319ce813e15647f982c49af97f18dfaae627fcade73dad3d244c13715da221af

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 1970-Jan-01 00:00:00
Detected languages English - United States
CompanyName SoftPerfect Pty Ltd
FileDescription Network monitoring app
LegalCopyright 2016-2025 SoftPerfect Pty Ltd
ProductName NetWorx
ProductVersion 25.11
Comments
FileVersion 25.11.0.0
InternalName
LegalTrademarks
OriginalFilename

Plugin Output

Info Interesting strings found in the binary: Contains domain names:
  • cacerts.digicert.com
  • crl3.digicert.com
  • crl4.digicert.com
  • digicert.com
  • http://cacerts.digicert.com
  • http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
  • http://cacerts.digicert.com/DigiCertGlobalG3CodeSigningECCSHA3842021CA1.crt0
  • http://cacerts.digicert.com/DigiCertGlobalRootG3.crt0B
  • http://cacerts.digicert.com/DigiCertTrustedG4TimeStampingRSA4096SHA2562025CA1.crt0_
  • http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
  • http://crl3.digicert.com
  • http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
  • http://crl3.digicert.com/DigiCertGlobalG3CodeSigningECCSHA3842021CA1.crl0N
  • http://crl3.digicert.com/DigiCertGlobalRootG3.crl0
  • http://crl3.digicert.com/DigiCertTrustedG4TimeStampingRSA4096SHA2562025CA1.crl0
  • http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
  • http://crl4.digicert.com
  • http://crl4.digicert.com/DigiCertGlobalG3CodeSigningECCSHA3842021CA1.crl0
  • http://ocsp.digicert.com0
  • http://ocsp.digicert.com0A
  • http://ocsp.digicert.com0C
  • http://ocsp.digicert.com0W
  • http://www.digicert.com
  • http://www.digicert.com/CPS0
  • www.digicert.com
Info Cryptographic algorithms detected in the binary: Uses constants related to SHA256
Suspicious This PE is packed with Themida Unusual section name found:
Unusual section name found:
Unusual section name found:
Unusual section name found:
Unusual section name found:
Unusual section name found:
Unusual section name found:
Unusual section name found:
Unusual section name found: .themida
Section .themida is both writable and executable.
Unusual section name found: .boot
Suspicious The PE contains functions most legitimate programs don't use. Can access the registry:
  • RegCreateKeyExA
 Has Internet access capabilities:
  • WinHttpOpen
 Leverages the raw socket API to access the Internet:
  • closesocket
Suspicious The file contains overlay data. 8528 bytes of data starting at offset 0xb5f610.
The overlay data has an entropy of 7.47547 and is possibly compressed or encrypted.
Malicious VirusTotal score: 36/69 (Scanned on 2026-05-10 12:00:33) ALYac: Gen:Variant.Application.Midie.74592
AVG: Win64:MalwareX-gen [Misc]
Alibaba: Trojan:Win64/Themida.d6be6a5e
Antiy-AVL: Trojan[Packed]/Win64.Themida
Arcabit: Trojan.Application.Midie.D12360
Avast: Win64:MalwareX-gen [Misc]
Avira: TR/Redcap.wmfwa
BitDefender: Gen:Variant.Application.Midie.74592
CTX: exe.trojan.themida
CrowdStrike: win/malicious_confidence_70% (D)
Cylance: Unsafe
Cynet: Malicious (score: 99)
ESET-NOD32: Win64/Packed.Themida.Q suspicious application
Elastic: malicious (moderate confidence)
Emsisoft: Gen:Variant.Application.Midie.74592 (B)
F-Secure: Trojan.TR/Redcap.wmfwa
GData: Gen:Variant.Application.Midie.74592
Google: Detected
K7AntiVirus: Unwanted-Program ( 005ce0bd1 )
K7GW: Unwanted-Program ( 005ce0bd1 )
Lionic: Trojan.Win32.Themida.4!c
Malwarebytes: Malware.AI.33478356
McAfeeD: ti!319CE813E156
MicroWorld-eScan: Gen:Variant.Application.Midie.74592
Microsoft: Trojan:Win32/Etset!rfn
Paloalto: generic.ml
Sangfor: Trojan.Win64.Themida.Voc6
Sophos: Mal/Generic-S
Symantec: ML.Attribute.HighConfidence
TrellixENS: Artemis!8DD688EE40EF
TrendMicro: Trojan.Win64.ETSET.USBLDA26
TrendMicro-HouseCall: Trojan.Win64.ETSET.USBLDA26
VIPRE: Gen:Variant.Application.Midie.74592
Varist: W64/ABApplication.KELP-6003
Zillya: Trojan.Themida.Win64.19936
alibabacloud: VirTool:Win/Wacatac.B9nj

Hashes

MD5 8dd688ee40ef56e08a2594f2ba61f70b
SHA1 07edb474fa5afb4275d72b7b83126b40df6191ee
SHA256 319ce813e15647f982c49af97f18dfaae627fcade73dad3d244c13715da221af
SHA3 b3b44b2352ed9dfef639f67157c817143d8737ae7a16452e77b813810deba90b
SSDeep 196608:1m46ZGWxYbz25pHPtA+f8GRIxcrYCMP8Ixcso7gjU6SO6ZU/p59Ac8:sYbSlkBx6JK5Q56LF0
Imports Hash d7527fee9efc2dacc58c8a8b2b41c74f

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x80

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 15
TimeDateStamp 1970-Jan-01 00:00:00
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Image Optional Header

Magic PE32+
LinkerVersion 3.0
SizeOfCode 0x6161b0
SizeOfInitializedData 0x5db64
SizeOfUninitializedData 0x33120
AddressOfEntryPoint 0x00000000018B2058 (Section: .boot)
BaseOfCode 0x1000
ImageBase 0x100000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 4.0
ImageVersion 1.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x2020000
SizeOfHeaders 0x400
Checksum 0xb7064a
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
SizeofStackReserve 0x1000000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

MD5 f36c363db25d79cf24c182eaae6f2e8d
SHA1 9b645a54f0c56ebf1c4fbf18702155d847eedb04
SHA256 1ce8666801cfed065b0bb73152d9eb00fdec81bc284c14719d9a335214a28157
SHA3 b82a9262be1bfa5e0705327ce11c2b731787bd06db1ac02ebfcbd79ced6bed48
VirtualSize 0x6161b0
VirtualAddress 0x1000
SizeOfRawData 0x24aa00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 7.98847

(#2)

MD5 c0eb9eb8781da4c4b40c50c361efd12f
SHA1 d61cbfad3ccc053c72ab528472f009bd53c6f324
SHA256 f3737b7dd167ce33b01d698bbd437dc5e087cf1bfebbd3c1cccb735136ea991e
SHA3 f04a20e973cf1635b5d8f9d1c1ef2a94e7110e7f0a65cec7f7a39e0501617b20
VirtualSize 0x5db64
VirtualAddress 0x618000
SizeOfRawData 0x25000
PointerToRawData 0x24ae00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 7.936

(#3)

MD5 8e86c3c70bcdd01d15ec5fb0f8a74618
SHA1 69bb4373317b2249d3e377a295074bfb0ba32022
SHA256 9182798d16db220b9257cc539988572419554725082d4fbb479327d1aa9d2010
SHA3 adebdbd786cd96da5d0bb7520b77c530c6553b99ebace925423fb7000fd86371
VirtualSize 0x33a0bc
VirtualAddress 0x676000
SizeOfRawData 0x99200
PointerToRawData 0x26fe00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 7.97721

(#4)

MD5 8dbfb946cc411116788ac34c9f8d145b
SHA1 339ec674181ae5d702ab3752db715ea738f63d46
SHA256 0e797acfd43815b153d8d1ea430a442e0495baf2219e7a4035a7d927b69b9ca7
SHA3 a34145370bccd1fdea2471454aef5a1bbef3d01596650b461d3430c62e69aa1a
VirtualSize 0x63168
VirtualAddress 0x9b1000
SizeOfRawData 0x39e00
PointerToRawData 0x309000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 7.66614

.bss

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0x33120
VirtualAddress 0xa15000
SizeOfRawData 0
PointerToRawData 0x342e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

(#5)

MD5 e9d01ad52ea1aa4a035c52a361468913
SHA1 dd5405cca9a2aaf61c63595958fb41434594b77a
SHA256 cb6cdc7299fe9e699e40b68eaa5797eeaa18dbb932e8c587bfd9ea24bf71ae21
SHA3 622ab008a9157d76fb2c0a37dcae8f2ca88ab64f1028803e51d6c19f0a1394bb
VirtualSize 0x18
VirtualAddress 0xa49000
SizeOfRawData 0x200
PointerToRawData 0x342e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.203682

(#6)

MD5 89eb3906f38ed092577a6c5ed2afb456
SHA1 aa275137c0110b43c1cf04da931d26880faa11ef
SHA256 3b830bf8509c4274f87ed4a32b9ccece124964b9653117ef91123fe814b3b432
SHA3 bb59628feee3df3ea427d03f064088483c680e860e1aa965a1208050846664b3
VirtualSize 0x6118
VirtualAddress 0xa4a000
SizeOfRawData 0x800
PointerToRawData 0x343000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 6.67549

(#7)

MD5 0e81ecda38e00460b630223c8a18e526
SHA1 ba8ebd7d9f62389bb78e6791edb407e941ef1f24
SHA256 3cbd45de62d3aff1af23fd342929768ab20b342b99c2b382a6b833ece5cf2c6f
SHA3 4b0ab99a5f59470365d6b009c5ab0d917c7fbd4f39bee9285e7d317926273d31
VirtualSize 0x10bdd8
VirtualAddress 0xa51000
SizeOfRawData 0x7e200
PointerToRawData 0x343800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 7.97654

(#8)

MD5 dbdc10c4dccc51f4eeb1e801c507e885
SHA1 ca2f6aff3c991df3eaa82afd8360bcb55a6c7fc3
SHA256 480ec19450e3e3728eed74ddc5da243d9840c0ea071a5922d905b27551d2bf8b
SHA3 ce32abd7a7c7284868d94ca7a3dfb27c941f53b3789de132d0e5911eaa07ce04
VirtualSize 0x50e24
VirtualAddress 0xb5d000
SizeOfRawData 0x13000
PointerToRawData 0x3c1a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 7.96194

.idata

MD5 2e1d2cdacd22295f2f8b55eee6bc588d
SHA1 b0eb8823f909077c6db750a51a600b2abe936cda
SHA256 4c6745902731ee1be2c55c317b160c3b381dbf369ea36891b565773c35ec3228
SHA3 adc89866483843301689d3dccdb06da2846ee3af73a2a9b1a787bcbea8629588
VirtualSize 0x1000
VirtualAddress 0xbae000
SizeOfRawData 0x600
PointerToRawData 0x3d4a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.32896

.tls

MD5 320a0759d3f79b5b0749e72faa0634e2
SHA1 9285422dda80f4d3d50655d86c47b9b3559f608d
SHA256 204bb998821c4de2106fd912288723b3fa5ab009350eb8e7a88eeb2c64a4c919
SHA3 8679bfc130cf68f6b93717d7a3877cf9b76c1e7f72178c967593bc8cdc023cb2
VirtualSize 0x1000
VirtualAddress 0xbaf000
SizeOfRawData 0x200
PointerToRawData 0x3d5000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 0.217803

.rsrc

MD5 74309f8743825e841864a2a77169be4f
SHA1 61f68d9b9d8342c16cb7ad61b401a0a1b1ff4569
SHA256 a781d191bf261e921a6d8e00acf6480d55bfb3abca4f9dd5d3d8fa7a9ebb3080
SHA3 da6d97f2cb640e28894c6ebfca089208e0cb1c3c5ea4917f1d2d9247e190cc27
VirtualSize 0x1de00
VirtualAddress 0xbb0000
SizeOfRawData 0x1de00
PointerToRawData 0x3d5200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.07758

.themida

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA3 a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
VirtualSize 0xce4000
VirtualAddress 0xbce000
SizeOfRawData 0
PointerToRawData 0x3f3000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot

MD5 a5faac78b0f07fdc539622126fedef47
SHA1 5cc9bab4e68c7ecc5ae90a82f1802f9b1e37f102
SHA256 fe17305c9ea4f8728619746e84e7ed327144723fadfdcab7cc3e0b97b9041a0a
SHA3 ff952ea726c8c0b151add422a4cf1d24ad20f2b41e5f7ec93bfe4f398a8d1748
VirtualSize 0x76c600
VirtualAddress 0x18b2000
SizeOfRawData 0x76c600
PointerToRawData 0x3f3000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 7.95433

.reloc

MD5 24069951aaa8483ed9ccf4713cae17f3
SHA1 3dc40c0084d3ca9b5b3931c5ec27ae5f0b436461
SHA256 89c25a8f5735b3a786e9aba72f4b736b8a5c1410576b44e85228a67a8a948bb8
SHA3 e2eb8551b72c3408a1a3927dce10c186c631918e20231cbf74875d9b9b6d84a9
VirtualSize 0x1000
VirtualAddress 0x201f000
SizeOfRawData 0x10
PointerToRawData 0xb5f600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_MEM_READ
Entropy 2.7744

Imports

kernel32.dll GetModuleHandleA
oleaut32.dll SysAllocStringLen
user32.dll MessageBoxA
advapi32.dll RegCreateKeyExA
gdi32.dll CreateFontIndirectA
version.dll GetFileVersionInfoSizeA
shell32.dll DragQueryFileA
ole32.dll CoCreateGuid
ws2_32.dll closesocket
iphlpapi.dll GetAdaptersAddresses
wsock32.dll __WSAFDIsSet
comctl32.dll InitCommonControls
shlwapi.dll AssocQueryStringW
winmm.dll sndPlaySoundW
comdlg32.dll ChooseColorA
msimg32.dll GradientFill
wtsapi32.dll WTSRegisterSessionNotification
winhttp.dll WinHttpOpen
msvcrt.dll _beginthreadex

Delayed Imports

1

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x20b4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.61248
Detected Filetype PNG graphic file
MD5 34fac31e00339098d0d6aaa9b042fbc1
SHA1 dcf2943be18e35ee532537e989eae92aecda479e
SHA256 aac724883ad983a4f2c3469da23728a4008c55e7a49370542c8be6d12e434ff8
SHA3 8448a3f187bf064d09dbd61f9c0fa412a36bc77e68f08a4744f52e93325602be

2

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.40511
MD5 5f3347b600c448a298d5a75718dd2304
SHA1 590ded7507155b5d679691ae83db43bc14d7c823
SHA256 6991f68564fb02502fa5a435c9b04f0539ad9df42875e12cffe0fb4d13b2421a
SHA3 9a21f12667794d768b4003f6626cfa55b5636360e2809b1ab5d26404cb1d191d

3

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.71829
MD5 8f1cc5d4cdeeac6d3212c2a0f4d10df1
SHA1 2f392faa93429f59a82a2dd4c7339e279d73ba9b
SHA256 23460a204e6461de3178753791a08b9652c2ad6d618bfa54b38145aa25d1928e
SHA3 3e51146704367efa58ec6ecd0a46d87d786f36fb29426fbe20593da38c44f29a

4

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.77974
MD5 8d9513f2e7955bf4129a0ac40752eadd
SHA1 5562f49e445952bdc5699fa1fab8f52dbbe65de5
SHA256 c82e38eda35aa96d2e8b2726d5c207188442342708b350a6b81a5226130dc5ea
SHA3 a4e41b5faf6b4284fa5cea831853253d2069d8b15e7aff94ea6f798fe6ec67f5

5

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x1a68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.97343
MD5 e61ab55def22eee09f7e46c18ca6ad91
SHA1 0397ec778814f0d02f6757bf052ac7e74da140df
SHA256 827d3e2bb030c55cb5eb3d92746c267ae4856a3b2a897ffef749f9aed09c0882
SHA3 dd53bbe70c8a9691816d72d7758bc849ba30f107874c5bbe2e591467cfa01fd5

6

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.13653
MD5 d0068ab02381b12f1ffbdf2c2d03c33f
SHA1 e1607911632573336ec99d3b870253c48f3c541b
SHA256 a9af93c105f7ae276e9450172bd6b9d9b31d5223d5357fec61a54c2614a73e8d
SHA3 4b2bca943938050b12cfcf4f09f7f144aff660ef9a65615feb2b4affa7897bae

7

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.23531
MD5 46f100f503ae671408b1d138e5b835a4
SHA1 9854ab8ae903c75768acf4614e7d615c39191290
SHA256 9a633a837d85f1b99855e47471aa1f1a9a4cabe6c595dc05440640892afdbead
SHA3 5aa4099aabe84bcaaf5eefcbfcb25c342adf2f65664d1330c2606cf59a9a1ec6

8

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x6b8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.06242
MD5 0c323fcbebd4fa0ef74cabf36bf307c7
SHA1 d715cdac4e52f3cefa896d8a1855feca2a80835a
SHA256 49a29f703844df41ac9a933a74bc94b1745d7b33dbc8dee2a85e55188d65aac2
SHA3 15e3aea858ace8a67b2fb0ce725c391f5f5dc698b45d455a8649a12633a6cb5e

9

Type RT_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.26027
MD5 925363fd80a1db8110e67d757320a1ce
SHA1 fc730c7b64b7c6defd538263c04ea4c6db91072d
SHA256 5f890e7121ac4b95ee0ebb2e07697d66e9ab2f9bb699143dd6a49675ccf526ff
SHA3 0aa4250a29f9cd66091a1ee99de9e008ef9eca7c6f4d2db49f00676170074cb5

MAINICON

Type RT_GROUP_ICON
Language UNKNOWN
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.97245
Detected Filetype Icon file
MD5 4731f726d50b0cc5f4c1819bfabb7638
SHA1 07538bfd8abac709ef08011f87d3ee2a7ef2da76
SHA256 dba79cd4d5909a654f1b89c49471cc42c5f1b3265d7e4222ceb074f7a3c4d006
SHA3 aa958289162c9f7f63111822915dca33139fb8556b774fe7d1ea7d474b37e640

1 (#2)

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x308
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.35721
MD5 b13c7e900353223ecaf4bd6e2d20804f
SHA1 0b9e32e424d23bb47aaea2ecf483b655a1a11a08
SHA256 360778fa132803b1ff54d8ebd2752fe35022561119e23a8e0859024fd046e86f
SHA3 9a7914fdca4f2f44f0da9bd9fcd07f0c3cf158829f09e98dec0d3d12c5b4806f

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x6e0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.34045
MD5 4359d5272d6b8a2e0da510390aee2a35
SHA1 85c02d1e10f921008c80ca06839796d17392d3a9
SHA256 5b7ddbb2541541cc545539db6142f95c013fb5b3f5ea392b2f51d83c6ef8e16f
SHA3 ba3aa79c4033f1c6b4c95ff14f6ca021481e792e31aa3e1a343d3a4ee3e4f2ce

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 25.11.0.0
ProductVersion 25.11.0.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
FileType VFT_APP
Language English - United States
CompanyName SoftPerfect Pty Ltd
FileDescription Network monitoring app
LegalCopyright 2016-2025 SoftPerfect Pty Ltd
ProductName NetWorx
ProductVersion (#2) 25.11
Comments
FileVersion (#2) 25.11.0.0
InternalName
LegalTrademarks
OriginalFilename
Resource LangID UNKNOWN

TLS Callbacks

StartAddressOfRawData 0x100baf000
EndAddressOfRawData 0x100baf000
AddressOfIndex 0x100baf000
AddressOfCallbacks 0x100baf008
SizeOfZeroFill 0
Characteristics IMAGE_SCN_TYPE_REG
Callbacks (EMPTY)

Load Configuration

RICH Header

Errors

[*] Warning: Section .bss has a size of 0! [*] Warning: Section .themida has a size of 0!
Leave a comment

No comments yet.