Manalyze report for 1dacc8bacaeff43970da636dcd3fe22ceeef102de60e2c8ef272d73a024f6310

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2026-Sep-13 02:06:53
Detected languages	English - United States
TLS Callbacks	2 callback(s) detected.

Plugin Output

Suspicious	The PE is possibly packed.	`Unusual section name found: .m:G` `Unusual section name found: .u#d` `Unusual section name found: .qzh`
Suspicious	The PE contains functions most legitimate programs don't use.	`Leverages the raw socket API to access the Internet: WS2_32.dll` `Interacts with services: QueryServiceStatus`
Suspicious	No VirusTotal score.	`This file has never been scanned on VirusTotal.`

Hashes

MD5	`cdc1272d97adafdfec3f25f5bca5b858` 🔍
SHA1	`19d26cb6a09d276be97040ebb5a27bc58a12fc86` 🔍
SHA256	`1dacc8bacaeff43970da636dcd3fe22ceeef102de60e2c8ef272d73a024f6310` 🔍
SHA3	`05949d0d51e72fe3343759e47af74d6cd5dd405596c0ab76999aadc33f022490` 🔍
SSDeep	`393216:tMvjY7laNuWvsKgEeKAHnVkEMgengOWn35HXg0jvKVpuLrxlt2AFjv9T47I+wQt:mbMaN75gEeKAHfXxv3PjvKVpu3xj2Qj` 🔍
Imports Hash	`a9df595f57958224b2be9852b4e26610` 🔍

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`8`
TimeDateStamp	2026-Sep-13 02:06:53
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE` `IMAGE_FILE_RELOCS_STRIPPED`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0x5cc000`
SizeOfInitializedData	`0x357600`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x0000000003050C5D (Section: .qzh)`
BaseOfCode	`0x1000`
ImageBase	`0x140000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x3247000`
SizeOfHeaders	`0x400`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`
VirtualSize	`0x5cbe27`
VirtualAddress	`0x1000`
SizeOfRawData	`0`
PointerToRawData	`0`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`

.rdata

MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`
VirtualSize	`0x150d02`
VirtualAddress	`0x5cd000`
SizeOfRawData	`0`
PointerToRawData	`0`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`

.data

MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`
VirtualSize	`0xb9e08`
VirtualAddress	`0x71e000`
SizeOfRawData	`0`
PointerToRawData	`0`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`

.pdata

MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`
VirtualSize	`0x5a2e8`
VirtualAddress	`0x7d8000`
SizeOfRawData	`0`
PointerToRawData	`0`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`

.m:G

MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`
VirtualSize	`0x11aeee5`
VirtualAddress	`0x833000`
SizeOfRawData	`0`
PointerToRawData	`0`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`

.u#d

MD5	`bfafab74e27dc48cc25c453c1bab6dc3 🔍`
SHA1	`0c8cb804b87ef0bfa29bed99841fd4fff9670b55 🔍`
SHA256	`175f369c3d2fbf4cf7506eb41633718c0775d82d2ab695758a736674e8b0c1b3 🔍`
SHA3	`b57522d2057ccba4c7b71d9003250a03a7a3901701359d04e3b8e5d9548d78e5 🔍`
VirtualSize	`0x2a0`
VirtualAddress	`0x19e2000`
SizeOfRawData	`0x400`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`1.26654`

.qzh

MD5	`75f195208c467d33d8771dfb55146fb1 🔍`
SHA1	`f2ec5ecba58a1f799f815d8344f626024e60474e 🔍`
SHA256	`2f106772ead2deb36f00e11522ac8035f2c2e038e305bfa74675e7d094a32c76 🔍`
SHA3	`edf74c19f6538d114f2d52aabcca8c64624a9639303a44a5d1f6560bbdb4bc75 🔍`
VirtualSize	`0x1775c68`
VirtualAddress	`0x19e3000`
SizeOfRawData	`0x1775e00`
PointerToRawData	`0x800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_NOT_PAGED` `IMAGE_SCN_MEM_READ`
Entropy	`7.96182`

.rsrc

MD5	`f77609ced2a90cf42f69757ceb56e677 🔍`
SHA1	`8f5b8a5ae1b9f08c94690093a75f49b600e3e0bf 🔍`
SHA256	`06634652212d6b8f33d2acf8b885a70cdd0f3865c0b982699d8a5604988c5eeb 🔍`
SHA3	`c7007840d77c418383ea937ce1c7b039a78b379add2faeb8c02e138fb7e78473 🔍`
VirtualSize	`0xedfcc`
VirtualAddress	`0x3159000`
SizeOfRawData	`0x2800`
PointerToRawData	`0x1776600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.29206`

Imports

WTSAPI32.dll	`WTSFreeMemory`
gdiplus.dll	`GdipGetImageEncoders`
d3d11.dll	`D3D11CreateDeviceAndSwapChain`
WS2_32.dll	`recvfrom`
IPHLPAPI.DLL	`if_nametoindex`
bcrypt.dll	`BCryptGenRandom`
KERNEL32.dll	`GetLocaleInfoEx`
USER32.dll	`wsprintfW`
GDI32.dll	`CreateCompatibleDC`
ADVAPI32.dll	`QueryServiceStatus`
SHELL32.dll	`ShellExecuteExW`
ole32.dll	`CreateStreamOnHGlobal`
MSVCP140.dll	`_Cnd_broadcast`
D3DCOMPILER_47.dll	`D3DCompile`
dwmapi.dll	`DwmIsCompositionEnabled`
IMM32.dll	`ImmReleaseContext`
VCRUNTIME140.dll	`__current_exception_context`
VCRUNTIME140_1.dll	`__CxxFrameHandler4`
api-ms-win-crt-runtime-l1-1-0.dll	`_invoke_watson`
api-ms-win-crt-string-l1-1-0.dll	`strcmp`
api-ms-win-crt-utility-l1-1-0.dll	`_lrotl`
api-ms-win-crt-stdio-l1-1-0.dll	`_close`
api-ms-win-crt-filesystem-l1-1-0.dll	`remove`
api-ms-win-crt-convert-l1-1-0.dll	`strtol`
api-ms-win-crt-math-l1-1-0.dll	`pow`
api-ms-win-crt-locale-l1-1-0.dll	`___lc_codepage_func`
api-ms-win-crt-heap-l1-1-0.dll	`_set_new_mode`
api-ms-win-crt-environment-l1-1-0.dll	`getenv`
api-ms-win-crt-time-l1-1-0.dll	`_localtime64_s`
api-ms-win-crt-multibyte-l1-1-0.dll	`_mbsnbcmp`
CRYPT32.dll	`CertEnumCertificatesInStore`

Delayed Imports

112

Type	`BINARY`
Language	English - United States
Codepage	UNKNOWN
Size	`0x45e00`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

120

Type	`BINARY`
Language	English - United States
Codepage	UNKNOWN
Size	`0x45c00`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

122

Type	`JPG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x513c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

102

Type	`PNG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xebe`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

103

Type	`PNG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x8fa1`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

104

Type	`PNG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x47ff`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

105

Type	`PNG`
Language	English - United States
Codepage	UNKNOWN
Size	`0xd06`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

106

Type	`PNG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x63a4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

109

Type	`PNG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x2b0c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

110

Type	`PNG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x2a7b`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

111

Type	`PNG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x2c24`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

113

Type	`PNG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x56d1`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

114

Type	`PNG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1869`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

115

Type	`PNG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x775b`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

116

Type	`PNG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x533d`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

118

Type	`PNG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x59da`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

119

Type	`PNG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x50de`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

121

Type	`PNG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x1653f`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

123

Type	`PNG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x4ec9`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

124

Type	`PNG`
Language	English - United States
Codepage	UNKNOWN
Size	`0x3b9c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`d41d8cd98f00b204e9800998ecf8427e 🔍`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709 🔍`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 🔍`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a 🔍`

1

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.28563`
MD5	`0a70760641a91fd0944c7a8630cf906c 🔍`
SHA1	`3f3e24351321d9827077ef213aa9289c809934c4 🔍`
SHA256	`b4422eda52e098d45f0e1f4ec0fdf6191849240601a2c61165f61456a3ca3450 🔍`
SHA3	`a64787acc49cf6903b7be16405e6e83aac305b29ce9fa329e27d54f0af5fda65 🔍`

2

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0xe98`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.65064`
MD5	`7b10dc1bfa168bb5aeeee4d051fbaf01 🔍`
SHA1	`43d5a63f2b5eca79e6a58ded5ea66be0ca764b20 🔍`
SHA256	`6d22fcc3aa73928e13bc6d867f90c3fc730b1de236de320a7828e27ec7614ed7 🔍`
SHA3	`bfca4150e25f54a3d27b5e5ded1107264fd340e0048462dd4c176f3dc1b9c6ef 🔍`

107

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.7815`
Detected Filetype	Icon file
MD5	`3c68f77c35c26ff079a1c410ee44fa62 🔍`
SHA1	`0b40150c95fc2c6414c90d44ee78b8d8814b3393 🔍`
SHA256	`a14e70ed824f3f17d3a51136aa08839954d6d3ccadaa067415c7bfc08e6636b0 🔍`
SHA3	`590dcbf2ec3f485a6c24e3e627f383ee7588eb49978321f12c07d8190a6c1396 🔍`

108

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.0815`
Detected Filetype	Icon file
MD5	`4f38f2589c8cfa0843889242ff9ceb2e 🔍`
SHA1	`c18e3385ef7e4cffec6c3c0fad3f9045b024abaa 🔍`
SHA256	`e76ff23348df0c36f66c7b0060e19b003a78a713b72d58b4827382f010277d2f 🔍`
SHA3	`a769b6edc3a247a63fd44c6ff58c4496e969ac2693067e15f54454f36bb14413 🔍`

1 (#2)

Type	`RT_MANIFEST`
Language	English - United States
Codepage	UNKNOWN
Size	`0x282`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.0672`
MD5	`b2ced3969f764cf58d1e3f898073333a 🔍`
SHA1	`d4e26a5bc1ae0f1b8c21554308ee5a20614e6a56 🔍`
SHA256	`1d8a782b70eaa4d474727b0c68e8dfb3105966bac2fd3ed0c23df96388957674 🔍`
SHA3	`ce1e576a590d4453de91b4877643a36e09055955d3cca3f8571b549853470182 🔍`

Version Info

TLS Callbacks

StartAddressOfRawData	`0x1419e21f8`
EndAddressOfRawData	`0x1419e2264`
AddressOfIndex	`0x1407d7858`
AddressOfCallbacks	`0x142fd72b0`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_ALIGN_8BYTES`
Callbacks	`0x00000001430EA2D8` `0x000000014020B4B0`

Load Configuration

Size	`0x140`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x1407ab600`

RICH Header

Errors

[*] Warning: Section .text has a size of 0!
[*] Warning: Section .rdata has a size of 0!
[*] Warning: Section .data has a size of 0!
[*] Warning: Section .pdata has a size of 0!
[*] Warning: Section .m:G has a size of 0!
[!] Error: Resource 112 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 112 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 112 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 120 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 120 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 120 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 122 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 122 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 122 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 102 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 102 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 102 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 103 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 103 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 103 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 104 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 104 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 104 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 105 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 105 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 105 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 106 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 106 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 106 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 109 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 109 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 109 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 110 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 110 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 110 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 111 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 111 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 111 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 113 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 113 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 113 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 114 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 114 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 114 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 115 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 115 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 115 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 116 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 116 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 116 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 118 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 118 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 118 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 119 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 119 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 119 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 121 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 121 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 121 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 123 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 123 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 123 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 124 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 124 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 124 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 112 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 112 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 120 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 120 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 122 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 122 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 102 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 102 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 103 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 103 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 104 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 104 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 105 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 105 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 106 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 106 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 109 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 109 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 110 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 110 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 111 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 111 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 113 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 113 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 114 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 114 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 115 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 115 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 116 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 116 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 118 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 118 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 119 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 119 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 121 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 121 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 123 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 123 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 124 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 124 is bigger than the PE. Not trying to load it in memory.
[*] Warning: Resource  is empty!
[!] Error: Resource 112 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 112 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 120 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 120 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 122 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 122 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 102 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 102 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 103 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 103 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 104 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 104 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 105 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 105 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 106 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 106 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 109 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 109 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 110 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 110 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 111 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 111 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 113 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 113 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 114 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 114 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 115 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 115 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 116 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 116 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 118 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 118 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 119 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 119 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 121 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 121 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 123 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 123 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 124 is bigger than the PE. Not trying to load it in memory.
[!] Error: Resource 124 is bigger than the PE. Not trying to load it in memory.

Leave a comment

No comments yet.