
FlutterDesktopViewGetHWND
FlutterDesktopResyncOutputStreams
FlutterDesktopGetDpiForMonitor
FlutterDesktopEngineCreate
FlutterDesktopEngineDestroy
FlutterDesktopEngineReloadSystemFonts
FlutterDesktopEngineGetPluginRegistrar
FlutterDesktopEngineGetMessenger
FlutterDesktopEngineSetNextFrameCallback
FlutterDesktopPluginRegistrarGetView
FlutterDesktopViewControllerDestroy
FlutterDesktopViewControllerGetView
FlutterDesktopViewControllerForceRedraw
FlutterDesktopViewControllerHandleTopLevelWindowProc
FlutterDesktopMessengerSend
FlutterDesktopMessengerSendWithReply
FlutterDesktopMessengerSendResponse
FlutterDesktopViewControllerCreate
FlutterDesktopMessengerAddRef
FlutterDesktopMessengerRelease
FlutterDesktopMessengerIsAvailable
FlutterDesktopMessengerLock
FlutterDesktopMessengerUnlock
FlutterDesktopTextureRegistrarRegisterExternalTexture
FlutterDesktopPluginRegistrarSetDestructionHandler
FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable
FlutterDesktopTextureRegistrarUnregisterExternalTexture
KERNEL32.dll InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
SetUnhandledExceptionFilter
MultiByteToWideChar
GetLastError
GetFileAttributesW
CreateDirectoryW
GetFullPathNameA
GetTickCount64
OutputDebugStringA
GetStartupInfoW
ReleaseSRWLockExclusive
CreateMutexA
WaitForSingleObject
ReleaseMutex
ReleaseSemaphore
CreateSemaphoreA
CloseHandle
LoadLibraryA
GetProcAddress
GetModuleHandleW
FreeLibrary
AllocConsole
WideCharToMultiByte
LocalFree
GetCommandLineW
AttachConsole
IsDebuggerPresent
USER32.dll MonitorFromPoint
LoadIconW
LoadCursorW
SetParent
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
SetFocus
SetWindowPos
MoveWindow
ShowWindow
DestroyWindow
CreateWindowExW
UnregisterClassW
RegisterClassW
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
SHELL32.dll CommandLineToArgvW
SHGetKnownFolderPath
MSVCP140.dll ??0_Locinfo@std@@QEAA@PEBD@Z
_Strxfrm
_Strcoll
_Thrd_id
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1_Locinfo@std@@QEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?bad@ios_base@std@@QEBA_NXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
_Thrd_detach
_Thrd_join
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setf@ios_base@std@@QEAAHHH@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA
?sync_with_stdio@ios_base@std@@SA_N_N@Z
?_Xbad_function_call@std@@YAXXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?_Xout_of_range@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Xbad_alloc@std@@YAXXZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??Bid@locale@std@@QEAA_KXZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
VCRUNTIME140_1.dll __CxxFrameHandler4
VCRUNTIME140.dll __std_type_info_compare
memcpy
memset
memcmp
__std_terminate
__current_exception_context
__current_exception
__C_specific_handler
strchr
memchr
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memmove
_purecall
api-ms-win-crt-string-l1-1-0.dll strncpy
wcslen
strlen
strpbrk
toupper
strcmp
strtok_s
strncmp
api-ms-win-crt-stdio-l1-1-0.dll fread
fsetpos
_fseeki64
fwrite
setvbuf
ungetc
fgetpos
fgetc
fflush
__stdio_common_vsprintf
fclose
_get_stream_buffer_pointers
_fileno
freopen_s
__acrt_iob_func
fputc
__p__commode
__stdio_common_vfprintf
_set_fmode
_dup2
api-ms-win-crt-runtime-l1-1-0.dll _initialize_onexit_table
_c_exit
_crt_atexit
terminate
_initialize_wide_environment
_cexit
_beginthreadex
_errno
_register_thread_local_exe_atexit_callback
_configure_wide_argv
_exit
_get_wide_winmain_command_line
_initterm
_invalid_parameter_noinfo_noreturn
_seh_filter_exe
exit
_register_onexit_function
abort
_initterm_e
_set_app_type
api-ms-win-crt-heap-l1-1-0.dll _set_new_mode
free
realloc
malloc
_callnewh
api-ms-win-crt-filesystem-l1-1-0.dll _lock_file
_unlock_file
_stat64i32
_mkdir
api-ms-win-crt-time-l1-1-0.dll _time64
_gmtime64
_difftime64
api-ms-win-crt-convert-l1-1-0.dll _strtoi64_l
_strtod_l
_strtoui64_l
_strtof_l
strtod
strtol
atoi
api-ms-win-crt-math-l1-1-0.dll sin
asin
atan
cos
acos
tan
__setusermatherr
api-ms-win-crt-utility-l1-1-0.dll bsearch
api-ms-win-crt-environment-l1-1-0.dll getenv
api-ms-win-crt-locale-l1-1-0.dll _free_locale
_configthreadlocale
setlocale
_create_locale

Delayed Imports

?FirebaseCorePluginCApiRegisterWithRegistrar@@YAXPEAUFlutterDesktopPluginRegistrar@@@Z

Ordinal 1
Address 0xbc80

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x215e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.87121
Detected Filetype PNG graphic file
MD5 3ccdea440917af4f093f1d9462c78d3d 🔍
SHA1 363cfbdce582e6fd555e39088149ae6a5a3b4c1e 🔍
SHA256 8aededf4bb035a65c9d2474a55b14d844ab2f3191ba99052f70eceb6199a348a 🔍
SHA3 a78ebe77c9bbeb67b4fd959c65f71fc1aac1212964a1fbe6bc69c4efb2a67c96 🔍

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x668
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.3797
MD5 274d991df37bf113bc3e0bb1337846fd 🔍
SHA1 6d168f661d6982f7b5bd7ae4700b52432f544766 🔍
SHA256 800993a42947396780909820158d2f56a08bb2091d621514d36bbada7458ef9b 🔍
SHA3 1a33fee76d8a95d66da2385766e68885ceb1decc3cd228dce80ea4c144210ff4 🔍

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x2e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.7744
MD5 152fde5910c2447dec03f9a4c9415465 🔍
SHA1 d2c979b66d1b3255dec5888a44319f35603563c8 🔍
SHA256 f20eae62acc18e5f160581fc1cc6e0efed62f984d0905f9aecc47ba7f40e624a 🔍
SHA3 f9b69145104f22407f6db1b50a585d603400624e90e99e7e9e9a7b84aa3d3e4e 🔍

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x128
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.7302
MD5 1c0c3d9775c757672d7ec23539f076b7 🔍
SHA1 7d436f01a9c1ec48833af910e81ca2dfb2b16270 🔍
SHA256 a97773070a15757b476c2b10be71d546ec3be57af1072cb712ce79e4c75a82c3 🔍
SHA3 36c5ebb57cd19f219e76b309cf0a902a776ea89ebdf2f2eacd5b6a57fbde3968 🔍

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0xea8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.22301
MD5 2b437f0227d78eb0f4743bc7511d0b30 🔍
SHA1 37163196c5361cc715134a93db30077c206d5bc8 🔍
SHA256 4d974dfc71d21ba23174343c3303c8419b8c4a915c27fd832b6804125c43d9e1 🔍
SHA3 e012a9c47c001bd75f5449efd2964ca80d3d2cc522d9dbe16222b632b8840439 🔍

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x8a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.97336
MD5 12999dca686cc3493d783b6cc5bc474f 🔍
SHA1 6bc89275fb659bddc04e63bc6bc3896ad4ee039c 🔍
SHA256 9f75055cbfcec07bc91a7d15697be880851cbd9b6dc72bd26f9f82844a784e15 🔍
SHA3 3b29b9d6ab5b54f821d03fb67ff7702b1425ad98364f80eba5b9b51a0f3d2ff0 🔍

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.02095
MD5 ef50ba22f0547c0ceccdaa3448e81875 🔍
SHA1 001c6d6ca57e928db88a24b1b781519fd09c6e54 🔍
SHA256 bec440e4b8e53573afbbbb0f6fd00b4a120969cc1c7b00a90e6434e41873e59d 🔍
SHA3 f6980059d987181923ebf7a9282c9f2225efed20601066edfa68b7a352ea5de6 🔍

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.87026
MD5 35875ec07ad23e134a3f01784f7dbf9e 🔍
SHA1 b3b164d66e744d37615b40bd69157a2ac82e8af4 🔍
SHA256 58ed94333eaf15b3a96e347c4d5ab9b519ab9a1e609396ad7ebaf603e4161a5d 🔍
SHA3 2d3045823409509a173457125fe723d9e3a8879621a4c481540c1411b964074b 🔍

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.90138
MD5 f0ec456b9724e5bfbf0ea04953396f2c 🔍
SHA1 523e39c5b672bfe5481fde414d4d0c236eaa0ee1 🔍
SHA256 6ed16c75e595c06937ebeecff2ac7ddd8a1422e357c2a5bdd5ef94bf0a258c63 🔍
SHA3 c57e3b6d79ee0598878ed8d7703ca34916d39cac5b3d81c2c5646d02ee7e0009 🔍

10

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.34121
MD5 b3da52f6d09cc1a1c633613fb2113cb8 🔍
SHA1 1bc3d51b0657dfb176d82fa8b2aa3e64453cfa91 🔍
SHA256 67b4d8f5d2ea64605622ef43d3464ec9ca4140fa7ab9ee7a82ea079d7cb35283 🔍
SHA3 05e804679979ee988743dde4a601a83edfccd77e4fcd279f9aefd0cc262fc65e 🔍

101

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x92
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.90294
Detected Filetype Icon file
MD5 bc18985301bd2b0c99ab9f11aeca8593 🔍
SHA1 139f15b7ddac7927d62915cc47fa4fb7e56321be 🔍
SHA256 1936a6dfed37f31fc89308b38171199a9882e22991a62b8994a9cc19642943f3 🔍
SHA3 afc5d3c35fcfc8d877a6aee5f4183e64958585a9645928b87c90705e0ff9de5a 🔍

1 (#2)

Type RT_VERSION
Language English - United States
Codepage UNKNOWN
Size 0x39c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.40935
MD5 c76ad6ce7a510af05306d57f7fe63dc3 🔍
SHA1 20a1c5a8c528fea5036be08f9a8bd8cd24d602ec 🔍
SHA256 7b48d6b65417701e9e9f9b5c583d2f5b507b371bacbc105340969baca023dfce 🔍
SHA3 c7d6f3100aac8bfdae437f5637f2432d31ed8d429f3848901de30991df88c6f5 🔍

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x41a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.05432
MD5 03395896369b9f4d54afe96da59504a0 🔍
SHA1 2ed56089540e69abed7a1301e805acd46b2fd790 🔍
SHA256 ad004b008efc9493f914a11d76fa9869e8e10222ae9a276859456af8aa17cf1b 🔍
SHA3 1301031d7d35879e3c236cbbf6b349dcc3aa44f886a1e004c99944a5014a3384 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.0.16.18
ProductVersion 1.0.16.18
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
CompanyName ClueHunters Technologies
FileDescription ClueHunters Technologies Desktop
FileVersion (#2) 1.0.16+18
InternalName cluehunters_tech
LegalCopyright Copyright (C) 2026 ClueHunters Technologies. All rights reserved.
OriginalFilename cluehunters_tech.exe
ProductName ClueHunters Technologies
ProductVersion (#2) 1.0.16+18
Resource LangID English - United States

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2026-Oct-14 18:09:01
Version 0.0
SizeofData 928
AddressOfRawData 0x9c9d0
PointerToRawData 0x9b5d0

TLS Callbacks

StartAddressOfRawData 0x14009cd90
EndAddressOfRawData 0x14009cd98
AddressOfIndex 0x1400b6490
AddressOfCallbacks 0x14008db70
SizeOfZeroFill 0
Characteristics IMAGE_SCN_ALIGN_4BYTES
Callbacks (EMPTY)

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x1400b3240

RICH Header

XOR Key 0x4dab4ab2
Unmarked objects 0
Imports (VS2008 SP1 build 30729) 22
ASM objects (35721) 3
C objects (35721) 10
C++ objects (35721) 35
Imports (35721) 6
C objects (CVTCIL) (35215) 1
Imports (VS2022 Update 4 (17.4.3-4) compiler 31937) 2
C++ objects (33135) 25
C objects (33135) 8
Imports (36244) 16
Imports (35215) 13
Total imports 336
C++ objects (36244) 13
Exports (36244) 1
Resource objects (36244) 1
151 1
Linker (36244) 1

Errors

Leave a comment

No comments yet.