Manalyze report for 1db79ef66067a48ba1478949598c551da779541fac75cd4baa67ad04c9e29e77

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2026-Apr-17 16:37:38
Detected languages	English - United States
TLS Callbacks	1 callback(s) detected.
Comments	DDNet
CompanyName	DDNet Team
FileDescription	DDNet
FileVersion	`10.8.7`
InternalName	DDNet
LegalCopyright	Copyright (C) DDNet Team
OriginalFilename	DDNet.exe
ProductName	DDNet
ProductVersion	`10.8.7`

Plugin Output

Info	Interesting strings found in the binary:	Contains domain names: DDNet.org ddnet.org ftapi.pythonanywhere.com github.com githubusercontent.com heinrich5991.de https://ddnet.org https://discord.gg https://ftapi.pythonanywhere.com https://github.com https://info.ddnet.org https://info.ddnet.org/info https://ko-fi.com https://maps.ddnet.org https://master1.ddnet.org https://master1.ddnet.org/ddnet/15/register https://master1.ddnet.org/ddnet/15/servers.json https://master2.ddnet.org https://master2.ddnet.org/ddnet/15/servers.json https://master3.ddnet.org https://master3.ddnet.org/ddnet/15/servers.json https://master4.ddnet.org https://master4.ddnet.org/ddnet/15/servers.json https://raw.githubusercontent.com https://raw.githubusercontent.com/SollyBunny/ddnet-custom-communities/refs/heads/main/custom-communities-ddnet-info.json https://skins.ddnet.org https://skins.ddnet.org/skin/ https://skins.ddnet.org/skin/community/ https://tclient.app https://update.tclient.app https://update.tclient.app/%s https://update.tclient.app/info.json https://wiki.ddnet.org https://wiki.ddnet.org/ https://wiki.ddnet.org/wiki/Mapping https://wiki.ddnet.org/wiki/Touch_controls info.ddnet.org ko-fi.com maps.ddnet.org master1.ddnet.org master2.ddnet.org master3.ddnet.org master4.ddnet.org netevent.ddnet.org netmsg.ddnet.org netobj.ddnet.org pythonanywhere.com raw.githubusercontent.com skins.ddnet.org wiki.ddnet.org
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to CRC32` `Uses constants related to MD5` `Uses constants related to SHA256` `Uses constants related to RC5 or RC6` `Uses known Mersenne Twister constants` `Microsoft's Cryptography API`
Suspicious	The PE is packed or was manually edited.	`Unusual section name found: .fptable` `The number of imports reported in the RICH header is inconsistent.`
Suspicious	The PE contains functions most legitimate programs don't use.	`[!] The program may be hiding some of its imports: LoadLibraryExW LoadLibraryW GetProcAddress LoadLibraryA` `Can access the registry: RegGetValueW RegSetValueExW RegCloseKey RegCreateKeyExW RegOpenKeyExW` `Uses Microsoft's cryptographic API: CryptAcquireContextW CryptGenRandom` `Leverages the raw socket API to access the Internet: freeaddrinfo getaddrinfo WSAGetLastError socket setsockopt sendto select recvfrom htons ioctlsocket WSAStartup __WSAFDIsSet bind closesocket WSAStringToAddressA`
Suspicious	No VirusTotal score.	`This file has never been scanned on VirusTotal.`

Hashes

MD5	`96469d3b5ddd5a94f585298699aab258`
SHA1	`a6c7cea834eba9285d4ac06c2274be03b765d1ec`
SHA256	`1db79ef66067a48ba1478949598c551da779541fac75cd4baa67ad04c9e29e77`
SHA3	`b7193c5fcf042def5415ad09c42ab69574615a256292a3bdd05fb96239670a30`
SSDeep	`49152:PeD1zj4MfqKUscYZWfc2zFfmWBQGrQ13ijJ+zYSPdhkSn/s5+u/ysQIk6B3Ao9m:yq3f1FQwPWv8skoDmmZ`
Imports Hash	`53a9363f59d4305792ae357fecefe2fd`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x130`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`7`
TimeDateStamp	2026-Apr-17 16:37:38
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0x472e00`
SizeOfInitializedData	`0x211000`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x000000000040CC74 (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x140000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`6.0`
ImageVersion	`0.0`
SubsystemVersion	`6.0`
Win32VersionValue	`0`
SizeOfImage	`0x688000`
SizeOfHeaders	`0x400`
Checksum	`0`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`9b5db15b946b49466a8a258c5007b74f`
SHA1	`ae790eb6ff3a2a9d942d9f4c6d6873af3bf104fe`
SHA256	`29762ddbd9141e67751a4077e40c0986992da55785fd3d560f09c6a899a807df`
SHA3	`653bbdcc6acad8217394026ea011fb176a2e4f5d5ba3986618e48f204c251104`
VirtualSize	`0x472cf0`
VirtualAddress	`0x1000`
SizeOfRawData	`0x472e00`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.46843`

.rdata

MD5	`208477dac8826ee3ea3e4e59d11df31c`
SHA1	`b83d9d8ccd9f552815d40bbeb239e9b225834b78`
SHA256	`6a98e5bb6926bf8ab72e9e49fc46e484c8bdc9df4e32dcd8e286613aa3eff8b2`
SHA3	`6bcca06707ba94004865a1adea315e578f7ac1fa66fd0a8b0cb580768d7978ad`
VirtualSize	`0x130cd4`
VirtualAddress	`0x474000`
SizeOfRawData	`0x130e00`
PointerToRawData	`0x473200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.6124`

.data

MD5	`01fce2ec375ecb1d456c9c9f0dacfbb6`
SHA1	`c5df88282ae60f906e4ad5aa598c180322756e7b`
SHA256	`b4c9326e5b5bb29e9eed859c0b70a5f2336a536a9c70380a54ccfd0239c966b1`
SHA3	`3c09f4f5d654ea90985b8e74bb00bb14147e836633ede015a12f1f518a437fcb`
VirtualSize	`0xa34a0`
VirtualAddress	`0x5a5000`
SizeOfRawData	`0x53000`
PointerToRawData	`0x5a4000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`4.99083`

.pdata

MD5	`9dcb1b0f84a84e6484cf0d27a3008c0d`
SHA1	`48ff3f6324e62d232be923a55cf0072c3a07aca2`
SHA256	`cbdc7ba14268e3d357001b7c53d00f8467bba1ea1d03f06c83637ac1bd49dfc5`
SHA3	`9b9df3974587d76056e2f3c292c110f297c8c0ff757f8e6f6034b99d4da812b5`
VirtualSize	`0x2af60`
VirtualAddress	`0x649000`
SizeOfRawData	`0x2b000`
PointerToRawData	`0x5f7000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.41349`

.fptable

MD5	`bf619eac0cdf3f68d496ea9344137e8b`
SHA1	`5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5`
SHA256	`076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560`
SHA3	`622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59`
VirtualSize	`0x100`
VirtualAddress	`0x674000`
SizeOfRawData	`0x200`
PointerToRawData	`0x622000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0`

.rsrc

MD5	`2c1c0ceeea8e6b429c154297f2bd7eec`
SHA1	`ec4f3f696f545f88edb5b5c9f8cea2a83d671d40`
SHA256	`8f3ef21ce8ad9ef8a7c5ff2f87ef34544d61868876351d92b880673865235ef5`
SHA3	`08cfa73954b6f52f4c0bc98f8055f4b55d556632af719acd33182bb3f59674a4`
VirtualSize	`0x84a0`
VirtualAddress	`0x675000`
SizeOfRawData	`0x8600`
PointerToRawData	`0x622200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.32542`

.reloc

MD5	`22ef50e582528195cce2e396d724aeab`
SHA1	`bdd46d4eaefb101412816c19cf6ab7d5ef25582d`
SHA256	`6bff258b360b7ce5be16289810e54aa41eb9a02a43aebeb57e60627320cd2bcf`
SHA3	`ad5539aee8c720da7284509f6fd4860ece82d76ff63212bf28a862badea426f7`
VirtualSize	`0x9370`
VirtualAddress	`0x67e000`
SizeOfRawData	`0x9400`
PointerToRawData	`0x62a800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.45997`

Imports

libfreetype.dll	`FT_Done_Face` `FT_Done_FreeType` `FT_Error_String` `FT_Get_Char_Index` `FT_Get_Kerning` `FT_Get_Postscript_Name` `FT_Init_FreeType` `FT_Library_Version` `FT_Load_Char` `FT_Load_Glyph` `FT_New_Memory_Face` `FT_Set_Pixel_Sizes`
libpng16-16.dll	`png_create_info_struct` `png_create_read_struct` `png_create_write_struct` `png_destroy_info_struct` `png_destroy_read_struct` `png_destroy_write_struct` `png_error` `png_get_bit_depth` `png_get_channels` `png_get_color_type` `png_get_compression_type` `png_get_error_ptr` `png_get_filter_type` `png_get_image_height` `png_get_image_width` `png_get_interlace_type` `png_get_io_ptr` `png_get_rowbytes` `png_get_valid` `png_read_image` `png_read_info` `png_read_update_info` `png_set_IHDR` `png_set_expand_gray_1_2_4_to_8` `png_set_palette_to_rgb` `png_set_read_fn` `png_set_sig_bytes` `png_set_strip_16` `png_set_tRNS_to_alpha` `png_set_write_fn` `png_sig_cmp` `png_write_end` `png_write_image` `png_write_info`
SDL2.dll	`SDL_CloseAudioDevice` `SDL_CreateWindow` `SDL_DestroyWindow` `SDL_EventState` `SDL_FlashWindow` `SDL_GL_CreateContext` `SDL_GL_DeleteContext` `SDL_GL_GetDrawableSize` `SDL_GL_MakeCurrent` `SDL_GL_SetAttribute` `SDL_GL_SetSwapInterval` `SDL_GL_SwapWindow` `SDL_GetClipboardText` `SDL_GetClosestDisplayMode` `SDL_GetCurrentAudioDriver` `SDL_GetCurrentDisplayMode` `SDL_GetDesktopDisplayMode` `SDL_GetDisplayBounds` `SDL_GetDisplayMode` `SDL_GetDisplayName` `SDL_GetError` `SDL_GetMouseState` `SDL_GetNumDisplayModes` `SDL_GetNumVideoDisplays` `SDL_GetRelativeMouseState` `SDL_GetScancodeFromKey` `SDL_GetVersion` `SDL_GetWindowDisplayIndex` `SDL_GetWindowFlags` `SDL_GetWindowFromID` `SDL_GetWindowSize` `SDL_HasScreenKeyboardSupport` `SDL_Init` `SDL_InitSubSystem` `SDL_IsScreenKeyboardShown` `SDL_JoystickGetAxis` `SDL_JoystickGetGUID` `SDL_JoystickGetGUIDString` `SDL_JoystickGetHat` `SDL_JoystickInstanceID` `SDL_JoystickName` `SDL_JoystickNumAxes` `SDL_JoystickNumBalls` `SDL_JoystickNumButtons` `SDL_JoystickNumHats` `SDL_JoystickOpen` `SDL_MinimizeWindow` `SDL_NumJoysticks` `SDL_OpenAudioDevice` `SDL_PauseAudioDevice` `SDL_PollEvent` `SDL_Quit` `SDL_QuitSubSystem` `SDL_RestoreWindow` `SDL_SetClipboardText` `SDL_SetHint` `SDL_SetRelativeMouseMode` `SDL_SetTextInputRect` `SDL_SetWindowBordered` `SDL_SetWindowDisplayMode` `SDL_SetWindowFullscreen` `SDL_SetWindowGrab` `SDL_SetWindowPosition` `SDL_SetWindowResizable` `SDL_SetWindowSize` `SDL_ShowMessageBox` `SDL_StartTextInput` `SDL_StopTextInput` `SDL_Vulkan_GetDrawableSize` `SDL_WasInit` `SDL_free`
avformat-61.dll	`av_interleaved_write_frame` `av_write_trailer` `avformat_alloc_output_context2` `avformat_free_context` `avformat_new_stream` `avformat_write_header` `avio_closep` `avio_open`
avcodec-61.dll	`av_packet_alloc` `av_packet_free` `av_packet_rescale_ts` `avcodec_alloc_context3` `avcodec_find_encoder` `avcodec_free_context` `avcodec_get_name` `avcodec_is_open` `avcodec_open2` `avcodec_parameters_from_context` `avcodec_receive_packet` `avcodec_send_frame`
avutil-59.dll	`av_channel_layout_from_mask` `av_dict_copy` `av_dict_free` `av_frame_alloc` `av_frame_free` `av_frame_get_buffer` `av_frame_make_writable` `av_log_set_callback` `av_opt_set` `av_opt_set_chlayout` `av_opt_set_int` `av_opt_set_sample_fmt` `av_rescale_q` `av_rescale_rnd` `av_samples_fill_arrays` `av_strerror`
swscale-8.dll	`sws_freeContext` `sws_getCachedContext` `sws_getCoefficients` `sws_scale` `sws_setColorspaceDetails`
swresample-5.dll	`swr_alloc` `swr_convert` `swr_free` `swr_get_delay` `swr_init`
libopusfile.dll	`op_channel_count` `op_free` `op_open_memory` `op_pcm_total` `op_read` `op_tags`
steam_api.dll	`SteamAPI_Init` `SteamAPI_ISteamFriends_SetRichPresence` `SteamAPI_ISteamFriends_GetPersonaName` `SteamAPI_ISteamFriends_ClearRichPresence` `SteamAPI_SteamFriends_v017` `SteamAPI_ISteamApps_GetLaunchCommandLine` `SteamAPI_SteamApps_v008` `SteamAPI_ManualDispatch_RunFrame` `SteamAPI_ManualDispatch_FreeLastCallback` `SteamAPI_ManualDispatch_Init` `SteamAPI_Shutdown` `SteamAPI_GetHSteamPipe` `SteamAPI_ManualDispatch_GetNextCallback`
api-ms-win-core-synch-l1-2-0.dll	`WakeByAddressSingle` `WaitOnAddress` `WakeByAddressAll`
OPENGL32.dll	`glEnable` `glEnableClientState` `glFinish` `glGenTextures` `glGetIntegerv` `glGetString` `glLoadIdentity` `glMatrixMode` `glOrtho` `glPixelStorei` `glReadBuffer` `glReadPixels` `glScissor` `glDrawArrays` `glTexImage2D` `glTexParameterf` `glTexParameteri` `glTexSubImage2D` `glVertexPointer` `glViewport` `glDrawElements` `wglGetProcAddress` `glDisableClientState` `glDisable` `glDepthMask` `glDeleteTextures` `glColorPointer` `glTexCoordPointer` `glAlphaFunc` `glBindTexture` `glBlendFunc` `glClear` `glClearColor`
IMM32.dll	`ImmReleaseContext` `ImmGetContext` `ImmGetCandidateListW`
libcurl.dll	`curl_easy_cleanup` `curl_easy_escape` `curl_easy_getinfo` `curl_easy_init` `curl_easy_setopt` `curl_easy_strerror` `curl_free` `curl_getdate` `curl_global_cleanup` `curl_global_init` `curl_multi_add_handle` `curl_multi_cleanup` `curl_multi_info_read` `curl_multi_init` `curl_multi_perform` `curl_multi_poll` `curl_multi_remove_handle` `curl_multi_strerror` `curl_multi_wakeup` `curl_slist_append` `curl_slist_free_all` `curl_version_info`
sqlite3.dll	`sqlite3_bind_int` `sqlite3_bind_text` `sqlite3_close` `sqlite3_column_int` `sqlite3_column_text` `sqlite3_errmsg` `sqlite3_exec` `sqlite3_finalize` `sqlite3_open` `sqlite3_prepare_v2` `sqlite3_reset` `sqlite3_step`
SHLWAPI.dll	`PathIsRelativeW`
VERSION.dll	`VerQueryValueW` `GetFileVersionInfoSizeW` `GetFileVersionInfoW`
WS2_32.dll	`freeaddrinfo` `getaddrinfo` `WSAGetLastError` `socket` `setsockopt` `sendto` `select` `recvfrom` `htons` `ioctlsocket` `WSAStartup` `__WSAFDIsSet` `bind` `closesocket` `WSAStringToAddressA`
ADVAPI32.dll	`RegDeleteTreeW` `RegGetValueW` `RegSetValueExW` `GetUserNameA` `CryptAcquireContextW` `CryptGenRandom` `RegCloseKey` `RegCreateKeyExW` `RegOpenKeyExW`
ole32.dll	`CoInitializeEx` `CoUninitialize` `CoTaskMemFree`
SHELL32.dll	`SHGetKnownFolderPath` `SHChangeNotify` `CommandLineToArgvW` `ShellExecuteExW`
ntdll.dll	`RtlUnwind` `RtlUnwindEx` `RtlPcToFileHeader` `RtlVirtualUnwind` `RtlLookupFunctionEntry` `RtlCaptureContext` `NtWriteFile` `RtlNtStatusToDosError`
KERNEL32.dll	`GetTimeFormatW` `GetDateFormatW` `VirtualProtect` `FlsFree` `FlsSetValue` `FlsGetValue` `FlsAlloc` `GetCommandLineA` `WriteFile` `SetStdHandle` `FreeLibraryAndExitThread` `ExitThread` `LoadLibraryExW` `TlsFree` `TlsSetValue` `TlsGetValue` `TlsAlloc` `InitializeCriticalSectionAndSpinCount` `InterlockedPushEntrySList` `GetStartupInfoW` `IsDebuggerPresent` `InitializeSListHead` `IsProcessorFeaturePresent` `SetUnhandledExceptionFilter` `UnhandledExceptionFilter` `GetStringTypeW` `GetCPInfo` `CompareStringEx` `LCMapStringEx` `DecodePointer` `EncodePointer` `GetFileType` `GetStdHandle` `FlushFileBuffers` `CreateFileW` `MoveFileExW` `GetModuleFileNameW` `RemoveDirectoryW` `GetFileAttributesW` `FindNextFileW` `FindFirstFileW` `FindClose` `DeleteFileW` `CreateDirectoryW` `GetCurrentDirectoryW` `CreateNamedPipeW` `PeekNamedPipe` `DisconnectNamedPipe` `ConnectNamedPipe` `ReadFile` `MapViewOfFile` `OpenFileMappingW` `FormatMessageW` `LocalFree` `LoadLibraryW` `GetProcAddress` `FreeLibrary` `GetLastError` `GetComputerNameA` `GetModuleHandleA` `GetSystemTimeAsFileTime` `GetSystemInfo` `GlobalMemoryStatusEx` `GetCurrentThreadId` `GetCurrentThread` `GetCurrentProcessId` `LCMapStringW` `HeapFree` `HeapAlloc` `QueryPerformanceFrequency` `QueryPerformanceCounter` `CloseHandle` `GetDiskFreeSpaceExA` `WriteConsoleW` `SetConsoleOutputCP` `GetConsoleScreenBufferInfo` `SetConsoleTextAttribute` `GetCommandLineW` `WideCharToMultiByte` `GetUserDefaultLocaleName` `TerminateProcess` `GetExitCodeProcess` `ReleaseSemaphore` `WaitForSingleObject` `CreateSemaphoreW` `Sleep` `IsValidLocale` `GetUserDefaultLCID` `EnumSystemLocalesW` `SetEndOfFile` `GetTimeZoneInformation` `IsValidCodePage` `AttachConsole` `GetACP` `CreateThread` `GetModuleHandleExW` `MultiByteToWideChar` `HeapReAlloc` `lstrlenW` `GetCurrentProcess` `WaitForSingleObjectEx` `DeleteCriticalSection` `InitializeCriticalSectionEx` `LeaveCriticalSection` `EnterCriticalSection` `GetLocaleInfoEx` `InitOnceComplete` `InitOnceBeginInitialize` `RaiseException` `GetNativeSystemInfo` `GetExitCodeThread` `SleepConditionVariableSRW` `WakeAllConditionVariable` `TryAcquireSRWLockExclusive` `AcquireSRWLockExclusive` `ReleaseSRWLockExclusive` `CompareStringW` `GetProcessHeap` `LoadLibraryA` `FreeEnvironmentStringsW` `GetConsoleOutputCP` `ReadConsoleW` `ExitProcess` `GetModuleHandleW` `SetEnvironmentVariableW` `FindFirstFileExW` `GetEnvironmentVariableW` `GetEnvironmentStringsW` `SetLastError` `GetFileSizeEx` `CreateMutexA` `ReleaseMutex` `SetFilePointerEx` `GetLocaleInfoW` `GetConsoleMode` `GetOEMCP` `HeapSize` `SetConsoleMode`
IPHLPAPI.DLL	`GetAdaptersInfo`

Delayed Imports

1

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.75497`
MD5	`7a589536c2c07f69d8eb1f0a00ea6ce3`
SHA1	`275db9910248712b4b6cfcba70d16ff461ea61d8`
SHA256	`3ab8f0dcfae20d5f311e5e69a4b4e59846d40420b395c6a059d1658d7a09e9e5`
SHA3	`6a78a610781fb4e2835749fbf2b9b267c07c189ccb9fecedd51c729fa207aa20`

2

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.45806`
MD5	`860f8c48e91f0bfe1ea62c35339e86e5`
SHA1	`f3f7a987854436f2b7ba8e4c202a846f8c21f6ef`
SHA256	`ac2e6bbdd6641c885ba66fcb08ecc90448ee9a7d62c2d1b1c96e14e46973121e`
SHA3	`fdf4ec7904410db40a055f59f477bac60e4540192d16926fc098fdc798d3977d`

3

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x25a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.14443`
MD5	`99f9c4d17472282ed3e1102c072cfb34`
SHA1	`4304bb1435fcc064afc08fb631bb0863aea2bd20`
SHA256	`7c91a4397e71f1de1297cb54f29e31cbfef4d191dfb0c3b9f3551bc89a48025d`
SHA3	`ffeb4054d03f7cdb0e1be88f855d9fddc230bfc126cc1a02e81cc78d46f0ee61`

4

Type	`RT_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x3eb3`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.97068`
Detected Filetype	PNG graphic file
MD5	`a2e44ce8630992769e0a5b61f9ecadb0`
SHA1	`6abe0ccd5f930522d592a2b12c8aad2b8cdc4db9`
SHA256	`c73615a5623edce52ef79f62616aaa90ecb4de593d56474603e42fc5d5c8ee6d`
SHA3	`b077db56fedc45615e04010dd41127fa52c0ba52a32eb3f99da3bb0e1537da26`

ID

Type	`RT_GROUP_ICON`
Language	English - United States
Codepage	UNKNOWN
Size	`0x3e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.44608`
Detected Filetype	Icon file
MD5	`b9e200b118f13f1dfc6bcba5fe2b9bd5`
SHA1	`f8fab9a806cc21a13138bffa765142d0f20ead63`
SHA256	`2a5a782daf4fc08b309d4f3c808150245bed95001317387f42bb4bfb88fb7fa0`
SHA3	`02cdd8b4ef85475e1a2ae086b0cd5efa9e02b5656ba8c1370032b0ae686205b6`

1 (#2)

Type	`RT_VERSION`
Language	English - United States
Codepage	UNKNOWN
Size	`0x2bc`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.31095`
MD5	`e37badbfa7124d2cc14d4ec29dcabbe4`
SHA1	`cee26ab4ddca04868a9f7052f4b8a3b2fe005736`
SHA256	`c550f360a65444a0c400e6451225e6dfda7fa3b8968122004158e1898cca0797`
SHA3	`1cd93deae3aa9ddc2afab77445936ad9a6d049bc4f855502fca417b663d246b7`

1 (#3)

Type	`RT_MANIFEST`
Language	English - United States
Codepage	UNKNOWN
Size	`0x660`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.12397`
MD5	`fe2229562dd2d787ba26c1570d9c4aa7`
SHA1	`f59524075d68ef99240e0b6f4a319d181d4d943a`
SHA256	`bb2e101fa184c7ee43c7245aceebdda1fbd7f2b52ff0e5092d2dbbdc2f7c8bf0`
SHA3	`40699fdf42c8fc7c9c527754ab446931d9233a5eff95dd1549cc4d912a47b719`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	19.8.0.0
ProductVersion	19.8.0.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	English - United States
Comments	DDNet
CompanyName	DDNet Team
FileDescription	DDNet
FileVersion (#2)	10.8.7
InternalName	DDNet
LegalCopyright	Copyright (C) DDNet Team
OriginalFilename	DDNet.exe
ProductName	DDNet
ProductVersion (#2)	10.8.7

Resource LangID	English - United States

IMAGE_DEBUG_TYPE_POGO

Characteristics	`0`
TimeDateStamp	2026-Apr-17 16:37:38
Version	`0.0`
SizeofData	`1132`
AddressOfRawData	`0x55819c`
PointerToRawData	`0x55739c`

TLS Callbacks

StartAddressOfRawData	`0x140558660`
EndAddressOfRawData	`0x1405586dc`
AddressOfIndex	`0x140647880`
AddressOfCallbacks	`0x140475008`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_ALIGN_8BYTES`
Callbacks	`0x0000000140008170`

Load Configuration

Size	`0x140`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x1405b1640`

RICH Header

XOR Key	`0x6b875ee2`
Unmarked objects	`0`
C++ objects (33145)	`194`
C objects (33145)	`73`
ASM objects (33145)	`35`
253 (35207)	`5`
C objects (35207)	`17`
ASM objects (35207)	`14`
C++ objects (35207)	`102`
C objects (CVTCIL) (33145)	`1`
Imports (33145)	`24`
Imports (35222)	`3`
Total imports	`318`
Unmarked objects (#2)	`243`
C objects (35222)	`24`
C++ objects (35222)	`282`
Resource objects (35222)	`1`
151	`2`
Linker (35222)	`1`

Errors

Leave a comment

No comments yet.