37a9444d4cc44be17393baf42c4b3cfa

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2005-Dec-01 01:06:20
Detected languages English - United States
Debug artifacts F:\mw\Speed\PC\CDMWCollectors\NfsMWCollectorsRelease.pdb

Plugin Output

Info Matching compiler(s): Microsoft Visual C++ 7.1
Microsoft Visual C++ 6.0 - 8.0
InstallShield 2000
MASM/TASM - sig1(h)
Microsoft Visual C++
Microsoft Visual C++ v6.0
Microsoft Visual C++ v5.0/v6.0 (MFC)
Suspicious PEiD Signature: SafeDisc v4
SafeDisc 4
Suspicious Strings found in the binary may indicate undesirable behavior: Tries to detect virtualized environments:
  • HARDWARE\DESCRIPTION\System
 Contains domain names:
  • demangler.ea.com
  • http://patches.ea.com
  • http://patches.ea.com/nfs_mostwanted/DA/home.html
  • http://patches.ea.com/nfs_mostwanted/DE/home.html
  • http://patches.ea.com/nfs_mostwanted/EN-UK/home.html
  • http://patches.ea.com/nfs_mostwanted/EN-US/home.html
  • http://patches.ea.com/nfs_mostwanted/ES/home.html
  • http://patches.ea.com/nfs_mostwanted/FR/home.html
  • http://patches.ea.com/nfs_mostwanted/IT/home.html
  • http://patches.ea.com/nfs_mostwanted/JP/home.html
  • http://patches.ea.com/nfs_mostwanted/KO/home.html
  • http://patches.ea.com/nfs_mostwanted/NL/home.html
  • http://patches.ea.com/nfs_mostwanted/SV/home.html
  • http://patches.ea.com/nfs_mostwanted/TH/home.html
  • http://patches.ea.com/nfs_mostwanted/TW/home.html
  • http://patches.ea.com/nfs_mostwanted/ZH/home.html
  • patches.ea.com
  • pcnfs06.ea.com
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Uses constants related to MD5
Uses constants related to SHA1
Suspicious The PE is possibly packed. Unusual section name found:
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryA
 Functions which can be used for anti-debugging purposes:
  • CreateToolhelp32Snapshot
 Can access the registry:
  • RegCreateKeyA
  • RegOpenKeyExA
  • RegCloseKey
  • RegSetValueExA
  • RegQueryValueExA
  • RegOpenKeyA
 Possibly launches other programs:
  • CreateProcessA
  • ShellExecuteA
 Uses functions commonly found in keyloggers:
  • GetForegroundWindow
  • MapVirtualKeyA
 Memory manipulation functions often used by packers:
  • VirtualAlloc
  • VirtualProtect
 Leverages the raw socket API to access the Internet:
  • shutdown
  • WSASetEvent
  • bind
  • connect
  • listen
  • accept
  • sendto
  • send
  • recv
  • recvfrom
  • select
  • getpeername
  • getsockname
  • gethostbyname
  • gethostname
  • WSAIoctl
  • WSACleanup
  • getsockopt
  • WSAGetLastError
  • WSACreateEvent
  • setsockopt
  • socket
  • WSACloseEvent
  • ioctlsocket
  • WSARecv
  • WSARecvFrom
  • closesocket
  • WSAStartup
  • WSAGetOverlappedResult
  • WSAWaitForMultipleEvents
  • WSAResetEvent
 Enumerates local disk drives:
  • GetDriveTypeA
 Manipulates other processes:
  • Process32Next
  • Process32First
 Can take screenshots:
  • BitBlt
  • CreateCompatibleDC
 Can use the microphone to record audio:
  • waveInOpen
Suspicious VirusTotal score: 1/72 (Scanned on 2026-02-13 19:32:22) Jiangmin: Trojan.Convagent.auc

Hashes

MD5 37a9444d4cc44be17393baf42c4b3cfa
SHA1 ca0ece439920c344130850e183a5a905cebd73c1
SHA256 b04cd974bb8b4cdca9d656e3ce1751b643d2c2edc633c03b17fbf48b6ce97ea4
SHA3 d55a3ebd5e1b4d5185c4408f03d0643c3e1a8d377eaf9456d8e275808f7beb12
SSDeep 98304:R3AmIHzLwNuccUa7k9c59PnpoZ4Ds40Kl5YF8lxmwz:R3RITeuccUL9EPnpo+L0LQh
Imports Hash c08ad863d5294c684e8689c881780e5c

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x108

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 5
TimeDateStamp 2005-Dec-01 01:06:20
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_RELOCS_STRIPPED

Image Optional Header

Magic PE32
LinkerVersion 7.0
SizeOfCode 0x495000
SizeOfInitializedData 0x208000
SizeOfUninitializedData 0
AddressOfEntryPoint 0x003C4040 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x490000
ImageBase 0x400000
SectionAlignment 0x1000
FileAlignment 0x1000
OperatingSystemVersion 4.0
ImageVersion 0.0
SubsystemVersion 4.0
Win32VersionValue 0
SizeOfImage 0x698000
SizeOfHeaders 0x1000
Checksum 0x5e3834
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 ed6af509eb175bde50db1263503f631b
SHA1 79f1642f0dc3b9b48363f9ad7880858840ab3468
SHA256 8ea83928ba38b6ec58964d83de176d5a041e0c69ff52059e1d3e4e92a3a47454
SHA3 9c00ed40e82afb9948188ac12b5b650980a0ed2898c5fd116d07ef839f654522
VirtualSize 0x48e2a5
VirtualAddress 0x1000
SizeOfRawData 0x48f000
PointerToRawData 0x1000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.51352

.rdata

MD5 0f1c8c148f1d15e039fe05108487c12c
SHA1 49011a9728035cea391cb75e3bf01da67f66dc6e
SHA256 03b439de0fa1850b5306d3390a72925b995a01297f7482136844eed0eb1ba75b
SHA3 f122e3ca30795ae006020d272e780212145b6a779ef3ff120aa2eec87a365cf0
VirtualSize 0x5971d
VirtualAddress 0x490000
SizeOfRawData 0x5a000
PointerToRawData 0x490000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.36336

.data

MD5 820196844bd9a5215f357fbee522b0d7
SHA1 81cdd698133a587b74a6e8f148ade92bbf3c917c
SHA256 b34b2cbee9d73cabb8e0a4933e319681081937be05a04b321578ea8760988223
SHA3 598d43654b9497314850213030e25749a914cd4ded2559ae20d7d3998bf40db9
VirtualSize 0xdce10
VirtualAddress 0x4ea000
SizeOfRawData 0x24000
PointerToRawData 0x4ea000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 3.95608

.rsrc

MD5 c9cd9a5bd679a02a4d3dcc9646bfc4a4
SHA1 2e9fe9bbbbe8f2ccd1dbf79bf315c8f0a59d903a
SHA256 3bbd34887e39e0334649b5d7db9a98085d23b46a44e21d9d8d86e6f931975ac5
SHA3 a6dc2b2352e12e2c611f4422f631360a51cf9cab31029ac1cb8d5c167d7df94f
VirtualSize 0x8f460
VirtualAddress 0x5c7000
SizeOfRawData 0x90000
PointerToRawData 0x50e000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.48122

MD5 db4b7e5f9c81bb22f0a45fa3793edcc5
SHA1 3c63013b8ec9f2f3d142808e7ede9210e89cb5d9
SHA256 4e12cf73df895c4e6e7eefb9a6da0080cfa46172dbf27cdf5ca0ad29d4501386
SHA3 e5eeb4de3057dcd4f80048ed1eb73bea363a836b6a629df9a09a2c7e273a8f8e
VirtualSize 0x40e4e
VirtualAddress 0x657000
SizeOfRawData 0x41000
PointerToRawData 0x59e000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 6.47284

Imports

KERNEL32.dll GetPriorityClass
GetCurrentThread
GetCurrentProcess
GetLongPathNameA
SetErrorMode
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateDirectoryA
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
GetTickCount
IsDebuggerPresent
RemoveDirectoryA
GetFullPathNameA
SetCurrentDirectoryA
GetDiskFreeSpaceA
FileTimeToLocalFileTime
FileTimeToSystemTime
ExitThread
GetThreadPriority
GetProcessAffinityMask
SetPriorityClass
SetThreadPriority
SetProcessAffinityMask
Sleep
GetVersionExA
GetLogicalDrives
GetDriveTypeA
GlobalMemoryStatusEx
ResumeThread
SuspendThread
DeleteFileA
MultiByteToWideChar
FindFirstFileA
FindNextFileA
FindClose
FatalAppExitA
DebugBreak
SetupComm
SetCommTimeouts
GetCommConfig
SetCommConfig
GetCommState
SetCommState
PurgeComm
WaitForMultipleObjects
SetCommMask
GetOverlappedResult
WaitCommEvent
GetProcessHeap
QueueUserAPC
SetThreadAffinityMask
ReleaseSemaphore
CreateSemaphoreA
ReleaseMutex
CreateMutexA
CreateThread
GlobalFree
GlobalAlloc
GetDiskFreeSpaceExA
GetFileSize
MoveFileA
GetCurrentDirectoryA
ResetEvent
QueryPerformanceCounter
QueryPerformanceFrequency
CreateProcessA
GetLastError
IsBadReadPtr
OutputDebugStringA
CreateEventA
SetEvent
CreateWaitableTimerA
GetSystemTime
GetCommandLineA
RtlUnwind
RaiseException
IsBadWritePtr
HeapValidate
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
ExitProcess
GetTimeZoneInformation
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsAlloc
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
SetLastError
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
HeapAlloc
HeapReAlloc
VirtualAlloc
GetCPInfo
CompareStringA
CompareStringW
ReadFile
SetConsoleCtrlHandler
GetACP
GetOEMCP
InitializeCriticalSection
VirtualQuery
InterlockedExchange
IsBadCodePtr
GetTimeFormatA
GetDateFormatA
GetStringTypeA
GetStringTypeW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
VirtualProtect
GetSystemInfo
SetFilePointer
GetCurrentProcessId
FlushFileBuffers
SetStdHandle
CreateFileA
SetEndOfFile
GetLocaleInfoW
SetEnvironmentVariableA
DuplicateHandle
TerminateThread
SleepEx
GetExitCodeThread
SetWaitableTimer
WaitForSingleObject
SystemTimeToFileTime
d3d9.dll Direct3DCreate9
d3dx9_26.dll D3DXMatrixMultiply
D3DXVec4Transform
D3DXVec3Transform
D3DXMatrixInverse
D3DXCreateEffectFromResourceA
D3DXCreateEffectPool
D3DXMatrixOrthoLH
D3DXMatrixPerspectiveLH
D3DXMatrixTranslation
D3DXVec3TransformCoordArray
D3DXVec3Normalize
D3DXVec3TransformNormal
D3DXMatrixTranspose
DINPUT8.dll DirectInput8Create
USER32.dll SetWindowPos
SetWindowLongA
BeginPaint
EndPaint
PostMessageA
IsIconic
PostQuitMessage
SetCapture
ReleaseCapture
DefWindowProcA
wvsprintfA
GetCursorPos
PeekMessageA
ShowCursor
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
MapVirtualKeyExA
GetKeyboardLayout
GetDesktopWindow
GetForegroundWindow
wsprintfA
PostThreadMessageA
SendInput
LoadIconA
LoadCursorA
RegisterClassExA
GetWindowRect
GetClientRect
MapVirtualKeyA
ToUnicode
MessageBoxA
AdjustWindowRect
CreateWindowExA
UpdateWindow
SetCursor
SetFocus
SetForegroundWindow
ShowWindow
DestroyWindow
ADVAPI32.dll RegCreateKeyA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
SHFOLDER.dll SHGetFolderPathA
SHELL32.dll ShellExecuteA
DSOUND.dll #6
#1
WINMM.dll waveOutGetDevCapsA
waveOutGetNumDevs
waveOutWrite
waveOutGetPosition
waveOutSetVolume
waveInStart
waveInAddBuffer
waveInGetPosition
timeEndPeriod
timeGetTime
timeBeginPeriod
waveOutReset
waveOutOpen
waveOutClose
waveInStop
waveInGetNumDevs
waveInGetDevCapsA
waveInReset
waveInOpen
waveInClose
waveInUnprepareHeader
waveOutUnprepareHeader
waveInPrepareHeader
waveOutPrepareHeader
GDI32.dll ExtTextOutA
BitBlt
GetPixel
DeleteObject
DeleteDC
SetBkMode
SetBkColor
SetTextColor
CreateFontA
CreateBitmap
SelectObject
CreateCompatibleDC
TAPI32.dll lineGetDevCaps
lineShutdown
lineInitialize
lineAnswer
lineMakeCall
lineGetID
lineClose
lineNegotiateAPIVersion
lineOpen
NETAPI32.dll Netbios
WS2_32.dll shutdown
WSASetEvent
bind
connect
listen
accept
sendto
send
recv
recvfrom
select
getpeername
getsockname
gethostbyname
gethostname
WSAIoctl
WSACleanup
getsockopt
WSAGetLastError
WSACreateEvent
setsockopt
socket
WSACloseEvent
ioctlsocket
WSARecv
WSARecvFrom
closesocket
WSAStartup
WSAGetOverlappedResult
WSAWaitForMultipleEvents
WSAResetEvent

Delayed Imports

1

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.003
MD5 6b6dd72a65e68ca1d8c194dd96d6b6c7
SHA1 434b28fdc18db6cf7f754c89eb364be28bf53bcf
SHA256 5533b47f94c03d0da44261c6e2657540d7093f0f4b8a6120a4975d9028a1ff21
SHA3 71cb6896672667ad8a391f3b6c153c96aed8acbf4d89facf9b9907e22690820d

2

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.15116
MD5 9bf8f8365fe69072bcacde8f4a3320b8
SHA1 73233a1da6fa40f83abc4112f01ddd74446b87ee
SHA256 a4cf12d70b5401dfb7dfc0bf710642781df8e297688a6b921d9cbc573055b8e7
SHA3 a1ee3c1b8f718f4f5457f5e3c7e084c45aa1c97d3f8ed8d59d1bf947106d0b82

3

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.2032
MD5 3f6927a125cadf18a6f0900e5f33b7db
SHA1 d8317a2c7cc6d0fefa65618216758617ff29dd79
SHA256 460b2c9e5d039d903e83b9b6e390931257cbb839ea2c9e0900a0c3bb3fd9bc55
SHA3 89a24ee9a76badf3d09b4b55c72a9dde07061f82bb1c7e65cee3cae633a047ba

4

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.14977
MD5 2882f913c9aca35f4f9c5bcacfda8661
SHA1 4e039626d7e0c99b71042cadd690797d8a85da0a
SHA256 a63c9b3c97c0c6b80168a99ae42cd043cd94d76f701fcd2a500aea8b46490b0b
SHA3 586b62e3ce500c5582e13316b47bdffdd7e8118a768f98ff8051294b3efe003e

5

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.0608
MD5 e196e0a45e9b349997b7a788f4d35a10
SHA1 aded4276ac4b95dd05f959b5f5ce9672ed8fb672
SHA256 46bfb27f334dcfec216a313f2ed2cf7fc412631a78eb3cb01eab16cfc9f5505a
SHA3 b7bcfb61fbed01915d18856eba3a20fba4c199fa19ccd0bdc90ef1769d9bc7e5

6

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x5488
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.00953
MD5 8adb97721fd4611c11b6d895b7f6f41e
SHA1 ab16cd6021301d5f48a5915216da2e2b0f3a7527
SHA256 a8e927649d99b79f4c275b421266afd9cd1fd332ef1a7e4161e9404f246ca46d
SHA3 9218f8279680cf0e4bfaf182ac4f21f984eefe7d33c0b7fec28c6b60aeeb603e

7

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x94a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.92281
MD5 e5c59407a3978255631d3a82019a2353
SHA1 4616516527bfc2e663ca5198d78df2632cce8438
SHA256 ac41f0654326dfc7e2abae6139e66f244a9fb12063d554842b1269f4696cd6ae
SHA3 925c80ce314626efc23135151ed199cc9087dbc29da81a3456fe9abb71a485f2

8

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.82726
MD5 00495ae1d568bc88deecf8fcf6b51619
SHA1 1bde65ab67654898c9ab51c0c4ecb8ac710f7432
SHA256 a7cf09ccd4021f90bf20991b9a32a3a03f58d76b557c0527639cd7782eb34c97
SHA3 951f22799e0285beb0c5d01f12c1d5e3a549c2d66abafa6c739d339ca35a0d4d

9

Type RT_ICON
Language English - United States
Codepage UNKNOWN
Size 0x14d0a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.99334
Detected Filetype PNG graphic file
MD5 14a4eaca59b33d093b3eb96191b4f9cd
SHA1 5290775f790efc8fc5b55fffe096919737be90e7
SHA256 7597f4a6cd69e8feae66678608868b3a830670f21e3381dae2944dbb9626f683
SHA3 f46fd680f12c51baa6f504f2069878029663f0f47bcad583ec6b1f825094c151

IDI_CARDEPTH_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xd10
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.54586
MD5 67dc5eee887d19b82bafe854da476bac
SHA1 b7255da4cdcb5259f897b7531985a293fb524bce
SHA256 c24f5a36f3a7ef63528a22519ff1f24adb0ece94a5e16a797d55a43c731adc36
SHA3 ec8bbf7e7e74d60a73de504cecfaa93e9c26ba4867ace818078b3dbf2027b654

IDI_CAR_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x44ac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.82869
MD5 7de798053b3260e82fa976e2835dea0b
SHA1 50decd18e36f8c32f58d413be811dcb358acc1db
SHA256 4a41ff00e9bdfccdd827876e285da641f8b6d61d79c77c3c85f1bd8a35aca163
SHA3 4becf7b1f1fc8f68518503af65996c7bbf5c16d722f6fd31d32df0267f09eb29

IDI_CAR_SHADOW_MAP_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x1618
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.49805
MD5 e26f82779133c7a1872b3aad4ed3c054
SHA1 2f7f38397b5ef555ad53b356fc92331f1f05de46
SHA256 6d38dfc54d3c90e05b30b25bc7092553de1a53824142b1c10c94797533d1dd26
SHA3 e557f36404a907949644de12d7cb6bd1949c8ad664dd609114491dd32d9f74ec

IDI_FE_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x27d0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.14413
MD5 de86fe1ca8afa66bd11708529823b140
SHA1 f79ec0d38772dadbc49b67b3824b485ea68347ba
SHA256 77399852f4e8bafef0f6b0f0d8c5341dc734d760062bf74e0a81a46e0ba3ef61
SHA3 89ff87e3383419d9fcc6176866a9a000e7ba1c3a4f76bd00568865c7ae9372d3

IDI_FE_MASK_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x25f4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.16268
MD5 0e511f9a310e6ac6ce2ceb26045d65ef
SHA1 2a79094ab8eae88e196556f9af4ded8e300da787
SHA256 ca10021053fa4dcfb32f00b4ac14c788a9f20e9e97cb383668699e4ff1eb8130
SHA3 90521f76184c57b789fae26c0c0b621e2cab0c7b3f482f49676626127926a20d

IDI_FILTER_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x5268
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.30471
MD5 93b723bda63d8e605e422e3ff6ce743d
SHA1 2d220fad07c5d978ffc1915c9feb9dda1ea89022
SHA256 ca28ad00d631ae8b650a6cdcc978f8d35ebca1ba0d83c65a1ade8f21d4f1b096
SHA3 3c8707bc475b7040a06ae1ada8bdd808a88f5caf40e330d3c45f64c75238cba8

IDI_GLASSREFLECTSHADER_FX

Type RT_RCDATA
Language UNKNOWN
Codepage UNKNOWN
Size 0x28d4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.67803
MD5 2f78740344d2684197b38b8be829f810
SHA1 8c4470621f2b80920b060019bf1765a6686e8f24
SHA256 752a2348115d5a41a595e888bbaaaa608d232f3758d12e9c6f36a5bf66084c13
SHA3 3b4a4e14af7ef84e5e007536247f87378b7504654f3a5fe3265a0d77f7a9a41f

IDI_GLOSSYWINDOWDEPTH_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xd04
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.54405
MD5 e308f8a5649d0053dcd501427aff848f
SHA1 b87f04df96fee3275da78155c5bdcf0f22dbfa71
SHA256 d84af0ff4b9945ddcc844152210769ca5709586f3fda9ba6fd1338f84fafe1a0
SHA3 cb33c72a06e2002e64bd874d6cab9b4adde4ebc78b7566d2af141a36710baf0d

IDI_GLOSSYWINDOW_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2794
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.63855
MD5 05622448f923cbe6179bdb017c49aa18
SHA1 f1f0995b7a1c7b23014c975300c6a3bde0ed9088
SHA256 5d389f73fd6c39a0dadb1da896fd4c43eed5a5bcbd2dc01181392e0bf429e24c
SHA3 d54417a4df94adc394305a205058649d39c662bc614d7e5517f19936e74ece73

IDI_OVERBRIGHT_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x5a14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.76686
MD5 87197a91a397829a449db6d9b7992e8d
SHA1 21ad82d04bfd9339ef74ce02ce103b8b90a940cf
SHA256 68b2c03a383a2023a17dd3492f1b2bb895d63ead4a9d4eefa6c20b3247874420
SHA3 2bfaa9d1903f6042f559bcc79aa91b5a676c8e1e7150d22e414312dba6753172

IDI_PARTICLES_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x3ca4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.34011
MD5 23ed96f15a999dc1e81883eb3c8997c4
SHA1 535fdeb2e37bbeedf640a07b6c388f0fb315942b
SHA256 f395a29d3c6a043fb6cf6ff38926c9ac04bb748a45bc2ddecdb1f92afa705e7f
SHA3 3309f9a5aac2f3a13f78c251ac4b122f8128e3fddfe80b7a2a3f3cb0cf35f6bc

IDI_RAIN_DROP_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xa74
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.93057
MD5 97219a87d7fa804fa99491f6d193ea18
SHA1 2fb78267d3444b9b81657c317ee4be57c3be85a8
SHA256 b498ca06ffd9a363669a22e0ccb33fd7701d1329723eb3d560453a76149c93cd
SHA3 d31459514f5c87d4a414bc51f4c12a0f264f896b98695059ad5605f97ffce9c7

IDI_RUNWAYLIGHT_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2cd8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.19119
MD5 daf467ea7d213bd0a37101e6c69e275e
SHA1 a88feb10b100495ef299514cb35818fd48ee481d
SHA256 8064142ac8b2c7683a7e0254f4ff2d68d2cc960a3bc4793754a13d1690899851
SHA3 b0e10514badb35ef778b758248e486ac40ea62e24d53601d98f729a490c87121

IDI_SCREENFILTER_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x3ef4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.24943
MD5 b01e307e0ff05b2c5489eece27c0de7b
SHA1 32156e2614514e1ef666fd3507f032dbe3218a18
SHA256 387d739479185f8c5bd509ac4847854004380cc2e2d84c95764b6a0274b26874
SHA3 1296c85efa03cab80fd16b507df105f43d8a574f898a582a1c0ca0365cfbf5bc

IDI_SHADOW_CG_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2524
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.32815
MD5 0e1414fb3cc309c2349a1ed74fa7b07d
SHA1 96243d59eac7cf44a10d0be6222b9afb799ebd4b
SHA256 5da6d6bb38146ab5496826ce54425a76d0a08d18084587486d18b9eea02d8b30
SHA3 1dcf54161040954f98358a7a877ef9d15a89e9086e43d3f2a6af9367b94d677c

IDI_SHADOW_MAP_MESH_DEPTH_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x5e8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.32082
MD5 5c6d6254ccfabd2e968b796e7a5f1b22
SHA1 d5a4fc3cef5a3b878caef4163047299c68e6f860
SHA256 a8d7071074a081c74093fc432d430822a70e985ee059f65756e233d9a0530330
SHA3 5f920f8d3d2da1bbeaa7cf061c4105cce6d169c15bd1264fff2b74f255458b86

IDI_SHADOW_MAP_MESH_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x5bc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.16802
MD5 490461b4b61c64e3a7210b23de5342e5
SHA1 09afb9eaff8f1b4efccbf5b696788345b6268335
SHA256 20bffc66acfccc6f6cbd071fe37ae51320510d28fb9b5c9a77cab0dc8abe6010
SHA3 e4c81473256c2de9afb555856c68bf33464e7344f95acb241684dbfffcf37b7a

IDI_SKYBOX_CG_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x1f2c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.21273
MD5 9173ab70991a661b24041dddf9e8f2a6
SHA1 4f38191d9579719f83fb5ae5f6b8c88b3c26cbec
SHA256 4eebc7131e192ba7268c914b75aafb89a746c8beed0824741b80888f68362d03
SHA3 ea9ed01ac6642bffc4e7404b020c8dfaffac65b7bf0e5d989751fda7fd0e83ef

IDI_SKYBOX_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x202c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.45177
MD5 19d47629e955644d43d956264b7c1603
SHA1 51b3a0665edaccd639705e747b91a1094c2822a4
SHA256 59ecc7c9e9587136c7a7a3066ee7f1d90bd4e7c3022b90db7c9ef23d2c083724
SHA3 8d8f2ad75d0ed1acc58c2b81c4905c0094d265ee46df7ec52fb4ddcf20ae0cac

IDI_TREEDEPTH_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xdc8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.5951
MD5 b95ce776d2bb8b478839ad397f2b2902
SHA1 6a98ffee437f1ff86b2c5b0cabe40c0980adfd4e
SHA256 f502b4f704fc69bfe142118f518c5047c5bd4c72a7e8d5c1ef95f8d58e1703f4
SHA3 f5afd8aeb8d592814f2c7426cc870e767b526974fb05696ddce86af5b307a341

IDI_TREE_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2170
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.52146
MD5 0229241750f201a0ce0bcbcd4916213e
SHA1 cfad94cc2bcbf077dd3c55a60d382bb37723adab
SHA256 19ea8376221a7178bea1d2850e53c794b1c9a87afc0ac77aa63a0d8ae0be27ce
SHA3 6733306580ffb2d43152010ee7992337c24d60499e59e4922339629054d84533

IDI_VISUALTREATMENT_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x1b9c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.41609
MD5 e6a565a04add002f6349700ce41fb7a3
SHA1 b7edc9767cefb9b2b2c20020982ed8d54fede093
SHA256 28754287ff2a24c5fe461dd004425f6d0223ae69219749bfdd34c56e0240e3cf
SHA3 db89defa16c83472762dd3d5dbff8ea3a80747876c29e9a1e60e1e37cf800198

IDI_WORLDBONE_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2adc
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.10669
MD5 4f7f188e01c822b8cc13f7eb94646b8a
SHA1 24288435146d63057a10598ba0a3a975da8f673a
SHA256 257837b912498cbd7e971223991cae52e0ac5524279e70e7a3425218fa5aeb66
SHA3 02503a382be558555dd9dd91becb6a3a45a3cfded28fae040725d03372b762b1

IDI_WORLDDEPTH_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xa9f0
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.81756
MD5 211738aff183b1b122ebbae577e8f00b
SHA1 9e13e16f30a07b8aec6a5ecb0bf2feff17830644
SHA256 05e8f8e0f65c74dcf5743608d967fa97d53952cc97c342215be056cdfb84d10f
SHA3 7a4185599a92d468057b3d541c086ebb6482733ab34ce8e6230ed9055a6b722e

IDI_WORLDMIN_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2c4
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.44742
MD5 6d18573d1277bfbedd14d6e107420359
SHA1 25c1a186b779b5d3209625311c010d482ed2c899
SHA256 27f3344757f110e11d0e46738bde173ebaa17e2a83265d6839e24f38776498bb
SHA3 8a2e4530959e736ea29d826587844092d40cb094dcec4f122c9963042bb7cc64

IDI_WORLDNOFOG_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x27ac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.53554
MD5 8fe9bd6a32d2e648b3b6c1a71fb0e2d1
SHA1 813b501a0fbc3011c0e2e13888c79e7ee2789255
SHA256 e6334a98cff67235560fa478f1c391e33e63b141c0612740f789f14f436430bf
SHA3 69c22ad8f33e2be8cc8c897aa2e81b0389948fa4e15962fbad3fdcc55779bd58

IDI_WORLDNORMALMAPDEPTH_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0xd04
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.54705
MD5 9d9c2e53c37dc76b3986f382e77dc992
SHA1 d83b0794e0406e4c4b73c974bced3b50d2181180
SHA256 71654b764239e0ef5319f63e6793184a42c3c16d7a332b13fb0b6f6b10b81189
SHA3 a861748bd9c20e293557c482a737265454084552b5f909bc8e2cd6cb558dc5eb

IDI_WORLDNORMALMAPNOFOG_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x1568
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.24383
MD5 490c6d5586ce6e76d256ea8a61f9a45a
SHA1 54c3301fc31e258e0de27140047fb33ce7e6ab41
SHA256 98cd83f64a84780f4e2d961877d39bfd0775c0817f6592571e2c4abf1ee1d90c
SHA3 6ed9c1074a01c371806439c1bd7c9d7bbe234cbc325f2ae5dade8859d0097007

IDI_WORLDNORMALMAP_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x3614
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.63155
MD5 56083af2bd5e2a3f5174f0f7aa42256e
SHA1 e24893a5e2a50630c41e362274c9aacc11be12bc
SHA256 76480713130b5811027af6f28e2b5cb0c9334c3849fb964f62c76a12ea59d2c9
SHA3 517bd0f62c18a10bee5087819a1acd3d9418ae060f97f476dd2a87e9d5d1eac6

IDI_WORLDPRELIT_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x1540
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.33736
MD5 400ec306781a04c54386de2bf835e9d7
SHA1 33e308afb2defe8f00a36cc4bd4bb46f52f4f334
SHA256 b9380a02bb8a72c4bb768904da34b40127fe082a78d5f42778f3aa4791ffeaa8
SHA3 697aea3a8129b9ee2cd10dec9be0133adb33488f33b5538e0702e9a83cb2df32

IDI_WORLDREFLECT_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x5c58
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.73581
MD5 602dd842fc23d892da35188a44c244d7
SHA1 aa481c8a1cbdfeffd1e90f837f0484d9a72ba508
SHA256 aa940050506496279e85fff9142b387b9fab6df074c22caa6f0ce0a0f4f449b3
SHA3 ce54cfeedc82f0e59a44013e6d2f450544b0650cc845ac63bce99e42a64b8e3b

IDI_WORLD_FX

Type RT_RCDATA
Language English - United States
Codepage UNKNOWN
Size 0x2b68
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.5803
MD5 d5a48ee2efb8b8fee0c2fa7c0914cadb
SHA1 c948ea5ae2f4cff6e8987b7e9190dd641f09fb72
SHA256 316d26bc18d8a7e330007169f5ab4d9b87a5eb0eddfed920875723d1761cff6e
SHA3 c3bbe9f94945ba3fa3fb267548d91ce96fe99a1d1a8655f48f6240ec75812252

IDI_ICON1

Type RT_GROUP_ICON
Language English - United States
Codepage UNKNOWN
Size 0x84
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.05309
Detected Filetype Icon file
MD5 4778d58c7c785d345814e5c07c04042c
SHA1 dda901b44458e9413a850be0fabc084832971c7d
SHA256 f60a5985b687a6a3e6330bea3ce9b1a4b9cc02b3d30e2d9cb5aa2684bbc7e459
SHA3 e0efd6e9b9f2814232a9b12a89da6ad10d2740efb2960eebf384c509157aea3b

Version Info

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2005-Dec-01 01:06:20
Version 0.0
SizeofData 81
AddressOfRawData 0x4c849c
PointerToRawData 0x4c849c
Referenced File F:\mw\Speed\PC\CDMWCollectors\NfsMWCollectorsRelease.pdb

TLS Callbacks

Load Configuration

RICH Header

XOR Key 0x41088198
Unmarked objects 0
Imports (9210) 2
Imports (2067) 2
C objects (VS2003 (.NET) build 4035) 3
C++ objects (VS2003 (.NET) build 4035) 1
Imports (VS2003 (.NET) build 4035) 8
105 (2067) 3
ASM objects (VS2003 (.NET) build 3077) 62
C objects (VS2003 (.NET) build 3077) 276
Imports (2179) 17
Total imports 300
C++ objects (VS2003 (.NET) build 3077) 327
94 (VS2003 (.NET) build 3052) 1
Linker (VS2003 (.NET) build 3077) 1

Errors